last executing test programs: 23.539292474s ago: executing program 3 (id=1128): io_setup(0x23, &(0x7f0000000280)=0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000080010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000000)={[0x2]}, 0x0, 0x8) io_submit(r0, 0x1, &(0x7f0000000700)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r6, 0x4008ae90, &(0x7f0000000080)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffff}]}) ioctl$BINDER_WRITE_READ(r1, 0x40046208, 0x0) 23.419736853s ago: executing program 3 (id=1130): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x25, 0x5586, &(0x7f00000079c0)="$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") bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) pipe2$9p(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@bloom_filter={0x1e, 0xc70a, 0x800, 0x8, 0x44, 0xffffffffffffffff, 0x5, '\x00', 0x0, r0, 0x0, 0x2, 0x5, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x20, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x800, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000200)={r4, 0x20, &(0x7f0000000280)={&(0x7f00000006c0)=""/235, 0xeb, 0x0, &(0x7f00000005c0)=""/185, 0xb9}}, 0x5e) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='mm_page_alloc\x00', r6}, 0x10) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x800087}, 0x10}, 0x90) syz_emit_ethernet(0x0, 0x0, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x2040, 0x0) 21.704272104s ago: executing program 3 (id=1140): io_setup(0x23, &(0x7f0000000280)=0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000080010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000000)={[0x2]}, 0x0, 0x8) io_submit(r0, 0x1, &(0x7f0000000700)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$BINDER_WRITE_READ(r1, 0x40046208, 0x0) 21.510624871s ago: executing program 3 (id=1141): syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000340)={[{@nojournal_checksum}, {@nombcache}, {@barrier}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@usrquota}, {@noauto_da_alloc}]}, 0xfe, 0x55a, &(0x7f0000000a00)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r4) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r5 = inotify_init1(0x0) fcntl$setown(r5, 0x8, 0xffffffffffffffff) fcntl$getownex(r5, 0x10, &(0x7f0000000140)={0x0, 0x0}) r7 = syz_open_procfs(r6, &(0x7f0000000600)='fd/4\x00') ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, &(0x7f0000000380)=0x4022) 20.495071774s ago: executing program 3 (id=1144): mkdir(0x0, 0x0) pipe2$9p(&(0x7f0000001900), 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000500)='9p_client_req\x00', r0}, 0x10) removexattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000180)=@known='security.selinux\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket(0x0, 0x0, 0x0) r5 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r5, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) setsockopt$inet_msfilter(r5, 0x0, 0x29, 0x0, 0x1c) 20.396292192s ago: executing program 3 (id=1145): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="180100000000002000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000001b40), 0x1, 0x0) writev(r2, &(0x7f0000004340)=[{&(0x7f0000002080)="4f7f61bfe7ec271202403a540b524a03bda1e44111dd69d3924090d27ac2f6b2c654d94690a10a33d0d750dfd480537cf143fe51614e6ef378570b", 0x3b}], 0x1) 11.66266833s ago: executing program 4 (id=1177): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000cc0)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000000), 0x6, 0x400) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r1, &(0x7f00000003c0)="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", &(0x7f0000000100)=""/132}, 0x20) syz_usb_control_io(r0, 0x0, &(0x7f0000000f80)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)={0x40, 0x13, 0x6, @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001740)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001600)={0x40, 0x19, 0x2, "b3f0"}, 0x0, 0x0, 0x0, 0x0}) r2 = signalfd4(r1, &(0x7f0000000040)={[0x8000000000000000]}, 0x8, 0x40000) writev(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000012c0)={0x44, &(0x7f0000000540)=ANY=[@ANYRESHEX=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) syz_usb_control_io$hid(r0, 0x0, 0x0) timerfd_settime(r1, 0x2, &(0x7f0000000200)={{0x0, 0x3938700}}, &(0x7f0000000240)) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x13, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000012003007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000007000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f9001cffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, 0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x3, 0xe, 0x0, &(0x7f0000000500)="0000001afa3cb651ce2f2f009ec3", 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x40, 0x9, 0x1}, 0x0, &(0x7f0000000740)={0x40, 0xf, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000c80)=ANY=[@ANYBLOB="12010000000000406d0422c2000000000001090224000100000000090400000103000000092100000001220b0009058103"], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) read$FUSE(r1, &(0x7f0000001800)={0x2020, 0x0, 0x0}, 0x2020) read$FUSE(r2, &(0x7f0000003840)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_CREATE_OPEN(r2, &(0x7f00000002c0)={0xa0, 0x0, r5, {{0x3, 0x2, 0x100000001, 0x3e8, 0x3ff, 0xd, {0x3, 0x5, 0x8, 0x7, 0x1, 0xfffffffffffffa4a, 0x5, 0x9, 0x8, 0xc000, 0x7, 0xee01, r6, 0x8, 0xb7a}}, {0x0, 0x2}}}, 0xa0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r7}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000380)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\"\f'], 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 10.250321247s ago: executing program 0 (id=1178): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="000000000000040000000000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800000100000095000000427aa8c19155703a0000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0x8a, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd600a8435005400bbfe8000000000000000000000000000aa00004e2200"/56, @ANYRES32=0x41424344], 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) keyctl$update(0x2, 0x0, 0x0, 0x0) syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f00000000c0)='./file2\x00', 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="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", @ANYRES64, @ANYRESHEX=0x0, @ANYRES8, @ANYRES8, @ANYRESOCT], 0x1, 0x5518, &(0x7f0000002480)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file2\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) r5 = socket$netlink(0x10, 0x3, 0x8000000004) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r5, 0xf50f, 0x0) mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) pivot_root(0x0, &(0x7f00000001c0)='./file0/../file0/../file0\x00') r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000200)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x4000}}) write$FUSE_NOTIFY_STORE(r6, &(0x7f0000001f80)={0x2a, 0x4, 0x0, {0x1, 0xffffffff, 0x2, 0x0, [0x0, 0x0]}}, 0x2a) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000040)='./file0\x00', 0x101c08a, &(0x7f0000000c00)={[{@shortname_mixed}, {@utf8}, {@fat=@showexec}, {@uni_xlate}, {@shortname_winnt}, {@fat=@fmask={'fmask', 0x3d, 0x3}}, {@numtail}, {@uni_xlate}, {@utf8}, {@fat=@tz_utc}, {@utf8no}, {@utf8no}, {@fat=@check_strict}, {@fat=@codepage={'codepage', 0x3d, '1250'}}, {@uni_xlate}, {@numtail}, {}, {@fat=@showexec}]}, 0x6, 0x2b8, &(0x7f0000000640)="$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") 9.127089059s ago: executing program 0 (id=1181): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1d, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000200)=ANY=[], 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$KDFONTOP_SET_DEF(r1, 0x4b72, 0x0) ioctl$VT_SETMODE(r1, 0x5602, 0x0) mkdir(0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000000)=0x5, 0x4) bind$inet6(r2, &(0x7f0000000080)={0xa, 0xce22, 0x0, @empty}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000000)=0x5, 0x4) bind$inet6(r3, &(0x7f0000000080)={0xa, 0xce22, 0xffffeffd, @mcast1, 0x2}, 0x1c) listen(r3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000000000)=[{&(0x7f0000000100)="58000000140019234083feff040d8c560a060f0200ff0000000000000020ffff0000000000006400940064fb84060ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c100000000200ffffffff", 0x58}], 0x1) ioctl$TIOCGSID(r1, 0x5429, 0x0) ioctl$KDGETKEYCODE(0xffffffffffffffff, 0x4b4c, 0x0) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$TIOCGSERIAL(r1, 0x541e, 0x0) ioctl$KDADDIO(r1, 0x4b34, 0x232) ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0) ioctl$TIOCCBRK(0xffffffffffffffff, 0x5428) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) write$cgroup_devices(0xffffffffffffffff, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000b40)={0x2020}, 0x2020) getgroups(0x0, 0x0) 9.125769989s ago: executing program 2 (id=1183): r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) close(r0) socket$packet(0x11, 0x3, 0x300) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2008002, &(0x7f0000000080), 0x1, 0x53d, &(0x7f0000000a80)="$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") syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x982073, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x14, 0xc, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000640)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1a10716, &(0x7f0000000780)={[{@prjquota}, {@mblk_io_submit}, {@grpjquota_path}, {@resuid}, {@prjquota}, {@usrjquota}, {@noquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40}}, {@max_dir_size_kb}], [{@dont_appraise}, {@obj_role={'obj_role', 0x3d, 'max_dir_size_kb'}}, {@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}]}, 0xff, 0x47d, &(0x7f0000000fc0)="$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") r2 = syz_open_procfs$namespace(0xffffffffffffffff, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x29) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0xc, &(0x7f0000000880)=ANY=[@ANYRESDEC=0x0, @ANYRES32, @ANYBLOB="36d34d9da086b16d0be78fb39ac31dd80ee2ea7d47e760c2c2813d80971f2a08bc4ec36f59a1525719a85e741dec7c7f6c5ff3add08099056060", @ANYRES32=r5, @ANYBLOB="7d883ba938dfe07a092b5fe414bdf81a63d2c47178e944b33c31522191f8587feda6c58e75af05c27956aab3e19d232bf69d921d14985ad1bf8c32fc5b3a387257fb6f001feb25b123f47bf732c136d48cfc8ecc9ba72e1848ccd5cd5548865e69e31ea5be49e358123c5239ced1ab9c257df2bb06dde0e88b46543c78864c861d5d77966a2ca8e2a58beb1642c61f3dbb84e372318a454e344b7f422c51a64ee8c508bc418967f5fdb9f27a380a1989f44fef89ba2854734bbec9013f373b988ecb69201f346b72ae81fe1f599e772458cc84d19b4872b5e3d0", @ANYRES8=0x0, @ANYRESHEX=r3, @ANYRESOCT=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f00000000c0)=[{0x30, 0x0, 0x0, 0x3ee7}, {0x28, 0x0, 0x0, 0xff7ff038}, {0x6}]}, 0x10) sendmmsg$unix(r6, &(0x7f0000002a00)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000100)="83b540a9", 0xb583}], 0x1}}], 0x1, 0x0) 7.504449213s ago: executing program 0 (id=1191): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000205804040000000000000109022400010000300009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) syz_usb_control_io$hid(r0, &(0x7f0000000540)={0x24, &(0x7f0000000380)={0x0, 0x23, 0x14, {0x14, 0xd, "6ac02c4b08cfe18eb438c3c89d69f955a374"}}, &(0x7f0000000400)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x440a}}, &(0x7f00000004c0)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x1, "0bda4949"}]}}, &(0x7f0000000500)={0x0, 0x21, 0x9, {0x9, 0x21, 0x800, 0x2, 0x1, {0x22, 0xd13}}}}, &(0x7f0000000900)={0x2c, &(0x7f0000000580)={0x40, 0xf, 0x85, "3f4c17aaafe0e6d0ca5a76d3d95490f8df2596986feb7df0f4f05662864ea4afd70b88ee17bf6f165eb37abc69e1d20482ef74615732b6da434f43b491c9c3f64d951262172614060ce910522f363d0843965f977dcd65d202321e6c300f1f5367b87ecd8d267024ed08b0a355041954a6f5e5e95f0976982a93826eb69247654c8575ba15"}, &(0x7f00000006c0)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000700)={0x0, 0x8, 0x1, 0xff}, &(0x7f0000000740)={0x20, 0x1, 0x47, "4327554cac1da81df003c9cd0a1b931a06329f19b57bfc7341be56b68187d5601c089130c58f548bab2d916054bc7868f63dd101f6e0c5eaa7d3f763ed447dbaff23aa63df92ad"}, &(0x7f00000008c0)={0x20, 0x3, 0x1, 0xf9}}) 7.498764903s ago: executing program 1 (id=1184): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x53, &(0x7f0000000340)={@random="e90c630faca2", @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@llc={0x4, {@snap={0xaa, 0x0, "e200", '\x00', 0x22eb, "a0908efe920f75081a61e881d97ecbb3ca2a345782f9cc95f867e73b67e6a601050feffe4b53c8df85093db757b2ebb9ac396c22a6faa28e833e3b20"}}}}}, 0x0) 7.498449303s ago: executing program 2 (id=1185): r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) pread64(r0, 0x0, 0x0, 0x7fff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000004000000000000000000850000002300000095"], 0x0, 0x7, 0x8f, &(0x7f00000002c0)=""/143}, 0x90) r4 = socket$inet6(0xa, 0x3, 0x9) setsockopt$inet6_MCAST_JOIN_GROUP(r4, 0x29, 0x6, &(0x7f0000000140)={0x7f, {{0x29, 0x4e22, 0x1, @local}}}, 0x88) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000080850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r5}, 0x10) pipe2(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x102440, 0x0) readahead(r6, 0x101, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r8}, 0x10) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 7.498245243s ago: executing program 4 (id=1186): r0 = socket$inet6_udp(0xa, 0x2, 0x0) creat(&(0x7f0000000000)='mnt\x00', 0x39) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000090000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) request_key(0x0, &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000140)='#$*\x00', 0x0) connect$inet6(r0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x90) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000100)='./file1\x00', 0x1000801, &(0x7f0000002ac0)=ANY=[], 0x2, 0x1f1, &(0x7f00000003c0)="$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") r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB], &(0x7f00000005c0)='GPL\x00'}, 0x90) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r8, r7, 0x25, 0x0, @void}, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r5, r7, 0x25, 0xc, @void}, 0x10) 5.792034744s ago: executing program 1 (id=1187): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, 0x0, 0x40881) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x13d, 0x0, 0xd6e}}) (fail_nth: 1) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a00)=@newsa={0x170, 0x10, 0x633, 0x0, 0x0, {{@in6=@dev, @in6=@private1}, {@in=@dev, 0x0, 0x32}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @encap={0x1c, 0x20, {0x0, 0x1, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}, @encap={0x1c, 0x4, {0x1}}]}, 0x170}}, 0x0) 5.790729093s ago: executing program 2 (id=1188): mkdir(0x0, 0x0) pipe2$9p(&(0x7f0000001900), 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000500)='9p_client_req\x00', r0}, 0x10) removexattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000180)=@known='security.selinux\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket(0x0, 0x0, 0x0) r5 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r5, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) setsockopt$inet_msfilter(r5, 0x0, 0x29, &(0x7f0000000280)=ANY=[], 0x1c) 5.790002334s ago: executing program 4 (id=1189): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001200)={&(0x7f0000001100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x8c, 0x8c, 0x6, [@const={0x3}, @fwd={0xc}, @func_proto={0x0, 0x7, 0x0, 0xd, 0x0, [{0xd, 0x1}, {0x3, 0x3}, {0x9, 0x4}, {0xc}, {0xb, 0x1}, {0x0, 0x1}, {0x0, 0x3}]}, @fwd={0x9}, @ptr={0xc, 0x0, 0x0, 0x2, 0x4}, @volatile={0xb, 0x0, 0x0, 0x9, 0x3}, @fwd={0x3}]}, {0x0, [0x2e, 0x30, 0x4f, 0x2e]}}, &(0x7f00000011c0)=""/46, 0xaa, 0x2e, 0x0, 0x5a5c}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000010c0)=ANY=[@ANYBLOB="18000000fcffff", @ANYRESOCT=0x0, @ANYRES8, @ANYRESHEX], &(0x7f0000001080)='syzkaller\x00', 0xe6a, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x8, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001040)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000001380)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001340)={&(0x7f00000012c0)={0x5c, 0x0, 0x100, 0x70bd25, 0x25dfdbff, {}, [{{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x4000004) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) write$UHID_INPUT(r6, &(0x7f0000000000)={0x18, {"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", 0x1000}}, 0x1006) 3.948265685s ago: executing program 0 (id=1190): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x90) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='rss_stat\x00', r2}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r2, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000003c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x5, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x7d, &(0x7f00000005c0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000600), &(0x7f00000006c0), 0x8, 0xca, 0x8, 0x8, &(0x7f0000000700)}}, 0x10) r3 = inotify_init1(0x800) fcntl$setown(r3, 0x8, 0xffffffffffffffff) r4 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f00000009c0), &(0x7f0000000b00)=0x68) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r4, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x6d, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$KVM_RUN(r5, 0xae80, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) 3.948130755s ago: executing program 1 (id=1192): r0 = socket$can_bcm(0x1d, 0x2, 0x2) recvmmsg(r0, &(0x7f00000038c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x42, 0x0) 3.947897125s ago: executing program 2 (id=1193): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, &(0x7f00000002c0)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x26e1, 0x0) fallocate(r2, 0x3, 0x3f00, 0x8000c62) 3.947513375s ago: executing program 4 (id=1194): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x0, 0x0, 0x8, 0x18, 0x404, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4}, 