last executing test programs: 22.837670832s ago: executing program 3 (id=191): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r0}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 22.766057413s ago: executing program 3 (id=192): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r5 = syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) read$FUSE(r4, &(0x7f0000006340)={0x2020, 0x0, 0x0}, 0x2058) write$FUSE_LSEEK(r4, &(0x7f00000021c0)={0x18, 0x0, r6, {0x7}}, 0x18) read$FUSE(r4, &(0x7f0000000100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_IOCTL(r4, &(0x7f0000002140)={0x20, 0x0, r7, {0x0, 0x0, 0x80003ff}}, 0x20) lstat(&(0x7f0000008800)='./file0\x00', 0x0) getdents(r5, 0x0, 0x0) read$FUSE(r4, &(0x7f0000008d00)={0x2020}, 0x2020) syz_fuse_handle_req(r4, &(0x7f0000004340)="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", 0x2000, &(0x7f0000008c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000008700)=ANY=[@ANYBLOB="3000000000000000000000000000000000000000643b1475000000000000000006"], 0x0, 0x0, 0x0, 0x0}) read$FUSE(r4, &(0x7f0000002300)={0x2020}, 0x2020) getdents64(r5, 0x0, 0x300) 21.874018354s ago: executing program 3 (id=202): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x2010000, &(0x7f0000000480)=ANY=[@ANYBLOB="6e6f6e756d7461696c3d302c756e695f786c6174653d312c696f636861727365743d63703836352c73686f72746e616d653d77696e39352c636f6465706167653d3836392c726f6469722c616c6c6f775f7574696d653d30303030303030303030303030303030303137373737372c73686f72746e616d653d6d697865642c757466383d312c636865636b3d7374726963742c73686f72746e616d653d6c6f7765722c696f636861727365743d6d61636761656c69632c009fe7a64148646d78b2352fb82c3564f8d2296b6f8512835d329176768472a65dd4d0804d842d71bb377c", @ANYRESOCT, @ANYRESOCT=0x0], 0x25, 0x358, &(0x7f0000000940)="$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") r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r2, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) rmdir(&(0x7f0000000540)='./cgroup/../file0\x00') openat$cgroup_procs(r2, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffd}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000004000000e27f00000100000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/25], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) socket$tipc(0x1e, 0x5, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) writev(r8, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 19.139178808s ago: executing program 3 (id=214): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000500)={[{@discard}, {@abort}, {@dioread_lock}, {@usrquota}, {@nombcache}, {@lazytime}, {@noload}, {@usrquota}, {@noauto_da_alloc}, {@resuid}, {@init_itable_val}, {@jqfmt_vfsv1}]}, 0xfe, 0x558, &(0x7f0000000c00)="$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") bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x16, 0x0, 0xb161, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) syz_emit_ethernet(0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) write$FUSE_NOTIFY_DELETE(r0, 0x0, 0x2a) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x92) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, 0x0, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000300)={@val={0x0, 0x201}, @void, @ipv4=@tcp={{0x7, 0x4, 0x3, 0x8, 0x30, 0x65, 0x0, 0x6, 0x6, 0x0, @broadcast, @multicast1, {[@cipso={0x86, 0x6, 0x3}]}}, {{0x4e24, 0x4e21, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x80, 0x800, 0x0, 0x7}}}}, 0x34) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000c80)=""/4079, 0xfef) 18.23581939s ago: executing program 3 (id=228): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1817dc1841000000000040000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008001500b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='io_uring_create\x00', r1}, 0x18) io_uring_setup(0x1de0, &(0x7f00000000c0)={0x0, 0x45d6}) 17.790102836s ago: executing program 3 (id=234): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r0}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x30d4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f00000008c0)={0x0, 0x22, 0x63}, 0x0}, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000800)={0x84, &(0x7f00000003c0)=ANY=[@ANYBLOB="401442"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0x4008af12, 0x0) 17.723263947s ago: executing program 32 (id=234): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r0}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x30d4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f00000008c0)={0x0, 0x22, 0x63}, 0x0}, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000800)={0x84, &(0x7f00000003c0)=ANY=[@ANYBLOB="401442"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0x4008af12, 0x0) 4.020760089s ago: executing program 4 (id=322): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="900000001000010400000000f9ff000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000001910680012800e00010069703665727370616e000000540002800600030006000000050016001100000004001200080015000100000005001700080300000500160002"], 0x90}}, 0x4000000) 3.98867601s ago: executing program 4 (id=323): bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0xe22, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x6}, 0xb) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x307}}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) ioctl$KVM_NMI(r2, 0xae9a) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x3, &(0x7f0000000040)=@framed={{}, [], {0x95, 0x0, 0x700}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000100)={[{@delalloc}, {@data_err_abort}, {@bh}, {@nobarrier}, {@data_err_ignore}, {@resgid}, {@data_err_ignore}, {@jqfmt_vfsv0}, {@nobh}, {@user_xattr}, {@bh}, {@usrquota}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x4, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000240)='ext4_fallocate_exit\x00', r4}, 0x18) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) fallocate(r5, 0x0, 0x9b, 0x1c20000000) 3.801809201s ago: executing program 4 (id=326): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r0}, 0x10) r1 = socket(0x10, 0x2, 0x0) r2 = dup2(r1, r1) sendto$inet6(r2, &(0x7f0000000000)="7800000018001f05b9409b0dffff000d0203be040205060506014007430008000f000000fac8388827a685a168d9a4c6040045653600648dcaaf6c26c291214549932fde4a460c89b6ec0cff3959547f509058ba86c902003a03004a32000400160012000a00000000000000000000080756ede4ccbe5880", 0x78, 0x0, 0x0, 0x0) 3.787840952s ago: executing program 1 (id=328): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x90) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x6169c10b, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x1, 0x0, @void, @value, @void, @value}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000440)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000bc0)={0x20, 0x0, &(0x7f0000000a80)=[@free_buffer, @acquire_done={0x40106309, 0x1}], 0x0, 0x0, 0x0}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0xf, 0x0, &(0x7f00000000c0)) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, 0x0, 0x2c) setsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f00000001c0)=0x1c, 0x4) keyctl$session_to_parent(0x12) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, &(0x7f00000002c0)}, 0x20) prctl$PR_CAP_AMBIENT(0x2f, 0x2, 0x4000000000) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000280), 0x280000) mount$tmpfs(0x0, &(0x7f00000000c0)='./cgroup.cpu/cpuset.cpus\x00', &(0x7f0000000100), 0x401, &(0x7f00000001c0)={[{@size={'size', 0x3d, [0x31]}}, {@nr_inodes={'nr_inodes', 0x3d, [0x33]}}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='hrtimer_init\x00', r7}, 0x10) syz_clone3(&(0x7f00000007c0)={0x40120000, 0x0, 0x0, 0x0, {0x40}, 0x0, 0x0, 0x0, 0x0}, 0x58) 3.678357253s ago: executing program 4 (id=333): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000009d000000010001000900000001"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001400)={{r0}, &(0x7f0000001380), &(0x7f00000013c0)='%pB \x00'}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fffffff, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r2}, 0x10) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r0, &(0x7f0000000080), 0x0}, 0x20) 3.569681985s ago: executing program 4 (id=335): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002240)='/proc/zoneinfo\x00', 0x0, 0x0) lseek(r0, 0x4, 0x1) openat(r0, &(0x7f0000000000)='./file0\x00', 0x64000, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000680)=@base={0x19, 0x9, 0xb4, 0x3, 0xa8, 0xffffffffffffffff, 0x2ba, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x20, 0x0, 0x0, @void, @value, @void, @value}, 0x50) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000d40)={[{@test_dummy_encryption}]}, 0x1, 0x246, &(0x7f0000000ac0)="$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") r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x2c) setgroups(0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x9) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@redirect_dir_on}]}) 3.044430521s ago: executing program 5 (id=336): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a000000020000000110000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) 2.946686912s ago: executing program 5 (id=337): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) socket(0x10, 0x3, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents(r4, &(0x7f00000000c0)=""/43, 0x60) 2.814261334s ago: executing program 1 (id=339): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r1}, 0x10) timer_create(0x2, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) unshare(0x64000600) 1.998069874s ago: executing program 5 (id=340): prctl$PR_SET_KEEPCAPS(0x8, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[], &(0x7f00000006c0)=""/4096, 0x4b, 0x1000, 0x1, 0x0, 0x0, @void, @value}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xe, &(0x7f0000000740)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000fdfdfff67a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040000010000400404000001000000b7050000050000006a0a00fe00000000850000000a000000b70000000000000095000000000000009cc6b3fcd62c061c6238975d43a4505f80e39c9f3c530cf08e467b592f868ee3b0a435df0a0e8c1bf176db2a6b2feb4b77d3d5707bfd2d84aaa3b1d4e984c46ea7e2b347a36f5662403e1b2be4284322a4908a0d411a9872971c7c46f0979bd10b97163c066d0e196bf02f46c7953ab1abdaf9de9ca3c00cb9bf4e418d076feafa22f0610a70f2bdf4000200000066b60d00b0c2c1254f0963f63223b7b80197aa3161f45346b100000000000000000089e399f6609876b5887437a172ebc02a740694298b79dc194e533583412dff048fc21f28bdd3e26a1a8a0481e9f0da43bb6ca66e2f55a9ff19ffcafe3e64be033c9d2f972cc93c1c13caec04a367c24a9fb6a6991ddb737d527d6acb15426415b6e8b14f822e86067a5e991c3b404984dfa2c6e94bd0339454c13ad3c328a182c15dc760a3000000005dc2ed0e0b29e98fa883c71949a34d84030323e3d54f45b29d27643453ad9211e3550ee5520211d9370175133f260c6882a146880b9387f1beb5418618bc83a3becf9bb57da7ba8b913c685fc6700848dc6665d73248c1f74e08ad04ce905faf32706e0000249a028044ede964362cfb7830a246c3b2f60000fc4deb8eda1368b0960b8d69bd99c64893d44f962524429dc058528e7e541c903869d96989b9a986620cb2c95c83f2a082c52764f49e51188f9418b01bcd8ae164acdac95318ec8b2c6feacdcf4b528e5e582160ed048c46e1dccca05bfa1d67c83795eae2d31968c055d325a9c794ef88b30c2de4a274878b73c05ffa88b7033be648b12bb1fee58958d6a6f31bfe568215dfbde59dad00008a73b40f09cf018cd496b36050d70c28f76749262e33e16429a6da35ceb1a989de81c3f8b8bc3a4763948a1cbc10348ef2ac3781b847611fcb0a26acafdd6d9ab05865fcf7c493d8f8cd344a1d470ca0d6f16ab0293774b5509fb0e7113936d59d5a60dbd84a938476adeebab9ff44f531bb81c53f16d80f51006cbc71570a5e272b223425e09dc6b6cc1fbc455a64fd449284f71761092a0302000000000000008a05d36fd9b814b4292745418c92d944763a4bf5e138d810e29a31f08f7dea7762d28484e15dc4320e4f85c16a8fbffadf8214d6d24cabe17ad4135d8872935ce0e6a468fd20fa4461d1d600234feac6eb4f046f2acc1b0efb4438abddcabb4e4e72a450aab72b589bec83bbb688e659fb"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x4, 0x6, 0xff, 0x42, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000440), &(0x7f0000000080), 0x619, r2}, 0x38) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r4 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000280)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x48, 0xffffffffffffffff) r5 = add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f00000007c0)={'fscrypt:', @desc2}, &(0x7f0000000480)={0x0, "6035ae1e0fe721441700322225930e6c1e3e2a51a92fd796bc34d7cf6e0236805b4377f7ab1a9b01c103a4c6de6269613800", 0x1}, 0x48, 0xfffffffffffffffb) keyctl$KEYCTL_MOVE(0x4, r5, r4, 0x0, 0x0) r6 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x4, r6, r6, 0x0, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000000800009e"]) timerfd_create(0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) openat$cgroup_subtree(r7, &(0x7f0000000000), 0x2, 0x0) 1.980724325s ago: executing program 1 (id=341): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000d7c900000900000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r2}, 0x10) r3 = gettid() r4 = getpid() rt_tgsigqueueinfo(r4, r3, 0x20, &(0x7f0000000080)) 1.922156545s ago: executing program 5 (id=342): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006d00000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000380)='sys_enter\x00', r0}, 0x10) getegid() 1.869889066s ago: executing program 1 (id=343): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r2 = socket(0x11, 0xa, 0x0) getsockname$netlink(r2, 0x0, &(0x7f0000000300)) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x8, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r5, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x10, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x1}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r8) recvmmsg(r8, &(0x7f0000001880)=[{{0x0, 0x0, &(0x7f0000000480)}, 0x101}, {{0x0, 0x0, 0x0}, 0x4}], 0x2, 0x40000000, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000080)=ANY=[@ANYBLOB="18000000", @ANYRES16=r9, @ANYBLOB="030704707900000000000100040004000180"], 0x18}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x61, 0x11, 0x8c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) 1.794190287s ago: executing program 5 (id=344): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x2}, @IFLA_XFRM_LINK={0x8, 0x1, 0x3}]}}}, @IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}]}, 0x58}}, 0x0) 1.52216833s ago: executing program 2 (id=346): bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4000, &(0x7f0000000140), 0x2, 0xbb8, &(0x7f00000017c0)="$eJzs3M1rXFUbAPDn3kymaZv3nfTlRawbIyItiNOkkmKLYCsVNy4E3QoN6aSETD9IIjVpFhP9B0RdC24EtSgu7LobRbdutN0qLoQisVEQ0cidjyQ2mTS1M70x/f3gzD3nnpl5nmcuM/cemJkA7luD2U0asT8iTiURpeb+NCKK9V5fRK1xv6XF+bFfF+fHklhefumnJJKIuLk4P9Z6rqS53dsc9EXE188m8b831sednp2bHK1WK1PN8aGZsxcOTc/OPTFxdvRM5Uzl3PCRp0YOjxwZOjrSsVp/++74lV8eef6H2u8f/nH557ffT+J49Dfn1tbRKYMxuPKarFWIiNFOB8tJT7OetXUmhds8KO1yUgAAtJWuuYZ7IErRE6sXb6X4/JtckwMAAAA6YrknYhkAAADY4RLrfwAAANjhWt8DuLk4P9Zq+X4j4d66cSIiBhr1LzVbY6YQtfq2L3ojYs/NJNb+rDVpPOyuDUbE99ePfpK16NLvkDdTW4iIBzc6/km9/oH6r7jX159GxFAH4g/eMv431X+8A/Hzrh+A+9PVE40T2frzX7py/RMbnP8KG5y7/om8z3+t67+lddd/q/X3tLn+e3GLMS598O7FdnNZ/U9fee7jVsviZ9u7KuoO3FiIeKiwUf3JSv1Jm/pPbTFG6c+LlXZzede//F7Egdi4/pZk8/8nOjQ+Ua0MNW43jLHw1chH7eLnXX92/Pe0qb/1/0/tjv+FLcZ45eTJT9ftvL7a3bz+9Mdi8nK9V2zueW10ZmZqOKKYvLB+/+HNc2ndp/UcWf0HH938/b9R/dlnQq35OmRrgYXmNhu/fkvMZy5f+qxdPq31X57H/3Sb47+2/i8L64//m1uM8dgXbx1sN7d2/Zu1LH5rLQwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALWlE9EeSllf6aVouR+yNiP/HnrR6fnrm8fHzr547nc1FDERvOj5RrQxFRKkxTrLxcL2/Oj58y/jJiNgXEe+UdtfH5bHz1dN5Fw8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCKvRHRH0lajog0IpZKaVou550VAAAA0HEDeScAAAAAdJ31PwAAAOx81v8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB02b6Hr15LIqJ2bHe9ZYrNud5cMwO6Lc07ASA3PXknAOSmkHcCQG7ucI3vcgF2oOQ2831tZ3Z1PBcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAtq8D+69eSyKidmx3vWWKzbneXDMDui3NOwEgNz2bTRbuXR7AvectDvcva3wguc183+p9an+f2dW1nAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADYfvrrLUnLEVFs7iuXI/4TEQPRm4xPVCtDEfHfiPi21LsrGw/nnDMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACdNz07NzlarVamsk4azc7KHp3VTtJ4xWrbJR+du+wUY1uksU07eX8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACQh+nZucnRarUyNZ13JgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDepmfnJker1cpUFzt51wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQH7+CgAA//9gfgp0") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x02\x00', r0, &(0x7f0000000180)='.