last executing test programs: 3.152634736s ago: executing program 4 (id=781): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002ac0)={0x1a, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2008, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x10, &(0x7f0000000600)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r0}, 0x10) 3.054150007s ago: executing program 4 (id=784): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xfd8a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='rss_stat\x00', r1}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 2.737449839s ago: executing program 4 (id=791): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xfffffffd, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x2, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) 2.712693259s ago: executing program 4 (id=793): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioperm(0x0, 0x9da9, 0x3) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.58037358s ago: executing program 4 (id=797): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='veth1_to_bond\x00', 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r1, 0x2000009) sendfile(r0, r1, 0x0, 0x7ffff004) 2.408764782s ago: executing program 3 (id=801): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000100)='io_uring_register\x00', r1}, 0x10) r2 = syz_io_uring_setup(0x371d, &(0x7f0000000440)={0x0, 0x0, 0x400, 0xa, 0xffffff}, &(0x7f0000000380), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) 2.397178262s ago: executing program 3 (id=802): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 2.373305312s ago: executing program 3 (id=803): socket$packet(0x11, 0x2, 0x300) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x2000077d, &(0x7f00000002c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='sit0\x00', 0x10) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="d6", 0x1}, {&(0x7f00000006c0)="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", 0x594}], 0x2}, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000001200)="4583b7b2", 0x4}], 0x1) 2.058772084s ago: executing program 2 (id=811): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f00000005c0), 0x10) ioctl$SIOCGSTAMP(r0, 0x8906, 0x0) recvmmsg(r0, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x600100a2, 0x0) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f0000000580)=0x1, 0x4) sendmsg$can_raw(r0, &(0x7f0000000240)={&(0x7f0000000780)={0x1d, r1}, 0x10, &(0x7f0000000480)={&(0x7f0000000140)=@can={{0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, "5b7ba3698f28aaf0"}, 0x10}}, 0x0) 1.720220287s ago: executing program 4 (id=815): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x28de, 0x1102, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xd0, 0x0, [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x1, 0xf9, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0x50}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="200b4000000028b1"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f00000005c0)={0x14, &(0x7f00000001c0)={0x0, 0x0, 0xe, {0xe, 0x0, "6c46936e41c5838bf3d423ab"}}, 0x0}, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000002300), 0x1, 0x14a042) syz_open_dev$hidraw(&(0x7f0000002300), 0x0, 0x0) 1.719156657s ago: executing program 0 (id=825): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRES32, @ANYBLOB="1000"/17, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/21], 0x50) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) io_setup(0x6, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000500), 0xff, 0x485, &(0x7f0000001500)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) poll(0x0, 0x0, 0x5) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) epoll_create1(0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/bus/input/handlers\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="040100001e0001002bbd7000fddbdf25e00000020000000000000000000000002001000000000000000000000000000100000000000000", @ANYRES32=0x0, @ANYBLOB], 0x104}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000003c0)={@initdev, @local}, &(0x7f0000000400)=0xc) bpf$MAP_DELETE_BATCH(0x18, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xe30a}, 0x38) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x81008e, &(0x7f0000000700)=ANY=[@ANYBLOB="726f6469722c7379735f696d6d757461626c652c6572726f72733d636f6e74696e75652c756e695f786c6174653d312c73686f72746e616d653d77696e6e742c756e695f786c6174653d302c636865636b3d7374726963742c636f6465706167653d3935302c696f636861727365743d63703836302c696f636861727365743d63703433372c73686f72746e616d653d77696e6e742c696f636861727365743d63703933322c6e6f6e756d7461696c3d302c6e66732c726f6469722c757466383d312c73686f72746e616d653d6d697865642c757466383d302c00e23bb66df271dc392ed708", @ANYRES16], 0x44, 0x2c0, &(0x7f0000000d80)="$eJzs3T+LI2UYAPBn8nfUIinEQgQHtLjquL3WwqyyB4eplC200cPLgWyCsAcL/sHcVbY2ln4CQbC71g9g4zcQbAU7rzgYmcnMJblkc4mYXfV+v2affed55n3ezbtZdmHe/eiVycntLO7c//LXSNMkGoMYxMMk+tGI2r1YMvgmAID/sod5Hn/kM7vUJRGR7q8tAGCPdv75/+PeWwIA9uy99z9453A4PHo3y9K4Mfn67Lj4zb74OLt+eCc+iXGM4lr04lFE/tgsvpHn+bSVFfrx+mR6dlxUTj78ubr/4e8RZf1B9KJfDi3X3xweHWQzC/XToo/nq/kHRf31Vi9eXDP/zeHR9ZX6ZkR04sprVf8R9+Jq9OKXj+PTGMftsol5/VcHWfZ2/u2fX5R/0Sjqk+nZcbfMm8ubF/3aAAAAAAAAAAAAAAAAAAAAAADw/3W1OjunG+X5PcVQdf5O81HxSTuyWn/5fJ5ZfVLf6InzgaZ5fFefr3Mte6mbV4nz+la83IrW5awaAAAAAAAAAAAAAAAAAAAA/l3ufvb5ya3xeHS6Kdg6uT4NoH6s/6l3PicYjE4f1COvxubk7nyuRhWOR0Uja6uiWeckERvbKBbxt5rfPXiu7HnNpe9/2PWG6dNz2uvn+ieDesOc3ErWfw27j1+dtN4kDxZzOrHlXJ1Z8ObKpXzr7VfM1Vl7qbdFebI00nmhDKYbqqKxqbE3fotoR9R7PnlyFZ3zNvZ41C6DK+d/66U77eeVt4p0D28/AAAAAAAAAAAAAAAAAADAgtWH/Bfc31jayLt7awsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALtT8///vEEyr4tnIT29tSO7E6d1LXiIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADPgL8CAAD//y+HWEE=") mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) 1.718283517s ago: executing program 2 (id=817): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000100007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r1}, 0x10) mknod(&(0x7f0000000040)='./file1\x00', 0x0, 0x0) chmod(&(0x7f0000000080)='./file1\x00', 0x1258bab1c8332e9a) r2 = open(&(0x7f0000000300)='./file1\x00', 0x14927e, 0x0) fallocate(r2, 0x0, 0x0, 0x1001f0) 1.643338897s ago: executing program 2 (id=819): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) 1.542102328s ago: executing program 2 (id=822): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r1) sendmsg$NFC_CMD_GET_TARGET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r2, 0x1}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r1) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r1) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x14, r3, 0x1, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) 1.493108818s ago: executing program 2 (id=824): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001840)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)={'#! ', './file0'}, 0xfffffd49) gettid() bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYRES64=r0], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r3 = getpid() process_vm_readv(r3, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00003bb000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000440)="450f01cf66baf80cb8240c7187ef66bafc0cedc4832568482b00c4e2f9246a00420f01c9660fc7750c460fc7780f0f017634650f0055586968e500000000", 0x3e}], 0x1, 0x26, 0x0, 0x0) r7 = socket(0x10, 0x803, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001400b59500000000000000000a400000", @ANYRES32=r9, @ANYBLOB="14000200ff020000000000000000000000000001080008000207000014000100000000000000001d7000000000"], 0x48}}, 0x10) sendmsg$DCCPDIAG_GETSOCK(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f00000006c0)={0x114c, 0x13, 0x2, 0x70bd27, 0x25dfdbfd, {0x27, 0xa, 0x5, 0xb, {0x4e20, 0x4e22, [0x800, 0x3, 0x100, 0x5], [0x3, 0xe, 0x6, 0x8], r9, [0xff, 0x5]}, 0x5, 0x3}, [@INET_DIAG_REQ_BYTECODE={0x10, 0x1, "e805340e24e80d6823cb73af"}, @INET_DIAG_REQ_BYTECODE={0xf9, 0x1, "670c2191fe18fc21df01990938ad2a5a5cc791d0342fdb084b6d1606147bf801ee1f772b8f0e7bb4003f7853ad368c27dff75206282c1230f6268251b9c5dff371836cea2e00bdce934cb2fee910f2afeea44d8394d05e3d20c77afe21fd8da58fa65218098cb2b48b9acac66feceb70879b6718091a0e9e62b77f35c9d141bbd525c91a13d878e1e495b5f247ee58a6dc605c2ae956dc53901d4c380210dbd2787a768c539bbc2fb32757657561260e08206212b7e31b5719a0cd8a26e153540b097f5119e3dabef6ddac201b85884608c70115149dc76b384c50c1da6b6a8e9570246cf59945a42f3719e34c5ad5bbcff30f254c"}, @INET_DIAG_REQ_BYTECODE={0xff4, 0x1, "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"}]}, 0x114c}, 0x1, 0x0, 0x0, 0x4008011}, 0x20000040) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) write(r4, &(0x7f0000000000)="fa", 0xfffffdef) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f00000004c0)=@urb_type_control={0x2, {0xf, 0x1}, 0x1, 0x60, &(0x7f0000000340)={0x0, 0xf, 0x8, 0x5, 0x7a71}, 0x8, 0x7, 0x4, 0x0, 0x4, 0x91a9, &(0x7f0000000440)}) getrandom(&(0x7f0000000080)=""/240, 0xfffffffffffffe77, 0x0) 1.492644828s ago: executing program 3 (id=826): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0200ed080000000000000000080000000000", @ANYRES32, @ANYBLOB="1000"/18, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) io_setup(0x6, &(0x7f0000000680)) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000500), 0xff, 0x485, &(0x7f0000001500)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0xfffffffffffffe11, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) poll(0x0, 0x0, 0x5) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) epoll_create1(0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/bus/input/handlers\x00', 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="040100001e0001002bbd7000fddbdf25e00000020000000000000000000000002001000000000000000000000000000100000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x104}}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x18, &(0x7f0000000800)=ANY=[@ANYBLOB="180000000300000000000000ffff000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000182b00002610ae4bddadaab34d3d9e2392e27686a429a13dc22ae714436d283b2d87ac30bb2c235d85250310eb303a563874c306dcb061e32a2455fb", @ANYRES32=r5, @ANYBLOB="000000007f000000581a060001000000073802000500000018570000000000000000000000000000852000000300000018", @ANYRES32=r5, @ANYBLOB], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000003c0)={@initdev, @local}, &(0x7f0000000400)=0xc) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001680)=ANY=[@ANYBLOB], 0x48) bpf$MAP_DELETE_BATCH(0x18, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xe30a, r7}, 0x38) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x81008e, &(0x7f0000000700)=ANY=[@ANYBLOB="726f6469722c7379735f696d6d757461626c652c6572726f72733d636f6e74696e75652c756e695f786c6174653d312c73686f72746e616d653d77696e6e742c756e695f786c6174653d302c636865636b3d7374726963742c636f6465706167653d3935302c696f636861727365743d63703836302c696f636861727365743d63703433372c73686f72746e616d653d77696e6e742c696f636861727365743d63703933322c6e6f6e756d7461696c3d302c6e66732c726f6469722c757466383d312c73686f72746e616d653d6d697865642c757466383d302c00e23bb66df271dc392ed708", @ANYRES16], 0x44, 0x2c0, &(0x7f0000000d80)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) 625.798195ms ago: executing program 0 (id=828): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x10, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10) close(0x4) 550.988196ms ago: executing program 1 (id=829): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x510, 0x288, 0x288, 0xd0, 0x1b8, 0x358, 0x440, 0x440, 0x440, 0x440, 0x440, 0x6, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @empty, [0xffffffff, 0xff000000, 0xffffff00, 0xff000000], [0xffffff00, 0xff, 0xff, 0x7fffffff], 'hsr0\x00', 'xfrm0\x00', {0xff}, {0xff}, 0x29, 0x7, 0x2, 0x1}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x11}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@MARK={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x12}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x570) 550.478446ms ago: executing program 0 (id=830): sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x4000000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0) syz_emit_ethernet(0x8a, &(0x7f0000000240)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x7c, 0x0, 0x0, 0xfd, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x1a, 0x8, 0x2, 0x0, 0x4, {[@window={0x3, 0x3, 0x8f}, @window={0x3, 0x3, 0xac}, @timestamp={0x8, 0xa, 0x200, 0x9}, @sack={0x5, 0x2}, @fastopen={0x22, 0x2}, @timestamp={0x8, 0xa, 0x6, 0xda}, @sack={0x5, 0x1a, [0x5, 0x5, 0x1, 0x0, 0xc2, 0xfffffff7]}, @timestamp={0x8, 0xa, 0x3, 0xfffffffb}, @md5sig={0x13, 0x12, 'M\x00'}]}}}}}}}, 0x0) 485.240576ms ago: executing program 1 (id=831): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000), 0x8) close(r2) 484.704386ms ago: executing program 0 (id=832): r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = socket$unix(0x1, 0x2, 0x0) connect$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) mount$9p_fd(0x0, &(0x7f00000002c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000380), 0x80, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) connect$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 484.348446ms ago: executing program 1 (id=833): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="09000000070000000300000048"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r1}, &(0x7f00000002c0), &(0x7f0000000300)=r2}, 0x20) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) flistxattr(r0, 0x0, 0x0) 455.276206ms ago: executing program 1 (id=834): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000780)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0x3}, {}, {0x4, 0xfff2}}, [@filter_kind_options=@f_flow={{0x9}, {0x10, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0xf507}, @TCA_FLOW_ACT={0x4}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x408c014) 385.057596ms ago: executing program 3 (id=835): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) r2 = accept4$unix(r0, 0x0, 0x0, 0x0) recvmsg(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000480)=""/68, 0x40000}], 0x1}, 0x4c2103a0) 341.228547ms ago: executing program 1 (id=836): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, &(0x7f00000002c0)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r1}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) 340.742687ms ago: executing program 0 (id=837): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000780)={[{@errors_remount}, {@resuid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@resgid}, {@block_validity}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000040)=ANY=[], 0xfe37, 0x0) unlink(&(0x7f0000000180)='./file1\x00') 287.843088ms ago: executing program 1 (id=838): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001840)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)={'#! ', './file0'}, 0xfffffd49) gettid() bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYRES64=r0], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r3 = getpid() process_vm_readv(r3, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00003bb000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000440)="450f01cf66baf80cb8240c7187ef66bafc0cedc4832568482b00c4e2f9246a00420f01c9660fc7750c460fc7780f0f017634650f0055586968e500000000", 0x3e}], 0x1, 0x26, 0x0, 0x0) r7 = socket(0x10, 0x803, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001400b59500000000000000000a400000", @ANYRES32=r9, @ANYBLOB="14000200ff020000000000000000000000000001080008000207000014000100000000000000001d7000000000"], 0x48}}, 0x10) sendmsg$DCCPDIAG_GETSOCK(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f00000006c0)={0xf5c, 0x13, 0x2, 0x70bd27, 0x25dfdbfd, {0x27, 0xa, 0x5, 0xb, {0x4e20, 0x4e22, [0x800, 0x3, 0x100, 0x5], [0x3, 0xe, 0x6, 0x8], r9, [0xff, 0x5]}, 0x5, 0x3}, [@INET_DIAG_REQ_BYTECODE={0x10, 0x1, "e805340e24e80d6823cb73af"}, @INET_DIAG_REQ_BYTECODE={0xf9, 0x1, "670c2191fe18fc21df01990938ad2a5a5cc791d0342fdb084b6d1606147bf801ee1f772b8f0e7bb4003f7853ad368c27dff75206282c1230f6268251b9c5dff371836cea2e00bdce934cb2fee910f2afeea44d8394d05e3d20c77afe21fd8da58fa65218098cb2b48b9acac66feceb70879b6718091a0e9e62b77f35c9d141bbd525c91a13d878e1e495b5f247ee58a6dc605c2ae956dc53901d4c380210dbd2787a768c539bbc2fb32757657561260e08206212b7e31b5719a0cd8a26e153540b097f5119e3dabef6ddac201b85884608c70115149dc76b384c50c1da6b6a8e9570246cf59945a42f3719e34c5ad5bbcff30f254c"}, @INET_DIAG_REQ_BYTECODE={0xe04, 