0x48) prlimit64(0x0, 0x0, &(0x7f0000000340)={0x26, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) getdents(0xffffffffffffffff, 0x0, 0x0) r4 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000400)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000425bdcf672f4e4bf3c256c5f2df26f172af12e5fddbdf2525000000080001005063690011010200303030303a30303a31302e300000000088008a004a8248644cbc62f295055b857ece32652bf4284bbe4bcac329059d554f688901666b242b3d5a0c02edb1027a2879e148b37a2df0180cb7b74996f1c31e7d925cb15814a501c7f9dd15c5f436d693b00aef8f245a823f1313b78cb2481deeb2e1fc35429dd1936fbe92cf77655f16e48e55cf51e51c78a25aaf935070133af640372e52ce206d410ac2173813826c66463c8bb7", @ANYRES32, @ANYBLOB="080001007063690011000200303030303a30303a31302e300000000008008a00", @ANYRES32=r4, @ANYBLOB], 0x5c}, 0x1, 0x0, 0x0, 0x8000}, 0xc040) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x7, 0x60e481) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$USBDEVFS_SUBMITURB(r6, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080), 0xffffffc3, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0xf) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f00000000c0)={[{@discard}, {@barrier}, {@resuid}, {@noblock_validity}, {@minixdf}, {@errors_remount}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x6}}, {@data_err_abort}]}, 0x1, 0x5d8, &(0x7f0000000600)="$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") 3.919155438s ago: executing program 1 (id=1195): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x80000000004) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0xfffffffffffffd47}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x8000000000000007) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000a850000000f000000850000009e00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000000c0)='sched_switch\x00', r5}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket$key(0xf, 0x3, 0x2) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000107d1e5a2d0000000000010902240001000000000904000001030000000921000000012205000e94b586b809058103"], 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) syz_usb_control_io(r7, &(0x7f0000000580)={0x2c, &(0x7f0000000340)={0x0, 0x6, 0x5, {0x1b, 0xaf30684831b82fb0, "0f6364"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) sendmsg$key(r6, 0x0, 0xc889) 2.008008905s ago: executing program 0 (id=1196): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x200000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={0x0, r1}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffffed7a000008003950323030302e4c"], 0x15) getpid() r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) getresuid(&(0x7f00000000c0), &(0x7f00000001c0), &(0x7f0000000180)=0x0) mknodat$loop(r4, &(0x7f0000000000)='./file0\x00', 0x200, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB=',privport,access=', @ANYRESDEC=r5]) 2.007708505s ago: executing program 1 (id=1197): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000001000010700002000000000000a0000100c0002006e6c3830323131"], 0x20}}, 0x0) recvmmsg(r0, &(0x7f0000002e80)=[{{&(0x7f0000000000)=@caif=@util, 0x80, &(0x7f0000001740)=[{&(0x7f0000000180)=""/253, 0xfd}, {&(0x7f0000000280)=""/128, 0x80}, {&(0x7f0000000300)=""/143, 0x8f}, {&(0x7f00000003c0)=""/4096, 0x1000}, {&(0x7f00000013c0)=""/70, 0x46}, {&(0x7f0000001440)=""/96, 0x60}, {&(0x7f00000014c0)=""/82, 0x52}, {&(0x7f0000001540)=""/244, 0xf4}, {&(0x7f0000001640)=""/229, 0xe5}], 0x9, &(0x7f0000001800)=""/95, 0x5f}, 0x7}, {{&(0x7f0000001880)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f0000001900)=[{&(0x7f00000000c0)=""/1, 0x1}], 0x1, &(0x7f0000001940)=""/101, 0x65}, 0x80}, {{0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f00000019c0)=""/255, 0xff}], 0x1, &(0x7f0000001b00)=""/184, 0xb8}, 0xaa1}, {{&(0x7f0000001bc0)=@l2tp6={0xa, 0x0, 0x0, @private2}, 0x80, &(0x7f00000020c0)=[{&(0x7f0000001c40)=""/142, 0x8e}, {&(0x7f0000001d00)=""/195, 0xc3}, {&(0x7f0000001e00)=""/74, 0x4a}, {&(0x7f0000001e80)=""/52, 0x34}, {&(0x7f0000001ec0)=""/23, 0x17}, {&(0x7f0000001f00)=""/34, 0x22}, {&(0x7f0000001f40)=""/128, 0x80}, {&(0x7f0000001fc0)=""/131, 0x83}, {&(0x7f0000002080)=""/29, 0x1d}], 0x9, &(0x7f0000002180)=""/94, 0x5e}, 0x3}, {{&(0x7f0000002200)=@un=@abs, 0x80, &(0x7f0000002440)=[{&(0x7f0000002280)=""/17, 0x11}, {&(0x7f00000022c0)=""/55, 0x37}, {&(0x7f0000002300)=""/54, 0x36}, {&(0x7f0000002340)=""/79, 0x4f}, {&(0x7f00000023c0)=""/108, 0x6c}], 0x5, &(0x7f00000024c0)=""/182, 0xb6}}, {{&(0x7f0000002580), 0x80, &(0x7f0000002a80)=[{&(0x7f0000002600)=""/17, 0x11}, {&(0x7f0000002640)=""/214, 0xd6}, {&(0x7f0000002740)=""/18, 0x12}, {&(0x7f0000002780)=""/31, 0x1f}, {&(0x7f00000027c0)=""/192, 0xc0}, {&(0x7f0000002880)=""/58, 0x3a}, {&(0x7f00000028c0)=""/86, 0x56}, {&(0x7f0000002940)=""/107, 0x6b}, {&(0x7f00000029c0)=""/100, 0x64}, {&(0x7f0000002a40)=""/32, 0x20}], 0xa, &(0x7f0000002b40)=""/152, 0x98}, 0x7fffffff}, {{0x0, 0x0, 0x0}, 0x8}], 0x7, 0x0, 0x0) 2.007478155s ago: executing program 2 (id=1198): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000001b40), 0x1, 0x0) writev(r2, &(0x7f0000004340)=[{&(0x7f0000002080)="4f7f61bfe7ec271202403a540b524a03bda1e44111dd69d3924090d27ac2f6b2c654d94690a10a33d0d750dfd480537cf143fe51614e6ef378570b", 0x3b}], 0x1) 2.007301295s ago: executing program 4 (id=1199): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x53, &(0x7f0000000340)={@random="e90c630faca2", @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@llc={0x4, {@snap={0xaa, 0x0, "e200", '\x00', 0x22eb, "a0908efe920f75081a61e881d97ecbb3ca2a345782f9cc95f867e73b67e6a601050feffe4b53c8df85093db757b2ebb9ac396c22a6faa28e833e3b20"}}}}}, 0x0) 906.7µs ago: executing program 0 (id=1200): r0 = socket$inet6_udp(0xa, 0x2, 0x0) creat(&(0x7f0000000000)='mnt\x00', 0x39) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000090000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) request_key(0x0, &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000140)='#$*\x00', 0x0) connect$inet6(r0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x90) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000100)='./file1\x00', 0x1000801, &(0x7f0000002ac0)=ANY=[], 0x2, 0x1f1, &(0x7f00000003c0)="$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") r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB], &(0x7f00000005c0)='GPL\x00'}, 0x90) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r8, r7, 0x25, 0x0, @void}, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r5, r7, 0x25, 0xc, @void}, 0x10) 604.82µs ago: executing program 1 (id=1201): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x5, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_mount_image$ext4(&(0x7f0000002080)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2000002, &(0x7f00000020c0)={[{@lazytime}, {@noinit_itable}, {@debug}]}, 0x1, 0x544, &(0x7f0000000740)="$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") mkdirat(0xffffffffffffff9c, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 223.51µs ago: executing program 2 (id=1202): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000080)={{0x0, 0x6, 0x0, 0x1, 0x0, 0x9, 0x3, 0x5, 0x1000, 0x0, 0x7f48, 0x3d9c, 0x9, 0x5, 0x3}, 0x28, [0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{r1, 0x293ca14f, 0x401, 0x7, 0x0, 0x7, 0x6, 0x4, 0xc0, 0x8, 0x5, 0x7fffffff, 0x20000, 0x8, 0x2}, 0x20, [0x0, 0x0, 0x0, 0x0]}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000006c0), r7) sendmsg$IEEE802154_LLSEC_ADD_KEY(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000700)={0x14, r8, 0x1}, 0x14}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000440)={'ip_vti0\x00', 0x0}) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) 0s ago: executing program 4 (id=1203): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000205804040000000000000109022400010000300009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) syz_usb_control_io$hid(r0, &(0x7f0000000540)={0x24, &(0x7f0000000380)={0x0, 0x23, 0x14, {0x14, 0xd, "6ac02c4b08cfe18eb438c3c89d69f955a374"}}, &(0x7f0000000400)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x440a}}, &(0x7f00000004c0)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x1, "0bda4949"}]}}, &(0x7f0000000500)={0x0, 0x21, 0x9, {0x9, 0x21, 0x800, 0x2, 0x1, {0x22, 0xd13}}}}, &(0x7f0000000900)={0x2c, &(0x7f0000000580)={0x40, 0xf, 0x85, "3f4c17aaafe0e6d0ca5a76d3d95490f8df2596986feb7df0f4f05662864ea4afd70b88ee17bf6f165eb37abc69e1d20482ef74615732b6da434f43b491c9c3f64d951262172614060ce910522f363d0843965f977dcd65d202321e6c300f1f5367b87ecd8d267024ed08b0a355041954a6f5e5e95f0976982a93826eb69247654c8575ba15"}, &(0x7f00000006c0)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000700)={0x0, 0x8, 0x1, 0xff}, &(0x7f0000000740)={0x20, 0x1, 0x47, "4327554cac1da81df003c9cd0a1b931a06329f19b57bfc7341be56b68187d5601c089130c58f548bab2d916054bc7868f63dd101f6e0c5eaa7d3f763ed447dbaff23aa63df92ad"}, &(0x7f00000008c0)={0x20, 0x3, 0x1, 0xf9}}) kernel console output (not intermixed with test programs): ONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 225.997983][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.004848][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 226.012809][ T30] audit: type=1326 audit(1723977775.631:1281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4081 comm="syz.1.971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91506ade79 code=0x7ffc0000 [ 226.032261][ T4084] loop1: detected capacity change from 0 to 40427 [ 226.038083][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 226.050296][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 226.061634][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.062897][ T4076] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 226.068482][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 226.096592][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 226.104460][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 226.112754][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 226.125536][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 226.140814][ T4051] device veth0_vlan entered promiscuous mode [ 226.154267][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 226.162914][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 226.171447][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 226.180173][ T4084] F2FS-fs (loop1): Found nat_bits in checkpoint [ 226.195291][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 226.207630][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 226.221256][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 226.236242][ T4051] device veth1_macvtap entered promiscuous mode [ 226.244311][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 226.247503][ T4084] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 226.252732][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 226.277698][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 226.440054][ T4106] loop4: detected capacity change from 0 to 512 [ 226.562880][ T4031] attempt to access beyond end of device [ 226.562880][ T4031] loop0: rw=524288, want=45072, limit=40427 [ 226.592024][ T4106] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=2802c018, mo2=0002] [ 226.626539][ T4106] System zones: 0-2, 18-18, 34-35 [ 226.699357][ T4106] EXT4-fs (loop4): mounted filesystem without journal. Opts: lazytime,noinit_itable,debug,,errors=continue. Quota mode: writeback. [ 226.713289][ T4106] ext4 filesystem being mounted at /15/file0 supports timestamps until 2038 (0x7fffffff) [ 226.765472][ T3988] handle_bad_sector: 1 callbacks suppressed [ 226.765486][ T3988] attempt to access beyond end of device [ 226.765486][ T3988] loop1: rw=524288, want=45072, limit=40427 [ 226.789376][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 226.790991][ T3988] attempt to access beyond end of device [ 226.790991][ T3988] loop1: rw=0, want=45072, limit=40427 [ 226.797382][ T4031] attempt to access beyond end of device [ 226.797382][ T4031] loop0: rw=2049, want=45104, limit=40427 [ 226.819433][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 226.828045][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 226.836284][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 226.976896][ T3988] attempt to access beyond end of device [ 226.976896][ T3988] loop1: rw=2049, want=45104, limit=40427 [ 227.314960][ T310] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 227.423342][ T4119] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.430335][ T4119] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.437544][ T4119] device bridge_slave_0 entered promiscuous mode [ 227.444333][ T4119] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.451196][ T4119] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.458493][ T4119] device bridge_slave_1 entered promiscuous mode [ 227.507602][ T4122] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.514522][ T4122] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.521733][ T4122] device bridge_slave_0 entered promiscuous mode [ 227.530698][ T4122] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.537553][ T4122] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.544724][ T4122] device bridge_slave_1 entered promiscuous mode [ 227.602020][ T4119] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.608979][ T4119] bridge0: port 2(bridge_slave_1) entered forwarding state [ 227.616069][ T4119] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.622838][ T4119] bridge0: port 1(bridge_slave_0) entered forwarding state [ 227.630028][ T310] usb 3-1: Using ep0 maxpacket: 8 [ 227.644473][ T4122] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.651330][ T4122] bridge0: port 2(bridge_slave_1) entered forwarding state [ 227.658409][ T4122] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.665212][ T4122] bridge0: port 1(bridge_slave_0) entered forwarding state [ 227.694003][ T437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 227.702101][ T437] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.709425][ T437] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.716848][ T437] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.723953][ T437] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.737360][ T437] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 227.745359][ T437] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.752188][ T437] bridge0: port 1(bridge_slave_0) entered forwarding state [ 227.760761][ T415] device bridge_slave_1 left promiscuous mode [ 227.765083][ T310] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 227.766742][ T415] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.777606][ T310] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 227.794866][ T310] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 227.795346][ T415] device bridge_slave_0 left promiscuous mode [ 227.804560][ T310] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 227.810853][ T415] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.823476][ T310] usb 3-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 227.838935][ T310] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.846885][ T415] device veth1_macvtap left promiscuous mode [ 227.847650][ T310] usb 3-1: config 0 descriptor?? [ 227.852777][ T415] device veth0_vlan left promiscuous mode [ 227.959745][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 227.967738][ T308] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.974564][ T308] bridge0: port 2(bridge_slave_1) entered forwarding state [ 227.987216][ T459] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 227.995806][ T459] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 228.003740][ T459] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.010585][ T459] bridge0: port 1(bridge_slave_0) entered forwarding state [ 228.019502][ T437] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 228.027577][ T437] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.034403][ T437] bridge0: port 2(bridge_slave_1) entered forwarding state [ 228.048527][ T459] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 228.058379][ T459] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 228.068567][ T437] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 228.076644][ T437] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 228.092861][ T437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 228.102508][ T642] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 228.116635][ T642] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 228.124433][ T642] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 228.132313][ T642] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 228.140149][ T4122] device veth0_vlan entered promiscuous mode [ 228.147869][ T642] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 228.156242][ T4119] device veth0_vlan entered promiscuous mode [ 228.165090][ T642] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 228.172260][ T642] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 228.184856][ T4119] device veth1_macvtap entered promiscuous mode [ 228.229521][ T459] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 228.237905][ T459] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 228.245958][ T459] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 228.253320][ T459] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 228.261407][ T459] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 228.269508][ T459] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 228.277645][ T459] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 228.285839][ T459] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 228.293809][ T459] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 228.302986][ T4122] device veth1_macvtap entered promiscuous mode [ 228.324038][ T642] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 228.331593][ T642] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 228.345616][ T310] hid-thrustmaster 0003:044F:B65D.0030: item fetching failed at