\x02\x00') renameat2(0xffffffffffffff9c, &(0x7f00000000c0)='.\x02\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2) 1.488322941s ago: executing program 1 (id=347): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, 0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fffffc}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0xc) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') getdents64(r4, &(0x7f0000001580)=""/4094, 0xffe) 1.404962072s ago: executing program 1 (id=348): r0 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1038, 0x1410, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x7, {[@main=@item_4={0x3, 0x0, 0xa, "0cf80d94"}, @global=@item_012={0x1, 0x1, 0x0, '!'}]}}, 0x0}, 0x0) 1.309886893s ago: executing program 2 (id=349): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x18) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={0x0}}, 0x404c080) openat(0xffffffffffffff9c, 0x0, 0x601c2, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000d00), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_GET(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0307000000000000000008000000"], 0x7c}}, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r8], 0x20}}, 0x0) 1.260881964s ago: executing program 5 (id=350): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) syz_usb_connect(0x6, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000001000000e27f000001"], 0x48) r5 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000040)=[{0x6a81, 0xa, 0x6, 0x1}]}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r7}, 0x10) bpf$MAP_CREATE(0x1400000000000000, 0x0, 0x0) r8 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000280)={0x50, r8, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_PEERS={0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x4084}, 0x20000010) 1.232619134s ago: executing program 4 (id=351): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = socket$nl_generic(0x10, 0x3, 0x10) symlink(0x0, &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') readlink(0x0, &(0x7f00000004c0)=""/83, 0x53) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r0) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x10) sched_setscheduler(0x0, 0x6, &(0x7f0000000080)=0x1fbb) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10c4, 0xea90, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f00000000c0)={0x2c, &(0x7f0000000900)=ANY=[@ANYBLOB="000010000000101a02e9971f71d0b40000000d00000051855d3116e78c0000483234916fa9a040042aa72c07e34fbe2a9424bb5b2ddaca9700000000c5d287fdc0961a70b02cbb43c46d2bf4c6a73b45b8018e18e53b2a103a96b1e21b87f36a04f9cad25b8477d38aa6f494953119d8a67b5c9956a8f7569d80caade44f8243ead37601e9e3a1cb1f6d6ddccdf78d8426ed5713da7877a7"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x1, 0xe, "ea6aafaabfc5926708627c6c0963"}, 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r2}, 0x10) socket(0x10, 0x3, 0x0) 1.040416816s ago: executing program 2 (id=353): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x400000}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r2, 0x0, 0x40000000, 0x0) 722.28445ms ago: executing program 2 (id=354): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000080)={0x0}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x6) syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) 627.936332ms ago: executing program 2 (id=355): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000640)=ANY=[@ANYBLOB="ec010000", @ANYRES16=r1, @ANYBLOB="010000000000000000000100000024000300a05ca84fbe9c8e3853e2fd7a70ae0fb20fa152600cb00845174f08076f8d78430800050001000000140002007767310000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb54208000500000000006c0108803801008006000500002000000801098088000080060001000200000008000200640101010500030001000000060001000a00000014000200fe8000000000000000000000000000360500030001"], 0x1ec}, 0x1, 0x0, 0x0, 0x4084}, 0x20000010) 567.180983ms ago: executing program 2 (id=356): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010002000400106d043fc50000000000010902240001000000020904000005030000000921000000012205000905810300"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='kfree\x00', r2}, 0x18) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x8, "18cd78bd"}]}}, 0x0}, 0x0) 422.269464ms ago: executing program 0 (id=357): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa2000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="5c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800e00010069703665727370616e0000002000028006000200300000001400060000000000000000000000ffff7f00000108000a00", @ANYRES32], 0x5c}}, 0x0) 406.473784ms ago: executing program 0 (id=358): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008f00850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r3}, &(0x7f0000000100), &(0x7f0000000140)}, 0x20) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c00018014000300ff01000000000000000000000000000114000400ff01000e0000000000000000000000010c00068005000100000000004700028005000100010000000600034000000000060005"], 0xe4}, 0x1, 0x0, 0x0, 0x2048014}, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001200000008000800000000000800090000000000180001801400020076657468305f746f5f626f6e640000000800070000000000080006"], 0x4c}}, 0x0) 249.206016ms ago: executing program 0 (id=359): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, 0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fffffc}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0xc) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') getdents64(r4, &(0x7f0000001580)=""/4094, 0xffe) 235.411847ms ago: executing program 0 (id=360): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) socketpair$unix(0x1, 0x2, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./file1\x00', 0x101880a, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x1, 0x550b, &(0x7f00000079c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./file1\x00', 0x105042, 0x1db) pwritev2(r0, &(0x7f0000000180)=[{&(0x7f0000000240)='E', 0x1}], 0x1, 0x7, 0x40, 0xe) 26.111439ms ago: executing program 0 (id=361): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) 0s ago: executing program 0 (id=362): ioctl$sock_inet6_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x20) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x40, &(0x7f0000000080)={[{@errors_remount}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}]}, 0x0, 0x4f7, &(0x7f0000000540)="$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") openat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x141842, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000240)='./bus\x00', 0x187102, 0x1) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2, 0x28011, r0, 0x0) chdir(&(0x7f0000000240)='./file0\x00') syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000380)={[{@delalloc}, {@data_err_abort}, {@noload}, {@dioread_lock}, {@data_err_ignore}, {@resgid}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x562, &(0x7f0000000440)="$eJzs3d9rW+UbAPDnpO1+f7/rYAwVkcIuHMyla+uPCV7MS9HhQG+8miE9K6PpMpp0rHXgduFuvJEheOFAvNd7L4f/gH/FQIdDRvHGm8hJT7quSdasy9rMfD5w2vfNe5L3PDnnefOenIQEMLQmsj+FiJcj4psk4nBEJHnbaOSNE2vrrT68Xs6WJBqNT/5KsvX2R0S59Vit+x3MKy9FxK9fRZwstPdbW16ZL1Uq6WJe3xsLVyZryyunLi2U5tK59PL0zMyZt2am333n7b7E2fhy7f/Hdz848/Xx1e9+vn/kdhJn41DensXVh25ubKxMxET+nIzF2U0rTvWhs0GS7PYGsC0jeZ6PRTYGHI6RPOuB/77sZbEBDKlE/sOQas0DWuf2fToPfmE8eH/tBKg9/tG190ZiX/Pc6MBq8tiZUXa+O96H/rM+fvnjzu1sif69DwGwpRs3I+L06Gj7+Jfk49/2ne5hnc19GP9g59zN5j9vdJr/FNbnP9Fh/nOwQ+5ux9b5X7jfh266yuZ/73Wc/65ftBofyWv/a875xpKLlyppNrb9PyJOxNjerP6k6zlnVu81urVtnP9lS9Z/ay6Yb8f90b2P32e2VC89S8wbPbgZ8UrH+W+yvv+TDvs/ez7O99jHsfTOa93ato7/+Wr8GPF6x/3/6IpWVpqsd70+Odk8HiZbR0W7v28d+61b/7sdf7b/Dzw5/vFk4/Xa2tP38cO+f9K8uG9z22PxR+/H/57k02Z5T37btVK9vjgVsSf5qP326Uf3bdVb62fxnzj+5PGv0/G/PyI+7zH+W0d/erVb2yDs/9mn2v9PX7j34Rffd+u/t/HvzWbpRH5LL+Nfrxv4LM8dAAAAAAAADJpCRByKpFBcLxcKxeLa5zuOxoFCpVqrn7xYXbo8G83vyo7HWKF1pfvwhs9DTOWfh23VpzfVZyLiSER8O7K/WS+Wq5XZ3Q4eAAAAAAAAAAAAAAAAAAAABsTBLt//z/w+0rb6Z3/u/CYCz5Of/IbhtWX+9+OXnoCB5PUfhpf8h+El/2F4yX8YXvIfhpf8h+El/2F4yX8AAAAAAAAAAAAAAAAAAAAAAAAAAADoq/PnzmVLY/Xh9XJWn726vDRfvXpqNq3NFxeWysVydfFKca5anaukxXJ1YavHq1SrV6amY+naZD2t1SdryysXFqpLl+sXLi2U5tIL6diORAUAAAAAAAAAAAAAAAAAAAAvltryynypUkkXFRS2VRgdjM1Q6HNht0cmAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHjk3wAAAP//cHo1gQ==") r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0xc0185879, &(0x7f0000000000)={@desc={0x1, 0x11, @desc1}}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.27' (ED25519) to the list of known hosts. [ 20.387021][ T23] audit: type=1400 audit(1746428290.660:81): avc: denied { mounton } for pid=329 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 20.388294][ T329] cgroup1: Unknown subsys name 'net' [ 20.409979][ T23] audit: type=1400 audit(1746428290.660:82): avc: denied { mount } for pid=329 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 20.415502][ T329] cgroup1: Unknown subsys name 'net_prio' [ 20.444269][ T329] cgroup1: Unknown subsys name 'devices' [ 20.450777][ T23] audit: type=1400 audit(1746428290.720:83): avc: denied { unmount } for pid=329 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 20.619175][ T329] cgroup1: Unknown subsys name 'hugetlb' [ 20.625412][ T329] cgroup1: Unknown subsys name 'rlimit' [ 20.760619][ T23] audit: type=1400 audit(1746428291.030:84): avc: denied { setattr } for pid=329 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=612 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 20.783919][ T23] audit: type=1400 audit(1746428291.030:85): avc: denied { mounton } for pid=329 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 20.801428][ T331] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 20.809287][ T23] audit: type=1400 audit(1746428291.030:86): avc: denied { mount } for pid=329 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 20.840924][ T23] audit: type=1400 audit(1746428291.090:87): avc: denied { relabelto } for pid=331 comm="mkswap" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.866492][ T23] audit: type=1400 audit(1746428291.090:88): avc: denied { write } for pid=331 comm="mkswap" path="/root/swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.892729][ T23] audit: type=1400 audit(1746428291.110:89): avc: denied { read } for pid=329 comm="syz-executor" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.892782][ T329] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 20.918502][ T23] audit: type=1400 audit(1746428291.110:90): avc: denied { open } for pid=329 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.484380][ T340] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.491633][ T340] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.499121][ T340] device bridge_slave_0 entered promiscuous mode [ 21.514585][ T340] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.522367][ T340] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.529990][ T340] device bridge_slave_1 entered promiscuous mode [ 21.542371][ T339] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.549610][ T339] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.557276][ T339] device bridge_slave_0 entered promiscuous mode [ 21.565399][ T339] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.572511][ T339] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.580165][ T339] device bridge_slave_1 entered promiscuous mode [ 21.594800][ T338] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.601946][ T338] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.609383][ T338] device bridge_slave_0 entered promiscuous mode [ 21.624030][ T338] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.631245][ T338] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.638719][ T338] device bridge_slave_1 entered promiscuous mode [ 21.669612][ T342] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.676823][ T342] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.684169][ T342] device bridge_slave_0 entered promiscuous mode [ 21.692555][ T342] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.699651][ T342] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.707109][ T342] device