last executing test programs: 11.063980193s ago: executing program 3 (id=397): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800001f0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='ext4_begin_ordered_truncate\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r2, &(0x7f0000000180), 0x2000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) 11.063805273s ago: executing program 3 (id=398): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000000000000000000000000008500000050"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) r3 = openat$cgroup_freezer_state(r1, &(0x7f0000000140), 0x2, 0x0) r4 = openat$cgroup_procs(r1, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f00000000c0), 0x12) write$cgroup_freezer_state(r3, &(0x7f0000000400)='FROZEN\x00', 0x7) write$cgroup_freezer_state(r3, &(0x7f0000000080)='THAWED\x00', 0x7) 10.518531997s ago: executing program 3 (id=400): r0 = openat$kvm(0xffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4188aea7, &(0x7f00000003c0)) 10.462708566s ago: executing program 3 (id=403): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x4, 0x4}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000200000000000000000818110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x72}}]}, 0x0, 0x0, 0xffffffffffffffde, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000000)='console\x00', r1}, 0xf) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'geneve1\x00', 0x2}) ioctl$TUNSETOFFLOAD(r2, 0x400454c9, 0x3) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000002000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000640)='console\x00', r3}, 0x10) ioctl$TUNSETTXFILTER(r2, 0x400454d1, &(0x7f0000000980)=ANY=[]) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000009007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = dup(r6) sendmsg$inet(r7, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000000)="be39", 0x3500}], 0x1, &(0x7f0000000040)=[@ip_pktinfo={{0x1, 0x0, 0x8, {0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], 0x20}, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='tlb_flush\x00'}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) 10.352525182s ago: executing program 3 (id=404): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x16, 0x0, 0x8400, 0x1}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000400)={r0, 0x0, 0x20000000}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) bpf$MAP_DELETE_ELEM(0x15, &(0x7f0000000400)={r0, 0x0, 0x20000000}, 0x20) 10.291925302s ago: executing program 3 (id=405): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) r2 = dup(r0) mount$9p_fd(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000580)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) 1.374613318s ago: executing program 2 (id=522): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000580)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x18, &(0x7f0000000280)={@flat=@weak_handle, @flat=@weak_handle, @fda}, &(0x7f0000000140)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 1.365099219s ago: executing program 2 (id=523): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180200000000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='signal_generate\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r3}, 0x10) 1.268401264s ago: executing program 2 (id=525): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000200b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='timer_start\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000680)) 983.847038ms ago: executing program 2 (id=527): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000d8ffffffb703000008000000b70400000000925e850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000013007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='mm_page_alloc\x00'}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r4}}) 983.692738ms ago: executing program 0 (id=528): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, 0x0, 0x0) 983.593259ms ago: executing program 0 (id=529): r0 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$inet_mreqsrc(r0, 0x0, 0x26, &(0x7f0000000180)={@multicast2, @multicast2, @multicast2}, 0xc) 979.579069ms ago: executing program 0 (id=530): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000000c0)='tasks\x00', 0x2, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendfile(r3, r2, 0x0, 0x5) 795.598647ms ago: executing program 0 (id=531): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0xc9d7, 0x9, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@version_9p2000}]}}) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000540)=ANY=[@ANYBLOB="a8"], 0xa8) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000580)={0x10}, 0x10) write$FUSE_BMAP(r3, &(0x7f00000000c0)={0x18}, 0x18) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}}) openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0xffffffffa002cc0c, 0x0) 646.083091ms ago: executing program 0 (id=534): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x3, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) readv(r2, &(0x7f0000000200)=[{&(0x7f0000003140)=""/4096, 0x8}], 0x1) 579.819891ms ago: executing program 0 (id=536): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x83f42, 0x0) syz_mount_image$erofs(&(0x7f0000000340), &(0x7f0000000580)='./file2\x00', 0x2000000, &(0x7f00000004c0)=ANY=[], 0x1, 0x21d, &(0x7f0000000b40)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) bpf$MAP_CREATE(0x0, 0x0, 0x0) mkdir(0x0, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r6, &(0x7f0000000340)={0x2020}, 0xcb0a) truncate(&(0x7f0000000340)='./file2\x00', 0x0) open$dir(&(0x7f00000000c0)='./file3\x00', 0x0, 0x0) r7 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)={0x3f8, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x8, 0x66}}}}, [@NL80211_ATTR_NAN_FUNC={0x2c, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0x81}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "60a0e981f278"}, @NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "e56377618571"}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}]}, @NL80211_ATTR_NAN_FUNC={0x14, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0x3f}]}, @NL80211_ATTR_NAN_FUNC={0xfc, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}, @NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}, @NL80211_NAN_FUNC_TX_MATCH_FILTER={0xe8, 0xe, 0x0, 0x1, [{0xe2, 