last executing test programs: 1m49.491303624s ago: executing program 32 (id=71): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180), 0x4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r1, &(0x7f0000000440)={0x24, @long}, 0x14) 1m26.423319695s ago: executing program 33 (id=716): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0) fcntl$lock(r2, 0x26, &(0x7f0000000000)) fcntl$lock(r2, 0x25, &(0x7f00000000c0)={0x2, 0x1, 0x7fff, 0x2e}) 1m25.469719107s ago: executing program 34 (id=742): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x800714, &(0x7f0000000280)={[{@orlov}, {@nodelalloc}, {@errors_remount}, {@grpquota}, {@auto_da_alloc}, {@dioread_nolock}, {@quota}]}, 0xff, 0x493, &(0x7f0000000640)="$eJzs3M1vFGUYAPBnth9804qIgqCraCR+tLSgcvCgRhMPmpjoAY+1LYgs1NCaCGm0GINHQ+LdeDTxL/DmxagHY+JVE4+GhGhjQvFUM1+w3W5LW9oudH+/ZDvvO5/vMzPv7jvzdiaAtlVN/yQR2yPi94joybNzZ6jmg5npyeHr05PDSczOvvV3ks13bXpyuJy1XG5bkTlUiah8lsSLyfztjp+/cHqoVhs9V+T7J8580D9+/sIzp84MnRw9OXp28Nixo0cGnn9u8NlViTON69q+j8f2733tnctvDB+//O5P36bF2nMgn14fxy1dbxJQE9V0r/0zm2mc9vgyyn432FGXTjpbWBCWpSMi0sPVldX/nuiImwevJ179tKWFA9ZU+tu0aeHJU7PABpZEq0sAtEb5Q59e/5afdWp63BGuvhTRXaRnpieHZ27E3xmVYnzXGm6/GhHHp/77Kv3Ecu9DAACsQNa2ebpZ+68Se7Jh3texs+hD6Y2IeyJiV0TcGxG7I+K+iGze+yPigXzh2Z4lbr/akJ/f/qlcaVrmVZK2/16oa/vN1MVfDHo7ityOLP6u5MSp2ujhYp8ciq5NaX5gkW18/8pvXyw0rb79l37S7ZdtwaIAVzobbtCNDE0MrdZOuHoxYl9ns/iTGz0B6RmwNyL2LW/VO8vEqSe/2b/QTLeOfxGr0M80+3XEE/nxn4qG+EvJ4v2T/ZujNnq4vzwr5vv510tvFsnuxmm3Ff8qSI//1rnnfzHlYjHs+TfJ+2u7olYbPTe+/G1c+uPzBa9pVnr+dydvZ33Wv7yXj/toaGLi3EBEd/J6li93dDZ+8OayZb6cP43/0MHm9X9XsUwa/4MRkZ7EByLioYh4uCj7IxHxaEQcXCT+H19+7P1F4k8iiZYe/5Gm3383zv/epL6/fgWJjtM/fLdQj/nSjv/RmMq+a3PZ998tLLWAt7n7AAAA4K5QiYjtkVT68nR1e1QqfX35//Dvjq2V2tj4xFMnxj48O5I/I9AbXZXyTldP3f3QgWSqWGOeHyzuFZfTjxT3jb/s2JLl+4bHaiMtjh3a3ba59T/K+p/6q6PVpQPWnOe1oH011v9Ki8oBrL+l/P67FoCNqUn939KKcgDrz/U/tK9m9f+Thrz2P2xM8+v/n01eWQdsRNr/0L7Uf2hf6j+0paU+xV++T2HFLwGYkygfFlj5ejYv+Qn/Oy9RXZM1l0doLQu/JW6OicodsTPbJJHWmPXdaJOX1QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANyF/g8AAP//Z0bjpw==") mkdir(0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000080)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000000)) 1m18.946732188s ago: executing program 35 (id=851): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0x7e, &(0x7f0000000480)={@local, @random="7e4173edf6b3", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @empty, @rand_addr, {[@timestamp_addr={0x44, 0x1c, 0x0, 0x1, 0x0, [{@multicast2, 0x300}, {@empty}, {@loopback}]}, @cipso={0x86, 0x21, 0x0, [{0x0, 0x12, "0001632a3a835e9504005d8b00000000"}, {0x0, 0x9, "4ef661e96b4014"}]}]}}}}}}}, 0x0) 1m9.679310385s ago: executing program 36 (id=1110): syz_usb_connect(0x0, 0x35, &(0x7f0000000100)=ANY=[@ANYBLOB="120100003215124099043e10184e0102030109022300010000000009040000"], 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r2}, 0x10) 1m7.725885678s ago: executing program 37 (id=1148): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) ioprio_set$uid(0x3, 0x0, 0x0) 1m5.485293012s ago: executing program 3 (id=1189): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000008c0)) 1m4.609020344s ago: executing program 3 (id=1191): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = memfd_create(&(0x7f0000000540)='\xdd#\x00\xe6Z\x00\xafq%\xa5\x83\xa6#\r\x83y\xf3\xb2\xe6b\x00\x00\x00\x00\x00\x00\x00\x01\x00\xf9\xff\xff\xff\x00\x17?$^\xe1Ob\xe1Y\x03\x00\x00\x00\x00\x00\x00\x00\xce\xe5\x19THP\xf4O\xe2\x9f\xd9\xae\xcf>/\xdc\xaa<\x96\xedE>{\x05\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xa2c\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0\xb04\xb7T5\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x06\xb5\x03\x8a\xc40\xbe\xe3\x93A\x15\xec\xdb\xaa\xdc\n\xcbC\x15\xfcp\x11\xdai\f{\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\x82t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9\x87\xb6^r\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9w\xd2\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T[\xb7\xa4\xb0\bk&\xede\x8b\xc2\xb2\xcd\xef\xcf\x0fE\xc5\x86]\xc0]}\xdd^\xf6&\x16>c\x9d\x9c\xc9\x01\x04\x00\x00\xe9h\xbd\x10p\x8f\x14\x1f2\"\x1b;\xfda\x19\x8bo^\x96\x9a~Q\xce\x95\x02\xb8e\xbbG\xb0V[\xfe\x80\x94$y\x8a\\@\xa9^\x95!IJ\xcf\xf7\xafoX/qG\x97ITp\x01\xae\f\"n;%\xecT\xf6\xb6\xbf;\xde\xec\xb4z\xaa\xd9%\xa5;wy~\xcb\x9a\xd7\r\xe2\xcd\xf0C\x16\xbf0\x89\xb4\xf5\x86\xf3\x99\x9bq\xd3\x15\xe1:\x86\xe4\x14\x805K\xcf\xf6\xda\xd1A>\xf4r>\xfdyAH\x0f\x00'/426, 0x0) fsetxattr$trusted_overlay_origin(r2, &(0x7f0000000180), 0x0, 0x0, 0x0) 1m4.597764704s ago: executing program 3 (id=1192): unshare(0x6020400) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x4, 0x5, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000000)={r0, 0x0, 0x0}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x4a, 0x4, 0x8, 0x40, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={r2, &(0x7f0000000300), 0x20000000}, 0x20) 1m4.589350564s ago: executing program 3 (id=1193): syz_mount_image$vfat(&(0x7f0000003880), &(0x7f0000000000)='./file0\x00', 0x14812, &(0x7f00000000c0)=ANY=[@ANYBLOB='iocharset=iso8859-%,utf8=1,shortname=lower,uni_xlate=1,shortname=win95,iocharset=cp775,uni_xlate=1,rodir,utf8=1,uni_xlate=0,tz=UTC,rodir,uni_xlate=0,utf8=0,codepage=1255,nonumtail=0,\x00'], 0x25, 0x2a1, &(0x7f0000002300)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14d27e, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000340)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f00000005c0)='./bus\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x4c02, &(0x7f0000000140)) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x109f43, 0x0) 1m4.511126114s ago: executing program 3 (id=1194): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=0x0, @ANYBLOB='\f'], 0x28}, 0x1, 0x0, 0x0, 0x4044}, 0x40810) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x952f, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xfff2}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 1m4.466759295s ago: executing program 2 (id=1195): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xb, 0x5, 0xffff, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000170000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000feffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='kmem_cache_free\x00', r2}, 0x10) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000100), 0x6) 1m4.415352334s ago: executing program 2 (id=1196): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='kfree\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000080), 0x81, 0x7a5, &(0x7f0000000f80)="$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") openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) r1 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) 1m4.415195845s ago: executing program 3 (id=1197): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@loopback, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x2}}, {{@in=@private=0xa010100, 0x0, 0x6c}, 0x0, @in6=@dev, 0x0, 0x4, 0x0, 0x0, 0xb7b0}}, 0xe8) syz_emit_ethernet(0x3e, &(0x7f0000000200)={@broadcast, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @dev, @dev}}}}}}, 0x0) 1m4.401434995s ago: executing program 38 (id=1197): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@loopback, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x2}}, {{@in=@private=0xa010100, 0x0, 0x6c}, 0x0, @in6=@dev, 0x0, 0x4, 0x0, 0x0, 0xb7b0}}, 0xe8) syz_emit_ethernet(0x3e, &(0x7f0000000200)={@broadcast, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @dev, @dev}}}}}}, 0x0) 1m4.370062545s ago: executing program 2 (id=1199): prctl$PR_SET_SECUREBITS(0x1c, 0x1d) r0 = socket$unix(0x1, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r1, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/keys\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000740)=[{&(0x7f0000000440)=""/113, 0x71}], 0x1, 0x401, 0x0) 1m4.335915264s ago: executing program 2 (id=1200): syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x400, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x1, 0x5514, &(0x7f0000005d80)="$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") socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x17, 0x5, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mkdir(&(0x7f0000000100)='./file0\x00', 0x1) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) 1m4.022100585s ago: executing program 2 (id=1202): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x4e21, 0xffffffff, @local, 0x6}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003900)=[{{0x0, 0x0, 0x0}}], 0x1, 0xc005) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="b80000001900674c0000000000000800fe8000000000000000000000000000bbe000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000101"], 0xb8}}, 0x0) sendmmsg$inet6(r0, &(0x7f0000001e40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 1m3.335335676s ago: executing program 2 (id=1212): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x10) io_pgetevents(0x0, 0x8c3, 0x0, &(0x7f00000001c0), 0x0, 0x0) 1m3.335225797s ago: executing program 39 (id=1212): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x10) io_pgetevents(0x0, 0x8c3, 0x0, &(0x7f00000001c0), 0x0, 0x0) 57.194511587s ago: executing program 1 (id=1319): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) removexattr(&(0x7f0000000080)='./file0\x00', 0x0) 57.183056938s ago: executing program 1 (id=1320): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="06000000040000000300000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000c00)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$ITER_CREATE(0x21, &(0x7f00000001c0)={r2}, 0x8) 57.167195967s ago: executing program 1 (id=1321): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x1, 0x2000, 0x2000, &(0x7f0000002000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000000034d564b0000000001"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) 57.143209158s ago: executing program 1 (id=1322): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x3000010, &(0x7f0000000000), 0x3e, 0x51b, &(0x7f0000001200)="$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") open(&(0x7f0000000040)='./bus\x00', 0x1ed37e, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) write$selinux_validatetrans(r0, &(0x7f0000000280)={'system_u:object_r:sound_device_t:s0', 0x20, 'system_u:object_r:anacron_exec_t:s0', 0x20, 0x9, 0x20, '/usr/sbin/cups-browsed\x00'}, 0x74) 56.897890208s ago: executing program 1 (id=1324): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r1}, 0x10) setitimer(0x2, 0x0, 0x0) 56.805140208s ago: executing program 1 (id=1326): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000004c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) vmsplice(r0, &(0x7f0000000100)=[{&(0x7f0000000200)='=', 0x1}], 0x1, 0x5) 56.805041508s ago: executing program 40 (id=1326): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000004c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) vmsplice(r0, &(0x7f0000000100)=[{&(0x7f0000000200)='=', 0x1}], 0x1, 0x5) 18.364927617s ago: executing program 5 (id=2188): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000200)={'veth0_to_team\x00', 0x400}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) close(0x3) 18.311605377s ago: executing program 5 (id=2191): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0xc9d7, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0, 0xffffffffffffffff}, &(0x7f0000000440), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) times(0x0) 18.280390707s ago: executing program 5 (id=2195): r0 = syz_usb_connect$hid(0x2, 0xa5, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0xb05, 0x183d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x1}}, [{{0x9, 0x5, 0x2, 0x3, 0x3ff, 0x10, 0x7f}}]}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000004c0)={0x2c, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00\x00\a'], 0x0, 0x0, 0x0, 0x0}, 0x0) creat(0x0, 0xecf86c37d53049cc) openat$kvm(0xffffffffffffff9c, 0x0, 0x248400, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 14.378984574s ago: executing program 5 (id=2215): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getdents(r0, &(0x7f0000001080)=""/4096, 0x1000) 14.366455214s ago: executing program 5 (id=2216): bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) rt_sigpending(0x0, 0x0) 14.303382625s ago: executing program 5 (id=2217): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x18, 0xb, &(0x7f0000000540)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x95}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@private0, @in, 0x0, 0x0, 0xfffd, 0x0, 0x2}}, {{@in=@multicast1, 0x0, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x3}}, 0xe8) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) 14.303260945s ago: executing program 41 (id=2217): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x18, 0xb, &(0x7f0000000540)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x95}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@private0, @in, 0x0, 0x0, 0xfffd, 0x0, 0x2}}, {{@in=@multicast1, 0x0, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x3}}, 0xe8) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) 8.151917306s ago: executing program 7 (id=2364): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) unshare(0x22020400) unshare(0x22020400) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) 8.047757146s ago: executing program 7 (id=2368): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000003c0)='mm_page_alloc\x00', r0}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x0) mmap(&(0x7f000001a000/0x3000)=nil, 0x3000, 0xf, 0x11012, r2, 0x0) pread64(r1, &(0x7f000001a240)=""/102400, 0x19000, 0x0) 7.946650516s ago: executing program 7 (id=2370): syz_emit_ethernet(0x21a, &(0x7f0000000000)={@multicast, @random="777de85bf4dd", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x1e4, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030003004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000000050000000026000400"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc9"}, {0x0, 0x16, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907c"}]}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(r0, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e000000020013000200000000000000ff0800ed05000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c020001000000000000400002000000000500050000"], 0x80}}, 0x40088c0) sendmmsg(r0, &(0x7f0000000180), 0x400008a, 0x0) 7.885804816s ago: executing program 7 (id=2372): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000018"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="820000000000000083000040"]) 7.769267636s ago: executing program 7 (id=2374): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x10) epoll_create(0x8000) 7.728163936s ago: executing program 7 (id=2376): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x4) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040)=0x32) 3.137553935s ago: executing program 8 (id=2501): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=r1, @ANYBLOB="000000000000000024001280110001006272696467655f736c617665000000000c000580050019"], 0x4c}}, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 3.119791624s ago: executing program 8 (id=2502): r0 = epoll_create1(0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/stat\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f00000000c0)={0x60000005}) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000180)) 3.103233755s ago: executing program 8 (id=2503): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) 3.092027325s ago: executing program 8 (id=2504): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101090, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') pivot_root(&(0x7f0000000280)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000240)='./file0\x00') 3.083980055s ago: executing program 8 (id=2505): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) syz_usb_connect(0x0, 0x10b, &(0x7f0000000280)=ANY=[@ANYBLOB="05010900b24b6a10e6040300770100000001090224000b0100000009040003"], 0x0) 3.050786555s ago: executing program 8 (id=2508): r0 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000001540), 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) write$selinux_access(r0, &(0x7f0000001580)={'system_u:object_r:etc_mail_t:s0', 0x20, '/sbin/dhclient'}, 0x44) 3.032199255s ago: executing program 42 (id=2508): r0 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000001540), 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) write$selinux_access(r0, &(0x7f0000001580)={'system_u:object_r:etc_mail_t:s0', 0x20, '/sbin/dhclient'}, 0x44) 1.981173087s ago: executing program 6 (id=2556): r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r1}, 0x10) r2 = dup2(r0, r0) write$tun(r2, 0x0, 0x46) 1.935078587s ago: executing program 6 (id=2558): setrlimit(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)='2', 0x1, 0x8000c61) r1 = open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) copy_file_range(r2, 0x0, r1, 0x0, 0x6, 0x0) 1.916735836s ago: executing program 6 (id=2559): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r0}, 0x8) close(r1) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) 1.916321147s ago: executing program 6 (id=2560): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000540)=@x86={0x3, 0x5, 0xbf, 0x0, 0xffff0001, 0x81, 0x4, 0x0, 0x18, 0x9, 0x9, 0x8, 0x0, 0x80000000, 0xc, 0x4, 0x5, 0xff, 0x7, '\x00', 0x7, 0x6}) ioctl$KVM_GET_MP_STATE(r2, 0x8004ae98, &(0x7f0000000040)) 1.851389097s ago: executing program 6 (id=2561): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000100), 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @mcast2, 0x7}, 0x1c) write(r0, &(0x7f0000000080)="89ba41c97928dec7cec15a160d3dba257872aed129d4b5247c9834550448a4f46c37425b873ec95db3d757e8b2333a64d9abf416fd83f942661c47bcdf71f7d07ba2b2f051829a7f66952e57962614db0d03474a4a4bce636ea8d2b882b2b49ef18e76edbec7302a96e41f206d930eda2769c56e6d5e3d541ce9a21c3ce5cb5f", 0xfdef) 1.851233507s ago: executing program 6 (id=2562): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000401e04012810000000000109022400010000000009040000020300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r2}, 