bridge_slave_1 entered promiscuous mode [ 21.753196][ T341] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.760367][ T341] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.768008][ T341] device bridge_slave_0 entered promiscuous mode [ 21.797521][ T341] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.804590][ T341] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.812351][ T341] device bridge_slave_1 entered promiscuous mode [ 21.891900][ T339] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.898957][ T339] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.906286][ T339] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.913319][ T339] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.928417][ T340] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.935458][ T340] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.942782][ T340] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.949815][ T340] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.969899][ T338] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.977099][ T338] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.984377][ T338] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.991433][ T338] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.009440][ T342] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.016508][ T342] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.023775][ T342] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.030904][ T342] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.055493][ T103] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.062972][ T103] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.070917][ T103] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.078341][ T103] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.085441][ T103] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.092782][ T103] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.099947][ T103] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.107260][ T103] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.115050][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 22.122657][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 22.141919][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 22.150311][ T103] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.157355][ T103] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.165085][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 22.173516][ T103] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.180910][ T103] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.201163][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 22.220833][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 22.231106][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 22.241824][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 22.259730][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 22.267947][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 22.276100][ T103] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.283231][ T103] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.291055][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 22.299893][ T103] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.306957][ T103] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.314501][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 22.323123][ T103] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.330179][ T103] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.363208][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 22.371351][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 22.380012][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 22.389120][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 22.397789][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 22.405970][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 22.414346][ T103] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.421402][ T103] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.429145][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 22.437364][ T103] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.444398][ T103] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.451866][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 22.460181][ T103] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.467383][ T103] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.474718][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 22.483219][ T103] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.490250][ T103] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.498084][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 22.513331][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 22.521771][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 22.530686][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 22.539705][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 22.547803][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 22.556269][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 22.564954][ T103] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.572005][ T103] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.601722][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 22.609828][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 22.617862][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 22.625873][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 22.635084][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 22.643482][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 22.651702][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 22.659815][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 22.668251][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 22.676946][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 22.711214][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 22.719568][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 22.729408][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 22.737615][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 22.745622][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 22.754140][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 22.762671][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 22.770721][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 22.778867][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 22.787293][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 22.795963][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 22.804331][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 22.812790][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 22.821617][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 22.830191][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 22.838281][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 22.846166][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 22.854778][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 22.863376][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 22.871491][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 22.882858][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 22.891482][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 22.906749][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 22.915107][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 22.941638][ T339] request_module fs-gadgetfs succeeded, but still no fs? [ 22.950909][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 22.960356][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 22.969627][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 22.978552][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 22.987738][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 22.996187][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 23.004808][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 23.013343][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.022007][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 23.030558][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 23.039311][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 23.049223][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 23.116175][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 23.125951][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 23.134750][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 23.728643][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.028753][ T369] xt_CT: You must specify a L4 protocol and not use inversions on it [ 24.029406][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.047904][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.061952][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.070725][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.354047][ T367] F2FS-fs (loop3): Invalid SB checksum offset: 0 [ 24.360598][ T367] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 24.370549][ T367] F2FS-fs (loop3): invalid crc value [ 25.414188][ T393] syz.0.8 (393) used greatest stack depth: 22896 bytes left [ 25.444007][ T367] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 25.456506][ T23] kauditd_printk_skb: 40 callbacks suppressed [ 25.456518][ T23] audit: type=1400 audit(1746428294.836:131): avc: denied { read } for pid=384 comm="syz.0.8" name="binder1" dev="binder" ino=17 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 25.495598][ T367] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 25.509790][ T23] audit: type=1400 audit(1746428294.836:132): avc: denied { open } for pid=384 comm="syz.0.8" path="/dev/binderfs/binder1" dev="binder" ino=17 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 25.533654][ T23] audit: type=1400 audit(1746428294.876:133): avc: denied { ioctl } for pid=384 comm="syz.0.8" path="/dev/binderfs/binder1" dev="binder" ino=17 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 25.586254][ T23] audit: type=1400 audit(1746428295.776:134): avc: denied { mount } for pid=366 comm="syz.3.4" name="/" dev="loop3" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 25.603565][ T346] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 26.082936][ T402] [ 26.085329][ T402] ********************************************************** [ 26.092890][ T402] ** NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE ** [ 26.100334][ T402] ** ** [ 26.107842][ T402] ** trace_printk() being used. Allocating extra memory. ** [ 26.115230][ T402] ** ** [ 26.122784][ T402] ** This means that this is a DEBUG kernel and it is ** [ 26.126174][ T387] Alternate GPT is invalid, using primary GPT. [ 26.136790][ T402] ** unsafe for production use. ** [ 26.144180][ T402] ** ** [ 26.151784][ T402] ** If you see this message and you are not debugging ** [ 26.159275][ T402] ** the kernel, report this immediately to your vendor! ** [ 26.167200][ T402] ** ** [ 26.174918][ T402] ** NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE ** [ 26.182890][ T402] ********************************************************** [ 26.613762][ T387] loop1: p2 p3 p7 [ 26.649634][ T164] Alternate GPT is invalid, using primary GPT. [ 26.655979][ T164] loop1: p2 p3 p7 [ 26.660964][ T23] audit: type=1400 audit(1746428296.326:135): avc: denied { read write } for pid=398 comm="syz.0.9" name="loop-control" dev="devtmpfs" ino=237 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 26.685818][ T23] audit: type=1400 audit(1746428296.326:136): avc: denied { open } for pid=398 comm="syz.0.9" path="/dev/loop-control" dev="devtmpfs" ino=237 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 26.700729][ T387] syz.1.6 (387) used greatest stack depth: 22384 bytes left [ 26.759550][ T346] usb 3-1: Using ep0 maxpacket: 16 [ 26.775511][ T23] audit: type=1400 audit(1746428296.606:137): avc: denied { ioctl } for pid=398 comm="syz.0.9" path="/dev/loop-control" dev="devtmpfs" ino=237 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 26.803302][ T23] audit: type=1400 audit(1746428296.616:138): avc: denied { create } for pid=396 comm="syz.4.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 26.835501][ T23] audit: type=1400 audit(1746428296.626:139): avc: denied { setopt } for pid=396 comm="syz.4.