last executing test programs: 35.157091306s ago: executing program 3 (id=247): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x1, 0x5514, &(0x7f00000079c0)="$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") mkdir(&(0x7f0000000400)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x3ffffffffffffda, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x12, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYRES32=r1], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa8) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x4000044) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a"], 0x50}}, 0x0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r5 = inotify_init1(0x0) fcntl$setown(r5, 0x8, 0xffffffffffffffff) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_DEV(r6, &(0x7f0000000500)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, 0x0}, 0x40001) fcntl$getownex(r5, 0x10, &(0x7f0000000140)={0x0, 0x0}) r8 = syz_open_procfs(r7, &(0x7f0000000600)='fd/4\x00') ioctl$EXT4_IOC_GROUP_EXTEND(r8, 0x40305839, &(0x7f0000000240)=0x28084) 34.290208389s ago: executing program 3 (id=251): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="0209000002"], 0x10}}, 0x0) (fail_nth: 9) 33.896817163s ago: executing program 3 (id=252): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) readlink(0x0, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180500000000c800000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={r4, 0x58, &(0x7f00000003c0)}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYRES64=r3, @ANYBLOB="00000000000000001c001a800800068004000500"], 0x44}}, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000004c0)={'gretap0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x2}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xcce79000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) 32.624815581s ago: executing program 3 (id=262): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x1, 0x5514, &(0x7f00000079c0)="$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") mkdir(&(0x7f0000000400)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x3ffffffffffffda, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x12, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYRES32=r1], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa8) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x4000044) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a"], 0x50}}, 0x0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r5 = inotify_init1(0x0) fcntl$setown(r5, 0x8, 0xffffffffffffffff) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_DEV(r6, &(0x7f0000000500)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, 0x0}, 0x40001) fcntl$getownex(r5, 0x10, &(0x7f0000000140)={0x0, 0x0}) r8 = syz_open_procfs(r7, &(0x7f0000000600)='fd/4\x00') ioctl$EXT4_IOC_GROUP_EXTEND(r8, 0x40305839, &(0x7f0000000240)=0x28084) 31.774296934s ago: executing program 3 (id=264): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='9p_client_req\x00', r1}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='9p_client_req\x00', r1}, 0x10) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000500)='9p_client_req\x00', r4}, 0x10) dup(r3) (async) r5 = dup(r3) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[], [], 0x6b}}) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[], [], 0x6b}}) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r7}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000000)='./file1\x00', 0x1000801, &(0x7f0000001640)=ANY=[], 0x2, 0x216, &(0x7f0000001900)="$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") (async) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000000)='./file1\x00', 0x1000801, &(0x7f0000001640)=ANY=[], 0x2, 0x216, &(0x7f0000001900)="$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") open_tree(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0) 20.658360901s ago: executing program 3 (id=307): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4020aeb2, &(0x7f0000000040)) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000005b80)={{{@in6=@remote, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0x2}}, {{@in, 0x0, 0x6c}, 0x0, @in6=@dev}}, 0xe8) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r4}, 0x0, &(0x7f00000002c0)}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000200)=ANY=[@ANYBLOB="fffffffdffffaaaaaaaaaa000800450000300000000000019078ac1e0007016494aa0400907803000000450000000000000000000000ac141400ac141400"], 0x0) timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000c40)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x0, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_GETMODE(r7, 0x5601, &(0x7f0000000180)) r8 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_CLEAR_HALT(r8, 0x80045518, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) 13.27629013s ago: executing program 1 (id=330): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1770, 0xff00, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0022060000000803"], 0x0}, 0x0) 10.554481951s ago: executing program 1 (id=332): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) openat$incfs(r1, &(0x7f0000000080)='.log\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000404f0453b600000000000109022400010000000009040000ff03000000092100090001220700090581030000000000"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="002207000000ab34f5ac1d95"], 0x0}, 0x0) 10.554058301s ago: executing program 2 (id=333): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000300)='syz0\x00', 0x200002, 0x0) r3 = openat$cgroup_ro(r2, 0x0, 0x26e1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r3}, 0x10) quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, 0x0, &(0x7f0000000380)='./file0\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000340)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) 9.04775325s ago: executing program 0 (id=335): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x80205b, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000080)) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed0040, &(0x7f0000000100)={[{@noblock_validity}, {@quota}, {@data_err_abort}, {@noload}, {@nobarrier}, {@lazytime}]}, 0xfe, 0x472, &(0x7f0000000940)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x2d) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001700)=[{{0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0xfc}, 0x1030000}], 0x40000000000035c, 0x0) 9.04657428s ago: executing program 2 (id=336): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=0xffffffffffffffff], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000a80)=ANY=[@ANYRES8=r0, @ANYRESHEX, @ANYRES16=r1, @ANYRESHEX=r3, @ANYBLOB="e5ecb39059a51496cf76473566331165ecaa87eb480cedff3b9ac3f80102e32be58032166dcc5a", @ANYRES16=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000540)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0xa1000a, &(0x7f00000003c0)=ANY=[], 0x21, 0x1536, &(0x7f0000002040)="$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") r5 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x7, 0x7f, 0x6, 0x200, r2, 0x3, '\x00', 0x0, r5, 0x1, 0x3, 0x1, 0xd}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r7}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) inotify_init() r10 = creat(0x0, 0xd931d3864d39dcca) socket$nl_generic(0x10, 0x3, 0x10) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@delsa={0x34, 0x11, 0x1, 0x0, 0x0, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x33000000}, [@mark={0xc}]}, 0x34}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r11, 0x8933, &(0x7f0000000000)={'wg2\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r11, 0x89f1, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f00000000c0)={'syztnl1\x00', r12, 0x29, 0x0, 0x6, 0x645c, 0x20, @private1, @local, 0x40, 0x0, 0x1, 0x80}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x9, 0x1e, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000900000000000000060000001836000090f500000000000000000000186900000300000000000000000000002d430200fcffffff18390000020000000000000000000000b7080000000000007b8af8ff00000000b7080000010000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800ecff08230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a50000001832000005000000000000000000000018120000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500000000000000"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0xfffffffe, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000240)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0x1, 0x1], &(0x7f0000000280)=[{0x2, 0x1, 0xc, 0x1}, {0x5, 0x5, 0x7, 0x9}, {0x3, 0x1, 0x4, 0x7}, {0x2, 0x1, 0x0, 0x4}, {0x4, 0x5, 0x1, 0x8}, {0x1, 0x2, 0xd}]}, 0x90) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000003c0)=0xffffffffffffffff, 0x4) setsockopt$packet_rx_ring(r10, 0x107, 0x5, &(0x7f0000000580)=@req={0x5, 0x1, 0x10, 0x80000000}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000500)={@ifindex, 0x24, 0x0, 0x9, &(0x7f0000000400)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) 9.04382855s ago: executing program 4 (id=337): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0xfff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f00000003c0)=0x2, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000900)="fe18cd", 0x3}], 0x1}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000640)="a6b03e7c", 0x4}], 0x1}}], 0x2, 0x0) recvmmsg(r1, &(0x7f00000005c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20000002, 0x0) syz_emit_ethernet(0x4e, &(0x7f00000002c0)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@sack={0x5, 0x2}, @generic={0x4, 0x2}]}}}}}}}}, 0x0) 7.440544767s ago: executing program 0 (id=338): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000001440)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7b, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03859bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b037511bf746bec66ba", 0xffffffffffffff5a, 0x40000, 0x0, 0x27) recvmsg(r0, &(0x7f0000001500)={0x0, 0xa, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x16fb}], 0x1, 0x0, 0x46, 0x407006}, 0x104) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 7.439683407s ago: executing program 1 (id=339): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000000000000046, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, &(0x7f00000002c0)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000600)={0x30, 0x0, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {}, {0x14, 0x18, {0x1, @bearer=@udp='udp:syz1\x00'}}}, ["", "", "", ""]}, 0x30}}, 0x8800) r2 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r3, &(0x7f0000000180)=[{&(0x7f0000000000)="9c", 0xffffff7d}], 0x1) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)) shutdown(r3, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="120100009b23fd406d04c1088dee000000410902240001fa0000000904000000ff010000072401"], 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f0000000080)={0x248, r4, 0x200, 0x70bd28, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x9f82}, {0x6, 0x11, 0x5}, {0x8, 0x15, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x2f}, {0x6, 0x11, 0x3}, {0x8, 0x15, 0x2}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x10001}, {0x6, 0x11, 0x9}, {0x8, 0x15, 0x5}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8}, {0x6, 0x11, 0x6}, {0x8, 0x15, 0x6}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x336}, {0x6, 0x11, 0xc}, {0x8, 0x15, 0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0x7}, {0x8, 0x15, 0x1f5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x7}, {0x8, 0x15, 0x4}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x5}, {0x8, 0x15, 0x4}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8}, {0x6, 0x11, 0x100}, {0x8, 0x15, 0x6}}]}, 0x248}, 0x1, 0x0, 0x0, 0x800}, 0x40004) 7.439437927s ago: executing program 2 (id=340): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f00000003c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) getresuid(0x0, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x64}}, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r6 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r6, &(0x7f0000001600)='./file1\x00', 0x2000, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') linkat(r6, &(0x7f0000000100)='./file1\x00', r6, &(0x7f0000000240)='./file0\x00', 0x0) unlink(&(0x7f0000000280)='./file1\x00') 7.439092107s ago: executing program 4 (id=341): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=0xffffffffffffffff], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000a80)=ANY=[@ANYRES8=r0, @ANYRESHEX, @ANYRES16=r1, @ANYRESHEX=r3, @ANYBLOB="e5ecb39059a51496cf76473566331165ecaa87eb480cedff3b9ac3f80102e32be58032166dcc5a", @ANYRES16=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000540)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0xa1000a, &(0x7f00000003c0)=ANY=[], 0x21, 0x1536, &(0x7f0000002040)="$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") r5 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x7, 0x7f, 0x6, 0x200, r2, 0x3, '\x00', 0x0, r5, 0x1, 0x3, 0x1, 0xd}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r7}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r8 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r10, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r11 = creat(0x0, 0xd931d3864d39dcca) socket$nl_generic(0x10, 0x3, 0x10) r12 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@delsa={0x34, 0x11, 0x1, 0x0, 0x0, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, [@mark={0xc}]}, 0x34}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r12, 0x8933, &(0x7f0000000000)={'wg2\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r12, 0x89f1, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f00000000c0)={'syztnl1\x00', r13, 0x29, 0x0, 0x6, 0x645c, 0x20, @private1, @local, 0x40, 0x0, 0x1, 0x80}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x9, 0x1e, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000900000000000000060000001836000090f500000000000000000000186900000300000000000000000000002d430200fcffffff18390000020000000000000000000000b7080000000000007b8af8ff00000000b7080000010000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800ecff08230000", @ANYRES32, @ANYRES32=0x1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500000000000000"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0xfffffffe, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000240)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0x1, 0x1], &(0x7f0000000280)=[{0x2, 0x1, 0xc, 0x1}, {0x5, 0x5, 0x7, 0x9}, {0x3, 0x1, 0x4, 0x7}, {0x2, 0x1, 0x0, 0x4}, {0x4, 0x5, 0x1, 0x8}, {0x1, 0x2, 0xd}]}, 0x90) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000003c0)=0xffffffffffffffff, 0x4) setsockopt$packet_rx_ring(r11, 0x107, 0x5, &(0x7f0000000580)=@req={0x5, 0x1, 0x10, 0x80000000}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000500)={@ifindex, 0x24, 0x0, 0x9, &(0x7f0000000400)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) 5.728832042s ago: executing program 0 (id=342): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() prlimit64(r1, 0x2, &(0x7f00000002c0)={0xb, 0x5}, &(0x7f0000000400)) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) get_robust_list(r1, &(0x7f0000000440)=0x0, &(0x7f0000000480)) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x5, 0x4, 0x4, 0x4}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000001000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b70300000000ffff850000000400000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r5}, &(0x7f00000002c0), &(0x7f0000000300)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) sendto$inet6(r0, 0x0, 0x0, 0x2400a800, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) writev(r4, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff06006000010000005600000025000000190004000400000007fd17e5ff8e0606040020000000000000", 0x39}], 0x1) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r7}, 0x10) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r8}, 0x10) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x0, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r9, 0x40046207, 0x0) r10 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r10, 0xc0306201, &(0x7f0000000000)={0xc, 0x0, &(0x7f00000003c0)=[@increfs, @enter_looper], 0x0, 0x0, 0x0}) 5.728393372s ago: executing program 2 (id=343): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1770, 0xff00, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0022060000000803"], 0x0}, 0x0) 5.728169112s ago: executing program 4 (id=344): bind$inet(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x3, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000000)={0x0, 0x0}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x5, &(0x7f0000000040)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r5}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0xc9d7, 0x9, 0x1}, 0x48) 3.922823856s ago: executing