0x10) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="0000f0"], 0x0, 0x0, 0x0, 0x0}, 0x0) 905.555208ms ago: executing program 4 (id=2569): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/uts\x00') r2 = socket$packet(0x11, 0x3, 0x300) unshare(0x2c020400) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'veth0_to_batadv\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x403, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r3, 0x88adfda5, 0x4000}, [@IFLA_NET_NS_FD={0x8, 0x1c, r1}]}, 0x28}, 0x1, 0x0, 0x0, 0x50}, 0x24008000) 895.396999ms ago: executing program 4 (id=2570): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000009000000000000000020000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) getpgrp(0x0) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) 884.828769ms ago: executing program 4 (id=2571): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0}, &(0x7f0000000200), &(0x7f0000000300)=r2}, 0x20) fsetxattr$security_selinux(r2, &(0x7f00000000c0), &(0x7f0000000040)='system_u:object_r:dhcp_state_t:s0\x00', 0x1e, 0x0) 874.185779ms ago: executing program 4 (id=2572): r0 = gettid() r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) sendmsg$netlink(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000580)=ANY=[], 0x1f88}], 0x1}, 0x0) read$eventfd(r2, &(0x7f0000000680), 0x8) tkill(r0, 0x7) 160.12289ms ago: executing program 9 (id=2597): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0x86, &(0x7f00000000c0)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "09f0c6564b6ac6413304000000d9f8f22f81ae81c2bd7edd9aeaf6fd91c25227", "60326eacce5de87bf00be86b3ebbb957", {"fcc68dd1b5242bdc6466eba8cab8d7b2", "05fef0e9b077b6c6639938f9db7c621b"}}}}}}}, 0x0) 133.24345ms ago: executing program 9 (id=2598): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0xc9d7, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r1, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r3}, 0x10) ptrace(0x10, r0) 105.93829ms ago: executing program 9 (id=2600): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x65000, 0x0) move_mount(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', r0, &(0x7f0000000400)='./file0/file0\x00', 0x0) 80.49596ms ago: executing program 0 (id=2601): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x5, 0x2, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000280)="fb", 0x1}], 0x1}, 0x0) recvmsg(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/60, 0x3c}], 0x1}, 0x0) 78.78287ms ago: executing program 9 (id=2602): r0 = socket$packet(0x11, 0x3, 0x300) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'veth1_vlan\x00', 0x0}) sendto$packet(r0, &(0x7f0000000000)="22030e00d3fc02000000ab5d71acedd7c9560385dcb18906", 0x18, 0x0, &(0x7f0000000140)={0x11, 0x0, r2, 0x1, 0x5, 0x6, @link_local}, 0x14) 67.2313ms ago: executing program 9 (id=2603): r0 = socket$key(0xf, 0x3, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000001600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000040002850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r2}, 0x10) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) sendmsg$key(r0, &(0x7f0000000140)={0x9, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 60.90334ms ago: executing program 0 (id=2604): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = fsopen(&(0x7f0000000000)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) 54.85428ms ago: executing program 9 (id=2605): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000002880)={0x2, 0x0, @ioapic={0x0, 0x2, 0x0, 0xeffffdff, 0x0, [{}, {0x19, 0x5, 0xa9}, {0xf, 0x84}, {0x1, 0x0, 0x9, '\x00', 0x2}, {0x8, 0x0, 0x0, '\x00', 0xf}, {0xfd}, {0x0, 0x81, 0x0, '\x00', 0x1}, {0x0, 0x4, 0x0, '\x00', 0x8}, {0xff, 0x0, 0xfc}, {0x0, 0x6}, {0x0, 0x5}, {0x0, 0x4c, 0x0, '\x00', 0xff}, {}, {}, {0x0, 0x2, 0xff}, {0x20}, {0x1, 0x80, 0xfc}, {}, {0x0, 0x6, 0x8}, {0x6, 0x0, 0x0, '\x00', 0x40}, {}, {0x0, 0x0, 0x4, '\x00', 0xfe}, {0x3, 0x0, 0xc7}, {0x0, 0x3, 0xff}]}}) 38.30155ms ago: executing program 0 (id=2606): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x9, 0x8, 0x40, 0x42, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000000000), 0x86, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001600)={r0, &(0x7f0000000580), &(0x7f0000000540)=""/96}, 0x20) 37.96855ms ago: executing program 0 (id=2607): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW(r1, 0x4b49, &(0x7f00000000c0)={0x6, 0x401, 0xc, 0xffffffff, 0xff, "fd14f0ecffffff00"}) 31.37334ms ago: executing program 4 (id=2608): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000540)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0x8, 0x0, &(0x7f0000000580)=[@acquire={0x400c6313}], 0x0, 0x0, 0x0}) 14.72272ms ago: executing program 0 (id=2609): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000dc0)={&(0x7f0000000300)='neigh_update\x00', r0}, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000040)={{0x2, 0x0, @multicast2}, {0x0, @link_local}, 0x0, {0x2, 0x0, @multicast1}, 'team_slave_0\x00'}) 3.57123ms ago: executing program 0 (id=2610): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000031c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) getrandom(0x0, 0x0, 0x0) 0s ago: executing program 4 (id=2611): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000400)={r0, &(0x7f0000000180), 0x20000000}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) fcntl$setlease(r1, 0x400, 0x0) kernel console output (not intermixed with test programs): -1: 0:2 : does not exist [ 76.113599][ T54] usb 2-1: USB disconnect, device number 8 [ 76.258817][ T487] usb 7-1: USB disconnect, device number 6 [ 76.336317][ T1687] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 76.367402][ T3348] netlink: 96 bytes leftover after parsing attributes in process `syz.8.1269'. [ 76.688520][ T3370] EXT4-fs error (device loop1): ext4_orphan_get:1395: inode #15: comm syz.1.1278: casefold flag without casefold feature [ 76.701117][ T1687] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 76.701246][ T3370] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: inode #12: comm syz.1.1278: missing EA_INODE flag [ 76.712174][ T1687] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 76.733648][ T1687] usb 1-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00 [ 76.740821][ T3370] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.1278: error while reading EA inode 12 err=-117 [ 76.742776][ T1687] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.754865][ T3370] EXT4-fs (loop1): 1 orphan inode deleted [ 76.763437][ T1687] usb 1-1: config 0 descriptor?? [ 76.771164][ T3370] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 77.257125][ T1687] elo 0003:04E7:0030.001A: item fetching failed at offset 5/7 [ 77.267508][ T1687] elo 0003:04E7:0030.001A: parse failed [ 77.272981][ T1687] elo: probe of 0003:04E7:0030.001A failed with error -22 [ 77.473634][ T487] usb 1-1: USB disconnect, device number 9 [ 77.566384][ T1687] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 77.726400][ T553] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 77.926321][ T25] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 77.929948][ T1687] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 77.944768][ T1687] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 77.954427][ T1687] usb 9-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 77.963302][ T1687] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.971354][ T553] usb 8-1: Using ep0 maxpacket: 16 [ 77.977079][ T1687] usb 9-1: config 0 descriptor?? [ 78.096379][ T553] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 78.107170][ T553] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 78.236461][ T553] usb 8-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 78.245354][ T553] usb 8-1: New USB device strings: Mfr=236, Product=255, SerialNumber=0 [ 78.253503][ T553] usb 8-1: Product: syz [ 78.257524][ T553] usb 8-1: Manufacturer: syz [ 78.262941][ T553] usb 8-1: config 0 descriptor?? [ 78.326359][ T25] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 78.337078][ T472] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 78.344447][ T25] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 78.354048][ T25] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 78.366772][ T25] usb 7-1: New USB device found, idVendor=11c2, idProduct=2208, bcdDevice= 0.00 [ 78.375590][ T25] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.383992][ T25] usb 7-1: config 0 descriptor?? [ 78.457609][ T1687] hid-steam 0003:28DE:1102.001B: unknown main item tag 0x0 [ 78.467231][ T1687] hid-steam 0003:28DE:1102.001B: unknown main item tag 0x0 [ 78.474247][ T1687] hid-steam 0003:28DE:1102.001B: unknown main item tag 0x0 [ 78.481423][ T1687] hid-steam 0003:28DE:1102.001B: unknown main item tag 0x0 [ 78.488690][ T1687] hid-steam 0003:28DE:1102.001B: unknown main item tag 0x0 [ 78.496297][ T1687] hid-steam 0003:28DE:1102.001B: hidraw0: USB HID v0.00 Device [HID 28de:1102] on usb-dummy_hcd.8-1/input0 [ 78.658317][ T1687] usb 9-1: USB disconnect, device number 7 [ 78.706744][ T472] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 78.717512][ T472] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 78.727747][ T472] usb 1-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 78.736625][ T472] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.755244][ T472] usb 1-1: config 0 descriptor?? [ 78.777279][ T553] kovaplus 0003:1E7D:2D50.001C: item fetching failed at offset 5/7 [ 78.789136][ T553] kovaplus 0003:1E7D:2D50.001C: parse failed [ 78.794984][ T553] kovaplus: probe of 0003:1E7D:2D50.001C failed with error -22 [ 78.857638][ T25] betop 0003:11C2:2208.001D: item fetching failed at offset 4/5 [ 78.865239][ T25] betop 0003:11C2:2208.001D: parse failed [ 78.871074][ T25] betop: probe of 0003:11C2:2208.001D failed with error -22 [ 78.996974][ T1687] usb 8-1: USB disconnect, device number 8 [ 79.058867][ T25] usb 7-1: USB disconnect, device number 7 [ 79.070015][ T3471] EXT4-fs error (device loop1) in ext4_do_update_inode:5303: error 27 [ 79.078342][ T3471] EXT4-fs error (device loop1): ext4_dirty_inode:6110: inode #16: comm syz.1.1322: mark_inode_dirty error [ 79.089744][ T3471] EXT4-fs error (device loop1) in ext4_do_update_inode:5303: error 27 [ 79.098164][ T3471] EXT4-fs error (device loop1): __ext4_ext_dirty:182: inode #16: comm syz.1.1322: mark_inode_dirty error [ 79.109421][ T3471] EXT4-fs error (device loop1) in ext4_do_update_inode:5303: error 27 [ 79.117606][ T3471] EXT4-fs error (device loop1) in ext4_orphan_del:3292: error 27 [ 79.125244][ T3471] EXT4-fs error (device loop1) in ext4_do_update_inode:5303: error 27 [ 79.133481][ T3471] EXT4-fs error (device loop1): ext4_truncate:4389: inode #16: comm syz.1.1322: mark_inode_dirty error [ 79.144561][ T3471] EXT4-fs error (device loop1) in ext4_orphan_cleanup:3108: error 27 [ 79.153031][ T3471] EXT4-fs (loop1): 1 truncate cleaned up [ 79.158524][ T3471] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 79.167668][ T3471] ext4 filesystem being mounted at /30/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 79.237747][ T472] lenovo 0003:17EF:6047.001E: unknown main item tag 0x0 [ 79.244687][ T472] lenovo 0003:17EF:6047.001E: unknown main item tag 0x0 [ 79.251543][ T472] lenovo 0003:17EF:6047.001E: unknown main item tag 0x0 [ 79.258241][ T472] lenovo 0003:17EF:6047.001E: unknown main item tag 0x0 [ 79.264974][ T472] lenovo 0003:17EF:6047.001E: unknown main item tag 0x0 [ 79.272710][ T472] lenovo 0003:17EF:6047.001E: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.0-1/input0 [ 79.393395][ T3486] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.400490][ T3486] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.407955][ T3486] device bridge_slave_0 entered promiscuous mode [ 79.414851][ T3486] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.421968][ T3486] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.429223][ T3486] device bridge_slave_1 entered promiscuous mode [ 79.493144][ T3486] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.500012][ T3486] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.507137][ T3486] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.513883][ T3486] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.557275][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 79.564967][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.569067][ T24] kauditd_printk_skb: 161 callbacks suppressed [ 79.569078][ T24] audit: type=1400 audit(1733476600.709:20077): avc: denied { mount } for pid=3500 comm="syz.7.1335" name="/" dev="ramfs" ino=30293 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 79.600506][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.639681][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 79.651516][ T24] audit: type=1400 audit(1733476600.759:20078): avc: denied { write } for pid=3503 comm="syz.6.1337" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 79.671060][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.677921][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.686667][ T472] lenovo 0003:17EF:6047.001E: Failed to switch middle button: -71 [ 79.692734][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 79.706159][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.713024][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.720082][ T472] lenovo 0003:17EF:6047.001E: Fn-lock setting failed: -71 [ 79.725552][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 79.734859][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 79.753280][ T3501] SELinux: Context system_u:object_r:updpwd_exec_t:s0 is not valid (left unmapped). [ 79.756386][ T472] lenovo 0003:17EF:6047.001E: Sensitivity setting failed: -71 [ 79.762685][ T24] audit: type=1400 audit(1733476600.889:20079): avc: denied { mac_admin } for pid=3500 comm="syz.7.1335" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 79.775600][ T472] usb 1-1: USB disconnect, device number 10 [ 79.808802][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 79.826630][ T24] audit: type=1400 audit(1733476600.949:20080): avc: denied { relabelto } for pid=3500 comm="syz.7.1335" name="/" dev="ramfs" ino=30293 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:updpwd_exec_t:s0" [ 79.857582][ T3486] device veth0_vlan entered promiscuous mode [ 79.869672][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 79.874419][ T3514] syz.8.1341[3514] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 79.877917][ T3514] syz.8.1341[3514] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 79.894651][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 79.905804][ T24] audit: type=1400 audit(1733476600.949:20081): avc: denied { associate } for pid=3500 comm="syz.7.1335" name="/" dev="ramfs" ino=30293 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:updpwd_exec_t:s0" [ 79.905819][ T24] audit: type=1400 audit(1733476600.959:20082): avc: denied { unmount } for pid=2034 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 79.961594][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 79.982378][ T3486] device veth1_macvtap entered promiscuous mode [ 79.988774][ T3516] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 80.002075][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 80.018112][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 80.028394][ T3516] [EXT4 FS bs=4096, gc=1, bpg=3008, ipg=32, mo=8003e119, mo2=0000] [ 80.038081][ T3516] EXT4-fs (loop6): 1 truncate cleaned up [ 80.043578][ T3516] EXT4-fs (loop6): mounted filesystem without journal. Opts: journal_dev=0x0000000000000009,noblock_validity,nombcache,norecovery,barrier=0x000000000000000c,resgid=0x000000000000ee01,nodiscard,noauto_da_alloc,resgid=0x00000000000000002,errors=continue [ 80.051602][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 80.070210][ T7] Quota error (device loop6): free_dqentry: Quota structure has offset to other block (1) than it should (5) [ 80.104212][ T24] audit: type=1400 audit(1733476601.239:20083): avc: denied { mounton } for pid=3486 comm="syz-executor" path="/root/syzkaller.fZDC9T/syz-tmp" dev="sda1" ino=1966 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 80.107941][ T7] EXT4-fs error (device loop6): ext4_release_dquot:6242: comm kworker/u4:0: Failed to release dquot type 1 [ 80.154099][ T24] audit: type=1400 audit(1733476601.239:20084): avc: denied { mount } for pid=3486 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 80.189272][ T3516] EXT4-fs (loop6): re-mounted. Opts: (null) [ 80.206298][ T24] audit: type=1400 audit(1733476601.239:20085): avc: denied { mount } for pid=3486 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 80.229321][ T3516] EXT4-fs (loop6): warning: mounting fs with errors, running e2fsck is recommended [ 80.239138][ T3516] [EXT4 FS bs=4096, gc=1, bpg=3008, ipg=32, mo=8003e119, mo2=0000] [ 80.249017][ T2042] device bridge_slave_1 left promiscuous mode [ 80.255132][ T2042] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.262623][ T2042] device bridge_slave_0 left promiscuous mode [ 80.269191][ T2042] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.276767][ T3516] EXT4-fs (loop6): re-mounted. Opts: (null) [ 80.282580][ T2042] device veth1_macvtap left promiscuous mode [ 80.294120][ T2042] device veth0_vlan left promiscuous mode [ 80.361095][ T7] Bluetooth: hci0: Frame reassembly failed (-84) [ 80.408470][ T3535] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1348'. [ 80.418559][ T3535] IPv6: Can't replace route, no match found [ 80.539134][ T3554] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 81.036349][ T503] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 81.276435][ T503] usb 1-1: Using ep0 maxpacket: 32 [ 81.377574][ T3599] netlink: 104 bytes leftover after parsing attributes in process `syz.5.1375'. [ 81.396464][ T503] usb 1-1: config 0 has no interfaces? [ 81.412923][ T3603] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1377'. [ 81.556341][ T503] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 81.565241][ T503] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 81.573232][ T503] usb 1-1: Product: syz [ 81.577352][ T503] usb 1-1: Manufacturer: syz [ 81.581952][ T503] usb 1-1: SerialNumber: syz [ 81.587248][ T503] usb 1-1: config 0 descriptor?? [ 81.696336][ T472] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 81.777394][ T3626] 9pnet: p9_errstr2errno: server reported unknown error èœFcÇgåKIeÎÿB [ 81.814296][ T3628] SELinux: security_context_str_to_sid(unconfined_u) failed for (dev tmpfs, type tmpfs) errno=-22 [ 81.880766][ T3630] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 81.892093][ T3630] EXT4-fs (loop7): 1 truncate cleaned up [ 81.897783][ T3630] EXT4-fs (loop7): mounted filesystem without journal. Opts: nogrpid,min_batch_time=0x0000000000000000,debug_want_extra_isize=0x0000000000000068,nobarrier,nodiscard,quota,,errors=continue [ 81.916817][ T503] usb 1-1: USB disconnect, device number 11 [ 81.936297][ T472] usb 6-1: Using ep0 maxpacket: 16 [ 82.017292][ T3636] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 82.027659][ T3636] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c019, mo2=0002] [ 82.035435][ T3636] System zones: 1-12 [ 82.039866][ T3636] EXT4-fs (loop7): 1 truncate cleaned up [ 82.045312][ T3636] EXT4-fs (loop7): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,resuid=0x000000000000ee01,debug,lazytime,nombcache,jqfmt=vfsv1,,errors=continue [ 82.062591][ T472] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 82.073280][ T472] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 82.083196][ T472] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 82.096047][ T472] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 82.105104][ T472] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.113583][ T472] usb 6-1: config 0 descriptor?? [ 82.263459][ T3646] netlink: 'syz.7.1394': attribute type 4 has an invalid length. [ 82.366345][ T487] Bluetooth: hci0: command 0x1003 tx timeout [ 82.372248][ T3555] Bluetooth: hci0: sending frame failed (-49) [ 82.597039][ T472] microsoft 0003:045E:07DA.001F: unknown main item tag 0x0 [ 82.604113][ T472] microsoft 0003:045E:07DA.001F: unbalanced delimiter at end of report description [ 82.613422][ T472] microsoft 0003:045E:07DA.001F: parse failed [ 82.619383][ T472] microsoft: probe of 0003:045E:07DA.001F failed with error -22 [ 82.776317][ T487] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 82.799447][ T472] usb 6-1: USB disconnect, device number 7 [ 83.016319][ T487] usb 1-1: Using ep0 maxpacket: 16 [ 83.136354][ T487] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 83.147097][ T487] usb 1-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 83.155873][ T487] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.164595][ T487] usb 1-1: config 0 descriptor?? [ 83.278615][ T3675] exFAT-fs (loop7): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 83.647448][ T487] hid-steam 0003:28DE:1102.0020: unknown main item tag 0x0 [ 83.654539][ T487] hid-steam 0003:28DE:1102.0020: unknown main item tag 0x0 [ 83.661817][ T487] hid-steam 0003:28DE:1102.0020: : USB HID v0.00 Device [HID 28de:1102] on usb-dummy_hcd.0-1/input0 [ 83.672439][ T25] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 83.680625][ T487] hid-steam 0003:28DE:1102.0021: unknown main item tag 0x0 [ 83.687723][ T487] hid-steam 0003:28DE:1102.0021: unknown main item tag 0x0 [ 83.695274][ T487] hid-steam 0003:28DE:1102.0021: hidraw0: USB HID v0.00 Device [HID 28de:1102] on usb-dummy_hcd.0-1/input0 [ 83.776312][ T487] hid-steam 0003:28DE:1102.0020: Steam Controller 'XXXXXXXXXX' connected [ 83.785072][ T487] input: Steam Controller as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:28DE:1102.0020/input/input18 [ 83.848255][ T2379] usb 1-1: USB disconnect, device number 12 [ 83.859089][ T2379] hid-steam 0003:28DE:1102.0020: Steam Controller 'XXXXXXXXXX' disconnected [ 83.926299][ T25] usb 6-1: Using ep0 maxpacket: 16 [ 84.046341][ T25] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 84.057095][ T25] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 84.066576][ T25] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 84.079187][ T25] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 84.088170][ T25] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.096586][ T25] usb 6-1: config 0 descriptor?? [ 84.197955][ T3699] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1416'. [ 84.446435][ T1687] Bluetooth: hci0: command 0x1001 tx timeout [ 84.452281][ T3555] Bluetooth: hci0: sending frame failed (-49) [ 84.469160][ T3712] raw_sendmsg: syz.0.1422 forgot to set AF_INET. Fix it! [ 84.550208][ T3725] xt_hashlimit: size too large, truncated to 1048576 [ 84.577114][ T25] microsoft 0003:045E:07DA.0022: unknown main item tag 0x0 [ 84.586023][ T25] microsoft 0003:045E:07DA.0022: unknown main item tag 0x0 [ 84.593239][ T25] microsoft 0003:045E:07DA.0022: unknown main item tag 0x0 [ 84.600723][ T25] microsoft 0003:045E:07DA.0022: unknown main item tag 0x0 [ 84.607910][ T25] microsoft 0003:045E:07DA.0022: unknown main item tag 0x0 [ 84.615088][ T25] microsoft 0003:045E:07DA.0022: unknown main item tag 0x0 [ 84.622130][ T24] kauditd_printk_skb: 135 callbacks suppressed [ 84.622141][ T24] audit: type=1400 audit(1733476605.059:20221): avc: denied { connect } for pid=3724 comm="syz.0.1428" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 84.649072][ T25] microsoft 0003:045E:07DA.0022: unknown main item tag 0x0 [ 84.656098][ T25] microsoft 0003:045E:07DA.0022: unknown main item tag 0x0 [ 84.663696][ T25] microsoft 0003:045E:07DA.0022: unknown main item tag 0x0 [ 84.666282][ T2379] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 84.670872][ T25] microsoft 0003:045E:07DA.0022: unknown main item tag 0x0 [ 84.685193][ T25] microsoft 0003:045E:07DA.0022: unknown main item tag 0x0 [ 84.692322][ T25] microsoft 0003:045E:07DA.0022: unknown main item tag 0x0 [ 84.699542][ T25] microsoft 0003:045E:07DA.0022: unknown main item tag 0x0 [ 84.706671][ T25] microsoft 0003:045E:07DA.0022: unknown main item tag 0x0 [ 84.713779][ T25] microsoft 0003:045E:07DA.0022: unknown main item tag 0x0 [ 84.720909][ T25] microsoft 0003:045E:07DA.0022: unknown main item tag 0x0 [ 84.728170][ T25] microsoft 0003:045E:07DA.0022: unknown main item tag 0x0 [ 84.735217][ T25] microsoft 0003:045E:07DA.0022: unknown main item tag 0x0 [ 84.742553][ T25] microsoft 0003:045E:07DA.0022: unknown main item tag 0x0 [ 84.749789][ T25] microsoft 0003:045E:07DA.0022: unknown main item tag 0x0 [ 84.757098][ T25] microsoft 0003:045E:07DA.0022: unknown main item tag 0x0 [ 84.764351][ T25] microsoft 0003:045E:07DA.0022: unknown main item tag 0x0 [ 84.771484][ T25] microsoft 0003:045E:07DA.0022: unknown main item tag 0x0 [ 84.778572][ T25] microsoft 0003:045E:07DA.0022: unknown main item tag 0x0 [ 84.786035][ T25] microsoft 0003:045E:07DA.0022: unknown main item tag 0x0 [ 84.793289][ T25] microsoft 0003:045E:07DA.0022: unknown main item tag 0x0 [ 84.800344][ T25] microsoft 0003:045E:07DA.0022: unknown main item tag 0x0 [ 84.807471][ T25] microsoft 0003:045E:07DA.0022: No inputs registered, leaving [ 84.815390][ T25] microsoft 0003:045E:07DA.0022: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 84.826630][ T25] microsoft 0003:045E:07DA.0022: no inputs found [ 84.832729][ T25] microsoft 0003:045E:07DA.0022: could not initialize ff, continuing anyway [ 84.842679][ T25] usb 6-1: USB disconnect, device number 8 [ 85.046306][ T54] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 85.066355][ T2379] usb 8-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 85.077037][ T2379] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 85.088222][ T2379] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 85.097782][ T2379] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 85.110523][ T2379] usb 8-1: New USB device found, idVendor=044f, idProduct=b653, bcdDevice= 0.00 [ 85.119374][ T2379] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.128003][ T2379] usb 8-1: config 0 descriptor?? [ 85.286352][ T54] usb 1-1: Using ep0 maxpacket: 16 [ 85.318423][ T24] audit: type=1326 audit(1733476605.769:20222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3734 comm="syz.5.1432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6d2440f19 code=0x7ffc0000 [ 85.342204][ T24] audit: type=1326 audit(1733476605.769:20223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3734 comm="syz.5.1432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6d2440f19 code=0x7ffc0000 [ 85.366023][ T24] audit: type=1326 audit(1733476605.769:20224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3734 comm="syz.5.1432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa6d2440f19 code=0x7ffc0000 [ 85.390492][ T24] audit: type=1326 audit(1733476605.789:20225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3734 comm="syz.5.1432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6d2440f19 code=0x7ffc0000 [ 85.416335][ T24] audit: type=1326 audit(1733476605.799:20226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3734 comm="syz.5.1432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6d2440f19 code=0x7ffc0000 [ 85.439964][ T54] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 85.449907][ T24] audit: type=1326 audit(1733476605.809:20227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3734 comm="syz.5.1432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa6d2440f19 code=0x7ffc0000 [ 85.473174][ T54] usb 1-1: config 0 has no interfaces? [ 85.478562][ T54] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 85.487622][ T54] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.495841][ T24] audit: type=1326 audit(1733476605.809:20228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3734 comm="syz.5.1432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6d2440f19 code=0x7ffc0000 [ 85.519356][ T54] usb 1-1: config 0 descriptor?? [ 85.524164][ T24] audit: type=1326 audit(1733476605.809:20229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3734 comm="syz.5.1432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6d2440f19 code=0x7ffc0000 [ 85.547813][ T24] audit: type=1326 audit(1733476605.819:20230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3734 comm="syz.5.1432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=326 compat=0 ip=0x7fa6d2440f19 code=0x7ffc0000 [ 85.647715][ T2379] thrustmaster 0003:044F:B653.0023: unbalanced delimiter at end of report description [ 85.657356][ T2379] thrustmaster 0003:044F:B653.0023: parse failed [ 85.663703][ T2379] thrustmaster: probe of 0003:044F:B653.0023 failed with error -22 [ 85.779044][ T503] usb 1-1: USB disconnect, device number 13 [ 85.852700][ T2379] usb 8-1: USB disconnect, device number 9 [ 85.946310][ T907] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 86.316371][ T907] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 86.327297][ T907] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 86.337096][ T907] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 86.349756][ T907] usb 6-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.10 [ 86.358546][ T907] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.367735][ T907] usb 6-1: config 0 descriptor?? [ 86.378470][ T3760] input: syz0 as /devices/virtual/input/input19 [ 86.490842][ T3771] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 86.526349][ T54] Bluetooth: hci0: command 0x1009 tx timeout [ 86.666284][ T2379] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 86.837225][ T907] prodikeys 0003:041E:2801.0024: unknown main item tag 0x0 [ 86.845518][ T907] prodikeys 0003:041E:2801.0024: unknown main item tag 0x0 [ 86.852644][ T907] prodikeys 0003:041E:2801.0024: unknown main item tag 0x5 [ 86.862431][ T907] prodikeys 0003:041E:2801.0024: item fetching failed at offset 3/5 [ 86.873288][ T907] prodikeys 0003:041E:2801.0024: hid parse failed [ 86.879808][ T907] prodikeys: probe of 0003:041E:2801.0024 failed with error -22 [ 86.906279][ T2379] usb 8-1: Using ep0 maxpacket: 16 [ 87.026346][ T2379] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 87.034580][ T2379] usb 8-1: config 0 has no interface number 0 [ 87.040795][ T503] usb 6-1: USB disconnect, device number 9 [ 87.046107][ T2379] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 87.057330][ T2379] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 87.067020][ T2379] usb 8-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 87.075904][ T2379] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.087530][ T2379] usb 8-1: config 0 descriptor?? [ 87.502425][ T3787] binder: 3786:3787 ioctl 40046205 0 returned -22 [ 87.623941][ T3795] input: syz0 as /devices/virtual/input/input20 [ 87.747787][ T3802] EXT4-fs (loop5): mounted filesystem without journal. Opts: nobarrier,grpquota,,errors=continue [ 87.758231][ T3802] ext4 filesystem being mounted at /33/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 87.769824][ T2379] input: HID 28bd:0071 Pen as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.1/0003:28BD:0071.0025/input/input21 [ 87.783530][ T2379] input: HID 28bd:0071 Pad as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.1/0003:28BD:0071.0025/input/input22 [ 87.801704][ T2379] uclogic 0003:28BD:0071.0025: input,hidraw0: USB HID v0.02 Keypad [HID 28bd:0071] on usb-dummy_hcd.7-1/input1 [ 87.887511][ T3807] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 87.970960][ T907] usb 8-1: USB disconnect, device number 10 [ 87.979286][ T3820] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1468'. [ 88.211676][ T3835] input: syz1 as /devices/virtual/input/input23 [ 88.217765][ T3835] input: failed to attach handler leds to device input23, error: -6 [ 88.257038][ T3839] netlink: 'syz.5.1476': attribute type 6 has an invalid length. [ 88.286828][ T3843] netlink: 'syz.5.1478': attribute type 4 has an invalid length. [ 88.297937][ T3843] netlink: 'syz.5.1478': attribute type 4 has an invalid length. [ 88.357951][ T3851] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1482'. [ 88.367258][ T3851] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 88.843875][ T3926] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 88.920544][ T3948] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 88.958706][ T3952] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1529'. [ 88.967882][ T3952] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 89.016405][ T3963] overlayfs: failed to clone lowerpath [ 89.049012][ T3969] syz.7.1536[3969] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 89.049047][ T3969] syz.7.1536[3969] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 89.961547][ T24] kauditd_printk_skb: 173 callbacks suppressed [ 89.961557][ T24] audit: type=1400 audit(1733476610.409:20404): avc: denied { create } for pid=3985 comm="syz.7.1543" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 89.998004][ T24] audit: type=1400 audit(1733476610.409:20405): avc: denied { module_request } for pid=3985 comm="syz.7.1543" kmod="net-pf-21" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 90.019690][ T24] audit: type=1400 audit(1733476610.419:20406): avc: denied { read } for pid=76 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 90.041647][ T24] audit: type=1400 audit(1733476610.419:20407): avc: denied { search } for pid=76 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 90.063501][ T24] audit: type=1400 audit(1733476610.419:20408): avc: denied { open } for pid=76 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 90.087991][ T24] audit: type=1400 audit(1733476610.419:20409): avc: denied { getattr } for pid=76 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 90.111782][ T24] audit: type=1400 audit(1733476610.429:20410): avc: denied { name_bind } for pid=3987 comm="syz.7.1544" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 90.218202][ T24] audit: type=1400 audit(1733476610.669:20411): avc: denied { read } for pid=3998 comm="syz.7.1547" dev="nsfs" ino=4026532362 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 90.246285][ T24] audit: type=1400 audit(1733476610.669:20412): avc: denied { open } for pid=3998 comm="syz.7.1547" path="net:[4026532362]" dev="nsfs" ino=4026532362 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 90.276336][ T24] audit: type=1400 audit(1733476610.669:20413): avc: denied { create } for pid=3998 comm="syz.7.1547" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 90.696312][ T907] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 90.876891][ T4028] xt_bpf: check failed: parse error [ 91.056414][ T907] usb 8-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 255, changing to 11 [ 91.058132][ T4053] device bridge0 entered promiscuous mode [ 91.073469][ T907] usb 8-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 59391, setting to 1024 [ 91.089789][ T4053] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1571'. [ 91.094687][ T907] usb 8-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 91.108432][ T4053] device bridge_slave_1 left promiscuous mode [ 91.118571][ T4053] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.121499][ T907] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.133851][ T4053] device bridge_slave_0 left promiscuous mode [ 91.147384][ T4053] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.156411][ T4011] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 91.416392][ T907] aiptek 8-1:17.0: Aiptek using 400 ms programming speed [ 91.433100][ T907] input: Aiptek as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:17.0/input/input24 [ 91.451800][ T907] usb 8-1: USB disconnect, device number 11 [ 91.457597][ C1] aiptek 8-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 91.551745][ T4109] netlink: 'syz.6.1597': attribute type 6 has an invalid length. [ 91.981419][ T4142] xt_bpf: check failed: parse error [ 92.006312][ T2379] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 92.112195][ T4155] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue [ 92.121105][ T4155] ext4 filesystem being mounted at /201/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 92.134539][ T4155] syz.7.1616 (pid 4155) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 92.266291][ T2379] usb 7-1: Using ep0 maxpacket: 16 [ 92.416337][ T2379] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 