0x1, "9036cbce51f0ff22c8556fd40f57f8c00f66087915a13688d99c71275ee0cb2298bf3ac0d710e43ef83aa1babbd70efc9eb1f5dc0b3a529857a7f0e8a431eb4bbc7c2e122e77e5736cd5b0a79d4b15b50a2769f196e1891ad43ed9f4b134a55628a0f1da7a09a6cf9a62fd2afc0c3473e87a847b4cd816ef467f223abbc0241fd3e3eedf739ba5a9fc3c4bc6784b0e73b58bacf2eff1c3f03c4ccc25b0a8106501a3699bbbc96961b5bf678379f8677992fbbab223d96687e14449c5b1c51bff1c6b02a0a26d0e2b6ca0c3a96ba67790864bce16b1bbc9a31b99e59d3043ab3d14f9d451f95518fddaa37a277fe9be506231a7afd4c94b1586131797ab6f64cec7a3965b11ea37f1d48382b7abbc7cfdd6cb4e6f4bf590f23e19cbb1f425de3729ca059cf5f406e7c1579b4fc627f744a06505a0c1f344ad02b5bb56d8084b2c5820ee228895610d5183c2e1e948045ea9c86433473c9bcd81d5f87b1a4d9dfc62591d5f59a3031a19ed3afbd3b3cdaf8ed5cb4b37429b7703ca3d05766a223a87647286696c50417f54fad73afa3878cc0a7015bf6beeacd2294f7bbd9ece5f2d7a6a9f64735eae1e3d099bb9fc5a0f4f119519895f17ecf6861ea5a44172669b90886042ca2b7e916df6fe514c8fe16e085673273ed4273587ae610c2325ad5a578c89ecd684e4b7f412c681c5f89e8402517b2d59b143e73180cdb89d36f652730d79274f3fd86921d0464ad3c6c94429c9a464324c49a9b79fdad14b890623b81ea27a5574e20b22f489a7d1d2fe53af534ba4bdf51bfc5e1f06871378b91e0bd094363217b1a29bfa5f8610212e79b2f6a9f17ca5875acd9b6d17e5d795947597b524465f6423f0a907d2130dad636bd332008f2bdcb78a1499db9fd5666ec896a25c1b8193b1a584f9dd8467c1ec7d417dc0bc04a7e96f3d9e092546f5f4fb1d9e8da4de5a8182d0ecc6d253d887976c0181ed8e32ecf831bad05e5282af40ec1022302eb14ff3b01ab1d9b45be0200cd53858b971fdb3a8b1bf756b63c55de8ca0ecde8d064804d27ad1a97da38064a7c7bafc7c0308419c36e912bf941ed9d0c4496bb67024eb5fac51f17c8f10d2531538dd6201db2e7820c66d3e23446c96c12735db9ea6c610b8049dc0f51f2cecf5d44f8907cf0bf24cc530fe6f828014ca1bdbad0bf76869eef4563dbebc6baa45d81479ec4ba33a5cfeadee9d2100e0794286e790adc85462994e2ad60e2e4e2abb5399e7deea19d2db14b37776808c8270676ed3452dadbc1d2e375cc74695796a1c883486dfb5d0228b1bfe1da9fc91321ca552aac5127e70d83efbe582f64db2872602f7afeeb3a64cfb632a4f6c5a48408a71f27f4046d9d0ee1587b8c2453bda7327c8df82685d3143cc052a67641899a39c6f88be2acf8ed386e3572a835fd7abaf9b3fb0bc57b7ac555a3a6aeefd95ee6fd391fd2bfc9a07a0bd707276c5b83b1ed20f3593c3885b3587a6d68fb7e0b688e14b138ce9b4742eb8bb9f1abe69b924198cd6d2fa6f63667de7cbba6e128af848fb740eac5f193e94aa42fa65300a1013f443e3c263cb64ef840e1f49d5ab0bf94007e7895b422129cb57339e1721731aab65792b39a06657e855f371f9844c07278496fffb09ee7cab4ad851c21724b535962ee398c02819c099f89ad526b1e43cd826e24572b72d7839046b9a82423c619690cbea21865550e54ab3a8d9551d881d0fe4711322205d7f755d061bf3234c0cfa343047ca9ef1de840d45159d70087d6abec9400ba01cf6632453183a903979408f3ede2338bd4ff4c1458fc3dcaa0c2dd1954015cc2a4289b7e0c4ade2ef4ef31124c50bbf8e729589b0dd3a49e3ba433f19366d36450a6c0b5f0091b37c670ae39fe0c9fd456c8be93b7ff138fc07b88c6812e3cb15af76b6da158339e5226d216bf33818756e8c562ba03f0b63a0a5e53ee2ec37429936fcbbe7763a7160ce44b78e969db09c7e6979a5c8393b537a06ec3ecf9344ee2a430b015357f96459c7ee6a8c7e817556a40ece0e9d2f149a8521477c83b416621d14b162552e99c6d4c0d293b80df17b9b433b300a90d43fdef6c03fb4938b909e4d90b84f376ae82497f889b2acefefecbbd95120c0f81a287b9d0f11246b38909579ac6d35e89fe5dab76da59cbe388fd9b5c30fa2a7ea28be3ab3b63efaf28bf7487763bb5da26add087a6538849ada3262b72d333628d3ff3a5cb471d3be7ffcd89609dc5c078472d53b879da912f5aeeb602a71972689c716c42117c8bc6394eb1b30e9a86f6028cd6d2e3604ad1c9539f92537011ef7290cb0b88aec3444914a824e4107642e40647a931dc25117a334c8b15dfe5a82b8d647423cdb4ad8129dcf55100e4dd97a42aca75eff4c3cce034a4ecc0810b8e12cff26b18bda86ae1ee202d112e6fe408636f081d35047b820bab26d06231226f1fc6f0f418f92ccc645db7019ff798f6d28180a970d9a228997dfc3ce6ae32e867534fd8541b203d09e96b6efdbb2e893a6dfab2d061dc7476dd9356ccad56881d4e5eea119c3121be224a64373d45a4480149b79aeab554c560f80bb32238dff38c7d4bdd190e63585f33a2d7a591bc9c94e9305d0f3959a58ae77371ad0d47e85588e00dd660de97ba993b2166567ea5f81611c99f1e358b7b54d1789f4a04e899760bfbc8dd1432cd8643a2233bc34cc4f3b2075e521cb9465f894367d64adaacf9d79dda02844e8451858d1ea7382d38caeb8c4765813c6bb5cc88ab5ec6e1dc256d5b62642514d2f6129297cac294564954de1f636ed1a55b376f815d12ccd7999b8c00c2f3e6b2c233b5adaa0bd8fbcfb7dab093894ff713eea20eba84ef07d0624da089b75d191442d86494daaf506aa44294080026dbdab51650d0a55175ae60d3a1adf29ac8c630c319bb7fc49e2d76a4c6cfe422672f8d6126aa489f923a03c17ec3c1d9b9d7a78dfda1c07a1e5b7b49a8d7a475646fb4445e5e62adafda9dba6666d31f78e97172ce58832141216b690b71bc0f92e418ddad4902b908e7c63a8814a6abc6302ff82570d1aa3c21c0b89fee08860501e8d0e217e08e94e12e9a062cdc7d560c20018b952a0353868a06f7c9b886f69dc4ee2a90137b3fb556b1c59516354b053bc38b373598c43c6f3e24b504b767430802052896cd1d050c9827340b92b6b6d2795488a4bbfdb3bead07330f7ffb92a7dce13b0e7ffbc883655cd9707ea1f8f7cb39b2e54e65f6c4261a81bd5b49d9954d677764cd1b68274dad75f62154ec0924fb5833155992e4644e24b99ec1992862e588da45b492466fd0923442d968ce85fa1d7cca203baadc63a75c3ed6f5bd55c0e60814c9f6af9669e6e08de1d36c7072e899cfa762abfe96dbddb1b3cfb61fc85776d2802c32089a2c30df59f71b552252910403c081b0f0ddda07a3d1e4513004635e2887ffdac7024768b9a7d88e629eb47478c43e3dd35fd16765ca7dcd0ed27d7f8b34946167d661722031bf2a44a8360b91507ef6d0fa2092891d7ddb0e9020ce0fd038381b38e8d13eabe62c3dc8745ac0cf0c6beb44ed52f13ffa3a4f9e6350b5d45099af8b8293d08020c6831969474ae754cbcadd16db346e81a329ff94c274d251268b3f9590525c6c2d18290cbb176f4647b01b479c7d8b5c8a820d250aaff51ee427420a6b60f44ed60cf060d5146c6df60359e22c55c80bdd3f7e0d839a83894b651a04765318ce22ea9b95597e6e38439e6a0dbc6896eabc40183a0e7e08354dac8975a578e392cfda481b15fff6d0f9d87f4e980ee75842ff6bf2233e06810074b1b693de4b5fe2f3f17f81baa4d0a8b16c78acd76eeb37edc54c634f157fa5a4a67f4a50d63d4b2692f4bfa0f79d9fd323e6f457380f6d7346623ff3578a060a76a6e7c3b815a24ce03b5df0cf89d72623bfedd3267bc8431e57093cef691397c7c1435e124085d079a2b6d740db486368127831956f4a569794a8fca0991961e11262e06f310dda5e9759fee31076dc8ff7fdd45b5e7155aef729c123086d7bbbadfd524f05b01327c923be6ea2261836c105fd08d02f121a705c9d98d2c9d073d883244d94449025cd727a5fa9a3cc23764e4fe86536994e68b0c1a6bce5b9958b61a871bbe515732e94a1626d84716527363ea1457858b58ed0a84665a18c0dc12801dd6d53607b35125ee9e2e4a7d1ef8c899ba01fc8fc054977693b398f92fa597f44df5e1f8694f3c6fa1415808158331906f605a39c6474ebd30038cc040240eb738d32c0044a65ff75077ae3e57d4ab8a70945a7af3f63e4efa950d96e8c7995abb5de66f793cfcd7a2c3c73692e260edbdf4f584df92deb6ca1421fc4db33aaf1bfb3f38da326f87a97691482739b7f5e4b3f9dfb2da72a361b2bafc46135a8ba879c3aca09b7f9ce8ff3b1680e9f3d4c89544f76787ff80f0752b19bc992861ece54487c62bb43f2639da6e74e0cf1a6f1bd4324e74144cc8634e362b4c9abbc167d5fa60a7f2007ed6c00013109ed05fc3df33b7edd89c04694c67bd1882b8c785269b98aa33d153c68fb6e3917f10cbaadd16dffd096e83448ffab4743a558be8bba5e5583b8afadd9a49d4e62f06a011f775a9512fcfb48c09ff527d016acd6d14ebeb1646abccdd8b71b9c112844b68d9db228896b80757c2c9a785c95188afd362631f907b5985bbd521a63e881e3a2a3b35be3e44d1fd1e3f3b47ffd4b2705e24d0d9925880c756606b8326bb95e33fa55cc967d8381a1e0bb6936549501971fd9581d76b30e424f6fb2345c2482cbbb92d345a662e127bb73ac6cb17ed259cef22d50bfd3586bbac413fa27f56825ebdd245e5cdc0cc47eb94a2e7c23b3cb1cdb7ee624554262c3db5f88240a2e6b2c56cfcba328746928adff8458f2b61065bd5f3c4b2ce65fca8780cf90fcbb8a6dd915283b0fde0ddbd3f25e6585504ad29edf792f3f8c016c76fa972b0a8e58da230f16297495666f2ffff7d4ac4f1793a5ee3675697fb925c62c65715c252f86dc8e59aad05d59e579449eee95971609d3c586"}]}, 0xf5c}, 0x1, 0x0, 0x0, 0x4008011}, 0x20000040) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) write(r4, &(0x7f0000000000)="fa", 0xfffffdef) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f00000004c0)=@urb_type_control={0x2, {0xf, 0x1}, 0x1, 0x60, &(0x7f0000000340)={0x0, 0xf, 0x8, 0x5, 0x7a71}, 0x8, 0x7, 0x4, 0x0, 0x4, 0x91a9, &(0x7f0000000440)}) getrandom(&(0x7f0000000080)=""/240, 0xfffffffffffffe77, 0x0) 281.342937ms ago: executing program 3 (id=839): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0200ed080000000000000000080000000000", @ANYRES32, @ANYBLOB="1000"/18, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) io_setup(0x6, &(0x7f0000000680)) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000500), 0xff, 0x485, &(0x7f0000001500)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) poll(0x0, 0x0, 0x5) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) epoll_create1(0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/bus/input/handlers\x00', 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="040100001e0001002bbd7000fddbdf25e00000020000000000000000000000002001000000000000000000000000000100000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x104}}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x18, &(0x7f0000000800)=ANY=[@ANYBLOB="180000000300000000000000ffff000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000182b00002610ae4bddadaab34d3d9e2392e27686a429a13dc22ae714436d283b2d87ac30bb2c235d85250310eb303a563874c306dcb061e32a2455fb", @ANYRES32=r5, @ANYBLOB="000000007f000000581a060001000000073802000500000018570000000000000000000000000000852000000300000018", @ANYRES32=r5, @ANYBLOB], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000003c0)={@initdev, @local}, &(0x7f0000000400)=0xc) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001680)=ANY=[@ANYBLOB], 0x48) bpf$MAP_DELETE_BATCH(0x18, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xe30a, r7}, 0x38) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x81008e, &(0x7f0000000700)=ANY=[@ANYBLOB="726f6469722c7379735f696d6d757461626c652c6572726f72733d636f6e74696e75652c756e695f786c6174653d312c73686f72746e616d653d77696e6e742c756e695f786c6174653d302c636865636b3d7374726963742c636f6465706167653d3935302c696f636861727365743d63703836302c696f636861727365743d63703433372c73686f72746e616d653d77696e6e742c696f636861727365743d63703933322c6e6f6e756d7461696c3d302c6e66732c726f6469722c757466383d312c73686f72746e616d653d6d697865642c757466383d302c00e23bb66df271dc392ed708", @ANYRES16], 0x44, 0x2c0, &(0x7f0000000d80)="$eJzs3T+LI2UYAPBn8nfUIinEQgQHtLjquL3WwqyyB4eplC200cPLgWyCsAcL/sHcVbY2ln4CQbC71g9g4zcQbAU7rzgYmcnMJblkc4mYXfV+v2affed55n3ezbtZdmHe/eiVycntLO7c//LXSNMkGoMYxMMk+tGI2r1YMvgmAID/sod5Hn/kM7vUJRGR7q8tAGCPdv75/+PeWwIA9uy99z9453A4PHo3y9K4Mfn67Lj4zb74OLt+eCc+iXGM4lr04lFE/tgsvpHn+bSVFfrx+mR6dlxUTj78ubr/4e8RZf1B9KJfDi3X3xweHWQzC/XToo/nq/kHRf31Vi9eXDP/zeHR9ZX6ZkR04sprVf8R9+Jq9OKXj+PTGMftsol5/VcHWfZ2/u2fX5R/0Sjqk+nZcbfMm8ubF/3aAAAAAAAAAAAAAAAAAAAAAADw/3W1OjunG+X5PcVQdf5O81HxSTuyWn/5fJ5ZfVLf6InzgaZ5fFefr3Mte6mbV4nz+la83IrW5awaAAAAAAAAAAAAAAAAAAAA/l3ufvb5ya3xeHS6Kdg6uT4NoH6s/6l3PicYjE4f1COvxubk7nyuRhWOR0Uja6uiWeckERvbKBbxt5rfPXiu7HnNpe9/2PWG6dNz2uvn+ieDesOc3ErWfw27j1+dtN4kDxZzOrHlXJ1Z8ObKpXzr7VfM1Vl7qbdFebI00nmhDKYbqqKxqbE3fotoR9R7PnlyFZ3zNvZ41C6DK+d/66U77eeVt4p0D28/AAAAAAAAAAAAAAAAAADAgtWH/Bfc31jayLt7awsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALtT8///vEEyr4tnIT29tSO7E6d1LXiIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADPgL8CAAD//y+HWEE=") mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) 1.0837ms ago: executing program 0 (id=840): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0200ed080000000000000000080000000000", @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/21], 0x50) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) io_setup(0x6, &(0x7f0000000680)) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000500), 0xff, 0x485, &(0x7f0000001500)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) poll(0x0, 0x0, 0x5) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) epoll_create1(0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/bus/input/handlers\x00', 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="040100001e0001002bbd7000fddbdf25e00000020000000000000000000000002001000000000000000000000000000100000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x104}}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x18, &(0x7f0000000800)=ANY=[@ANYBLOB="180000000300000000000000ffff000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000182b00002610ae4bddadaab34d3d9e2392e27686a429a13dc22ae714436d283b2d87ac30bb2c235d85250310eb303a563874c306dcb061e32a2455fb", @ANYRES32=r4, @ANYBLOB="000000007f000000581a060001000000073802000500000018570000000000000000000000000000852000000300000018", @ANYRES32=r4, @ANYBLOB], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000003c0)={@initdev, @local}, &(0x7f0000000400)=0xc) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001680)=ANY=[@ANYBLOB], 0x48) bpf$MAP_DELETE_BATCH(0x18, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xe30a, r6}, 0x38) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x81008e, &(0x7f0000000700)=ANY=[@ANYBLOB="726f6469722c7379735f696d6d757461626c652c6572726f72733d636f6e74696e75652c756e695f786c6174653d312c73686f72746e616d653d77696e6e742c756e695f786c6174653d302c636865636b3d7374726963742c636f6465706167653d3935302c696f636861727365743d63703836302c696f636861727365743d63703433372c73686f72746e616d653d77696e6e742c696f636861727365743d63703933322c6e6f6e756d7461696c3d302c6e66732c726f6469722c757466383d312c73686f72746e616d653d6d697865642c757466383d302c00e23bb66df271dc392ed708", @ANYRES16], 0x44, 0x2c0, &(0x7f0000000d80)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) 0s ago: executing program 2 (id=841): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRES32, @ANYBLOB="1000"/17, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/21], 0x50) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) io_setup(0x6, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000500), 0xff, 0x485, &(0x7f0000001500)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) poll(0x0, 0x0, 0x5) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) epoll_create1(0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/bus/input/handlers\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="040100001e0001002bbd7000fddbdf25e00000020000000000000000000000002001000000000000000000000000000100000000000000", @ANYRES32=0x0, @ANYBLOB], 0x104}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000003c0)={@initdev, @local}, &(0x7f0000000400)=0xc) bpf$MAP_DELETE_BATCH(0x18, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xe30a}, 0x38) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x81008e, &(0x7f0000000700)=ANY=[@ANYBLOB="726f6469722c7379735f696d6d757461626c652c6572726f72733d636f6e74696e75652c756e695f786c6174653d312c73686f72746e616d653d77696e6e742c756e695f786c6174653d302c636865636b3d7374726963742c636f6465706167653d3935302c696f636861727365743d63703836302c696f636861727365743d63703433372c73686f72746e616d653d77696e6e742c696f636861727365743d63703933322c6e6f6e756d7461696c3d302c6e66732c726f6469722c757466383d312c73686f72746e616d653d6d697865642c757466383d302c00e23bb66df271dc392ed708", @ANYRES16], 0x44, 0x2c0, &(0x7f0000000d80)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.10.24' (ED25519) to the list of known hosts. [ 19.838112][ T28] audit: type=1400 audit(1741381577.141:66): avc: denied { mounton } for pid=251 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 19.839579][ T251] cgroup: Unknown subsys name 'net' [ 19.842751][ T28] audit: type=1400 audit(1741381577.141:67): avc: denied { mount } for pid=251 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 19.847345][ T28] audit: type=1400 audit(1741381577.151:68): avc: denied { unmount } for pid=251 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 19.847542][ T251] cgroup: Unknown subsys name 'devices' [ 19.940986][ T251] cgroup: Unknown subsys name 'hugetlb' [ 19.947406][ T251] cgroup: Unknown subsys name 'rlimit' [ 20.082100][ T28] audit: type=1400 audit(1741381577.391:69): avc: denied { setattr } for pid=251 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 20.105820][ T28] audit: type=1400 audit(1741381577.391:70): avc: denied { mounton } for pid=251 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 20.130624][ T28] audit: type=1400 audit(1741381577.391:71): avc: denied { mount } for pid=251 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 20.141553][ T281] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 20.163367][ T28] audit: type=1400 audit(1741381577.481:72): avc: denied { relabelto } for pid=281 comm="mkswap" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.188756][ T28] audit: type=1400 audit(1741381577.481:73): avc: denied { write } for pid=281 comm="mkswap" path="/root/swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.218118][ T28] audit: type=1400 audit(1741381577.521:74): avc: denied { read } for pid=251 comm="syz-executor" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.218614][ T251] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 