program 0 (id=345): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSARP(r4, 0x8955, &(0x7f0000000040)={{0x2, 0x0, @multicast2}, {}, 0x83, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 'ip6gre0\x00'}) 3.922241846s ago: executing program 1 (id=346): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r1, 0x40047451, &(0x7f0000000300)) socket$inet6(0xa, 0x6, 0x9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x1, 0x81, 0x3, 0x2414, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x4, 0xd}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYRESHEX=r0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103042, 0x0) pwritev2(r6, &(0x7f0000000300)=[{&(0x7f0000000140)="e7", 0x1}], 0x1, 0xa00, 0x0, 0x0) getsockopt$inet_buf(r6, 0x0, 0x37, &(0x7f0000000540)=""/237, &(0x7f0000000180)=0xed) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) add_key$fscrypt_v1(&(0x7f0000000040), 0x0, &(0x7f00000001c0)={0x0, "28d7b07d54891881fe02c1203fe49696b9f26f2da4149683f065714f8a61d1f32c9d064bbd27b2aa57459cff33a3a9831ac46b8829b48fff3d63520d260804d0"}, 0x48, 0xfffffffffffffffd) ftruncate(0xffffffffffffffff, 0x0) r7 = syz_open_dev$rtc(&(0x7f0000000140), 0x0, 0xa000) ioctl$RTC_UIE_ON(r7, 0x7003) ioctl$RTC_WKALM_SET(r7, 0x4028700f, &(0x7f0000000000)={0x1, 0x0, {0x0, 0x0, 0x0, 0x16, 0x0, 0x8000}}) 3.921989376s ago: executing program 4 (id=347): prlimit64(0xffffffffffffffff, 0x8, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() syz_extract_tcp_res(&(0x7f0000000100), 0x4, 0xfff) r1 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000280)={0x20200, 0x102, 0x8}, 0x18) mkdirat(r1, &(0x7f0000000300)='./file0\x00', 0x12) syz_pidfd_open(r0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014001100b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000000c0)='sched_switch\x00', r4}, 0x10) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) eventfd(0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x181341, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000004c0)={'dvmrp0\x00', 0x2}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) close(r6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) syz_emit_ethernet(0x85, &(0x7f0000000340)=ANY=[@ANYBLOB="0180c2000000ffffffffffff0800450000770000000100049078ac1e01010000000000000000006390788b09765b3de8ef851ca35d0ddd69a968fcd6dd8877f68e71544ad33856e3ee6071111fd54d406f354a1dae92acff21fb6eed020091908442d1f9339c62ee9ae513d4540d48bb0814c33b37f8445829d89f1223474164cadf100660"], 0x0) write$cgroup_subtree(r5, &(0x7f0000000180)=ANY=[], 0x280) bind$unix(0xffffffffffffffff, &(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x6e) dup(0xffffffffffffffff) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) close_range(r2, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) socket(0x10, 0x400000000080803, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x8}, 0x48) 2.013196639s ago: executing program 0 (id=348): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x3}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000100)=0x1b5, 0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000001c0)={'#! ', '\xe9\x1fq\x89Y\x1e\x923aK'}, 0xe) sendfile(r1, r2, &(0x7f00000000c0), 0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000002400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000e00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffff08, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) r7 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r8 = dup(r7) sendmmsg$inet6(r8, &(0x7f0000003180)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000600)="1f", 0x1}], 0x1}}], 0x1, 0x0) 2.012967529s ago: executing program 1 (id=349): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x80205b, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000080)) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed0040, &(0x7f0000000100)={[{@noblock_validity}, {@quota}, {@data_err_abort}, {@noload}, {@nobarrier}, {@lazytime}]}, 0xfe, 0x472, &(0x7f0000000940)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000001700)=[{{0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0xfc}, 0x1030000}], 0x40000000000035c, 0x0) 2.009588159s ago: executing program 2 (id=350): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x800448d2, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0xfffffffa, 0x40, 0x73, 0x1002, 0xffffffffffffffff, 0x7f112113, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x0, 0xc}, 0x48) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="180300"/15, @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000800b7030000000010008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0}, 0x90) syz_mount_image$ext4(&(0x7f0000000ac0)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x3810744, &(0x7f00000035c0)={[{@user_xattr}, {@user_xattr}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x10000}}, {@lazytime}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x80000000}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x400000}}, {@noauto_da_alloc}, {@test_dummy_encryption}]}, 0x1, 0x451, &(0x7f0000000d00)="$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") bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = getpid() sched_setscheduler(r4, 0x1, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f0000003340)=[{{&(0x7f0000000480)=@x25={0x9, @remote}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000014c0)=""/4096, 0x1000}, {&(0x7f0000000540)=""/145, 0x91}, {&(0x7f0000000600)=""/159, 0x9f}, {&(0x7f0000000800)=""/128, 0x80}], 0x4, &(0x7f0000000880)=""/160, 0xa0}, 0x5}, {{&(0x7f0000000940)=@alg, 0x80, &(0x7f0000001240)=[{&(0x7f0000002c00)=""/46, 0x2e}, {&(0x7f0000000b00)=""/123, 0x7b}, {&(0x7f0000000b80)=""/244, 0xf4}, {&(0x7f0000001180)=""/160, 0xa0}, {&(0x7f0000000a80)=""/4, 0x4}, {&(0x7f0000000c80)=""/118, 0x76}], 0x6, &(0x7f00000012c0)=""/108, 0x6c}, 0x62}, {{&(0x7f0000001340)=@nfc_llcp, 0x80, &(0x7f0000001440)=[{&(0x7f00000013c0)=""/99, 0x63}], 0x1, &(0x7f00000024c0)=""/178, 0xb2}, 0x9}, {{&(0x7f0000002580)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000002780)=[{&(0x7f0000002600)=""/220, 0xdc}, {&(0x7f0000002700)=""/64, 0x40}, {&(0x7f0000002740)=""/48, 0x30}], 0x3, &(0x7f00000027c0)=""/136, 0x88}, 0x2}, {{&(0x7f0000002880)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000002a40)=[{&(0x7f0000002900)=""/73, 0x49}, {&(0x7f0000002980)=""/140, 0x8c}], 0x2}, 0xfff}, {{0x0, 0x0, &(0x7f0000002b00)=[{&(0x7f0000002a80)=""/85, 0x55}], 0x1, &(0x7f0000002b40)=""/49, 0x31}, 0x80000001}, {{&(0x7f0000002b80)=@x25={0x9, @remote}, 0x80, &(0x7f0000003240)=[{&(0x7f0000000780)=""/85, 0x55}, {&(0x7f0000002c80)=""/96, 0x60}, {&(0x7f0000002d00)=""/26, 0x1a}, {&(0x7f0000002d40)=""/246, 0xf6}, {&(0x7f0000002e40)=""/136, 0x88}, {&(0x7f0000002f00)=""/247, 0xf7}, {&(0x7f0000003000)=""/182, 0xb6}, {&(0x7f00000030c0)=""/169, 0xa9}, {&(0x7f0000003180)=""/109, 0x6d}, {&(0x7f0000003200)=""/16, 0x10}], 0xa, &(0x7f0000000740)=""/35, 0x23}, 0x80000000}], 0x7, 0x2, 0x0) close(0xffffffffffffffff) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000400000000dfffff1918120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r8}, 0x10) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000700)=ANY=[@ANYRES8=r0], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, 0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x90) 2.007928119s ago: executing program 4 (id=351): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) openat$incfs(r1, &(0x7f0000000080)='.log\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000404f0453b600000000000109022400010000000009040000ff03000000092100090001220700090581030000000000"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="002207000000ab34f5ac1d95"], 0x0}, 0x0) 1.34684ms ago: executing program 0 (id=352): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000100)) r6 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r7 = dup3(r6, r5, 0x0) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r8, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f0000000040)) r9 = fcntl$dupfd(r5, 0x406, r7) getsockopt$EBT_SO_GET_INIT_ENTRIES(r9, 0x0, 0x83, &(0x7f0000000500)={'filter\x00', 0x0, 0x3, 0x60, [0x5, 0xffffffff, 0xffffffff00000000, 0xfffffffffffffffa, 0x80000001, 0x10000], 0x7, &(0x7f0000000300)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f0000000380)=""/96}, &(0x7f00000001c0)=0x78) syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) pipe2$9p(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0x28}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) 749.69Āµs ago: executing program 1 (id=353): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000001440)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7b, 0x4) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03859bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b037511bf746bec66ba", 0xffffffffffffff5a, 0x40000, 0x0, 0x27) recvmsg(r1, &(0x7f0000001500)={0x0, 0xa, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x16fb}], 0x1, 0x0, 0x46, 0x407006}, 0x104) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r0}, 0x10) 416.311Āµs ago: executing program 2 (id=354): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f00000003c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) getresuid(0x0, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x64}}, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r6 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r6, &(0x7f0000001600)='./file1\x00', 0x2000, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') linkat(r6, &(0x7f0000000100)='./file1\x00', r6, &(0x7f0000000240)='./file0\x00', 0x0) unlink(&(0x7f0000000280)='./file1\x00') 0s ago: executing program 4 (id=355): mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) ptrace(0x10, 0x1) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000380)={0x0, 0x0}) ptrace$getenv(0x4205, r1, 0x1, &(0x7f0000000000)) kernel console output (not intermixed with test programs): 60363][ T865] notify_change+0xbb6/0xe60 [ 53.764791][ T865] ? down_read_killable+0x220/0x220 [ 53.769822][ T865] vfs_utimes+0x458/0x6f0 [ 53.774081][ T865] ? __ia32_sys_sync_file_range2+0x110/0x110 [ 53.779891][ T865] ? getname_flags+0x1fd/0x520 [ 53.784493][ T865] ? user_path_at_empty+0x40/0x50 [ 53.789348][ T865] __se_sys_utimes+0x193/0x380 [ 53.793946][ T865] ? __x64_sys_utimes+0x70/0x70 [ 53.798647][ T865] ? irqentry_exit+0x4f/0x60 [ 53.803065][ T865] ? __sanitizer_cov_trace_pc+0x1/0x60 [ 53.808361][ T865] __x64_sys_utimes+0x5b/0x70 [ 53.812869][ T865] do_syscall_64+0x34/0x70 [ 53.817123][ T865] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 53.822849][ T865] RIP: 0033:0x7f4315e38e79 [ 53.827102][ T865] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 53.846558][ T865] RSP: 002b:00007f4314ab6038 EFLAGS: 00000246 ORIG_RAX: 00000000000000eb [ 53.854789][ T865] RAX: ffffffffffffffda RBX: 00007f4315fd4f80 RCX: 00007f4315e38e79 [ 53.862611][ T865] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000540 [ 53.870409][ T865] RBP: 00007f4314ab6090 R08: 0000000000000000 R09: 0000000000000000 [ 53.878373][ T865] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 53.886308][ T865] R13: 0000000000000000 R14: 00007f4315fd4f80 R15: 00007ffc7953f8a8 [ 53.909872][ T291] isku 0003:1E7D:319C.0009: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.3-1/input0 [ 54.022081][ T875] EXT4-fs error (device loop1): ext4_read_inode_bitmap:140: comm syz.1.143: Invalid inode bitmap blk 4 in block_group 0 [ 54.034897][ T875] EXT4-fs (loop1): mounted filesystem without journal. Opts: noblock_validity,quota,data_err=abort,noload,nobarrier,lazytime,,errors=continue [ 54.273577][ T889] EXT4-fs error (device loop4): ext4_read_inode_bitmap:140: comm syz.4.145: Invalid inode bitmap blk 4 in block_group 0 [ 54.286390][ T889] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,quota,data_err=abort,noload,nobarrier,lazytime,,errors=continue [ 54.338381][ T15] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 54.345829][ T53] usb 4-1: USB disconnect, device number 10 [ 54.630179][ T898] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 54.639031][ T898] ext4 filesystem being mounted at /11/file1 supports timestamps until 2038 (0x7fffffff) [ 54.697243][ T904] FAULT_INJECTION: forcing a failure. [ 54.697243][ T904] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 54.710236][ T904] CPU: 0 PID: 904 Comm: syz.0.147 Not tainted 5.10.223-syzkaller-01561-g0890c03b8b7d #0 [ 54.719768][ T904] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 54.729646][ T904] Call Trace: [ 54.732786][ T904] dump_stack_lvl+0x1e2/0x24b [ 54.737293][ T904] ? bfq_pos_tree_add_move+0x43b/0x43b [ 54.742581][ T904] dump_stack+0x15/0x17 [ 54.746656][ T904] should_fail+0x3c6/0x510 [ 54.750914][ T904] should_fail_usercopy+0x1a/0x20 [ 54.755772][ T904] _copy_from_user+0x20/0xd0 [ 54.760201][ T904] iovec_from_user+0xc7/0x330 [ 54.764710][ T904] __import_iovec+0x6d/0x3b0 [ 54.769137][ T904] ? __ia32_sys_shutdown+0x70/0x70 [ 54.774085][ T904] import_iovec+0xe5/0x120 [ 54.778343][ T904] ___sys_sendmsg+0x215/0x2e0 [ 54.782851][ T904] ? __sys_sendmsg+0x280/0x280 [ 54.787450][ T904] ? rw_verify_area+0x1c3/0x360 [ 54.792155][ T904] ? __fdget+0x1bc/0x240 [ 54.796225][ T904] __se_sys_sendmsg+0x1b1/0x280 [ 54.800910][ T904] ? __x64_sys_sendmsg+0x90/0x90 [ 54.805687][ T904] ? ksys_write+0x260/0x2c0 [ 54.810032][ T904] ? debug_smp_processor_id+0x17/0x20 [ 54.815231][ T904] __x64_sys_sendmsg+0x7b/0x90 [ 54.819853][ T904] do_syscall_64+0x34/0x70 [ 54.824105][ T904] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 54.829806][ T904] RIP: 0033:0x7f0fad2c0e79 [ 54.834071][ T904] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 54.853788][ T904] RSP: 002b:00007f0fabf3e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 54.862144][ T904] RAX: ffffffffffffffda RBX: 00007f0fad45cf80 RCX: 00007f0fad2c0e79 [ 54.869942][ T904] RDX: 0000000000000000 RSI: 0000000020000400 RDI: 0000000000000006 [ 54.877880][ T904] RBP: 00007f0fabf3e090 R08: 0000000000000000 R09: 0000000000000000 [ 54.885684][ T904] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 54.893499][ T904] R13: 0000000000000000 R14: 00007f0fad45cf80 R15: 00007ffe4efdeed8 [ 54.919040][ T15] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 54.930815][ T15] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 54.942061][ T15] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 54.968015][ T15] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 54.984068][ T24] audit: type=1400 audit(1724354996.160:194): avc: denied { write } for pid=907 comm="syz.0.149" laddr=fe80::13 lport=60 faddr=fe80:: scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 54.984906][ T15] usb 3-1: New USB device found, idVendor=044f, idProduct=b653, bcdDevice= 0.00 [ 55.015883][ T15] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.076255][ T912] syz.3.148[912] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 55.076519][ T912] syz.3.148[912] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 55.239661][ T15] usb 3-1: config 0 descriptor?? [ 55.340591][ T916] device pim6reg1 entered promiscuous mode [ 55.528481][ T20] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 55.560529][ T922] netlink: 'syz.4.153': attribute type 9 has an invalid length. [ 55.568057][ T922] netlink: 'syz.4.153': attribute type 6 has an invalid length. [ 55.598467][ T291] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 55.768567][ T925] exfat: Unknown parameter '’’’’' [ 55.869353][ T15] thrustmaster 0003:044F:B653.000A: unbalanced delimiter at end of report description [ 55.879178][ T15] thrustmaster 0003:044F:B653.000A: parse failed [ 55.885419][ T15] thrustmaster: probe of 0003:044F:B653.000A failed with error -22 [ 55.938565][ T20] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 55.949356][ T20] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 55.959006][ T20] usb 2-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 55.968197][ T20] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.979474][ T20] usb 2-1: config 0 descriptor?? [ 55.988443][ T291] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 55.999496][ T291] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 56.009106][ T291] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 56.023062][ T291] usb 1-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 56.032170][ T291] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 56.048554][ T291] usb 1-1: config 0 descriptor?? [ 56.075510][ T15] usb 3-1: USB disconnect, device number 7 [ 56.518505][ T20] usbhid 2-1:0.0: can't add hid device: -71 [ 56.524301][ T20] usbhid: probe of 2-1:0.0 failed with error -71 [ 56.531183][ T291] gt683r_led 0003:1770:FF00.000B: item fetching failed at offset 1/5 [ 56.539191][ T291] gt683r_led 0003:1770:FF00.000B: hid parsing failed [ 56.545696][ T291] gt683r_led: probe of 0003:1770:FF00.000B failed with error -22 [ 56.554529][ T20] usb 2-1: USB disconnect, device number 6 [ 56.568409][ T53] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 56.591508][ T932] FAULT_INJECTION: forcing a failure. [ 56.591508][ T932] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 56.605263][ T932] CPU: 0 PID: 932 Comm: syz.2.156 Not tainted 5.10.223-syzkaller-01561-g0890c03b8b7d #0 [ 56.614816][ T932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 56.624671][ T932] Call Trace: [ 56.627804][ T932] dump_stack_lvl+0x1e2/0x24b [ 56.632459][ T932] ? bfq_pos_tree_add_move+0x43b/0x43b [ 56.637747][ T932] ? _raw_spin_lock+0xa4/0x1b0 [ 56.642526][ T932] dump_stack+0x15/0x17 [ 56.646507][ T932] should_fail+0x3c6/0x510 [ 56.650762][ T932] should_fail_usercopy+0x1a/0x20 [ 56.655620][ T932] _copy_from_user+0x20/0xd0 [ 56.660060][ T932] kstrtouint_from_user+0xca/0x2a0 [ 56.664994][ T932] ? kstrtol_from_user+0x310/0x310 [ 56.669964][ T932] ? snprintf+0xd6/0x120 [ 56.674021][ T932] ? __fsnotify_parent+0x6c0/0x6c0 [ 56.679058][ T932] ? memset+0x35/0x40 [ 56.682874][ T932] proc_fail_nth_write+0xa6/0x290 [ 56.687744][ T932] ? security_file_permission+0x7b/0xb0 [ 56.693124][ T932] ? proc_fail_nth_read+0x210/0x210 [ 56.698173][ T932] ? security_file_permission+0x86/0xb0 [ 56.703537][ T932] ? rw_verify_area+0x1c3/0x360 [ 56.708218][ T932] ? proc_fail_nth_read+0x210/0x210 [ 56.713256][ T932] vfs_write+0x36a/0xe70 [ 56.717354][ T932] ? kernel_write+0x3d0/0x3d0 [ 56.721855][ T932] ? __kasan_check_write+0x14/0x20 [ 56.726790][ T932] ? mutex_lock+0xa5/0x110 [ 56.731040][ T932] ? mutex_trylock+0xa0/0xa0 [ 56.735474][ T932] ? __fdget_pos+0x2e7/0x3a0 [ 56.739979][ T932] ? ksys_write+0x77/0x2c0 [ 56.744232][ T932] ksys_write+0x199/0x2c0 [ 56.748405][ T932] ? __ia32_sys_read+0x90/0x90 [ 56.753003][ T932] ? debug_smp_processor_id+0x17/0x20 [ 56.758205][ T932] __x64_sys_write+0x7b/0x90 [ 56.762668][ T932] do_syscall_64+0x34/0x70 [ 56.766887][ T932] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 56.772615][ T932] RIP: 0033:0x7f4315e3795f [ 56.776868][ T932] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 1c 8e 02 00 48 [ 56.796314][ T932] RSP: 002b:00007f4314ab6030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 56.804708][ T932] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f4315e3795f [ 56.812511][ T932] RDX: 0000000000000001 RSI: 00007f4314ab60a0 RDI: 000000000000000a [ 56.820414][ T932] RBP: 00007f4314ab6090 R08: 0000000000000000 R09: 0000000000000000 [ 56.828234][ T932] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 56.836137][ T932] R13: 0000000000000000 R14: 00007f4315fd4f80 R15: 00007ffc7953f8a8 [ 56.846033][ T25] usb 1-1: USB disconnect, device number 7 [ 56.872746][ T935] exFAT-fs (loop3): invalid fs_name [ 56.879119][ T935] exFAT-fs (loop3): failed to read boot sector [ 56.885102][ T935] exFAT-fs (loop3): failed to recognize exfat type [ 57.010106][ T938] EXT4-fs (loop2): orphan cleanup on readonly fs [ 57.016386][ T938] EXT4-fs error (device loop2): ext4_mb_generate_buddy:808: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 57.030616][ T938] EXT4-fs error (device loop2): ext4_free_branches:1026: inode #11: comm syz.2.158: invalid indirect mapped block 1 (level 1) [ 57.038364][ T53] usb 5-1: Using ep0 maxpacket: 8 [ 57.043884][ T938] EXT4-fs (loop2): 1 truncate cleaned up [ 57.054031][ T938] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 57.168398][ T53] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 57.183057][ T53] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 205, changing to 11 [ 57.194609][ T53] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 41641, setting to 1024 [ 57.207041][ T24] audit: type=1400 audit(1724354998.390:195): avc: denied { ioctl } for pid=937 comm="syz.2.158" path="/dev/kvm" dev="devtmpfs" ino=82 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 57.207191][ T945] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 57.246939][ T53] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 57.260156][ T53] usb 5-1: New USB device found, idVendor=056e, idProduct=00ff, bcdDevice= 0.00 [ 57.269196][ T53] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 57.277634][ T53] usb 5-1: config 0 descriptor?? [ 57.443430][ T949] EXT4-fs error (device loop0): ext4_read_inode_bitmap:140: comm syz.0.160: Invalid inode bitmap blk 4 in block_group 0 [ 57.468116][ T949] EXT4-fs (loop0): mounted filesystem without journal. Opts: noblock_validity,quota,data_err=abort,noload,nobarrier,lazytime,,errors=continue [ 57.533232][ T954] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.161: casefold flag without casefold feature [ 57.546369][ T954] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: inode #12: comm syz.3.161: missing EA_INODE flag [ 57.558535][ T944] F2FS-fs (loop1): Invalid segment/section count (31, 24 x 1) [ 57.565957][ T944] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 57.566081][ T954] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.161: error while reading EA inode 12 err=-117 [ 57.574987][ T944] F2FS-fs (loop1): invalid crc value [ 57.591967][ T954] EXT4-fs (loop3): 1 orphan inode deleted [ 57.598646][ T954] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 57.603186][ T944] F2FS-fs (loop1): Found nat_bits in checkpoint [ 57.625273][ T24] audit: type=1400 audit(1724354998.800:196): avc: denied { mounton } for pid=953 comm="syz.3.161" path="/28/file0/file0" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 57.627769][ T954] 9pnet: Insufficient options for proto=fd [ 57.678350][ T944] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 57.685232][ T944] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 57.791867][ T24] audit: type=1400 audit(1724354998.970:197): avc: denied { mounton } for pid=929 comm="syz.4.155" path="/5/file0" dev="tmpfs" ino=45 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 57.791998][ T930] overlayfs: failed to resolve './file2': -2 [ 57.861760][ T1020] incfs: Error accessing: ./file0. [ 57.872621][ T1022] netlink: 68 bytes leftover after parsing attributes in process `syz.1.159'. [ 57.908616][ T1020] incfs: mount failed -20 [ 58.072491][ T624] attempt to access beyond end of device [ 58.072491][ T624] loop1: rw=2049, want=45104, limit=40427 [ 58.088361][ T53] usbhid 5-1:0.0: can't add hid device: -71 [ 58.094159][ T53] usbhid: probe of 5-1:0.0 failed with error -71 [ 58.102847][ T53] usb 5-1: USB disconnect, device number 11 [ 58.294291][ T24] audit: type=1400 audit(1724354999.470:198): avc: denied { shutdown } for pid=1026 comm="syz.4.165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 58.403353][ T1034] syz.2.163[1034] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 58.403423][ T1034] syz.2.163[1034] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 58.517854][ T1025] EXT4-fs error (device loop3): ext4_read_inode_bitmap:140: comm syz.3.162: Invalid inode bitmap blk 4 in block_group 0 [ 58.568783][ T24] audit: type=1400 audit(1724354999.470:199): avc: denied { connect } for pid=1026 comm="syz.4.165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 58.590044][ T1025] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,quota,data_err=abort,noload,nobarrier,lazytime,,errors=continue [ 58.787211][ T1042] FAULT_INJECTION: forcing a failure. [ 58.787211][ T1042] name failslab, interval 1, probability 0, space 0, times 0 [ 58.800070][ T1042] CPU: 1 PID: 1042 Comm: syz.0.166 Not tainted 5.10.223-syzkaller-01561-g0890c03b8b7d #0 [ 58.809685][ T1042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 58.819567][ T1042] Call Trace: [ 58.822704][ T1042] dump_stack_lvl+0x1e2/0x24b [ 58.827206][ T1042] ? panic+0x812/0x812 [ 58.831113][ T1042] ? avc_has_perm+0x275/0x400 [ 58.835635][ T1042] ? bfq_pos_tree_add_move+0x43b/0x43b [ 58.840924][ T1042] ? avc_has_perm_noaudit+0x240/0x240 [ 58.846132][ T1042] dump_stack+0x15/0x17 [ 58.850143][ T1042] should_fail+0x3c6/0x510 [ 58.854375][ T1042] ? __alloc_skb+0x80/0x510 [ 58.858717][ T1042] __should_failslab+0xa4/0xe0 [ 58.863314][ T1042] should_failslab+0x9/0x20 [ 58.867650][ T1042] kmem_cache_alloc+0x3d/0x2e0 [ 58.872290][ T1042] __alloc_skb+0x80/0x510 [ 58.876421][ T1042] ? avc_has_perm_noaudit+0x240/0x240 [ 58.881644][ T1042] pfkey_sendmsg+0x1c2/0xfa0 [ 58.886059][ T1042] ? unwind_get_return_address+0x4d/0x90 [ 58.891520][ T1042] ? pfkey_release+0x340/0x340 [ 58.896121][ T1042] ? selinux_socket_sendmsg+0x243/0x340 [ 58.901503][ T1042] ? selinux_socket_accept+0x5b0/0x5b0 [ 58.906883][ T1042] ? kmem_cache_free+0xa9/0x1e0 [ 58.911562][ T1042] ? check_stack_object+0x114/0x130 [ 58.916623][ T1042] ? security_socket_sendmsg+0x82/0xb0 [ 58.921899][ T1042] ? pfkey_release+0x340/0x340 [ 58.926518][ T1042] ____sys_sendmsg+0x59e/0x8f0 [ 58.931098][ T1042] ? __sys_sendmsg_sock+0x40/0x40 [ 58.935962][ T1042] ? import_iovec+0xe5/0x120 [ 58.940380][ T1042] ___sys_sendmsg+0x252/0x2e0 [ 58.944902][ T1042] ? __sys_sendmsg+0x280/0x280 [ 58.949502][ T1042] ? rw_verify_area+0x1c3/0x360 [ 58.954199][ T1042] ? __fdget+0x1bc/0x240 [ 58.958267][ T1042] __se_sys_sendmsg+0x1b1/0x280 [ 58.962951][ T1042] ? __x64_sys_sendmsg+0x90/0x90 [ 58.967734][ T1042] ? ksys_write+0x260/0x2c0 [ 58.972233][ T1042] ? debug_smp_processor_id+0x17/0x20 [ 58.977527][ T1042] __x64_sys_sendmsg+0x7b/0x90 [ 58.982132][ T1042] do_syscall_64+0x34/0x70 [ 58.986472][ T1042] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 58.992199][ T1042] RIP: 0033:0x7f0fad2c0e79 [ 58.996445][ T1042] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 59.015888][ T1042] RSP: 002b:00007f0fabf3e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 59.024130][ T1042] RAX: ffffffffffffffda RBX: 00007f0fad45cf80 RCX: 00007f0fad2c0e79 [ 59.031955][ T1042] RDX: 0000000000000000 RSI: 0000000020000400 RDI: 0000000000000006 [ 59.039785][ T1042] RBP: 00007f0fabf3e090 R08: 0000000000000000 R09: 0000000000000000 [ 59.047570][ T1042] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 59.055373][ T1042] R13: 0000000000000000 R14: 00007f0fad45cf80 R15: 00007ffe4efdeed8 [ 59.114061][ T1047] syz.0.168[1047] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 59.114117][ T1047] syz.0.168[1047] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 59.126545][ T24] audit: type=1400 audit(1724355000.310:200): avc: denied { lock } for pid=1046 comm="syz.0.168" path="socket:[17175]" dev="sockfs" ino=17175 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 59.168449][ T24] audit: type=1400 audit(1724355000.340:201): avc: denied { read } for pid=1046 comm="syz.0.168" name="ppp" dev="devtmpfs" ino=133 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 59.191123][ T24] audit: type=1400 audit(1724355000.340:202): avc: denied { open } for pid=1046 comm="syz.0.168" path="/dev/ppp" dev="devtmpfs" ino=133 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 59.213952][ T24] audit: type=1400 audit(1724355000.340:203): avc: denied { ioctl } for pid=1046 comm="syz.0.168" path="/dev/ppp" dev="devtmpfs" ino=133 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 59.368047][ T1049] syz.2.170[1049] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 59.368086][ T1049] syz.2.170[1049] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 59.389492][ T1051] exFAT-fs (loop4): invalid fs_name [ 59.420442][ T1051] exFAT-fs (loop4): failed to read boot sector [ 59.426496][ T1051] exFAT-fs (loop4): failed to recognize exfat type [ 59.508350][ T53] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 59.628151][ T1060] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 59.642737][ T1060] ext4 filesystem being mounted at /17/file0 supports timestamps until 2038 (0x7fffffff) [ 59.718407][ T1015] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 59.732868][ T1060] EXT4-fs error (device loop1) in ext4_do_update_inode:5275: error 27 [ 59.741727][ T1060] EXT4-fs error (device loop1): ext4_dirty_inode:6079: inode #2: comm syz.1.173: mark_inode_dirty error [ 59.748341][ T53] usb 4-1: Using ep0 maxpacket: 8 [ 59.753322][ T1060] EXT4-fs error (device loop1) in ext4_do_update_inode:5275: error 27 [ 59.766984][ T1060] EXT4-fs error (device loop1): __ext4_ext_dirty:182: inode #2: comm syz.1.173: mark_inode_dirty error [ 59.878448][ T53] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 59.889200][ T53] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 59.899233][ T53] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 59.908220][ T53] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.917364][ T53] usb 4-1: config 0 descriptor?? [ 60.078465][ T1015] usb 3-1: config 0 has an invalid interface number: 91 but max is 0 [ 60.086439][ T1015] usb 3-1: config 0 has no interface number 0 [ 60.248470][ T1015] usb 3-1: New USB device found, idVendor=17cc, idProduct=1000, bcdDevice=64.02 [ 60.257343][ T1015] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.265257][ T1015] usb 3-1: Product: syz [ 60.269319][ T1015] usb 3-1: Manufacturer: syz [ 60.273729][ T1015] usb 3-1: SerialNumber: syz [ 60.278936][ T1054] syz.3.169[1054] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 60.278988][ T1054] syz.3.169[1054] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 60.281584][ T1015] usb 3-1: config 0 descriptor?? [ 60.312583][ T24] kauditd_printk_skb: 2 callbacks suppressed [ 60.312593][ T24] audit: type=1326 audit(1724355001.490:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1053 comm="syz.3.169" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ffa17888e79 code=0x0 [ 60.341327][ T25] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 60.558447][ T1015] snd-usb-audio: probe of 3-1:0.91 failed with error -71 [ 60.567705][ T1015] usb 3-1: USB disconnect, device number 8 [ 60.608483][ T25] usb 5-1: Using ep0 maxpacket: 16 [ 60.678549][ T1017] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 60.769119][ T25] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 60.779053][ T25] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 60.791712][ T25] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 60.800540][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.809106][ T25] usb 5-1: config 0 descriptor?? [ 60.848780][ T25] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 61.038435][ T1017] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 61.049410][ T1017] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 61.067858][ T1017] usb 2-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 61.077111][ T1017] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.085620][ T1017] usb 2-1: config 0 descriptor?? [ 61.160698][ T1070] EXT4-fs (loop4): mounted filesystem without journal. Opts: min_batch_time=0x0000000000000004,,errors=continue [ 61.525272][ T1085] xt_CT: No such helper "snmp_trap" [ 61.555574][ T1085] EXT4-fs (loop4): re-mounted. Opts: [ 61.869438][ T1017] isku 0003:1E7D:319C.000C: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.1-1/input0 [ 62.281862][ T305] usb 2-1: USB disconnect, device number 7 [ 62.303741][ T1091] EXT4-fs error (device loop3): ext4_read_inode_bitmap:140: comm syz.3.179: Invalid inode bitmap blk 4 in block_group 0 [ 62.316366][ T1091] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,quota,data_err=abort,noload,nobarrier,lazytime,,errors=continue [ 62.338554][ T53] usbhid 4-1:0.0: can't add hid device: -71 [ 62.344438][ T53] usbhid: probe of 4-1:0.0 failed with error -71 [ 62.354800][ T53] usb 4-1: USB disconnect, device number 11 [ 62.926815][ T1104] syz.2.180[1104] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 62.926878][ T1104] syz.2.180[1104] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 63.031793][ T1101] exFAT-fs (loop1): invalid fs_name [ 63.127967][ T305] usb 5-1: USB disconnect, device number 12 [ 63.135763][ T1101] exFAT-fs (loop1): failed to read boot sector [ 63.142821][ T1101] exFAT-fs (loop1): failed to recognize exfat type [ 63.655704][ T1121] tipc: Started in network mode [ 63.660469][ T1121] tipc: Own node identity 101, cluster identity 4711 [ 63.666926][ T1121] tipc: 32-bit node address hash set to 101 [ 63.747977][ T1121] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.185: inode #1: comm syz.2.185: iget: illegal inode # [ 63.760941][ T1121] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.185: error while reading EA inode 1 err=-117 [ 63.773312][ T1121] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2800: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 63.786307][ T1121] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.185: inode #1: comm syz.2.185: iget: illegal inode # [ 63.799645][ T1121] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.185: error while reading EA inode 1 err=-117 [ 63.800410][ T1124] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 63.813961][ T1121] EXT4-fs (loop2): 1 orphan inode deleted [ 63.820662][ T1124] ext4 filesystem being mounted at /20/file0 supports timestamps until 2038 (0x7fffffff) [ 63.826347][ T1121] EXT4-fs (loop2): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,journal_dev=0x0000000000008000,debug_want_extra_isize=0x000000000000005c,minixdf,resgid=0x0000000000000000,grpquota,usrjquota=,,errors=continue [ 63.851994][ T1124] EXT4-fs error (device loop1) in ext4_do_update_inode:5275: error 27 [ 63.861767][ T1121] EXT4-fs error (device loop2): ext4_free_branches:1026: inode #13: comm syz.2.185: invalid indirect mapped block 234881024 (level 0) [ 63.871321][ T1124] EXT4-fs error (device loop1): ext4_dirty_inode:6079: inode #2: comm syz.1.186: mark_inode_dirty error [ 63.892337][ T1124] EXT4-fs error (device loop1) in ext4_do_update_inode:5275: error 27 [ 63.901075][ T1124] EXT4-fs error (device loop1): __ext4_ext_dirty:182: inode #2: comm syz.1.186: mark_inode_dirty error [ 64.190635][ T1137] syz.2.187[1137] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 64.191640][ T1137] syz.2.187[1137] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 64.733817][ T1143] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 65.395711][ T53] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 65.419486][ T1158] syz.4.194[1158] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 65.420215][ T1158] syz.4.194[1158] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 66.050086][ T1162] F2FS-fs (loop4): extra_attr or flexible_inline_xattr feature is off [ 66.098153][ T1169] Unknown ioctl 35123 [ 66.138323][ T53] usb 2-1: Using ep0 maxpacket: 16 [ 66.178470][ T305] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 66.258412][ T53] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 66.268473][ T53] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 66.281837][ T53] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 66.291013][ T53] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.299458][ T53] usb 2-1: config 0 descriptor?? [ 66.338829][ T53] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 66.347623][ T1173] F2FS-fs (loop4): Invalid segment/section count (31, 24 x 1) [ 66.355006][ T1173] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 66.363778][ T1173] F2FS-fs (loop4): invalid crc value [ 66.370078][ T1173] F2FS-fs (loop4): Found nat_bits in checkpoint [ 66.392147][ T1173] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 66.399066][ T1173] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 66.549238][ T1179] netlink: 68 bytes leftover after parsing attributes in process `syz.4.198'. [ 66.719676][ T1148] EXT4-fs (loop1): mounted filesystem without journal. Opts: min_batch_time=0x0000000000000004,,errors=continue [ 66.758717][ T305] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 66.769794][ T305] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 66.779792][ T305] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 66.795378][ T305] usb 4-1: New USB device found, idVendor=05ac, idProduct=0246, bcdDevice= 0.00 [ 66.804408][ T305] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.816042][ T305] usb 4-1: config 0 descriptor?? [ 66.901066][ T1187] xt_CT: No such helper "snmp_trap" [ 66.988734][ T1187] EXT4-fs (loop1): re-mounted. Opts: [ 67.045676][ T835] attempt to access beyond end of device [ 67.045676][ T835] loop4: rw=2049, want=45104, limit=40427 [ 67.088363][ T291] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 67.139888][ T24] audit: type=1326 audit(1724355008.320:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1188 comm="syz.4.200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4f3b21e79 code=0x7ffc0000 [ 67.163062][ T24] audit: type=1326 audit(1724355008.320:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1188 comm="syz.4.200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4f3b21e79 code=0x7ffc0000 [ 67.187912][ T24] audit: type=1326 audit(1724355008.320:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1188 comm="syz.4.200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7ff4f3b21e79 code=0x7ffc0000 [ 67.210910][ T24] audit: type=1326 audit(1724355008.320:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1188 comm="syz.4.200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4f3b21e79 code=0x7ffc0000 [ 67.233964][ T24] audit: type=1326 audit(1724355008.320:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1188 comm="syz.4.200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4f3b21e79 code=0x7ffc0000 [ 67.257214][ T24] audit: type=1326 audit(1724355008.320:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1188 comm="syz.4.200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7ff4f3b21e79 code=0x7ffc0000 [ 67.280365][ T24] audit: type=1326 audit(1724355008.320:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1188 comm="syz.4.200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4f3b21e79 code=0x7ffc0000 [ 67.303576][ T24] audit: type=1326 audit(1724355008.320:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1188 comm="syz.4.200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4f3b21e79 code=0x7ffc0000 [ 67.326916][ T24] audit: type=1326 audit(1724355008.320:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1188 comm="syz.4.200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7ff4f3b23d0c code=0x7ffc0000 [ 67.330636][ T1192] EXT4-fs (loop4): INFO: recovery required on readonly filesystem [ 67.350395][ T24] audit: type=1326 audit(1724355008.320:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1188 comm="syz.4.200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4f3b21e79 code=0x7ffc0000 [ 67.359881][ T1192] EXT4-fs (loop4): write access will be enabled during recovery [ 67.387935][ T1192] EXT4-fs (loop4): barriers disabled [ 67.393294][ T1192] JBD2: no valid journal superblock found [ 67.399042][ T1192] EXT4-fs (loop4): error loading journal [ 67.508584][ T291] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 67.598062][ T291] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 67.621567][ T1192] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 67.632737][ T291] usb 3-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 67.645077][ T291] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.679171][ T291] usb 3-1: config 0 descriptor?? [ 68.161373][ T1201] F2FS-fs (loop4): Invalid segment/section count (31, 24 x 1) [ 68.169327][ T1201] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 68.170140][ T291] isku 0003:1E7D:319C.000D: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.2-1/input0 [ 68.177412][ T1201] F2FS-fs (loop4): Unrecognized mount option "iżline_xattr" or missing value [ 68.537535][ T53] usb 2-1: USB disconnect, device number 8 [ 68.641476][ T1015] usb 3-1: USB disconnect, device number 9 [ 68.998486][ T305] usbhid 4-1:0.0: can't add hid device: -71 [ 69.004570][ T305] usbhid: probe of 4-1:0.0 failed with error -71 [ 69.012088][ T305] usb 4-1: USB disconnect, device number 12 [ 69.129012][ T1211] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 69.138871][ T1211] ext4 filesystem being mounted at /17/bus supports timestamps until 2038 (0x7fffffff) [ 69.471286][ T1225] syz.2.206[1225] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 69.471448][ T1225] syz.2.206[1225] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 69.530101][ T1015] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 69.918393][ T1015] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 69.931842][ T1015] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 69.943029][ T1015] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 69.952903][ T1015] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 70.038391][ T1015] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 70.047342][ T1015] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 70.055419][ T1015] usb 5-1: Manufacturer: syz [ 70.061913][ T1015] usb 5-1: config 0 descriptor?? [ 70.087997][ T1244] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.095009][ T1244] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.102326][ T1244] device bridge_slave_0 entered promiscuous mode [ 70.109473][ T1244] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.116382][ T1244] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.123676][ T1244] device bridge_slave_1 entered promiscuous mode [ 70.157641][ T1244] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.164522][ T1244] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.171615][ T1244] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.178390][ T1244] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.199507][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.207307][ T305] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.215233][ T305] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.236578][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.244611][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.251491][ T291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.260473][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.268929][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.275804][ T291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.283290][ T25] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 70.290829][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.298578][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.314628][ T1244] device veth0_vlan entered promiscuous mode [ 70.320977][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.329167][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.336823][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.344227][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.356664][ T1244] device veth1_macvtap entered promiscuous mode [ 70.363504][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.377618][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.386055][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.518546][ T465] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 70.568532][ T25] usb 4-1: Using ep0 maxpacket: 32 [ 70.588540][ T291] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 70.654908][ T409] device bridge_slave_1 left promiscuous mode [ 70.662636][ T409] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.673217][ T409] device bridge_slave_0 left promiscuous mode [ 70.679354][ T409] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.679962][ T1015] appleir 0003:05AC:8243.000E: item fetching failed at offset 0/1 [ 70.694300][ T1015] appleir 0003:05AC:8243.000E: parse failed [ 70.700129][ T1015] appleir: probe of 0003:05AC:8243.000E failed with error -22 [ 70.707944][ T409] device veth1_macvtap left promiscuous mode [ 70.713909][ T409] device veth0_vlan left promiscuous mode [ 70.798451][ T465] usb 3-1: Using ep0 maxpacket: 16 [ 70.803463][ T25] usb 4-1: config 1 interface 0 has no altsetting 0 [ 70.838396][ T291] usb 2-1: Using ep0 maxpacket: 16 [ 70.870753][ T1015] usb 5-1: USB disconnect, device number 13 [ 70.958475][ T465] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 70.968514][ T465] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 70.981348][ T291] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 70.991294][ T465] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 71.000229][ T291] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 71.012984][ T25] usb 4-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.40 [ 71.021801][ T465] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.029609][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.037429][ T291] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 71.046605][ T25] usb 4-1: Product: syz [ 71.051117][ T465] usb 3-1: config 0 descriptor?? [ 71.055968][ T291] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.063747][ T25] usb 4-1: Manufacturer: syz [ 71.068125][ T25] usb 4-1: SerialNumber: syz [ 71.073478][ T291] usb 2-1: config 0 descriptor?? [ 71.088932][ T465] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 71.118985][ T291] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 71.349744][ T1249] EXT4-fs (loop2): mounted filesystem without journal. Opts: min_batch_time=0x0000000000000004,,errors=continue [ 71.392518][ T1251] EXT4-fs (loop1): mounted filesystem without journal. Opts: min_batch_time=0x0000000000000004,,errors=continue [ 71.514662][ T1258] F2FS-fs (loop0): Invalid segment/section count (31, 24 x 1) [ 71.538376][ T1258] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 71.546413][ T1258] F2FS-fs (loop0): Unrecognized mount option "iżline_xattr" or missing value [ 71.610024][ T25] usbhid 4-1:1.0: can't add hid device: -71 [ 71.616009][ T25] usbhid: probe of 4-1:1.0 failed with error -71 [ 71.624404][ T25] usb 4-1: USB disconnect, device number 13 [ 71.929212][ T1269] xt_CT: No such helper "snmp_trap" [ 71.935272][ T1272] xt_CT: No such helper "snmp_trap" [ 71.941633][ T1269] EXT4-fs (loop1): re-mounted. Opts: [ 72.159446][ T1267] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 72.171220][ T1272] EXT4-fs (loop2): re-mounted. Opts: [ 72.179243][ T1267] ext4 filesystem being mounted at /18/file1 supports timestamps until 2038 (0x7fffffff) [ 72.501610][ T53] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 72.608356][ T1015] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 72.848381][ T1016] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 72.898462][ T53] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 72.909296][ T53] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 72.919078][ T53] usb 4-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 72.927936][ T53] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.936541][ T53] usb 4-1: config 0 descriptor?? [ 73.018451][ T1015] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 73.029284][ T1015] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 73.038898][ T1015] usb 5-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 73.047690][ T1015] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.056149][ T1015] usb 5-1: config 0 descriptor?? [ 73.238416][ T1016] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 73.249301][ T1016] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 73.253449][ T465] usb 3-1: USB disconnect, device number 10 [ 73.259989][ T1016] usb 1-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 73.274001][ T1016] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.283005][ T1016] usb 1-1: config 0 descriptor?? [ 73.302169][ T25] usb 2-1: USB disconnect, device number 9 [ 73.409899][ T53] isku 0003:1E7D:319C.000F: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.3-1/input0 [ 73.563092][ T1293] syz.1.222[1293] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 73.563420][ T1293] syz.1.222[1293] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 73.819587][ T25] usb 4-1: USB disconnect, device number 14 [ 73.918480][ T1015] usbhid 5-1:0.0: can't add hid device: -71 [ 73.924946][ T1015] usbhid: probe of 5-1:0.0 failed with error -71 [ 73.932705][ T1015] usb 5-1: USB disconnect, device number 14 [ 74.018528][ T1016] usbhid 1-1:0.0: can't add hid device: -71 [ 74.025193][ T1016] usbhid: probe of 1-1:0.0 failed with error -71 [ 74.033927][ T1016] usb 1-1: USB disconnect, device number 8 [ 74.352288][ T24] kauditd_printk_skb: 24 callbacks suppressed [ 74.352307][ T24] audit: type=1400 audit(1724355015.530:241): avc: denied { sys_module } for pid=1302 comm="syz.4.226" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 74.382834][ T1301] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 74.383339][ T24] audit: type=1400 audit(1724355015.560:242): avc: denied { create } for pid=1300 comm="syz.3.225" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=2321202E2F6367726F75702F66696C653061616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 74.384370][ T1301] syz.3.225[1301] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 74.471623][ T24] audit: type=1400 audit(1724355015.560:243): avc: denied { associate } for pid=1300 comm="syz.3.225" name="file1" scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon=2321202E2F6367726F75702F66696C653061616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 74.563476][ T1301] syz.3.225[1301] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 74.575265][ T24] audit: type=1400 audit(1724355015.560:244): avc: denied { read write open } for pid=1300 comm="syz.3.225" path="/42/bus/file1" dev="overlay" ino=274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=2321202E2F6367726F75702F66696C653061616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616 [ 74.658916][ T25] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 74.670508][ T1016] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 74.827811][ T24] audit: type=1400 audit(1724355016.000:245): avc: denied { unlink } for pid=285 comm="syz-executor" name="file1" dev="tmpfs" ino=274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=2321202E2F6367726F75702F66696C65306161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 74.860579][ T1307] exFAT-fs (loop0): invalid fs_name [ 74.953635][ T1307] exFAT-fs (loop0): failed to read boot sector [ 74.960438][ T1307] exFAT-fs (loop0): failed