92.427054][ T2379] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 92.439865][ T2379] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 92.448896][ T2379] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.467806][ T4182] EXT4-fs (loop7): mounted filesystem without journal. Opts: acl,,errors=continue [ 92.477205][ T2379] usb 7-1: config 0 descriptor?? [ 92.477271][ T4182] ext4 filesystem being mounted at /209/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 92.614711][ T4167] F2FS-fs (loop8): invalid crc value [ 92.627112][ T4167] F2FS-fs (loop8): Found nat_bits in checkpoint [ 92.671755][ T4167] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 92.702027][ T4198] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.709013][ T4198] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.752708][ T4198] netlink: 'syz.5.1630': attribute type 4 has an invalid length. [ 92.817825][ T4200] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpquota,nouid32,minixdf,,errors=continue [ 92.828789][ T4200] ext4 filesystem being mounted at /114/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 92.957629][ T2379] HID 045e:07da: Invalid code 65791 type 1 [ 92.965051][ T2379] input: HID 045e:07da as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:045E:07DA.0026/input/input25 [ 92.976295][ T54] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 92.987973][ T2379] microsoft 0003:045E:07DA.0026: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.6-1/input0 [ 93.246470][ T54] usb 9-1: Using ep0 maxpacket: 32 [ 93.996339][ T54] usb 9-1: device descriptor read/all, error -71 [ 94.019132][ T4217] serio: Serial port ptm0 [ 94.362041][ T907] usb 7-1: USB disconnect, device number 8 [ 94.576310][ T2379] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 94.597537][ T4248] tipc: Started in network mode [ 94.602227][ T4248] tipc: Own node identity fe800000000000000000000000000013, cluster identity 4711 [ 94.611726][ T4248] tipc: Enabled bearer , priority 10 [ 94.747981][ T4263] netlink: 104 bytes leftover after parsing attributes in process `syz.8.1657'. [ 94.826339][ T2379] usb 6-1: Using ep0 maxpacket: 16 [ 94.837591][ T4273] mmap: syz.8.1662 (4273) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 94.894726][ T4280] syz.6.1665[4280] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 94.894793][ T4280] syz.6.1665[4280] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 94.946458][ T2379] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 94.947079][ T4290] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=4290 comm=syz.6.1670 [ 94.968338][ T2379] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 94.990242][ T2379] usb 6-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 95.003275][ T2379] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 95.017784][ T2379] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.046329][ T4246] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 95.065958][ T24] kauditd_printk_skb: 204 callbacks suppressed [ 95.065971][ T24] audit: type=1400 audit(2000000001.029:20618): avc: denied { read } for pid=4293 comm="syz.8.1672" name="event0" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 95.096097][ T2379] cdc_acm 6-1:1.0: Control and data interfaces are not separated! [ 95.104577][ T24] audit: type=1400 audit(2000000001.029:20619): avc: denied { open } for pid=4293 comm="syz.8.1672" path="/dev/input/event0" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 95.115528][ T2379] cdc_acm 6-1:1.0: ttyACM0: USB ACM device [ 95.138178][ T24] audit: type=1400 audit(2000000001.059:20620): avc: denied { read } for pid=4294 comm="syz.7.1673" name="ppp" dev="devtmpfs" ino=149 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 95.161837][ T24] audit: type=1400 audit(2000000001.059:20621): avc: denied { open } for pid=4294 comm="syz.7.1673" path="/dev/ppp" dev="devtmpfs" ino=149 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 95.185049][ T24] audit: type=1400 audit(2000000001.059:20622): avc: denied { ioctl } for pid=4294 comm="syz.7.1673" path="/dev/ppp" dev="devtmpfs" ino=149 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 95.210096][ T24] audit: type=1400 audit(2000000001.129:20623): avc: denied { mounton } for pid=4300 comm="syz.6.1675" path="/110/file0" dev="tmpfs" ino=579 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 95.257426][ T24] audit: type=1326 audit(2000000001.229:20624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4305 comm="syz.6.1677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f014ed49f19 code=0x7ffc0000 [ 95.284074][ T24] audit: type=1326 audit(2000000001.229:20625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4305 comm="syz.6.1677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f014ed49f19 code=0x7ffc0000 [ 95.308450][ T24] audit: type=1326 audit(2000000001.229:20626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4305 comm="syz.6.1677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=63 compat=0 ip=0x7f014ed49f19 code=0x7ffc0000 [ 95.339323][ T4312] netem: change failed [ 95.343637][ T2379] usb 6-1: USB disconnect, device number 10 [ 95.350625][ T24] audit: type=1326 audit(2000000001.229:20627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4305 comm="syz.6.1677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f014ed49f19 code=0x7ffc0000 [ 95.504860][ T4330] device wireguard0 entered promiscuous mode [ 95.636313][ T54] tipc: 32-bit node address hash set to 130080fe [ 95.713981][ T4345] input: syz1 as /devices/virtual/input/input26 [ 95.806315][ T54] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 95.880625][ T4355] EXT4-fs (loop8): Ignoring removed orlov option [ 95.897604][ T4355] EXT4-fs (loop8): mounted filesystem without journal. Opts: orlov,errors=remount-ro, [ 96.018175][ T2042] EXT4-fs error (device loop8): ext4_mb_generate_buddy:808: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 96.032976][ T2042] EXT4-fs (loop8): Remounting filesystem read-only [ 96.056364][ T54] usb 7-1: Using ep0 maxpacket: 32 [ 96.146428][ T907] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 96.186337][ T54] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 96.197176][ T54] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 96.211300][ T54] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 96.220197][ T54] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.231153][ T54] usb 7-1: config 0 descriptor?? [ 96.386323][ T907] usb 6-1: Using ep0 maxpacket: 32 [ 96.556292][ T25] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 96.666414][ T907] usb 6-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 96.675252][ T907] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.689045][ T907] usb 6-1: Product: syz [ 96.693001][ T907] usb 6-1: Manufacturer: syz [ 96.697549][ T907] usb 6-1: SerialNumber: syz [ 96.708360][ T907] usb 6-1: config 0 descriptor?? [ 96.708640][ T54] savu 0003:1E7D:2D5A.0027: hiddev96,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.6-1/input0 [ 96.758129][ T503] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 96.765387][ T503] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 96.773213][ T503] hid-generic 0000:0000:0000.0028: hidraw1: HID v0.00 Device [syz0] on syz1 [ 96.806349][ T25] usb 9-1: Using ep0 maxpacket: 16 [ 96.977159][ T54] usb 7-1: USB disconnect, device number 9 [ 97.086372][ T25] usb 9-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=d3.06 [ 97.095421][ T25] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=67 [ 97.103436][ T25] usb 9-1: Product: syz [ 97.107386][ T25] usb 9-1: Manufacturer: syz [ 97.111784][ T25] usb 9-1: SerialNumber: syz [ 97.117174][ T25] usb 9-1: config 0 descriptor?? [ 97.406349][ T907] (unnamed net_device) (uninitialized): Assigned a random MAC address: 52:21:2e:4e:24:63 [ 97.417565][ T907] rtl8150 6-1:0.0: eth1: rtl8150 is detected [ 97.425120][ T907] usb 6-1: USB disconnect, device number 11 [ 97.492910][ T4407] netlink: 'syz.6.1715': attribute type 4 has an invalid length. [ 97.556963][ T4423] netlink: 'syz.6.1717': attribute type 4 has an invalid length. [ 97.564565][ T4423] netlink: 3657 bytes leftover after parsing attributes in process `syz.6.1717'. [ 97.579044][ T25] usb 9-1: USB disconnect, device number 10 [ 97.657855][ T4436] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1722'. [ 97.837338][ T4450] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1728'. [ 97.846280][ T4450] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1728'. [ 97.855025][ T4450] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1728'. [ 98.050246][ T4475] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 98.162041][ T25] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65380 sclass=netlink_route_socket pid=25 comm=kworker/1:1 [ 98.221688][ T4499] netlink: 32 bytes leftover after parsing attributes in process `syz.8.1745'. [ 98.234039][ T4499] netem: unknown loss type 13 [ 98.239437][ T4499] netem: change failed [ 98.317763][ T4514] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 98.504983][ T4528] exFAT-fs (loop6): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 98.696823][ T4523] F2FS-fs (loop8): Invalid segment/section count (31, 24 x 150994945) [ 98.704888][ T4523] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 98.713483][ T4523] F2FS-fs (loop8): invalid crc value [ 98.720067][ T4523] F2FS-fs (loop8): Found nat_bits in checkpoint [ 98.742269][ T4523] F2FS-fs (loop8): Cannot turn on quotas: -2 on 2 [ 98.749134][ T4523] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0 [ 98.755975][ T4523] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e4 [ 99.576818][ T4580] exfat: Deprecated parameter 'utf8' [ 99.582009][ T4580] exfat: Deprecated parameter 'utf8' [ 99.587137][ T4580] exfat: Deprecated parameter 'utf8' [ 99.592226][ T4580] exfat: Deprecated parameter 'utf8' [ 99.619161][ T4580] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xac5c0b1f, utbl_chksum : 0xe619d30d) [ 99.626317][ T907] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 99.636528][ T4580] xt_hashlimit: size too large, truncated to 1048576 [ 99.826780][ T4584] exfat: Deprecated parameter 'namecase' [ 99.832314][ T4584] exfat: Deprecated parameter 'namecase' [ 99.868509][ T4584] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x1fdf94bc, utbl_chksum : 0xe619d30d) [ 99.921522][ T4587] syz.6.1776[4587] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 99.921559][ T4587] syz.6.1776[4587] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 99.996524][ T907] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 100.018357][ T907] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 100.027885][ T907] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 100.040569][ T907] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 100.049393][ T907] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.057786][ T907] usb 9-1: config 0 descriptor?? [ 100.082049][ T4591] futex_wake_op: syz.0.1778 tries to shift op by -1; fix this program [ 100.113032][ T4595] overlayfs: missing 'lowerdir' [ 100.152482][ T4599] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.159362][ T4599] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.177842][ T24] kauditd_printk_skb: 230 callbacks suppressed [ 100.177854][ T24] audit: type=1326 audit(2000000006.149:20858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4605 comm="syz.5.1785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6d2440f19 code=0x7ffc0000 [ 100.227819][ T1187] kernel write not supported for file bpf-prog (pid: 1187 comm: kworker/0:6) [ 100.247399][ T24] audit: type=1326 audit(2000000006.179:20859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4605 comm="syz.5.1785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa6d2440f19 code=0x7ffc0000 [ 100.280781][ T24] audit: type=1326 audit(2000000006.179:20860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4605 comm="syz.5.1785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6d2440f19 code=0x7ffc0000 [ 100.307437][ T24] audit: type=1326 audit(2000000006.179:20861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4605 comm="syz.5.1785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa6d2440f19 code=0x7ffc0000 [ 100.338760][ T4622] syz.6.1792[4622] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 100.338815][ T4622] syz.6.1792[4622] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 100.345188][ T24] audit: type=1326 audit(2000000006.179:20862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4605 comm="syz.5.1785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6d2440f19 code=0x7ffc0000 [ 100.389508][ T24] audit: type=1326 audit(2000000006.179:20863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4605 comm="syz.5.1785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa6d2440f19 code=0x7ffc0000 [ 100.413362][ T24] audit: type=1326 audit(2000000006.179:20864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4605 comm="syz.5.1785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6d2440f19 code=0x7ffc0000 [ 100.436706][ T24] audit: type=1326 audit(2000000006.179:20865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4605 comm="syz.5.1785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7fa6d2440f19 code=0x7ffc0000 [ 100.460237][ T25] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 100.467837][ T24] audit: type=1326 audit(2000000006.179:20866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4605 comm="syz.5.1785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6d2440f19 code=0x7ffc0000 [ 100.491356][ T24] audit: type=1326 audit(2000000006.179:20867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4605 comm="syz.5.1785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa6d2440f19 code=0x7ffc0000 [ 100.547179][ T907] plantronics 0003:047F:FFFF.0029: No inputs registered, leaving [ 100.555977][ T907] plantronics 0003:047F:FFFF.0029: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 100.636309][ T503] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 100.796615][ T4651] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 100.803652][ T4651] IPv6: NLM_F_CREATE should be set when creating new route [ 100.846473][ T25] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 100.857256][ T25] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 100.872840][ T25] usb 8-1: New USB device found, idVendor=172f, idProduct=0501, bcdDevice= 0.00 [ 100.886078][ T25] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.897270][ T25] usb 8-1: config 0 descriptor?? [ 100.996487][ T503] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 101.009676][ T503] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 101.019523][ T503] usb 1-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 101.034449][ T503] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.045415][ T503] usb 1-1: config 0 descriptor?? [ 101.156861][ T4673] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 101.164506][ T4673] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 101.173674][ T4673] F2FS-fs (loop6): invalid crc value [ 101.180075][ T4673] F2FS-fs (loop6): Found nat_bits in checkpoint [ 101.213682][ T4673] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 101.220749][ T4673] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 101.377967][ T25] waltop 0003:172F:0501.002A: hidraw1: USB HID v0.00 Device [HID 172f:0501] on usb-dummy_hcd.7-1/input0 [ 101.476344][ T907] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 101.506306][ T487] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 101.527316][ T503] logitech-hidpp-device 0003:046D:C086.002B: unknown main item tag 0x0 [ 101.535440][ T503] logitech-hidpp-device 0003:046D:C086.002B: unknown main item tag 0x0 [ 101.543644][ T503] logitech-hidpp-device 0003:046D:C086.002B: unknown main item tag 0x0 [ 101.552634][ T503] logitech-hidpp-device 0003:046D:C086.002B: hidraw2: USB HID v0.00 Device [HID 046d:c086] on usb-dummy_hcd.0-1/input0 [ 101.580471][ T503] usb 8-1: USB disconnect, device number 12 [ 101.716365][ T907] usb 6-1: Using ep0 maxpacket: 8 [ 101.727617][ T54] usb 1-1: USB disconnect, device number 14 [ 101.746290][ T487] usb 7-1: Using ep0 maxpacket: 8 [ 101.836366][ T907] usb 6-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 101.845265][ T907] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.853707][ T907] usb 6-1: config 0 descriptor?? [ 101.866342][ T487] usb 7-1: config 135 has an invalid interface number: 230 but max is 0 [ 101.874502][ T487] usb 7-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 101.884742][ T487] usb 7-1: config 135 has no interface number 0 [ 101.890862][ T487] usb 7-1: too many endpoints for config 135 interface 230 altsetting 126: 53, using maximum allowed: 30 [ 101.902265][ T487] usb 7-1: config 135 interface 230 altsetting 126 has 0 endpoint descriptors, different from the interface descriptor's value: 53 [ 101.915572][ T487] usb 7-1: config 135 interface 230 has no altsetting 0 [ 102.076396][ T487] usb 7-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 102.085285][ T487] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.093449][ T487] usb 7-1: Product: syz [ 102.097819][ T487] usb 7-1: Manufacturer: syz [ 102.102656][ T487] usb 7-1: SerialNumber: syz [ 102.147051][ T487] uvcvideo: Found UVC 0.00 device syz (18ec:3288) [ 102.153577][ T487] uvcvideo: No valid video chain found. [ 102.256819][ T4695] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=4695 comm=syz.0.1821 [ 102.336346][ T907] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 102.346181][ T907] asix 6-1:0.0 (unnamed net_device) (uninitialized): Error reading PHYID register: ffffffe0 [ 102.356435][ T390] usb 7-1: USB disconnect, device number 10 [ 102.456378][ T54] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 102.602041][ T4712] syz.0.1828[4712] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 102.602079][ T4712] syz.0.1828[4712] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 102.616516][ T25] usb 9-1: USB disconnect, device number 11 [ 102.763650][ T4731] syz.0.1837[4731] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 