0x0, "8623e656cb398895b553b0ea5b83828d9e19a95121a8cfab1986db3fa2a71e0856f56ce74eb55908c7d533d38753d899bd789f97cde479dd2e14b63c0c85cfc862a9aa78a1d9acf82414a295a4c0b8f4868fab1a694ec9104b4d07087f06481bb3cb36db5065ca880191306930984406fd1c33aae0077304d04013fbe9027411f8183053ec3ef983a5b1a08fe515cb5f00c21b07ab5ab2f0fb821ea52a26f4613636fbf5a9294f2c604e3dc2e1dfff5dbd9ebce267a8ce6024a0dcbb2527cafd321aa54c9a0da8bf966c218f7f0ecc0ad3b0124f78675d6377d0f051d2c3"}]}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}]}, @NL80211_ATTR_NAN_FUNC={0x14, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0x3f}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x98}]}, @NL80211_ATTR_NAN_FUNC={0x10, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x6}]}, @NL80211_ATTR_NAN_FUNC={0x1cc, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "96ec8d08614c"}, @NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x3}, @NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x9}, @NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0xbf}, @NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}, @NL80211_NAN_FUNC_SRF={0x2c, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x3}, @NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x8}, @NL80211_NAN_SRF_MAC_ADDRS={0x10, 0x4, 0x0, 0x1, [{0xa}]}, @NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x1}]}, @NL80211_NAN_FUNC_RX_MATCH_FILTER={0x168, 0xd, 0x0, 0x1, [{0x103, 0x0, "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"}, {0x42, 0x0, "cb322667f800550b6051379d2d3f355ee041735befc9bf461cd94f52469da73f65b33a891d5cebe858a2ce7927cfb86357256b53860e0a6fe27a37dfe9c1"}, {0x1b, 0x0, "c00a07954110b76c8f10f4c0fb473ba5850e44a3e67bf7"}]}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}]}, @NL80211_ATTR_NAN_FUNC={0x94, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x4}, @NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0x2}, @NL80211_NAN_FUNC_SERVICE_INFO={0x7d, 0xb, "7b54d50075d7eea068da95a2cafe2406284ad8f7a53e815269d48edcd92932513b58dc20b68e891bc5e9a200321d60293c07dfe999c12116763cd7b92fac5e1c862057f2f411729d79113ed3bdbc7ad63617b4933d40e5b3c57550798fb3a4063e4c60099547f4d3bf880e59e1ca7ece6222102ee95f3f4f62"}]}, @NL80211_ATTR_NAN_FUNC={0x10, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TYPE={0x5}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}]}]}, 0x3f8}, 0x1, 0x0, 0x0, 0x4040018}, 0x8000) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r7}}) 494.719023ms ago: executing program 4 (id=544): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008080000b7040000000000008500000033000000850000009e00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0xc) 494.578933ms ago: executing program 4 (id=545): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f00000001c0)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x100000}}, {@dioread_nolock}, {@discard}, {@test_dummy_encryption}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [], 0x2e}, 0x84, 0x46f, &(0x7f0000000580)="$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") 480.083236ms ago: executing program 1 (id=546): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={0x0}, 0x10) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000800)='9', 0x1}], 0x6) 479.784626ms ago: executing program 1 (id=547): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000dc0)={&(0x7f0000000040)='ext4_unlink_enter\x00', r1}, 0x10) unlink(&(0x7f0000000140)='./cgroup\x00') 270.369408ms ago: executing program 1 (id=548): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000009c0)={&(0x7f0000000740)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0xa, [@var={0x4, 0x0, 0x0, 0xe, 0x4}, @datasec={0x6, 0x1, 0x0, 0xf, 0x1, [{0x4, 0xfff}], '\t'}, @datasec={0x0, 0x0, 0x0, 0xf, 0x3, [], "e10418"}]}, {0x0, [0x0, 0x0, 0x0, 0x2e, 0x61, 0x61, 0x30, 0x61]}}, &(0x7f0000000900)=""/179, 0x5a, 0xb3, 0x1}, 0x20) 162.576305ms ago: executing program 1 (id=550): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000940)={0x6, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000200000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x102, &(0x7f0000000400)=""/258, 0x0, 0x36}, 0x90) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x0, 0x2c, 0x0, "6970db5e1a5e59ab54053861b182c1aa5bfa09d21b699379ab04eb29ee95bfd4aa2e83662eefcca878e3677208de36650006bfdf10d35ddf3148573cbc274287f6f94c55fc2a25f51f91b69e87873ea1"}, 0xd8) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x8, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x0}, 0x90) r2 = socket$packet(0x11, 0x3, 0x300) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="0063707573657420006e65742000626c6b696f20006e65745f636c73204b58c0195769072e37ba21cc8aec5a4c4a5aad549bff406ec3aa32c8ce9627e02a23107c9f813e466f0f1e7ce3e4061529c42d"], 0x1d) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="b9ff03076003008cb89e08f00800", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) ioctl$sock_SIOCGIFINDEX(r2, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000000c0)={r5, 0x2, 0x6}, 0xfffffffffffffdd9) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x19, 0x4, 0x4, 0x8, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000140)={r6, &(0x7f00000007c0), &(0x7f00000000c0)=""/79}, 0x20) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r1, 0xc038943b, &(0x7f00000002c0)={0xffffffffffffffff, 0x18, '\x00', 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x17, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x4}]}, &(0x7f0000000080)='syzkaller\x00', 0x4, 0x98, &(0x7f00000000c0)=""/152}, 0x80) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'}) syz_emit_ethernet(0x17b, &(0x7f0000000400)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd6000000001450600fe8000000000000000000000000000bbff02000000000000000000000000000100004e22"], 0x0) 162.420945ms ago: executing program 2 (id=551): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000407b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r4, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000340)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000001e0000000c00018008000100", @ANYRES32=r3], 0x20}}, 0x0) 125.811831ms ago: executing program 2 (id=552): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x7, 0xfff, 0x5}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=@ipv6_delroute={0x64, 0x19, 0x1, 0x0, 0x25dfdbfc, {0xa, 0x10, 0x14, 0x1, 0xfc, 0x3, 0xfd, 0x1, 0x800}, [@RTA_OIF={0x8}, @RTA_PRIORITY={0x8, 0x6, 0x400}, @RTA_METRICS={0xf, 0x8, 0x0, 0x1, "442952ea57c6c16d160a86"}, @RTA_MARK={0x8}, @RTA_MARK={0x8, 0x10, 0x9}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x3}, @RTA_PRIORITY={0x8, 0x6, 0x8}, @RTA_MARK={0x8, 0x10, 0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x800}, 0x48804) mkdir(&(0x7f0000000140)='./control\x00', 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000100)=@raw={'raw\x00', 