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 26.866844][ T23] audit: type=1400 audit(1746428296.946:140): avc: denied { map } for pid=408 comm="syz.0.11" path="/dev/ashmem" dev="devtmpfs" ino=10539 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 26.936617][ T346] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 27.139096][ T418] overlayfs: missing 'lowerdir' [ 27.233090][ T346] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 27.243061][ T346] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 27.255900][ T346] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 27.264975][ T346] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 27.274056][ T346] usb 3-1: config 0 descriptor?? [ 27.296597][ T346] usb 3-1: can't set config #0, error -71 [ 27.310872][ T346] usb 3-1: USB disconnect, device number 2 [ 27.321892][ T337] udevd[337]: inotify_add_watch(7, /dev/loop1p7, 10) failed: No such file or directory [ 27.322533][ T406] udevd[406]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 27.332481][ T405] udevd[405]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 27.486672][ T18] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 27.729581][ T430] xt_hashlimit: size too large, truncated to 1048576 [ 27.736738][ T18] usb 2-1: Using ep0 maxpacket: 16 [ 27.876561][ T18] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 27.935556][ T18] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 28.011307][ T18] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 28.024630][ T18] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 28.034006][ T18] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 28.062241][ T18] usb 2-1: config 0 descriptor?? [ 28.553344][ T452] serio: Serial port ptm0 [ 28.643897][ T455] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 28.888813][ T18] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 28.944265][ T18] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 29.013976][ T18] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 29.141843][ T18] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 29.159203][ T459] serio: Serial port ptm0 [ 29.173159][ T18] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 29.210721][ T18] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 29.221437][ T18] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 29.228907][ T18] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 29.236215][ T18] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 29.325180][ T18] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 29.333406][ T18] microsoft 0003:045E:07DA.0001: No inputs registered, leaving [ 29.343260][ T417] Alternate GPT is invalid, using primary GPT. [ 29.350738][ T18] microsoft 0003:045E:07DA.0001: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 29.362569][ T417] loop1: p1 p2 p3 [ 29.370541][ T18] microsoft 0003:045E:07DA.0001: no inputs found [ 29.371871][ T472] netlink: 8 bytes leftover after parsing attributes in process `syz.2.26'. [ 29.377150][ T18] microsoft 0003:045E:07DA.0001: could not initialize ff, continuing anyway [ 29.438479][ T475] syz.3.25[475] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 29.438620][ T475] syz.3.25[475] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 29.737011][ T164] Alternate GPT is invalid, using primary GPT. [ 30.359134][ T467] EXT4-fs (loop0): Ignoring removed orlov option [ 30.373992][ T164] loop1: p1 p2 p3 [ 30.399988][ T467] EXT4-fs (loop0): mounted filesystem without journal. Opts: orlov,nodiscard,,errors=continue [ 30.422716][ T484] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 30.497902][ T480] usb 2-1: USB disconnect, device number 2 [ 30.580610][ T23] kauditd_printk_skb: 24 callbacks suppressed [ 30.580622][ T23] audit: type=1400 audit(1746428300.846:165): avc: denied { read } for pid=466 comm="syz.0.24" name="msr" dev="devtmpfs" ino=9303 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 30.681314][ T467] incfs: Can't find or create .incomplete dir in ./file0 [ 30.689128][ T467] incfs: mount failed -34 [ 30.704180][ T23] audit: type=1400 audit(1746428300.846:166): avc: denied { open } for pid=466 comm="syz.0.24" path="/dev/cpu/0/msr" dev="devtmpfs" ino=9303 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 30.714528][ T484] loop2: p2 p3 p7 [ 30.733295][ T23] audit: type=1400 audit(1746428300.946:167): avc: denied { mounton } for pid=466 comm="syz.0.24" path="/6/file1/file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 30.799232][ T23] audit: type=1400 audit(1746428300.946:168): avc: denied { write } for pid=466 comm="syz.0.24" name="file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 30.833518][ T23] audit: type=1400 audit(1746428300.946:169): avc: denied { add_name } for pid=466 comm="syz.0.24" name=".index" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 30.879386][ T23] audit: type=1400 audit(1746428300.946:170): avc: denied { create } for pid=466 comm="syz.0.24" name=".index" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 30.914620][ T23] audit: type=1400 audit(1746428300.966:171): avc: denied { remove_name } for pid=466 comm="syz.0.24" name=".index" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 30.937491][ T23] audit: type=1400 audit(1746428300.966:172): avc: denied { rmdir } for pid=466 comm="syz.0.24" name=".index" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 30.972545][ T23] audit: type=1400 audit(1746428301.096:173): avc: denied { write } for pid=486 comm="syz.3.29" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 31.024910][ T23] audit: type=1400 audit(1746428301.096:174): avc: denied { nlmsg_write } for pid=486 comm="syz.3.29" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 31.059274][ T164] loop2: p2 p3 p7 [ 31.490144][ T383] udevd[383]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 31.491345][ T497] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 31.525814][ T406] udevd[406]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 31.538222][ T513] netlink: 392 bytes leftover after parsing attributes in process `syz.3.36'. [ 31.543361][ T406] udevd[406]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 31.653728][ T515] EXT4-fs (loop3): mounted filesystem without journal. Opts: i_version,nodiscard,min_batch_time=0x00000000000003ff,,errors=continue [ 31.667531][ T108] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 31.674731][ T518] udevd[518]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 31.678367][ T406] udevd[406]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 31.696347][ T519] udevd[519]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 31.713073][ T518] udevd[518]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 31.936540][ T108] usb 2-1: Using ep0 maxpacket: 8 [ 32.019044][ T530] ====================================================== [ 32.019044][ T530] WARNING: the mand mount option is being deprecated and [ 32.019044][ T530] will be removed in v5.15! [ 32.019044][ T530] ====================================================== [ 32.086723][ T108] usb 2-1: config 0 has an invalid interface number: 31 but max is 0 [ 32.110077][ T108] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 32.134288][ T530] EXT4-fs error (device loop4): ext4_free_branches:1022: inode #13: comm syz.4.41: invalid indirect mapped block 11 (level 0) [ 32.158966][ T108] usb 2-1: config 0 has no interface number 0 [ 32.166073][ T530] EXT4-fs (loop4): Remounting filesystem read-only [ 32.176258][ T530] EXT4-fs error (device loop4): ext4_clear_blocks:858: inode #13: comm syz.4.41: attempt to clear invalid blocks 1024 len 1 [ 32.191977][ T530] EXT4-fs error (device loop4): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 32.208896][ T530] EXT4-fs error (device loop4): ext4_free_branches:1022: inode #13: comm syz.4.41: invalid indirect mapped block 1819239214 (level 0) [ 32.223846][ T530] EXT4-fs error (device loop4): ext4_free_branches:1022: inode #13: comm syz.4.41: invalid indirect mapped block 33554432 (level 2) [ 32.240517][ T530] EXT4-fs (loop4): 1 truncate cleaned up [ 32.247232][ T530] EXT4-fs (loop4): mounted filesystem without journal. Opts: max_batch_time=0x000000000000000e,usrquota,nodelalloc,errors=remount-ro,noauto_da_alloc,nodiscard,noload, [ 32.346794][ T108] usb 2-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 32.443040][ T108] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.611095][ T108] usb 2-1: Product: syz [ 32.615375][ T108] usb 2-1: Manufacturer: syz [ 32.659923][ T108] usb 2-1: SerialNumber: syz [ 32.757954][ T108] usb 2-1: config 0 descriptor?? [ 32.766546][ T480] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 32.780991][ T544] debugfs: Directory 'vcpu1' with parent '544-4' already present! [ 32.936994][ T542] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 32.944824][ T542] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 32.953390][ T549] EXT4-fs (loop2): Unsupported blocksize for fs encryption [ 32.961319][ T542] F2FS-fs (loop4): invalid crc value [ 32.968084][ T542] F2FS-fs (loop4): Found nat_bits in checkpoint [ 32.990103][ T542] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 32.997378][ T542] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 33.016523][ T480] usb 4-1: Using ep0 maxpacket: 32 [ 33.026591][ T108] uvcvideo: Found UVC 0.04 device syz (046d:08c3) [ 33.033335][ T108] uvcvideo: No valid video chain found. [ 33.131018][ T559] EXT4-fs: Warning: mounting with data=journal disables delayed allocation and O_DIRECT support! [ 33.136616][ T480] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 33.153191][ T480] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 33.380357][ T18] usb 2-1: USB disconnect, device number 3 [ 33.403622][ T559] EXT4-fs (loop2): 1 orphan inode deleted [ 33.428247][ T559] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 33.439134][ T559] ext4 filesystem being mounted at /14/file1 supports timestamps until (%ptR?) (0x7fffffff) [ 33.747080][ T480] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 34.055389][ T480] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 34.064270][ T480] usb 4-1: config 0 descriptor?? [ 34.107265][ T480] hub 4-1:0.0: USB hub found [ 34.134328][ T565] syz.2.48 (565) used greatest stack depth: 22352 bytes left [ 34.159970][ T364] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 34.169119][ T364] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 34.326780][ T480] hub 4-1:0.0: 1 port detected [ 34.429772][ T576] FAT-fs (loop1): Directory bread(block 64) failed [ 34.467820][ T576] FAT-fs (loop1): Directory bread(block 65) failed [ 34.497216][ T576] FAT-fs (loop1): Directory bread(block 66) failed [ 34.514655][ T576] FAT-fs (loop1): Directory bread(block 67) failed [ 34.527080][ T576] FAT-fs (loop1): Directory bread(block 68) failed [ 34.533676][ T576] FAT-fs (loop1): Directory bread(block 69) failed [ 34.540503][ T480] hub 4-1:0.0: hub_hub_status failed (err = -71) [ 34.550451][ T480] hub 4-1:0.0: config failed, can't get hub status (err -71) [ 34.560382][ T576] FAT-fs (loop1): Directory bread(block 70) failed [ 34.594462][ T576] FAT-fs (loop1): Directory bread(block 71) failed [ 34.601872][ T576] FAT-fs (loop1): Directory bread(block 72) failed [ 34.608827][ T576] FAT-fs (loop1): Directory bread(block 73) failed [ 34.676542][ T480] usbhid 4-1:0.0: can't add hid device: -71 [ 34.682608][ T480] usbhid: probe of 4-1:0.0 failed with error -71 [ 34.716849][ T587] netlink: 8 bytes leftover after parsing attributes in process `syz.4.55'. [ 34.735944][ T480] usb 4-1: USB disconnect, device number 2 [ 34.767250][ T372] Bluetooth: hci0: command 0x1003 tx timeout [ 34.773520][ T541] Bluetooth: hci0: sending frame failed (-49) [ 35.267883][ T596] 9pnet: Insufficient options for proto=fd [ 35.378167][ T598] netlink: 4 bytes leftover after parsing attributes in process `syz.4.60'. [ 35.518918][ T598] syz.4.60 (598) used greatest stack depth: 21600 bytes left [ 35.668292][ T23] kauditd_printk_skb: 19 callbacks suppressed [ 35.668304][ T23] audit: type=1400 audit(1746428305.936:194): avc: denied { mounton } for pid=602 comm="syz.4.62" path="/13/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 35.680907][ T603] incfs_lookup_dentry err:-14 [ 35.702723][ T603] incfs: Can't find or create .index dir in ./file0 [ 35.709647][ T603] incfs: mount failed -14 [ 35.761067][ T23] audit: type=1326 audit(1746428306.026:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=606 comm="syz.2.65" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3da72bc969 code=0x0 [ 35.820589][ T23] audit: type=1400 audit(1746428306.086:196): avc: denied { create } for pid=608 comm="syz.1.66" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 35.891975][ T609] EXT4-fs (loop1): Test dummy encryption mode enabled [ 35.899113][ T609] EXT4-fs (loop1): Test dummy encryption mode enabled [ 35.906642][ T609] EXT4-fs (loop1): Unsupported blocksize for fs encryption [ 36.002182][ T609] 9pnet: Insufficient options for proto=fd [ 36.047377][ T623] EXT4-fs (loop1): orphan cleanup on readonly fs [ 36.061867][ T623] EXT4-fs warning (device loop1): ext4_enable_quotas:6100: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 36.077178][ T623] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 36.084080][ T623] EXT4-fs error (device loop1): ext4_ext_check_inode:543: inode #13: comm syz.1.71: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 36.104683][ T623] EXT4-fs error (device loop1): ext4_orphan_get:1242: comm syz.1.71: couldn't read orphan inode 13 (err -117) [ 36.116684][ T623] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 36.125899][ T23] audit: type=1400 audit(1746428306.386:197): avc: denied { mount } for pid=622 comm="syz.1.71" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 36.153632][ T623] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 36.164053][ T623] EXT4-fs warning (device loop1): read_mmp_block:111: Error -117 while reading MMP block 2 [ 36.296577][ T18] usb 5-1: new low-speed USB device number 2 using dummy_hcd [ 36.756768][ T18] usb 5-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 36.818654][ T18] usb 5-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 36.831418][ T18] usb 5-1: config 0 interface 0 has no altsetting 0 [ 36.838607][ T18] usb 5-1: New USB device found, idVendor=04d9, idProduct=a067, bcdDevice= 0.00 [ 36.848317][ T18] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 36.856496][ T480] Bluetooth: hci0: command 0x1001 tx timeout [ 36.859187][ T18] usb 5-1: config 0 descriptor?? [ 36.863614][ T541] Bluetooth: hci0: sending frame failed (-49) [ 36.886906][ T619] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 37.066591][ T23] audit: type=1400 audit(1746428307.203:198): avc: denied { write } for pid=640 comm="syz.2.76" name="ipv6_route" dev="proc" ino=4026532341 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 37.345208][ T18] holtek_mouse 0003:04D9:A067.0002: unknown main item tag 0x0 [ 37.355128][ T18] holtek_mouse 0003:04D9:A067.0002: unknown main item tag 0x0 [ 37.373923][ T18] holtek_mouse 0003:04D9:A067.0002: unknown main item tag 0x0 [ 37.384000][ T18] holtek_mouse 0003:04D9:A067.0002: unknown main item tag 0x0 [ 37.401792][ T18] holtek_mouse 0003:04D9:A067.0002: unknown main item tag 0x0 [ 37.411875][ T18] holtek_mouse 0003:04D9:A067.0002: unknown main item tag 0x0 [ 37.429679][ T18] holtek_mouse 0003:04D9:A067.0002: unknown main item tag 0x0 [ 37.439758][ T18] holtek_mouse 0003:04D9:A067.0002: unknown main item tag 0x0 [ 37.457840][ T18] holtek_mouse 0003:04D9:A067.0002: hidraw0: USB HID v0.00 Device [HID 04d9:a067] on usb-dummy_hcd.4-1/input0 [ 37.492516][ T23] audit: type=1400 audit(1746428307.763:199): avc: denied { name_bind } for pid=645 comm="syz.3.77" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 37.534464][ T23] audit: type=1400 audit(1746428307.783:200): avc: denied { node_bind } for pid=645 comm="syz.3.77" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 37.576131][ T18] usb 5-1: USB disconnect, device number 2 [ 38.057109][ T660] EXT4-fs (loop1): mounted filesystem without journal. Opts: noquota,barrier=0x0000000000001000,grpjquota=,noauto_da_alloc,dioread_lock,,errors=continue [ 38.127877][ T660] ext4 filesystem being mounted at /14/file1 supports timestamps until (%ptR?) (0x7fffffff) [ 38.136200][ T668] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 38.151388][ T668] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 38.162031][ T660] EXT4-fs error (device loop1): ext4_xattr_block_get:544: inode #15: comm syz.1.82: corrupted xattr block 19 [ 38.165366][ T668] System zones: 0-2, 18-18, 34-35 [ 38.177161][ T660] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 38.179839][ T668] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 38.188483][ T660] EXT4-fs error (device loop1): ext4_xattr_block_get:544: inode #15: comm syz.1.82: corrupted xattr block 19 [ 38.213264][ T660] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 38.222635][ T23] audit: type=1400 audit(1746428308.493:201): avc: denied { setattr } for pid=659 comm="syz.1.82" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 38.222664][ T660] EXT4-fs error (device loop1): ext4_xattr_block_get:544: inode #15: comm syz.1.82: corrupted xattr block 19 [ 38.359539][ T674] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 38.426688][ T108] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 38.463049][ T23] audit: type=1400 audit(1746428308.733:202): avc: denied { bind } for pid=682 comm="syz.3.88" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 38.502300][ T685] cgroup: syz.3.89 (685) created nested cgroup for controller "memory" which has incomplete hierarchy support. Nested cgroups may change behavior in the future. [ 38.518727][ T685] cgroup: "memory" requires setting use_hierarchy to 1 on the root [ 38.531674][ T103] EXT4-fs error (device loop1): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 38.546894][ T103] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2048 with error 28 [ 38.560062][ T103] EXT4-fs (loop1): This should not happen!! Data will be lost [ 38.560062][ T103] [ 38.571865][ T103] EXT4-fs (loop1): Total free blocks count 0 [ 38.578129][ T103] EXT4-fs (loop1): Free/Dirty block details [ 38.584239][ T103] EXT4-fs (loop1): free_blocks=68451041280 [ 38.590321][ T103] EXT4-fs (loop1): dirty_blocks=2064 [ 38.595691][ T103] EXT4-fs (loop1): Block reservation details [ 38.602327][ T103] EXT4-fs (loop1): i_reserved_data_blocks=129 [ 38.737200][ T23] audit: type=1400 audit(1746428309.003:203): avc: denied { mounton } for pid=684 comm="syz.3.89" path="/19/file0" dev="tmpfs" ino=15083 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 38.900922][ T687] erofs: (device loop2): mounted with opts: , root inode @ nid 36. [ 38.926511][ T480] Bluetooth: hci0: command 0x1009 tx timeout [ 38.936612][ T108] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 38.949146][ T108] usb 5-1: config 0 interface 0 has no altsetting 0 [ 39.002594][ T697] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 39.033255][ T697] EXT4-fs error (device loop1) in ext4_do_update_inode:5534: error 27 [ 39.043177][ T697] EXT4-fs error (device loop1) in ext4_do_update_inode:5534: error 27 [ 39.051627][ T697] EXT4-fs error (device loop1) in ext4_do_update_inode:5534: error 27 [ 39.061397][ T697] EXT4-fs error (device loop1) in ext4_do_update_inode:5534: error 27 [ 39.070069][ T697] EXT4-fs error (device loop1) in ext4_setattr:5884: error 27 [ 39.081073][ T697] EXT4-fs error (device loop1) in ext4_do_update_inode:5534: error 27 [ 39.090136][ T697] EXT4-fs error (device loop1) in ext4_do_update_inode:5534: error 27 [ 39.098551][ T697] EXT4-fs warning (device loop1): ext4_evict_inode:304: couldn't mark inode dirty (err -27) [ 39.116576][ T108] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 39.125628][ T108] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 39.134177][ T108] usb 5-1: Product: syz [ 39.138430][ T108] usb 5-1: Manufacturer: syz [ 39.143059][ T108] usb 5-1: SerialNumber: syz [ 39.148487][ T108] usb 5-1: config 0 descriptor?? [ 39.177802][ T706] EXT4-fs (loop2): mounted filesystem without journal. Opts: min_batch_time=0x0000000000000000,inlinecrypt,grpquota,errors=remount-ro, [ 39.192883][ T108] usb 5-1: selecting invalid altsetting 0 [ 39.200796][ T706] EXT4-fs error (device loop2): ext4_find_extent:974: inode #2: comm syz.2.96: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 39.220361][ T706] EXT4-fs (loop2): Remounting filesystem read-only [ 39.228477][ T18] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 39.395985][ T108] usb 5-1: USB disconnect, device number 3 [ 39.466533][ T18] usb 4-1: Using ep0 maxpacket: 16 [ 39.586569][ T18] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 39.597802][ T18] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 39.607563][ T18] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 39.620363][ T18] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 39.629424][ T18] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 39.638042][ T18] usb 4-1: config 0 descriptor?? [ 39.993664][ T720] xt_bpf: check failed: parse error [ 40.117478][ T18] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 40.124870][ T18] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 40.134934][ T18] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 40.144574][ T18] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 40.151864][ T18] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 40.159269][ T18] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 40.167142][ T18] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 40.186547][ T18] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 40.193774][ T18] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 40.206523][ T410] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 40.206559][ T18] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 40.214371][ T727] EXT4-fs (loop1): Ignoring removed bh option [ 40.228362][ T727] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 40.238152][ T727] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2227: inode #15: comm syz.1.104: corrupted in-inode xattr [ 40.241425][ T18] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0003/input/input5 [ 40.250276][ T727] EXT4-fs error (device loop1): ext4_orphan_get:1242: comm syz.1.104: couldn't read orphan inode 15 (err -117) [ 40.273521][ T727] EXT4-fs (loop1): mounted filesystem without journal. Opts: norecovery,acl,bh,noload,nombcache,data_err=ignore,noinit_itable,max_dir_size_kb=0x0000000000000002,,errors=continue [ 40.298474][ T18] microsoft 0003:045E:07DA.0003: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 40.336604][ T18] usb 4-1: USB disconnect, device number 3 [ 40.606604][ T410] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 40.616735][ T410] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 40.706589][ T410] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 40.715989][ T410] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 40.724451][ T410] usb 3-1: SerialNumber: syz [ 40.768767][ T410] cdc_acm 3-1:1.0: Control and data interfaces are not separated! [ 40.777004][ T410] cdc_acm: probe of 3-1:1.0 failed with error -12 [ 40.958533][ T23] kauditd_printk_skb: 12 callbacks suppressed [ 40.958544][ T23] audit: type=1400 audit(1746428311.233:216): avc: denied { read } for pid=738 comm="syz.4.106" name="usbmon0" dev="devtmpfs" ino=10437 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 40.989459][ T23] audit: type=1400 audit(1746428311.233:217): avc: denied { open } for pid=738 comm="syz.4.106" path="/dev/usbmon0" dev="devtmpfs" ino=10437 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 41.013591][ T23] audit: type=1400 audit(1746428311.233:218): avc: denied { write } for pid=738 comm="syz.4.106" name="usbmon8" dev="devtmpfs" ino=537 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 41.042369][ T480] usb 3-1: USB disconnect, device number 3 [ 41.108553][ T23] audit: type=1400 audit(1746428311.383:219): avc: denied { connect } for pid=746 comm="syz.1.109" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 41.503324][ T753] syz.4.108[753] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 41.503375][ T753] syz.4.108[753] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 41.557695][ T23] audit: type=1400 audit(1746428311.793:220): avc: denied { mounton } for pid=742 comm="syz.4.108" path="/proc/73/task" dev="proc" ino=15526 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 41.592035][ T18] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 41.600755][ T23] audit: type=1400 audit(1746428311.793:221): avc: denied { mount } for pid=742 comm="syz.4.108" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 42.206647][ T18] usb 4-1: config 1 has an invalid descriptor of length 86, skipping remainder of the config [ 42.226222][ T18] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 42.280681][ T750] sched: RT throttling activated [ 42.286082][ T23] audit: type=1400 audit(1746428312.553:222): avc: denied { write } for pid=755 comm="syz.2.111" name="uinput" dev="devtmpfs" ino=616 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 42.287015][ T756] input: syz1 as /devices/virtual/input/input6 [ 42.309084][ T23] audit: type=1400 audit(1746428312.553:223): avc: denied { open } for pid=755 comm="syz.2.111" path="/dev/uinput" dev="devtmpfs" ino=616 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 42.309105][ T23] audit: type=1400 audit(1746428312.553:224): avc: denied { ioctl } for pid=755 comm="syz.2.111" path="/dev/uinput" dev="devtmpfs" ino=616 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 42.364515][ T23] audit: type=1400 audit(1746428312.613:225): avc: denied { create } for pid=760 comm="syz.1.113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 42.476581][ T18] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 42.485733][ T18] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 42.494155][ T18] usb 4-1: Product: syz [ 42.498383][ T18] usb 4-1: Manufacturer: syz [ 42.502989][ T18] usb 4-1: SerialNumber: syz [ 42.826838][ T18] usb 4-1: 0:2 : does not exist [ 42.962089][ T18] usb 4-1: USB disconnect, device number 4 [ 43.328539][ T518] udevd[518]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 43.645887][ T791] erofs: (device loop0): check_layout_compatibility: unidentified incompatible feature 8, please upgrade kernel version [ 43.776510][ T410] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 44.063533][ T786] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 44.074643][ T786] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 44.087113][ T786] F2FS-fs (loop2): invalid crc value [ 44.112272][ T813] device pim6reg1 entered promiscuous mode [ 44.116551][ T786] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 44.155491][ T786] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 44.162812][ T786] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 44.647347][ T410] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 44.657892][ T410] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 44.726546][ T789] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 44.726568][ T754] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 44.746581][ T410] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 44.755748][ T410] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 44.763837][ T410] usb 2-1: SerialNumber: syz [ 44.936513][ T480] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 45.047127][ T410] usb 2-1: 0:2 : does not exist [ 45.083309][ T410] usb 2-1: USB disconnect, device number 4 [ 45.112464][ T789] usb 1-1: config index 0 descriptor too short (expected 60443, got 27) [ 45.116605][ T754] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 45.121135][ T789] usb 1-1: config 1 has an invalid interface number: 0 but max is -1 [ 45.140402][ T789] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 0 [ 45.149437][ T754] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 45.149605][ T789] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 45.160305][ T754] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 45.168885][ T789] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 45.168913][ T789] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 45.180122][ T754] usb 3-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 45.189731][ T831] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 45.202135][ T754] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 45.213818][ T831] EXT4-fs (loop3): Unsupported blocksize for fs encryption [ 45.221908][ T754] usb 3-1: config 0 descriptor?? [ 45.277112][ T754] usb 3-1: MIDIStreaming interface descriptor not found [ 45.296883][ T518] udevd[518]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 45.336581][ T480] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 45.348529][ T480] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 45.358650][ T480] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 45.369996][ T480] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 45.376629][ T789] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 45.388806][ T789] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 45.396810][ T789] usb 1-1: Product: syz [ 45.400956][ T789] usb 1-1: Manufacturer: syz [ 45.405522][ T789] usb 1-1: SerialNumber: syz [ 45.510488][ T74] usb 3-1: USB disconnect, device number 4 [ 45.536683][ T480] usb 5-1: New USB device found, idVendor=0738, idProduct=a2c5, bcdDevice=1e.ce [ 45.545961][ T480] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 45.554146][ T480] usb 5-1: Product: syz [ 45.558784][ T480] usb 5-1: Manufacturer: syz [ 45.868042][ T480] usb 5-1: SerialNumber: syz [ 45.873639][ T480] usb 5-1: config 0 descriptor?? [ 45.908675][ T843] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 45.918752][ T480] xpad 5-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 45.923155][ T843] ext4 filesystem being mounted at /30/file1 supports timestamps until (%ptR?) (0x7fffffff) [ 45.929823][ T480] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input8 [ 45.946192][ T789] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 45.969440][ T789] usb 1-1: USB disconnect, device number 2 [ 45.984756][ T789] usblp0: removed [ 46.124263][ T371] usb 5-1: USB disconnect, device number 