20.243749][ T28] audit: type=1400 audit(1741381577.521:75): avc: denied { open } for pid=251 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.358371][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.365288][ T288] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.372736][ T288] device bridge_slave_0 entered promiscuous mode [ 21.392197][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.399218][ T288] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.406446][ T288] device bridge_slave_1 entered promiscuous mode [ 21.479319][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.486176][ T290] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.493570][ T290] device bridge_slave_0 entered promiscuous mode [ 21.502667][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.509667][ T290] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.516968][ T290] device bridge_slave_1 entered promiscuous mode [ 21.551356][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.558223][ T292] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.565783][ T292] device bridge_slave_0 entered promiscuous mode [ 21.585243][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.592484][ T292] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.599817][ T292] device bridge_slave_1 entered promiscuous mode [ 21.622309][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.629193][ T291] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.636861][ T291] device bridge_slave_0 entered promiscuous mode [ 21.646950][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.653850][ T291] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.661262][ T291] device bridge_slave_1 entered promiscuous mode [ 21.690438][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.697303][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.704909][ T289] device bridge_slave_0 entered promiscuous mode [ 21.726915][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.733860][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.741270][ T289] device bridge_slave_1 entered promiscuous mode [ 21.837950][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.844836][ T288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.851965][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.858816][ T288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.961180][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.968549][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.978632][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 21.986407][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 22.003539][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 22.011798][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.018629][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.026056][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 22.034523][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.041390][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.078900][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 22.102470][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 22.131279][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 22.152987][ T288] device veth0_vlan entered promiscuous mode [ 22.161327][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 22.169488][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 22.177903][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 22.186149][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 22.193754][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 22.201465][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 22.210401][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.217593][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.225909][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 22.234025][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.241183][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.248577][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 22.258154][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.265177][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.272423][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 22.279839][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 22.287455][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 22.305361][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 22.313669][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.320552][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.327925][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 22.336223][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.343108][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.350423][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 22.359343][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.366364][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.374432][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 22.394358][ T288] device veth1_macvtap entered promiscuous mode [ 22.410713][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 22.419718][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 22.427526][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 22.434941][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 22.443376][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 22.451703][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 22.459948][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 22.468453][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 22.477353][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.484385][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.491785][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 22.499995][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 22.508001][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 22.515632][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 22.523843][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 22.532151][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.539019][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.546352][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 22.554634][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 22.562692][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 22.570624][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 22.578917][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 22.601960][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 22.610070][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 22.617943][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 22.626266][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 22.634383][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 22.643478][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 22.651524][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 22.659659][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 22.680141][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 22.688297][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 22.696769][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 22.705152][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 22.713575][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 22.721785][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 22.735986][ T290] device veth0_vlan entered promiscuous mode [ 22.751680][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 22.760066][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 22.768114][ T288] request_module fs-gadgetfs succeeded, but still no fs? [ 22.768194][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 22.784976][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 22.793404][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 22.801869][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 22.810317][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 22.818424][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 22.826885][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 22.834186][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 22.846474][ T289] device veth0_vlan entered promiscuous mode [ 22.858097][ T291] device veth0_vlan entered promiscuous mode [ 22.870106][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 22.880771][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 22.889895][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 22.897751][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 22.906166][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 22.913913][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 22.921789][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 22.929486][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 22.943735][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 22.966123][ T291] device veth1_macvtap entered promiscuous mode [ 22.983579][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 22.992222][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.000543][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 23.008797][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.016900][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 23.024626][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 23.032816][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 23.041555][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 23.049883][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 23.058028][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.065454][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.073818][ T292] device veth0_vlan entered promiscuous mode [ 23.084904][ T289] device veth1_macvtap entered promiscuous mode [ 23.093395][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 23.101594][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.112866][ T290] device veth1_macvtap entered promiscuous mode [ 23.126497][ T292] device veth1_macvtap entered promiscuous mode [ 23.140492][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.149747][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 23.157917][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 23.166709][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 23.197801][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 23.205995][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 23.214514][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 23.222977][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 23.231584][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 23.239919][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 23.248336][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 23.256783][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 23.265261][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 23.273867][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 23.332678][ T310] kernel write not supported for file /2/attr/exec (pid: 310 comm: kworker/0:2) [ 23.362178][ T330] syz.3.4 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 23.362564][ T333] xt_hashlimit: size too large, truncated to 1048576 [ 23.395487][ T336] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 23.590087][ T350] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16'. [ 23.640228][ T350] device batadv_slave_0 entered promiscuous mode [ 23.688520][ T350] syz.4.16 (350) used greatest stack depth: 21416 bytes left [ 23.762369][ T355] netlink: 4 bytes leftover after parsing attributes in process `syz.4.17'. [ 23.857811][ T357] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.864891][ T357] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.895186][ T357] device bridge_slave_0 left promiscuous mode [ 23.903346][ T357] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.913787][ T357] device bridge_slave_1 left promiscuous mode [ 23.923595][ T357] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.031445][ T375] loop3: detected capacity change from 0 to 1024 [ 24.052076][ T375] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 24.062974][ T375] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (14919!=20869) [ 24.083391][ T375] EXT4-fs (loop3): invalid journal inode [ 24.089112][ T375] EXT4-fs (loop3): can't get journal size [ 24.095087][ T375] EXT4-fs error (device loop3): ext4_protect_reserved_inode:182: inode #3: comm syz.3.27: blocks 2-2 from inode overlap system zone [ 24.109111][ T375] EXT4-fs (loop3): failed to initialize system zone (-117) [ 24.116251][ T375] EXT4-fs (loop3): mount failed [ 24.196952][ T388] binfmt_misc: register: failed to install interpreter file ./file2 [ 24.229359][ T395] xt_bpf: check failed: parse error [ 24.284724][ T403] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 24.394320][ T420] loop0: detected capacity change from 0 to 256 [ 24.503108][ T433] syz.0.53[433] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 24.503184][ T433] syz.0.53[433] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 24.532537][ T435] Driver unsupported XDP return value 0 on prog (id 42) dev N/A, expect packet loss! [ 24.573361][ T439] loop0: detected capacity change from 0 to 128 [ 24.650014][ T439] syz.0.56: attempt to access beyond end of device [ 24.650014][ T439] loop0: rw=0, sector=121, nr_sectors = 120 limit=128 [ 24.665765][ T444] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.673213][ T444] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.695382][ T408] kworker/u4:4: attempt to access beyond end of device [ 24.695382][ T408] loop0: rw=1, sector=241, nr_sectors = 800 limit=128 [ 24.718841][ T444] device bridge_slave_1 left promiscuous mode [ 24.739458][ T444] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.752990][ T444] device bridge_slave_0 left promiscuous mode [ 24.759400][ T444] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.856647][ T28] kauditd_printk_skb: 77 callbacks suppressed [ 24.856663][ T28] audit: type=1400 audit(1741381582.161:153): avc: denied { mount } for pid=455 comm="syz.0.63" name="/" dev="ramfs" ino=16843 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 24.886024][ T28] audit: type=1400 audit(1741381582.161:154): avc: denied { unmount } for pid=455 comm="syz.0.63" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 24.956805][ T28] audit: type=1400 audit(1741381582.261:155): avc: denied { create } for pid=459 comm="syz.1.64" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 25.019790][ T440] syz.3.52 (440) used greatest stack depth: 20168 bytes left [ 25.028377][ T28] audit: type=1400 audit(1741381582.331:156): avc: denied { name_bind } for pid=466 comm="syz.2.69" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 25.041543][ T471] loop1: detected capacity change from 0 to 1024 [ 25.051243][ T469] loop4: detected capacity change from 0 to 256 [ 25.081174][ T471] EXT4-fs: Ignoring removed orlov option [ 25.092363][ T471] EXT4-fs: Ignoring removed nomblk_io_submit option [ 25.100228][ T28] audit: type=1400 audit(1741381582.381:157): avc: denied { node_bind } for pid=466 comm="syz.2.69" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 25.138135][ T28] audit: type=1400 audit(1741381582.411:158): avc: denied { ioctl } for pid=472 comm="syz.2.71" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=16939 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 25.177189][ T471] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 25.186454][ T28] audit: type=1400 audit(1741381582.491:159): avc: denied { mount } for pid=470 comm="syz.1.70" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 25.217004][ T28] audit: type=1400 audit(1741381582.511:160): avc: denied { setattr } for pid=470 comm="syz.1.70" path="/4/file1" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 25.240107][ T28] audit: type=1400 audit(1741381582.511:161): avc: denied { write } for pid=470 comm="syz.1.70" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 25.276160][ T291] EXT4-fs (loop1): unmounting filesystem. [ 25.308945][ T28] audit: type=1400 audit(1741381582.521:162): avc: denied { remove_name } for pid=470 comm="syz.1.70" name="file0" dev="loop1" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 25.610224][ T537] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 25.698815][ T310] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 25.717557][ T548] device ip6tnl1 entered promiscuous