0x3c1, 0x3, 0x2f8, 0x280, 0x150, 0x150, 0x0, 0xf8010000, 0x398, 0x238, 0x238, 0x398, 0x238, 0x3, 0x0, {[{{@ipv6={@mcast1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [], [], 'team_slave_0\x00', 'macvlan1\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @multicast1}, [], [], 'batadv_slave_0\x00', 'gre0\x00'}, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "decb585218ebf5805f7356720db1714438ea1c4e4d4388cf67108f218b895e9936aa46525113c03de9cfdfa043d27bdb73687ca94feda3275eefade1197a320d"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x358) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r4, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a100efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb72b4b996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) 50.178482ms ago: executing program 4 (id=553): bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x3, &(0x7f00000004c0)=ANY=[], &(0x7f0000000480)='syzkaller\x00', 0x2, 0x1000, &(0x7f0000014000)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000000)={0x2}, 0x10}, 0x90) add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_open_dev$tty1(0xc, 0x4, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000400)='./file0\x00', 0x0, 0x223216, 0x0) chdir(&(0x7f0000000100)='./file0\x00') mkdir(&(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) rename(&(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000800)='./file0\x00') 660.26µs ago: executing program 1 (id=554): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x800, &(0x7f0000000380)={[{@iocharset={'iocharset', 0x3d, 'maciceland'}}, {@umask={'umask', 0x3d, 0x9}}, {@iocharset={'iocharset', 0x3d, 'cp949'}}, {@errors_remount}, {}, {@errors_remount}, {@gid}, {@errors_remount}, {@discard}, {@errors_continue}]}, 0x5, 0x1510, &(0x7f00000037c0)="$eJzs3Am4TlX7MPD7Xmvt45D0dJLhsNa6N08yLCdJMiTJkCRJkmRKSDrJKwmJQ6akQxKS4ZAMh5AMJ0465nkekyTpJEmmTMn6rlN83t7qe//v/+17/a//uX/Xta9n3c/a99prP/czrL0N33UZWrNxrWoNiQj+LfjrQxIAxALAQAC4DgACACgXVy4uqz+nxKR/7yDsr/VI6tWeAbuauP7ZG9c/e+P6Z29c/+yN65+9cf2zN65/9sb1Zyw72zy94PW8Zd+N7/9nZ/z7/79IZumxX60tfWPXfyGF65+9cf3/1wr+Kztx/bM3rn/2xvXP3rj+2UGOP+3h+mdvXH/GsrOrff+Zt6u7Xe33H2OMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4yx7OGsv0IBwOX21Z4XY4wxxhhjjDHG/jo+x9WeAWOMMcYYY4wxxv7/QxAgQUEAMZADYiEn5AIBANdCHrgOInA9xMENkBduhHyQHwpAQYiHQlAYNBiwQBBCESgKUbgJisHNUBxKQEkoBQ5KQwLcAmXgVigLt0E5uB3Kwx1QASpCJagMd0IVuAuqwt1QDe6B6lADakItuBdqw31QB+6HuvAA1IMHoT48BA3gYWgIj0AjeBQaw2PQBB6HptAMmkMLaPnfyn8JesDL0BN6QRL0hj7wCvSFftAfBsBAeBUGwWswGF6HZBgCQ+ENGAZvwnB4C0bASBgFb8NoeAfGwFgYB+MhBSbARHgXJsF7MBmmwFSYBqkwHWbA+zATZsFs+ADmwIcwF+bBfFgAafARLIRFkA4fw2L4BDJgCSyFZbAcVsBKWAWrYQ2shXWwHjbARtgEm2ELbIVtsB12wE7YBbvhU9gDn8Fe+Bz2wRf/Yv6Zf8jvioCAAgUqVBiDMRiLsZgLc2FuzI15MA9GMIJxGId5MS/mw3xYAAtgPMZjYSyMBg0SEhbBIhjFKBbDYlgci2NJLIkOHSZgApbBW7EslsVyWA7LY3msgBWxIlbGylgFq2BVrIrVsBpWx+pYE2vivXgv9sY6WAfrYl2sh/Uu357ChtgQG2EjbIyNsQk2wabYFJtjc2yJLbEVtsLW2BrbYltsh+2wPbbHREzEDtgBO2JH7ISdsDN2xi7YBbtiN+yGL+UAfBlfxl5YXfTGPtgH+2Jyjv44AAfgqzgIX8PX8HVMxiE4FN/AN/BNHI6ncQSOxFE4CquId3AMjkUS4zEFU3AiTsRJOAkn4xScgtMwFafjDJyBM3EWzsIPcA5+iB/iPJyHCzAN03AhLsJ0TMfFeAYzcAkuxWW4HFfgclyFq3EVrsV1uBY34AbchJtwC27BbbgNd+AO3IUKAD/Fz/AzTMZ9uA/34348gAfwIB7ETMzEQ3gID+NhPIJH8CgexWN4HE/gcTyFp/A0nsGzeBbP43m8gC/Ef9NoV4k1ySCyKKFEjIgRsSJW5BK5RG6RW+QReURERESciBN5RV6RT+QTBUQBES/iRWFRWBhhBIkwBgBEVERFMVFMFBfFRUlRUjjhRIJIEGVEGVFWlBXlxO2ivLhDVBAVRRtXWVQWVURbV1XcLaqJaqK6qCFqilqilqgtaos6oo6oK+qKeqKeqC8eEg1Eb+yPj4isyjQWQ7CJGIpNRTMhL32DtRLDsbVoI9qKp8RIHIHtRSuXKJ4VHcQY7Cj+Jsbi86KzGI9dxIuiq+gmuouXRA/R2vUUvcRk7C36iGnYV/QT/cUAMRNriA9wTs6a4nWRLIaIoeINsQDfFMPFW2KEGClGibfFaPGOGCPGinFivEgRE8RE8a6YJN4Tk8UUMVVME6liupgh3hczxSwxW3wg5ogPxVwxT8wXC0Sa+EgsFItEuvhYLBafiAyxRCwVy8RysUKsFKvEarFGrBXrxHqxQWwUm8RmsUVsFdvEdrFD7BS7xG7xqdgjPhN7xedin/hC7BdfigPiK3FQfC0yxTfikPhWHBbfiSPie3FU/CCOiePihDgpTokfxWlxRpwV58R58ZO4IH4WF4UXIFEKKaWSgYyROWSszClzyWtkbhlcenWvl3HyBplX3ijzyfyygCwo42UhWVhqaaSVJENZRBaVUXmTLCZvlsVlCVlSlpJOlpYJ8hZZRt4qy8rbZDl5uywv75AVZEVZSVaWd8oq8i4JkV+PUV3WkDVlLXmvrC3vk3Xk/bKufEDWkw/K+vIh2UA+LBvKR2Qj+ahsLB+TTeTjsqlsJpvLFrKlfEK2kk/K1rKNbCufku3k07K9fEYmymdlB+kvvUWel53lC7KLfFF2ld1kd/mzvCi97Cl7SYDeso98RfaV/WR/OUAOlK/KQfI1OVi+LpPlEDlUviGHyTflcPmWHCFHylHybTlaviPHyLFynBwvU+QEOVG+KyfJ9+RkOUVOldNkqpwu+18aabaU/zT/3T/IH/zL0TfJzXKL3Cq3ye1yh9wpd8ndcrfcI/fIvXKv3Cf3yf1yvzwgD8iD8qDMlJnykDwkD8vD8og8Io/Ko/KYPC7PyZPylPxRnpZn5Bl5Tp6X5+WFS68BKFRCSaVUoGJUDhWrcqpc6hqVW12r8qjrVERdr+LUDSqvulHlU/lVAVVQxatCqrDSyiirSIWqiCqqouomvPSGUSVVKeVUaZWgbvlX8lUxdbMqrkr8Jv/y/JL+ZH4tVUvVSrVSrVVr1Va1Ve1UO9VetVeJKlF1UB1UR9VRdVKdVGfVWXVRXVRX1VV1V91VD9VD9VQ9VZJKUn3UK6qv6qf6qwFqoHpVDVKD1GA1WCWrZDVUDVXD1DA1XA1XI9QINUqNUqPVaDVGjVHj1DiVolLURDVRTVKT1GQ1WU1VU1WqSlUz1Aw1U81Us9VsNUfNUXPVXDVfzVdpKk0tVAtVukpXi9VilaGWqCVqmVqmVqgVapVapdaoNWqdWqc2qA0qQ21Wm9VWtVVtV9vVTrVT7Va71R61R+1Ve9U+tU/tV/vVAXVAHVQHVabKVIfUIXVYHVZH1BF1VB1Vx9QxdUKdUKfUKXVanVZn1Vl1Xp1XF9QFdVFdzFr2BSIQgQpUEBPEBLFBbJAryBXkDnIHeYI8QSSIBHFBXJA3uDHIF+QPCgQFg/igUFA40IEJbCAuFT0a3BQUC24OigclgpJBqcAFpYOE4JagTHBrUDa4LSgX3B6UD+4IKgQVg0pB5eDOoEpwV1A1uDuoFtwTVA9qBDWDWsG9Qe3gvqBOcH9QN3ggqBc8GNQPHgoaBA8HDYNHgkbBo0Hj4LGgSfB40DRoFjQPWgQt/9LxvT+d/0nXU/fSSbq37qNf0X11P91fD9AD9at6kH5ND9av62Q9RA/Vb+hh+k09XL+lR+iRepR+W4/W7+gxeqwep8frFD1BT9Tv6kn6PT1ZT9FT9TSdqqfrGfp9PVPP0rP1B3qO/lDP1fP0fL1Ap+mP9EK9SKfrj/Vi/YnO0Ev0Ur1ML9cr9Eq9Sq/Wa/RavU6v1xv0Rr1Jb9Zb9Fa9TW/XO/ROvUvv1p/qPfozvVd/rvfpL/R+/aU+oL/SB/XXOlN/ow/pb/Vh/Z0+or/XR/UP+pg+rk/ok/qU/lGf1mf0WX1On9c/6Qv6Z31R+6zFfdbPu1FGmRgTY2JNrMllcpncJrfJY/KYiImYOBNn8pq8Jp/JZwqYAibexJvCprDJQoZMEVPERE3UFDPFTHFT3JQ0JY0zziSYBFPGlDFlTVlTzpQz5U15U8FUMJVMJXOnudPcZe4yd5u7zT3mHlPD1DC1TC1T29Q2dUwdU9fUNfVMPVPf1DcNTAPT0DQ0jUwj09g0Nk1ME9PUNDXNTXPT0rQ0rUwr09q0Nm1NW9POtDPtTXuTaBJNB9PBdDQdTSfTyXQ2nU0X08V0NV1Nd9Pd9DA9TE/T0ySZJNPH9DF9TV/T3/Q3A81AM8gMMoPNYJNsks1QM9QMM8PMcDPcjDAjzaishap5x4wxY804M96kmBQz0Uw0k8wkM9lMNlPNVJNqUs0MM8PMNDPNbDPbzDFzzFwz18w3802aSTMLzUKTbtLNYrPYZJgMs9QsNcvNcrPSrDSrzWqz1qw162G92Wg2ms1ms9lqtprtZrvZaXaa3Wa32WP2mL1mr9ln9pn9Zr85YA6Yg+agyTSZ5pA5ZA6bw+aIOWKOmqPmmDlmTpgT5pQ5ZU6b0+asOWvOm/yXfi+9ibU5bS57jc1tr7V57HX2H+MCtqCNt4VsYattPpv/N7Gx1ha3JWxJW8o6W9om2Ft+F1ewFW0lW9neaavYu2zV38W17X22jr3f1rUP2Fr23t/E9eyDtr59zDZABLDNbCPbwja2j9km9nHb1DazzW0L284+bdvbZ2yifdZ2sM/9Ll5oF9nVdo1da9fZPfYze9aes4ftd/a8/cn2tL3sQPuqHWRfs4Pt6zbZDvldPMq+bUfbd+wYO9aOs+N/F0+102yqnW5n2PftTDvrd3Ga/cjOsel2rp1n59sFv8RZc0q3H9vF9hObYZfYpXaZXW5X2JV21f+d6zK7wW60m+xu+6ndarfZ7XaH3Wl3/RJnncde+7ndZ7+wh+y39oD9yh60R2ym/eaXOOv8jtjv7VH7gz1mj9sT9qQ9ZX+0p+2ZX84/69xP2p/tRestEBKQJEUBxVAOiqWclIuuodx0LeWh6yhC11Mc3UB56UbKR/mpABWkeCpEhUmTIUtEIRWhohSlm+jyOr0klSJHpSmBbqEydCuVpduoHN1O5ekOqkAVqRJVpjupCt1FVeluqkb3UHWqQTWpFt1Ltek+qkP3U116gOrRg1SfHqIG9DA