102.763689][ T4731] syz.0.1837[4731] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 102.816347][ T54] usb 8-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 255, changing to 11 [ 102.836372][ T907] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 102.838827][ T54] usb 8-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 59391, setting to 1024 [ 102.848979][ T907] asix: probe of 6-1:0.0 failed with error -71 [ 102.864819][ T54] usb 8-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 102.870926][ T907] usb 6-1: USB disconnect, device number 12 [ 102.874547][ T54] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.889087][ T4690] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 102.945571][ T4744] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 102.970481][ T4746] FAT-fs (loop6): Directory bread(block 64) failed [ 102.976850][ T4746] FAT-fs (loop6): Directory bread(block 65) failed [ 102.983163][ T4746] FAT-fs (loop6): Directory bread(block 66) failed [ 102.989618][ T4746] FAT-fs (loop6): Directory bread(block 67) failed [ 102.995948][ T4746] FAT-fs (loop6): Directory bread(block 68) failed [ 103.002320][ T4746] FAT-fs (loop6): Directory bread(block 69) failed [ 103.008958][ T4746] FAT-fs (loop6): Directory bread(block 70) failed [ 103.015260][ T4746] FAT-fs (loop6): Directory bread(block 71) failed [ 103.021684][ T4746] FAT-fs (loop6): Directory bread(block 72) failed [ 103.027981][ T4746] FAT-fs (loop6): Directory bread(block 73) failed [ 103.126438][ T54] aiptek 8-1:17.0: Aiptek using 400 ms programming speed [ 103.133969][ T54] input: Aiptek as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:17.0/input/input27 [ 103.144801][ T54] usb 8-1: USB disconnect, device number 13 [ 103.183702][ T4754] devtmpfs: Unknown parameter 'posixacl' [ 103.356401][ T2383] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 103.496306][ T907] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 103.666996][ T4763] F2FS-fs (loop5): Wrong CP boundary, start(512) end(198144) blocks(1024) [ 103.675323][ T4763] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 103.684060][ T4763] F2FS-fs (loop5): invalid crc value [ 103.690646][ T4763] F2FS-fs (loop5): Found nat_bits in checkpoint [ 103.713060][ T4763] F2FS-fs (loop5): Try to recover 2th superblock, ret: 0 [ 103.720071][ T4763] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 103.720096][ T2383] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 103.743423][ T2383] usb 7-1: config 0 has no interfaces? [ 103.748959][ T2383] usb 7-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 103.752136][ T4763] F2FS-fs (loop5): sanity_check_inode: inode (ino=8) has casefold flag, but casefold feature is off [ 103.768667][ T907] usb 9-1: Using ep0 maxpacket: 16 [ 103.773637][ T2383] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.789729][ T2383] usb 7-1: config 0 descriptor?? [ 103.906364][ T907] usb 9-1: config 0 has an invalid interface number: 117 but max is 0 [ 103.914464][ T907] usb 9-1: config 0 has no interface number 0 [ 103.920988][ T907] usb 9-1: config 0 interface 117 has no altsetting 0 [ 104.042072][ T2383] usb 7-1: USB disconnect, device number 11 [ 104.087549][ T4798] SELinux: Context system_u:object_r:mouse_device_t:s0 is not valid (left unmapped). [ 104.097772][ T907] usb 9-1: New USB device found, idVendor=6914, idProduct=4496, bcdDevice=38.97 [ 104.112606][ T907] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.125206][ T907] usb 9-1: Product: syz [ 104.129601][ T907] usb 9-1: Manufacturer: syz [ 104.134088][ T907] usb 9-1: SerialNumber: syz [ 104.148806][ T907] usb 9-1: config 0 descriptor?? [ 104.578583][ T907] usb 9-1: USB disconnect, device number 12 [ 104.589797][ T1240] udevd[1240]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.117/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 104.646332][ T472] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 104.716307][ T54] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 104.940850][ T4856] EXT4-fs (loop8): Test dummy encryption mode enabled [ 104.947570][ T4856] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 104.958286][ T4856] EXT4-fs (loop8): 1 truncate cleaned up [ 104.963789][ T4856] EXT4-fs (loop8): mounted filesystem without journal. Opts: quota,resuid=0x000000000000ee01,barrier,debug_want_extra_isize=0x0000000000000080,block_validity,test_dummy_encryption=v1,,errors=continue [ 105.016421][ T472] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 105.027308][ T472] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 105.036889][ T472] usb 1-1: New USB device found, idVendor=10cf, idProduct=ea90, bcdDevice= 0.00 [ 105.045707][ T472] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.054033][ T472] usb 1-1: config 0 descriptor?? [ 105.096566][ T54] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 105.107576][ T54] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 105.117438][ T54] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 105.130219][ T54] usb 8-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 105.135302][ T4863] syz.8.1893[4863] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 105.139240][ T54] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.139343][ T4863] syz.8.1893[4863] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 105.158592][ T54] usb 8-1: config 0 descriptor?? [ 105.186968][ T4863] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 105.446895][ T24] kauditd_printk_skb: 198 callbacks suppressed [ 105.446907][ T24] audit: type=1326 audit(2000000011.419:21066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4876 comm="syz.6.1899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f014ed49f19 code=0x7ffc0000 [ 105.477685][ T24] audit: type=1326 audit(2000000011.419:21067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4876 comm="syz.6.1899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f014ed49f19 code=0x7ffc0000 [ 105.501149][ T487] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 105.508764][ T24] audit: type=1326 audit(2000000011.419:21068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4876 comm="syz.6.1899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=227 compat=0 ip=0x7f014ed49f19 code=0x7ffc0000 [ 105.532467][ T24] audit: type=1326 audit(2000000011.419:21069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4876 comm="syz.6.1899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f014ed49f19 code=0x7ffc0000 [ 105.627701][ T54] acrux 0003:1A34:0802.002C: hidraw0: USB HID v0.00 Device [HID 1a34:0802] on usb-dummy_hcd.7-1/input0 [ 105.639000][ T54] acrux 0003:1A34:0802.002C: no inputs found [ 105.645073][ T54] acrux 0003:1A34:0802.002C: Failed to enable force feedback support, error: -19 [ 105.756347][ T472] usbhid 1-1:0.0: can't add hid device: -71 [ 105.762153][ T472] usbhid: probe of 1-1:0.0 failed with error -71 [ 105.768427][ T487] usb 9-1: Using ep0 maxpacket: 16 [ 105.773970][ T472] usb 1-1: USB disconnect, device number 15 [ 106.006383][ T25] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 106.046423][ T487] usb 9-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 106.055374][ T487] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.063129][ T487] usb 9-1: Product: syz [ 106.067084][ T487] usb 9-1: Manufacturer: syz [ 106.071473][ T487] usb 9-1: SerialNumber: syz [ 106.076463][ T487] usb 9-1: config 0 descriptor?? [ 106.088741][ T24] audit: type=1400 audit(2000000268.067:21070): avc: denied { ioctl } for pid=4906 comm="syz.0.1913" path="socket:[36047]" dev="sockfs" ino=36047 ioctlcmd=0x7459 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 106.143430][ T24] audit: type=1326 audit(2000000268.117:21071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4912 comm="syz.0.1916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff642466f19 code=0x7ffc0000 [ 106.166867][ T24] audit: type=1326 audit(2000000268.117:21072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4912 comm="syz.0.1916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff642466f19 code=0x7ffc0000 [ 106.190506][ T24] audit: type=1326 audit(2000000268.117:21073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4912 comm="syz.0.1916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7ff642466f19 code=0x7ffc0000 [ 106.220873][ T24] audit: type=1326 audit(2000000268.117:21074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4912 comm="syz.0.1916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff642466f19 code=0x7ffc0000 [ 106.244233][ T24] audit: type=1326 audit(2000000268.117:21075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4912 comm="syz.0.1916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff642466f19 code=0x7ffc0000 [ 106.326410][ T487] r8152 9-1:0.0: Unknown version 0x0000 [ 106.366349][ T54] Bluetooth: hci0: command 0x1003 tx timeout [ 106.372175][ T2057] Bluetooth: hci0: sending frame failed (-49) [ 106.386342][ T25] usb 7-1: config 0 has an invalid interface number: 204 but max is 0 [ 106.394446][ T25] usb 7-1: config 0 has no interface number 0 [ 106.534150][ T487] usb 9-1: USB disconnect, device number 13 [ 106.556385][ T25] usb 7-1: New USB device found, idVendor=0745, idProduct=1000, bcdDevice=54.42 [ 106.565265][ T25] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.573187][ T25] usb 7-1: Product: syz [ 106.577186][ T25] usb 7-1: Manufacturer: syz [ 106.581562][ T25] usb 7-1: SerialNumber: syz [ 106.586994][ T25] usb 7-1: config 0 descriptor?? [ 106.686323][ T472] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 106.828852][ T25] usb 7-1: USB disconnect, device number 12 [ 106.836376][ T553] usb 8-1: reset high-speed USB device number 14 using dummy_hcd [ 107.046344][ T472] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 107.057392][ T472] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 107.068960][ T472] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 107.082116][ T472] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 107.091366][ T472] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.100369][ T472] usb 1-1: config 0 descriptor?? [ 107.116391][ T4926] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 107.199113][ T4936] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 107.296780][ T4944] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 107.408427][ T4959] blk_update_request: I/O error, dev loop13, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 107.421552][ T4959] F2FS-fs (loop13): Unable to read 1th superblock [ 107.428969][ T4959] blk_update_request: I/O error, dev loop13, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 107.441119][ T4959] F2FS-fs (loop13): Unable to read 2th superblock [ 107.577628][ T472] plantronics 0003:047F:FFFF.002D: unknown main item tag 0x0 [ 107.593899][ T472] plantronics 0003:047F:FFFF.002D: No inputs registered, leaving [ 107.605370][ T472] plantronics 0003:047F:FFFF.002D: hiddev96,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 107.716366][ T487] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 107.737808][ T4997] EXT4-fs (loop6): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000000,minixdf,,errors=continue [ 107.751777][ T4997] ext4 filesystem being mounted at /195/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 107.756682][ T54] usb 8-1: USB disconnect, device number 14 [ 107.778549][ T5006] overlayfs: failed to resolve './file0': -2 [ 107.847078][ T25] usb 1-1: USB disconnect, device number 16 [ 108.076378][ T487] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 108.087306][ T487] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 108.097075][ T487] usb 9-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 108.106629][ T487] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.115416][ T487] usb 9-1: config 0 descriptor?? [ 108.446295][ T54] Bluetooth: hci0: command 0x1001 tx timeout [ 108.452204][ T2057] Bluetooth: hci0: sending frame failed (-49) [ 108.627107][ T487] petalynx 0003:18B1:0037.002E: collection stack underflow [ 108.634274][ T487] petalynx 0003:18B1:0037.002E: item 0 1 0 12 parsing failed [ 108.643537][ T487] petalynx 0003:18B1:0037.002E: parse failed [ 108.650018][ T487] petalynx: probe of 0003:18B1:0037.002E failed with error -22 [ 108.830630][ T553] usb 9-1: USB disconnect, device number 14 [ 108.986304][ T54] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 109.226361][ T54] usb 8-1: Using ep0 maxpacket: 16 [ 109.346620][ T54] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 109.361324][ T54] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 109.371515][ T54] usb 8-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 109.380887][ T54] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.396643][ T54] usb 8-1: config 0 descriptor?? [ 109.859900][ T5062] udc-core: couldn't find an available UDC or it's busy [ 109.886619][ T5062] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 109.920053][ T54] hid-generic 0003:0158:0100.002F: unknown main item tag 0x1 [ 109.935714][ T5108] syz.6.2003[5108] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 109.935821][ T5108] syz.6.2003[5108] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 109.939695][ T54] hid-generic 0003:0158:0100.002F: unexpected long global item [ 109.970361][ T5110] syz.8.2004[5110] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 109.970420][ T5110] syz.8.2004[5110] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 109.996485][ T54] hid-generic: probe of 0003:0158:0100.002F failed with error -22 [ 110.138606][ T487] usb 8-1: USB disconnect, device number 15 [ 110.447212][ T5135] syz.0.2015[5135] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 110.447270][ T5135] syz.0.2015[5135] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 110.526338][ T54] Bluetooth: hci0: command 0x1009 tx timeout [ 110.541793][ T5118] xt_hashlimit: size too large, truncated to 1048576 [ 110.550648][ T24] kauditd_printk_skb: 280 callbacks suppressed [ 110.550660][ T24] audit: type=1326 audit(2000000003.139:21356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5144 comm="syz.6.2020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f014ed49f19 code=0x7ffc0000 [ 110.606010][ T24] audit: type=1326 audit(2000000003.139:21357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5144 comm="syz.6.2020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f014ed49f19 code=0x7ffc0000 [ 110.641309][ T24] audit: type=1326 audit(2000000003.169:21358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5144 comm="syz.6.2020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f014ed49f19 code=0x7ffc0000 [ 110.671047][ T5151] input: syz1 as /devices/virtual/input/input28 [ 110.707126][ T24] audit: type=1326 audit(2000000003.169:21359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5144 comm="syz.6.2020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f014ed49f19 code=0x7ffc0000 [ 110.738751][ T24] audit: type=1326 audit(2000000003.169:21360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5144 comm="syz.6.2020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f014ed49f19 code=0x7ffc0000 [ 110.768514][ T24] audit: type=1326 audit(2000000003.179:21361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5144 comm="syz.6.2020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f014ed49f19 code=0x7ffc0000 [ 110.844405][ T24] audit: type=1326 audit(2000000003.179:21362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5144 comm="syz.6.2020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=155 compat=0 ip=0x7f014ed49f19 code=0x7ffc0000 [ 110.869461][ T24] audit: type=1326 audit(2000000003.179:21363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5144 comm="syz.6.2020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f014ed49f19 code=0x7ffc0000 [ 110.900874][ T24] audit: type=1326 audit(2000000003.179:21364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5144 comm="syz.6.2020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f014ed49f19 code=0x7ffc0000 [ 110.932753][ T24] audit: type=1326 audit(2000000003.179:21365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5144 comm="syz.6.2020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=138 compat=0 ip=0x7f014ed49f19 code=0x7ffc0000 [ 110.988080][ T5181] x_tables: duplicate underflow at hook 4 [ 111.150313][ T5194] EXT4-fs error (device loop8): ext4_expand_extra_isize_ea:2756: inode #11: comm syz.8.2042: corrupted xattr block 95 [ 111.163940][ T5194] EXT4-fs error (device loop8): ext4_validate_block_bitmap:429: comm syz.8.2042: bg 0: block 7: invalid block bitmap [ 111.176585][ T5194] EXT4-fs error (device loop8) in ext4_mb_clear_bb:5645: Corrupt filesystem [ 111.185200][ T5194] EXT4-fs error (device loop8): ext4_xattr_delete_inode:2921: inode #11: comm syz.8.2042: corrupted xattr block 95 [ 111.197619][ T5194] EXT4-fs warning (device loop8): ext4_evict_inode:303: xattr delete (err -117) [ 111.206907][ T5194] EXT4-fs (loop8): 1 orphan inode deleted [ 111.212592][ T5194] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue [ 111.456308][ T1187] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 111.516965][ T5227] xt_bpf: check failed: parse error [ 111.532823][ T5229] sch_fq: defrate 0 ignored. [ 111.586298][ T390] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 111.826344][ T1187] usb 8-1: config 0 has no interfaces? [ 111.836330][ T2383] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 111.906346][ T1187] usb 8-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 111.915353][ T1187] usb 8-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 111.923265][ T1187] usb 8-1: Manufacturer: syz [ 111.928370][ T1187] usb 8-1: config 0 descriptor?? [ 111.956411][ T390] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 111.967946][ T390] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 112.066380][ T390] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 112.075266][ T390] usb 1-1: New USB device strings: Mfr=0, Product=9, SerialNumber=0 [ 112.083053][ T390] usb 1-1: Product: syz [ 112.087834][ T390] usb 1-1: config 0 descriptor?? [ 112.169362][ T54] usb 