mode [ 25.816999][ T565] syz.3.109[565] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 25.817084][ T565] syz.3.109[565] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 25.882452][ T310] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 25.913514][ T310] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 25.923270][ T310] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 25.933695][ T310] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 25.942983][ T310] usb 5-1: config 0 descriptor?? [ 25.970218][ T582] x_tables: duplicate underflow at hook 4 [ 26.009386][ T586] netem: change failed [ 26.052350][ T589] netlink: 'syz.0.121': attribute type 15 has an invalid length. [ 26.143850][ T599] input: syz1 as /devices/virtual/input/input4 [ 26.269801][ T618] tmpfs: Unknown parameter 'nolazytimeun' [ 26.300994][ T621] serio: Serial port ptm0 [ 26.355691][ T310] cp2112 0003:10C4:EA90.0001: item fetching failed at offset 3/7 [ 26.364167][ T310] cp2112 0003:10C4:EA90.0001: parse failed [ 26.370365][ T310] cp2112: probe of 0003:10C4:EA90.0001 failed with error -22 [ 26.468537][ T646] loop2: detected capacity change from 0 to 128 [ 26.476958][ T646] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 26.486150][ T646] ext4 filesystem being mounted at /29/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 26.500018][ T646] fscrypt (loop2, inode 12): Direct key flag not allowed with different contents and filenames modes [ 26.541468][ T292] EXT4-fs (loop2): unmounting filesystem. [ 26.562571][ T295] usb 5-1: USB disconnect, device number 2 [ 28.108703][ C1] sched: RT throttling activated [ 28.112046][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 28.339904][ T674] process 'syz.2.155' launched './file0' with NULL argv: empty string added [ 28.343565][ T676] loop1: detected capacity change from 0 to 256 [ 28.368579][ T676] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 28.504180][ T691] loop0: detected capacity change from 0 to 512 [ 28.543212][ T695] loop4: detected capacity change from 0 to 128 [ 28.561000][ T691] EXT4-fs error (device loop0): ext4_orphan_get:1400: inode #15: comm syz.0.163: casefold flag without casefold feature [ 28.604312][ T691] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.163: couldn't read orphan inode 15 (err -117) [ 28.619361][ T695] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 28.627886][ T691] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 28.643542][ T695] ext4 filesystem being mounted at /16/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 28.704807][ T289] EXT4-fs (loop4): unmounting filesystem. [ 28.932979][ T703] netlink: 196 bytes leftover after parsing attributes in process `syz.0.163'. [ 29.059734][ T721] netlink: 4 bytes leftover after parsing attributes in process `syz.3.172'. [ 29.121039][ T723] netem: incorrect gi model size [ 29.128817][ T723] netem: change failed [ 29.291327][ T736] kvm: emulating exchange as write [ 29.416973][ T288] EXT4-fs (loop0): unmounting filesystem. [ 29.611545][ T762] syz.3.192[762] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 29.611627][ T762] syz.3.192[762] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 29.707507][ T774] loop1: detected capacity change from 0 to 512 [ 29.752008][ T774] EXT4-fs error (device loop1): ext4_orphan_get:1400: inode #15: comm syz.1.197: casefold flag without casefold feature [ 29.772068][ T774] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.197: couldn't read orphan inode 15 (err -117) [ 29.784900][ T774] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 29.889366][ T788] loop0: detected capacity change from 0 to 512 [ 29.912370][ T788] EXT4-fs error (device loop0): ext4_orphan_get:1426: comm syz.0.202: bad orphan inode 6 [ 29.922533][ T788] EXT4-fs (loop0): 1 orphan inode deleted [ 29.928311][ T788] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 29.937801][ T788] ext4 filesystem being mounted at /52/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 29.954931][ T782] netlink: 196 bytes leftover after parsing attributes in process `syz.1.197'. [ 29.986276][ T28] kauditd_printk_skb: 62 callbacks suppressed [ 29.986292][ T28] audit: type=1400 audit(1741381587.291:225): avc: denied { write } for pid=787 comm="syz.0.202" path="/52/file0/bus" dev="loop0" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 30.015647][ T28] audit: type=1400 audit(1741381587.291:226): avc: denied { map } for pid=787 comm="syz.0.202" path="/52/file0/bus" dev="loop0" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 30.038138][ T28] audit: type=1400 audit(1741381587.291:227): avc: denied { execute } for pid=787 comm="syz.0.202" path="/52/file0/bus" dev="loop0" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 30.061828][ T28] audit: type=1400 audit(1741381587.301:228): avc: denied { create } for pid=787 comm="syz.0.202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 30.062387][ T288] EXT4-fs (loop0): unmounting filesystem. [ 30.117171][ T797] loop0: detected capacity change from 0 to 256 [ 30.134842][ T797] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x4ec6003b, utbl_chksum : 0xe619d30d) [ 30.258989][ T801] serio: Serial port ptm0 [ 30.620777][ T809] netlink: 44 bytes leftover after parsing attributes in process `syz.4.207'. [ 30.717963][ T291] EXT4-fs (loop1): unmounting filesystem. [ 30.841534][ T817] loop1: detected capacity change from 0 to 512 [ 31.221070][ T817] EXT4-fs error (device loop1): ext4_orphan_get:1400: inode #15: comm syz.1.210: casefold flag without casefold feature [ 31.237511][ T817] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.210: couldn't read orphan inode 15 (err -117) [ 31.269969][ T28] audit: type=1400 audit(1741381588.581:229): avc: denied { sqpoll } for pid=826 comm="syz.0.213" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 31.295295][ T817] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 31.320956][ T830] loop2: detected capacity change from 0 to 512 [ 31.368038][ T830] EXT4-fs error (device loop2): ext4_orphan_get:1400: inode #15: comm syz.2.211: casefold flag without casefold feature [ 31.383276][ T830] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.211: couldn't read orphan inode 15 (err -117) [ 31.395752][ T830] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 31.570898][ T838] netlink: 196 bytes leftover after parsing attributes in process `syz.1.210'. [ 31.898062][ T291] EXT4-fs (loop1): unmounting filesystem. [ 31.931939][ T845] loop1: detected capacity change from 0 to 256 [ 31.954757][ T847] netlink: 196 bytes leftover after parsing attributes in process `syz.2.211'. [ 31.973017][ T845] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0x3eebdab2, utbl_chksum : 0xe619d30d) [ 32.005248][ T845] exFAT-fs (loop1): error, found bogus dentry(11) beyond unused empty group(10) (start_clu : 5, cur_clu : 5) [ 32.026640][ T845] exFAT-fs (loop1): Filesystem has been set read-only [ 32.039843][ T845] exFAT-fs (loop1): hint_cluster is invalid (521) [ 32.050977][ T845] exFAT-fs (loop1): error, invalid access to FAT (entry 0x00000208) [ 32.062253][ T845] exFAT-fs (loop1): error, failed to bmap (inode : ffff88810f831db0 iblock : 9, err : -5) [ 32.072447][ T845] exFAT-fs (loop1): error, invalid access to FAT (entry 0x00000208) [ 32.088820][ T845] exFAT-fs (loop1): error, invalid access to FAT (entry 0x00000208) [ 32.149818][ T28] audit: type=1400 audit(1741381589.461:230): avc: denied { getopt } for pid=850 comm="syz.1.218" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 32.199336][ T28] audit: type=1400 audit(1741381589.501:231): avc: denied { create } for pid=852 comm="syz.1.219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 32.226844][ T28] audit: type=1400 audit(1741381589.501:232): avc: denied { bind } for pid=852 comm="syz.1.219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 32.248455][ T28] audit: type=1400 audit(1741381589.501:233): avc: denied { name_bind } for pid=852 comm="syz.1.219" src=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 32.284021][ T28] audit: type=1400 audit(1741381589.501:234): avc: denied { node_bind } for pid=852 comm="syz.1.219" src=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 32.329295][ T292] EXT4-fs (loop2): unmounting filesystem. [ 32.335475][ T818] syz.4.208 (818) used greatest stack depth: 19656 bytes left [ 32.480545][ T862] loop2: detected capacity change from 0 to 4096 [ 32.587898][ T862] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 33.003095][ T292] EXT4-fs (loop2): unmounting filesystem. [ 33.558917][ T310] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 33.740430][ T310] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 33.755623][ T310] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 33.765659][ T310] usb 3-1: config 0 interface 0 has no altsetting 0 [ 33.775386][ T310] usb 3-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 33.784879][ T310] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.802316][ T310] usb 3-1: config 0 descriptor?? [ 33.877543][ T918] syz.3.242[918] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 33.877667][ T918] syz.3.242[918] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 34.357839][ T310] hid-steam 0003:28DE:1102.0002: unknown main item tag 0x0 [ 34.378039][ T310] hid-steam 0003:28DE:1102.0002: unknown main item tag 0x0 [ 34.385782][ T310] hid-steam 0003:28DE:1102.0002: : USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.2-1/input0 [ 34.405043][ T310] hid-steam 0003:28DE:1102.0003: unknown main item tag 0x0 [ 34.412621][ T310] hid-steam 0003:28DE:1102.0003: unknown main item tag 0x0 [ 34.425579][ T310] hid-steam 0003:28DE:1102.0003: hidraw0: USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.2-1/input0 [ 34.456717][ T942] netlink: 24 bytes leftover after parsing attributes in process `syz.1.251'. [ 34.486563][ T944] netlink: 20 bytes leftover after parsing attributes in process `syz.1.252'. [ 34.508777][ T310] hid-steam 0003:28DE:1102.0002: Steam Controller 'XXXXXXXXXX' connected [ 34.520008][ T310] input: Steam Controller as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:28DE:1102.0002/input/input5 [ 34.568502][ T875] input: Steam Controller as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:28DE:1102.0002/input/input6 [ 34.581627][ T310] usb 3-1: USB disconnect, device number 2 [ 34.612386][ T310] hid-steam 0003:28DE:1102.0002: Steam Controller 'XXXXXXXXXX' disconnected [ 34.988146][ T961] syz.0.258[961] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 34.989148][ T961] syz.0.258[961] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 35.072885][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 35.072909][ T28] audit: type=1400 audit(1741381592.381:237): avc: denied { create } for pid=960 comm="syz.0.258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 35.187034][ T28] audit: type=1400 audit(1741381592.441:238): avc: denied { connect } for pid=960 comm="syz.0.258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 35.237914][ T28] audit: type=1400 audit(1741381592.541:239): avc: denied { unlink } for pid=973 comm="syz.0.263" name="#1" dev="tmpfs" ino=388 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 35.513756][ T985] loop1: detected capacity change from 0 to 512 [ 35.597383][ T993] netlink: 12 bytes leftover after parsing attributes in process `syz.4.270'. [ 35.601450][ T985] EXT4-fs error (device loop1): ext4_orphan_get:1400: inode #15: comm syz.1.268: casefold flag without casefold feature [ 35.620097][ T985] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.268: couldn't read orphan inode 15 (err -117) [ 35.632136][ T985] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 35.653395][ T996] loop4: detected capacity change from 0 to 512 [ 35.669265][ T996] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #15: comm syz.4.271: casefold flag without casefold feature [ 35.682252][ T996] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.271: couldn't read orphan inode 15 (err -117) [ 36.060779][ T996] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 36.142935][ T999] netlink: 196 bytes leftover after parsing attributes in process `syz.1.268'. [ 36.438313][ T1010] netlink: 196 bytes leftover after parsing attributes in process `syz.4.271'. [ 36.536156][ T291] EXT4-fs (loop1): unmounting filesystem. [ 36.791177][ T289] EXT4-fs (loop4): unmounting filesystem. [ 37.011549][ T1023] device dummy0 entered promiscuous mode [ 37.052265][ T1023] device dummy0 left promiscuous mode [ 37.269531][ T1028] netlink: 28 bytes leftover after parsing attributes in process `syz.1.282'. [ 37.333657][ T1031] loop1: detected capacity change from 0 to 512 [ 37.355775][ T1031] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 37.388835][ T1031] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 37.412394][ T1031] EXT4-fs error (device loop1): ext4_orphan_get:1426: comm syz.1.283: bad orphan inode 131083 [ 37.423835][ T1031] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 37.464803][ T291] EXT4-fs (loop1): unmounting filesystem. [ 37.553939][ T1048] netlink: 'syz.4.290': attribute type 5 has an invalid length. [ 37.561784][ T1048] netlink: 7 bytes leftover after parsing attributes in process `syz.4.290'. [ 37.607436][ T1056] syz.4.294[1056] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 37.607520][ T1056] syz.4.294[1056] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 37.628199][ T1056] netlink: 96 bytes leftover after parsing attributes in process `syz.4.294'. [ 37.686755][ T28] audit: type=1400 audit(1741381594.991:240): avc: denied { name_bind } for pid=1060 comm="syz.2.296" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 37.745237][ T1068] loop1: detected capacity change from 0 to 1024 [ 37.753362][ T1068] EXT4-fs: Ignoring removed bh option [ 37.789830][ T1068] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 37.789943][ T1076] netlink: 'syz.0.303': attribute type 5 has an invalid length. [ 37.806126][ T1076] netlink: 7 bytes leftover after parsing attributes in process `syz.0.303'. [ 37.814920][ T28] audit: type=1400 audit(1741381595.111:241): avc: denied { read write } for pid=1067 comm="syz.1.300" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 37.854277][ T291] EXT4-fs (loop1): unmounting filesystem. [ 37.857614][ T28] audit: type=1400 audit(1741381595.111:242): avc: denied { open } for pid=1067 comm="syz.1.300" path="/38/file1/file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 38.650508][ T779] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 38.675856][ T1112] loop3: detected capacity change from 0 to 1024 [ 38.683267][ T1112] EXT4-fs: Ignoring removed bh option [ 38.700687][ T1112] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 38.744200][ T290] EXT4-fs (loop3): unmounting filesystem. [ 38.751811][ T28] audit: type=1400 audit(1741381596.061:243): avc: denied { create } for pid=1115 comm="syz.4.318" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 38.773084][ T28] audit: type=1400 audit(1741381596.081:244): avc: denied { link } for pid=1115 comm="syz.4.318" name="file1" dev="tmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 38.809485][ T28] audit: type=1400 audit(1741381596.121:245): avc: denied { unlink } for pid=289 comm="syz-executor" name="file0" dev="tmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 38.842715][ T779] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 38.860942][ T779] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 38.878716][ T779] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 38.892327][ T779] usb 1-1: New USB device found, idVendor=04d9, idProduct=a070, bcdDevice= 0.00 [ 38.902654][ T779] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 38.949712][ T779] usb 1-1: config 0 descriptor?? [ 39.391142][ T779] holtek_mouse 0003:04D9:A070.0004: unbalanced collection at end of report description [ 39.556738][ T779] holtek_mouse 0003:04D9:A070.0004: hid parse failed: -22 [ 39.706082][ T779] holtek_mouse: probe of 0003:04D9:A070.0004 failed with error -22 [ 39.846516][ T779] usb 1-1: USB disconnect, device number 2 [ 40.142093][ T28] audit: type=1400 audit(1741381597.451:246): avc: denied { bind } for pid=1164 comm="syz.0.337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 40.205132][ T1170] loop3: detected capacity change from 0 to 1024 [ 40.226675][ T1170] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 