1pEeoET1KjekxakKPU1NqRs2pBbWkJ6gVPUmtqQ21paeoHT1N7ekZSqRnqQM9Rx3pb9SJnqfO9AJ1oRepK3Wj7vQS9aCXqSf1oiTqTX3oFepL/ag/DaCB9CoNotdoML1OyTSEhtIbNIzepOH0Fo2gkTSK3qbR9A6NobE0jsZTCk2gifQuTaL3aDJNoak0jVJpOs2g92kmzaLZ9AHNoQ9pLs2j+bSA0ugjWkiLKJ0+psX0CWXQElpKy2g5raCVtIpW0xpaS+toPW2gjbSJNtMW2krbaDvtoJ20i3bTp7SHPqO99Dntoy9oP31JB+grOkhfUyZ9Q4foWzpM39ER+t73oh/oGB2nE3SSTtGPdJrO0Fk6R+fpJ7pAP9NF8gQhhiKUoQqDMCbMEcaGOcNc4TVh7vDaME94XRgJrw/jwhvCvOGNYb4wf1ggLBjGh4XCwqEOTWhDCsOwSFg0jIY3hcXCm8PiYYmwZFgqdGHpMCG8JSwT3hqWDW8Ly4W3h+XDO8IKYcXwsQcqh3eGVcK7wqrh3WG18J6welgjrBnWCu8Na4f3hXXC+8O64QNh2fDBsH74UNggfDhsGD4SNgofDRuHj4VNwsfDpmGzsHnYImwZPhG2Cp8MW4dtwrbhU2G78OmwffhMmBg+G3YIn/ul/8FFf96fFPYO+4SvhK+E3t8v50cXRNOiH0UXRhdF06MfRxdHP4lmRJdEl0aXRZdHV0RXRldFV0fXRNdG10XXRzdEN0Y3Rb2vlQMcOuGkUy5wMS6Hi3U5XS53jcvtrnV53HUu4q53ce4Gl9fd6PK5/K6AK+jiXSFX2GlnnHXkQlfEFXVRd5Mr5m52xV0JV9KVcs6VdgmuhWvpWrpW7knX2rVxbd1T7in3tHvaPeOecc+6Du4519H9zXVyz7vO7gX3gnvRdXXdXHf3kuvhJuT59TOZ5Pq4Pq6v6+v6u/5uoBvoBrlBbrAb7JJdshvqhrphbpgb7oa7EW6EG+VGudFutBvjxrhxbpxLcSluopvoJrlJbrKb7Ka6qS7VpboZboab6Wa6KrN+PcpcN9fNd/NdmktzC13WmjHdLXaLXYbLcEvdUrfcLXcr3Uq32q12a91at96tdxvdRrfZbXZb3Va33W13O91Ot9vtdnv8db8O6va5/W6/O+AOuIPua5fpvnGH3LfusPvOHXHfu6PuB3fMHXcn3El3yv3oTrsz7qw75867n9wF97O76LxLiUyITIy8G5kUeS8yOTIlMjUyLZIamR6ZEXk/MjMyKzI78kFkTuTDyNzIvMj8yIJIWuSjyMLIokh65OPI4sgnkYzIksjSyLLI8siKiPeFtoa+iC/qo/4mX8zf7Iv7Er6kL+WdL+0T/C2+jL/Vl/W3+XL+dl/e3+Er+Iq+kn/cN/XNfHPfwrf0T/hW/knf2rfxbf1Tvp1/2rf3z/hE/6zv4J/zHf3ffCf/vO/sX/Bd/Iu+q+/mu/uXfA//su/pe/kk39v38a/4vr6f7+8H+IH+VT/Iv+YH+9d9sh/ih/o3/DD/ph/u3/Ij/Eg/KuZtP/ryJTKM9yl+gp/o3/WT/Ht+sp/ip/ppPtVP9zP8+36mn+Vn+w/8HP+hn+vn+fl+gU/zH/mFfpFP9x/7xf4Tn+GXXL6p7Ff6VX61X+PX+nV+vd/gN/pNfrPf4rf6bX673+F3+l1+t//U7/Gf+b3+c7/Pf+H3+y/9Af+VP+i/9pn+G3/If+sP++/8Ef+9P+p/8Mf8cX/Cn/Sn/I/+tD/jz/pz/rz/yV/wP/uL/G/WGGOMMcb+SyZcaYo/6u/9B8+Jv9u5DwBcu61g5t/3Z60o1+f7td1PxLeLAMCzvbo8cnmrXj0pKenSvhkSgqLzAC7/SVCWGLgSL4G28DQkQhso84fz7ye6nad/Mn70doBcf5cTC1fiK+N/+SfjP/HUqIXlw7Nx/4/x5wEUL3olJydciZdAW5X12AbK/sn4+Vv9k/nn/CoFoPXf5eSGK/GV+SfAk/AcJP5mT8YYY4wxxhhj7Ff9RKVOl68/L/+Nzz+6Po9XV3JywJX4n12fM8YYY4wxxhhj7Op7vlv3Z55ITGzT6V9vVP1vZXHjf2rDe4DLzygA+DcHBPiPn8WW/8ixki99dP6xa/k5H8D/jFL+FY2r/MXEGGOMMcYY+8tdWfT/9nl1tSbEGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4xlQ/+J/07sap8jY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxdrX9nwAAAP//geYOMQ==") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000e00)={'#! ', '', [{0x20, 'cp932Y\xe4\x00\x01mi@\xa9\x04\xa6c\xe3\x80ox\xfc\xe0\x94R\x81a\xbb\x924\xfe\xac\\\xef\xb5E\xfb\xf1@\v2\xca\x9eQ-I\a\xb2\x84\x9b\xea\x82}lB\xdc@(th*\xe0\v\xba\xe6iP\xd8\xfb\x11\x86\x99\x94\xc12\x9fj\xefP\x9c\xc2\xc8\xb1-d\xb3\xb3\xbc \\\x11V%\x87\xd5\x16\xf1\x89|\xfc!\xa1\xda,\xbd\xd0\xedw\x8c\xee\xc3\xe5Ii\x81K\x1b{\xc6b;d+&i\xab\b\xbd\xbd\x8d|d\x8f+\xad\x83\x18\x81\x87(\x1e\x12\x1b\xfe\xc9 bW\xffx\xc0\x868\b!\xd7\x1d-\xaa\xdd\xa3\xe5\x19\xbbA\xa4p\x16\xbc`\xc7\xb4z\b\xb8H\v\x15\xbdD\x17c\xda\xbd?\'t\x10\xf6\xb1l\xb71\x011\xda\xce`\x16\xc7#\x1f\xa4\xfan&\xdaH\xd0\x88\xbf\x01\x13\x80n.\xc5N\a\xeb\xb1\xec|\xf5\xfe\xd0F\xbb\xa9(\xe5 \xb7Ws\xbdu\xca\xc0\a\xb3Z\xa9@\xff\x04\x8c\xbeN\x8c\x98\xb1\xe0\x84\xfa\xca\xc8'}]}, 0x105) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) 411.38µs ago: executing program 4 (id=555): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x9}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='leases_conflict\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='leases_conflict\x00', r2}, 0x10) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r3, 0x400, 0x0) fsetxattr$trusted_overlay_redirect(r3, &(0x7f0000000040), 0x0, 0x0, 0x0) 246.98µs ago: executing program 4 (id=556): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008080000b7040000000000008500000033000000850000009e00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0xc) 173.74µs ago: executing program 1 (id=557): r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000a80)='r', 0x1}], 0x1, 0x4c92, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffff}) fallocate(r0, 0x20, 0x0, 0x140000000) pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000240)="d0", 0x1}], 0x1, 0x0, 0x0) 0s ago: executing program 4 (id=558): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) mount(&(0x7f00000001c0)=@filename='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000001200)='vfat\x00', 0x0, 0x0) kernel console output (not intermixed with test programs): [ 3.166846][ T86] acpid (86) used greatest stack depth: 23408 bytes left [ 3.400894][ T101] udevd[101]: starting version 3.2.11 [ 3.466956][ T102] udevd[102]: starting eudev-3.2.11 [ 3.467940][ T101] udevd (101) used greatest stack depth: 21576 bytes left [ 10.415119][ T28] kauditd_printk_skb: 50 callbacks suppressed [ 10.415131][ T28] audit: type=1400 audit(1719648479.261:61): avc: denied { transition } for pid=224 comm="sshd" path="/bin/sh" dev="sda1" ino=89 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 10.419177][ T28] audit: type=1400 audit(1719648479.261:62): avc: denied { noatsecure } for pid=224 comm="sshd" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 10.421705][ T28] audit: type=1400 audit(1719648479.271:63): avc: denied { write } for pid=224 comm="sh" path="pipe:[13220]" dev="pipefs" ino=13220 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 10.424584][ T28] audit: type=1400 audit(1719648479.271:64): avc: denied { rlimitinh } for pid=224 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 10.427365][ T28] audit: type=1400 audit(1719648479.271:65): avc: denied { siginh } for pid=224 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.0.64' (ED25519) to the list of known hosts. [ 16.625678][ T28] audit: type=1400 audit(1719648485.481:66): avc: denied { mounton } for pid=278 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 16.626566][ T278] cgroup: Unknown subsys name 'net' [ 16.628764][ T28] audit: type=1400 audit(1719648485.481:67): avc: denied { mount } for pid=278 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 16.632345][ T28] audit: type=1400 audit(1719648485.481:68): avc: denied { unmount } for pid=278 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 16.632493][ T278] cgroup: Unknown subsys name 'devices' [ 16.726788][ T278] cgroup: Unknown subsys name 'hugetlb' [ 16.732171][ T278] cgroup: Unknown subsys name 'rlimit' [ 16.831299][ T28] audit: type=1400 audit(1719648485.681:69): avc: denied { setattr } for pid=278 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=166 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 16.845515][ T279] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 16.855487][ T28] audit: type=1400 