4 [ 46.132109][ T371] xpad 5-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 46.201003][ T858] syz.1.146[858] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 46.201034][ T858] syz.1.146[858] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 46.466376][ T866] syz.0.149 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 46.587946][ T868] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_lock,auto_da_alloc,nojournal_checksum,norecovery,auto_da_alloc,noquota,data_err=abort,grpid,grpjquota=,nouid32,grpid,,errors=continue [ 46.941856][ T23] kauditd_printk_skb: 3 callbacks suppressed [ 46.941867][ T23] audit: type=1400 audit(1746428317.213:229): avc: denied { write } for pid=877 comm="syz.3.151" name="001" dev="devtmpfs" ino=530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 46.980464][ T23] audit: type=1400 audit(1746428317.253:230): avc: denied { write } for pid=879 comm="syz.4.152" name="/" dev="9p" ino=1694025360095192279 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 47.003449][ T23] audit: type=1400 audit(1746428317.253:231): avc: denied { add_name } for pid=879 comm="syz.4.152" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 47.025214][ T23] audit: type=1400 audit(1746428317.253:232): avc: denied { associate } for pid=879 comm="syz.4.152" name="file1" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 47.236556][ T754] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 47.414633][ T900] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 47.423823][ T900] ext4 filesystem being mounted at /36/file1 supports timestamps until (%ptR?) (0x7fffffff) [ 47.456607][ T410] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 47.606647][ T754] usb 4-1: device descriptor read/64, error 18 [ 47.877476][ T410] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 47.917219][ T410] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 48.054975][ T410] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 48.096531][ T754] usb 4-1: device descriptor read/64, error 18 [ 48.154448][ T410] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 48.218692][ T410] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 48.280575][ T410] usb 3-1: config 0 descriptor?? [ 48.344892][ T898] F2FS-fs (loop1): Found nat_bits in checkpoint [ 48.366610][ T754] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 48.393435][ T898] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 48.536800][ T23] audit: type=1400 audit(1746428318.813:233): avc: denied { map } for pid=897 comm="syz.1.161" path="/40/file0/memory.events.local" dev="loop1" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 48.580080][ T898] attempt to access beyond end of device [ 48.580080][ T898] loop1: rw=2049, want=79904, limit=40427 [ 48.595789][ T898] attempt to access beyond end of device [ 48.595789][ T898] loop1: rw=2049, want=81920, limit=40427 [ 48.616307][ T898] attempt to access beyond end of device [ 48.616307][ T898] loop1: rw=2049, want=53248, limit=40427 [ 48.635369][ T898] attempt to access beyond end of device [ 48.635369][ T898] loop1: rw=2049, want=60192, limit=40427 [ 48.646757][ T754] usb 4-1: device descriptor read/64, error 18 [ 48.718419][ T898] attempt to access beyond end of device [ 48.718419][ T898] loop1: rw=524288, want=78080, limit=40427 [ 48.729974][ T898] attempt to access beyond end of device [ 48.729974][ T898] loop1: rw=0, want=77832, limit=40427 [ 48.741495][ T898] attempt to access beyond end of device [ 48.741495][ T898] loop1: rw=0, want=77832, limit=40427 [ 48.753747][ T410] plantronics 0003:047F:FFFF.0004: unknown main item tag 0xd [ 48.761404][ T898] attempt to access beyond end of device [ 48.761404][ T898] loop1: rw=0, want=77832, limit=40427 [ 48.767468][ T410] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 48.774549][ T897] attempt to access beyond end of device [ 48.774549][ T897] loop1: rw=0, want=77832, limit=40427 [ 48.784095][ T410] plantronics 0003:047F:FFFF.0004: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 48.792184][ T898] attempt to access beyond end of device [ 48.792184][ T898] loop1: rw=0, want=77832, limit=40427 [ 48.953674][ T23] audit: type=1400 audit(1746428319.223:234): avc: denied { ioctl } for pid=923 comm="syz.0.167" path="socket:[17112]" dev="sockfs" ino=17112 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 48.969245][ T371] usb 3-1: USB disconnect, device number 5 [ 49.056538][ T754] usb 4-1: device descriptor read/64, error 18 [ 49.086580][ T18] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 49.176929][ T754] usb usb4-port1: attempt power cycle [ 49.314690][ T929] EXT4-fs (loop1): Ignoring removed nobh option [ 49.449544][ T929] EXT4-fs (loop1): orphan cleanup on readonly fs [ 49.458949][ T929] EXT4-fs error (device loop1): ext4_validate_block_bitmap:418: comm syz.1.168: bg 0: block 248: padding at end of block bitmap is not set [ 49.474450][ T929] Quota error (device loop1): write_blk: dquota write failed [ 49.482005][ T929] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 49.493826][ T929] EXT4-fs (loop1): 1 truncate cleaned up [ 49.502823][ T23] audit: type=1400 audit(1746428319.773:235): avc: denied { remove_name } for pid=146 comm="syslogd" name="messages" dev="tmpfs" ino=727 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 49.503946][ T929] EXT4-fs (loop1): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,nobh,usrquota,nodiscard,,errors=continue [ 49.577612][ T929] Zero length message leads to an empty skb [ 49.703658][ T754] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 49.921672][ T18] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 49.922749][ T23] audit: type=1400 audit(1746428319.773:236): avc: denied { rename } for pid=146 comm="syslogd" name="messages" dev="tmpfs" ino=727 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 49.964049][ T936] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 50.169564][ T18] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 50.656595][ T18] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 50.706560][ T754] usb 4-1: device descriptor read/8, error -71 [ 50.724455][ T18] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 50.732900][ T18] usb 5-1: Product: syz [ 50.737272][ T18] usb 5-1: Manufacturer: syz [ 50.742295][ T18] usb 5-1: SerialNumber: syz [ 50.827646][ T946] syz.0.171[946] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 50.827874][ T946] syz.0.171[946] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 51.816611][ T754] usb 4-1: device descriptor read/8, error -71 [ 51.818988][ T961] EXT4-fs (loop0): 1 orphan inode deleted [ 51.839999][ T961] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 51.849279][ T961] ext4 filesystem being mounted at /24/file1 supports timestamps until (%ptR?) (0x7fffffff) [ 51.886571][ T371] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 51.941887][ T969] process 'syz.0.178' launched './file1' with NULL argv: empty string added [ 51.952350][ T23] kauditd_printk_skb: 62 callbacks suppressed [ 51.952370][ T23] audit: type=1400 audit(1746428322.223:299): avc: denied { execute_no_trans } for pid=960 comm="syz.0.178" path="/24/file1/file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 52.056588][ T18] cdc_ncm 5-1:1.0: bind() failure [ 52.064318][ T18] usb 5-1: USB disconnect, device number 5 [ 52.100933][ T23] audit: type=1400 audit(1746428322.373:300): avc: denied { mount } for pid=972 comm="syz.0.180" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 52.122726][ T23] audit: type=1400 audit(1746428322.383:301): avc: denied { unmount } for pid=340 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 52.142564][ T371] usb 2-1: Using ep0 maxpacket: 16 [ 52.162862][ T23] audit: type=1400 audit(1746428322.433:302): avc: denied { write } for pid=975 comm="syz.0.182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 52.281850][ T981] FAT-fs (loop3): Unrecognized mount option "uni_xlatY=0" or missing value [ 52.291065][ T371] usb 2-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 32, changing to 9 [ 52.303135][ T371] usb 2-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 52.312965][ T371] usb 2-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 52.325892][ T371] usb 2-1: config 0 interface 0 has no altsetting 0 [ 52.332674][ T371] usb 2-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 52.341759][ T371] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.350342][ T371] usb 2-1: config 0 descriptor?? [ 52.448070][ T986] EXT4-fs (loop0): Unsupported blocksize for fs encryption [ 52.855318][ T23] audit: type=1326 audit(1746428323.113:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=995 comm="syz.4.189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc90e0f4969 code=0x7ffc0000 [ 52.879716][ T23] audit: type=1326 audit(1746428323.113:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=995 comm="syz.4.189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7fc90e0f4969 code=0x7ffc0000 [ 52.905476][ T23] audit: type=1326 audit(1746428323.113:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=995 comm="syz.4.189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc90e0f4969 code=0x7ffc0000 [ 52.929395][ T23] audit: type=1326 audit(1746428323.113:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=995 comm="syz.4.189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fc90e0f4969 code=0x7ffc0000 [ 52.957841][ T23] audit: type=1326 audit(1746428323.113:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=995 comm="syz.4.189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc90e0f4969 code=0x7ffc0000 [ 52.987795][ T23] audit: type=1326 audit(1746428323.113:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=995 comm="syz.4.189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fc90e0f4969 code=0x7ffc0000 [ 53.049456][ T371] magicmouse 0003:05AC:0265.0005: item fetching failed at offset 0/1 [ 53.058264][ T371] magicmouse 0003:05AC:0265.0005: magicmouse hid parse failed [ 53.066178][ T371] magicmouse: probe of 0003:05AC:0265.0005 failed with error -22 [ 53.352076][ T108] usb 2-1: USB disconnect, device number 5 [ 54.521159][ T1040] FAT-fs (loop3): Directory bread(block 64) failed [ 54.529262][ T1040] FAT-fs (loop3): Directory bread(block 65) failed [ 54.536030][ T1040] FAT-fs (loop3): Directory bread(block 66) failed [ 54.545796][ T1040] FAT-fs (loop3): Directory bread(block 67) failed [ 54.553403][ T1040] FAT-fs (loop3): Directory bread(block 68) failed [ 54.560818][ T1040] FAT-fs (loop3): Directory bread(block 69) failed [ 54.568088][ T1040] FAT-fs (loop3): Directory bread(block 70) failed [ 54.574938][ T1040] FAT-fs (loop3): Directory bread(block 71) failed [ 54.582509][ T1040] FAT-fs (loop3): Directory bread(block 72) failed [ 54.590339][ T1040] FAT-fs (loop3): Directory bread(block 73) failed [ 55.434057][ T1051] netlink: 8 bytes leftover after parsing attributes in process `syz.2.205'. [ 56.322500][ T1052] netlink: 'syz.3.202': attribute type 4 has an invalid length. [ 56.576609][ T1052] syz.3.202 (1052) used greatest stack depth: 20896 bytes left [ 56.918267][ T1090] capability: warning: `syz.0.221' uses 32-bit capabilities (legacy support in use) [ 56.934982][ T1080] EXT4-fs (loop3): mounted filesystem without journal. Opts: discard,abort,dioread_lock,usrquota,nombcache,lazytime,noload,usrquota,noauto_da_alloc,resuid=0x0000000000000000,init_itable=0x0000000000000000,jqfmt=vfsv1,,errors=continue [ 56.985215][ T23] kauditd_printk_skb: 255 callbacks suppressed [ 56.985227][ T23] audit: type=1400 audit(1746428327.253:564): avc: denied { mounton } for pid=1075 comm="syz.3.214" path="/35/file1/bus" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 57.017771][ T23] audit: type=1400 audit(1746428327.283:565): avc: denied { write } for pid=1075 comm="syz.3.214" name="bus" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 57.067461][ T23] audit: type=1400 audit(1746428327.283:566): avc: denied { add_name } for pid=1075 comm="syz.3.214" name="work" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 57.089670][ T23] audit: type=1400 audit(1746428327.293:567): avc: denied { setattr } for pid=1075 comm="syz.3.214" name="work" dev="loop3" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 57.627480][ T1111] EXT4-fs (loop2): Unrecognized mount option "dont_appraise" or missing value [ 57.702892][ T1080] overlayfs: statfs failed on './file0' [ 57.837320][ T23] audit: type=1400 audit(1746428328.113:568): avc: denied { rmdir } for pid=341 comm="syz-executor" name="lost+found" dev="loop3" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 57.865794][ T341] EXT4-fs error (device loop3): ext4_lookup:1821: inode #2: comm syz-executor: deleted inode referenced: 11 [ 57.894159][ T341] EXT4-fs error (device loop3): ext4_lookup:1821: inode #2: comm syz-executor: deleted inode referenced: 11 [ 57.926017][ T23] audit: type=1400 audit(1746428328.133:569): avc: denied { unlink } for pid=341 comm="syz-executor" name="file1" dev="loop3" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 58.194234][ T1117] F2FS-fs (loop1): Unrecognized mount option "errors=remount-ro" or missing value [ 58.216788][ T23] audit: type=1400 audit(1746428328.483:570): avc: denied { create } for pid=1124 comm="syz.4.233" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=key permissive=1 [ 58.308372][ T23] audit: type=1400 audit(1746428328.583:571): avc: denied { create } for pid=1128 comm="syz.0.236" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 58.334525][ T23] audit: type=1400 audit(1746428328.603:572): avc: denied { connect } for pid=1128 comm="syz.0.236" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 58.577243][ T23] audit: type=1400 audit(1746428328.733:573): avc: denied { create } for pid=1124 comm="syz.4.233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 58.791487][ T1130] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.811320][ T1130] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.823628][ T1130] device bridge_slave_0 entered promiscuous mode [ 58.833335][ T1130] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.840623][ T1130] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.849626][ T1130] device bridge_slave_1 entered promiscuous