to recognize exfat type [ 75.188387][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 75.209599][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 75.235264][ T25] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 75.242766][ T1316] F2FS-fs (loop3): invalid crc value [ 75.268561][ T1316] F2FS-fs (loop3): invalid crc value [ 75.273712][ T1316] F2FS-fs (loop3): Failed to get valid F2FS checkpoint [ 75.282844][ T25] usb 3-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 75.309735][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.331365][ T25] usb 3-1: config 0 descriptor?? [ 75.487961][ T24] audit: type=1400 audit(1724355016.660:246): avc: denied { remount } for pid=1315 comm="syz.3.229" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 76.109137][ T1338] syz.0.234[1338] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 76.109197][ T1338] syz.0.234[1338] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 76.174070][ T25] gt683r_led 0003:1770:FF00.0010: item fetching failed at offset 1/5 [ 76.211494][ T1336] F2FS-fs (loop4): Invalid segment/section count (31, 24 x 1) [ 76.219002][ T1336] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 76.227073][ T1336] F2FS-fs (loop4): Unrecognized mount option "18446744073709551615" or missing value [ 76.294389][ T25] gt683r_led 0003:1770:FF00.0010: hid parsing failed [ 76.301105][ T25] gt683r_led: probe of 0003:1770:FF00.0010 failed with error -22 [ 76.308357][ T1016] usb 2-1: device descriptor read/64, error -71 [ 76.372107][ T1017] usb 3-1: USB disconnect, device number 11 [ 76.585622][ T1349] FAULT_INJECTION: forcing a failure. [ 76.585622][ T1349] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 76.599050][ T1349] CPU: 0 PID: 1349 Comm: syz.4.235 Not tainted 5.10.223-syzkaller-01561-g0890c03b8b7d #0 [ 76.609124][ T1349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 76.619196][ T1349] Call Trace: [ 76.622330][ T1349] dump_stack_lvl+0x1e2/0x24b [ 76.626825][ T1349] ? bfq_pos_tree_add_move+0x43b/0x43b [ 76.632123][ T1349] ? __kasan_check_read+0x11/0x20 [ 76.636988][ T1349] dump_stack+0x15/0x17 [ 76.640973][ T1349] should_fail+0x3c6/0x510 [ 76.645232][ T1349] should_fail_usercopy+0x1a/0x20 [ 76.650174][ T1349] _copy_from_user+0x20/0xd0 [ 76.654601][ T1349] get_timespec64+0x93/0x270 [ 76.659023][ T1349] ? timespec64_add_safe+0x220/0x220 [ 76.664137][ T1349] ? percpu_counter_add_batch+0x13d/0x160 [ 76.669696][ T1349] ? blkcg_maybe_throttle_current+0x17d/0x9e0 [ 76.675602][ T1349] __se_sys_clock_nanosleep+0x1a1/0x3b0 [ 76.680979][ T1349] ? __x64_sys_clock_nanosleep+0xb0/0xb0 [ 76.686532][ T1349] ? fpu__clear_all+0x20/0x20 [ 76.691049][ T1349] __x64_sys_clock_nanosleep+0x9b/0xb0 [ 76.697126][ T1349] do_syscall_64+0x34/0x70 [ 76.701464][ T1349] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 76.707192][ T1349] RIP: 0033:0x7ff4f3b53f65 [ 76.711533][ T1349] Code: 24 0c 89 3c 24 48 89 4c 24 18 e8 c6 57 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 8b 74 24 0c 8b 3c 24 b8 e6 00 00 00 0f 05 <44> 89 c7 48 89 04 24 e8 1f 58 ff ff 48 8b 04 24 48 83 c4 28 f7 d8 [ 76.730981][ T1349] RSP: 002b:00007ff4f275cfa0 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6 [ 76.739313][ T1349] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007ff4f3b53f65 [ 76.747137][ T1349] RDX: 00007ff4f275cfe0 RSI: 0000000000000000 RDI: 0000000000000000 [ 76.754938][ T1349] RBP: 00007ff4f275d090 R08: 0000000000000000 R09: 0000000000000000 [ 76.762733][ T1349] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 76.770542][ T1349] R13: 0000000000000000 R14: 00007ff4f3cbe130 R15: 00007fff3781be38 [ 76.828368][ T1016] usb 2-1: Using ep0 maxpacket: 16 [ 76.849792][ T1348] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 76.858668][ T1348] ext4 filesystem being mounted at /45/file0 supports timestamps until 2038 (0x7fffffff) [ 76.870448][ T1348] EXT4-fs error (device loop3) in ext4_do_update_inode:5275: error 27 [ 76.878967][ T1348] EXT4-fs error (device loop3): ext4_dirty_inode:6079: inode #2: comm syz.3.237: mark_inode_dirty error [ 76.890437][ T1348] EXT4-fs error (device loop3) in ext4_do_update_inode:5275: error 27 [ 76.898637][ T1348] EXT4-fs error (device loop3): __ext4_ext_dirty:182: inode #2: comm syz.3.237: mark_inode_dirty error [ 76.946987][ T464] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 76.948415][ T1016] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 76.964510][ T1016] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 76.977573][ T1016] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 76.986436][ T1016] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.996744][ T1016] usb 2-1: config 0 descriptor?? [ 77.002711][ T1354] FAULT_INJECTION: forcing a failure. [ 77.002711][ T1354] name failslab, interval 1, probability 0, space 0, times 0 [ 77.015304][ T1354] CPU: 0 PID: 1354 Comm: syz.2.238 Not tainted 5.10.223-syzkaller-01561-g0890c03b8b7d #0 [ 77.024909][ T1354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 77.034803][ T1354] Call Trace: [ 77.037935][ T1354] dump_stack_lvl+0x1e2/0x24b [ 77.042440][ T1354] ? panic+0x812/0x812 [ 77.046519][ T1354] ? bfq_pos_tree_add_move+0x43b/0x43b [ 77.051822][ T1354] dump_stack+0x15/0x17 [ 77.055807][ T1354] should_fail+0x3c6/0x510 [ 77.060063][ T1354] ? pfkey_flush+0x171/0x5a0 [ 77.064486][ T1354] __should_failslab+0xa4/0xe0 [ 77.069086][ T1354] should_failslab+0x9/0x20 [ 77.073424][ T1354] __kmalloc_track_caller+0x5f/0x320 [ 77.078550][ T1354] ? kmem_cache_alloc+0x168/0x2e0 [ 77.083409][ T1354] ? __alloc_skb+0x80/0x510 [ 77.087746][ T1354] ? pfkey_flush+0x171/0x5a0 [ 77.092168][ T1354] __alloc_skb+0xbc/0x510 [ 77.096334][ T1354] pfkey_flush+0x171/0x5a0 [ 77.100589][ T1354] ? pfkey_register+0x8d0/0x8d0 [ 77.105269][ T1354] ? kfree_skb+0xc1/0x320 [ 77.109435][ T1354] ? pfkey_broadcast+0x2dd/0x2f0 [ 77.114212][ T1354] pfkey_sendmsg+0xb65/0xfa0 [ 77.118638][ T1354] ? pfkey_release+0x340/0x340 [ 77.123239][ T1354] ? selinux_socket_sendmsg+0x243/0x340 [ 77.128626][ T1354] ? kmem_cache_free+0xa9/0x1e0 [ 77.133305][ T1354] ? check_stack_object+0x114/0x130 [ 77.138338][ T1354] ? security_socket_sendmsg+0x82/0xb0 [ 77.143631][ T1354] ? pfkey_release+0x340/0x340 [ 77.148234][ T1354] ____sys_sendmsg+0x59e/0x8f0 [ 77.152830][ T1354] ? __sys_sendmsg_sock+0x40/0x40 [ 77.157691][ T1354] ? import_iovec+0xe5/0x120 [ 77.162120][ T1354] ___sys_sendmsg+0x252/0x2e0 [ 77.166633][ T1354] ? __sys_sendmsg+0x280/0x280 [ 77.171231][ T1354] ? rw_verify_area+0x1c3/0x360 [ 77.175923][ T1354] ? __fdget+0x1bc/0x240 [ 77.179999][ T1354] __se_sys_sendmsg+0x1b1/0x280 [ 77.184685][ T1354] ? __x64_sys_sendmsg+0x90/0x90 [ 77.189459][ T1354] ? ksys_write+0x260/0x2c0 [ 77.193800][ T1354] ? debug_smp_processor_id+0x17/0x20 [ 77.199006][ T1354] __x64_sys_sendmsg+0x7b/0x90 [ 77.203606][ T1354] do_syscall_64+0x34/0x70 [ 77.208035][ T1354] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 77.213765][ T1354] RIP: 0033:0x7f4315e38e79 [ 77.218018][ T1354] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 77.237454][ T1354] RSP: 002b:00007f4314ab6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 77.245696][ T1354] RAX: ffffffffffffffda RBX: 00007f4315fd4f80 RCX: 00007f4315e38e79 [ 77.253508][ T1354] RDX: 0000000000000000 RSI: 0000000020000400 RDI: 0000000000000006 [ 77.261318][ T1354] RBP: 00007f4314ab6090 R08: 0000000000000000 R09: 0000000000000000 [ 77.269130][ T1354] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 77.276942][ T1354] R13: 0000000000000000 R14: 00007f4315fd4f80 R15: 00007ffc7953f8a8 [ 77.298813][ T1016] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 77.528432][ T464] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 77.539208][ T464] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 77.549040][ T464] usb 1-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 77.558015][ T464] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.567866][ T464] usb 1-1: config 0 descriptor?? [ 77.574063][ T1326] EXT4-fs (loop1): mounted filesystem without journal. Opts: min_batch_time=0x0000000000000004,,errors=continue [ 77.646759][ T1360] F2FS-fs (loop2): Invalid segment/section count (31, 24 x 1) [ 77.654133][ T1360] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 77.665311][ T1360] F2FS-fs (loop2): invalid crc value [ 77.690187][ T1360] F2FS-fs (loop2): Found nat_bits in checkpoint [ 77.716734][ T1360] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 77.723630][ T1360] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 77.808496][ T1371] xt_CT: No such helper "snmp_trap" [ 77.951953][ T1373] netlink: 68 bytes leftover after parsing attributes in process `syz.2.239'. [ 77.963035][ T1371] EXT4-fs (loop1): re-mounted. Opts: [ 78.203118][ T286] attempt to access beyond end of device [ 78.203118][ T286] loop2: rw=2049, want=45104, limit=40427 [ 78.268370][ T1017] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 78.335671][ T1375] EXT4-fs error (device loop4): ext4_read_inode_bitmap:140: comm syz.4.242: Invalid inode bitmap blk 4 in block_group 0 [ 78.348468][ T1375] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,quota,data_err=abort,noload,nobarrier,lazytime,,errors=continue [ 78.578492][ T464] usbhid 1-1:0.0: can't add hid device: -71 [ 78.585010][ T464] usbhid: probe of 1-1:0.0 failed with error -71 [ 78.613820][ T464] usb 1-1: USB disconnect, device number 9 [ 78.619630][ T291] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 78.718417][ T1017] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 78.729326][ T1017] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 78.738910][ T1017] usb 4-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 78.747820][ T1017] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.758202][ T1017] usb 4-1: config 0 descriptor?? [ 78.999368][ T1366] udc-core: couldn't find an available UDC or it's busy [ 79.006327][ T1366] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 79.048408][ T291] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 79.059339][ T291] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 79.068850][ T291] usb 3-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 79.113828][ T1018] usb 2-1: USB disconnect, device number 10 [ 79.127264][ T291] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.135795][ T291] usb 3-1: config 0 descriptor?? [ 79.279279][ T1017] samsung 0003:0419:0600.0011: unknown main item tag 0x0 [ 79.286566][ T1017] samsung 0003:0419:0600.0011: unknown main item tag 0x0 [ 79.293820][ T1017] samsung 0003:0419:0600.0011: unknown main item tag 0x0 [ 79.301485][ T1017] samsung 0003:0419:0600.0011: unknown main item tag 0x0 [ 79.308535][ T1017] samsung 0003:0419:0600.0011: unknown main item tag 0x0 [ 79.318269][ T1017] samsung 0003:0419:0600.0011: hidraw0: USB HID v0.00 Device [HID 0419:0600] on usb-dummy_hcd.3-1/input0 [ 79.421808][ T1394] syz.1.246[1394] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 79.422097][ T1394] syz.1.246[1394] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 79.458414][ T464] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 79.506553][ T25] usb 4-1: USB disconnect, device number 15 [ 79.619890][ T291] isku 0003:1E7D:319C.0012: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.2-1/input0 [ 79.648464][ T53] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 79.838558][ T464] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 79.849502][ T464] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 79.862907][ T464] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 79.872226][ T464] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.881149][ T464] usb 1-1: config 0 descriptor?? [ 80.008454][ T53] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 80.019133][ T53] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 80.030163][ T53] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 80.031575][ T25] usb 3-1: USB disconnect, device number 12 [ 80.040149][ T53] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 80.059215][ T53] usb 5-1: New USB device found, idVendor=044f, idProduct=b653, bcdDevice= 0.00 [ 80.068243][ T53] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.089180][ T53] usb 5-1: config 0 descriptor?? [ 80.148614][ T1398] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 80.161935][ T1398] EXT4-fs (loop1): 1 orphan inode deleted [ 80.167810][ T1398] EXT4-fs (loop1): 1 truncate cleaned up [ 80.173437][ T1398] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 80.301249][ T1396] F2FS-fs (loop3): Invalid segment/section count (31, 24 x 1) [ 80.309222][ T1396] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 80.318886][ T1396] F2FS-fs (loop3): Unrecognized mount option "iżline_xattr" or missing value [ 80.358397][ T1404] fuse: Unknown parameter 'EEmīæÉvf`' [ 80.449854][ T464] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 80.488571][ T464] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 80.499315][ T464] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 80.506545][ T464] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 80.513974][ T464] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 80.521673][ T464] plantronics 0003:047F:FFFF.0013: No inputs registered, leaving [ 80.532824][ T464] plantronics 0003:047F:FFFF.0013: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 80.780635][ T53] thrustmaster 0003:044F:B653.0014: unbalanced delimiter at end of report description [ 80.783832][ T464] usb 1-1: USB disconnect, device number 10 [ 80.790271][ T53] thrustmaster 0003:044F:B653.0014: parse failed [ 80.802076][ T53] thrustmaster: probe of 0003:044F:B653.0014 failed with error -22 [ 80.822316][ T24] audit: type=1400 audit(1724355022.000:247): avc: denied { getopt } for pid=1407 comm="syz.2.249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 80.923935][ T53] usb 5-1: USB disconnect, device number 15 [ 80.954920][ T1414] FAULT_INJECTION: forcing a failure. [ 80.954920][ T1414] name failslab, interval 1, probability 0, space 0, times 0 [ 80.957731][ T1410] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 80.967761][ T1414] CPU: 0 PID: 1414 Comm: syz.3.251 Not tainted 5.10.223-syzkaller-01561-g0890c03b8b7d #0 [ 80.976217][ T1410] ext4 filesystem being mounted at /49/file0 supports timestamps until 2038 (0x7fffffff) [ 80.985742][ T1414] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 80.985747][ T1414] Call Trace: [ 80.985770][ T1414] dump_stack_lvl+0x1e2/0x24b [ 80.985778][ T1414] ? panic+0x812/0x812 [ 80.985786][ T1414] ? bfq_pos_tree_add_move+0x43b/0x43b [ 80.985794][ T1414] dump_stack+0x15/0x17 [ 80.985803][ T1414] should_fail+0x3c6/0x510 [ 80.985813][ T1414] ? skb_clone+0x1de/0x370 [ 80.985833][ T1414] __should_failslab+0xa4/0xe0 [ 81.003767][ T1410] EXT4-fs error (device loop2) in ext4_do_update_inode:5275: error 27 [ 81.005380][ T1414] should_failslab+0x9/0x20 [ 81.008699][ T1410] EXT4-fs error (device loop2): ext4_dirty_inode:6079: inode #2: comm syz.2.250: mark_inode_dirty error [ 81.013013][ T1414] kmem_cache_alloc+0x3d/0x2e0 [ 81.017129][ T1410] EXT4-fs error (device loop2) in ext4_do_update_inode:5275: error 27 [ 81.022278][ T1414] ? slab_post_alloc_hook+0x80/0x2f0 [ 81.022289][ T1414] skb_clone+0x1de/0x370 [ 81.022300][ T1414] pfkey_broadcast_one+0x9f/0x330 [ 81.022308][ T1414] pfkey_broadcast+0x2c7/0x2f0 [ 81.022316][ T1414] pfkey_flush+0x231/0x5a0 [ 81.022333][ T1414] ? pfkey_register+0x8d0/0x8d0 [ 81.026489][ T1410] EXT4-fs error (device loop2): __ext4_ext_dirty:182: inode #2: comm syz.2.250: mark_inode_dirty error [ 81.030610][ T1414] ? kfree_skb+0xc1/0x320 [ 81.030625][ T1414] ? pfkey_broadcast+0x2dd/0x2f0 [ 81.030641][ T1414] pfkey_sendmsg+0xb65/0xfa0 [ 81.127348][ T1414] ? pfkey_release+0x340/0x340 [ 81.131960][ T1414] ? selinux_socket_sendmsg+0x243/0x340 [ 81.137313][ T1414] ? kmem_cache_free+0xa9/0x1e0 [ 81.142198][ T1414] ? check_stack_object+0x114/0x130 [ 81.147209][ T1414] ? security_socket_sendmsg+0x82/0xb0 [ 81.152507][ T1414] ? pfkey_release+0x340/0x340 [ 81.157096][ T1414] ____sys_sendmsg+0x59e/0x8f0 [ 81.161710][ T1414] ? __sys_sendmsg_sock+0x40/0x40 [ 81.166557][ T1414] ? import_iovec+0xe5/0x120 [ 81.170985][ T1414] ___sys_sendmsg+0x252/0x2e0 [ 81.175502][ T1414] ? __sys_sendmsg+0x280/0x280 [ 81.180262][ T1414] ? rw_verify_area+0x1c3/0x360 [ 81.184958][ T1414] ? __fdget+0x1bc/0x240 [ 81.189035][ T1414] __se_sys_sendmsg+0x1b1/0x280 [ 81.193712][ T1414] ? __x64_sys_sendmsg+0x90/0x90 [ 81.198482][ T1414] ? ksys_write+0x260/0x2c0 [ 81.203009][ T1414] ? debug_smp_processor_id+0x17/0x20 [ 81.208208][ T1414] __x64_sys_sendmsg+0x7b/0x90 [ 81.212832][ T1414] do_syscall_64+0x34/0x70 [ 81.217065][ T1414] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 81.222797][ T1414] RIP: 0033:0x7ffa17888e79 [ 81.227043][ T1414] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 81.246486][ T1414] RSP: 002b:00007ffa16506038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 81.254729][ T1414] RAX: ffffffffffffffda