8-1: USB disconnect, device number 16 [ 112.246369][ T2383] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 112.255906][ T2383] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 112.446381][ T2383] usb 7-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 112.455296][ T2383] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.463051][ T2383] usb 7-1: Product: syz [ 112.467095][ T2383] usb 7-1: Manufacturer: syz [ 112.471450][ T2383] usb 7-1: SerialNumber: syz [ 112.476608][ T2383] usb 7-1: config 0 descriptor?? [ 112.496332][ T5235] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 112.504907][ T5235] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 112.586985][ T390] konepure 0003:1E7D:2DB4.0030: unknown main item tag 0x4 [ 112.593938][ T390] konepure 0003:1E7D:2DB4.0030: item fetching failed at offset 9/11 [ 112.601936][ T390] konepure 0003:1E7D:2DB4.0030: parse failed [ 112.608292][ T390] konepure: probe of 0003:1E7D:2DB4.0030 failed with error -22 [ 112.717465][ T5235] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 112.724272][ T5235] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 112.789140][ T907] usb 1-1: USB disconnect, device number 17 [ 112.887207][ T5259] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a802c01c, mo2=0002] [ 112.895040][ T5259] System zones: 0-2, 18-18, 34-35 [ 112.900502][ T5259] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue [ 112.909284][ T5259] ext4 filesystem being mounted at /304/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 113.246427][ T54] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 113.372828][ T5281] bridge0: port 3(syz_tun) entered blocking state [ 113.379610][ T5281] bridge0: port 3(syz_tun) entered disabled state [ 113.386963][ T5281] device syz_tun entered promiscuous mode [ 113.392761][ T5281] bridge0: port 3(syz_tun) entered blocking state [ 113.399012][ T5281] bridge0: port 3(syz_tun) entered forwarding state [ 113.441852][ T5285] serio: Serial port ptm0 [ 113.856460][ T54] usb 8-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 113.865333][ T54] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.866292][ T907] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 113.873438][ T54] usb 8-1: Product: syz [ 113.884538][ T54] usb 8-1: Manufacturer: syz [ 113.889010][ T54] usb 8-1: SerialNumber: syz [ 113.894581][ T54] usb 8-1: config 0 descriptor?? [ 113.976372][ T2383] dm9601 7-1:0.0 (unnamed net_device) (uninitialized): MDIO read error: -71 [ 113.986486][ T2383] dm9601 7-1:0.0 eth1: register 'dm9601' at usb-dummy_hcd.6-1, Davicom DM96xx USB 10/100 Ethernet, 54:00:00:00:00:00 [ 113.999436][ T2383] usb 7-1: USB disconnect, device number 13 [ 114.005400][ T2383] dm9601 7-1:0.0 eth1: unregister 'dm9601' usb-dummy_hcd.6-1, Davicom DM96xx USB 10/100 Ethernet [ 114.176343][ T54] r8152 8-1:0.0: Unknown version 0x0000 [ 114.236456][ T907] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 114.247778][ T907] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 114.257744][ T907] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 114.270765][ T907] usb 1-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 114.280086][ T907] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.299776][ T907] usb 1-1: config 0 descriptor?? [ 114.402029][ T54] usb 8-1: USB disconnect, device number 17 [ 114.787337][ T907] gt683r_led 0003:1770:FF00.0031: item fetching failed at offset 1/5 [ 114.798359][ T907] gt683r_led 0003:1770:FF00.0031: hid parsing failed [ 114.804978][ T907] gt683r_led: probe of 0003:1770:FF00.0031 failed with error -22 [ 114.946327][ T54] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 114.960755][ T5380] device pim6reg1 entered promiscuous mode [ 114.989563][ T1187] usb 1-1: USB disconnect, device number 18 [ 115.075316][ T5396] SELinux: security_context_str_to_sid(@) failed for (dev binder, type binder) errno=-22 [ 115.229390][ T54] usb 6-1: Using ep0 maxpacket: 16 [ 115.346334][ T54] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 115.356331][ T54] usb 6-1: config 0 has no interfaces? [ 115.361624][ T54] usb 6-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 115.370775][ T54] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.379536][ T54] usb 6-1: config 0 descriptor?? [ 115.438019][ T25] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 115.445309][ T25] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 115.454511][ T25] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 115.461777][ T25] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 115.468933][ T25] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 115.476100][ T25] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 115.483327][ T25] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 115.490529][ T25] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 115.497875][ T907] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 115.505583][ T25] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 115.512983][ T25] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 115.520091][ T25] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 115.527416][ T25] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 115.534602][ T25] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 115.541843][ T25] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 115.549295][ T25] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 115.556736][ T25] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 115.564063][ T25] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 115.571276][ T25] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 115.578467][ T25] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 115.585650][ T25] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 115.592879][ T25] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 115.600085][ T25] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 115.607473][ T25] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 115.614900][ T25] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 115.622067][ T25] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 115.629417][ T25] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 115.631046][ T24] kauditd_printk_skb: 207 callbacks suppressed [ 115.631056][ T24] audit: type=1400 audit(2000000008.219:21573): avc: denied { mounton } for pid=5352 comm="syz.5.2111" path="/proc/355/task" dev="proc" ino=37248 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 115.636650][ T25] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 115.643476][ T54] usb 6-1: USB disconnect, device number 13 [ 115.666042][ T25] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 115.672555][ T24] audit: type=1400 audit(2000000008.219:21574): avc: denied { mount } for pid=5352 comm="syz.5.2111" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 115.678207][ T25] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 115.714162][ T25] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 115.721605][ T25] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 115.729993][ T25] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 115.730199][ T24] audit: type=1400 audit(2000000008.319:21575): avc: denied { read } for pid=5438 comm="syz.0.2149" name="kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 115.737219][ T25] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 115.760420][ T24] audit: type=1400 audit(2000000008.349:21576): avc: denied { open } for pid=5438 comm="syz.0.2149" path="/dev/kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 115.766909][ T907] usb 9-1: Using ep0 maxpacket: 32 [ 115.767739][ T25] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 115.795141][ T24] audit: type=1400 audit(2000000008.379:21577): avc: denied { ioctl } for pid=5438 comm="syz.0.2149" path="/dev/kvm" dev="devtmpfs" ino=82 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 115.802210][ T25] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 115.834514][ T25] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 115.841910][ T25] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 115.849436][ T25] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 115.856847][ T25] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 115.864331][ T25] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 115.871889][ T25] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 115.879497][ T25] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 115.886804][ T25] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 115.895520][ T25] hid-generic 0000:0000:0000.0032: hidraw0: HID v0.00 Device [syz0] on syz0 [ 115.906825][ T907] usb 9-1: config index 0 descriptor too short (expected 29220, got 36) [ 115.918900][ T24] audit: type=1400 audit(2000000008.509:21578): avc: denied { read write } for pid=5442 comm="syz.0.2150" name="raw-gadget" dev="devtmpfs" ino=249 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 115.923022][ T907] usb 9-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 115.950202][ T24] audit: type=1400 audit(2000000008.529:21579): avc: denied { open } for pid=5442 comm="syz.0.2150" path="/dev/raw-gadget" dev="devtmpfs" ino=249 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 115.954294][ T907] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 115.983229][ T907] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 115.993305][ T907] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 115.993996][ T24] audit: type=1400 audit(2000000008.579:21580): avc: denied { unmount } for pid=2034 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 116.003036][ T907] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 116.035617][ T907] usb 9-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 116.045893][ T907] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.056651][ T907] usb 9-1: config 0 descriptor?? [ 116.085128][ T24] audit: type=1400 audit(2000000008.669:21581): avc: denied { read } for pid=5452 comm="syz.6.2154" name="usbmon0" dev="devtmpfs" ino=150 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 116.113003][ T24] audit: type=1400 audit(2000000008.669:21582): avc: denied { open } for pid=5452 comm="syz.6.2154" path="/dev/usbmon0" dev="devtmpfs" ino=150 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 116.206288][ T54] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 116.327725][ T907] usblp 9-1:0.0: usblp0: USB Bidirectional printer dev 15 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 116.507324][ T5462] F2FS-fs (loop6): Unrecognized mount option "øest_dummy_encryption" or missing value [ 116.566882][ T907] usb 9-1: USB disconnect, device number 15 [ 116.575507][ T907] usblp0: removed [ 116.606340][ T54] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 116.619688][ T54] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 116.629639][ T54] usb 1-1: New USB device found, idVendor=1345, idProduct=3008, bcdDevice= 0.00 [ 116.639104][ T54] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.647819][ T54] usb 1-1: config 0 descriptor?? [ 117.127591][ T5486] syz.8.2168[5486] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 117.127650][ T5486] syz.8.2168[5486] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 117.147264][ T54] sony 0003:1345:3008.0033: item fetching failed at offset 2/5 [ 117.177309][ T54] sony 0003:1345:3008.0033: parse failed [ 117.182990][ T54] sony: probe of 0003:1345:3008.0033 failed with error -22 [ 117.212974][ T5494] xt_hashlimit: size too large, truncated to 1048576 [ 117.350266][ T54] usb 1-1: USB disconnect, device number 19 [ 117.452314][ T5504] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 117.465905][ T5504] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 117.478660][ T5504] F2FS-fs (loop5): invalid crc value [ 117.513146][ T5511] kvm: pic: non byte write [ 117.517525][ T5504] F2FS-fs (loop5): Found nat_bits in checkpoint [ 117.517600][ T5511] kvm: pic: non byte write [ 117.528151][ T5511] kvm: pic: non byte write [ 117.532553][ T5511] kvm: pic: non byte write [ 117.537053][ T5511] kvm: pic: non byte write [ 117.541337][ T5511] kvm: pic: non byte write [ 117.545594][ T5511] kvm: pic: non byte write [ 117.550121][ T5511] kvm: pic: non byte write [ 117.554875][ T5511] kvm: pic: non byte write [ 117.559259][ T5511] kvm: pic: non byte write [ 117.573945][ T5504] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 117.580848][ T5504] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 117.752811][ T5529] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 117.762181][ T5529] FAT-fs (loop6): Filesystem has been set read-only [ 117.857467][ T5552] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=5552 comm=syz.8.2194 [ 118.116277][ T54] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 118.123898][ T1187] usb 6-1: new full-speed USB device number 14 using dummy_hcd [ 118.136313][ T390] Bluetooth: hci0: command 0x1003 tx timeout [ 118.142143][ T2057] Bluetooth: hci0: sending frame failed (-49) [ 120.206271][ T390] Bluetooth: hci0: command 0x1001 tx timeout [ 120.214181][ T2057] Bluetooth: hci0: sending frame failed (-49) [ 121.183978][ T24] kauditd_printk_skb: 59 callbacks suppressed [ 121.183989][ T24] audit: type=1400 audit(2000000013.769:21642): avc: denied { create } for pid=5577 comm="syz.0.2205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 121.237677][ T24] audit: type=1400 audit(2000000013.829:21643): avc: denied { write } for pid=5577 comm="syz.0.2205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 121.268200][ T24] audit: type=1400 audit(2000000013.829:21644): avc: denied { nlmsg_write } for pid=5577 comm="syz.0.2205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 121.290245][ T24] audit: type=1400 audit(2000000013.859:21645): avc: denied { create } for pid=5582 comm="syz.8.2208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 121.310170][ T24] audit: type=1400 audit(2000000013.859:21646): avc: denied { setopt } for pid=5582 comm="syz.8.2208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 121.356465][ T24] audit: type=1400 audit(2000000013.949:21647): avc: denied { create } for pid=5586 comm="syz.8.2210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 121.376064][ T5550] udc-core: couldn't find an available UDC or it's busy [ 121.385969][ T5550] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 121.406408][ T24] audit: type=1326 audit(2000000013.969:21648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5588 comm="syz.0.2211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff642466f19 code=0x7ffc0000 [ 121.430785][ T24] audit: type=1400 audit(2000000013.969:21649): avc: denied { read } for pid=5586 comm="syz.8.2210" name="ppp" dev="devtmpfs" ino=149 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 121.453760][ T24] audit: type=1400 audit(2000000013.969:21650): avc: denied { open } for pid=5586 comm="syz.8.2210" path="/dev/ppp" dev="devtmpfs" ino=149 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 121.476989][ T24] audit: type=1400 audit(2000000013.969:21651): avc: denied { read } for pid=5586 comm="syz.8.2210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 121.827595][ T5603] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.834472][ T5603] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.841966][ T5603] device bridge_slave_0 entered promiscuous mode [ 121.849639][ T5603] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.856510][ T5603] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.863632][ T5603] device bridge_slave_1 entered promiscuous mode [ 121.895772][ T5603] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.902642][ T5603] bridge0: port 2(bridge_slave_1) entered forwarding state [ 121.909854][ T5603] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.916620][ T5603] bridge0: port 1(bridge_slave_0) entered forwarding state [ 121.933550][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 121.940952][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.948048][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.958019][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 121.966050][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.972896][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 121.982218][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 121.990281][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.997107][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 122.008814][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 122.017568][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 122.030434][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 122.042186][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 122.050008][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 122.057298][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 122.065176][ T5603] device veth0_vlan entered promiscuous mode [ 122.075270][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 122.085172][ T5603] device veth1_macvtap entered promiscuous mode [ 122.094048][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 122.103658][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 122.207180][ T2042] device bridge_slave_1 left promiscuous mode [ 122.216412][ T2042] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.224336][ T2042] device bridge_slave_0 left promiscuous mode [ 122.234793][ T2042] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.286330][ T390] Bluetooth: hci0: command 0x1009 tx timeout [ 122.423549][ T5655] tap0: tun_chr_ioctl cmd 1074025675 [ 122.429254][ T5655] tap0: persist enabled [ 122.433377][ T5655] tap0: tun_chr_ioctl cmd 1074025675 [ 122.438645][ T5655] tap0: persist disabled [ 122.586284][ T487] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 122.729553][ T5665] F2FS-fs (loop8): Insane cp_payload (553648128 >= 504) [ 122.744144][ T5665] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 122.753720][ T5665] F2FS-fs (loop8): invalid crc value [ 122.763017][ T5665] F2FS-fs (loop8): Found nat_bits in checkpoint [ 122.801011][ T5665] F2FS-fs (loop8): Start checkpoint disabled! [ 122.812802][ T5665] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0 [ 122.828030][ T5665] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e6 [ 122.861017][ T5665] attempt to access beyond end of device [ 122.861017][ T5665] loop8: rw=0, want=45072, limit=40427 [ 122.892165][ T5694] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5694 comm=syz.0.2252 [ 122.893001][ T9] attempt to access beyond end of device [ 122.893001][ T9] loop8: rw=2049, want=40968, limit=40427 [ 122.917203][ T5691] EXT4-fs (loop6): Ignoring removed bh option [ 122.923141][ T5691] EXT4-fs (loop6): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 122.942285][ T5691] EXT4-fs (loop6): mounted filesystem without journal. Opts: delalloc,data_err=abort,jqfmt=vfsv0,dioread_lock,noblock_validity,max_dir_size_kb=0x00000000004007b1,data_err=ignore,noinit_itable,max_batch_time=0x0000000000000002,data_err=abort,bh,dioread_nolock,,errors=continue [ 122.956465][ T487] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 122.980220][ T487] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 123.002499][ T487] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 123.015455][ T487] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 123.024329][ T487] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.035797][ T487] usb 5-1: config 0 descriptor?? [ 123.056338][ T5631] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 123.091323][ T5708] SELinux: Context system_u:object_r:hald_log_t:s0 is not valid (left unmapped). [ 123.166365][ T54] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 123.366315][ T472] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 123.426268][ T54] usb 1-1: Using ep0 maxpacket: 16 [ 123.517071][ T487] plantronics 0003:047F:FFFF.0034: unknown main item tag 0x0 [ 123.524441][ T487] plantronics 0003:047F:FFFF.0034: No inputs registered, leaving [ 123.533069][ T487] plantronics 0003:047F:FFFF.0034: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 123.556421][ T54] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 123.726358][ T472] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 123.737044][ T472] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 123.746764][ T472] usb 7-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 123.755583][ T472] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.764252][ T472] usb 7-1: config 0 descriptor?? [ 123.767313][ T54] usb 1-1: New USB device found, idVendor=045e, idProduct=0721, bcdDevice=90.c4 [ 123.777997][ T54] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.785767][ T54] usb 1-1: Product: syz [ 123.789963][ T54] usb 1-1: Manufacturer: syz [ 123.794363][ T54] usb 1-1: SerialNumber: syz [ 123.800309][ T2379] usb 5-1: USB disconnect, device number 12 [ 123.808765][ T54] usb 1-1: config 0 descriptor?? [ 124.067126][ T293] usb 1-1: USB disconnect, device number 20 [ 124.446776][ T5710] syz.6.2258[5710] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 124.446834][ T5710] syz.6.2258[5710] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 124.571919][ T5778] F2FS-fs (loop8): invalid crc value [ 124.589301][ T5778] F2FS-fs (loop8): Found nat_bits in checkpoint [ 124.628357][ T5778] F2FS-fs (loop8): Start checkpoint disabled! [ 124.634897][ T5778] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e6 [ 124.676398][ T472] hid-led: probe of 0003:27B8:01ED.0035 failed with error -71 [ 124.697804][ T472] usb 7-1: USB disconnect, device number 15 [ 124.729156][ T7] attempt to access beyond end of device [ 124.729156][ T7] loop8: rw=2049, want=40968, limit=40427 [ 124.736302][ T2379] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 124.903332][ T5803] device batadv_slave_1 entered promiscuous mode [ 124.910040][ T5802] device batadv_slave_1 left promiscuous mode [ 124.996326][ T2379] usb 5-1: Using ep0 maxpacket: 16 [ 125.126334][ T2379] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 125.136998][ T2379] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 125.146592][ T2379] usb 5-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 125.155383][ T2379] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.164092][ T2379] usb 5-1: config 0 descriptor?? [ 125.186320][ T472] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 125.426277][ T472] usb 1-1: Using ep0 maxpacket: 8 [ 125.666546][ T25] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 125.677191][ T2379] hid-multitouch 0003:1FD2:6007.0036: unknown main item tag 0x2 [ 125.686577][ T2379] hid-multitouch 0003:1FD2:6007.0036: item fetching failed at offset 4/5 [ 125.694963][ T2379] hid-multitouch: probe of 0003:1FD2:6007.0036 failed with error -22 [ 125.706354][ T472] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 125.715382][ T472] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.723357][ T472] usb 1-1: Product: syz [ 125.727551][ T472] usb 1-1: Manufacturer: syz [ 125.731945][ T472] usb 1-1: SerialNumber: syz [ 125.753169][ T5832] SELinux: security_context_str_to_sid(unconfined_u) failed for (dev incremental-fs, type incremental-fs) errno=-22 [ 125.882080][ T503] usb 5-1: USB disconnect, device number 13 [ 126.026327][ T25] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 126.037118][ T25] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 126.046853][ T25] usb 7-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00 [ 126.055675][ T25] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.064330][ T25] usb 7-1: config 0 descriptor?? [ 126.505669][ T24] kauditd_printk_skb: 176 callbacks suppressed [ 126.505680][ T24] audit: type=1326 audit(2000000019.089:21828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5855 comm="syz.4.2325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f580328cf19 code=0x7ffc0000 [ 126.536604][ T24] audit: type=1326 audit(2000000019.089:21829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5855 comm="syz.4.2325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f580328cf19 code=0x7ffc0000 [ 126.560674][ T24] audit: type=1326 audit(2000000019.089:21830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5855 comm="syz.4.2325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f580328cf19 code=0x7ffc0000 [ 126.584456][ T24] audit: type=1326 audit(2000000019.119:21831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5855 comm="syz.4.2325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f580328cf19 code=0x7ffc0000 [ 126.585136][ T25] hid-generic 0003:05AC:0269.0037: item fetching failed at offset 6/7 [ 126.609992][ T24] audit: type=1326 audit(2000000019.119:21832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5855 comm="syz.4.2325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f580328cf19 code=0x7ffc0000 [ 126.639231][ T24] audit: type=1326 audit(2000000019.119:21833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5855 comm="syz.4.2325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f580328cf19 code=0x7ffc0000 [ 126.639654][ T25] hid-generic: probe of 0003:05AC:0269.0037 failed with error -22 [ 126.662803][ T24] audit: type=1326 audit(2000000019.149:21834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5855 comm="syz.4.2325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f580328cf19 code=0x7ffc0000 [ 126.710455][ T24] audit: type=1326 audit(2000000019.149:21835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5855 comm="syz.4.2325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=310 compat=0 ip=0x7f580328cf19 code=0x7ffc0000 [ 126.735105][ T24] audit: type=1326 audit(2000000019.149:21836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5855 comm="syz.4.2325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f580328cf19 code=0x7ffc0000 [ 126.758412][ T5841] Leaked POSIX lock on dev=0x0:0x2b ino=0x699 fl_owner=ffff888112ef5a00 fl_flags=0x81 fl_type=0x1 fl_pid=5839 [ 126.771014][ T2302] Leaked locks on dev=0x0:0x2b ino=0x699: [ 126.776763][ T2302] POSIX: fl_owner=ffff888112ef5a00 fl_flags=0x81 fl_type=0x1 fl_pid=5839 [ 126.806866][ T2379] usb 7-1: USB disconnect, device number 16 [ 126.818136][ T24] audit: type=1326 audit(2000000019.199:21837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5855 comm="syz.4.2325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f580328cf19 code=0x7ffc0000 [ 126.896374][ T472] cdc_ncm 1-1:1.0: SET_NTB_FORMAT failed [ 126.912865][ T5879] input: syz1 as /devices/virtual/input/input29 [ 126.936547][ T472] cdc_ncm 1-1:1.0: bind() failure [ 126.951585][ T472] cdc_ncm 1-1:1.1: bind() failure [ 126.965053][ T472] usb 1-1: USB disconnect, device number 21 [ 127.677338][ T5919] F2FS-fs (loop6): Found nat_bits in checkpoint [ 127.750717][ T5919] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 128.002677][ T1970] attempt to access beyond end of device [ 128.002677][ T1970] loop6: rw=2049, want=45104, limit=40427 [ 128.132990][ T5948] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.2362: bg 0: block 248: padding at end of block bitmap is not set [ 128.196733][ T5948] EXT4-fs error (device loop4): ext4_acquire_dquot:6219: comm syz.4.2362: Failed to acquire dquot type 1 [ 128.237213][ T5948] EXT4-fs (loop4): 1 truncate cleaned up [ 128.264624][ T5948] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 128.316367][ T5948] ext4 filesystem being mounted at /29/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 128.471127][ T2042] Bluetooth: hci0: Frame reassembly failed (-84) [ 128.481561][ T5982] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 128.531426][ T5990] tipc: Started in network mode [ 128.544989][ T5990] tipc: Own node identity ac1414aa, cluster identity 4711 [ 128.553848][ T5990] tipc: New replicast peer: 100.1.1.1 [ 128.560288][ T5990] tipc: Enabled bearer , priority 10 [ 128.814255][ T6041] xt_hashlimit: max too large, truncated to 1048576 [ 128.931992][ T6057] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 128.953419][ T6059] tipc: Started in network mode [ 128.958569][ T6059] tipc: Own node identity ac14140f, cluster identity 4711 [ 128.965604][ T6059] tipc: New replicast peer: 255.255.255.5 [ 128.971177][ T6059] tipc: Enabled bearer , priority 10 [ 128.983614][ T6061] syz.0.2413[6061] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 128.983651][ T6061] syz.0.2413[6061] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 129.035272][ T6067] SELinux: failed to load policy [ 129.426359][ T553] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 129.497851][ T54] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 129.557894][ T6101] syz.4.2432[6101] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 129.557930][ T6101] syz.4.2432[6101] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 129.676321][ T25] tipc: 32-bit node address hash set to aa1414ac [ 129.686309][ T553] usb 1-1: Using ep0 maxpacket: 16 [ 129.876368][ T2379] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 129.896375][ T54] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 129.907152][ T54] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 129.916743][ T54] usb 9-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 129.925569][ T54] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.934043][ T54] usb 9-1: config 0 descriptor?? [ 130.036335][ T553] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 130.045228][ T553] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.053019][ T553] usb 1-1: Product: syz [ 130.056999][ T553] usb 1-1: Manufacturer: syz [ 130.061393][ T553] usb 1-1: SerialNumber: syz [ 130.066838][ T553] usb 1-1: config 0 descriptor?? [ 130.086306][ T25] tipc: 32-bit node address hash set to f1414ac [ 130.266353][ T2379] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 255, changing to 11 [ 130.277515][ T2379] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 59391, setting to 1024 [ 130.288597][ T2379] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 130.297530][ T2379] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.336472][ T6106] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 130.526691][ T553] Bluetooth: hci0: command 0x1003 tx timeout [ 130.532587][ T2057] Bluetooth: hci0: sending frame failed (-49) [ 130.539567][ T2383] usb 1-1: USB disconnect, device number 22 [ 130.566678][ T2379] aiptek 5-1:17.0: Aiptek using 400 ms programming speed [ 130.573987][ T2379] input: Aiptek as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:17.0/input/input30 [ 130.584342][ T2379] usb 5-1: USB disconnect, device number 14 [ 130.626649][ T54] usb 9-1: string descriptor 0 read error: -22 [ 130.708503][ T6127] EXT4-fs (loop6): 1 truncate cleaned up [ 130.713947][ T6127] EXT4-fs (loop6): mounted filesystem without journal. Opts: bsdgroups,grpquota,debug_want_extra_isize=0x000000000000005c,noauto_da_alloc,nolazytime,discard,grpjquota=,errors=remount-ro,nobarrier, [ 130.887095][ T54] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:256C:006D.0038/input/input31 [ 130.899887][ T54] uclogic 0003:256C:006D.0038: input,hidraw0: USB HID v0.00 Device [HID 256c:006d] on usb-dummy_hcd.8-1/input0 [ 131.090101][ T54] usb 9-1: USB disconnect, device number 16 [ 131.346327][ T25] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 131.596462][ T54] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 131.706349][ T25] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 131.717789][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 131.728745][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 131.738491][ T25] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 131.752466][ T25] usb 1-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 131.771354][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.789228][ T25] usb 1-1: config 0 descriptor?? [ 131.830203][ T24] kauditd_printk_skb: 172 callbacks suppressed [ 131.830216][ T24] audit: type=1400 audit(2000000024.419:22008): avc: denied { mount } for pid=6177 comm="syz.6.2464" name="/" dev="loop6" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 131.867738][ T24] audit: type=1400 audit(2000000024.449:22009): avc: denied { unmount } for pid=1970 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 131.915860][ T24] audit: type=1326 audit(2000000024.499:22010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6182 comm="syz.6.2466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f014ed49f19 code=0x7ffc0000 [ 131.959432][ T24] audit: type=1326 audit(2000000024.499:22011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6182 comm="syz.6.2466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f014ed49f19 code=0x7ffc0000 [ 131.984368][ T24] audit: type=1326 audit(2000000024.499:22012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6182 comm="syz.6.2466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f014ed49f19 code=0x7ffc0000 [ 132.008556][ T24] audit: type=1326 audit(2000000024.499:22013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6182 comm="syz.6.2466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f014ed49f19 code=0x7ffc0000 [ 132.033644][ T24] audit: type=1326 audit(2000000024.529:22014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6182 comm="syz.6.2466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f014ed49f19 code=0x7ffc0000 [ 132.036399][ T54] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 132.057398][ T24] audit: type=1400 audit(2000000024.529:22015): avc: denied { connect } for pid=6183 comm="syz.8.2467" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 132.069209][ T54] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 132.101973][ T24] audit: type=1326 audit(2000000024.539:22016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6182 comm="syz.6.2466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f014ed49f19 code=0x7ffc0000 [ 132.125985][ T24] audit: type=1326 audit(2000000024.549:22017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6182 comm="syz.6.2466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f014ed49f19 code=0x7ffc0000 [ 132.188928][ T6196] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 132.216391][ T54] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 132.225321][ T54] usb 5-1: New USB device strings: Mfr=0, Product=9, SerialNumber=0 [ 132.242358][ T54] usb 5-1: Product: syz [ 132.252373][ T54] usb 5-1: config 0 descriptor?? [ 132.294933][ T6212] SELinux: Context system_u:object_r:systemd_passwd_var_run_t:s0 is not valid (left unmapped). [ 132.327438][ T25] hid-picolcd 0003:04D8:C002.0039: item fetching failed at offset 3/7 [ 132.335568][ T25] hid-picolcd 0003:04D8:C002.0039: device report parse failed [ 132.343045][ T25] hid-picolcd: probe of 0003:04D8:C002.0039 failed with error -22 [ 132.529672][ T487] usb 1-1: USB disconnect, device number 23 [ 132.606377][ T2383] Bluetooth: hci0: command 0x1001 tx timeout [ 132.614059][ T2057] Bluetooth: hci0: sending frame failed (-49) [ 132.746911][ T54] konepure 0003:1E7D:2DB4.003A: item fetching failed at offset 10/11 [ 132.754921][ T54] konepure 0003:1E7D:2DB4.003A: parse failed [ 132.760684][ T54] konepure: probe of 0003:1E7D:2DB4.003A failed with error -22 [ 132.926364][ T2383] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 132.959243][ T487] usb 5-1: USB disconnect, device number 15 [ 132.979801][ T6258] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2501'. [ 133.148792][ T6278] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.155620][ T6278] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.163135][ T6278] device bridge_slave_0 entered promiscuous mode [ 133.169469][ T2383] usb 7-1: Using ep0 maxpacket: 8 [ 133.170104][ T6278] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.181526][ T6278] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.188686][ T6278] device bridge_slave_1 entered promiscuous mode [ 133.219586][ T6278] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.226433][ T6278] bridge0: port 2(bridge_slave_1) entered forwarding state [ 133.233493][ T6278] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.240333][ T6278] bridge0: port 1(bridge_slave_0) entered forwarding state [ 133.257991][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 133.265380][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.272699][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.281403][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 