audit(1719648485.681:70): avc: denied { mounton } for pid=278 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 16.890013][ T28] audit: type=1400 audit(1719648485.681:71): avc: denied { mount } for pid=278 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 16.891791][ T278] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 16.912927][ T28] audit: type=1400 audit(1719648485.721:72): avc: denied { relabelto } for pid=279 comm="mkswap" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 16.912950][ T28] audit: type=1400 audit(1719648485.721:73): avc: denied { write } for pid=279 comm="mkswap" path="/root/swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 16.971951][ T28] audit: type=1400 audit(1719648485.741:74): avc: denied { read } for pid=278 comm="syz-executor" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 16.997408][ T28] audit: type=1400 audit(1719648485.741:75): avc: denied { open } for pid=278 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 17.420329][ T286] bridge0: port 1(bridge_slave_0) entered blocking state [ 17.427212][ T286] bridge0: port 1(bridge_slave_0) entered disabled state [ 17.434275][ T286] device bridge_slave_0 entered promiscuous mode [ 17.443538][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 17.450450][ T287] bridge0: port 1(bridge_slave_0) entered disabled state [ 17.457528][ T287] device bridge_slave_0 entered promiscuous mode [ 17.465073][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 17.471927][ T287] bridge0: port 2(bridge_slave_1) entered disabled state [ 17.479142][ T287] device bridge_slave_1 entered promiscuous mode [ 17.485535][ T286] bridge0: port 2(bridge_slave_1) entered blocking state [ 17.492356][ T286] bridge0: port 2(bridge_slave_1) entered disabled state [ 17.499560][ T286] device bridge_slave_1 entered promiscuous mode [ 17.529470][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 17.536431][ T290] bridge0: port 1(bridge_slave_0) entered disabled state [ 17.543368][ T290] device bridge_slave_0 entered promiscuous mode [ 17.566845][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 17.573674][ T290] bridge0: port 2(bridge_slave_1) entered disabled state [ 17.580981][ T290] device bridge_slave_1 entered promiscuous mode [ 17.598197][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 17.605019][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 17.612231][ T289] device bridge_slave_0 entered promiscuous mode [ 17.624041][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 17.630900][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 17.638155][ T289] device bridge_slave_1 entered promiscuous mode [ 17.673802][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 17.680678][ T288] bridge0: port 1(bridge_slave_0) entered disabled state [ 17.687872][ T288] device bridge_slave_0 entered promiscuous mode [ 17.701345][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 17.708243][ T288] bridge0: port 2(bridge_slave_1) entered disabled state [ 17.715426][ T288] device bridge_slave_1 entered promiscuous mode [ 17.833537][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 17.840391][ T287] bridge0: port 2(bridge_slave_1) entered forwarding state [ 17.847497][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 17.854264][ T287] bridge0: port 1(bridge_slave_0) entered forwarding state [ 17.883812][ T286] bridge0: port 2(bridge_slave_1) entered blocking state [ 17.890659][ T286] bridge0: port 2(bridge_slave_1) entered forwarding state [ 17.897761][ T286] bridge0: port 1(bridge_slave_0) entered blocking state [ 17.904536][ T286] bridge0: port 1(bridge_slave_0) entered forwarding state [ 17.924768][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 17.931640][ T290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 17.938730][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 17.945522][ T290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 17.956789][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 17.963620][ T288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 17.970722][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 17.977519][ T288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 18.006464][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 18.013287][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 18.020404][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 18.027191][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 18.062139][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 18.070341][ T19] bridge0: port 1(bridge_slave_0) entered disabled state [ 18.077457][ T19] bridge0: port 2(bridge_slave_1) entered disabled state [ 18.084381][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 18.093446][ T19] bridge0: port 1(bridge_slave_0) entered disabled state [ 18.100425][ T19] bridge0: port 2(bridge_slave_1) entered disabled state [ 18.108109][ T19] bridge0: port 1(bridge_slave_0) entered disabled state [ 18.115174][ T19] bridge0: port 2(bridge_slave_1) entered disabled state [ 18.122454][ T19] bridge0: port 1(bridge_slave_0) entered disabled state [ 18.129415][ T19] bridge0: port 2(bridge_slave_1) entered disabled state [ 18.136467][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 18.144885][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 18.152201][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 18.167205][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 18.190312][ T286] device veth0_vlan entered promiscuous mode [ 18.198706][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 18.207190][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 18.214858][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 18.222132][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 18.229324][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 18.237062][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 18.244178][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 18.252062][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 18.258883][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 18.266120][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 18.273991][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 18.280760][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 18.287877][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 18.295545][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 18.305785][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 18.313719][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 18.320549][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 