RBX: 00007ffa17a24f80 RCX: 00007ffa17888e79 [ 81.262536][ T1414] RDX: 0000000000000000 RSI: 0000000020000400 RDI: 0000000000000006 [ 81.270490][ T1414] RBP: 00007ffa16506090 R08: 0000000000000000 R09: 0000000000000000 [ 81.278263][ T1414] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 81.286067][ T1414] R13: 0000000000000000 R14: 00007ffa17a24f80 R15: 00007ffca9eeea98 [ 81.302247][ T624] EXT4-fs error (device loop1): htree_dirblock_to_tree:1091: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=12, inode=2, rec_len=12, size=1024 fake=0 [ 81.498838][ T1422] EXT4-fs error (device loop0): ext4_read_inode_bitmap:140: comm syz.0.254: Invalid inode bitmap blk 4 in block_group 0 [ 81.516240][ T1422] EXT4-fs (loop0): mounted filesystem without journal. Opts: noblock_validity,quota,data_err=abort,noload,nobarrier,lazytime,,errors=continue [ 81.612629][ T1427] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.620369][ T1427] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.627788][ T1427] device bridge_slave_0 entered promiscuous mode [ 81.634729][ T1427] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.641610][ T1427] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.684246][ T1427] device bridge_slave_1 entered promiscuous mode [ 81.949998][ T1434] Unknown ioctl 35123 [ 82.022524][ T1427] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.029515][ T1427] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.036685][ T1427] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.038591][ T1438] serio: Serial port ptm0 [ 82.043507][ T1427] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.096961][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 82.107039][ T25] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.176853][ T25] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.199672][ T464] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 82.209916][ T464] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.216865][ T464] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.257150][ T464] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 82.276786][ T1445] syz.2.258[1445] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 82.277113][ T1445] syz.2.258[1445] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 82.468504][ T464] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.486378][ T464] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.530665][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 82.549501][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 82.578797][ T1017] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 82.587029][ T1017] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 82.600629][ T1427] device veth0_vlan entered promiscuous mode [ 82.618623][ T1018] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 82.626620][ T1018] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 82.646233][ T1427] device veth1_macvtap entered promiscuous mode [ 82.648934][ T1454] exFAT-fs (loop4): invalid fs_name [ 82.656977][ T1017] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 82.669238][ T1017] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 82.675075][ T1454] exFAT-fs (loop4): failed to read boot sector [ 82.676851][ T1017] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 82.682580][ T1454] exFAT-fs (loop4): failed to recognize exfat type [ 82.698023][ T1017] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 82.706324][ T1017] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 82.721670][ T1018] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 82.730573][ T1018] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 82.739283][ T1018] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 82.747586][ T1018] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 82.798491][ T53] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 82.829170][ T604] device bridge_slave_1 left promiscuous mode [ 82.833675][ T1452] F2FS-fs (loop3): Invalid segment/section count (31, 24 x 1) [ 82.835228][ T604] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.851100][ T1452] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 82.863066][ T604] device bridge_slave_0 left promiscuous mode [ 82.865606][ T1452] F2FS-fs (loop3): Unrecognized mount option "iżline_xattr" or missing value [ 82.869331][ T604] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.897186][ T604] device veth1_macvtap left promiscuous mode [ 82.904691][ T604] device veth0_vlan left promiscuous mode [ 83.142574][ T464] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 83.230561][ T53] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 83.244752][ T53] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 83.264708][ T53] usb 1-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 83.276797][ T53] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.388415][ T464] usb 2-1: Using ep0 maxpacket: 16 [ 83.435186][ T53] usb 1-1: config 0 descriptor?? [ 83.533202][ T1469] erofs: (device loop3): mounted with root inode @ nid 36. [ 83.557580][ T464] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 83.568031][ T464] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 83.581574][ T464] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 83.591300][ T464] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.600328][ T464] usb 2-1: config 0 descriptor?? [ 83.640098][ T464] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 83.890768][ T24] audit: type=1400 audit(1724355025.050:248): avc: denied { setopt } for pid=1449 comm="syz.0.260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 83.926527][ T1450] fuse: Unknown parameter 'fd0x0000000000000009' [ 83.933282][ T24] audit: type=1400 audit(1724355025.110:249): avc: denied { bind } for pid=1449 comm="syz.0.260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 83.973681][ T1458] EXT4-fs (loop1): mounted filesystem without journal. Opts: min_batch_time=0x0000000000000004,,errors=continue [ 84.080007][ T1483] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 84.118703][ T1483] ext4 filesystem being mounted at /53/file0 supports timestamps until 2038 (0x7fffffff) [ 84.140686][ T1488] xt_CT: No such helper "snmp_trap" [ 84.178635][ T1488] EXT4-fs (loop1): re-mounted. Opts: [ 84.271543][ T1483] EXT4-fs error (device loop2) in ext4_do_update_inode:5275: error 27 [ 84.283429][ T1483] EXT4-fs error (device loop2): ext4_dirty_inode:6079: inode #2: comm syz.2.268: mark_inode_dirty error [ 84.295808][ T1483] EXT4-fs error (device loop2) in ext4_do_update_inode:5275: error 27 [ 84.296212][ T53] isku 0003:1E7D:319C.0015: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.0-1/input0 [ 84.304654][ T1483] EXT4-fs error (device loop2): __ext4_ext_dirty:182: inode #2: comm syz.2.268: mark_inode_dirty error [ 84.409760][ T24] audit: type=1404 audit(1724355025.580:250): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 84.428136][ T24] audit: type=1404 audit(1724355025.580:251): enforcing=0 old_enforcing=1 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 84.443770][ T24] audit: type=1400 audit(1724355025.580:252): avc: denied { create } for pid=1489 comm="syz.4.269" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 84.464364][ T24] audit: type=1400 audit(1724355025.580:253): avc: denied { ioctl } for pid=1489 comm="syz.4.269" path="socket:[18377]" dev="sockfs" ino=18377 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 84.493302][ T24] audit: type=1400 audit(1724355025.590:254): avc: denied { prog_load } for pid=1489 comm="syz.4.269" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 84.513980][ T24] audit: type=1400 audit(1724355025.590:255): avc: denied { map_create } for pid=1489 comm="syz.4.269" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 84.534232][ T24] audit: type=1400 audit(1724355025.590:256): avc: denied { bpf } for pid=1489 comm="syz.4.269" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 84.684424][ T443] usb 1-1: USB disconnect, device number 11 [ 85.002903][ T1497] EXT4-fs error (device loop4): ext4_read_inode_bitmap:140: comm syz.4.271: Invalid inode bitmap blk 4 in block_group 0 [ 85.015479][ T1497] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,quota,data_err=abort,noload,nobarrier,lazytime,,errors=continue [ 85.158659][ T443] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 85.452782][ T1504] EXT4-fs error (device loop0): ext4_read_inode_bitmap:140: comm syz.0.272: Invalid inode bitmap blk 4 in block_group 0 [ 85.465390][ T1504] EXT4-fs (loop0): mounted filesystem without journal. Opts: noblock_validity,quota,data_err=abort,noload,nobarrier,lazytime,,errors=continue [ 85.768417][ T443] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 85.779643][ T443] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 85.790073][ T443] usb 3-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 85.802382][ T443] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.831560][ T443] usb 3-1: config 0 descriptor?? [ 85.881588][ T1016] usb 2-1: USB disconnect, device number 11 [ 85.889500][ T24] kauditd_printk_skb: 21 callbacks suppressed [ 85.889509][ T24] audit: type=1400 audit(1724355027.070:278): avc: denied { create } for pid=1511 comm="syz.4.273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 85.917012][ T1512] FAULT_INJECTION: forcing a failure. [ 85.917012][ T1512] name failslab, interval 1, probability 0, space 0, times 0 [ 85.918786][ T24] audit: type=1400 audit(1724355027.090:279): avc: denied { write } for pid=1511 comm="syz.4.273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 85.929725][ T1512] CPU: 1 PID: 1512 Comm: syz.4.273 Not tainted 5.10.223-syzkaller-01561-g0890c03b8b7d #0 [ 85.958316][ T1512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 85.968366][ T1512] Call Trace: [ 85.971477][ T1512] dump_stack_lvl+0x1e2/0x24b [ 85.976051][ T1512] ? panic+0x812/0x812 [ 85.979972][ T1512] ? bfq_pos_tree_add_move+0x43b/0x43b [ 85.985258][ T1512] dump_stack+0x15/0x17 [ 85.989255][ T1512] should_fail+0x3c6/0x510 [ 85.993501][ T1512] ? pfkey_sendmsg+0x1c2/0xfa0 [ 85.998101][ T1512] __should_failslab+0xa4/0xe0 [ 86.002719][ T1512] should_failslab+0x9/0x20 [ 86.007214][ T1512] __kmalloc_track_caller+0x5f/0x320 [ 86.012308][ T1512] ? kmem_cache_alloc+0x168/0x2e0 [ 86.017176][ T1512] ? avc_has_perm+0x20b/0x400 [ 86.021673][ T1512] ? __alloc_skb+0x80/0x510 [ 86.026019][ T1512] ? pfkey_sendmsg+0x1c2/0xfa0 [ 86.030695][ T1512] __alloc_skb+0xbc/0x510 [ 86.034870][ T1512] pfkey_sendmsg+0x1c2/0xfa0 [ 86.039396][ T1512] ? unwind_get_return_address+0x4d/0x90 [ 86.044857][ T1512] ? pfkey_release+0x340/0x340 [ 86.049461][ T1512] ? selinux_socket_sendmsg+0x243/0x340 [ 86.054929][ T1512] ? selinux_socket_accept+0x5b0/0x5b0 [ 86.060218][ T1512] ? kmem_cache_free+0xa9/0x1e0 [ 86.064906][ T1512] ? check_stack_object+0x114/0x130 [ 86.069930][ T1512] ? security_socket_sendmsg+0x82/0xb0 [ 86.075211][ T1512] ? pfkey_release+0x340/0x340 [ 86.079818][ T1512] ____sys_sendmsg+0x59e/0x8f0 [ 86.084418][ T1512] ? __sys_sendmsg_sock+0x40/0x40 [ 86.089284][ T1512] ? import_iovec+0xe5/0x120 [ 86.093700][ T1512] ___sys_sendmsg+0x252/0x2e0 [ 86.098211][ T1512] ? __sys_sendmsg+0x280/0x280 [ 86.102813][ T1512] ? rw_verify_area+0x1c3/0x360 [ 86.107586][ T1512] ? __fdget+0x1bc/0x240 [ 86.111662][ T1512] __se_sys_sendmsg+0x1b1/0x280 [ 86.116354][ T1512] ? __x64_sys_sendmsg+0x90/0x90 [ 86.121123][ T1512] ? ksys_write+0x260/0x2c0 [ 86.125465][ T1512] ? debug_smp_processor_id+0x17/0x20 [ 86.130670][ T1512] __x64_sys_sendmsg+0x7b/0x90 [ 86.135270][ T1512] do_syscall_64+0x34/0x70 [ 86.139612][ T1512] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 86.145359][ T1512] RIP: 0033:0x7ff4f3b21e79 [ 86.149594][ T1512] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 86.169044][ T1512] RSP: 002b:00007ff4f279f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 86.177371][ T1512] RAX: ffffffffffffffda RBX: 00007ff4f3cbdf80 RCX: 00007ff4f3b21e79 [ 86.185263][ T1512] RDX: 0000000000000000 RSI: 0000000020000400 RDI: 0000000000000006 [ 86.193186][ T1512] RBP: 00007ff4f279f090 R08: 0000000000000000 R09: 0000000000000000 [ 86.200985][ T1512] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 86.208796][ T1512] R13: 0000000000000000 R14: 00007ff4f3cbdf80 R15: 00007fff3781be38 [ 86.270580][ T1515] syz.1.274[1515] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 86.270639][ T1515] syz.1.274[1515] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 86.488666][ T1495] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 86.513244][ T24] audit: type=1400 audit(1724355027.690:280): avc: denied { mount } for pid=1494 comm="syz.2.270" name="/" dev="loop2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 86.540782][ T1518] F2FS-fs (loop4): Invalid segment/section count (31, 24 x 1) [ 86.548238][ T1518] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 86.556831][ T1518] F2FS-fs (loop4): Unrecognized mount option "iżline_xattr" or missing value [ 86.603132][ T1521] F2FS-fs (loop0): Invalid segment/section count (31, 24 x 1) [ 86.610483][ T1521] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 86.618477][ T1521] F2FS-fs (loop0): Unrecognized mount option "iżline_xattr" or missing value [ 86.950875][ T24] audit: type=1400 audit(1724355028.110:281): avc: denied { mounton } for pid=1520 comm="syz.0.276" path="/proc/34/task" dev="proc" ino=18421 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 86.973433][ T24] audit: type=1400 audit(1724355028.110:282): avc: denied { mount } for pid=1520 comm="syz.0.276" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 87.154607][ T1531] ’’’’’’: renamed from vlan0 [ 87.223325][ T24] audit: type=1400 audit(1724355028.120:283): avc: denied { read } for pid=1520 comm="syz.0.276" dev="nsfs" ino=4026532624 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 87.258799][ T24] audit: type=1400 audit(1724355028.120:284): avc: denied { open } for pid=1520 comm="syz.0.276" path="net:[4026532624]" dev="nsfs" ino=4026532624 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 87.301583][ T24] audit: type=1400 audit(1724355028.120:285): avc: denied { create } for pid=1520 comm="syz.0.276" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 87.322623][ T24] audit: type=1400 audit(1724355028.120:286): avc: denied { write } for pid=1520 comm="syz.0.276" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 87.344359][ T24] audit: type=1400 audit(1724355028.120:287): avc: denied { read } for pid=1520 comm="syz.0.276" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 87.429843][ T1539] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 87.438798][ T1539] ext4 filesystem being mounted at /3/file0 supports timestamps until 2038 (0x7fffffff) [ 87.450588][ T1539] EXT4-fs error (device loop1) in ext4_do_update_inode:5275: error 27 [ 87.458975][ T1539] EXT4-fs error (device loop1): ext4_dirty_inode:6079: inode #2: comm syz.1.280: mark_inode_dirty error [ 87.470222][ T1539] EXT4-fs error (device loop1) in ext4_do_update_inode:5275: error 27 [ 87.478617][ T1539] EXT4-fs error (device loop1): __ext4_ext_dirty:182: inode #2: comm syz.1.280: mark_inode_dirty error [ 87.558464][ T1016] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 87.588990][ T1547] serio: Serial port ptm0 [ 87.648390][ T1017] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 87.918416][ T1016] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 87.929240][ T1016] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 87.938846][ T1016] usb 1-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 87.947617][ T1016] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.956020][ T1016] usb 1-1: config 0 descriptor?? [ 87.968454][ T1018] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 88.008439][ T1017] usb 5-1: config index 0 descriptor too short (expected 45, got 36) [ 88.016549][ T1017] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 88.027703][ T1017] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 88.038798][ T1017] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 88.051517][ T1017] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 88.060370][ T1017] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.068668][ T1017] usb 5-1: config 0 descriptor?? [ 88.088415][ T1541] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 88.328383][ T1018] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 88.339264][ T1018] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 88.349130][ T1018] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 88.355235][ T1553] EXT4-fs error (device loop2): ext4_read_inode_bitmap:140: comm syz.2.284: Invalid inode bitmap blk 4 in block_group 0 [ 88.362366][ T1018] usb 2-1: New USB device found, idVendor=05ac, idProduct=0246, bcdDevice= 0.00 [ 88.374595][ T1553] EXT4-fs (loop2): mounted filesystem without journal. Opts: noblock_validity,quota,data_err=abort,noload,nobarrier,lazytime,,errors=continue [ 88.383576][ T1018] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.397708][ T443] usbhid 3-1:0.0: can't add hid device: -71 [ 88.406614][ T1018] usb 2-1: config 0 descriptor?? [ 88.415794][ T443] usbhid: probe of 3-1:0.0 failed with error -71 [ 88.431061][ T443] usb 3-1: USB disconnect, device number 13 [ 88.829338][ T1017] plantronics 0003:047F:FFFF.0016: unknown main item tag 0xd [ 88.837625][ T1017] plantronics 0003:047F:FFFF.0016: No inputs registered, leaving [ 88.846621][ T1017] plantronics 0003:047F:FFFF.0016: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 88.918711][ T1537] F2FS-fs (loop0): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 88.926652][ T1537] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 88.936053][ T1537] F2FS-fs (loop0): invalid crc value [ 89.108853][ T443] usb 5-1: USB disconnect, device number 16 [ 89.149830][ T1537] F2FS-fs (loop0): Found nat_bits in checkpoint [ 89.179942][ T1537] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 89.187062][ T1537] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 89.221505][ T604] attempt to access beyond end of device [ 89.221505][ T604] loop0: rw=2049, want=40992, limit=40427 [ 89.234058][ T1537] overlayfs: cleanup of 'file0/work' failed (-5) [ 89.246582][ T1537] overlayfs: failed to create directory ./file0/work (errno: 17); mounting read-only [ 89.279194][ T1016] holtek_kbd 0003:04D9:A055.0017: unknown main item tag 0x0 [ 89.286536][ T1016] holtek_kbd 0003:04D9:A055.0017: item fetching failed at offset 3/5 [ 89.294937][ T1016] holtek_kbd: probe of 0003:04D9:A055.0017 failed with error -22 [ 89.446776][ T1575] syz.2.287[1575] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 89.447070][ T1575] syz.2.287[1575] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 89.520568][ T443] usb 1-1: USB disconnect, device number 12 [ 89.718974][ T1583] F2FS-fs (loop4): Invalid segment/section count (31, 24 x 1) [ 89.726347][ T1583] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 89.734463][ T1583] F2FS-fs (loop4): Unrecognized mount option "iżline_xattr" or missing value [ 90.127028][ T1244] attempt to access beyond end of device [ 90.127028][ T1244] loop0: rw=524288, want=45072, limit=40427 [ 90.140311][ T1244] attempt to access beyond end of device [ 90.140311][ T1244] loop0: rw=0, want=45072, limit=40427 [ 90.211548][ T1590] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 90.220652][ T1590] ext4 filesystem being mounted at /60/file0 supports timestamps until 2038 (0x7fffffff) [ 90.274822][ T1590] EXT4-fs error (device loop2) in ext4_do_update_inode:5275: error 27 [ 90.284208][ T1590] EXT4-fs error (device loop2): ext4_dirty_inode:6079: inode #2: comm syz.2.292: mark_inode_dirty error [ 90.295670][ T1590] EXT4-fs error (device loop2) in ext4_do_update_inode:5275: error 27 [ 90.304275][ T1590] EXT4-fs error (device loop2): __ext4_ext_dirty:182: inode #2: comm syz.2.292: mark_inode_dirty error [ 90.404708][ T1595] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.411692][ T1595] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.420045][ T1595] device bridge_slave_0 entered promiscuous mode [ 90.433161][ T1595] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.440151][ T1595] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.447420][ T1595] device bridge_slave_1 entered promiscuous mode [ 90.502748][ T1595] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.509651][ T1595] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.516698][ T1595] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.523568][ T1595] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.543522][ T1017] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 90.551170][ T1017] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.559688][ T1017] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.579059][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 90.589156][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 90.597124][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.603977][ T291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.611159][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 90.620084][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.626911][ T291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.634106][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 90.641837][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 90.654341][ T1595] device veth0_vlan entered promiscuous mode [ 90.660435][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 90.668150][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 90.675397][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 90.687181][ T1595] device veth1_macvtap entered promiscuous mode [ 90.693980][ T443] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 90.727961][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 90.736645][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 90.808391][ T1018] usbhid 2-1:0.0: can't add hid device: -71 [ 90.814157][ T1018] usbhid: probe of 2-1:0.0 failed with error -71 [ 90.823106][ T1018] usb 2-1: USB disconnect, device number 12 [ 90.830556][ T604] device bridge_slave_1 left promiscuous mode [ 90.836522][ T604] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.843766][ T604] device bridge_slave_0 left promiscuous mode [ 90.849764][ T604] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.857103][ T604] device veth1_macvtap left promiscuous mode [ 90.858359][ T1016] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 90.870626][ T604] device veth0_vlan left promiscuous mode [ 91.178389][ T1018] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 91.228401][ T1016] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 91.239149][ T1016] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 91.248666][ T1016] usb 3-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 91.257493][ T1016] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.265792][ T1016] usb 3-1: config 0 descriptor?? [ 91.698457][ T24] kauditd_printk_skb: 45 callbacks suppressed [ 91.698491][ T24] audit: type=1400 audit(1724355032.850:333): avc: denied { write } for pid=1617 comm="syz.0.299" name="event0" dev="devtmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 91.734916][ T24] audit: type=1400 audit(1724355032.850:334): avc: denied { open } for pid=1617 comm="syz.0.299" path="/dev/input/event0" dev="devtmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 91.760328][ T24] audit: type=1400 audit(1724355032.850:335): avc: denied { setopt } for pid=1617 comm="syz.0.299" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 91.781191][ T24] audit: type=1400 audit(1724355032.860:336): avc: denied { create } for pid=1617 comm="syz.0.299" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 91.801224][ T24] audit: type=1400 audit(1724355032.860:337): avc: denied { bind } for pid=1617 comm="syz.0.299" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 91.820941][ T24] audit: type=1400 audit(1724355032.860:338): avc: denied { ioctl } for pid=1619 comm="syz.4.300" path="socket:[19242]" dev="sockfs" ino=19242 ioctlcmd=0x8955 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 91.845484][ T24] audit: type=1400 audit(1724355032.910:339): avc: denied { write } for pid=1617 comm="syz.0.299" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 91.969206][ T1016] zydacron 0003:13EC:0006.0018: unknown main item tag 0x0 [ 91.976223][ T1016] zydacron 0003:13EC:0006.0018: unknown main item tag 0x0 [ 91.983151][ T1016] zydacron 0003:13EC:0006.0018: unknown main item tag 0x0 [ 91.990142][ T1018] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 92.000755][ T1016] zydacron 0003:13EC:0006.0018: unknown main item tag 0x0 [ 92.007656][ T1018] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 92.017272][ T1016] zydacron 0003:13EC:0006.0018: item fetching failed at offset 4/5 [ 92.024985][ T1018] usb 2-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 92.033985][ T1016] zydacron 0003:13EC:0006.0018: parse failed [ 92.039999][ T1016] zydacron: probe of 0003:13EC:0006.0018 failed with error -22 [ 92.047390][ T1018] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.056833][ T1018] usb 2-1: config 0 descriptor?? [ 92.171694][ T1606] netlink: 116 bytes leftover after parsing attributes in process `syz.2.295'. [ 92.180791][ T24] audit: type=1400 audit(1724355033.350:340): avc: denied { append } for pid=1600 comm="syz.2.295" name="001" dev="devtmpfs" ino=160 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 92.191166][ T1627] EXT4-fs error (device loop0): ext4_read_inode_bitmap:140: comm syz.0.301: Invalid inode bitmap blk 4 in block_group 0 [ 92.216567][ T1627] EXT4-fs (loop0): mounted filesystem without journal. Opts: noblock_validity,quota,data_err=abort,noload,nobarrier,lazytime,,errors=continue [ 92.619101][ T1018] samsung 0003:0419:0600.0019: unknown main item tag 0x0 [ 92.628102][ T1018] samsung 0003:0419:0600.0019: unknown main item tag 0x0 [ 92.635287][ T1018] samsung 0003:0419:0600.0019: unknown main item tag 0x0 [ 92.642467][ T1018] samsung 0003:0419:0600.0019: unknown main item tag 0x0 [ 92.649605][ T1018] samsung 0003:0419:0600.0019: unknown main item tag 0x0 [ 92.657528][ T1018] samsung 0003:0419:0600.0019: hidraw0: USB HID v0.00 Device [HID 0419:0600] on usb-dummy_hcd.1-1/input0 [ 92.827420][ T291] usb 2-1: USB disconnect, device number 13 [ 93.224851][ T1640] F2FS-fs (loop0): Invalid segment/section count (31, 24 x 1) [ 93.232258][ T1640] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 93.233563][ T1642] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 93.241086][ T1640] F2FS-fs (loop0): invalid crc value [ 93.249210][ T1642] ext4 filesystem being mounted at /43/file0 supports timestamps until 2038 (0x7fffffff) [ 93.255386][ T1640] F2FS-fs (loop0): Found nat_bits in checkpoint [ 93.270374][ T1642] EXT4-fs error (device loop4) in ext4_do_update_inode:5275: error 27 [ 93.278567][ T1642] EXT4-fs error (device loop4): ext4_dirty_inode:6079: inode #2: comm syz.4.304: mark_inode_dirty error [ 93.289711][ T1642] EXT4-fs error (device loop4) in ext4_do_update_inode:5275: error 27 [ 93.298012][ T1642] EXT4-fs error (device loop4): __ext4_ext_dirty:182: inode #2: comm syz.4.304: mark_inode_dirty error [ 93.298572][ T1640] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 93.315733][ T1640] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 93.481803][ T1016] usb 3-1: USB disconnect, device number 14 [ 93.540055][ T1655] netlink: 68 bytes leftover after parsing attributes in process `syz.0.303'. [ 93.559805][ T24] audit: type=1400 audit(1724355034.730:341): avc: denied { connect } for pid=1639 comm="syz.0.303" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 93.763393][ T1658] EXT4-fs error (device loop4): ext4_read_inode_bitmap:140: comm syz.4.306: Invalid inode bitmap blk 4 in block_group 0 [ 93.780618][ T1658] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,quota,data_err=abort,noload,nobarrier,lazytime,,errors=continue [ 93.791377][ T1660] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.801960][ T1660] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.809438][ T1660] device bridge_slave_0 entered promiscuous mode [ 93.813652][ T1652] F2FS-fs (loop1): Invalid segment/section count (31, 24 x 1) [ 93.825727][ T1652] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 93.827318][ T1660] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.833827][ T1652] F2FS-fs (loop1): Unrecognized mount option "iżline_xattr" or missing value [ 93.840925][ T1660] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.856570][ T1660] device bridge_slave_1 entered promiscuous mode [ 93.869140][ T1663] EXT4-fs error (device loop2): ext4_read_inode_bitmap:140: comm syz.2.308: Invalid inode bitmap blk 4 in block_group 0 [ 93.894566][ T1663] EXT4-fs (loop2): mounted filesystem without journal. Opts: noblock_validity,quota,data_err=abort,noload,nobarrier,lazytime,,errors=continue [ 93.941822][ T1660] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.948712][ T1660] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.955792][ T1660] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.962579][ T1660] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.970165][ T1595] attempt to access beyond end of device [ 93.970165][ T1595] loop0: rw=2049, want=45104, limit=40427 [ 93.982914][ T464] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.990358][ T464] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.017984][ T464] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 94.091129][ T464] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 94.113791][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 94.123864][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.130743][ T291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.138590][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 94.146732][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.153612][ T291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.225900][ T443] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 94.234899][ T443] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 94.250207][ T1660] device veth0_vlan entered promiscuous mode [ 94.257488][ T464] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 94.267977][ T464] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 94.288379][ T464] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 94.297005][ T464] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 94.406726][ T464] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 94.467864][ T1660] device veth1_macvtap entered promiscuous mode [ 94.507858][ T1018] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 94.519746][ T1018] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 94.848469][ T1018] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 95.068844][ T409] device bridge_slave_1 left promiscuous mode [ 95.075711][ T409] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.088969][ T409] device bridge_slave_0 left promiscuous mode [ 95.095030][ T409] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.102240][ T1018] usb 1-1: Using ep0 maxpacket: 32 [ 95.108951][ T409] device veth1_macvtap left promiscuous mode [ 95.114915][ T409] device veth0_vlan left promiscuous mode [ 95.359096][ T1018] usb 1-1: config 0 has no interfaces? [ 95.540956][ T1018] usb 1-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 95.549853][ T1018] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.558061][ T1018] usb 1-1: Product: syz [ 95.562148][ T1018] usb 1-1: Manufacturer: syz [ 95.566471][ T1018] usb 1-1: SerialNumber: syz [ 95.571467][ T1018] usb 1-1: config 0 descriptor?? [ 95.835583][ T24] audit: type=1400 audit(1724355036.940:342): avc: denied { create } for pid=1696 comm="syz.4.314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 95.883007][ T1699] EXT4-fs error (device loop1): ext4_read_inode_bitmap:140: comm syz.1.313: Invalid inode bitmap blk 4 in block_group 0 [ 95.895606][ T1699] EXT4-fs (loop1): mounted filesystem without journal. Opts: noblock_validity,quota,data_err=abort,noload,nobarrier,lazytime,,errors=continue [ 95.951359][ T1681] EXT4-fs error (device loop0): ext4_fill_super:4955: inode #2: comm syz.0.309: iget: bad i_size value: -1 [ 95.965455][ T1681] EXT4-fs (loop0): get root inode failed [ 95.971052][ T1681] EXT4-fs (loop0): mount failed [ 96.478508][ T1018] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 96.858385][ T1018] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 96.869063][ T1018] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 96.879717][ T1018] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 96.889212][ T1018] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 96.902022][ T1018] usb 3-1: New USB device found, idVendor=044f, idProduct=b653, bcdDevice= 0.00 [ 96.913157][ T1018] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.924999][ T1018] usb 3-1: config 0 descriptor?? [ 96.930981][ T24] kauditd_printk_skb: 6 callbacks suppressed [ 96.930993][ T24] audit: type=1400 audit(1724355038.110:349): avc: denied { write } for pid=75 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 96.958470][ T24] audit: type=1400 audit(1724355038.110:350): avc: denied { remove_name } for pid=75 comm="syslogd" name="messages" dev="tmpfs" ino=6 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 96.980957][ T24] audit: type=1400 audit(1724355038.110:351): avc: denied { rename } for pid=75 comm="syslogd" name="messages" dev="tmpfs" ino=6 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 97.003299][ T24] audit: type=1400 audit(1724355038.110:352): avc: denied { add_name } for pid=75 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 97.025760][ T24] audit: type=1400 audit(1724355038.110:353): avc: denied { unlink } for pid=75 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 97.047990][ T24] audit: type=1400 audit(1724355038.110:354): avc: denied { create } for pid=75 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 97.069430][ T24] audit: type=1400 audit(1724355038.160:355): avc: denied { read } for pid=1716 comm="syz.4.317" name="event0" dev="devtmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 97.106574][ T1719] syz.1.316[1719] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 97.106843][ T1719] syz.1.316[1719] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 97.264561][ T305] usb 1-1: USB disconnect, device number 13 [ 97.469109][ T1018] thrustmaster 0003:044F:B653.001A: unbalanced delimiter at end of report description [ 97.478751][ T1018] thrustmaster 0003:044F:B653.001A: parse failed [ 97.484906][ T1018] thrustmaster: probe of 0003:044F:B653.001A failed with error -22 [ 97.638376][ T305] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 97.669864][ T1018] usb 3-1: USB disconnect, device number 15 [ 97.719678][ T24] audit: type=1400 audit(1724355038.900:356): avc: denied { create } for pid=1723 comm="syz.0.318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 97.739583][ T24] audit: type=1400 audit(1724355038.900:357): avc: denied { mount } for pid=1723 comm="syz.0.318" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 97.770828][ T24] audit: type=1326 audit(1724355038.940:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1723 comm="syz.0.