40.240216][ T1170] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869) [ 40.250238][ T1170] EXT4-fs (loop3): external journal device major/minor numbers have changed [ 40.259207][ T1170] EXT4-fs (loop3): filesystem has both journal inode and journal device! [ 40.268771][ T310] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 40.423470][ T28] audit: type=1400 audit(1741381597.731:247): avc: denied { mounton } for pid=1173 comm="syz.0.340" path="/81/file0" dev="incremental-fs" ino=449 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 40.479973][ T310] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 40.501737][ T310] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 40.523915][ T310] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 40.533843][ T310] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.542866][ T310] usb 3-1: config 0 descriptor?? [ 41.571010][ T310] uclogic 0003:256C:006D.0005: interface is invalid, ignoring [ 41.620304][ T1211] loop0: detected capacity change from 0 to 512 [ 41.698498][ T1211] EXT4-fs error (device loop0): ext4_orphan_get:1400: inode #15: comm syz.0.352: casefold flag without casefold feature [ 41.732752][ T1211] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.352: couldn't read orphan inode 15 (err -117) [ 41.744711][ T1211] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 41.774847][ T779] usb 3-1: USB disconnect, device number 3 [ 42.030436][ T1216] netlink: 196 bytes leftover after parsing attributes in process `syz.0.352'. [ 42.418507][ T1234] syz.2.361[1234] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 42.418594][ T1234] syz.2.361[1234] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 42.495479][ T1240] fuse: Bad value for 'fd' [ 42.534217][ T288] EXT4-fs (loop0): unmounting filesystem. [ 42.581310][ T28] audit: type=1400 audit(1741381599.891:248): avc: denied { write } for pid=1248 comm="syz.0.367" path="socket:[20248]" dev="sockfs" ino=20248 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 42.611611][ T1220] loop1: detected capacity change from 0 to 40427 [ 42.619833][ T1220] F2FS-fs (loop1): fault_injection options not supported [ 42.626780][ T1220] F2FS-fs (loop1): Image doesn't support compression [ 42.640206][ T1220] F2FS-fs (loop1): Image doesn't support compression [ 42.650193][ T1220] F2FS-fs (loop1): invalid crc value [ 42.655365][ T28] audit: type=1400 audit(1741381599.961:249): avc: denied { mounton } for pid=1252 comm="syz.3.369" path="/102/file0" dev="tmpfs" ino=552 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 42.679874][ T1220] F2FS-fs (loop1): Found nat_bits in checkpoint [ 42.823575][ T1220] F2FS-fs (loop1): Start checkpoint disabled! [ 42.838871][ T1220] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 43.246233][ T1275] syz.0.376[1275] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 43.246353][ T1275] syz.0.376[1275] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 43.290907][ T1277] loop0: detected capacity change from 0 to 512 [ 43.334442][ T1277] EXT4-fs error (device loop0): ext4_orphan_get:1400: inode #15: comm syz.0.378: casefold flag without casefold feature [ 43.349525][ T1277] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.378: couldn't read orphan inode 15 (err -117) [ 43.376850][ T1277] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 43.458616][ T1287] fuse: Bad value for 'fd' [ 43.692756][ T1294] netlink: 196 bytes leftover after parsing attributes in process `syz.0.378'. [ 43.948727][ T28] audit: type=1400 audit(1741381601.251:250): avc: denied { create } for pid=1298 comm="syz.4.384" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 44.093519][ T1307] input: syz0 as /devices/virtual/input/input7 [ 44.505494][ T288] EXT4-fs (loop0): unmounting filesystem. [ 44.528506][ T1313] netlink: 96 bytes leftover after parsing attributes in process `syz.4.390'. [ 45.175332][ T1321] loop2: detected capacity change from 0 to 40427 [ 45.194654][ T1321] F2FS-fs (loop2): fault_injection options not supported [ 45.213167][ T1321] F2FS-fs (loop2): Image doesn't support compression [ 45.228228][ T1321] F2FS-fs (loop2): Image doesn't support compression [ 45.247162][ T1321] F2FS-fs (loop2): invalid crc value [ 45.277909][ T1321] F2FS-fs (loop2): Found nat_bits in checkpoint [ 45.286400][ T1335] fuse: root generation should be zero [ 45.349003][ T1353] loop3: detected capacity change from 0 to 512 [ 45.359382][ T1321] F2FS-fs (loop2): Start checkpoint disabled! [ 45.365978][ T1321] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 45.395516][ T1353] EXT4-fs error (device loop3): ext4_orphan_get:1400: inode #15: comm syz.3.405: casefold flag without casefold feature [ 45.411092][ T1353] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.405: couldn't read orphan inode 15 (err -117) [ 45.429236][ T1353] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 45.651873][ T1367] netlink: 196 bytes leftover after parsing attributes in process `syz.3.405'. [ 46.218738][ T890] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 46.399043][ T290] EXT4-fs (loop3): unmounting filesystem. [ 46.429805][ T890] usb 1-1: config 0 has an invalid interface number: 20 but max is 1 [ 46.437825][ T890] usb 1-1: config 0 has an invalid interface number: 24 but max is 1 [ 46.463306][ T890] usb 1-1: config 0 has no interface number 0 [ 46.472412][ T890] usb 1-1: config 0 has no interface number 1 [ 46.494187][ T890] usb 1-1: config 0 interface 20 has no altsetting 0 [ 46.529127][ T890] usb 1-1: New USB device found, idVendor=14aa, idProduct=0201, bcdDevice=8b.1d [ 46.538039][ T890] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 46.581299][ T890] usb 1-1: config 0 descriptor?? [ 46.588073][ T1387] loop3: detected capacity change from 0 to 8192 [ 46.878894][ T28] audit: type=1400 audit(1741381604.121:251): avc: denied { watch watch_reads } for pid=1386 comm="syz.3.414" path="/107/file0/file0" dev="loop3" ino=1048605 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 47.010555][ T890] usb 1-1: string descriptor 0 read error: -71 [ 47.020488][ T890] usb 1-1: USB disconnect, device number 3 [ 47.177208][ T1410] loop1: detected capacity change from 0 to 512 [ 47.189215][ T1410] EXT4-fs error (device loop1): ext4_orphan_get:1400: inode #15: comm syz.1.426: casefold flag without casefold feature [ 47.201914][ T1410] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.426: couldn't read orphan inode 15 (err -117) [ 47.214321][ T1410] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 47.223296][ T28] audit: type=1400 audit(1741381604.541:252): avc: denied { mount } for pid=1409 comm="syz.1.426" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 47.482223][ T1429] netlink: 196 bytes leftover after parsing attributes in process `syz.1.426'. [ 47.757771][ T28] audit: type=1400 audit(1741381605.011:253): avc: denied { bind } for pid=1430 comm="syz.2.432" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 47.815418][ T1433] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.822887][ T1433] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.840754][ T1433] device bridge_slave_0 left promiscuous mode [ 47.847023][ T1433] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.881414][ T1433] device bridge_slave_1 left promiscuous mode [ 47.888023][ T1433] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.136839][ T28] audit: type=1400 audit(1741381605.441:254): avc: denied { unmount } for pid=291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 48.160583][ T291] EXT4-fs (loop1): unmounting filesystem. [ 48.174351][ T8] Bluetooth: hci0: Frame reassembly failed (-84) [ 48.994621][ T1469] netlink: 8 bytes leftover after parsing attributes in process `syz.2.445'. [ 49.151625][ T1481] xt_bpf: check failed: parse error [ 49.166962][ T1483] binfmt_misc: register: failed to install interpreter file ./file2 [ 49.211896][ T1491] loop2: detected capacity change from 0 to 256 [ 49.349525][ T1505] loop1: detected capacity change from 0 to 128 [ 49.391391][ T1505] syz.1.472: attempt to access beyond end of device [ 49.391391][ T1505] loop1: rw=0, sector=121, nr_sectors = 120 limit=128 [ 49.411393][ T408] kworker/u4:4: attempt to access beyond end of device [ 49.411393][ T408] loop1: rw=1, sector=241, nr_sectors = 800 limit=128 [ 50.218745][ T510] Bluetooth: hci0: command 0x1003 tx timeout [ 50.224659][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 50.950288][ T1570] loop0: detected capacity change from 0 to 512 [ 50.976105][ T1570] EXT4-fs error (device loop0): ext4_orphan_get:1400: inode #15: comm syz.0.489: casefold flag without casefold feature [ 50.997070][ T1570] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.489: couldn't read orphan inode 15 (err -117) [ 51.013134][ T1570] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 51.282412][ T1589] netlink: 196 bytes leftover after parsing attributes in process `syz.0.489'. [ 51.877155][ T288] EXT4-fs (loop0): unmounting filesystem. [ 52.083647][ T1603] device ip6tnl1 entered promiscuous mode [ 52.358937][ T779] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 52.550679][ T779] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 52.621541][ T779] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 52.685196][ T779] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 52.707462][ T779] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.732265][ T779] usb 1-1: config 0 descriptor?? [ 52.821414][ T1633] loop3: detected capacity change from 0 to 40427 [ 52.832733][ T1633] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 52.844509][ T1633] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 52.859941][ T1633] F2FS-fs (loop3): invalid crc value [ 52.875102][ T1633] F2FS-fs (loop3): Found nat_bits in checkpoint [ 52.960221][ T1633] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 52.968488][ T1633] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 53.011225][ T28] audit: type=1400 audit(1741381610.321:255): avc: denied { mounton } for pid=1632 comm="syz.3.513" path="/125/bus/file0" dev="loop3" ino=455 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 53.037743][ T28] audit: type=1400 audit(1741381610.321:256): avc: denied { write } for pid=1632 comm="syz.3.513" name="file0" dev="loop3" ino=455 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 53.037757][ T8] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 53.069913][ T8] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 53.077519][ T28] audit: type=1400 audit(1741381610.321:257): avc: denied { add_name } for pid=1632 comm="syz.3.513" name="work" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 53.149782][ T28] audit: type=1400 audit(1741381610.321:258): avc: denied { setattr } for pid=1632 comm="syz.3.513" name="work" dev="loop3" ino=457 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 53.176331][ T28] audit: type=1400 audit(1741381610.321:259): avc: denied { remove_name } for pid=1632 comm="syz.3.513" name="#7" dev="loop3" ino=459 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 53.201344][ T28] audit: type=1400 audit(1741381610.321:260): avc: denied { rename } for pid=1632 comm="syz.3.513" name="#7" dev="loop3" ino=459 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 53.231681][ T28] audit: type=1400 audit(1741381610.321:261): avc: denied { unlink } for pid=1632 comm="syz.3.513" name="#7" dev="loop3" ino=460 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 53.258930][ T28] audit: type=1400 audit(1741381610.321:262): avc: denied { unlink } for pid=1632 comm="syz.3.513" name="#8" dev="loop3" ino=459 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 53.282374][ T28] audit: type=1400 audit(1741381610.321:263): avc: denied { rename } for pid=1632 comm="syz.3.513" name="#9" dev="loop3" ino=462 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 53.305177][ T28] audit: type=1400 audit(1741381610.321:264): avc: denied { reparent } for pid=1632 comm="syz.3.513" name="#9" dev="loop3" ino=462 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 53.714048][ T1675] loop1: detected capacity change from 0 to 512 [ 53.724685][ T1675] EXT4-fs error (device loop1): ext4_orphan_get:1400: inode #15: comm syz.1.526: casefold flag without casefold feature [ 53.741246][ T1675] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.526: couldn't read orphan inode 15 (err -117) [ 53.751083][ T779] uclogic 0003:256C:006D.0006: interface is invalid, ignoring [ 53.760006][ T1675] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 54.030522][ T779] usb 1-1: USB disconnect, device number 4 [ 54.049344][ T1679] netlink: 196 bytes leftover after parsing attributes in process `syz.1.526'. [ 54.296927][ T1681] syz.3.527[1681] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 54.297046][ T1681] syz.3.527[1681] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 54.414617][ T1687] input: syz0 as /devices/virtual/input/input8 [ 55.023281][ T24] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 55.139995][ T291] EXT4-fs (loop1): unmounting filesystem. [ 55.330857][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 55.472080][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 55.488240][ T24] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 55.501814][ T24] usb 4-1: New USB device found, idVendor=04d9, idProduct=a070, bcdDevice= 0.00 [ 55.504173][ T1707] loop1: detected capacity change from 0 to 512 [ 55.511241][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.525672][ T24] usb 4-1: config 0 descriptor?? [ 55.547711][ T1707] EXT4-fs error (device loop1): ext4_orphan_get:1400: inode #15: comm syz.1.536: casefold flag without casefold feature [ 55.562567][ T1707] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.536: couldn't read orphan inode 15 (err -117) [ 55.577501][ T1707] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 55.587293][ T1714] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 55.632594][ T1716] xt_hashlimit: size too large, truncated to 1048576 [ 55.855600][ T1725] netlink: 196 bytes leftover after parsing attributes in process `syz.1.536'. [ 56.008358][ T24] holtek_mouse 0003:04D9:A070.0007: unbalanced collection at end of report description [ 56.078931][ T24] holtek_mouse 0003:04D9:A070.0007: hid parse failed: -22 [ 56.093269][ T24] holtek_mouse: probe of 0003:04D9:A070.0007 failed with error -22 [ 56.213566][ T24] usb 4-1: USB disconnect, device number 2 [ 56.451809][ T291] EXT4-fs (loop1): unmounting filesystem. [ 56.733059][ T1753] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 56.833957][ T1759] input: syz1 as /devices/virtual/input/input9 [ 57.028118][ T1769] loop2: detected capacity change from 0 to 128 [ 57.290418][ T1769] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 57.352554][ T1769] ext4 filesystem being mounted at /119/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 57.421823][ T292] EXT4-fs (loop2): unmounting filesystem. [ 57.661381][ T1792] netlink: 4 bytes leftover after parsing attributes in process `syz.4.565'. [ 57.864195][ T1802] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 57.928284][ T1804] usb usb2: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 58.015657][ T1808] loop1: detected capacity change from 0 to 128 [ 58.061304][ T1808] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 58.070162][ T1309] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 58.078130][ T1808] ext4 filesystem being mounted at /95/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 58.109913][ T1812] serio: Serial port ptm0 [ 58.128574][ T291] EXT4-fs (loop1): unmounting filesystem. [ 58.269831][ T1309] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 58.289002][ T1309] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 58.299642][ T1309] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 58.313673][ T1309] usb 3-1: New USB device found, idVendor=04d9, idProduct=a070, bcdDevice= 0.00 [ 58.345078][ T1309] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.443751][ T1309] usb 3-1: config 0 descriptor?? [ 58.738798][ T890] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 58.854497][ T1309] holtek_mouse 0003:04D9:A070.0008: unbalanced collection at end of report description [ 58.869664][ T1309] holtek_mouse 0003:04D9:A070.0008: hid parse failed: -22 [ 58.886177][ T1309] holtek_mouse: probe of 0003:04D9:A070.0008 failed with error -22 [ 