mode [ 58.888625][ T1130] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.895742][ T1130] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.903229][ T1130] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.910272][ T1130] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.964024][ T1141] netlink: 4 bytes leftover after parsing attributes in process `syz.0.237'. [ 58.989259][ T1141] netlink: 12 bytes leftover after parsing attributes in process `syz.0.237'. [ 59.213459][ T103] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.221231][ T103] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.251152][ T474] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 59.258755][ T474] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 59.271306][ T474] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 59.280215][ T474] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 59.287412][ T1145] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 59.290104][ T474] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.303676][ T474] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.312752][ T1145] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c128, mo2=0002] [ 59.322237][ T1145] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2227: inode #15: comm syz.4.239: corrupted in-inode xattr [ 59.334818][ T1145] EXT4-fs (loop4): Remounting filesystem read-only [ 59.341600][ T1145] EXT4-fs error (device loop4): ext4_orphan_get:1242: comm syz.4.239: couldn't read orphan inode 15 (err -117) [ 59.353781][ T1145] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,max_batch_time=0x0000000000000001,debug,noload,min_batch_time=0x0000000000000008,noblock_validity,init_itable=0x0000000000000601,inode_readahead_blks=0x0000000000008000, [ 59.386735][ T480] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 59.397471][ T474] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 59.406133][ T474] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 59.416086][ T474] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.423179][ T474] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.432917][ T474] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 59.468923][ T474] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 59.479158][ T474] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 59.489607][ T474] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 59.560083][ T474] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 59.570143][ T474] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 59.669874][ T474] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 59.678023][ T474] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 59.714339][ T474] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 59.723272][ T474] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 59.732500][ T480] usb 3-1: Using ep0 maxpacket: 16 [ 59.787464][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 59.795722][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.804194][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 59.813722][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 59.817061][ T1157] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 59.832142][ T1157] EXT4-fs (loop0): Unsupported blocksize for fs encryption [ 59.840084][ T364] device bridge_slave_1 left promiscuous mode [ 59.847460][ T364] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.855899][ T364] device bridge_slave_0 left promiscuous mode [ 59.864006][ T364] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.025781][ T480] usb 3-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 32, changing to 9 [ 60.037468][ T480] usb 3-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 60.047488][ T480] usb 3-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 60.060426][ T480] usb 3-1: config 0 interface 0 has no altsetting 0 [ 60.067244][ T480] usb 3-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 60.076705][ T480] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.085545][ T480] usb 3-1: config 0 descriptor?? [ 60.487380][ T1169] EXT4-fs (loop1): mounted filesystem without journal. Opts: min_batch_time=0x0000000000000000,inlinecrypt,grpquota,errors=remount-ro, [ 60.827932][ T1169] EXT4-fs error (device loop1): ext4_find_extent:974: inode #2: comm syz.1.244: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 60.905045][ T1180] erofs: (device loop4): check_layout_compatibility: unidentified incompatible feature 8, please upgrade kernel version [ 60.947972][ T1169] EXT4-fs (loop1): Remounting filesystem read-only [ 61.564869][ T480] magicmouse 0003:05AC:0265.0006: item fetching failed at offset 0/1 [ 61.575955][ T480] magicmouse 0003:05AC:0265.0006: magicmouse hid parse failed [ 61.584236][ T480] magicmouse: probe of 0003:05AC:0265.0006 failed with error -22 [ 61.593572][ T480] usb 3-1: USB disconnect, device number 6 [ 61.801072][ T1189] netlink: 4 bytes leftover after parsing attributes in process `syz.1.250'. [ 61.906119][ T1193] cgroup1: No subsys list or none specified [ 61.998764][ T1191] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 62.066693][ T23] kauditd_printk_skb: 8 callbacks suppressed [ 62.066729][ T23] audit: type=1400 audit(1746428332.333:582): avc: denied { read } for pid=1194 comm="syz.1.253" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 62.077948][ T1191] EXT4-fs (loop4): invalid journal inode [ 62.136791][ T1191] EXT4-fs (loop4): can't get journal size [ 62.243251][ T1191] EXT4-fs (loop4): 1 truncate cleaned up [ 62.249171][ T1191] EXT4-fs (loop4): mounted filesystem without journal. Opts: norecovery,max_batch_time=0x0000000000000003,,errors=continue [ 63.029832][ T1212] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 63.259418][ T1212] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002] [ 63.270400][ T1212] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2227: inode #15: comm syz.1.257: corrupted in-inode xattr [ 63.283480][ T1212] EXT4-fs error (device loop1): ext4_orphan_get:1242: comm syz.1.257: couldn't read orphan inode 15 (err -117) [ 63.296275][ T1212] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsold,max_batch_time=0x0000000000000001,debug,noload,nombcache,noblock_validity,init_itable=0x0000000000000601,inode_readahead_blks=0x0000000000008000,,errors=continue [ 63.372159][ T1221] netlink: 60 bytes leftover after parsing attributes in process `syz.5.260'. [ 63.404637][ T1221] input: syz0 as /devices/virtual/input/input10 [ 64.076960][ T1233] kernel profiling enabled (shift: 17) [ 64.097604][ T1233] fuse: Bad value for 'rootmode' [ 64.131301][ T23] audit: type=1326 audit(1746428334.403:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1239 comm="syz.4.267" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc90e0f4969 code=0x0 [ 64.163842][ T23] audit: type=1400 audit(1746428334.433:584): avc: denied { bind } for pid=1236 comm="syz.1.266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 64.183600][ T23] audit: type=1400 audit(1746428334.433:585): avc: denied { listen } for pid=1236 comm="syz.1.266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 64.209184][ T23] audit: type=1400 audit(1746428334.433:586): avc: denied { accept } for pid=1236 comm="syz.1.266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 64.436542][ T18] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 64.538187][ T1248] FAT-fs (loop0): bogus number of reserved sectors [ 64.544873][ T1248] FAT-fs (loop0): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 64.554272][ T1248] FAT-fs (loop0): Can't find a valid FAT filesystem [ 64.676503][ T18] usb 6-1: Using ep0 maxpacket: 16 [ 64.791427][ T23] audit: type=1400 audit(1746428335.063:587): avc: denied { mounton } for pid=1239 comm="syz.4.267" path="/55/file0" dev="tmpfs" ino=19279 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 64.796554][ T18] usb 6-1: config index 0 descriptor too short (expected 30768, got 72) [ 64.823283][ T18] usb 6-1: config 48 has too many interfaces: 48, using maximum allowed: 32 [ 64.832456][ T18] usb 6-1: config 48 has an invalid descriptor of length 0, skipping remainder of the config [ 64.843010][ T18] usb 6-1: config 48 has 0 interfaces, different from the descriptor's value: 48 [ 65.006584][ T18] usb 6-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 65.015766][ T18] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.024999][ T18] usb 6-1: Product: syz [ 65.031443][ T18] usb 6-1: Manufacturer: syz [ 65.036055][ T18] usb 6-1: SerialNumber: syz [ 65.246751][ T13] cfg80211: failed to load regulatory.db [ 65.291636][ T1270] F2FS-fs (loop4): Found nat_bits in checkpoint [ 65.333520][ T1270] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 65.354145][ T342] handle_bad_sector: 3686 callbacks suppressed [ 65.354158][ T342] attempt to access beyond end of device [ 65.354158][ T342] loop4: rw=2049, want=45112, limit=40427 [ 65.356586][ T754] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 65.366152][ T18] usb 6-1: USB disconnect, device number 2 [ 65.956582][ T18] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 66.260434][ T23] audit: type=1400 audit(1746428336.273:588): avc: denied { write } for pid=1292 comm="syz.4.282" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 66.271205][ T754] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 66.297472][ T754] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 66.307515][ T754] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 66.320491][ T754] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 66.330160][ T754] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.340523][ T754] usb 1-1: config 0 descriptor?? [ 66.364121][ T23] audit: type=1400 audit(1746428336.333:589): avc: denied { mounton } for pid=1292 comm="syz.4.282" path="/syzcgroup/cpu/syz4/cpuset.cpus" dev="cgroup" ino=217 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 66.397481][ T23] audit: type=1400 audit(1746428336.603:590): avc: denied { execute } for pid=1298 comm="syz.5.287" name="file0" dev="tmpfs" ino=19868 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 66.432430][ T23] audit: type=1400 audit(1746428336.603:591): avc: denied { execute_no_trans } for pid=1298 comm="syz.5.287" path="/8/file0" dev="tmpfs" ino=19868 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 67.151388][ T23] kauditd_printk_skb: 6 callbacks suppressed [ 67.151400][ T23] audit: type=1326 audit(1746428337.163:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1301 comm="syz.5.289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f36a878e969 code=0x7ffc0000 [ 67.446562][ T18] usb 3-1: config 0 has an invalid interface number: 23 but max is 0 [ 67.454957][ T18] usb 3-1: config 0 has no interface number 0 [ 67.479882][ T754] plantronics 0003:047F:FFFF.0007: unknown main item tag 0xd [ 67.489936][ T23] audit: type=1400 audit(1746428337.763:599): avc: denied { connect } for pid=1318 comm="syz.5.294" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 67.567443][ T1322] netlink: 24 bytes leftover after parsing attributes in process `syz.1.293'. [ 67.657365][ T18] usb 3-1: New USB device found, idVendor=03f0, idProduct=0307, bcdDevice= 0.01 [ 67.687788][ T18] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.732586][ T18] usb 3-1: Product: syz [ 67.750290][ T754] plantronics 0003:047F:FFFF.0007: No inputs registered, leaving [ 67.759902][ T754] plantronics 0003:047F:FFFF.0007: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 67.760528][ T18] usb 3-1: Manufacturer: syz [ 67.776621][ T754] usb 1-1: USB disconnect, device number 3 [ 67.810976][ T18] usb 3-1: SerialNumber: syz [ 67.816895][ T18] usb 3-1: config 0 descriptor?? [ 67.856854][ T18] ums-usbat 3-1:0.23: USB Mass Storage device detected [ 67.958973][ T1321] F2FS-fs (loop5): Invalid log blocks per segment (83886089) [ 67.966655][ T1321] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 67.976104][ T1321] F2FS-fs (loop5): invalid crc value [ 67.982732][ T1321] F2FS-fs (loop5): Found nat_bits in checkpoint [ 68.005372][ T1321] F2FS-fs (loop5): Start checkpoint disabled! [ 68.012444][ T1321] F2FS-fs (loop5): Try to recover 2th superblock, ret: 0 [ 68.019585][ T1321] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 68.070134][ T754] usb 3-1: USB disconnect, device number 7 [ 68.769651][ T1347] syz.1.303[1347] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 68.769883][ T1347] syz.1.303[1347] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 69.324325][ T1362] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 69.557339][ T1362] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:864: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 69.573601][ T1362] EXT4-fs (loop2): 1 truncate cleaned up [ 69.579357][ T1362] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 69.622202][ T23] audit: type=1400 audit(1746428339.893:600): avc: denied { listen } for pid=1357 comm="syz.2.307" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 69.678174][ T1350] F2FS-fs (loop1): fault_injection options not supported [ 69.796621][ T941] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 69.862549][ T1350] F2FS-fs (loop1): invalid crc value [ 70.014408][ T1350] F2FS-fs (loop1): invalid crc value [ 70.026513][ T23] audit: type=1400 audit(1746428339.893:601): avc: denied { accept } for pid=1357 comm="syz.2.307" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 70.050709][ T1350] F2FS-fs (loop1): Failed to get valid F2FS checkpoint [ 70.173665][ T941] usb 1-1: Using ep0 maxpacket: 8 [ 70.189928][ T23] audit: type=1400 audit(1746428340.273:602): avc: denied { bind } for pid=1353 comm="syz.4.306" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 70.212366][ T23] audit: type=1400 audit(1746428340.273:603): avc: denied { node_bind } for pid=1353 comm="syz.4.306" saddr=172.20.20.170 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 70.473414][ T23] audit: type=1400 audit(1746428340.733:604): avc: denied { associate } for pid=1371 comm="syz.5.311" name="16" dev="tmpfs" ino=20138 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:fsadm_exec_t:s0" [ 70.576778][ T941] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 70.588356][ T941] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 