133.289488][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.296336][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 133.303515][ T2383] usb 7-1: New USB device found, idVendor=0403, idProduct=f0c8, bcdDevice= 2.56 [ 133.313486][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 133.321415][ T2383] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.321667][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 133.337407][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.344229][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 133.351669][ T2383] usb 7-1: config 0 descriptor?? [ 133.358753][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 133.366623][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 133.374432][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 133.382340][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 133.394329][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 133.402650][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 133.404843][ T2383] ftdi_sio 7-1:0.0: FTDI USB Serial Device converter detected [ 133.415078][ T6278] device veth0_vlan entered promiscuous mode [ 133.424377][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 133.432500][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 133.441645][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 133.448980][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 133.464209][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 133.481797][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 133.493648][ T6278] device veth1_macvtap entered promiscuous mode [ 133.500949][ T6294] bridge0: port 3(syz_tun) entered disabled state [ 133.507322][ T6294] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.514258][ T6294] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.534414][ T6294] bridge0: port 3(syz_tun) entered blocking state [ 133.540660][ T6294] bridge0: port 3(syz_tun) entered forwarding state [ 133.547140][ T6294] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.553919][ T6294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 133.561031][ T6294] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.567848][ T6294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 133.568342][ T6294] device bridge0 entered promiscuous mode [ 133.582044][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 133.589617][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 133.604785][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 133.615436][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 133.623296][ T2383] usb 7-1: Detected FT8U232AM [ 133.628198][ T2383] usb 7-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 133.628562][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 133.650954][ T2383] usb 7-1: USB disconnect, device number 17 [ 133.666827][ T2383] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 133.698690][ T2383] ftdi_sio 7-1:0.0: device disconnected [ 133.762665][ T6321] ªªªªªª: renamed from vlan0 [ 133.770658][ T6328] SELinux: failed to load policy [ 134.076683][ T6372] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 134.088673][ T6372] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 134.152459][ T6376] printk: syz.9.2555 (6376): Attempt to access syslog with CAP_SYS_ADMIN but no CAP_SYSLOG (deprecated). [ 134.456502][ T2383] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 134.496283][ T487] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 134.686319][ T54] Bluetooth: hci0: command 0x1009 tx timeout [ 134.726879][ T2383] usb 10-1: Using ep0 maxpacket: 8 [ 134.856353][ T487] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 134.867248][ T487] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 134.876315][ T2383] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 134.877242][ T487] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 134.896300][ T2383] usb 10-1: New USB device found, idVendor=2801, idProduct=0201, bcdDevice=2a.d5 [ 134.899919][ T487] usb 7-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.10 [ 134.916253][ T2383] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.917683][ T487] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.933512][ T2383] usb 10-1: config 0 descriptor?? [ 134.939384][ T487] usb 7-1: config 0 descriptor?? [ 134.986812][ T2383] uvcvideo: Found UVC 0.00 device (2801:0201) [ 134.993566][ T2383] uvcvideo: No valid video chain found. [ 135.194380][ T2383] usb 10-1: USB disconnect, device number 2 [ 135.401989][ T6420] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 135.410647][ T6420] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 135.417181][ T487] prodikeys 0003:041E:2801.003B: unknown main item tag 0x0 [ 135.425781][ T487] prodikeys 0003:041E:2801.003B: unknown main item tag 0x0 [ 135.432800][ T487] prodikeys 0003:041E:2801.003B: unknown main item tag 0x0 [ 135.440265][ T487] prodikeys 0003:041E:2801.003B: unknown main item tag 0x0 [ 135.448203][ T487] prodikeys 0003:041E:2801.003B: unknown main item tag 0x0 [ 135.458212][ T487] prodikeys 0003:041E:2801.003B: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.6-1/input0 [ 135.521910][ T6434] syz.0.2581[6434] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 135.521944][ T6434] syz.0.2581[6434] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 135.564739][ T6438] fuse: Unexpected value for 'default_permissions' [ 135.676655][ T553] usb 7-1: USB disconnect, device number 18 [ 135.725657][ T6453] syz.9.2590[6453] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 135.725729][ T6453] syz.9.2590[6453] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 135.816585][ T6459] bridge0: port 3(gretap1) entered blocking state [ 135.834097][ T6459] bridge0: port 3(gretap1) entered disabled state [ 135.841372][ T6459] device gretap1 entered promiscuous mode [ 135.847182][ T6459] bridge0: port 3(gretap1) entered blocking state [ 135.853423][ T6459] bridge0: port 3(gretap1) entered forwarding state [ 135.865565][ T6459] device bridge_slave_0 left promiscuous mode [ 135.871597][ T6459] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.879791][ T6459] device bridge_slave_1 left promiscuous mode [ 135.885955][ T6459] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.893614][ C1] bridge0: received packet on gretap1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 135.896481][ C0] bridge0: received packet on gretap1 with own address as source address (addr:b6:e3:3b:05:ed:f6, vlan:0) [ 135.918465][ T6459] device gretap1 left promiscuous mode [ 135.923767][ T6459] bridge0: port 3(gretap1) entered disabled state [ 136.115856][ T553] ================================================================== [ 136.123757][ T553] BUG: KASAN: use-after-free in __list_del_entry_valid+0x2f/0x120 [ 136.131372][ T553] Read of size 8 at addr ffff8881108f5908 by task kworker/0:4/553 [ 136.138998][ T553] [ 136.141179][ T553] CPU: 0 PID: 553 Comm: kworker/0:4 Tainted: G W 5.10.227-syzkaller-00554-g550d1177dc67 #0 [ 136.152282][ T553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 136.162185][ T553] Workqueue: events binder_deferred_func [ 136.167653][ T553] Call Trace: [ 136.170779][ T553] dump_stack_lvl+0x1e2/0x24b [ 136.175285][ T553] ? bfq_pos_tree_add_move+0x43b/0x43b [ 136.180578][ T553] ? panic+0x812/0x812 [ 136.184490][ T553] print_address_description+0x81/0x3b0 [ 136.189865][ T553] ? ____kasan_slab_free+0x12c/0x160 [ 136.194985][ T553] kasan_report+0x179/0x1c0 [ 136.199328][ T553] ? __list_del_entry_valid+0x2f/0x120 [ 136.204619][ T553] ? __list_del_entry_valid+0x2f/0x120 [ 136.209917][ T553] __asan_report_load8_noabort+0x14/0x20 [ 136.215384][ T553] __list_del_entry_valid+0x2f/0x120 [ 136.220505][ T553] binder_release_work+0xcd/0x680 [ 136.225365][ T553] binder_deferred_func+0x1847/0x1bc0 [ 136.230576][ T553] ? read_word_at_a_time+0x12/0x20 [ 136.235520][ T553] process_one_work+0x6dc/0xbd0 [ 136.240205][ T553] worker_thread+0xaea/0x1510 [ 136.244720][ T553] ? _raw_spin_lock+0x1b0/0x1b0 [ 136.249407][ T553] kthread+0x34b/0x3d0 [ 136.253308][ T553] ? worker_clr_flags+0x180/0x180 [ 136.258171][ T553] ? kthread_blkcg+0xd0/0xd0 [ 136.262600][ T553] ret_from_fork+0x1f/0x30 [ 136.266845][ T553] [ 136.269015][ T553] Allocated by task 6493: [ 136.273186][ T553] ____kasan_kmalloc+0xdb/0x110 [ 136.277871][ T553] __kasan_kmalloc+0x9/0x10 [ 136.282212][ T553] kmem_cache_alloc_trace+0x18a/0x2e0 [ 136.287422][ T553] binder_thread_write+0x9ce/0x6c70 [ 136.292453][ T553] binder_ioctl_write_read+0x216/0x6a80 [ 136.297834][ T553] binder_ioctl+0x314/0x1e00 [ 136.302259][ T553] __se_sys_ioctl+0x114/0x190 [ 136.306772][ T553] __x64_sys_ioctl+0x7b/0x90 [ 136.311201][ T553] do_syscall_64+0x34/0x70 [ 136.315452][ T553] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 136.321175][ T553] [ 136.323349][ T553] Freed by task 553: [ 136.327084][ T553] kasan_set_track+0x4b/0x70 [ 136.331511][ T553] kasan_set_free_info+0x23/0x40 [ 136.336283][ T553] ____kasan_slab_free+0x121/0x160 [ 136.341228][ T553] __kasan_slab_free+0x11/0x20 [ 136.345829][ T553] slab_free_freelist_hook+0xc0/0x190 [ 136.351037][ T553] kfree+0xc3/0x270 [ 136.354682][ T553] binder_free_ref+0x128/0x260 [ 136.359288][ T553] binder_deferred_func+0x171c/0x1bc0 [ 136.364495][ T553] process_one_work+0x6dc/0xbd0 [ 136.369176][ T553] worker_thread+0xaea/0x1510 [ 136.373688][ T553] kthread+0x34b/0x3d0 [ 136.377595][ T553] ret_from_fork+0x1f/0x30 [ 136.381842][ T553] [ 136.384010][ T553] Last potentially related work creation: [ 136.389573][ T553] kasan_save_stack+0x3b/0x60 [ 136.394083][ T553] __kasan_record_aux_stack+0xd3/0x100 [ 136.399381][ T553] kasan_record_aux_stack_noalloc+0xb/0x10 [ 136.405021][ T553] call_rcu+0x135/0x11f0 [ 136.409102][ T553] resize+0x2293/0x25c0 [ 136.413090][ T553] replace+0x2ee/0x420 [ 136.416995][ T553] resize+0x1150/0x25c0 [ 136.420991][ T553] fib_insert_alias+0xaab/0xf80 [ 136.425674][ T553] fib_trie_unmerge+0x6ce/0x1450 [ 136.430455][ T553] fib_unmerge+0xc4/0x370 [ 136.434615][ T553] fib4_rule_delete+0x45/0x370 [ 136.439217][ T553] fib_nl_delrule+0x164f/0x1e20 [ 136.443902][ T553] rtnetlink_rcv_msg+0x955/0xc50 [ 136.448677][ T553] netlink_rcv_skb+0x1cf/0x410 [ 136.453276][ T553] rtnetlink_rcv+0x1c/0x20 [ 136.457526][ T553] netlink_unicast+0x8df/0xac0 [ 136.462127][ T553] netlink_sendmsg+0xa46/0xd00 [ 136.466728][ T553] ____sys_sendmsg+0x59e/0x8f0 [ 136.471333][ T553] ___sys_sendmsg+0x252/0x2e0 [ 136.475841][ T553] __se_sys_sendmsg+0x1b1/0x280 [ 136.480529][ T553] __x64_sys_sendmsg+0x7b/0x90 [ 136.485129][ T553] do_syscall_64+0x34/0x70 [ 136.489390][ T553] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 136.495105][ T553] [ 136.497283][ T553] The buggy address belongs to the object at ffff8881108f5900 [ 136.497283][ T553] which belongs to the cache kmalloc-64 of size 64 [ 136.510994][ T553] The buggy address is located 8 bytes inside of [ 136.510994][ T553] 64-byte region [ffff8881108f5900, ffff8881108f5940) [ 136.523833][ T553] The buggy address belongs to the page: [ 136.529332][ T553] page:ffffea0004423d40 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff8881108f5b80 pfn:0x1108f5 [ 136.540683][ T553] flags: 0x4000000000000200(slab) [ 136.545538][ T553] raw: 4000000000000200 ffffea00042a6280 0000000e0000000e ffff888100043800 [ 136.553958][ T553] raw: ffff8881108f5b80 000000008020001d 00000001ffffffff 0000000000000000 [ 136.562369][ T553] page dumped because: kasan: bad access detected [ 136.568625][ T553] page_owner tracks the page as allocated [ 136.574181][ T553] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY), pid 334, ts 51875399982, free_ts 51179896915 [ 136.589894][ T553] prep_new_page+0x166/0x180 [ 136.594315][ T553] get_page_from_freelist+0x2d8c/0x2f30 [ 136.599694][ T553] __alloc_pages_nodemask+0x435/0xaf0 [ 136.604907][ T553] new_slab+0x80/0x400 [ 136.608810][ T553] ___slab_alloc+0x302/0x4b0 [ 136.613230][ T553] __slab_alloc+0x63/0xa0 [ 136.617399][ T553] __kmalloc+0x204/0x330 [ 136.621478][ T553] kvmalloc_node+0x82/0x130 [ 136.625817][ T553] simple_xattr_alloc+0x43/0xa0 [ 136.630510][ T553] shmem_initxattrs+0x8d/0x200 [ 136.635106][ T553] security_inode_init_security+0x252/0x390 [ 136.640833][ T553] shmem_mknod+0xb8/0x1c0 [ 136.644996][ T553] shmem_create+0x2b/0x40 [ 136.649165][ T553] path_openat+0x1377/0x3000 [ 136.653598][ T553] do_filp_open+0x21c/0x460 [ 136.657934][ T553] do_sys_openat2+0x13f/0x710 [ 136.662437][ T553] page last free stack trace: [ 136.666958][ T553] free_unref_page_prepare+0x2ae/0x2d0 [ 136.672250][ T553] free_unref_page_list+0x122/0xb20 [ 136.677311][ T553] release_pages+0xea0/0xef0 [ 136.681713][ T553] free_pages_and_swap_cache+0x8a/0xa0 [ 136.687006][ T553] tlb_finish_mmu+0x177/0x320 [ 136.691517][ T553] exit_mmap+0x312/0x5c0 [ 136.695597][ T553] __mmput+0x95/0x2d0 [ 136.699415][ T553] mmput+0x59/0x170 [ 136.703060][ T553] do_exit+0xbda/0x2a50 [ 136.707052][ T553] do_group_exit+0x141/0x310 [ 136.711479][ T553] __x64_sys_exit_group+0x3f/0x40 [ 136.716344][ T553] do_syscall_64+0x34/0x70 [ 136.720594][ T553] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 136.726316][ T553] [ 136.728484][ T553] Memory state around the buggy address: [ 136.733961][ T553] ffff8881108f5800: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 136.741855][ T553] ffff8881108f5880: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 136.749756][ T553] >ffff8881108f5900: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 136.757659][ T553] ^ [ 136.761819][ T553] ffff8881108f5980: 00 00 00 00 00 00 00 03 fc fc fc fc fc fc fc fc [ 136.769717][ T553] ffff8881108f5a00: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 136.777611][ T553] ================================================================== [ 136.785508][ T553] Disabling lock debugging due to kernel taint [ 136.792111][ T553] general protection fault, probably for non-canonical address 0xf1c7fc50e0000045: 0000 [#1] PREEMPT SMP KASAN [ 136.803627][ T553] KASAN: maybe wild-memory-access in range [0x8e40028700000228-0x8e4002870000022f] [ 136.812739][ T553] CPU: 0 PID: 553 Comm: kworker/0:4 Tainted: G B W 5.10.227-syzkaller-00554-g550d1177dc67 #0 [ 136.823840][ T553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 136.833742][ T553] Workqueue: events binder_deferred_func [ 136.839208][ T553] RIP: 0010:__list_del_entry_valid+0x75/0x120 [ 136.845104][ T553] Code: 1e 48 85 db 74 68 4d 85 ff 74 74 48 ba 00 01 00 00 00 00 ad de 48 39 d3 74 76 48 83 c2 22 49 39 d7 74 7e 4c 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ff e8 ac 90 51 ff 49 8b 17 4c 39 f2 75 [ 136.864548][ T553] RSP: 0018:ffffc90000e47c20 EFLAGS: 00010a02 [ 136.870447][ T553] RAX: 11c80050e0000045 RBX: ffff88810ba5e100 RCX: ffffffff8256c799 [ 136.878259][ T553] RDX: dead000000000122 RSI: 0000000000000286 RDI: ffff8881108f5900 [ 136.886077][ T553] RBP: ffffc90000e47c40 R08: ffffffff813e2a3b R09: 0000000000000003 [ 136.893882][ T553] R10: fffffbfff0e11248 R11: dffffc0000000001 R12: dffffc0000000000 [ 136.901698][ T553] R13: ffff8881108f5900 R14: ffff8881108f5900 R15: 8e40028700000229 [ 136.909507][ T553] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 136.918272][ T553] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 136.924691][ T553] CR2: 00007ffd2af630c8 CR3: 0000000136290000 CR4: 00000000003526b0 [ 136.932514][ T553] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 136.940318][ T553] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 136.948134][ T553] Call Trace: [ 136.951259][ T553] ? __die_body+0x62/0xb0 [ 136.955417][ T553] ? die_addr+0x9f/0xd0 [ 136.959413][ T553] ? exc_general_protection+0x3ff/0x490 [ 136.964797][ T553] ? check_panic_on_warn+0x65/0xb0 [ 136.969744][ T553] ? asm_exc_general_protection+0x1e/0x30 [ 136.975297][ T553] ? check_panic_on_warn+0x5b/0xb0 [ 136.980241][ T553] ? __list_del_entry_valid+0x49/0x120 [ 136.985538][ T553] ? __list_del_entry_valid+0x75/0x120 [ 136.990835][ T553] binder_release_work+0xcd/0x680 [ 136.995691][ T553] binder_deferred_func+0x1847/0x1bc0 [ 137.000912][ T553] ? read_word_at_a_time+0x12/0x20 [ 137.005844][ T553] process_one_work+0x6dc/0xbd0 [ 137.010535][ T553] worker_thread+0xaea/0x1510 [ 137.015047][ T553] ? _raw_spin_lock+0x1b0/0x1b0 [ 137.019734][ T553] kthread+0x34b/0x3d0 [ 137.023632][ T553] ? worker_clr_flags+0x180/0x180 [ 137.028494][ T553] ? kthread_blkcg+0xd0/0xd0 [ 137.032921][ T553] ret_from_fork+0x1f/0x30 [ 137.037172][ T553] Modules linked in: [ 137.041236][ T553] ---[ end trace 7ec9db51b2af22e3 ]--- [ 137.047057][ T553] RIP: 0010:__list_del_entry_valid+0x75/0x120 [ 137.052928][ T553] Code: 1e 48 85 db 74 68 4d 85 ff 74 74 48 ba 00 01 00 00 00 00 ad de 48 39 d3 74 76 48 83 c2 22 49 39 d7 74 7e 4c 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ff e8 ac 90 51 ff 49 8b 17 4c 39 f2 75 [ 137.072489][ T553] RSP: 0018:ffffc90000e47c20 EFLAGS: 00010a02 [ 137.078346][ T553] RAX: 11c80050e0000045 RBX: ffff88810ba5e100 RCX: ffffffff8256c799 [ 137.086088][ T553] RDX: dead000000000122 RSI: 0000000000000286 RDI: ffff8881108f5900 [ 137.093924][ T553] RBP: ffffc90000e47c40 R08: ffffffff813e2a3b R09: 0000000000000003 [ 137.101733][ T553] R10: fffffbfff0e11248 R11: dffffc0000000001 R12: dffffc0000000000 [ 137.109577][ T553] R13: ffff8881108f5900 R14: ffff8881108f5900 R15: 8e40028700000229 [ 137.109948][ T24] kauditd_printk_skb: 207 callbacks suppressed [ 137.109960][ T24] audit: type=1326 audit(2000000029.699:22225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6496 comm="syz.0.2610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff642466f19 code=0x7ffc0000 [ 137.117337][ T553] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 137.117345][ T553] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 137.117352][ T553] CR2: 00007ffd2af630c8 CR3: 0000000136290000 CR4: 00000000003526b0 [ 137.117362][ T553] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 137.117369][ T553] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 137.117390][ T553] Kernel panic - not syncing: Fatal exception [ 137.191394][ T553] Kernel Offset: disabled [ 137.195517][ T553] Rebooting in 86400 seconds..