58.929888][ T890] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 255, setting to 64 [ 58.946938][ T890] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 58.961785][ T890] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.975418][ T890] usb 4-1: Product: syz [ 58.982403][ T890] usb 4-1: Manufacturer: syz [ 58.988218][ T890] usb 4-1: SerialNumber: syz [ 59.062817][ T310] usb 3-1: USB disconnect, device number 4 [ 59.070966][ T1842] loop1: detected capacity change from 0 to 256 [ 59.103272][ T1842] ======================================================= [ 59.103272][ T1842] WARNING: The mand mount option has been deprecated and [ 59.103272][ T1842] and is ignored by this kernel. Remove the mand [ 59.103272][ T1842] option from the mount to silence this warning. [ 59.103272][ T1842] ======================================================= [ 59.201260][ T1828] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 59.249564][ T1845] netlink: 'syz.4.585': attribute type 4 has an invalid length. [ 59.278539][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 59.278556][ T28] audit: type=1400 audit(1741381616.581:274): avc: denied { setopt } for pid=1846 comm="syz.4.586" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 59.401560][ T1861] serio: Serial port ptm0 [ 59.700743][ T28] audit: type=1400 audit(1741381617.011:275): avc: denied { watch watch_reads } for pid=1895 comm="syz.2.606" path="/" dev="ramfs" ino=23508 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 59.766610][ T1898] loop2: detected capacity change from 0 to 256 [ 59.793581][ T1898] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 59.822905][ T1904] loop1: detected capacity change from 0 to 4096 [ 59.877117][ T1904] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 59.890995][ T28] audit: type=1400 audit(1741381617.201:276): avc: denied { remount } for pid=1903 comm="syz.1.609" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 59.922832][ T1904] EXT4-fs (loop1): re-mounted. Quota mode: writeback. [ 59.943260][ T291] EXT4-fs (loop1): unmounting filesystem. [ 59.961743][ T1912] Disabled LAPIC found during irq injection [ 60.016562][ T1828] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 60.061029][ T28] audit: type=1400 audit(1741381617.371:277): avc: denied { validate_trans } for pid=1926 comm="syz.0.617" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 60.236580][ T890] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 60.238872][ T1309] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 60.243473][ T890] cdc_ncm 4-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 60.258918][ T890] cdc_ncm 4-1:1.0: setting rx_max = 2048 [ 60.302523][ T1941] loop2: detected capacity change from 0 to 512 [ 60.306697][ T1943] loop0: detected capacity change from 0 to 256 [ 60.318962][ T1943] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 60.331775][ T1941] EXT4-fs error (device loop2): ext4_do_update_inode:5226: inode #3: comm syz.2.626: corrupted inode contents [ 60.347505][ T1941] EXT4-fs error (device loop2): ext4_dirty_inode:6091: inode #3: comm syz.2.626: mark_inode_dirty error [ 60.360202][ T1941] EXT4-fs error (device loop2): ext4_do_update_inode:5226: inode #3: comm syz.2.626: corrupted inode contents [ 60.373438][ T1941] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #3: comm syz.2.626: mark_inode_dirty error [ 60.394287][ T1941] Quota error (device loop2): write_blk: dquota write failed [ 60.405224][ T1941] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 60.416516][ T28] audit: type=1400 audit(1741381617.721:278): avc: denied { bind } for pid=1948 comm="syz.0.628" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 60.429162][ T1941] EXT4-fs error (device loop2): ext4_acquire_dquot:6782: comm syz.2.626: Failed to acquire dquot type 0 [ 60.436616][ T28] audit: type=1400 audit(1741381617.721:279): avc: denied { listen } for pid=1948 comm="syz.0.628" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 60.448860][ T1309] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 60.481834][ T890] cdc_ncm 4-1:1.0: setting tx_max = 28 [ 60.486042][ T28] audit: type=1400 audit(1741381617.721:280): avc: denied { setopt } for pid=1948 comm="syz.0.628" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 60.492302][ T890] cdc_ncm 4-1:1.0 eth1: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 60.509552][ T1309] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 60.529724][ T1309] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 60.542953][ T1941] EXT4-fs (loop2): 1 orphan inode deleted [ 60.548530][ T1941] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 60.550872][ T1309] usb 2-1: New USB device found, idVendor=04d9, idProduct=a070, bcdDevice= 0.00 [ 60.567605][ T1309] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.571467][ T890] usb 4-1: USB disconnect, device number 3 [ 60.582249][ T1309] usb 2-1: config 0 descriptor?? [ 60.588825][ T1941] ext4 filesystem being mounted at /130/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 60.599188][ T890] cdc_ncm 4-1:1.0 eth1: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM (NO ZLP) [ 60.617508][ T10] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 60.629716][ T10] EXT4-fs error (device loop2): ext4_release_dquot:6805: comm kworker/u4:1: Failed to release dquot type 1 [ 60.651772][ T292] EXT4-fs (loop2): unmounting filesystem. [ 60.793426][ T1967] loop0: detected capacity change from 0 to 128 [ 60.818271][ T1967] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 60.827089][ T1967] ext4 filesystem being mounted at /144/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 60.841906][ T1967] fscrypt (loop0, inode 12): Direct key flag not allowed with different contents and filenames modes [ 60.861192][ T288] EXT4-fs (loop0): unmounting filesystem. [ 60.869386][ T1970] netem: incorrect gi model size [ 60.874286][ T1970] netem: change failed [ 61.007803][ T1974] loop4: detected capacity change from 0 to 256 [ 61.016572][ T1309] holtek_mouse 0003:04D9:A070.0009: unbalanced collection at end of report description [ 61.023694][ T1977] loop2: detected capacity change from 0 to 256 [ 61.032782][ T1309] holtek_mouse 0003:04D9:A070.0009: hid parse failed: -22 [ 61.045393][ T1974] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 61.058394][ T1309] holtek_mouse: probe of 0003:04D9:A070.0009 failed with error -22 [ 61.085077][ T1977] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x4ec6003b, utbl_chksum : 0xe619d30d) [ 61.194988][ T1994] serio: Serial port ptm0 [ 61.221997][ T2000] loop0: detected capacity change from 0 to 512 [ 61.251851][ T2003] loop4: detected capacity change from 0 to 512 [ 61.279939][ T2000] EXT4-fs error (device loop0): ext4_orphan_get:1400: inode #15: comm syz.0.652: casefold flag without casefold feature [ 61.295786][ T1309] usb 2-1: USB disconnect, device number 2 [ 61.300859][ T2003] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #15: comm syz.4.653: casefold flag without casefold feature [ 61.333074][ T2000] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.652: couldn't read orphan inode 15 (err -117) [ 61.345078][ T2003] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.653: couldn't read orphan inode 15 (err -117) [ 61.359254][ T2000] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 61.457217][ T2003] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 61.732987][ T2015] netlink: 196 bytes leftover after parsing attributes in process `syz.0.652'. [ 61.890787][ T2018] netlink: 196 bytes leftover after parsing attributes in process `syz.4.653'. [ 62.307577][ T2020] netlink: 44 bytes leftover after parsing attributes in process `syz.2.656'. [ 62.328185][ T288] EXT4-fs (loop0): unmounting filesystem. [ 62.328540][ T289] EXT4-fs (loop4): unmounting filesystem. [ 62.372219][ T2024] loop0: detected capacity change from 0 to 256 [ 62.374512][ T2022] loop2: detected capacity change from 0 to 512 [ 62.406424][ T2024] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104d0, chksum : 0x3eebdab2, utbl_chksum : 0xe619d30d) [ 62.436286][ T2024] exFAT-fs (loop0): error, found bogus dentry(11) beyond unused empty group(10) (start_clu : 5, cur_clu : 5) [ 62.458767][ T2024] exFAT-fs (loop0): Filesystem has been set read-only [ 62.478456][ T2024] exFAT-fs (loop0): hint_cluster is invalid (521) [ 62.485684][ T2022] EXT4-fs error (device loop2): ext4_orphan_get:1400: inode #15: comm syz.2.666: casefold flag without casefold feature [ 62.499163][ T2024] exFAT-fs (loop0): error, invalid access to FAT (entry 0x00000208) [ 62.507152][ T2024] exFAT-fs (loop0): error, failed to bmap (inode : ffff88810f830d30 iblock : 9, err : -5) [ 62.517381][ T2022] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.666: couldn't read orphan inode 15 (err -117) [ 62.536580][ T2024] exFAT-fs (loop0): error, invalid access to FAT (entry 0x00000208) [ 62.544996][ T2022] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 62.554274][ T2024] exFAT-fs (loop0): error, invalid access to FAT (entry 0x00000208) [ 63.124664][ T2045] loop3: detected capacity change from 0 to 256 [ 63.140037][ T2045] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 63.255270][ T292] EXT4-fs (loop2): unmounting filesystem. [ 63.320190][ T2052] serio: Serial port ptm0 [ 63.329661][ T2059] loop2: detected capacity change from 0 to 256 [ 63.367708][ T2059] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x3eebdab2, utbl_chksum : 0xe619d30d) [ 63.388925][ T2061] loop1: detected capacity change from 0 to 512 [ 63.408324][ T2059] exFAT-fs (loop2): error, found bogus dentry(11) beyond unused empty group(10) (start_clu : 5, cur_clu : 5) [ 63.431567][ T2061] EXT4-fs error (device loop1): ext4_orphan_get:1400: inode #15: comm syz.1.681: casefold flag without casefold feature [ 63.469471][ T2061] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.681: couldn't read orphan inode 15 (err -117) [ 63.490259][ T2059] exFAT-fs (loop2): Filesystem has been set read-only [ 63.531140][ T2067] exFAT-fs (loop2): hint_cluster is invalid (521) [ 63.538750][ T2061] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 63.556469][ T2067] exFAT-fs (loop2): error, invalid access to FAT (entry 0x00000208) [ 63.566230][ T2067] exFAT-fs (loop2): error, failed to bmap (inode : ffff8881318f8910 iblock : 9, err : -5) [ 63.577282][ T2067] exFAT-fs (loop2): error, invalid access to FAT (entry 0x00000208) [ 63.586583][ T2067] exFAT-fs (loop2): error, invalid access to FAT (entry 0x00000208) [ 63.808935][ T24] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 64.068706][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 64.075056][ T24] usb 4-1: config index 0 descriptor too short (expected 5924, got 36) [ 64.097908][ T24] usb 4-1: config 250 has an invalid interface number: 228 but max is -1 [ 64.114266][ T24] usb 4-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 64.126190][ T24] usb 4-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 64.137161][ T24] usb 4-1: config 250 has no interface number 0 [ 64.143832][ T24] usb 4-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 64.162440][ T24] usb 4-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 64.174790][ T24] usb 4-1: config 250 interface 228 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 64.190338][ T24] usb 4-1: config 250 interface 228 has no altsetting 0 [ 64.214633][ T24] usb 4-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 64.234314][ T24] usb 4-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 64.245508][ T291] EXT4-fs (loop1): unmounting filesystem. [ 64.251263][ T24] usb 4-1: Product: syz [ 64.282521][ T24] usb 4-1: SerialNumber: syz [ 64.306601][ T24] hub 4-1:250.228: bad descriptor, ignoring hub [ 64.322517][ T24] hub: probe of 4-1:250.228 failed with error -5 [ 64.506083][ T24] usblp 4-1:250.228: usblp0: USB Unidirectional printer dev 4 if 228 alt 255 proto 1 vid 0x0525 pid 0xD292 [ 64.559949][ T2097] serio: Serial port ptm0 [ 64.567584][ T2103] loop4: detected capacity change from 0 to 256 [ 64.576580][ T2101] loop2: detected capacity change from 0 to 512 [ 64.579735][ T2103] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0x3eebdab2, utbl_chksum : 0xe619d30d) [ 64.605362][ T2103] exFAT-fs (loop4): error, found bogus dentry(11) beyond unused empty group(10) (start_clu : 5, cur_clu : 5) [ 64.618639][ T2103] exFAT-fs (loop4): Filesystem has been set read-only [ 64.627625][ T2101] EXT4-fs error (device loop2): ext4_orphan_get:1400: inode #15: comm syz.2.687: casefold flag without casefold feature [ 64.652524][ T2103] exFAT-fs (loop4): hint_cluster is invalid (521) [ 64.659130][ T2103] exFAT-fs (loop4): error, invalid access to FAT (entry 0x00000208) [ 64.678777][ T2101] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.687: couldn't read orphan inode 15 (err -117) [ 64.687061][ T2103] exFAT-fs (loop4): error, failed to bmap (inode : ffff8881318fb670 iblock : 9, err : -5) [ 64.701013][ T2103] exFAT-fs (loop4): error, invalid access to FAT (entry 0x00000208) [ 64.709781][ T2103] exFAT-fs (loop4): error, invalid access to FAT (entry 0x00000208) [ 64.711223][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 64.711242][ T28] audit: type=1400 audit(1741381622.021:282): avc: denied { read write } for pid=2068 comm="syz.3.673" name="lp0" dev="devtmpfs" ino=622 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 64.758751][ T2101] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 64.769718][ T28] audit: type=1400 audit(1741381622.021:283): avc: denied { open } for pid=2068 comm="syz.3.673" path="/dev/usb/lp0" dev="devtmpfs" ino=622 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 64.796988][ T2109] loop0: detected capacity change from 0 to 512 [ 64.806233][ T2109] EXT4-fs error (device loop0): ext4_orphan_get:1400: inode #15: comm syz.0.688: casefold flag without casefold feature [ 64.863530][ T2109] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.688: couldn't read orphan inode 15 (err -117) [ 64.881918][ T2109] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 64.890989][ T310] usb 4-1: USB disconnect, device number 4 [ 64.900303][ T310] usblp0: removed [ 65.336715][ T2116] netlink: 196 bytes leftover after parsing attributes in process `syz.0.688'. [ 65.632239][ T292] EXT4-fs (loop2): unmounting filesystem. [ 65.736722][ T288] EXT4-fs (loop0): unmounting filesystem. [ 65.803071][ T24] kernel write not supported for file bpf-prog (pid: 24 comm: kworker/1:0) [ 66.058305][ T2144] loop3: detected capacity change from 0 to 2048 [ 66.122123][ T2150] loop2: detected capacity change from 0 to 512 [ 66.130837][ T2144] Alternate GPT is invalid, using primary GPT. [ 66.137002][ T2144] loop3: p2 p3 p7 [ 66.168479][ T102] Alternate GPT is invalid, using primary GPT. [ 66.175246][ T102] loop3: p2 p3 p7 [ 66.193686][ T2150] EXT4-fs error (device loop2): ext4_orphan_get:1400: inode #15: comm syz.2.702: casefold flag without casefold feature [ 66.241029][ T951] udevd[951]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 66.251702][ T19] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 66.259861][ T2150] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.702: couldn't read orphan inode 15 (err -117) [ 66.264854][ T313] udevd[313]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 66.284882][ T2150] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 66.299291][ T951] udevd[951]: inotify_add_watch(7, /dev/loop3p7, 10) failed: No such file or directory [ 66.336089][ T2156] loop1: detected capacity change from 0 to 512 [ 66.359979][ T2156] EXT4-fs error (device loop1): ext4_orphan_get:1400: inode #15: comm syz.1.704: casefold flag without casefold feature [ 66.386439][ T951] udevd[951]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 66.396265][ T2156] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.704: couldn't read orphan inode 15 (err -117) [ 66.410994][ T313] udevd[313]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 66.421962][ T2156] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 66.423199][ T389] udevd[389]: inotify_add_watch(7, /dev/loop3p7, 10) failed: No such file or directory [ 66.702501][ T19] usb 1-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 66.718745][ T19] usb 1-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 66.732712][ T19] usb 1-1: config 0 interface 0 has no altsetting 0 [ 66.739528][ T19] usb 