18.327856][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 18.336023][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 18.342841][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 18.355497][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 18.363143][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 18.371276][ T19] bridge0: port 1(bridge_slave_0) entered blocking state [ 18.378114][ T19] bridge0: port 1(bridge_slave_0) entered forwarding state [ 18.385408][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 18.393303][ T19] bridge0: port 2(bridge_slave_1) entered blocking state [ 18.400052][ T19] bridge0: port 2(bridge_slave_1) entered forwarding state [ 18.413568][ T286] device veth1_macvtap entered promiscuous mode [ 18.436400][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 18.447625][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 18.464150][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 18.472292][ T19] bridge0: port 1(bridge_slave_0) entered blocking state [ 18.479133][ T19] bridge0: port 1(bridge_slave_0) entered forwarding state [ 18.486851][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 18.494722][ T19] bridge0: port 2(bridge_slave_1) entered blocking state [ 18.501497][ T19] bridge0: port 2(bridge_slave_1) entered forwarding state [ 18.508619][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 18.516819][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 18.524459][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 18.532119][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 18.539903][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 18.547651][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 18.555431][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 18.563059][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 18.570933][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 18.583525][ T288] device veth0_vlan entered promiscuous mode [ 18.598176][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 18.606351][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 18.614444][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 18.622171][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 18.630187][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 18.638298][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 18.646298][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 18.654205][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 18.662402][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 18.669622][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 18.680864][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 18.688926][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 18.701542][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 18.711257][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 18.719409][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 18.726926][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 18.736081][ T290] device veth0_vlan entered promiscuous mode [ 18.742702][ T288] device veth1_macvtap entered promiscuous mode [ 18.751538][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 18.763735][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 18.772307][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 18.783625][ T290] device veth1_macvtap entered promiscuous mode [ 18.805814][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 18.813629][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 18.822061][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 18.829594][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 18.838272][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 18.846541][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 18.854665][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 18.863065][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 18.871315][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 18.879562][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 18.887309][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 18.896955][ T289] device veth0_vlan entered promiscuous mode [ 18.905465][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 18.913225][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 18.920733][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 18.929554][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 18.937774][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 18.945725][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 18.962351][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 18.970236][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 18.978454][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 18.989589][ T289] device veth1_macvtap entered promiscuous mode [ 19.005321][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 19.012908][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 19.020881][ T287] device veth0_vlan entered promiscuous mode [ 19.054516][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 19.072193][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 19.083394][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 19.091530][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 19.099653][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 19.107666][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 19.128487][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 19.143594][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 19.153487][ T287] device veth1_macvtap entered promiscuous mode [ 19.185541][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 19.192926][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 19.206314][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 19.243867][ T357] Zero length message leads to an empty skb [ 19.244554][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 19.259829][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 19.404811][ T387] syz.0.34[387] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 19.404871][ T387] syz.0.34[387] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 19.419855][ T387] syz.0.34[387] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 19.431992][ T387] syz.0.34[387] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 19.438850][ T383] process 'syz.2.27' launched './file0' with NULL argv: empty string added [ 19.585279][ T19] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 19.664129][ T398] loop0: detected capacity change from 0 to 40427 [ 19.671757][ T398] F2FS-fs (loop0): Invalid segment count (0) [ 