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b67a13e79 code=0x7ffc0000 [ 98.028417][ T305] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 98.039205][ T305] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 98.048893][ T305] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 98.061522][ T305] usb 5-1: New USB device found, idVendor=11c2, idProduct=2208, bcdDevice= 0.00 [ 98.070334][ T305] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.078670][ T305] usb 5-1: config 0 descriptor?? [ 98.648984][ T1730] EXT4-fs error (device loop2): ext4_read_inode_bitmap:140: comm syz.2.321: Invalid inode bitmap blk 4 in block_group 0 [ 98.661760][ T1730] EXT4-fs (loop2): mounted filesystem without journal. Opts: noblock_validity,quota,data_err=abort,noload,nobarrier,lazytime,,errors=continue [ 99.041854][ T1729] F2FS-fs (loop0): Invalid segment/section count (31, 24 x 1) [ 99.057778][ T1729] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 99.072620][ T1729] F2FS-fs (loop0): Unrecognized mount option "iżline_xattr" or missing value [ 99.648247][ T1749] serio: Serial port ptm0 [ 99.918343][ T1015] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 99.978419][ T305] usbhid 5-1:0.0: can't add hid device: -71 [ 99.984188][ T305] usbhid: probe of 5-1:0.0 failed with error -71 [ 99.991349][ T305] usb 5-1: USB disconnect, device number 17 [ 100.178343][ T1015] usb 3-1: Using ep0 maxpacket: 8 [ 100.298426][ T1015] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 100.309920][ T1015] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 100.319425][ T1015] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 100.328295][ T1015] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.336737][ T1015] usb 3-1: config 0 descriptor?? [ 100.692686][ T1752] syz.2.325[1752] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 100.692719][ T1752] syz.2.325[1752] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 100.844110][ T1764] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 100.864222][ T1764] ext4 filesystem being mounted at /48/file0 supports timestamps until 2038 (0x7fffffff) [ 102.238333][ T53] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 102.245740][ T305] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 102.508456][ T53] usb 1-1: Using ep0 maxpacket: 8 [ 102.658407][ T305] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 102.669201][ T53] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 102.680486][ T305] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 102.690112][ T53] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 102.699679][ T305] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 102.712231][ T53] usb 1-1: New USB device found, idVendor=054c, idProduct=0ce6, bcdDevice= 0.00 [ 102.721141][ T305] usb 2-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 102.730069][ T53] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.738061][ T305] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.746189][ T53] usb 1-1: config 0 descriptor?? [ 102.751652][ T305] usb 2-1: config 0 descriptor?? [ 102.768398][ T1015] usbhid 3-1:0.0: can't add hid device: -71 [ 102.774210][ T1015] usbhid: probe of 3-1:0.0 failed with error -71 [ 102.781026][ T1015] usb 3-1: USB disconnect, device number 16 [ 103.229047][ T305] gt683r_led 0003:1770:FF00.001B: item fetching failed at offset 1/5 [ 103.237063][ T305] gt683r_led 0003:1770:FF00.001B: hid parsing failed [ 103.244652][ T53] playstation 0003:054C:0CE6.001C: unknown main item tag 0x0 [ 103.251925][ T305] gt683r_led: probe of 0003:1770:FF00.001B failed with error -22 [ 103.259447][ T53] playstation 0003:054C:0CE6.001C: unknown main item tag 0x0 [ 103.268392][ T53] playstation 0003:054C:0CE6.001C: unknown main item tag 0x0 [ 103.276460][ T53] playstation 0003:054C:0CE6.001C: unknown main item tag 0x0 [ 103.283756][ T53] playstation 0003:054C:0CE6.001C: unknown main item tag 0x0 [ 103.290947][ T53] playstation 0003:054C:0CE6.001C: unknown main item tag 0x0 [ 103.298123][ T53] playstation 0003:054C:0CE6.001C: unknown main item tag 0x0 [ 103.318791][ T53] playstation 0003:054C:0CE6.001C: hidraw0: USB HID v0.00 Device [HID 054c:0ce6] on usb-dummy_hcd.0-1/input0 [ 103.437617][ T1786] syz.2.331[1786] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 103.437882][ T1786] syz.2.331[1786] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 103.461234][ T443] usb 2-1: USB disconnect, device number 14 [ 103.568595][ T53] playstation 0003:054C:0CE6.001C: Invalid reportID received, expected 9 got 124 [ 103.577576][ T53] playstation 0003:054C:0CE6.001C: Failed to retrieve DualSense pairing info: -22 [ 103.586660][ T53] playstation 0003:054C:0CE6.001C: Failed to get MAC address from DualSense [ 103.595131][ T53] playstation 0003:054C:0CE6.001C: Failed to create dualsense. [ 103.603232][ T53] playstation: probe of 0003:054C:0CE6.001C failed with error -22 [ 103.733054][ T24] kauditd_printk_skb: 18 callbacks suppressed [ 103.733067][ T24] audit: type=1400 audit(1724355044.910:377): avc: denied { getopt } for pid=1778 comm="syz.0.329" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 105.065603][ T53] usb 1-1: USB disconnect, device number 14 [ 105.200164][ T1794] F2FS-fs (loop4): Invalid segment/section count (31, 24 x 1) [ 105.207477][ T1794] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 105.215522][ T1015] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 105.215785][ T1794] F2FS-fs (loop4): Unrecognized mount option "iżline_xattr" or missing value [ 105.656665][ T24] audit: type=1400 audit(1724355046.830:378): avc: denied { unmount } for pid=835 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 105.708736][ T1015] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 105.719619][ T1015] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 105.730303][ T1015] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 105.739861][ T1015] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 105.752832][ T1015] usb 2-1: New USB device found, idVendor=044f, idProduct=b653, bcdDevice= 0.00 [ 105.761636][ T1015] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.769974][ T1015] usb 2-1: config 0 descriptor?? [ 106.239653][ T1015] thrustmaster 0003:044F:B653.001D: unbalanced delimiter at end of report description [ 106.246886][ T1804] EXT4-fs error (device loop0): ext4_read_inode_bitmap:140: comm syz.0.335: Invalid inode bitmap blk 4 in block_group 0 [ 106.249246][ T1015] thrustmaster 0003:044F:B653.001D: parse failed [ 106.261643][ T1804] EXT4-fs (loop0): mounted filesystem without journal. Opts: noblock_validity,quota,data_err=abort,noload,nobarrier,lazytime,,errors=continue [ 106.267893][ T1015] thrustmaster: probe of 0003:044F:B653.001D failed with error -22 [ 106.360571][ T1807] exFAT-fs (loop2): invalid fs_name [ 106.365756][ T1807] exFAT-fs (loop2): failed to read boot sector [ 106.372003][ T1807] exFAT-fs (loop2): failed to recognize exfat type [ 106.448458][ T1015] usb 2-1: USB disconnect, device number 15 [ 106.679368][ T24] audit: type=1400 audit(1724355047.860:379): avc: denied { ioctl } for pid=1805 comm="syz.2.336" path="socket:[20571]" dev="sockfs" ino=20571 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 107.859868][ T1827] exFAT-fs (loop4): invalid fs_name [ 107.864912][ T1827] exFAT-fs (loop4): failed to read boot sector [ 107.870961][ T1827] exFAT-fs (loop4): failed to recognize exfat type [ 107.970256][ T24] audit: type=1400 audit(1724355049.130:380): avc: denied { write } for pid=1820 comm="syz.2.340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 108.326435][ T1016] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 108.608426][ T1016] usb 2-1: too many configurations: 65, using maximum allowed: 8 [ 108.708401][ T1016] usb 2-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 108.798462][ T1016] usb 2-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 108.888419][ T1016] usb 2-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 108.978457][ T1016] usb 2-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 109.068428][ T1016] usb 2-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 109.158451][ T1016] usb 2-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 109.248417][ T1016] usb 2-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 109.338403][ T1016] usb 2-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 109.348656][ T1016] usb 2-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 109.357439][ T1016] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.519578][ T1844] netlink: 'syz.0.342': attribute type 4 has an invalid length. [ 109.538338][ T24] audit: type=1326 audit(1724355050.690:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1843 comm="syz.0.342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b67a13e79 code=0x7ffc0000 [ 109.564294][ T24] audit: type=1326 audit(1724355050.690:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1843 comm="syz.0.342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4b67a13e79 code=0x7ffc0000 [ 109.587723][ T24] audit: type=1326 audit(1724355050.690:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1843 comm="syz.0.342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b67a13e79 code=0x7ffc0000 [ 109.610942][ T24] audit: type=1326 audit(1724355050.690:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1843 comm="syz.0.342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4b67a13e79 code=0x7ffc0000 [ 109.634381][ T24] audit: type=1326 audit(1724355050.690:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1843 comm="syz.0.342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b67a13e79 code=0x7ffc0000 [ 109.657599][ T24] audit: type=1326 audit(1724355050.690:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1843 comm="syz.0.342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4b67a13e79 code=0x7ffc0000 [ 109.680688][ T24] audit: type=1326 audit(1724355050.690:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1843 comm="syz.0.342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b67a13e79 code=0x7ffc0000 [ 109.703788][ T24] audit: type=1326 audit(1724355050.690:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1843 comm="syz.0.342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=274 compat=0 ip=0x7f4b67a13e79 code=0x7ffc0000 [ 109.729607][ T1846] syz.4.344[1846] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 109.729887][ T1846] syz.4.344[1846] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 109.749243][ T1846] Zero length message leads to an empty skb [ 109.772385][ T24] audit: type=1326 audit(1724355050.690:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1843 comm="syz.0.342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b67a13e79 code=0x7ffc0000 [ 109.798150][ T24] audit: type=1326 audit(1724355050.690:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1843 comm="syz.0.342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4b67a13e79 code=0x7ffc0000 [ 109.838349][ T464] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 110.198404][ T464] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 110.209234][ T464] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 110.218750][ T464] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 110.231390][ T464] usb 3-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 110.240167][ T464] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.248529][ T464] usb 3-1: config 0 descriptor?? [ 110.719254][ T464] gt683r_led 0003:1770:FF00.001E: item fetching failed at offset 1/5 [ 110.727274][ T464] gt683r_led 0003:1770:FF00.001E: hid parsing failed [ 110.733933][ T464] gt683r_led: probe of 0003:1770:FF00.001E failed with error -22 [ 110.810313][ T1009] usb 2-1: USB disconnect, device number 16 [ 110.919416][ T291] usb 3-1: USB disconnect, device number 17 [ 112.155876][ T1854] rtc_cmos 00:00: Alarms can be up to one day in the future [ 112.405536][ T305] rtc_cmos 00:00: Alarms can be up to one day in the future [ 112.412824][ T305] rtc_cmos 00:00: Alarms can be up to one day in the future [ 112.420388][ T305] rtc_cmos 00:00: Alarms can be up to one day in the future [ 112.427589][ T305] rtc_cmos 00:00: Alarms can be up to one day in the future [ 112.434645][ T305] rtc rtc0: __rtc_set_alarm: err=-22 [ 113.271118][ T1866] EXT4-fs error (device loop1): ext4_read_inode_bitmap:140: comm syz.1.349: Invalid inode bitmap blk 4 in block_group 0 [ 113.283736][ T1866] EXT4-fs (loop1): mounted filesystem without journal. Opts: noblock_validity,quota,data_err=abort,noload,nobarrier,lazytime,,errors=continue [ 113.508342][ T305] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 113.868388][ T305] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 113.879095][ T305] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 113.889731][ T305] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 113.899213][ T305] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 113.912051][ T305] usb 5-1: New USB device found, idVendor=044f, idProduct=b653, bcdDevice= 0.00 [ 113.920997][ T305] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.929652][ T305] usb 5-1: config 0 descriptor?? [ 114.409048][ T305] thrustmaster 0003:044F:B653.001F: unbalanced delimiter at end of report description [ 114.418773][ T305] thrustmaster 0003:044F:B653.001F: parse failed [ 114.424946][ T305] thrustmaster: probe of 0003:044F:B653.001F failed with error -22 [ 114.610227][ T305] usb 5-1: USB disconnect, device number 18 SYZFAIL: mkdir(syz-tmp) failed (errno 28: No space left on device) loop exited with status 67 SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: repeatedly failed to execute the program proc=3 req=307 state=1 status=67 (errno 9: Bad file descriptor) [ 115.283729][ T24] kauditd_printk_skb: 49 callbacks suppressed [ 115.283742][ T24] audit: type=1400 audit(1724355056.430:440): avc: denied { write } for pid=273 comm="syz-executor" path="pipe:[13072]" dev="pipefs" ino=13072 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 115.350383][ T409] tipc: Left network mode [ 116.238841][ T409] device bridge_slave_1 left promiscuous mode [ 116.244757][ T409] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.252139][ T409] device bridge_slave_0 left promiscuous mode [ 116.258049][ T409] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.265821][ T409] device veth1_macvtap left promiscuous mode [ 116.271678][ T409] device veth0_vlan left promiscuous mode [ 117.599001][ T409] device bridge_slave_1 left promiscuous mode [ 117.604927][ T409] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.612184][ T409] device bridge_slave_0 left promiscuous mode [ 117.618421][ T409] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.626068][ T409] device bridge_slave_1 left promiscuous mode [ 117.632103][ T409] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.639263][ T409] device bridge_slave_0 left promiscuous mode [ 117.645150][ T409] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.652693][ T409] device bridge_slave_1 left promiscuous mode [ 117.658643][ T409] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.665784][ T409] device bridge_slave_0 left promiscuous mode [ 117.671879][ T409] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.679588][ T409] device veth1_macvtap left promiscuous mode [ 117.685390][ T409] device veth0_vlan left promiscuous mode [ 117.691446][ T409] device veth1_macvtap left promiscuous mode [ 117.697364][ T409] device veth1_macvtap left promiscuous mode [ 117.703124][ T409] device veth0_vlan left promiscuous mode