offset 3/7 [ 228.355290][ T642] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 228.363433][ T642] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 228.371446][ T310] hid-thrustmaster 0003:044F:B65D.0030: parse failed with error -22 [ 228.379612][ T310] hid-thrustmaster: probe of 0003:044F:B65D.0030 failed with error -22 [ 228.388032][ T642] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 228.416156][ T4139] loop1: detected capacity change from 0 to 128 [ 228.445936][ T4141] loop0: detected capacity change from 0 to 512 [ 228.447269][ T4139] EXT4-fs (loop1): mounted filesystem without journal. Opts: journal_dev=0x0000000000000000,nouid32,,errors=continue. Quota mode: none. [ 228.465959][ T4139] ext4 filesystem being mounted at /0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 228.514993][ T437] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 228.516338][ T4141] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=2802c018, mo2=0002] [ 228.530331][ T4141] System zones: 0-2, 18-18, 34-35 [ 228.536131][ T4141] EXT4-fs (loop0): mounted filesystem without journal. Opts: lazytime,noinit_itable,debug,,errors=continue. Quota mode: writeback. [ 228.549671][ T4141] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038 (0x7fffffff) [ 228.570712][ T308] usb 3-1: USB disconnect, device number 29 [ 228.924967][ T437] usb 5-1: Using ep0 maxpacket: 8 [ 228.935562][ T20] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 229.005487][ T415] device bridge_slave_1 left promiscuous mode [ 229.011474][ T415] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.018808][ T415] device bridge_slave_0 left promiscuous mode [ 229.024780][ T415] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.032527][ T415] device bridge_slave_1 left promiscuous mode [ 229.038533][ T415] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.045616][ T437] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 229.056417][ T437] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 229.056482][ T415] device bridge_slave_0 left promiscuous mode [ 229.067319][ T437] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 229.073122][ T415] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.082710][ T437] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 229.102271][ T437] usb 5-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 229.111160][ T437] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.119159][ T415] device veth1_macvtap left promiscuous mode [ 229.119640][ T437] usb 5-1: config 0 descriptor?? [ 229.125149][ T415] device veth0_vlan left promiscuous mode [ 229.135645][ T415] device veth1_macvtap left promiscuous mode [ 229.141479][ T415] device veth0_vlan left promiscuous mode [ 229.178865][ T4154] loop2: detected capacity change from 0 to 256 [ 229.195992][ T20] usb 2-1: Using ep0 maxpacket: 16 [ 229.227429][ T4154] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 229.355023][ T20] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 229.362868][ T20] usb 2-1: config 0 has no interface number 0 [ 229.368937][ T20] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0xB has invalid maxpacket 24929, setting to 1024 [ 229.615403][ T30] kauditd_printk_skb: 60 callbacks suppressed [ 229.615425][ T30] audit: type=1400 audit(1723977779.571:1342): avc: denied { unmount } for pid=4051 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 229.668098][ T20] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 229.685428][ T30] audit: type=1400 audit(1723977779.631:1343): avc: denied { create } for pid=4160 comm="syz.3.990" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 229.708422][ T30] audit: type=1400 audit(1723977779.631:1344): avc: denied { write } for pid=4160 comm="syz.3.990" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 229.745821][ T437] hid-thrustmaster 0003:044F:B65D.0031: item fetching failed at offset 3/7 [ 229.754393][ T437] hid-thrustmaster 0003:044F:B65D.0031: parse failed with error -22 [ 229.774968][ T437] hid-thrustmaster: probe of 0003:044F:B65D.0031 failed with error -22 [ 229.805046][ T20] usb 2-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice= 0.88 [ 229.824954][ T20] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 229.833288][ T20] usb 2-1: Product: syz [ 229.840182][ T4157] loop0: detected capacity change from 0 to 40427 [ 229.846485][ T20] usb 2-1: SerialNumber: syz [ 229.851441][ T20] usb 2-1: config 0 descriptor?? [ 229.875073][ T4139] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 229.899413][ T4157] F2FS-fs (loop0): Found nat_bits in checkpoint [ 229.902883][ T4163] loop3: detected capacity change from 0 to 40427 [ 229.929632][ T4157] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 229.937568][ T4163] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 229.946173][ T4163] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 229.949604][ T310] usb 5-1: USB disconnect, device number 22 [ 229.969627][ T4163] F2FS-fs (loop3): invalid crc value [ 229.977250][ T4163] F2FS-fs (loop3): Found nat_bits in checkpoint [ 230.016316][ T4163] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 230.023158][ T4163] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 230.105263][ T30] audit: type=1400 audit(1723977780.061:1345): avc: denied { mount } for pid=4173 comm="syz.2.993" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 230.147775][ T20] usb 2-1: invalid MIDI in EP 0 [ 230.153205][ T20] snd-usb-audio: probe of 2-1:0.2 failed with error -22 [ 230.169796][ T20] usb 2-1: USB disconnect, device number 20 [ 230.250832][ T30] audit: type=1400 audit(1723977780.201:1346): avc: denied { ioctl } for pid=4173 comm="syz.2.993" path="socket:[40651]" dev="sockfs" ino=40651 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 230.299989][ T4179] loop2: detected capacity change from 0 to 512 [ 230.353816][ T4119] attempt to access beyond end of device [ 230.353816][ T4119] loop0: rw=524288, want=45072, limit=40427 [ 230.365149][ T4119] attempt to access beyond end of device [ 230.365149][ T4119] loop0: rw=0, want=45072, limit=40427 [ 230.365648][ T4179] EXT4-fs (loop2): Ignoring removed orlov option [ 230.382420][ T4179] EXT4-fs (loop2): Test dummy encryption mode enabled [ 230.389894][ T4119] attempt to access beyond end of device [ 230.389894][ T4119] loop0: rw=2049, want=45104, limit=40427 [ 230.390092][ T4179] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a014e09c, mo2=0002] [ 230.408779][ T4179] System zones: 1-12 [ 230.413040][ T4179] EXT4-fs error (device loop2): ext4_orphan_get:1397: inode #15: comm syz.2.994: casefold flag without casefold feature [ 230.425775][ T4179] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: inode #12: comm syz.2.994: missing EA_INODE flag [ 230.437388][ T4179] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.994: error while reading EA inode 12 err=-117 [ 230.449563][ T4179] EXT4-fs (loop2): 1 orphan inode deleted [ 230.455203][ T4179] EXT4-fs (loop2): mounted filesystem without journal. Opts: orlov,minixdf,max_dir_size_kb=0x0000000000009c7c,debug,grpquota,errors=continue,test_dummy_encryption,auto_da_alloc,nodiscard,,errors=continue. Quota mode: writeback. [ 230.720762][ T4187] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.727864][ T4187] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.735507][ T4187] device bridge_slave_0 entered promiscuous mode [ 230.743903][ T4187] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.750760][ T4187] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.759614][ T4187] device bridge_slave_1 entered promiscuous mode [ 230.774978][ T20] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 231.225067][ T459] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 231.425273][ T20] usb 5-1: Using ep0 maxpacket: 8 [ 231.462437][ T4187] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.469290][ T4187] bridge0: port 2(bridge_slave_1) entered forwarding state [ 231.476412][ T4187] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.483178][ T4187] bridge0: port 1(bridge_slave_0) entered forwarding state [ 231.622061][ T642] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.629895][ T642] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.655935][ T404] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 231.663199][ T404] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 231.682042][ T642] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 231.690347][ T642] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 231.698631][ T642] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.705487][ T642] bridge0: port 1(bridge_slave_0) entered forwarding state [ 231.717912][ T4206] loop3: detected capacity change from 0 to 512 [ 231.735089][ T20] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 231.745957][ T20] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 231.756922][ T20] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 231.766610][ T20] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 231.770226][ T459] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 231.779767][ T20] usb 5-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 231.790424][ T642] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 231.802258][ T20] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.806853][ T459] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 231.815563][ T20] usb 5-1: config 0 descriptor?? [ 231.824832][ T642] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 231.837499][ T642] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.844329][ T642] bridge0: port 2(bridge_slave_1) entered forwarding state [ 231.845986][ T4206] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=2802c018, mo2=0002] [ 231.851670][ T459] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 231.859305][ T4206] System zones: [ 231.868861][ T642] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 231.880120][ T4206] 0-2, 18-18, 34-35 [ 231.884481][ T459] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.894893][ T642] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 231.904067][ T642] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 231.917302][ T642] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 231.962431][ T4206] EXT4-fs (loop3): mounted filesystem without journal. Opts: lazytime,noinit_itable,debug,,errors=continue. Quota mode: writeback. [ 231.978284][ T4206] ext4 filesystem being mounted at /5/file0 supports timestamps until 2038 (0x7fffffff) [ 231.979383][ T459] usb 3-1: config 0 descriptor?? [ 231.987388][ T415] device bridge_slave_1 left promiscuous mode [ 231.987695][ T415] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.989353][ T415] device bridge_slave_0 left promiscuous mode [ 231.989693][ T415] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.994569][ T415] device veth1_macvtap left promiscuous mode [ 231.994642][ T415] device veth0_vlan left promiscuous mode [ 232.204263][ T404] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 232.213909][ T404] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 232.284282][ T4187] device veth0_vlan entered promiscuous mode [ 232.291489][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 232.301945][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 232.346140][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 232.355794][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 232.375817][ T4187] device veth1_macvtap entered promiscuous mode [ 232.381603][ T20] hid-thrustmaster 0003:044F:B65D.0032: item fetching failed at offset 3/7 [ 232.382389][ T404] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 232.390500][ T20] hid-thrustmaster 0003:044F:B65D.0032: parse failed with error -22 [ 232.401378][ T404] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 232.405890][ T20] hid-thrustmaster: probe of 0003:044F:B65D.0032 failed with error -22 [ 232.421830][ T404] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 232.438256][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 232.446326][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 232.455682][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 232.466599][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 232.598802][ T60] usb 5-1: USB disconnect, device number 23 [ 232.654402][ T4217] loop0: detected capacity change from 0 to 40427 [ 232.698092][ T4217] F2FS-fs (loop0): Found nat_bits in checkpoint [ 232.728784][ T4217] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 232.944985][ T404] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 233.294959][ T404] usb 2-1: Using ep0 maxpacket: 8 [ 234.115464][ T4187] attempt to access beyond end of device [ 234.115464][ T4187] loop0: rw=524288, want=45072, limit=40427 [ 234.140824][ T4187] attempt to access beyond end of device [ 234.140824][ T4187] loop0: rw=0, want=45072, limit=40427 [ 234.175250][ T4187] attempt to access beyond end of device [ 234.175250][ T4187] loop0: rw=2049, want=45104, limit=40427 [ 234.206853][ T30] audit: type=1400 audit(1723977784.161:1347): avc: denied { name_bind } for pid=4238 comm="syz.4.1011" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 234.235894][ T4247] loop3: detected capacity change from 0 to 256 [ 234.255061][ T404] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 234.266333][ T404] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 234.266362][ T404] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 234.266385][ T404] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 234.266421][ T404] usb 2-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 234.266445][ T404] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.267017][ T404] usb 2-1: config 0 descriptor?? [ 234.335026][ T459] usbhid 3-1:0.0: can't add hid device: -71 [ 234.340980][ T459] usbhid: probe of 3-1:0.0 failed with error -71 [ 234.349269][ T459] usb 3-1: USB disconnect, device number 30 [ 234.502165][ T4253] loop4: detected capacity change from 0 to 8192 [ 234.534987][ T455] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 234.542666][ T4253] loop4: p1 < > p2 p3 p4 < p5 > [ 234.551217][ T4253] loop4: p3 size 16744448 extends beyond EOD, truncated [ 234.625127][ T20] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 234.710514][ T4257] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.717462][ T4257] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.725913][ T4257] device bridge_slave_0 entered promiscuous mode [ 234.734626][ T415] device bridge_slave_1 left promiscuous mode [ 234.740757][ T415] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.748753][ T415] device bridge_slave_0 left promiscuous mode [ 234.754832][ T415] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.764728][ T415] device veth1_macvtap left promiscuous mode [ 234.770631][ T415] device veth0_vlan left promiscuous mode [ 234.779083][ T404] hid-thrustmaster 0003:044F:B65D.0033: item fetching failed at offset 3/7 [ 234.792401][ T404] hid-thrustmaster 0003:044F:B65D.0033: parse failed with error -22 [ 234.800475][ T404] hid-thrustmaster: probe of 0003:044F:B65D.0033 failed with error -22 [ 234.905050][ T455] usb 4-1: config 39 has too many interfaces: 120, using maximum allowed: 32 [ 234.913880][ T455] usb 4-1: config 39 has 0 interfaces, different from the descriptor's value: 120 [ 234.923137][ T455] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.14 [ 234.932293][ T455] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.956402][ T4257] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.963491][ T4257] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.971941][ T4257] device bridge_slave_1 entered promiscuous mode [ 235.048372][ T308] usb 2-1: USB disconnect, device number 21 [ 235.058606][ T4257] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.065477][ T4257] bridge0: port 2(bridge_slave_1) entered forwarding state [ 235.072552][ T4257] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.079351][ T4257] bridge0: port 1(bridge_slave_0) entered forwarding state [ 235.105449][ T404] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 235.106485][ T4262] loop2: detected capacity change from 0 to 512 [ 235.118821][ T404] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.127155][ T404] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.145969][ T404] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 235.153879][ T404] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.160747][ T404] bridge0: port 1(bridge_slave_0) entered forwarding state [ 235.167921][ T404] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 235.176487][ T404] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.183332][ T404] bridge0: port 2(bridge_slave_1) entered forwarding state [ 235.186118][ T4262] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=2802c018, mo2=0002] [ 235.190736][ T404] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 235.198498][ T4262] System zones: 0-2, 18-18, 34-35 [ 235.206101][ T404] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 235.211573][ T4262] EXT4-fs (loop2): mounted filesystem without journal. Opts: lazytime,noinit_itable,debug,,errors=continue. Quota mode: writeback. [ 235.229191][ T4257] device veth0_vlan entered promiscuous mode [ 235.235021][ T455] usb 4-1: string descriptor 0 read error: -71 [ 235.237542][ T4262] ext4 filesystem being mounted at /15/file0 supports timestamps until 2038 (0x7fffffff) [ 235.243894][ T455] usb 4-1: USB disconnect, device number 23 [ 235.259117][ T404] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 235.267106][ T404] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 235.315701][ T404] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 235.322917][ T404] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 235.335911][ T4257] device veth1_macvtap entered promiscuous mode [ 235.345223][ T459] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 235.353080][ T459] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 235.361074][ T459] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 235.368439][ T459] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 235.376466][ T459] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 235.385833][ T459] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 235.394643][ T459] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 235.779380][ T30] audit: type=1326 audit(1723977785.731:1348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4275 comm="syz.3.1022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2585c2e79 code=0x7ffc0000 [ 235.806609][ T30] audit: type=1326 audit(1723977785.751:1349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4275 comm="syz.3.1022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff2585c2e79 code=0x7ffc0000 [ 235.830550][ T4272] loop1: detected capacity change from 0 to 40427 [ 235.843938][ T30] audit: type=1326 audit(1723977785.751:1350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4275 comm="syz.3.1022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2585c2e79 code=0x7ffc0000 [ 235.867289][ T30] audit: type=1326 audit(1723977785.751:1351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4275 comm="syz.3.1022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff2585c2e79 code=0x7ffc0000 [ 235.890602][ T30] audit: type=1326 audit(1723977785.751:1352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4275 comm="syz.3.1022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2585c2e79 code=0x7ffc0000 [ 235.914048][ T30] audit: type=1326 audit(1723977785.751:1353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4275 comm="syz.3.1022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff2585c2e79 code=0x7ffc0000 [ 235.950708][ T437] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 235.960849][ T30] audit: type=1326 audit(1723977785.751:1354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4275 comm="syz.3.1022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2585c2e79 code=0x7ffc0000 [ 235.984776][ T30] audit: type=1326 audit(1723977785.751:1355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4275 comm="syz.3.1022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7ff2585c2e79 code=0x7ffc0000 [ 236.009287][ T30] audit: type=1326 audit(1723977785.761:1356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4275 comm="syz.3.1022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2585c2e79 code=0x7ffc0000 [ 236.034327][ T4272] F2FS-fs (loop1): Found nat_bits in checkpoint [ 236.049489][ T4278] loop3: detected capacity change from 0 to 40427 [ 236.057084][ T30] audit: type=1400 audit(1723977785.761:1357): avc: denied { read write } for pid=4051 comm="syz-executor" name="loop3" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 236.100386][ T4272] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 237.551378][ T4298] loop2: detected capacity change from 0 to 2048 [ 237.575079][ T437] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 237.587444][ T437] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 237.597431][ T437] usb 1-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 237.696857][ T4303] loop3: detected capacity change from 0 to 256 [ 237.738406][ T4122] attempt to access beyond end of device [ 237.738406][ T4122] loop1: rw=524288, want=45072, limit=40427 [ 237.889434][ T437] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.898050][ T4122] attempt to access beyond end of device [ 237.898050][ T4122] loop1: rw=0, want=45072, limit=40427 [ 237.911604][ T437] usb 1-1: config 0 descriptor?? [ 237.930099][ T4298] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 237.954638][ T4122] attempt to access beyond end of device [ 237.954638][ T4122] loop1: rw=2049, want=45104, limit=40427 [ 238.080877][ T4302] loop4: detected capacity change from 0 to 40427 [ 238.097447][ T4307] loop3: detected capacity change from 0 to 128 [ 238.105553][ T4302] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 238.113141][ T4302] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 238.273794][ T4302] F2FS-fs (loop4): invalid crc value [ 238.274974][ T4307] EXT4-fs (loop3): mounted filesystem without journal. Opts: journal_dev=0x0000000000000000,nouid32,,errors=continue. Quota mode: none. [ 238.293254][ T4307] ext4 filesystem being mounted at /12/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 238.329105][ T4302] F2FS-fs (loop4): Found nat_bits in checkpoint [ 238.366725][ T4302] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 238.373655][ T4302] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 238.395925][ T437] sony 0003:054C:0268.0034: unknown main item tag 0x0 [ 238.412311][ T437] sony 0003:054C:0268.0034: item fetching failed at offset 1/5 [ 238.419893][ T437] sony 0003:054C:0268.0034: parse failed [ 238.425380][ T437] sony: probe of 0003:054C:0268.0034 failed with error -22 [ 238.449419][ T4315] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.456315][ T4315] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.463572][ T4315] device bridge_slave_0 entered promiscuous mode [ 238.470541][ T4315] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.477649][ T4315] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.486310][ T4315] device bridge_slave_1 entered promiscuous mode [ 238.569105][ T4315] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.575984][ T4315] bridge0: port 2(bridge_slave_1) entered forwarding state [ 238.583077][ T4315] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.589862][ T4315] bridge0: port 1(bridge_slave_0) entered forwarding state [ 238.594987][ T308] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 238.625542][ T404] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 238.633127][ T404] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.640598][ T404] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.675092][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 238.683051][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.689894][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 238.712206][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 238.735110][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.741942][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 238.750616][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 238.775195][ T437] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 238.789270][ T455] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 238.801090][ T437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 238.809219][ T437] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 238.817320][ T437] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 238.824998][ T4315] device veth0_vlan entered promiscuous mode [ 238.845073][ T308] usb 4-1: Using ep0 maxpacket: 16 [ 238.858882][ T437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 238.871279][ T4315] device veth1_macvtap entered promiscuous mode [ 238.893193][ T437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 238.909792][ T455] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 238.911752][ T4331] loop2: detected capacity change from 0 to 40427 [ 238.965094][ T308] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 238.974955][ T308] usb 4-1: config 0 has no interface number 0 [ 238.982777][ T308] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0xB has invalid maxpacket 24929, setting to 1024 [ 238.997880][ T308] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 239.014633][ T4331] F2FS-fs (loop2): Found nat_bits in checkpoint [ 239.064815][ T4331] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 239.084148][ T415] device bridge_slave_1 left promiscuous mode [ 239.091123][ T415] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.107846][ T415] device bridge_slave_0 left promiscuous mode [ 239.484292][ T4346] FAULT_INJECTION: forcing a failure. [ 239.484292][ T4346] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 239.497403][ T4346] CPU: 1 PID: 4346 Comm: syz.1.1039 Not tainted 5.15.153-syzkaller-00623-gda92e689a0c3 #0 [ 239.507101][ T4346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 239.512316][ T308] usb 4-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice= 0.88 [ 239.516993][ T4346] Call Trace: [ 239.517001][ T4346] [ 239.517008][ T4346] dump_stack_lvl+0x151/0x1c0 [ 239.517033][ T4346] ? io_uring_drop_tctx_refs+0x190/0x190 [ 239.517057][ T4346] dump_stack+0x15/0x20 [ 239.517074][ T4346] should_fail+0x3c6/0x510 [ 239.517093][ T4346] should_fail_usercopy+0x1a/0x20 [ 239.517111][ T4346] _copy_from_user+0x20/0xd0 [ 239.517129][ T4346] usbdev_ioctl+0xfca/0x5e20 [ 239.563701][ T4346] ? usbdev_poll+0x200/0x200 [ 239.568119][ T4346] ? _raw_spin_unlock+0x4d/0x70 [ 239.572803][ T4346] ? finish_task_switch+0x167/0x7b0 [ 239.577840][ T4346] ? requeue_task_rt+0x410/0x410 [ 239.582614][ T4346] ? __schedule+0xcd4/0x1590 [ 239.587040][ T4346] ? release_firmware_map_entry+0x190/0x190 [ 239.592768][ T4346] ? irqentry_exit+0x30/0x40 [ 239.597193][ T4346] ? __rcu_read_unlock+0xd0/0xd0 [ 239.601969][ T4346] ? asm_sysvec_reschedule_ipi+0x1b/0x20 [ 239.607442][ T4346] ? __kasan_check_read+0x11/0x20 [ 239.612291][ T4346] ? preempt_schedule_irq+0xe7/0x140 [ 239.617414][ T4346] ? __cond_resched+0x20/0x20 [ 239.621930][ T4346] ? irqentry_exit_cond_resched+0x2a/0x30 [ 239.627484][ T4346] ? irqentry_exit+0x30/0x40 [ 239.631909][ T4346] ? sysvec_reschedule_ipi+0x7d/0x150 [ 239.637117][ T4346] ? asm_sysvec_reschedule_ipi+0x1b/0x20 [ 239.642586][ T4346] ? do_vfs_ioctl+0x121/0x2a80 [ 239.647183][ T4346] ? do_vfs_ioctl+0xad4/0x2a80 [ 239.651785][ T4346] ? do_vfs_ioctl+0xbc1/0x2a80 [ 239.656385][ T4346] ? do_vfs_ioctl+0x2243/0x2a80 [ 239.661072][ T4346] ? __x64_compat_sys_ioctl+0x90/0x90 [ 239.666279][ T4346] ? __kasan_check_write+0x14/0x20 [ 239.671227][ T4346] ? finish_task_switch+0x167/0x7b0 [ 239.676258][ T4346] ? requeue_task_rt+0x410/0x410 [ 239.681034][ T4346] ? ioctl_has_perm+0x1f8/0x560 [ 239.685727][ T4346] ? ioctl_has_perm+0x3f5/0x560 [ 239.690414][ T4346] ? has_cap_mac_admin+0x3c0/0x3c0 [ 239.695354][ T4346] ? preempt_schedule_irq+0xe7/0x140 [ 239.700490][ T4346] ? preempt_schedule_irq+0xe7/0x140 [ 239.705603][ T4346] ? __cond_resched+0x20/0x20 [ 239.710116][ T4346] ? selinux_file_ioctl+0x3cc/0x540 [ 239.715146][ T4346] ? selinux_file_alloc_security+0x120/0x120 [ 239.720957][ T4346] ? sysvec_reschedule_ipi+0x7d/0x150 [ 239.726167][ T4346] ? __fget_files+0x31e/0x380 [ 239.730681][ T4346] ? security_file_ioctl+0x84/0xb0 [ 239.735629][ T4346] ? usbdev_poll+0x200/0x200 [ 239.740052][ T4346] __se_sys_ioctl+0x114/0x190 [ 239.744567][ T4346] __x64_sys_ioctl+0x7b/0x90 [ 239.748998][ T4346] do_syscall_64+0x3d/0xb0 [ 239.753263][ T4346] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 239.758973][ T4346] RIP: 0033:0x7fa0abef5e79 [ 239.763257][ T4346] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 239.782672][ T4346] RSP: 002b:00007fa0aab31038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 239.790912][ T4346] RAX: ffffffffffffffda RBX: 00007fa0ac092130 RCX: 00007fa0abef5e79 [ 239.798724][ T4346] RDX: 0000000020000040 RSI: 00000000802c550a RDI: 0000000000000007 [ 239.806540][ T4346] RBP: 00007fa0aab31090 R08: 0000000000000000 R09: 0000000000000000 [ 239.814351][ T4346] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 239.822161][ T4346] R13: 0000000000000000 R14: 00007fa0ac092130 R15: 00007ffc4b570c58 [ 239.829976][ T4346] [ 240.024710][ T415] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.032675][ T308] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 240.040966][ T308] usb 4-1: Product: syz [ 240.045901][ T308] usb 4-1: SerialNumber: syz [ 240.051043][ T308] usb 4-1: config 0 descriptor?? [ 240.068515][ T415] device veth1_macvtap left promiscuous mode [ 240.074381][ T415] device veth0_vlan left promiscuous mode [ 240.080106][ T4307] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 240.135596][ T20] usb 1-1: USB disconnect, device number 23 [ 240.238881][ T4353] input: syz0 as /devices/virtual/input/input18 [ 240.263653][ T4357] loop1: detected capacity change from 0 to 512 [ 240.324565][ T4357] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=2802c018, mo2=0002] [ 240.332513][ T4357] System zones: 0-2, 18-18, 34-35 [ 240.466208][ T4357] EXT4-fs (loop1): mounted filesystem without journal. Opts: lazytime,noinit_itable,debug,,errors=continue. Quota mode: writeback. [ 240.562022][ T4357] ext4 filesystem being mounted at /4/file0 supports timestamps until 2038 (0x7fffffff) [ 240.615596][ T308] usb 4-1: invalid MIDI in EP 0 [ 240.620510][ T308] snd-usb-audio: probe of 4-1:0.2 failed with error -22 [ 240.629559][ T308] usb 4-1: USB disconnect, device number 24 [ 240.747208][ T3056] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 241.106471][ T4370] loop2: detected capacity change from 0 to 40427 [ 241.126400][ T4375] loop0: detected capacity change from 0 to 256 [ 241.155531][ T4375] exfat: Deprecated parameter 'utf8' [ 241.155539][ T4370] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 241.160649][ T4375] exfat: Deprecated parameter 'namecase' [ 241.173805][ T4370] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 241.182089][ T4375] exfat: Deprecated parameter 'utf8' [ 241.190813][ T4370] F2FS-fs (loop2): invalid crc value [ 241.197760][ T4375] exFAT-fs (loop0): failed to load upcase table (idx : 0x00012153, chksum : 0xc3dffc2e, utbl_chksum : 0xe619d30d) [ 241.220407][ T4370] F2FS-fs (loop2): Found nat_bits in checkpoint [ 241.230896][ T4384] loop1: detected capacity change from 0 to 512 [ 241.237179][ T3056] usb 5-1: Using ep0 maxpacket: 8 [ 241.301435][ T4370] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 241.308471][ T4370] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 241.341323][ T4384] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=2802c018, mo2=0002] [ 241.349329][ T4384] System zones: 0-2, 18-18, 34-35 [ 241.354862][ T4384] EXT4-fs (loop1): mounted filesystem without journal. Opts: lazytime,noinit_itable,debug,,errors=continue. Quota mode: writeback. [ 241.369454][ T4384] ext4 filesystem being mounted at /6/file0 supports timestamps until 2038 (0x7fffffff) [ 241.385046][ T3056] usb 5-1: config 135 has an invalid interface number: 230 but max is 0 [ 241.396673][ T3056] usb 5-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 241.407195][ T3056] usb 5-1: config 135 has no interface number 0 [ 241.413308][ T3056] usb 5-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 241.489481][ T30] kauditd_printk_skb: 91 callbacks suppressed [ 241.494956][ T30] audit: type=1400 audit(1723977791.431:1449): avc: denied { write } for pid=4374 comm="syz.0.1047" name="/" dev="loop0" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 241.522482][ T30] audit: type=1400 audit(1723977791.431:1450): avc: denied { add_name } for pid=4374 comm="syz.0.1047" name="memory.events" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 241.543788][ T30] audit: type=1400 audit(1723977791.431:1451): avc: denied { associate } for pid=4374 comm="syz.0.1047" name="memory.events" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 241.566757][ T30] audit: type=1400 audit(1723977791.431:1452): avc: denied { append open } for pid=4374 comm="syz.0.1047" path="/2/file1/memory.events" dev="loop0" ino=1048803 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 241.592778][ T30] audit: type=1400 audit(1723977791.431:1453): avc: denied { write } for pid=4374 comm="syz.0.1047" name="memory.events" dev="loop0" ino=1048803 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 241.673857][ T3056] usb 5-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 241.707017][ T4393] fuse: Bad value for 'fd' [ 241.741302][ T3056] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.750162][ T3056] usb 5-1: Product: syz [ 241.756262][ T3056] usb 5-1: Manufacturer: syz [ 241.761716][ T3056] usb 5-1: SerialNumber: syz [ 241.835987][ T3056] usb 5-1: Found UVC 0.00 device syz (18ec:3288) [ 241.842221][ T3056] usb 5-1: No valid video chain found. [ 241.982302][ T30] audit: type=1400 audit(1723977791.931:1454): avc: denied { unmount } for pid=4257 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 242.295609][ T4404] loop0: detected capacity change from 0 to 256 [ 242.307335][ T20] usb 5-1: USB disconnect, device number 25 [ 242.334131][ T4404] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 242.405955][ T30] audit: type=1326 audit(1723977792.321:1455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4408 comm="syz.1.1055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0abef5e79 code=0x7ffc0000 [ 242.430582][ T30] audit: type=1326 audit(1723977792.321:1456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4408 comm="syz.1.1055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa0abef5e79 code=0x7ffc0000 [ 242.454107][ T30] audit: type=1326 audit(1723977792.321:1457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4408 comm="syz.1.1055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0abef5e79 code=0x7ffc0000 [ 242.477751][ T30] audit: type=1326 audit(1723977792.321:1458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4408 comm="syz.1.1055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa0abef5e79 code=0x7ffc0000 [ 242.899972][ T4418] bridge0: port 3(syz_tun) entered blocking state [ 242.906251][ T4418] bridge0: port 3(syz_tun) entered disabled state [ 242.912908][ T4418] device syz_tun entered promiscuous mode [ 242.918621][ T4418] bridge0: port 3(syz_tun) entered blocking state [ 242.924846][ T4418] bridge0: port 3(syz_tun) entered forwarding state [ 242.964951][ T3056] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 243.001740][ T4429] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1064'. [ 243.010806][ T4429] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1064'. [ 243.032672][ T4432] loop2: detected capacity change from 0 to 512 [ 243.041263][ T4423] loop3: detected capacity change from 0 to 40427 [ 243.065329][ T4432] EXT4-fs (loop2): Mount option "data=ordered" incompatible with ext2 [ 243.075339][ T4423] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 243.082865][ T4423] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 243.091836][ T4423] F2FS-fs (loop3): invalid crc value [ 243.098662][ T4423] F2FS-fs (loop3): Found nat_bits in checkpoint [ 243.172512][ T4423] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 243.179480][ T4423] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 243.215043][ T3056] usb 2-1: Using ep0 maxpacket: 16 [ 243.260067][ T4444] FAULT_INJECTION: forcing a failure. [ 243.260067][ T4444] name failslab, interval 1, probability 0, space 0, times 0 [ 243.272959][ T4444] CPU: 0 PID: 4444 Comm: syz.2.1069 Not tainted 5.15.153-syzkaller-00623-gda92e689a0c3 #0 [ 243.282655][ T4444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 243.292552][ T4444] Call Trace: [ 243.295674][ T4444] [ 243.298450][ T4444] dump_stack_lvl+0x151/0x1c0 [ 243.302969][ T4444] ? io_uring_drop_tctx_refs+0x190/0x190 [ 243.308437][ T4444] dump_stack+0x15/0x20 [ 243.312425][ T4444] should_fail+0x3c6/0x510 [ 243.316683][ T4444] __should_failslab+0xa4/0xe0 [ 243.321283][ T4444] should_failslab+0x9/0x20 [ 243.325623][ T4444] slab_pre_alloc_hook+0x37/0xd0 [ 243.330394][ T4444] ? audit_log_start+0x456/0xa80 [ 243.335170][ T4444] __kmalloc_track_caller+0x6c/0x260 [ 243.340285][ T4444] ? audit_log_start+0x456/0xa80 [ 243.345059][ T4444] ? audit_log_start+0x456/0xa80 [ 243.349836][ T4444] __alloc_skb+0x10c/0x550 [ 243.354091][ T4444] audit_log_start+0x456/0xa80 [ 243.358775][ T4444] ? audit_serial+0x30/0x30 [ 243.363113][ T4444] ? rcu_gp_kthread_wake+0x90/0x90 [ 243.368060][ T4444] ? _raw_spin_lock_irqsave+0xf9/0x210 [ 243.373356][ T4444] ? __kernel_text_address+0x9b/0x110 [ 243.378565][ T4444] ? slow_avc_audit+0x3c0/0x3c0 [ 243.383251][ T4444] common_lsm_audit+0xd8/0x18b0 [ 243.387936][ T4444] ? avc_audit_pre_callback+0x2b0/0x2b0 [ 243.393321][ T4444] ? ipv6_skb_to_auditdata+0xd90/0xd90 [ 243.398611][ T4444] ? _raw_spin_unlock_irqrestore+0x5c/0x80 [ 243.404255][ T4444] ? avc_update_node+0x2f9/0xd50 [ 243.409032][ T4444] slow_avc_audit+0x26c/0x3c0 [ 243.413545][ T4444] ? avc_get_hash_stats+0x180/0x180 [ 243.418662][ T4444] ? avc_has_perm_noaudit+0x2dd/0x430 [ 243.423876][ T4444] avc_has_perm+0x1f5/0x260 [ 243.428211][ T4444] ? avc_has_perm_noaudit+0x430/0x430 [ 243.433422][ T4444] ? __kasan_check_write+0x14/0x20 [ 243.438365][ T4444] ? _raw_spin_lock+0xa4/0x1b0 [ 243.442963][ T4444] selinux_socket_sendmsg+0x243/0x340 [ 243.448174][ T4444] ? selinux_socket_accept+0x5b0/0x5b0 [ 243.453467][ T4444] ? kvfree_call_rcu+0x612/0x8b0 [ 243.458242][ T4444] ? __kasan_check_write+0x14/0x20 [ 243.463185][ T4444] ? _raw_spin_lock_irqsave+0xf9/0x210 [ 243.468480][ T4444] ? check_stack_object+0x114/0x130 [ 243.473518][ T4444] security_socket_sendmsg+0x72/0xb0 [ 243.478639][ T4444] ____sys_sendmsg+0x51a/0x8f0 [ 243.483250][ T4444] ? __sys_sendmsg_sock+0x40/0x40 [ 243.488099][ T4444] ? import_iovec+0xe5/0x120 [ 243.492523][ T4444] ___sys_sendmsg+0x252/0x2e0 [ 243.497036][ T4444] ? __sys_sendmsg+0x260/0x260 [ 243.501636][ T4444] ? _raw_spin_lock_irqsave+0xf9/0x210 [ 243.506935][ T4444] ? _raw_spin_unlock_irqrestore+0x5c/0x80 [ 243.512577][ T4444] ? __fdget+0x1bc/0x240 [ 243.516653][ T4444] __se_sys_sendmsg+0x19a/0x260 [ 243.521424][ T4444] ? __x64_sys_sendmsg+0x90/0x90 [ 243.526201][ T4444] ? __bpf_trace_sys_enter+0x62/0x70 [ 243.531323][ T4444] __x64_sys_sendmsg+0x7b/0x90 [ 243.535918][ T4444] do_syscall_64+0x3d/0xb0 [ 243.540173][ T4444] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 243.545903][ T4444] RIP: 0033:0x7fe339eb7e79 [ 243.550153][ T4444] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 243.569595][ T4444] RSP: 002b:00007fe338b35038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 243.577844][ T4444] RAX: ffffffffffffffda RBX: 00007fe33a053f80 RCX: 00007fe339eb7e79 [ 243.585652][ T4444] RDX: 0000000000000000 RSI: 0000000020001880 RDI: 0000000000000003 [ 243.593466][ T4444] RBP: 00007fe338b35090 R08: 0000000000000000 R09: 0000000000000000 [ 243.601277][ T4444] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 243.609091][ T4444] R13: 0000000000000000 R14: 00007fe33a053f80 R15: 00007fff90cc71f8 [ 243.616906][ T4444] [ 243.675031][ T3056] usb 2-1: config 0 has an invalid descriptor of length 112, skipping remainder of the config [ 243.685324][ T3056] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 243.698417][ T3056] usb 2-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 243.707546][ T3056] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.716383][ T3056] usb 2-1: config 0 descriptor?? [ 243.765879][ T3056] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 243.786244][ T4440] loop0: detected capacity change from 0 to 131072 [ 243.826391][ T4440] F2FS-fs (loop0): invalid crc value [ 243.835903][ T4440] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (15359802341028777995, 275811881701387) [ 243.876147][ T4440] F2FS-fs (loop0): recover fsync data on readonly fs [ 243.882944][ T4440] F2FS-fs (loop0): Mounted with checkpoint version = 753bd00b [ 243.967952][ T4414] UDC core: couldn't find an available UDC or it's busy: -16 [ 243.974965][ T459] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 243.978090][ T4451] loop4: detected capacity change from 0 to 40427 [ 243.988890][ T4414] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 244.034707][ T4451] F2FS-fs (loop4): Found nat_bits in checkpoint [ 244.085665][ T4451] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 244.164970][ T3056] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 244.375054][ T459] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 244.385784][ T459] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 244.394686][ T459] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 244.405832][ T459] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.439206][ T459] usb 3-1: config 0 descriptor?? [ 244.504936][ T404] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 244.554943][ T3056] usb 4-1: Using ep0 maxpacket: 8 [ 244.674970][ T3056] usb 4-1: config 135 has an invalid interface number: 230 but max is 0 [ 244.683269][ T3056] usb 4-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 244.694424][ T3767] attempt to access beyond end of device [ 244.694424][ T3767] loop4: rw=524288, want=45072, limit=40427 [ 244.706872][ T3767] attempt to access beyond end of device [ 244.706872][ T3767] loop4: rw=0, want=45072, limit=40427 [ 244.718195][ T3056] usb 4-1: config 135 has no interface number 0 [ 244.724450][ T3056] usb 4-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 244.738798][ T3767] attempt to access beyond end of device [ 244.738798][ T3767] loop4: rw=2049, want=45104, limit=40427 [ 244.895125][ T3056] usb 4-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 244.906108][ T3056] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.919382][ T3056] usb 4-1: Product: syz [ 244.919815][ T404] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 244.927800][ T3056] usb 4-1: Manufacturer: syz [ 244.950578][ T3056] usb 4-1: SerialNumber: syz [ 244.954418][ T404] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 244.964694][ T404] usb 1-1: New USB device found, idVendor=0f30, idProduct=0111, bcdDevice= 0.00 [ 244.984964][ T404] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.993531][ T404] usb 1-1: config 0 descriptor?? [ 244.995913][ T3056] usb 4-1: Found UVC 0.00 device syz (18ec:3288) [ 245.008834][ T3056] usb 4-1: No valid video chain found. [ 245.030569][ T4468] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.037422][ T4468] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.044814][ T4468] device bridge_slave_0 entered promiscuous mode [ 245.051774][ T4468] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.058841][ T4468] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.066129][ T4468] device bridge_slave_1 entered promiscuous mode [ 245.131475][ T4468] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.138347][ T4468] bridge0: port 2(bridge_slave_1) entered forwarding state [ 245.145422][ T4468] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.152195][ T4468] bridge0: port 1(bridge_slave_0) entered forwarding state [ 245.177891][ T3056] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 245.185828][ T3056] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.192909][ T3056] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.202167][ T20] usb 4-1: USB disconnect, device number 25 [ 245.216745][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 245.225157][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.232045][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 245.239322][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 245.247957][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.254813][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 245.275923][ T459] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 245.283811][ T459] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 245.308245][ T459] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 245.321177][ T3056] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 245.329386][ T3056] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 245.336989][ T3056] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 245.345331][ T4468] device veth0_vlan entered promiscuous mode [ 245.367155][ T3056] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 245.376473][ T4468] device veth1_macvtap entered promiscuous mode [ 245.387207][ T3056] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 245.396311][ T459] usb 2-1: USB disconnect, device number 22 [ 245.402631][ T415] device bridge_slave_1 left promiscuous mode [ 245.409082][ T415] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.412252][ T4473] loop1: detected capacity change from 0 to 128 [ 245.422419][ T415] device bridge_slave_0 left promiscuous mode [ 245.428472][ T415] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.436915][ T415] device veth1_macvtap left promiscuous mode [ 245.441001][ T4473] EXT4-fs (loop1): mounted filesystem without journal. Opts: nouid32,grpjquota=,,errors=continue. Quota mode: none. [ 245.442958][ T415] device veth0_vlan left promiscuous mode [ 245.455196][ T4473] ext4 filesystem being mounted at /9/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 245.492292][ T404] pantherlord 0003:0F30:0111.0035: item fetching failed at offset 6/7 [ 245.500796][ T404] pantherlord 0003:0F30:0111.0035: parse failed [ 245.507076][ T404] pantherlord: probe of 0003:0F30:0111.0035 failed with error -22 [ 245.591343][ T3056] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 245.611310][ T4480] input: syz0 as /devices/virtual/input/input19 [ 245.693519][ T3056] usb 1-1: USB disconnect, device number 24 [ 245.809980][ T4315] EXT4-fs error (device loop1): ext4_readdir:220: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024 [ 245.824299][ T4315] EXT4-fs error (device loop1): ext4_readdir:220: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 8192 [ 245.838923][ T4315] EXT4-fs error (device loop1): ext4_empty_dir:3120: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 245.852233][ T4315] EXT4-fs error (device loop1): ext4_readdir:220: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024 [ 245.871415][ T4315] EXT4-fs error (device loop1): ext4_readdir:220: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 8192 [ 245.895480][ T4315] EXT4-fs error (device loop1): ext4_empty_dir:3120: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 245.917181][ T4315] EXT4-fs error (device loop1): ext4_readdir:220: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024 [ 245.941126][ T4315] EXT4-fs error (device loop1): ext4_readdir:220: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 8192 [ 245.967121][ T4315] EXT4-fs error (device loop1): ext4_empty_dir:3120: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 245.990014][ T4315] EXT4-fs error (device loop1): ext4_readdir:220: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024 [ 246.001430][ T4487] loop4: detected capacity change from 0 to 40427 [ 246.131886][ T4489] loop3: detected capacity change from 0 to 40427 [ 246.196481][ T4489] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 246.214524][ T4489] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 246.235726][ T4489] F2FS-fs (loop3): invalid crc value [ 246.253810][ T4489] F2FS-fs (loop3): Found nat_bits in checkpoint [ 246.312616][ T4505] loop4: detected capacity change from 0 to 256 [ 246.354665][ T4489] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 246.361604][ T4489] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 246.369375][ T4493] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.385360][ T4493] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.003311][ T4493] device bridge_slave_0 entered promiscuous mode [ 247.020167][ T459] usb 3-1: USB disconnect, device number 31 [ 247.042416][ T4493] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.076352][ T4493] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.085907][ T4514] loop2: detected capacity change from 0 to 256 [ 247.095747][ T4493] device bridge_slave_1 entered promiscuous mode [ 247.218516][ T4514] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 248.176761][ T4524] input: syz0 as /devices/virtual/input/input20 [ 248.222352][ T30] kauditd_printk_skb: 34 callbacks suppressed [ 248.222367][ T30] audit: type=1400 audit(1723977798.171:1491): avc: denied { create } for pid=4525 comm="syz.0.1090" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 248.249244][ T30] audit: type=1400 audit(1723977798.171:1492): avc: denied { getopt } for pid=4525 comm="syz.0.1090" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 248.269919][ T3056] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 248.277215][ T3056] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 248.284490][ T3056] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 248.306365][ T3056] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 248.314404][ T3056] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.321266][ T3056] bridge0: port 1(bridge_slave_0) entered forwarding state [ 248.328495][ T3056] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 248.350458][ T3056] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 248.357121][ T4533] loop0: detected capacity change from 0 to 512 [ 248.384455][ T30] audit: type=1400 audit(1723977798.301:1493): avc: denied { ioctl } for pid=4532 comm="syz.0.1094" path="socket:[41823]" dev="sockfs" ino=41823 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 248.410815][ T4535] loop2: detected capacity change from 0 to 256 [ 248.434771][ T4537] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 248.450705][ T4533] EXT4-fs (loop0): #blocks per group too big: 24576 [ 248.460037][ T30] audit: type=1400 audit(1723977798.381:1494): avc: denied { create } for pid=4536 comm="syz.4.1096" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 248.482005][ T30] audit: type=1400 audit(1723977798.381:1495): avc: denied { create } for pid=4536 comm="syz.4.1096" dev="anon_inodefs" ino=41833 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 248.510467][ T3056] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.514220][ T30] audit: type=1400 audit(1723977798.381:1496): avc: denied { ioctl } for pid=4536 comm="syz.4.1096" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=41833 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 248.517446][ T3056] bridge0: port 2(bridge_slave_1) entered forwarding state [ 248.517643][ T3056] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 248.558162][ T3056] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 248.565939][ T3056] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 248.573861][ T3056] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 248.573856][ T30] audit: type=1400 audit(1723977798.411:1497): avc: denied { write } for pid=4527 comm="syz.2.1091" name="vga_arbiter" dev="devtmpfs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 248.573888][ T30] audit: type=1400 audit(1723977798.411:1498): avc: denied { open } for pid=4527 comm="syz.2.1091" path="/dev/vga_arbiter" dev="devtmpfs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 248.587647][ T3056] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 248.637848][ T3056] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 248.649305][ T4493] device veth0_vlan entered promiscuous mode [ 248.661031][ T3056] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 248.668501][ T3056] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 248.676564][ T3056] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 248.687146][ T4493] device veth1_macvtap entered promiscuous mode [ 248.695496][ T3056] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 248.702743][ T3056] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 248.710443][ T3056] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 248.718471][ T3056] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 248.727358][ T3056] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 248.751131][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 248.759304][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 248.767631][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 248.776153][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 248.795046][ T459] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 249.051642][ T415] device bridge_slave_1 left promiscuous mode [ 249.057645][ T415] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.079601][ T415] device bridge_slave_0 left promiscuous mode [ 249.085723][ T415] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.093857][ T415] device veth1_macvtap left promiscuous mode [ 249.100063][ T415] device veth0_vlan left promiscuous mode [ 249.696192][ T4554] futex_wake_op: syz.3.1099 tries to shift op by 32; fix this program [ 249.706027][ T30] audit: type=1326 audit(1723977799.661:1499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4553 comm="syz.3.1099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2585c2e79 