1-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 66.748802][ T19] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.816575][ T2166] netlink: 196 bytes leftover after parsing attributes in process `syz.1.704'. [ 67.083829][ T28] audit: type=1400 audit(1741381624.391:284): avc: denied { append } for pid=2167 comm="syz.3.706" name="001" dev="devtmpfs" ino=175 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 67.109404][ T292] EXT4-fs (loop2): unmounting filesystem. [ 67.122890][ T28] audit: type=1400 audit(1741381624.431:285): avc: denied { read } for pid=2167 comm="syz.3.706" name="ptp0" dev="devtmpfs" ino=260 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 67.123871][ T19] usb 1-1: config 0 descriptor?? [ 67.145798][ T28] audit: type=1400 audit(1741381624.431:286): avc: denied { open } for pid=2167 comm="syz.3.706" path="/dev/ptp0" dev="devtmpfs" ino=260 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 67.185456][ T2130] syz.4.690 (2130) used greatest stack depth: 19120 bytes left [ 67.213674][ T28] audit: type=1400 audit(1741381624.521:287): avc: denied { read } for pid=2171 comm="syz.3.707" dev="nsfs" ino=4026532407 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 67.275422][ T28] audit: type=1400 audit(1741381624.541:288): avc: denied { open } for pid=2171 comm="syz.3.707" path="net:[4026532407]" dev="nsfs" ino=4026532407 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 67.299817][ T291] EXT4-fs (loop1): unmounting filesystem. [ 67.299905][ T2172] loop3: detected capacity change from 0 to 4096 [ 67.334520][ T2172] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 67.364464][ T290] EXT4-fs (loop3): unmounting filesystem. [ 67.418496][ T2183] syz.1.714[2183] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 67.418583][ T2183] syz.1.714[2183] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 67.519065][ T2191] loop1: detected capacity change from 0 to 512 [ 67.571530][ T2194] loop4: detected capacity change from 0 to 512 [ 67.587938][ T2191] EXT4-fs error (device loop1): ext4_orphan_get:1400: inode #15: comm syz.1.717: casefold flag without casefold feature [ 67.602601][ T19] hid-steam 0003:28DE:1102.000A: unknown main item tag 0x0 [ 67.621527][ T19] hid-steam 0003:28DE:1102.000A: unknown main item tag 0x0 [ 67.631893][ T2194] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #15: comm syz.4.718: casefold flag without casefold feature [ 67.657138][ T2191] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.717: couldn't read orphan inode 15 (err -117) [ 67.670436][ T19] hid-steam 0003:28DE:1102.000A: : USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.0-1/input0 [ 67.683146][ T19] hid-steam 0003:28DE:1102.000B: unknown main item tag 0x0 [ 67.698792][ T2191] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 67.709298][ T19] hid-steam 0003:28DE:1102.000B: unknown main item tag 0x0 [ 67.716606][ T2194] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.718: couldn't read orphan inode 15 (err -117) [ 67.729820][ T19] hid-steam 0003:28DE:1102.000B: hidraw0: USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.0-1/input0 [ 67.760821][ T2194] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 67.829387][ T19] hid-steam 0003:28DE:1102.000A: Steam Controller 'XXXXXXXXXX' connected [ 67.849568][ T19] input: Steam Controller as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:28DE:1102.000A/input/input10 [ 67.917049][ T19] usb 1-1: USB disconnect, device number 5 [ 68.002138][ T2205] netlink: 196 bytes leftover after parsing attributes in process `syz.1.717'. [ 68.288289][ T19] hid-steam 0003:28DE:1102.000A: Steam Controller 'XXXXXXXXXX' disconnected [ 68.330038][ T2210] loop2: detected capacity change from 0 to 512 [ 68.346626][ T2210] EXT4-fs error (device loop2): ext4_orphan_get:1400: inode #15: comm syz.2.720: casefold flag without casefold feature [ 68.360323][ T2210] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.720: couldn't read orphan inode 15 (err -117) [ 68.372847][ T2210] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 68.433128][ T291] EXT4-fs (loop1): unmounting filesystem. [ 68.440046][ T289] EXT4-fs (loop4): unmounting filesystem. [ 68.693260][ T2222] netlink: 196 bytes leftover after parsing attributes in process `syz.2.720'. [ 69.186601][ T2242] loop0: detected capacity change from 0 to 512 [ 69.218460][ T2242] EXT4-fs error (device loop0): ext4_orphan_get:1400: inode #15: comm syz.0.731: casefold flag without casefold feature [ 69.221902][ T2244] loop4: detected capacity change from 0 to 512 [ 69.247260][ T2247] loop3: detected capacity change from 0 to 512 [ 69.258443][ T2247] EXT4-fs: Ignoring removed bh option [ 69.276259][ T2242] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.731: couldn't read orphan inode 15 (err -117) [ 69.293226][ T292] EXT4-fs (loop2): unmounting filesystem. [ 69.294955][ T2247] EXT4-fs (loop3): unable to read superblock [ 69.304824][ T2242] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 69.324043][ T2244] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #15: comm syz.4.733: casefold flag without casefold feature [ 69.410046][ T2247] device macsec0 entered promiscuous mode [ 69.422766][ T2244] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.733: couldn't read orphan inode 15 (err -117) [ 69.447487][ T2244] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 69.540960][ T2254] netlink: 196 bytes leftover after parsing attributes in process `syz.0.731'. [ 70.138219][ T289] EXT4-fs (loop4): unmounting filesystem. [ 70.205928][ T288] EXT4-fs (loop0): unmounting filesystem. [ 70.278747][ T310] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 70.512993][ T2285] loop1: detected capacity change from 0 to 512 [ 70.521334][ T310] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 70.555785][ T310] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 70.569710][ T2285] EXT4-fs error (device loop1): ext4_orphan_get:1400: inode #15: comm syz.1.744: casefold flag without casefold feature [ 70.577783][ T310] usb 4-1: config 0 interface 0 has no altsetting 0 [ 70.585333][ T2285] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.744: couldn't read orphan inode 15 (err -117) [ 70.605947][ T2285] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 70.622908][ T310] usb 4-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 70.644868][ T310] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.692797][ T310] usb 4-1: config 0 descriptor?? [ 70.768715][ T24] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 70.825182][ T2289] netlink: 196 bytes leftover after parsing attributes in process `syz.1.744'. [ 70.950473][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 71.059796][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 71.110903][ T24] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 71.148759][ T24] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 71.172372][ T310] hid-steam 0003:28DE:1102.000C: unknown main item tag 0x0 [ 71.179582][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.182937][ T310] hid-steam 0003:28DE:1102.000C: unknown main item tag 0x0 [ 71.203725][ T310] hid-steam 0003:28DE:1102.000C: : USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.3-1/input0 [ 71.214955][ T24] usb 5-1: config 0 descriptor?? [ 71.220466][ T2280] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 71.223251][ T310] hid-steam 0003:28DE:1102.000D: unknown main item tag 0x0 [ 71.247149][ T28] audit: type=1400 audit(1741381628.551:289): avc: denied { read } for pid=2291 comm="syz.2.745" path="socket:[25384]" dev="sockfs" ino=25384 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 71.277702][ T310] hid-steam 0003:28DE:1102.000D: unknown main item tag 0x0 [ 71.287078][ T310] hid-steam 0003:28DE:1102.000D: hidraw0: USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.3-1/input0 [ 71.378761][ T310] hid-steam 0003:28DE:1102.000C: Steam Controller 'XXXXXXXXXX' connected [ 71.390256][ T310] input: Steam Controller as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:28DE:1102.000C/input/input11 [ 71.416298][ T310] usb 4-1: USB disconnect, device number 5 [ 71.431222][ T310] hid-steam 0003:28DE:1102.000C: Steam Controller 'XXXXXXXXXX' disconnected [ 71.465778][ T291] EXT4-fs (loop1): unmounting filesystem. [ 71.526204][ T2297] loop0: detected capacity change from 0 to 512 [ 71.536801][ T2299] loop1: detected capacity change from 0 to 512 [ 71.543053][ T2297] EXT4-fs error (device loop0): ext4_orphan_get:1400: inode #15: comm syz.0.746: casefold flag without casefold feature [ 71.559444][ T2297] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.746: couldn't read orphan inode 15 (err -117) [ 71.561776][ T2299] EXT4-fs error (device loop1): ext4_orphan_get:1400: inode #15: comm syz.1.748: casefold flag without casefold feature [ 71.572490][ T2297] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 71.585065][ T2299] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.748: couldn't read orphan inode 15 (err -117) [ 71.606314][ T2299] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 71.670453][ T24] plantronics 0003:047F:FFFF.000E: unknown main item tag 0xd [ 71.734930][ T24] plantronics 0003:047F:FFFF.000E: No inputs registered, leaving [ 71.744343][ T24] plantronics 0003:047F:FFFF.000E: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 71.859908][ T2304] netlink: 196 bytes leftover after parsing attributes in process `syz.1.748'. [ 71.919159][ T2302] netlink: 196 bytes leftover after parsing attributes in process `syz.0.746'. [ 72.133582][ T2280] loop4: detected capacity change from 0 to 512 [ 72.168537][ T2280] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 72.178005][ T2280] ext4 filesystem being mounted at /135/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 72.195161][ T890] usb 5-1: USB disconnect, device number 3 [ 72.418738][ T24] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 72.442533][ T288] EXT4-fs (loop0): unmounting filesystem. [ 72.487361][ T291] EXT4-fs (loop1): unmounting filesystem. [ 72.616015][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 72.642498][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 72.654185][ T24] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 72.670586][ T24] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 72.680008][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.683787][ T2360] loop2: detected capacity change from 0 to 128 [ 72.693020][ T24] usb 4-1: config 0 descriptor?? [ 72.697070][ T2360] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 72.710184][ T2360] ext4 filesystem being mounted at /176/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 72.727935][ T289] EXT4-fs (loop4): unmounting filesystem. [ 72.750786][ T28] audit: type=1400 audit(1741381630.061:290): avc: denied { link } for pid=2359 comm="syz.2.774" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop2" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 72.754252][ T2365] loop0: detected capacity change from 0 to 512 [ 72.800713][ T28] audit: type=1400 audit(1741381630.111:291): avc: denied { create } for pid=2359 comm="syz.2.774" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 72.815847][ T2365] EXT4-fs error (device loop0): ext4_orphan_get:1400: inode #15: comm syz.0.776: casefold flag without casefold feature [ 72.855371][ T2365] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.776: couldn't read orphan inode 15 (err -117) [ 72.857138][ T292] EXT4-fs (loop2): unmounting filesystem. [ 72.867763][ T1309] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 72.874786][ T2365] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 72.904265][ T2368] loop2: detected capacity change from 0 to 512 [ 72.923750][ T2368] EXT4-fs error (device loop2): ext4_orphan_get:1400: inode #15: comm syz.2.777: casefold flag without casefold feature [ 72.936693][ T2368] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.777: couldn't read orphan inode 15 (err -117) [ 72.948709][ T2368] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 73.097728][ T2375] netlink: 196 bytes leftover after parsing attributes in process `syz.0.776'. [ 73.160658][ T1309] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 73.243384][ T2378] netlink: 196 bytes leftover after parsing attributes in process `syz.2.777'. [ 73.331808][ T24] plantronics 0003:047F:FFFF.000F: No inputs registered, leaving [ 73.373493][ T1309] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 73.404801][ T24] plantronics 0003:047F:FFFF.000F: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 73.428480][ T1309] usb 2-1: config 0 interface 0 has no altsetting 0 [ 73.456867][ T1309] usb 2-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 73.480559][ T1309] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.507342][ T1309] usb 2-1: config 0 descriptor?? [ 73.640649][ T310] usb 4-1: USB disconnect, device number 6 [ 73.810847][ T288] EXT4-fs (loop0): unmounting filesystem. [ 73.868481][ T2381] netlink: 165 bytes leftover after parsing attributes in process `syz.0.779'. [ 73.878070][ T292] EXT4-fs (loop2): unmounting filesystem. [ 73.884020][ T2381] netlink: 277 bytes leftover after parsing attributes in process `syz.0.779'. [ 73.923449][ T1309] hid-steam 0003:28DE:1102.0010: unknown main item tag 0x0 [ 73.934951][ T1309] hid-steam 0003:28DE:1102.0010: unknown main item tag 0x0 [ 73.955178][ T1309] hid-steam 0003:28DE:1102.0010: : USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.1-1/input0 [ 73.967351][ T1309] hid-steam 0003:28DE:1102.0011: unknown main item tag 0x0 [ 73.974465][ T1309] hid-steam 0003:28DE:1102.0011: unknown main item tag 0x0 [ 73.982756][ T1309] hid-steam 0003:28DE:1102.0011: hidraw0: USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.1-1/input0 [ 74.058726][ T1309] hid-steam 0003:28DE:1102.0010: Steam Controller 'XXXXXXXXXX' connected [ 74.077013][ T1309] input: Steam Controller as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:28DE:1102.0010/input/input13 [ 74.124960][ T2344] input: Steam Controller as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:28DE:1102.0010/input/input14 [ 74.140144][ T2397] usb usb2: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 74.165043][ T1309] usb 2-1: USB disconnect, device number 3 [ 74.192793][ T1309] hid-steam 0003:28DE:1102.0010: Steam Controller 'XXXXXXXXXX' disconnected [ 74.296462][ T2407] incfs: Options parsing error. -22 [ 74.301702][ T2407] incfs: mount failed -22 [ 74.326943][ T890] kernel write not supported for file bpf-prog (pid: 890 comm: kworker/0:4) [ 74.754940][ T2442] 9pnet: p9_errstr2errno: server reported unknown error @hQIte}u [ 74.861701][ T2447] SELinux: Context system_u:object_r:hald_sonypic_exec_t:s0 is not valid (left unmapped). [ 74.888966][ T28] audit: type=1400 audit(1741381632.201:292): avc: denied { relabelto } for pid=2446 comm="syz.2.808" name="NETLINK" dev="sockfs" ino=26190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=netlink_netfilter_socket permissive=1 trawcon="system_u:object_r:hald_sonypic_exec_t:s0" [ 74.988051][ T2457] netlink: 96 bytes leftover after parsing attributes in process `syz.1.812'. [ 75.026348][ T28] audit: type=1400 audit(1741381632.331:293): avc: denied { unmount } for pid=291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 75.362839][ T2468] loop0: detected capacity change from 0 to 512 [ 75.384469][ T2472] netlink: 60 bytes leftover after parsing attributes in process `syz.1.818'. [ 75.399905][ T2468] EXT4-fs error (device loop0): ext4_orphan_get:1400: inode #15: comm syz.0.825: casefold flag without casefold feature [ 75.421562][ T2468] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.825: couldn't read orphan inode 15 (err -117) [ 75.433634][ T2468] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 75.525187][ T2486] loop1: detected capacity change from 0 to 128 [ 75.535588][ T2486] EXT4-fs (loop1): Test dummy encryption mode enabled [ 75.543504][ T2486] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 75.642319][ T2491] netlink: 196 bytes leftover after parsing attributes in process `syz.0.825'. [ 75.661389][ T24] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 75.681654][ T2486] ext4 filesystem being mounted at /141/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 75.862161][ T2494] loop3: detected capacity change from 0 to 512 [ 75.901810][ T2494] EXT4-fs error (device