70.599143][ T941] usb 1-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00 [ 70.609103][ T941] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.744077][ T941] usb 1-1: config 0 descriptor?? [ 70.885705][ T1383] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 71.080334][ T23] audit: type=1400 audit(1746428341.333:605): avc: denied { setattr } for pid=1382 comm="syz.1.314" path="/77/file1/file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 71.269438][ T941] logitech 0003:046D:C20E.0008: rdesc size test failed for formula gp [ 71.282745][ T1387] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 71.304600][ T1387] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002] [ 71.328191][ T1387] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2227: inode #15: comm syz.4.313: corrupted in-inode xattr [ 71.341449][ T1387] EXT4-fs error (device loop4): ext4_orphan_get:1242: comm syz.4.313: couldn't read orphan inode 15 (err -117) [ 71.355933][ T1387] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsold,max_batch_time=0x0000000000000001,debug,noload,nombcache,noblock_validity,init_itable=0x0000000000000601,inode_readahead_blks=0x0000000000008000,,errors=continue [ 71.459615][ T941] logitech 0003:046D:C20E.0008: unknown main item tag 0x2 [ 71.642073][ T941] logitech 0003:046D:C20E.0008: hidraw0: USB HID v0.00 Device [HID 046d:c20e] on usb-dummy_hcd.0-1/input0 [ 71.679214][ T941] usb 1-1: USB disconnect, device number 4 [ 71.740738][ T1391] EXT4-fs (loop5): Test dummy encryption mode enabled [ 71.751607][ T1391] EXT4-fs (loop5): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000008000000,noauto_da_alloc,dioread_nolock,test_dummy_encryption,nobarrier,nodelalloc,minixdf,debug_want_extra_isize=0x0000000000000040,,errors=continue [ 71.836587][ T1391] fscrypt: AES-256-CTS-CBC using implementation "cts(cbc-aes-aesni)" [ 71.854524][ T1391] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 71.863580][ T23] audit: type=1400 audit(1746428342.133:606): avc: denied { remove_name } for pid=1389 comm="syz.5.315" name="file1" dev="loop5" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 71.918065][ T23] audit: type=1400 audit(1746428342.133:607): avc: denied { rename } for pid=1389 comm="syz.5.315" name="file1" dev="loop5" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 71.964426][ T1417] netlink: 8 bytes leftover after parsing attributes in process `syz.4.322'. [ 71.974965][ T1417] netlink: 36 bytes leftover after parsing attributes in process `syz.4.322'. [ 71.979926][ T1415] serio: Serial port ptm0 [ 72.043403][ T1421] EXT4-fs (loop4): Ignoring removed bh option [ 72.050152][ T1421] EXT4-fs (loop4): Ignoring removed nobh option [ 72.057001][ T1421] EXT4-fs (loop4): Ignoring removed bh option [ 72.065556][ T1426] EXT4-fs (loop0): Ignoring removed nobh option [ 72.072216][ T1426] EXT4-fs (loop0): Ignoring removed bh option [ 72.077048][ T1421] EXT4-fs (loop4): mounted filesystem without journal. Opts: delalloc,data_err=abort,bh,nobarrier,data_err=ignore,resgid=0x0000000000000000,data_err=ignore,jqfmt=vfsv0,nobh,user_xattr,bh,usrquota,,errors=continue [ 72.078467][ T1426] EXT4-fs (loop0): can't mount with dioread_nolock if block size != PAGE_SIZE [ 72.200759][ T23] kauditd_printk_skb: 1 callbacks suppressed [ 72.200770][ T23] audit: type=1400 audit(1746428342.473:609): avc: denied { unlink } for pid=338 comm="syz-executor" name="file1" dev="tmpfs" ino=20283 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 73.013203][ T1455] EXT4-fs (loop4): Test dummy encryption mode enabled [ 73.043272][ T1455] EXT4-fs (loop4): Unsupported blocksize for fs encryption [ 73.481059][ T1471] syz.0.334[1471] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 73.481114][ T1471] syz.0.334[1471] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 73.950893][ T23] audit: type=1400 audit(1746428344.223:610): avc: denied { write } for pid=1473 comm="syz.5.340" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 74.046337][ T1479] overlayfs: failed to resolve './file1': -2 [ 74.527633][ T1490] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 74.603916][ T23] audit: type=1400 audit(1746428344.873:611): avc: denied { rename } for pid=1489 comm="syz.2.346" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 74.646512][ T23] audit: type=1400 audit(1746428344.873:612): avc: denied { unlink } for pid=1489 comm="syz.2.346" name=2E02 dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 74.753579][ T1492] F2FS-fs (loop0): invalid crc value [ 74.774996][ T1492] F2FS-fs (loop0): Found nat_bits in checkpoint [ 74.813134][ T1492] F2FS-fs (loop0): Start checkpoint disabled! [ 74.820163][ T1492] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 74.877984][ T1492] attempt to access beyond end of device [ 74.877984][ T1492] loop0: rw=2049, want=45112, limit=40427 [ 74.890937][ T1492] attempt to access beyond end of device [ 74.890937][ T1492] loop0: rw=524288, want=45112, limit=40427 [ 74.947235][ T474] attempt to access beyond end of device [ 74.947235][ T474] loop0: rw=2049, want=40976, limit=40427 [ 74.958824][ T18] usb 2-1: new low-speed USB device number 6 using dummy_hcd [ 75.222035][ T23] audit: type=1400 audit(1746428345.493:613): avc: denied { ioctl } for pid=1516 comm="syz.2.354" path="/dev/usbmon7" dev="devtmpfs" ino=534 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 75.266516][ T13] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 75.324303][ T23] audit: type=1400 audit(1746428345.593:614): avc: denied { append } for pid=1516 comm="syz.2.354" name="001" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 75.391743][ T1521] netlink: 36 bytes leftover after parsing attributes in process `syz.2.355'. [ 75.396633][ T18] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 75.412048][ T18] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 75.422301][ T18] usb 2-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 75.433374][ T18] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.442422][ T18] usb 2-1: config 0 descriptor?? [ 75.622138][ T1529] netlink: 44 bytes leftover after parsing attributes in process `syz.0.358'. [ 75.631185][ T1529] netlink: 43 bytes leftover after parsing attributes in process `syz.0.358'. [ 75.640463][ T1529] netlink: 'syz.0.358': attribute type 5 has an invalid length. [ 75.646628][ T13] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 75.648126][ T1529] netlink: 43 bytes leftover after parsing attributes in process `syz.0.358'. [ 75.659554][ T13] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 75.681271][ T13] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 75.690442][ T13] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.699558][ T410] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 75.709088][ T13] usb 5-1: config 0 descriptor?? [ 75.891578][ T1533] F2FS-fs (loop0): Unrecognized mount option "discard_unit=segment" or missing value [ 75.937235][ T18] steelseries_srws1 0003:1038:1410.0009: unbalanced collection at end of report description [ 75.948021][ T18] steelseries_srws1 0003:1038:1410.0009: parse failed [ 75.956963][ T410] usb 3-1: Using ep0 maxpacket: 16 [ 75.957902][ T18] steelseries_srws1: probe of 0003:1038:1410.0009 failed with error -22 [ 76.076544][ T410] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 76.089883][ T410] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 76.100173][ T410] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 76.113209][ T410] usb 3-1: New USB device found, idVendor=046d, idProduct=c53f, bcdDevice= 0.00 [ 76.120837][ T1538] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,max_dir_size_kb=0x0000000000000002, [ 76.122566][ T410] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.143630][ T1538] ext4 filesystem being mounted at /63/file0 supports timestamps until (%ptR?) (0x7fffffff) [ 76.154291][ T410] usb 3-1: config 0 descriptor?? [ 76.165775][ T23] audit: type=1400 audit(1746428346.433:615): avc: denied { map } for pid=1537 comm="syz.0.362" path="/63/bus" dev="devtmpfs" ino=238 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 76.179463][ T18] usb 2-1: USB disconnect, device number 6 [ 76.191117][ T13] cp2112 0003:10C4:EA90.000A: unknown main item tag 0x1 [ 76.203959][ T13] cp2112 0003:10C4:EA90.000A: item fetching failed at offset 4/7 [ 76.212897][ T13] cp2112 0003:10C4:EA90.000A: parse failed [ 76.219878][ T1538] ------------[ cut here ]------------ [ 76.225356][ T1538] kernel BUG at fs/ext4/ext4.h:2985! [ 76.225582][ T13] cp2112: probe of 0003:10C4:EA90.000A failed with error -22 [ 76.238428][ T1538] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 76.244691][ T1538] CPU: 1 PID: 1538 Comm: syz.0.362 Not tainted 5.4.292-syzkaller-00021-gcd8e74fa0fa3 #0 [ 76.254462][ T1538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 76.264517][ T1538] RIP: 0010:ext4_trim_fs+0x1cc3/0x1cd0 [ 76.270053][ T1538] Code: 66 fe ff ff 89 d1 80 e1 07 38 c1 0f 8c 79 fe ff ff 48 8b 7c 24 68 e8 2c 6e cc ff 48 8b 54 24 68 e9 65 fe ff ff e8 4d 74 9e ff <0f> 0b e8 46 74 9e ff 0f 0b 0f 1f 40 00 55 48 89 e5 41 57 41 56 41 [ 76.290108][ T1538] RSP: 0018:ffff8881d8fe7540 EFLAGS: 00010283 [ 76.296172][ T1538] RAX: ffffffff81c10a93 RBX: ffff8881ecb11000 RCX: 0000000000080000 [ 76.304213][ T1538] RDX: ffffc90000944000 RSI: 0000000000000037 RDI: 0000000000000038 [ 76.312189][ T1538] RBP: ffff8881d8fe7790 R08: 0000000000000004 R09: 0000000000000003 [ 76.320154][ T1538] R10: fffffbfff0caceb0 R11: 1ffffffff0caceb0 R12: dffffc0000000000 [ 76.328401][ T1538] R13: ffff8881ecb103f0 R14: 0000000000000001 R15: 0000000000000880 [ 76.336456][ T1538] FS: 00007fa09300b6c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 76.345703][ T1538] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 76.352271][ T1538] CR2: 00007fa08ac6a000 CR3: 00000001ef72d000 CR4: 00000000003406a0 [ 76.360416][ T1538] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 76.368495][ T1538] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 76.376533][ T1538] Call Trace: [ 76.379808][ T1538] ? selinux_capable+0x29c/0x380 [ 76.384867][ T1538] ? selinux_capset+0xf0/0xf0 [ 76.389554][ T1538] ? debug_smp_processor_id+0x1c/0x20 [ 76.394950][ T1538] ? check_preemption_disabled+0x9b/0x300 [ 76.400665][ T1538] ? cap_capable+0x19c/0x220 [ 76.405251][ T1538] ? ext4_group_add_blocks+0xa50/0xa50 [ 76.410964][ T1538] ? security_capable+0x87/0xb0 [ 76.415901][ T1538] ? __kasan_check_write+0x14/0x20 [ 76.420990][ T1538] ? _copy_from_user+0xaa/0xe0 [ 76.425734][ T1538] ext4_ioctl+0x2069/0x3aa0 [ 76.430228][ T1538] ? _raw_spin_unlock_irq+0x4e/0x70 [ 76.435418][ T1538] ? finish_task_switch+0x12e/0x590 [ 76.440604][ T1538] ? asan.module_dtor+0x20/0x20 [ 76.445527][ T1538] ? __schedule+0xa57/0x12a0 [ 76.450123][ T1538] ? __sched_text_start+0x8/0x8 [ 76.454973][ T1538] ? check_preemption_disabled+0x9b/0x300 [ 76.460677][ T1538] ? enqueue_task_fair+0x1a90/0x1bd0 [ 76.465947][ T1538] ? debug_smp_processor_id+0x20/0x20 [ 76.471321][ T1538] ? __kasan_check_read+0x11/0x20 [ 76.476419][ T1538] ? preempt_schedule_common+0xbe/0xf0 [ 76.481986][ T1538] ? preempt_schedule+0xa7/0xb0 [ 76.486847][ T1538] ? schedule_preempt_disabled+0x20/0x20 [ 76.492499][ T1538] ? tracing_record_taskinfo+0x7c/0x230 [ 76.498168][ T1538] ? probe_sched_wakeup+0x64/0x80 [ 76.503186][ T1538] ? avc_has_extended_perms+0x9d0/0xe20 [ 76.508715][ T1538] ? try_to_wake_up+0x978/0x1580 [ 76.513666][ T1538] ? avc_flush+0x220/0x220 [ 76.518104][ T1538] ? wake_up_q+0x95/0xd0 [ 76.522336][ T1538] ? asan.module_dtor+0x20/0x20 [ 76.527174][ T1538] do_vfs_ioctl+0x753/0x13f0 [ 76.531746][ T1538] ? ioctl_preallocate+0x1c0/0x1c0 [ 76.536835][ T1538] ? check_preemption_disabled+0x118/0x300 [ 76.542646][ T1538] ? __fget+0x3be/0x440 [ 76.546957][ T1538] ? fget_many+0x30/0x30 [ 76.551194][ T1538] ? switch_fpu_return+0x197/0x3b0 [ 76.556435][ T1538] ? fpu__clear+0x3b0/0x3b0 [ 76.561059][ T1538] ? task_work_run+0x15e/0x170 [ 76.565972][ T1538] ? security_file_ioctl+0x84/0xa0 [ 76.571095][ T1538] __x64_sys_ioctl+0xe1/0x120 [ 76.575771][ T1538] do_syscall_64+0xcf/0x170 [ 76.580269][ T1538] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 76.586159][ T1538] RIP: 0033:0x7fa0949a2969 [ 76.590682][ T1538] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 76.610294][ T1538] RSP: 002b:00007fa09300b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 76.618690][ T1538] RAX: ffffffffffffffda RBX: 00007fa094bc9fa0 RCX: 00007fa0949a2969 [ 76.626661][ T1538] RDX: 0000200000000000 RSI: 00000000c0185879 RDI: 0000000000000006 [ 76.634636][ T1538] RBP: 00007fa094a24ab1 R08: 0000000000000000 R09: 0000000000000000 [ 76.642607][ T1538] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 76.650564][ T1538] R13: 0000000000000000 R14: 00007fa094bc9fa0 R15: 00007fff5cf10d58 [ 76.658962][ T1538] Modules linked in: [ 76.665180][ T1538] ---[ end trace 62afaa3d59e2c21b ]--- [ 76.670731][ T1538] RIP: 0010:ext4_trim_fs+0x1cc3/0x1cd0 [ 76.676395][ T1538] Code: 66 fe ff ff 89 d1 80 e1 07 38 c1 0f 8c 79 fe ff ff 48 8b 7c 24 68 e8 2c 6e cc ff 48 8b 54 24 68 e9 65 fe ff ff e8 4d 74 9e ff <0f> 0b e8 46 74 9e ff 0f 0b 0f 1f 40 00 55 48 89 e5 41 57 41 56 41 [ 76.696242][ T1538] RSP: 0018:ffff8881d8fe7540 EFLAGS: 00010283 [ 76.702453][ T1538] RAX: ffffffff81c10a93 RBX: ffff8881ecb11000 RCX: 0000000000080000 [ 76.710758][ T1538] RDX: ffffc90000944000 RSI: 0000000000000037 RDI: 0000000000000038 [ 76.718780][ T1538] RBP: ffff8881d8fe7790 R08: 0000000000000004 R09: 0000000000000003 [ 76.726954][ T1538] R10: fffffbfff0caceb0 R11: 1ffffffff0caceb0 R12: dffffc0000000000 [ 76.735190][ T1538] R13: ffff8881ecb103f0 R14: 0000000000000001 R15: 0000000000000880 [ 76.743271][ T1538] FS: 00007fa09300b6c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 76.752230][ T1538] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 76.758915][ T1538] CR2: 0000001b3101eff8 CR3: 00000001ef72d000 CR4: 00000000003406a0 [ 76.766970][ T1538] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 76.775085][ T1538] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 76.783099][ T1538] Kernel panic - not syncing: Fatal exception [ 76.789623][ T1538] Kernel Offset: disabled [ 76.793939][ T1538] Rebooting in 86400 seconds..