code=0x7ffc0000 [ 249.734313][ T4556] input: syz0 as /devices/virtual/input/input21 [ 249.741609][ T30] audit: type=1326 audit(1723977799.661:1500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4553 comm="syz.3.1099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2585c2e79 code=0x7ffc0000 [ 249.852731][ T459] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 249.864058][ T459] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 249.865646][ T4561] futex_wake_op: syz.0.1102 tries to shift op by 32; fix this program [ 249.885512][ T459] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 249.894390][ T459] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.965909][ T459] usb 3-1: config 0 descriptor?? [ 250.016678][ T4564] FAULT_INJECTION: forcing a failure. [ 250.016678][ T4564] name failslab, interval 1, probability 0, space 0, times 0 [ 250.029261][ T4564] CPU: 1 PID: 4564 Comm: syz.0.1102 Not tainted 5.15.153-syzkaller-00623-gda92e689a0c3 #0 [ 250.038911][ T4564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 250.048807][ T4564] Call Trace: [ 250.051930][ T4564] [ 250.054711][ T4564] dump_stack_lvl+0x151/0x1c0 [ 250.059225][ T4564] ? io_uring_drop_tctx_refs+0x190/0x190 [ 250.064694][ T4564] dump_stack+0x15/0x20 [ 250.068681][ T4564] should_fail+0x3c6/0x510 [ 250.072936][ T4564] __should_failslab+0xa4/0xe0 [ 250.077535][ T4564] should_failslab+0x9/0x20 [ 250.081874][ T4564] slab_pre_alloc_hook+0x37/0xd0 [ 250.083022][ T4563] loop1: detected capacity change from 0 to 40427 [ 250.086645][ T4564] ? audit_log_start+0x456/0xa80 [ 250.086668][ T4564] __kmalloc_track_caller+0x6c/0x260 [ 250.086691][ T4564] ? audit_log_start+0x456/0xa80 [ 250.107563][ T4564] ? audit_log_start+0x456/0xa80 [ 250.112334][ T4564] __alloc_skb+0x10c/0x550 [ 250.116613][ T4564] audit_log_start+0x456/0xa80 [ 250.121188][ T4564] ? audit_serial+0x30/0x30 [ 250.125529][ T4564] ? rcu_gp_kthread_wake+0x90/0x90 [ 250.130473][ T4564] ? _raw_spin_lock_irqsave+0xf9/0x210 [ 250.135769][ T4564] ? slow_avc_audit+0x3c0/0x3c0 [ 250.140455][ T4564] common_lsm_audit+0xd8/0x18b0 [ 250.145142][ T4564] ? avc_audit_pre_callback+0x2b0/0x2b0 [ 250.150527][ T4564] ? ipv6_skb_to_auditdata+0xd90/0xd90 [ 250.155819][ T4564] ? _raw_spin_unlock_irqrestore+0x5c/0x80 [ 250.161460][ T4564] ? avc_update_node+0x2f9/0xd50 [ 250.166236][ T4564] slow_avc_audit+0x26c/0x3c0 [ 250.170747][ T4564] ? avc_get_hash_stats+0x180/0x180 [ 250.175780][ T4564] ? avc_has_perm_noaudit+0x2dd/0x430 [ 250.180992][ T4564] avc_has_perm+0x1f5/0x260 [ 250.185332][ T4564] ? avc_has_perm_noaudit+0x430/0x430 [ 250.190535][ T4564] ? kmem_cache_free+0x116/0x2e0 [ 250.195313][ T4564] ? kasan_set_track+0x5d/0x70 [ 250.199913][ T4564] file_has_perm+0x508/0x6c0 [ 250.204340][ T4564] ? match_file+0x140/0x140 [ 250.208691][ T4564] ? check_stack_object+0x114/0x130 [ 250.213713][ T4564] selinux_file_permission+0x450/0x570 [ 250.219009][ T4564] security_file_permission+0x6b/0xb0 [ 250.224214][ T4564] do_iter_write+0x175/0x760 [ 250.228642][ T4564] vfs_writev+0x2ac/0x560 [ 250.232808][ T4564] ? do_writev+0x340/0x340 [ 250.237069][ T4564] ? __fget_files+0x31e/0x380 [ 250.241578][ T4564] ? __fdget_pos+0x209/0x3a0 [ 250.245998][ T4564] ? do_writev+0x7b/0x340 [ 250.250167][ T4564] do_writev+0x1aa/0x340 [ 250.254248][ T4564] ? do_readv+0x460/0x460 [ 250.258411][ T4564] ? debug_smp_processor_id+0x17/0x20 [ 250.263622][ T4564] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 250.269522][ T4564] __x64_sys_writev+0x7d/0x90 [ 250.274037][ T4564] do_syscall_64+0x3d/0xb0 [ 250.278287][ T4564] ? sysvec_call_function_single+0x52/0xb0 [ 250.283929][ T4564] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 250.289654][ T4564] RIP: 0033:0x7fdb2f365e79 [ 250.293913][ T4564] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 250.313351][ T4564] RSP: 002b:00007fdb2dfc2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 250.321598][ T4564] RAX: ffffffffffffffda RBX: 00007fdb2f502058 RCX: 00007fdb2f365e79 [ 250.329407][ T4564] RDX: 0000000000000001 RSI: 0000000020000080 RDI: 0000000000000009 [ 250.337357][ T4564] RBP: 00007fdb2dfc2090 R08: 0000000000000000 R09: 0000000000000000 [ 250.345166][ T4564] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 250.352976][ T4564] R13: 0000000000000000 R14: 00007fdb2f502058 R15: 00007ffc7066e2b8 [ 250.360885][ T4564] [ 250.378176][ T4563] F2FS-fs (loop1): Found nat_bits in checkpoint [ 250.408453][ T4563] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 251.281841][ T4574] futex_wake_op: syz.0.1104 tries to shift op by 32; fix this program [ 251.333965][ T459] plantronics 0003:047F:FFFF.0036: unknown main item tag 0x0 [ 251.341474][ T459] plantronics 0003:047F:FFFF.0036: unknown main item tag 0x0 [ 251.348922][ T459] plantronics 0003:047F:FFFF.0036: No inputs registered, leaving [ 251.357505][ T459] plantronics 0003:047F:FFFF.0036: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 251.418102][ T4493] attempt to access beyond end of device [ 251.418102][ T4493] loop1: rw=524288, want=45072, limit=40427 [ 251.429597][ T4493] attempt to access beyond end of device [ 251.429597][ T4493] loop1: rw=0, want=45072, limit=40427 [ 251.445559][ T4579] loop4: detected capacity change from 0 to 256 [ 251.446129][ T4493] attempt to access beyond end of device [ 251.446129][ T4493] loop1: rw=2049, want=45104, limit=40427 [ 251.465394][ T4579] exfat: Deprecated parameter 'utf8' [ 251.470538][ T4579] exfat: Deprecated parameter 'namecase' [ 251.476304][ T4579] exfat: Deprecated parameter 'utf8' [ 251.483881][ T4579] exFAT-fs (loop4): failed to load upcase table (idx : 0x00012153, chksum : 0xc3dffc2e, utbl_chksum : 0xe619d30d) [ 251.690188][ T4583] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.697719][ T4583] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.705095][ T4583] device bridge_slave_0 entered promiscuous mode [ 251.712047][ T4583] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.719210][ T4583] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.726608][ T4583] device bridge_slave_1 entered promiscuous mode [ 251.856136][ T4583] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.863025][ T4583] bridge0: port 2(bridge_slave_1) entered forwarding state [ 251.870214][ T4583] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.877115][ T4583] bridge0: port 1(bridge_slave_0) entered forwarding state [ 251.904860][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 251.913527][ T20] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.921007][ T20] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.939950][ T3056] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 251.948424][ T3056] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.955317][ T3056] bridge0: port 1(bridge_slave_0) entered forwarding state [ 251.962639][ T3056] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 251.971248][ T3056] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.978152][ T3056] bridge0: port 2(bridge_slave_1) entered forwarding state [ 251.990062][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 251.998571][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 252.032481][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 252.059501][ T4583] device veth0_vlan entered promiscuous mode [ 252.066548][ T404] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 252.075188][ T404] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 252.082394][ T404] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 252.090210][ T45] device bridge_slave_1 left promiscuous mode [ 252.096241][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.103643][ T45] device bridge_slave_0 left promiscuous mode [ 252.109677][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.126056][ T45] device veth1_macvtap left promiscuous mode [ 252.132428][ T45] device veth0_vlan left promiscuous mode [ 252.160830][ T4591] input: syz0 as /devices/virtual/input/input22 [ 252.263089][ T4583] device veth1_macvtap entered promiscuous mode [ 252.276266][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 252.326630][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 252.336524][ T3056] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 252.434318][ T4600] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1112'. [ 252.507406][ T4597] FAULT_INJECTION: forcing a failure. [ 252.507406][ T4597] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 252.520658][ T4597] CPU: 1 PID: 4597 Comm: syz.1.1109 Not tainted 5.15.153-syzkaller-00623-gda92e689a0c3 #0 [ 252.526802][ T20] usb 3-1: USB disconnect, device number 32 [ 252.530361][ T4597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 252.530375][ T4597] Call Trace: [ 252.530380][ T4597] [ 252.530388][ T4597] dump_stack_lvl+0x151/0x1c0 [ 252.556468][ T4597] ? io_uring_drop_tctx_refs+0x190/0x190 [ 252.561876][ T4597] dump_stack+0x15/0x20 [ 252.565863][ T4597] should_fail+0x3c6/0x510 [ 252.570229][ T4597] should_fail_usercopy+0x1a/0x20 [ 252.575097][ T4597] _copy_from_user+0x20/0xd0 [ 252.579528][ T4597] ip_tunnel_siocdevprivate+0xa3/0x1c0 [ 252.584820][ T4597] ? _kstrtoull+0x3a0/0x4a0 [ 252.589158][ T4597] ? ip_tunnel_update+0xcc0/0xcc0 [ 252.594023][ T4597] ? kstrtol_from_user+0x310/0x310 [ 252.598969][ T4597] ? __x64_compat_sys_ioctl+0x90/0x90 [ 252.604180][ T4597] ipip6_tunnel_siocdevprivate+0x206/0xe90 [ 252.609816][ T4597] ? sit_tunnel_xmit+0x2440/0x2440 [ 252.614765][ T4597] ? __kasan_check_write+0x14/0x20 [ 252.619797][ T4597] ? full_name_hash+0xa0/0xf0 [ 252.624315][ T4597] dev_ifsioc+0xc75/0x10c0 [ 252.628565][ T4597] ? dev_ioctl+0xe70/0xe70 [ 252.632817][ T4597] ? mutex_lock+0xb6/0x1e0 [ 252.637068][ T4597] ? wait_for_completion_killable_timeout+0x10/0x10 [ 252.643499][ T4597] dev_ioctl+0x5f3/0xe70 [ 252.647576][ T4597] sock_ioctl+0x665/0x740 [ 252.651739][ T4597] ? sock_poll+0x400/0x400 [ 252.655993][ T4597] ? security_file_ioctl+0x84/0xb0 [ 252.660936][ T4597] ? sock_poll+0x400/0x400 [ 252.665188][ T4597] __se_sys_ioctl+0x114/0x190 [ 252.669705][ T4597] __x64_sys_ioctl+0x7b/0x90 [ 252.674133][ T4597] do_syscall_64+0x3d/0xb0 [ 252.678381][ T4597] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 252.684116][ T4597] RIP: 0033:0x7ff0c9f5be79 [ 252.688366][ T4597] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 252.707894][ T4597] RSP: 002b:00007ff0c8bd9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 252.716230][ T4597] RAX: ffffffffffffffda RBX: 00007ff0ca0f7f80 RCX: 00007ff0c9f5be79 [ 252.724039][ T4597] RDX: 0000000020000940 RSI: 00000000000089f3 RDI: 0000000000000007 [ 252.731852][ T4597] RBP: 00007ff0c8bd9090 R08: 0000000000000000 R09: 0000000000000000 [ 252.739822][ T4597] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 252.747635][ T4597] R13: 0000000000000000 R14: 00007ff0ca0f7f80 R15: 00007ffe1145c7c8 [ 252.755447][ T4597] [ 252.782994][ T4606] loop4: detected capacity change from 0 to 40427 [ 252.812764][ T4608] loop2: detected capacity change from 0 to 256 [ 252.855493][ T4608] exfat: Deprecated parameter 'utf8' [ 252.860704][ T4608] exfat: Deprecated parameter 'namecase' [ 252.866460][ T4608] exfat: Deprecated parameter 'utf8' [ 252.874246][ T4608] exFAT-fs (loop2): failed to load upcase table (idx : 0x00012153, chksum : 0xc3dffc2e, utbl_chksum : 0xe619d30d) [ 253.097714][ T4613] loop4: detected capacity change from 0 to 256 [ 253.362761][ T4616] loop1: detected capacity change from 0 to 512 [ 253.465780][ T4616] EXT4-fs (loop1): Ignoring removed oldalloc option [ 253.485372][ T4616] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=9802e02d, mo2=0002] [ 253.515558][ T4616] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.1117: invalid indirect mapped block 1 (level 1) [ 253.553257][ T4616] EXT4-fs (loop1): Remounting filesystem read-only [ 253.571880][ T4616] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.1117: invalid indirect mapped block 1635017060 (level 1) [ 253.611415][ T4616] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.1117: bg 0: block 361: padding at end of block bitmap is not set [ 253.611625][ T30] kauditd_printk_skb: 30 callbacks suppressed [ 253.611638][ T30] audit: type=1400 audit(1723977803.561:1529): avc: denied { bind } for pid=4618 comm="syz.0.1118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 253.628906][ T4610] loop3: detected capacity change from 0 to 40427 [ 253.632824][ T30] audit: type=1400 audit(1723977803.581:1530): avc: denied { name_bind } for pid=4618 comm="syz.0.1118" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 253.677686][ T30] audit: type=1400 audit(1723977803.581:1531): avc: denied { node_bind } for pid=4618 comm="syz.0.1118" saddr=ff02::1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 253.705450][ T4616] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6181: Corrupt filesystem [ 253.716157][ T4616] EXT4-fs (loop1): 1 truncate cleaned up [ 253.721903][ T4616] EXT4-fs (loop1): mounted filesystem without journal. Opts: oldalloc,min_batch_time=0x0000000000000000,min_batch_time=0x000000000000008e,errors=remount-ro,jqfmt=vfsv0,noblock_validity,debug,nombcache,data_err=abort,data=writeback,init_itable=0x0000000000000008,stripe=0x00000000000000. Quota mode: none. [ 253.770086][ T4610] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 253.779046][ T4610] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 253.789459][ T30] audit: type=1326 audit(1723977803.741:1532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4629 comm="syz.2.1120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe339eb7e79 code=0x7ffc0000 [ 253.826366][ T4610] F2FS-fs (loop3): invalid crc value [ 253.835182][ T30] audit: type=1326 audit(1723977803.741:1533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4629 comm="syz.2.1120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe339eb7e79 code=0x7ffc0000 [ 253.863493][ T4636] loop2: detected capacity change from 0 to 256 [ 253.871186][ T4610] F2FS-fs (loop3): Found nat_bits in checkpoint [ 253.884990][ T30] audit: type=1326 audit(1723977803.741:1534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4629 comm="syz.2.1120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe339eb7e79 code=0x7ffc0000 [ 253.894997][ T60] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 253.915270][ T4636] exfat: Deprecated parameter 'utf8' [ 253.920835][ T4636] exfat: Deprecated parameter 'namecase' [ 253.930950][ T4636] exfat: Deprecated parameter 'utf8' [ 253.945798][ T4636] exFAT-fs (loop2): failed to load upcase table (idx : 0x00012153, chksum : 0xc3dffc2e, utbl_chksum : 0xe619d30d) [ 253.961583][ T30] audit: type=1326 audit(1723977803.741:1535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4629 comm="syz.2.1120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe339eb7e79 code=0x7ffc0000 [ 253.990088][ T30] audit: type=1326 audit(1723977803.741:1536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4629 comm="syz.2.1120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe339eb7e79 code=0x7ffc0000 [ 254.013504][ T30] audit: type=1326 audit(1723977803.761:1537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4629 comm="syz.2.1120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe339eb7e79 code=0x7ffc0000 [ 254.036966][ T4610] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 254.043801][ T4610] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 254.051373][ T30] audit: type=1326 audit(1723977803.761:1538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4629 comm="syz.2.1120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe339eb7e79 code=0x7ffc0000 [ 254.170991][ T4625] loop4: detected capacity change from 0 to 40427 [ 254.226868][ T4625] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 254.234518][ T4625] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 254.315305][ T60] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 254.328246][ T4625] F2FS-fs (loop4): invalid crc value [ 254.365152][ T60] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 254.434046][ T4632] loop1: detected capacity change from 0 to 40427 [ 254.459639][ T4625] F2FS-fs (loop4): Found nat_bits in checkpoint [ 254.475482][ T4632] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 254.494304][ T4632] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 254.514117][ T4632] F2FS-fs (loop1): invalid crc value [ 254.525196][ T60] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 254.534178][ T60] usb 1-1: New USB device strings: Mfr=0, Product=9, SerialNumber=0 [ 254.543854][ T60] usb 1-1: Product: syz [ 254.556458][ T60] usb 1-1: config 0 descriptor?? [ 254.560721][ T4625] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 254.570856][ T4632] F2FS-fs (loop1): Found nat_bits in checkpoint [ 254.574780][ T4625] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 254.627546][ T4652] input: syz0 as /devices/virtual/input/input23 [ 254.667610][ T4632] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 254.679101][ T4632] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 254.698438][ T4657] loop3: detected capacity change from 0 to 512 [ 254.775912][ T4657] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=2802c018, mo2=0002] [ 254.783806][ T4657] System zones: 0-2, 18-18, 34-35 [ 254.789515][ T4657] EXT4-fs (loop3): mounted filesystem without journal. Opts: lazytime,noinit_itable,debug,,errors=continue. Quota mode: writeback. [ 254.803460][ T4657] ext4 filesystem being mounted at /30/file0 supports timestamps until 2038 (0x7fffffff) [ 255.125470][ T60] konepure 0003:1E7D:2DB4.0037: item fetching failed at offset 10/11 [ 255.134424][ T60] konepure 0003:1E7D:2DB4.0037: parse failed [ 255.142084][ T60] konepure: probe of 0003:1E7D:2DB4.0037 failed with error -22 [ 255.355108][ T308] usb 1-1: USB disconnect, device number 25 [ 255.631480][ T4670] loop1: detected capacity change from 0 to 40427 [ 255.646146][ T4670] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 255.653740][ T4670] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 255.662875][ T4670] F2FS-fs (loop1): invalid crc value [ 255.669289][ T4670] F2FS-fs (loop1): Found nat_bits in checkpoint [ 255.717107][ T4670] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 255.727568][ T4670] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 256.456365][ T4679] loop3: detected capacity change from 0 to 40427 [ 256.469920][ T4686] FAULT_INJECTION: forcing a failure. [ 256.469920][ T4686] name failslab, interval 1, probability 0, space 0, times 0 [ 256.482439][ T4686] CPU: 0 PID: 4686 Comm: syz.2.1131 Not tainted 5.15.153-syzkaller-00623-gda92e689a0c3 #0 [ 256.492144][ T4686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 256.502039][ T4686] Call Trace: [ 256.505164][ T4686] [ 256.507936][ T4686] dump_stack_lvl+0x151/0x1c0 [ 256.512452][ T4686] ? io_uring_drop_tctx_refs+0x190/0x190 [ 256.517919][ T4686] dump_stack+0x15/0x20 [ 256.521910][ T4686] should_fail+0x3c6/0x510 [ 256.526183][ T4686] __should_failslab+0xa4/0xe0 [ 256.530761][ T4686] should_failslab+0x9/0x20 [ 256.535107][ T4686] slab_pre_alloc_hook+0x37/0xd0 [ 256.539877][ T4686] ? audit_log_start+0x456/0xa80 [ 256.544649][ T4686] __kmalloc_track_caller+0x6c/0x260 [ 256.549770][ T4686] ? audit_log_start+0x456/0xa80 [ 256.554543][ T4686] ? audit_log_start+0x456/0xa80 [ 256.559320][ T4686] __alloc_skb+0x10c/0x550 [ 256.563580][ T4686] audit_log_start+0x456/0xa80 [ 256.568172][ T4686] ? audit_serial+0x30/0x30 [ 256.572510][ T4686] ? rcu_gp_kthread_wake+0x90/0x90 [ 256.577462][ T4686] ? _raw_spin_lock_irqsave+0xf9/0x210 [ 256.582752][ T4686] ? slow_avc_audit+0x3c0/0x3c0 [ 256.587443][ T4686] common_lsm_audit+0xd8/0x18b0 [ 256.592125][ T4686] ? avc_audit_pre_callback+0x2b0/0x2b0 [ 256.597508][ T4686] ? ipv6_skb_to_auditdata+0xd90/0xd90 [ 256.602804][ T4686] ? _raw_spin_unlock_irqrestore+0x5c/0x80 [ 256.608444][ T4686] ? avc_update_node+0x2f9/0xd50 [ 256.613236][ T4686] slow_avc_audit+0x26c/0x3c0 [ 256.617730][ T4686] ? avc_get_hash_stats+0x180/0x180 [ 256.622764][ T4686] ? avc_has_perm_noaudit+0x2dd/0x430 [ 256.627974][ T4686] avc_has_perm+0x1f5/0x260 [ 256.632311][ T4686] ? __kernel_text_address+0x9b/0x110 [ 256.637522][ T4686] ? avc_has_perm_noaudit+0x430/0x430 [ 256.642725][ T4686] ? arch_stack_walk+0xf3/0x140 [ 256.647415][ T4686] selinux_socket_sendmsg+0x243/0x340 [ 256.652620][ T4686] ? selinux_socket_accept+0x5b0/0x5b0 [ 256.657931][ T4686] ? __stack_depot_save+0x34/0x470 [ 256.662948][ T4686] ? __kasan_check_write+0x14/0x20 [ 256.667897][ T4686] ? _raw_spin_lock_irqsave+0xf9/0x210 [ 256.673190][ T4686] ? kasan_set_free_info+0x23/0x40 [ 256.678139][ T4686] ? check_stack_object+0x114/0x130 [ 256.683174][ T4686] security_socket_sendmsg+0x72/0xb0 [ 256.688294][ T4686] ____sys_sendmsg+0x51a/0x8f0 [ 256.692894][ T4686] ? __sys_sendmsg_sock+0x40/0x40 [ 256.697757][ T4686] ? import_iovec+0xe5/0x120 [ 256.702181][ T4686] ___sys_sendmsg+0x252/0x2e0 [ 256.706698][ T4686] ? __sys_sendmsg+0x260/0x260 [ 256.711411][ T4686] ? __fdget+0x1bc/0x240 [ 256.715481][ T4686] __se_sys_sendmsg+0x19a/0x260 [ 256.720169][ T4686] ? __x64_sys_sendmsg+0x90/0x90 [ 256.724946][ T4686] ? ksys_write+0x260/0x2c0 [ 256.729307][ T4686] ? debug_smp_processor_id+0x17/0x20 [ 256.734488][ T4686] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 256.740392][ T4686] __x64_sys_sendmsg+0x7b/0x90 [ 256.744991][ T4686] do_syscall_64+0x3d/0xb0 [ 256.749250][ T4686] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 256.754974][ T4686] RIP: 0033:0x7fe339eb7e79 [ 256.759228][ T4686] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 256.778903][ T4686] RSP: 002b:00007fe338b35038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 256.787172][ T4686] RAX: ffffffffffffffda RBX: 00007fe33a053f80 RCX: 00007fe339eb7e79 [ 256.794960][ T4686] RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000008 [ 256.802768][ T4686] RBP: 00007fe338b35090 R08: 0000000000000000 R09: 0000000000000000 [ 256.810583][ T4686] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 256.818393][ T4686] R13: 0000000000000000 R14: 00007fe33a053f80 R15: 00007fff90cc71f8 [ 256.826211][ T4686] [ 256.838310][ T4679] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 256.846209][ T4679] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 256.873077][ T4679] F2FS-fs (loop3): invalid crc value [ 256.889278][ T4697] input: syz0 as /devices/virtual/input/input24 [ 256.896282][ T4679] F2FS-fs (loop3): Found nat_bits in checkpoint [ 256.943542][ T4679] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 256.964958][ T4679] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 257.053085][ T404] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 257.082307][ T4700] loop0: detected capacity change from 0 to 40427 [ 257.105771][ T4700] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 257.113371][ T4700] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 257.126131][ T4700] F2FS-fs (loop0): invalid crc value [ 257.261726][ T4700] F2FS-fs (loop0): Found nat_bits in checkpoint [ 257.321986][ T404] usb 5-1: Using ep0 maxpacket: 32 [ 257.349172][ T4700] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 257.356453][ T4700] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 257.394991][ T3056] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 257.444991][ T404] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 257.455766][ T404] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 257.465260][ T404] usb 5-1: New USB device found, idVendor=0458, idProduct=0004, bcdDevice= 0.00 [ 257.474330][ T404] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.475019][ T308] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 257.482940][ T404] usb 5-1: config 0 descriptor?? [ 257.604455][ T4719] loop3: detected capacity change from 0 to 1024 [ 257.645363][ T4719] EXT4-fs (loop3): Mount option "nojournal_checksum" incompatible with ext2 [ 257.655105][ T3056] usb 3-1: Using ep0 maxpacket: 8 [ 257.754921][ T308] usb 2-1: Using ep0 maxpacket: 8 [ 257.785001][ T3056] usb 3-1: config 135 has an invalid interface number: 230 but max is 0 [ 257.793392][ T3056] usb 3-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 257.814000][ T3056] usb 3-1: config 135 has no interface number 0 [ 257.820201][ T3056] usb 3-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 258.054844][ T404] hid-generic 0003:0458:0004.0038: hidraw0: USB HID v0.00 Device [HID 0458:0004] on usb-dummy_hcd.4-1/input0 [ 258.074824][ T308] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 258.085490][ T308] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 258.096131][ T308] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 258.105719][ T308] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 258.118424][ T308] usb 2-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 258.127367][ T308] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.133017][ T4724] loop0: detected capacity change from 0 to 512 [ 258.141611][ T308] usb 2-1: config 0 descriptor?? [ 258.175925][ T4724] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=2802c018, mo2=0002] [ 258.183793][ T4724] System zones: 0-2, 18-18, 34-35 [ 258.189559][ T4724] EXT4-fs (loop0): mounted filesystem without journal. Opts: lazytime,noinit_itable,debug,,errors=continue. Quota mode: writeback. [ 258.203078][ T4724] ext4 filesystem being mounted at /23/file0 supports timestamps until 2038 (0x7fffffff) [ 258.215114][ T3056] usb 3-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 258.223994][ T3056] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.231979][ T3056] usb 3-1: Product: syz [ 258.236261][ T3056] usb 3-1: Manufacturer: syz [ 258.240691][ T3056] usb 3-1: SerialNumber: syz [ 258.252195][ T455] usb 5-1: USB disconnect, device number 26 [ 258.652288][ T4733] loop0: detected capacity change from 0 to 256 [ 258.703920][ T4733] exfat: Deprecated parameter 'utf8' [ 258.782965][ T4733] exfat: Deprecated parameter 'namecase' [ 258.822485][ T4733] exfat: Deprecated parameter 'utf8' [ 258.900722][ T4733] exFAT-fs (loop0): failed to load upcase table (idx : 0x00012153, chksum : 0xc3dffc2e, utbl_chksum : 0xe619d30d) [ 258.922446][ T308] hid-thrustmaster 0003:044F:B65D.0039: item fetching failed at offset 3/7 [ 258.931435][ T308] hid-thrustmaster 0003:044F:B65D.0039: parse failed with error -22 [ 258.939450][ T30] kauditd_printk_skb: 188 callbacks suppressed [ 258.939464][ T30] audit: type=1400 audit(1723977808.891:1725): avc: denied { mount } for pid=4732 comm="syz.0.1143" name="/" dev="loop0" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 258.944542][ T308] hid-thrustmaster: probe of 0003:044F:B65D.0039 failed with error -22 [ 259.046379][ T404] usb 2-1: USB disconnect, device number 23 [ 259.133207][ T30] audit: type=1400 audit(1723977809.081:1726): avc: denied { write } for pid=4732 comm="syz.0.1143" name="/" dev="loop0" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 259.195078][ T30] audit: type=1400 audit(1723977809.081:1727): avc: denied { add_name } for pid=4732 comm="syz.0.1143" name="memory.events" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 259.216706][ T30] audit: type=1400 audit(1723977809.081:1728): avc: denied { associate } for pid=4732 comm="syz.0.1143" name="memory.events" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 259.242855][ T30] audit: type=1400 audit(1723977809.111:1729): avc: denied { append open } for pid=4732 comm="syz.0.1143" path="/24/file1/memory.events" dev="loop0" ino=1048819 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 259.267527][ T30] audit: type=1400 audit(1723977809.121:1730): avc: denied { write } for pid=4732 comm="syz.0.1143" name="memory.events" dev="loop0" ino=1048819 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 259.290692][ T30] audit: type=1400 audit(1723977809.131:1731): avc: denied { create } for pid=4732 comm="syz.0.1143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 259.385361][ T45] device bridge_slave_1 left promiscuous mode [ 259.391314][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.400534][ T45] device bridge_slave_0 left promiscuous mode [ 259.403547][ T4748] input: syz0 as /devices/virtual/input/input25 [ 259.406546][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.423816][ T45] device veth1_macvtap left promiscuous mode [ 259.429741][ T45] device veth0_vlan left promiscuous mode [ 259.522787][ T30] audit: type=1400 audit(1723977809.471:1732): avc: denied { unmount } for pid=4257 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 259.911194][ T30] audit: type=1326 audit(1723977809.861:1733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4752 comm="syz.4.1151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb82a6b2e79 code=0x7ffc0000 [ 259.935537][ T30] audit: type=1326 audit(1723977809.861:1734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4752 comm="syz.4.1151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb82a6b2e79 code=0x7ffc0000 [ 260.014980][ T3056] usb 3-1: Found UVC 0.00 device syz (18ec:3288) [ 260.034946][ T3056] usb 3-1: No valid video chain found. [ 260.040757][ T3056] usb 3-1: USB disconnect, device number 33 [ 260.075593][ T4755] loop1: detected capacity change from 0 to 40427 [ 260.117595][ T4755] F2FS-fs (loop1): Found nat_bits in checkpoint [ 260.145745][ T4755] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 260.689621][ T4770] loop0: detected capacity change from 0 to 40427 [ 260.699982][ T4769] loop2: detected capacity change from 0 to 40427 [ 260.735427][ T4770] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 260.735426][ T4769] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 260.735450][ T4770] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 260.743002][ T4769] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 260.765654][ T4770] F2FS-fs (loop0): invalid crc value [ 260.768038][ T4769] F2FS-fs (loop2): invalid crc value [ 260.773179][ T4770] F2FS-fs (loop0): Found nat_bits in checkpoint [ 260.813672][ T4583] attempt to access beyond end of device [ 260.813672][ T4583] loop1: rw=524288, want=45072, limit=40427 [ 260.816257][ T4770] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 260.825137][ T4583] attempt to access beyond end of device [ 260.825137][ T4583] loop1: rw=0, want=45072, limit=40427 [ 260.831928][ T4770] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 260.848575][ T4769] F2FS-fs (loop2): Found nat_bits in checkpoint [ 260.857357][ T4583] attempt to access beyond end of device [ 260.857357][ T4583] loop1: rw=2049, want=45104, limit=40427 [ 260.915587][ T4769] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 260.922486][ T4769] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 261.102704][ T4786] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.109599][ T4786] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.116818][ T4786] device bridge_slave_0 entered promiscuous mode [ 261.123477][ T4786] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.130325][ T4786] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.137607][ T4786] device bridge_slave_1 entered promiscuous mode [ 261.205859][ T4786] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.209981][ T4791] loop4: detected capacity change from 0 to 16 [ 261.212847][ T4786] bridge0: port 2(bridge_slave_1) entered forwarding state [ 261.225956][ T4786] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.232697][ T4786] bridge0: port 1(bridge_slave_0) entered forwarding state [ 261.258316][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 261.266508][ T20] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.273631][ T20] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.296238][ T4791] erofs: (device loop4): erofs_read_inode: bogus i_mode (0) @ nid 36 [ 261.305891][ T3056] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 261.313913][ T3056] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.320775][ T3056] bridge0: port 1(bridge_slave_0) entered forwarding state [ 261.328988][ T3056] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 261.337063][ T3056] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.343907][ T3056] bridge0: port 2(bridge_slave_1) entered forwarding state [ 261.351108][ T3056] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 261.365202][ T3056] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 261.381456][ T4786] device veth0_vlan entered promiscuous mode [ 261.393595][ T4786] device veth1_macvtap entered promiscuous mode [ 261.401741][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 261.410454][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 261.418312][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 261.425923][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 261.433224][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 261.453975][ T3056] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 261.472374][ T3056] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 261.605460][ T45] device bridge_slave_1 left promiscuous mode [ 261.611480][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.635289][ T45] device bridge_slave_0 left promiscuous mode [ 261.641216][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.664998][ T45] device veth1_macvtap left promiscuous mode [ 261.670906][ T45] device veth0_vlan left promiscuous mode [ 261.851025][ T4794] loop2: detected capacity change from 0 to 128 [ 261.887073][ T4794] EXT4-fs (loop2): mounted filesystem without journal. Opts: journal_dev=0x0000000000000000,nouid32,,errors=continue. Quota mode: none. [ 261.901631][ T4794] ext4 filesystem being mounted at /47/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 262.334955][ T455] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 262.575163][ T455] usb 3-1: Using ep0 maxpacket: 16 [ 262.695177][ T455] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 262.703174][ T455] usb 3-1: config 0 has no interface number 0 [ 262.709226][ T455] usb 3-1: config 0 interface 2 altsetting 0 endpoint 0xB has invalid maxpacket 24929, setting to 1024 [ 262.720128][ T455] usb 3-1: config 0 interface 2 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 262.805909][ T4814] loop0: detected capacity change from 0 to 512 [ 262.845072][ T455] usb 3-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice= 0.88 [ 262.853927][ T455] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 262.862398][ T455] usb 3-1: Product: syz [ 262.866556][ T455] usb 3-1: SerialNumber: syz [ 262.967901][ T4814] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=2802c018, mo2=0002] [ 262.977449][ T4814] System zones: 0-2, 18-18, 34-35 [ 263.012098][ T455] usb 3-1: config 0 descriptor?? [ 263.020522][ T4814] EXT4-fs (loop0): mounted filesystem without journal. Opts: lazytime,noinit_itable,debug,,errors=continue. Quota mode: writeback. [ 263.034237][ T4814] ext4 filesystem being mounted at /30/file0 supports timestamps until 2038 (0x7fffffff) [ 263.044070][ T4794] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 263.164994][ T308] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 263.395546][ T455] usb 3-1: invalid MIDI in EP 0 [ 263.400473][ T455] snd-usb-audio: probe of 3-1:0.2 failed with error -22 [ 263.408173][ T455] usb 3-1: USB disconnect, device number 34 [ 263.695004][ T308] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 263.865006][ T308] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 263.884095][ T308] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.892546][ T308] usb 5-1: Product: syz [ 263.912677][ T308] usb 5-1: Manufacturer: syz [ 263.917350][ T308] usb 5-1: SerialNumber: syz [ 264.028293][ T30] kauditd_printk_skb: 71 callbacks suppressed [ 264.028320][ T30] audit: type=1400 audit(1723977813.971:1806): avc: denied { setopt } for pid=4826 comm="syz.0.1164" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 264.265774][ T4831] loop2: detected capacity change from 0 to 40427 [ 264.305574][ T4831] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 264.313186][ T4831] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 264.322486][ T4831] F2FS-fs (loop2): invalid crc value [ 264.329184][ T4831] F2FS-fs (loop2): Found nat_bits in checkpoint [ 264.356971][ T4815] netem: change failed [ 264.363026][ T4831] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 264.369935][ T4831] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 264.615984][ T4815] UDC core: couldn't find an available UDC or it's busy: -16 [ 264.623345][ T4815] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 264.674980][ T308] cdc_ncm 5-1:1.0: bind() failure [ 264.680735][ T308] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 264.687521][ T308] cdc_ncm 5-1:1.1: bind() failure [ 264.693080][ T308] usb 5-1: USB disconnect, device number 27 [ 264.935578][ T4844] loop1: detected capacity change from 0 to 512 [ 264.985913][ T4844] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=2802c018, mo2=0002] [ 264.993762][ T4844] System zones: 0-2, 18-18, 34-35 [ 264.999267][ T4844] EXT4-fs (loop1): mounted filesystem without journal. Opts: lazytime,noinit_itable,debug,,errors=continue. Quota mode: writeback. [ 265.012585][ T4844] ext4 filesystem being mounted at /3/file0 supports timestamps until 2038 (0x7fffffff) [ 265.023034][ T30] audit: type=1400 audit(1723977814.981:1807): avc: denied { write } for pid=82 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 265.077674][ T30] audit: type=1400 audit(1723977814.981:1808): avc: denied { remove_name } for pid=82 comm="syslogd" name="messages" dev="tmpfs" ino=10 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 265.100170][ T30] audit: type=1400 audit(1723977814.981:1809): avc: denied { rename } for pid=82 comm="syslogd" name="messages" dev="tmpfs" ino=10 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 265.122151][ T30] audit: type=1400 audit(1723977814.981:1810): avc: denied { add_name } for pid=82 comm="syslogd" name="messages.0" dev="tmpfs" ino=9 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 265.144299][ T30] audit: type=1400 audit(1723977814.981:1811): avc: denied { unlink } for pid=82 comm="syslogd" name="messages.0" dev="tmpfs" ino=9 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 265.167049][ T30] audit: type=1400 audit(1723977814.981:1812): avc: denied { create } for pid=82 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 265.242367][ T4852] fuse: Bad value for 'fd' [ 265.247552][ T459] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 265.514953][ T459] usb 3-1: Using ep0 maxpacket: 32 [ 265.634980][ T459] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 265.645674][ T459] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 265.655234][ T459] usb 3-1: New USB device found, idVendor=0458, idProduct=0004, bcdDevice= 0.00 [ 265.664067][ T459] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.672414][ T459] usb 3-1: config 0 descriptor?? [ 266.192279][ T459] hid-generic 0003:0458:0004.003A: hidraw0: USB HID v0.00 Device [HID 0458:0004] on usb-dummy_hcd.2-1/input0 [ 266.313224][ T4863] loop1: detected capacity change from 0 to 16 [ 266.348190][ T4863] erofs: (device loop1): erofs_read_inode: bogus i_mode (0) @ nid 36 [ 266.354236][ T308] usb 3-1: USB disconnect, device number 35 [ 267.452802][ T30] audit: type=1400 audit(1723977817.401:1813): avc: denied { mount } for pid=4870 comm="syz.2.1176" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 267.815042][ T308] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 268.055066][ T308] usb 5-1: Using ep0 maxpacket: 8 [ 268.184985][ T308] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 268.193842][ T308] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.202389][ T308] usb 5-1: config 0 descriptor?? [ 268.862703][ T30] audit: type=1326 audit(1723977818.811:1814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4879 comm="syz.2.1180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe339eb7e79 code=0x7ffc0000 [ 268.889848][ T30] audit: type=1326 audit(1723977818.811:1815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4879 comm="syz.2.1180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe339eb7e79 code=0x7ffc0000 [ 268.913244][ T308] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 268.923114][ T308] asix: probe of 5-1:0.0 failed with error -61 [ 269.034973][ T4883] loop0: detected capacity change from 0 to 40427 [ 269.085845][ T4883] F2FS-fs (loop0): Found nat_bits in checkpoint [ 269.143095][ T4883] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 269.750679][ T4257] attempt to access beyond end of device [ 269.750679][ T4257] loop0: rw=524288, want=45072, limit=40427 [ 269.761946][ T4257] attempt to access beyond end of device [ 269.761946][ T4257] loop0: rw=0, want=45072, limit=40427 [ 269.776483][ T4257] attempt to access beyond end of device [ 269.776483][ T4257] loop0: rw=2049, want=45104, limit=40427 [ 269.988638][ T4902] loop2: detected capacity change from 0 to 512 [ 270.035224][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 270.035240][ T30] audit: type=1400 audit(1723977819.991:1840): avc: denied { mounton } for pid=4899 comm="syz.2.1183" path="/52/file0" dev="tmpfs" ino=302 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 270.066835][ T4902] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 270.077725][ T4902] ext4 filesystem being mounted at /52/file0 supports timestamps until 2038 (0x7fffffff) [ 270.091024][ T4903] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.097893][ T4903] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.105013][ T4903] device bridge_slave_0 entered promiscuous mode [ 270.113253][ T4903] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.120102][ T4903] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.127215][ T4903] device bridge_slave_1 entered promiscuous mode [ 270.149628][ T4902] loop2: detected capacity change from 0 to 512 [ 270.176873][ T3056] usb 5-1: USB disconnect, device number 28 [ 270.182963][ T4903] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.189808][ T4903] bridge0: port 2(bridge_slave_1) entered forwarding state [ 270.196907][ T4903] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.203685][ T4903] bridge0: port 1(bridge_slave_0) entered forwarding state [ 270.215622][ T4902] SELinux: security_context_str_to_sid(sysadm_u) failed for (dev ?, type ?) errno=-22 [ 270.226565][ T4902] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 270.233681][ T4902] EXT4-fs (loop2): Unrecognized mount option "dont_appraise" or missing value [ 270.235669][ T459] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 270.249967][ T459] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.257165][ T459] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.275631][ T459] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 270.283572][ T459] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.290420][ T459] bridge0: port 1(bridge_slave_0) entered forwarding state [ 270.297603][ T459] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 270.306177][ T459] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.313005][ T459] bridge0: port 2(bridge_slave_1) entered forwarding state [ 270.320209][ T459] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 270.367857][ T459] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 270.381209][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 270.392019][ T459] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 270.399775][ T459] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 270.407027][ T459] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 270.415322][ T4903] device veth0_vlan entered promiscuous mode [ 270.435337][ T459] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 270.450395][ T4903] device veth1_macvtap entered promiscuous mode [ 270.474412][ T459] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 270.517411][ T459] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 270.600281][ T45] device bridge_slave_1 left promiscuous mode [ 270.618353][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.628244][ T45] device bridge_slave_0 left promiscuous mode [ 270.634506][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.642731][ T45] device veth1_macvtap left promiscuous mode [ 270.648570][ T45] device veth0_vlan left promiscuous mode [ 271.934316][ T4927] loop4: detected capacity change from 0 to 16 [ 271.945114][ T642] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 272.019012][ T4927] erofs: (device loop4): erofs_read_inode: bogus i_mode (0) @ nid 36 [ 272.225612][ T642] usb 1-1: Using ep0 maxpacket: 32 [ 272.375166][ T642] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 272.385879][ T642] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 272.395416][ T642] usb 1-1: New USB device found, idVendor=0458, idProduct=0004, bcdDevice= 0.00 [ 272.404236][ T642] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.412723][ T642] usb 1-1: config 0 descriptor?? [ 272.906234][ T642] hid-generic 0003:0458:0004.003B: hidraw0: USB HID v0.00 Device [HID 0458:0004] on usb-dummy_hcd.0-1/input0 [ 273.106215][ T642] usb 1-1: USB disconnect, device number 26 [ 273.335640][ T4934] FAULT_INJECTION: forcing a failure. [ 273.335640][ T4934] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 273.348703][ T4934] CPU: 0 PID: 4934 Comm: syz.1.1187 Not tainted 5.15.153-syzkaller-00623-gda92e689a0c3 #0 [ 273.358579][ T4934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 273.368476][ T4934] Call Trace: [ 273.371597][ T4934] [ 273.374387][ T4934] dump_stack_lvl+0x151/0x1c0 [ 273.378891][ T4934] ? io_uring_drop_tctx_refs+0x190/0x190 [ 273.384361][ T4934] dump_stack+0x15/0x20 [ 273.388349][ T4934] should_fail+0x3c6/0x510 [ 273.392605][ T4934] should_fail_usercopy+0x1a/0x20 [ 273.397462][ T4934] _copy_from_user+0x20/0xd0 [ 273.401888][ T4934] set_selection_user+0x8b/0xf0 [ 273.406573][ T4934] ? sel_loadlut+0x100/0x100 [ 273.411001][ T4934] ? security_capable+0x87/0xb0 [ 273.415691][ T4934] tioclinux+0x107/0x380 [ 273.419774][ T4934] vt_ioctl+0x40d/0x19f0 [ 273.423853][ T4934] ? __vt_event_wait+0x230/0x230 [ 273.428623][ T4934] ? selinux_file_ioctl+0x3cc/0x540 [ 273.433667][ T4934] ? __mutex_lock_slowpath+0x10/0x10 [ 273.438777][ T4934] ? selinux_file_alloc_security+0x120/0x120 [ 273.444593][ T4934] ? tty_jobctrl_ioctl+0x268/0xb10 [ 273.449540][ T4934] tty_ioctl+0x89f/0xc90 [ 273.453624][ T4934] ? tty_get_icount+0xa0/0xa0 [ 273.458129][ T4934] __se_sys_ioctl+0x114/0x190 [ 273.462639][ T4934] __x64_sys_ioctl+0x7b/0x90 [ 273.467066][ T4934] do_syscall_64+0x3d/0xb0 [ 273.471319][ T4934] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 273.477275][ T4934] RIP: 0033:0x7fe2847cee79 [ 273.481527][ T4934] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 273.500969][ T4934] RSP: 002b:00007fe28344c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 273.509218][ T4934] RAX: ffffffffffffffda RBX: 00007fe28496af80 RCX: 00007fe2847cee79 [ 273.517032][ T4934] RDX: 0000000020000100 RSI: 000000000000541c RDI: 0000000000000005 [ 273.524842][ T4934] RBP: 00007fe28344c090 R08: 0000000000000000 R09: 0000000000000000 [ 273.532655][ T4934] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 273.540465][ T4934] R13: 0000000000000000 R14: 00007fe28496af80 R15: 00007fff3751a658 [ 273.548278][ T4934] [ 275.162985][ T30] audit: type=1400 audit(1723977825.111:1841): avc: denied { create } for pid=4943 comm="syz.0.1190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 275.224943][ T30] audit: type=1400 audit(1723977825.131:1842): avc: denied { create } for pid=4944 comm="syz.1.1192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 275.260162][ T30] audit: type=1400 audit(1723977825.131:1843): avc: denied { read } for pid=4944 comm="syz.1.1192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 275.279358][ T30] audit: type=1400 audit(1723977825.141:1844): avc: denied { getopt } for pid=4943 comm="syz.0.1190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 275.298808][ T30] audit: type=1400 audit(1723977825.141:1845): avc: denied { map } for pid=4943 comm="syz.0.1190" path="/dev/bus/usb/003/001" dev="devtmpfs" ino=146 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 275.322859][ T30] audit: type=1400 audit(1723977825.141:1846): avc: denied { execmod } for pid=4943 comm="syz.0.1190" path="/dev/bus/usb/003/001" dev="devtmpfs" ino=146 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 275.361568][ T30] audit: type=1400 audit(1723977825.141:1847): avc: denied { execute } for pid=4943 comm="syz.0.1190" path="/dev/bus/usb/003/001" dev="devtmpfs" ino=146 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 275.385995][ T30] audit: type=1326 audit(1723977825.141:1848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4947 comm="syz.2.1193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe339eb7e79 code=0x7ffc0000 [ 275.409181][ T30] audit: type=1326 audit(1723977825.151:1849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4947 comm="syz.2.1193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe339eb7e79 code=0x7ffc0000 [ 275.433126][ T30] audit: type=1326 audit(1723977825.151:1850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4947 comm="syz.2.1193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe339eb7e79 code=0x7ffc0000 [ 275.482467][ T4957] loop4: detected capacity change from 0 to 1024 [ 275.545653][ T4957] EXT4-fs (loop4): mounted filesystem without journal. Opts: discard,barrier,resuid=0x0000000000000000,noblock_validity,minixdf,errors=remount-ro,journal_ioprio=0x0000000000000006,data_err=abort,. Quota mode: writeback. [ 275.735396][ T3056] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 276.004941][ T3056] usb 2-1: Using ep0 maxpacket: 16 [ 276.135082][ T3056] usb 2-1: config 0 has an invalid descriptor of length 14, skipping remainder of the config [ 276.145221][ T3056] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 276.158007][ T3056] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 276.166825][ T3056] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.175132][ T3056] usb 2-1: config 0 descriptor?? [ 276.215502][ T3056] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 276.794996][ T642] usb 2-1: USB disconnect, device number 24 SYZFAIL: mmap of output file failed want 0x1b2bd20000, got 0xffffffffffffffff (errno 13: Permission denied) SYZFAIL: mmap of output file failed want 0x1b2c120000, got 0xffffffffffffffff (errno 13: Permission denied) SYZFAIL: mmap of output file failed want 0x1b2c620000, got 0xffffffffffffffff (errno 13: Permission denied) SYZFAIL: mmap of output file failed want 0x1b2c920000, got 0xffffffffffffffff (errno 13: Permission denied) SYZFAIL: mmap of output file failed want 0x1b2d820000, got 0xffffffffffffffff (errno 13: Permission denied) SYZFAIL: mmap of output file failed want 0x1b2ea20000, got 0xffffffffffffffff (errno 13: Permission denied) SYZFAIL: mmap of output file failed want 0x1b2f420000, got 0xffffffffffffffff (errno 13: Permission denied) SYZFAIL: mmap of output file failed want 0x1b30020000, got 0xffffffffffffffff (errno 13: Permission denied) SYZFAIL: mmap of output file failed want 0x1b31520000, got 0xffffffffffffffff (errno 13: Permission denied) SYZFAIL: mmap of output file failed want 0x1b32420000, got 0xffffffffffffffff (errno 13: Permission denied) SYZFAIL: mmap of output file failed want 0x1b33220000, got 0xffffffffffffffff (errno 13: Permission denied) SYZFAIL: mmap of output file failed want 0x1b2bd20000, got 0xffffffffffffffff (errno 13: Permission denied) SYZFAIL: mmap of output file failed want 0x1b2c920000, got 0xffffffffffffffff (errno 13: Permission denied) SYZFAIL: mmap of output file failed want 0x1b2dd20000, got 0xffffffffffffffff (errno 13: Permission denied) SYZFAIL: mmap of output file failed want 0x1b2ef20000, got 0xffffffffffffffff (errno 13: Permission denied) SYZFAIL: mmap of output file failed want 0x1b2fe20000, got 0xffffffffffffffff (errno 13: Permission denied) SYZFAIL: mmap of output file failed want 0x1b30a20000, got 0xffffffffffffffff (errno 13: Permission denied) SYZFAIL: mmap of output file failed want 0x1b31f20000, got 0xffffffffffffffff (errno 13: Permission denied) SYZFAIL: mmap of output file failed want 0x1b32a20000, got 0xffffffffffffffff (errno 13: Permission denied) SYZFAIL: repeatedly failed to execute the program proc=3 req=1145 state=1 status=67 (errno 9: Bad file descriptor) [ 279.119679][ T4979] loop1: detected capacity change from 0 to 512 [ 279.209244][ T4980] bridge0: port 3(syz_tun) entered disabled state [ 279.216692][ T4980] device syz_tun left promiscuous mode [ 279.221960][ T4980] bridge0: port 3(syz_tun) entered disabled state [ 279.394923][ T3056] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 280.175504][ T45] device bridge_slave_1 left promiscuous mode [ 280.181420][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.188787][ T45] device bridge_slave_0 left promiscuous mode [ 280.194692][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.202413][ T45] device veth1_macvtap left promiscuous mode [ 280.208256][ T45] device veth0_vlan left promiscuous mode [ 281.855746][ T45] device bridge_slave_1 left promiscuous mode [ 281.861664][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.869003][ T45] device bridge_slave_0 left promiscuous mode [ 281.874951][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 281.882711][ T45] device bridge_slave_1 left promiscuous mode [ 281.888676][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.895929][ T45] device bridge_slave_0 left promiscuous mode [ 281.901915][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 281.909561][ T45] device bridge_slave_1 left promiscuous mode [ 281.915505][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.922643][ T45] device bridge_slave_0 left promiscuous mode [ 281.928630][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 281.936500][ T45] device veth1_macvtap left promiscuous mode [ 281.942291][ T45] device veth0_vlan left promiscuous mode [ 281.948231][ T45] device veth1_macvtap left promiscuous mode [ 281.954029][ T45] device veth0_vlan left promiscuous mode [ 281.959804][ T45] device veth1_macvtap left promiscuous mode [ 281.965616][ T45] device veth0_vlan left promiscuous mode