loop3): ext4_orphan_get:1400: inode #15: comm syz.3.826: casefold flag without casefold feature [ 75.909964][ T24] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 75.914880][ T2494] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.826: couldn't read orphan inode 15 (err -117) [ 75.931699][ T2486] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 75.937183][ T2494] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 75.950054][ T24] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 76.049353][ T24] usb 5-1: config 0 interface 0 has no altsetting 0 [ 76.058338][ T24] usb 5-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 76.061358][ T2486] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 76.067689][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.087502][ T24] usb 5-1: config 0 descriptor?? [ 76.118065][ T291] EXT4-fs (loop1): unmounting filesystem. [ 76.175555][ T2504] netlink: 196 bytes leftover after parsing attributes in process `syz.3.826'. [ 76.352197][ T288] EXT4-fs (loop0): unmounting filesystem. [ 76.649441][ T19] kernel read not supported for file /zero (pid: 19 comm: kworker/0:1) [ 76.650402][ T24] hid-steam 0003:28DE:1102.0012: unknown main item tag 0x0 [ 76.664798][ T24] hid-steam 0003:28DE:1102.0012: unknown main item tag 0x0 [ 76.673164][ T290] EXT4-fs (loop3): unmounting filesystem. [ 76.680009][ T24] hid-steam 0003:28DE:1102.0012: : USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.4-1/input0 [ 76.697230][ T24] hid-steam 0003:28DE:1102.0013: unknown main item tag 0x0 [ 76.704666][ T24] hid-steam 0003:28DE:1102.0013: unknown main item tag 0x0 [ 76.722723][ T24] hid-steam 0003:28DE:1102.0013: hidraw0: USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.4-1/input0 [ 76.748715][ T28] audit: type=1400 audit(1741381634.055:294): avc: denied { accept } for pid=2523 comm="syz.3.835" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 76.755273][ T2528] loop0: detected capacity change from 0 to 512 [ 76.792501][ T2531] loop3: detected capacity change from 0 to 512 [ 76.796027][ T28] audit: type=1400 audit(1741381634.055:295): avc: denied { read } for pid=2523 comm="syz.3.835" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 76.809594][ T2528] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 76.820672][ T24] hid-steam 0003:28DE:1102.0012: Steam Controller 'XXXXXXXXXX' connected [ 76.847263][ T24] input: Steam Controller as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:28DE:1102.0012/input/input15 [ 76.865904][ T2469] input: Steam Controller as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:28DE:1102.0012/input/input16 [ 76.870535][ T2531] EXT4-fs error (device loop3): ext4_orphan_get:1400: inode #15: comm syz.3.839: casefold flag without casefold feature [ 76.893564][ T24] usb 5-1: USB disconnect, device number 4 [ 76.915551][ T2528] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2809: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 76.944322][ T24] hid-steam 0003:28DE:1102.0012: Steam Controller 'XXXXXXXXXX' disconnected [ 76.957501][ T2531] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.839: couldn't read orphan inode 15 (err -117) [ 76.969350][ T2528] EXT4-fs (loop0): 1 truncate cleaned up [ 76.969380][ T2528] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 76.983977][ T28] audit: type=1400 audit(1741381634.285:296): avc: denied { setattr } for pid=2525 comm="syz.0.837" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 77.038942][ T2531] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 77.049156][ T288] EXT4-fs (loop0): unmounting filesystem. [ 77.139100][ T2541] loop0: detected capacity change from 0 to 512 [ 77.157716][ T2541] EXT4-fs error (device loop0): ext4_orphan_get:1400: inode #15: comm syz.0.840: casefold flag without casefold feature [ 77.188929][ T2541] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.840: couldn't read orphan inode 15 (err -117) [ 77.253867][ T2544] loop2: detected capacity change from 0 to 512 [ 77.267733][ T2545] netlink: 196 bytes leftover after parsing attributes in process `syz.3.839'. [ 77.330651][ T951] ================================================================== [ 77.338651][ T951] BUG: KASAN: use-after-free in mutex_lock+0xa4/0x1e0 [ 77.345243][ T951] Write of size 8 at addr ffff88811665b850 by task udevd/951 [ 77.352448][ T951] [ 77.354627][ T951] CPU: 1 PID: 951 Comm: udevd Not tainted 6.1.128-syzkaller-00002-g44db4837f75e #0 [ 77.363841][ T951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 77.373736][ T951] Call Trace: [ 77.376860][ T951] [ 77.379642][ T951] dump_stack_lvl+0x151/0x1b7 [ 77.384238][ T951] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 77.390137][ T951] ? _printk+0xd1/0x111 [ 77.394132][ T951] ? __virt_addr_valid+0x242/0x2f0 [ 77.399265][ T951] print_report+0x158/0x4e0 [ 77.403770][ T951] ? __virt_addr_valid+0x242/0x2f0 [ 77.408737][ T951] ? kasan_complete_mode_report_info+0x90/0x1b0 [ 77.414795][ T951] ? mutex_lock+0xa4/0x1e0 [ 77.419046][ T951] kasan_report+0x13c/0x170 [ 77.423412][ T951] ? mutex_lock+0xa4/0x1e0 [ 77.428042][ T951] kasan_check_range+0x294/0x2a0 [ 77.433207][ T951] __kasan_check_write+0x14/0x20 [ 77.437949][ T951] mutex_lock+0xa4/0x1e0 [ 77.442040][ T951] ? bit_wait_io_timeout+0x120/0x120 [ 77.446976][ T2541] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 77.447236][ T951] ? preempt_schedule_irq+0xe7/0x140 [ 77.461141][ T951] ? preempt_schedule_notrace+0x140/0x140 [ 77.466706][ T951] steam_input_open+0x91/0x1a0 [ 77.471482][ T951] ? steam_input_register+0xa70/0xa70 [ 77.476682][ T951] ? __kasan_check_write+0x14/0x20 [ 77.481622][ T951] ? mutex_lock_interruptible+0xb1/0x1e0 [ 77.487093][ T951] ? __kasan_check_write+0x14/0x20 [ 77.492062][ T951] input_open_device+0x1a5/0x310 [ 77.496836][ T951] evdev_open+0x3df/0x620 [ 77.500981][ T951] chrdev_open+0x4f7/0x620 [ 77.505240][ T951] ? cd_forget+0x170/0x170 [ 77.509700][ T951] ? fsnotify_perm+0x3e5/0x5b0 [ 77.514421][ T951] ? cd_forget+0x170/0x170 [ 77.518763][ T951] do_dentry_open+0x891/0x1250 [ 77.523366][ T951] vfs_open+0x73/0x80 [ 77.527177][ T951] path_openat+0x2532/0x2d60 [ 77.531606][ T951] ? getname+0x19/0x20 [ 77.535511][ T951] ? do_filp_open+0x480/0x480 [ 77.540032][ T951] ? __kasan_check_read+0x11/0x20 [ 77.544878][ T951] ? preempt_schedule_irq+0xe7/0x140 [ 77.550001][ T951] ? preempt_schedule_notrace+0x140/0x140 [ 77.555563][ T951] do_filp_open+0x230/0x480 [ 77.559892][ T951] ? vfs_tmpfile+0x480/0x480 [ 77.564324][ T951] ? alloc_fd+0x4fe/0x5a0 [ 77.568575][ T951] do_sys_openat2+0x151/0x870 [ 77.573084][ T951] ? raw_irqentry_exit_cond_resched+0x2a/0x30 [ 77.578983][ T951] ? irqentry_exit+0x30/0x40 [ 77.583421][ T951] ? sysvec_reschedule_ipi+0x8f/0x170 [ 77.588634][ T951] ? do_sys_open+0x220/0x220 [ 77.593058][ T951] ? asm_sysvec_reschedule_ipi+0x1b/0x20 [ 77.598515][ T951] __x64_sys_openat+0x243/0x290 [ 77.603202][ T951] ? __ia32_sys_open+0x270/0x270 [ 77.607977][ T951] ? switch_fpu_return+0xe/0x10 [ 77.612664][ T951] ? exit_to_user_mode_prepare+0x7e/0xa0 [ 77.618130][ T951] x64_sys_call+0x6bf/0x9a0 [ 77.622472][ T951] do_syscall_64+0x3b/0xb0 [ 77.626722][ T951] ? clear_bhb_loop+0x55/0xb0 [ 77.631237][ T951] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 77.636975][ T951] RIP: 0033:0x7fd0cc3169a4 [ 77.641218][ T951] Code: 24 20 48 8d 44 24 30 48 89 44 24 28 64 8b 04 25 18 00 00 00 85 c0 75 2c 44 89 e2 48 89 ee bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 76 60 48 8b 15 55 a4 0d 00 f7 d8 64 89 02 48 83 [ 77.660836][ T951] RSP: 002b:00007ffe98d42920 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 77.669079][ T951] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fd0cc3169a4 [ 77.676978][ T951] RDX: 0000000000080000 RSI: 000055750d57ed00 RDI: 00000000ffffff9c [ 77.685146][ T951] RBP: 000055750d57ed00 R08: 000055750d59e368 R09: fffffffffffffe98 [ 77.692946][ T951] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000080000 [ 77.700760][ T951] R13: 00007ffe98d42ae8 R14: 0000000000000000 R15: 00005574df467ed5 [ 77.708578][ T951] [ 77.711440][ T951] [ 77.713601][ T951] Allocated by task 24: [ 77.717600][ T951] kasan_set_track+0x4b/0x70 [ 77.722023][ T951] kasan_save_alloc_info+0x1f/0x30 [ 77.726968][ T951] __kasan_kmalloc+0x9c/0xb0 [ 77.731521][ T951] __kmalloc_node_track_caller+0xb3/0x1e0 [ 77.737071][ T951] devm_kmalloc+0x55/0x180 [ 77.741323][ T951] steam_probe+0x12e/0xbe0 [ 77.745572][ T951] hid_device_probe+0x292/0x3a0 [ 77.750258][ T951] really_probe+0x2b8/0x920 [ 77.754773][ T951] __driver_probe_device+0x1a0/0x310 [ 77.759896][ T951] driver_probe_device+0x54/0x3d0 [ 77.764752][ T951] __device_attach_driver+0x2e3/0x490 [ 77.769962][ T951] bus_for_each_drv+0x183/0x200 [ 77.774661][ T951] __device_attach+0x312/0x510 [ 77.779248][ T951] device_initial_probe+0x1a/0x20 [ 77.784543][ T951] bus_probe_device+0xbe/0x1e0 [ 77.789233][ T951] device_add+0xb60/0xf10 [ 77.793395][ T951] hid_add_device+0x3ad/0x510 [ 77.797997][ T951] usbhid_probe+0xc1f/0xff0 [ 77.802336][ T951] usb_probe_interface+0x5b6/0xa90 [ 77.807284][ T951] really_probe+0x2b8/0x920 [ 77.811718][ T951] __driver_probe_device+0x1a0/0x310 [ 77.816832][ T951] driver_probe_device+0x54/0x3d0 [ 77.821693][ T951] __device_attach_driver+0x2e3/0x490 [ 77.827013][ T951] bus_for_each_drv+0x183/0x200 [ 77.831696][ T951] __device_attach+0x312/0x510 [ 77.836295][ T951] device_initial_probe+0x1a/0x20 [ 77.841153][ T951] bus_probe_device+0xbe/0x1e0 [ 77.845751][ T951] device_add+0xb60/0xf10 [ 77.849929][ T951] usb_set_configuration+0x190f/0x1e80 [ 77.855213][ T951] usb_generic_driver_probe+0x8b/0x150 [ 77.860507][ T951] usb_probe_device+0x144/0x260 [ 77.865193][ T951] really_probe+0x2b8/0x920 [ 77.869534][ T951] __driver_probe_device+0x1a0/0x310 [ 77.874754][ T951] driver_probe_device+0x54/0x3d0 [ 77.879612][ T951] __device_attach_driver+0x2e3/0x490 [ 77.884811][ T951] bus_for_each_drv+0x183/0x200 [ 77.889499][ T951] __device_attach+0x312/0x510 [ 77.894094][ T951] device_initial_probe+0x1a/0x20 [ 77.898957][ T951] bus_probe_device+0xbe/0x1e0 [ 77.903558][ T951] device_add+0xb60/0xf10 [ 77.907722][ T951] usb_new_device+0xf2f/0x1820 [ 77.912326][ T951] hub_event+0x2db1/0x4830 [ 77.916584][ T951] process_one_work+0x73d/0xcb0 [ 77.921264][ T951] worker_thread+0xa60/0x1260 [ 77.925842][ T951] kthread+0x26d/0x300 [ 77.929685][ T951] ret_from_fork+0x1f/0x30 [ 77.933940][ T951] [ 77.936107][ T951] Freed by task 24: [ 77.939756][ T951] kasan_set_track+0x4b/0x70 [ 77.944183][ T951] kasan_save_free_info+0x2b/0x40 [ 77.949036][ T951] ____kasan_slab_free+0x131/0x180 [ 77.954077][ T951] __kasan_slab_free+0x11/0x20 [ 77.958675][ T951] __kmem_cache_free+0x21d/0x410 [ 77.963456][ T951] kfree+0x7a/0xf0 [ 77.967005][ T951] release_nodes+0xf1/0x230 [ 77.971343][ T951] devres_release_all+0x148/0x1a0 [ 77.976213][ T951] device_release_driver_internal+0x5bb/0x870 [ 77.982108][ T951] device_release_driver+0x19/0x20 [ 77.987069][ T951] bus_remove_device+0x2fa/0x360 [ 77.992004][ T951] device_del+0x663/0xe90 [ 77.996166][ T951] hid_destroy_device+0x68/0x110 [ 78.001028][ T951] usbhid_disconnect+0x9e/0xc0 [ 78.005625][ T951] usb_unbind_interface+0x1fa/0x8c0 [ 78.010753][ T951] device_release_driver_internal+0x53e/0x870 [ 78.016673][ T951] device_release_driver+0x19/0x20 [ 78.022126][ T951] bus_remove_device+0x2fa/0x360 [ 78.026892][ T951] device_del+0x663/0xe90 [ 78.031060][ T951] usb_disable_device+0x380/0x720 [ 78.035918][ T951] usb_disconnect+0x32a/0x890 [ 78.040434][ T951] hub_event+0x1ed8/0x4830 [ 78.044683][ T951] process_one_work+0x73d/0xcb0 [ 78.049372][ T951] worker_thread+0xa60/0x1260 [ 78.053887][ T951] kthread+0x26d/0x300 [ 78.057793][ T951] ret_from_fork+0x1f/0x30 [ 78.062045][ T951] [ 78.064212][ T951] The buggy address belongs to the object at ffff88811665b800 [ 78.064212][ T951] which belongs to the cache kmalloc-512 of size 512 [ 78.078099][ T951] The buggy address is located 80 bytes inside of [ 78.078099][ T951] 512-byte region [ffff88811665b800, ffff88811665ba00) [ 78.091123][ T951] [ 78.093287][ T951] The buggy address belongs to the physical page: [ 78.099539][ T951] page:ffffea0004599600 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x116658 [ 78.109868][ T951] head:ffffea0004599600 order:2 compound_mapcount:0 compound_pincount:0 [ 78.118121][ T951] flags: 0x4000000000010200(slab|head|zone=1) [ 78.124032][ T951] raw: 4000000000010200 ffffea0004599300 dead000000000002 ffff888100042f00 [ 78.132451][ T951] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 78.140940][ T951] page dumped because: kasan: bad access detected [ 78.147209][ T951] page_owner tracks the page as allocated [ 78.152751][ T951] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 114, tgid 114 (udevd), ts 6103671856, free_ts 0 [ 78.172189][ T951] post_alloc_hook+0x213/0x220 [ 78.176784][ T951] prep_new_page+0x1b/0x110 [ 78.181128][ T951] get_page_from_freelist+0x3a98/0x3b10 [ 78.186507][ T951] __alloc_pages+0x234/0x610 [ 78.190935][ T951] alloc_slab_page+0x6c/0xf0 [ 78.195835][ T951] new_slab+0x90/0x3e0 [ 78.199732][ T951] ___slab_alloc+0x6f9/0xb80 [ 78.204159][ T951] __slab_alloc+0x5d/0xa0 [ 78.208325][ T951] __kmem_cache_alloc_node+0x207/0x2a0 [ 78.213627][ T951] __kmalloc_node_track_caller+0xa2/0x1e0 [ 78.219174][ T951] __alloc_skb+0x125/0x2d0 [ 78.223427][ T951] alloc_skb_with_frags+0xa6/0x680 [ 78.228376][ T951] sock_alloc_send_pskb+0x915/0xa50 [ 78.233408][ T951] unix_dgram_sendmsg+0x5b1/0x2050 [ 78.238353][ T951] sock_write_iter+0x394/0x4e0 [ 78.242954][ T951] vfs_write+0xaf6/0xed0 [ 78.247036][ T951] page_owner free stack trace missing [ 78.252239][ T951] [ 78.254409][ T951] Memory state around the buggy address: [ 78.259882][ T951] ffff88811665b700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 78.267896][ T951] ffff88811665b780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 78.275767][ T951] >ffff88811665b800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 78.283671][ T951] ^ [ 78.290173][ T951] ffff88811665b880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 78.298248][ T951] ffff88811665b900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 78.306436][ T951] ================================================================== [ 78.337058][ T2544] EXT4-fs error (device loop2): ext4_orphan_get:1400: inode #15: comm syz.2.841: casefold flag without casefold feature [ 78.366491][ T2544] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.841: couldn't read orphan inode 15 (err -117) [ 78.378849][ T951] Disabling lock debugging due to kernel taint [ 78.384958][ T951] hid 0003:28DE:1102.0012: No HID_FEATURE_REPORT submitted - nothing to read [ 78.409130][ T2544] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 78.419039][ T951] hid 0003:28DE:1102.0012: No HID_FEATURE_REPORT submitted - nothing to read [ 78.442300][ T290] EXT4-fs (loop3): unmounting filesystem. [ 78.499307][ T951] hid 0003:28DE:1102.0012: No HID_FEATURE_REPORT submitted - nothing to read [ 78.527950][ T951] hid 0003:28DE:1102.0012: No HID_FEATURE_REPORT submitted - nothing to read [ 78.538284][ T951] hid 0003:28DE:1102.0012: No HID_FEATURE_REPORT submitted - nothing to read [ 78.547557][ T2548] netlink: 196 bytes leftover after parsing attributes in process `syz.0.840'. [ 78.557319][ T87] hid 0003:28DE:1102.0012: No HID_FEATURE_REPORT submitted - nothing to read [ 78.570735][ T87] hid 0003:28DE:1102.0012: No HID_FEATURE_REPORT submitted - nothing to read [ 78.627501][ T87] hid 0003:28DE:1102.0012: No HID_FEATURE_REPORT submitted - nothing to read [ 78.670657][ T87] hid 0003:28DE:1102.0012: No HID_FEATURE_REPORT submitted - nothing to read [ 78.685071][ T2552] netlink: 196 bytes leftover after parsing attributes in process `syz.2.841'. [ 78.903984][ T87] hid 0003:28DE:1102.0012: No HID_FEATURE_REPORT submitted - nothing to read [ 78.924172][ T292] EXT4-fs (loop2): unmounting filesystem. [ 78.954546][ T87] hid 0003:28DE:1102.0012: No HID_FEATURE_REPORT submitted - nothing to read [ 78.977917][ T87] hid 0003:28DE:1102.0012: No HID_FEATURE_REPORT submitted - nothing to read [ 78.990317][ T87] hid 0003:28DE:1102.0012: No HID_FEATURE_REPORT submitted - nothing to read [ 79.008802][ T87] hid 0003:28DE:1102.0012: No HID_FEATURE_REPORT submitted - nothing to read [ 79.017621][ T87] hid 0003:28DE:1102.0012: No HID_FEATURE_REPORT submitted - nothing to read [ 79.195794][ T288] EXT4-fs (loop0): unmounting filesystem.