19.677710][ T398] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 19.686815][ T398] F2FS-fs (loop0): invalid crc value [ 19.693320][ T398] F2FS-fs (loop0): invalid journal entries nats 0 sits 9 [ 19.700346][ T398] F2FS-fs (loop0): Failed to initialize F2FS segment manager (-22) [ 19.905303][ T309] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 19.945341][ T19] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 19.956342][ T19] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 19.966658][ T19] usb 5-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 19.975814][ T19] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 19.992131][ T19] usb 5-1: config 0 descriptor?? [ 20.047803][ T417] syz.1.45[417] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 20.047846][ T417] syz.1.45[417] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 20.062826][ T417] syz.1.45[417] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 20.073911][ T417] syz.1.45[417] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 20.305390][ T309] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 189, changing to 11 [ 20.327311][ T309] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 58801, setting to 1024 [ 20.338258][ T309] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 20.351062][ T309] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 20.359964][ T309] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 20.368324][ T309] usb 3-1: config 0 descriptor?? [ 20.385622][ T400] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 20.476176][ T19] hid-multitouch 0003:1FD2:6007.0001: unknown main item tag 0x3 [ 20.485040][ T19] hid-multitouch 0003:1FD2:6007.0001: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.4-1/input0 [ 20.526335][ T39] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 20.677703][ T60] usb 5-1: USB disconnect, device number 2 [ 20.785272][ T39] usb 1-1: Using ep0 maxpacket: 8 [ 20.846100][ T309] plantronics 0003:047F:FFFF.0002: unknown main item tag 0xd [ 20.854053][ T309] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 20.863240][ T309] plantronics 0003:047F:FFFF.0002: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 20.925301][ T39] usb 1-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice=13.13 [ 20.934190][ T39] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 20.942593][ T39] usb 1-1: config 0 descriptor?? [ 20.985632][ T39] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 21.116925][ T309] usb 3-1: USB disconnect, device number 2 [ 21.196753][ T446] loop4: detected capacity change from 0 to 2048 [ 21.207673][ T19] usb 1-1: USB disconnect, device number 2 [ 21.219873][ T446] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 21.233976][ T290] EXT4-fs (loop4): unmounting filesystem. [ 21.266050][ T456] syz.4.61[456] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 21.266088][ T456] syz.4.61[456] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 21.492549][ T466] loop4: detected capacity change from 0 to 40427 [ 21.510427][ T466] F2FS-fs (loop4): Invalid segment count (0) [ 21.516496][ T466] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 21.526170][ T466] F2FS-fs (loop4): invalid crc value [ 21.532116][ T466] F2FS-fs (loop4): invalid journal entries nats 0 sits 9 [ 21.539012][ T466] F2FS-fs (loop4): Failed to initialize F2FS segment manager (-22) [ 21.641535][ T28] kauditd_printk_skb: 67 callbacks suppressed [ 21.641548][ T28] audit: type=1400 audit(1719648490.491:143): avc: denied { nlmsg_write } for pid=472 comm="syz.2.68" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 21.687890][ T475] loop2: detected capacity change from 0 to 256 [ 21.709865][ T28] audit: type=1400 audit(1719648490.561:144): avc: denied { mount } for pid=474 comm="syz.2.69" name="/" dev="loop2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 21.786109][ T481] overlayfs: missing 'lowerdir' [ 21.807577][ T471] loop4: detected capacity change from 0 to 40427 [ 21.818775][ T28] audit: type=1400 audit(1719648490.671:145): avc: denied { unmount } for pid=287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 21.841635][ T471] F2FS-fs (loop4): invalid crc value [ 21.865537][ T471] F2FS-fs (loop4): Found nat_bits in checkpoint [ 21.927352][ T471] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 21.960335][ T28] audit: type=1400 audit(1719648490.811:146): avc: denied { write } for pid=470 comm="syz.4.67" name="/" dev="loop4" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 21.994938][ T290] syz-executor: attempt to access beyond end of device [ 21.994938][ T290] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 22.001318][ T28] audit: type=1400 audit(1719648490.831:147): avc: denied { add_name } for pid=470 comm="syz.4.67" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 22.067281][ T28] audit: type=1400 audit(1719648490.831:148): avc: denied { create } for pid=470 comm="syz.4.67" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 22.104978][ T490] loop0: detected capacity change from 0 to 40427 [ 22.111332][ T28] audit: type=1400 audit(1719648490.831:149): avc: denied { write open } for pid=470 comm="syz.4.67" path="/root/syzkaller.s62Llx/17/bus/bus" dev="loop4" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 22.138253][ T490] F2FS-fs (loop0): Corrupted extension count (64 + 1 > 64) [ 22.138789][ T28] audit: type=1400 audit(1719648490.831:150): avc: denied { ioctl } for pid=470 comm="syz.4.67" path="/root/syzkaller.s62Llx/17/bus/bus" dev="loop4" ino=10 ioctlcmd=0xf50b scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 22.155652][ T490] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 22.177684][ T28] audit: type=1400 audit(1719648490.921:151): avc: denied { write } for pid=497 comm="syz.1.79" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 22.201957][ T28] audit: type=1400 audit(1719648491.021:152): avc: denied { append } for pid=84 comm="syslogd" name="messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 22.202646][ T490] F2FS-fs (loop0): invalid crc value [ 22.229200][ T39] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 22.244914][ T490] F2FS-fs (loop0): Found nat_bits in checkpoint [ 22.295538][ T490] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 22.302411][ T490] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 22.353809][ T504] loop4: detected capacity change from 0 to 40427 [ 22.365631][ T504] F2FS-fs (loop4): Invalid segment count (0) [ 22.371768][ T504] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 22.383906][ T504] F2FS-fs (loop4): invalid crc value [ 22.390077][ T504] F2FS-fs (loop4): invalid journal entries nats 0 sits 9 [ 22.397029][ T504] F2FS-fs (loop4): Failed to initialize F2FS segment manager (-22) [ 22.584365][ T519] loop0: detected capacity change from 0 to 40427 [ 22.615313][ T39] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 22.626153][ T39] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 22.635819][ T39] usb 3-1: New USB device found, idVendor=0925, idProduct=0005, bcdDevice= 0.00 [ 22.644706][ T39] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 22.653038][ T39] usb 3-1: config 0 descriptor?? [ 22.774072][ T519] F2FS-fs (loop0): invalid crc value [ 22.780383][ T519] F2FS-fs (loop0): Found nat_bits in checkpoint [ 22.804463][ T519] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 22.837072][ T532] fscrypt (sda1, inode 1948): Unsupported encryption flags (0x22) [ 22.889565][ T534] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.989129][ T544] syz.0.86: attempt to access beyond end of device [ 22.989129][ T544] loop0: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 23.004323][ T544] syz.0.86: attempt to access beyond end of device [ 23.004323][ T544] loop0: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 23.018161][ T544] syz.0.86: attempt to access beyond end of device [ 23.018161][ T544] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 23.032789][ T544] syz.0.86: attempt to access beyond end of device [ 23.032789][ T544] loop0: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 23.127305][ T39] smartjoyplus 0003:0925:0005.0003: unknown main item tag 0x0 [ 23.134867][ T39] smartjoyplus 0003:0925:0005.0003: unknown main item tag 0x0 [ 23.145498][ T39] smartjoyplus 0003:0925:0005.0003: hidraw0: USB HID v0.00 Device [HID 0925:0005] on usb-dummy_hcd.2-1/input0 [ 23.157403][ T39] smartjoyplus 0003:0925:0005.0003: no output reports found [ 23.165340][ T60] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 23.287920][ T286] syz-executor: attempt to access beyond end of device [ 23.287920][ T286] loop0: rw=2049, sector=45112, nr_sectors = 8 limit=40427 [ 23.322107][ T554] loop3: detected capacity change from 0 to 1024 [ 23.330069][ T291] usb 3-1: USB disconnect, device number 3 [ 23.340997][ T554] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 23.359951][ T554] EXT4-fs error (device loop3): ext4_xattr_ibody_list:748: inode #2: comm syz.3.101: corrupted in-inode xattr [ 23.371626][ T554] EXT4-fs (loop3): Remounting filesystem read-only [ 23.381772][ T288] EXT4-fs (loop3): unmounting filesystem. [ 23.425325][ T60] usb 5-1: Using ep0 maxpacket: 16 [ 23.545293][ T60] usb 5-1: config 0 has an invalid interface number: 50 but max is 1 [ 23.553204][ T60] usb 5-1: config 0 has no interface number 1 [ 23.559517][ T60] usb 5-1: config 0 interface 50 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 23.569054][ T60] usb 5-1: config 0 interface 50 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 0 [ 23.578611][ T60] usb 5-1: config 0 interface 50 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 23.588202][ T60] usb 5-1: config 0 interface 50 altsetting 0 endpoint 0xC has an invalid bInterval 0, changing to 7 [ 23.598831][ T60] usb 5-1: config 0 interface 50 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 23.755251][ T6] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 23.765431][ T60] usb 5-1: New USB device found, idVendor=0499, idProduct=1034, bcdDevice=26.ff [ 23.774469][ T60] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 23.782516][ T60] usb 5-1: Product: syz [ 23.786738][ T60] usb 5-1: Manufacturer: syz [ 23.791172][ T60] usb 5-1: SerialNumber: syz [ 23.826920][ T60] usb 5-1: config 0 descriptor?? [ 24.115699][ T6] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 24.115846][ T60] usb 5-1: invalid MIDI in EP 0 [ 24.129088][ T6] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 24.130480][ T60] snd-usb-audio: probe of 5-1:0.50 failed with error -22 [ 24.196901][ T60] snd-usb-audio: probe of 5-1:0.0 failed with error -2 [ 24.204530][ T60] usb 5-1: USB disconnect, device number 3 [ 24.225324][ T6] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 24.234230][ T6] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 24.235750][ T312] udevd[312]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 24.242217][ T6] usb 1-1: SerialNumber: syz [ 24.615816][ T6] usb 1-1: 0:2 : does not exist [ 24.695936][ T606] device veth1_macvtap left promiscuous mode [ 24.705828][ T606] device veth1_macvtap entered promiscuous mode [ 24.729054][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 24.791571][ T39] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 24.809158][ T616] loop4: detected capacity change from 0 to 2048 [ 24.865797][ T6] usb 1-1: USB disconnect, device number 3 [ 24.888370][ T616] Alternate GPT is invalid, using primary GPT. [ 24.899377][ T616] loop4: p2 p3 p7 [ 24.933096][ T358] udevd[358]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 24.978686][ T358] udevd[358]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 24.978725][ T620] udevd[620]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 24.989513][ T312] udevd[312]: inotify_add_watch(7, /dev/loop4p7, 10) failed: No such file or directory [ 24.997682][ T291] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 25.205288][ T39] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 25.216041][ T39] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 25.225556][ T60] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 25.232853][ T39] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 25.241696][ T39] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 25.251318][ T39] usb 4-1: config 0 descriptor?? [ 25.375332][ T291] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 25.387854][ T291] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 25.397651][ T291] usb 3-1: New USB device found, idVendor=0925, idProduct=0005, bcdDevice= 0.00 [ 25.406840][ T291] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 25.425585][ T625] loop0: detected capacity change from 0 to 512 [ 25.435978][ T291] usb 3-1: config 0 descriptor?? [ 25.441229][ T625] ======================================================= [ 25.441229][ T625] WARNING: The mand mount option has been deprecated and [ 25.441229][ T625] and is ignored by this kernel. Remove the mand [ 25.441229][ T625] option from the mount to silence this warning. [ 25.441229][ T625] ======================================================= [ 25.477292][ T625] EXT4-fs: Invalid want_extra_isize 1 [ 25.545574][ T625] bpf_get_probe_write_proto: 6 callbacks suppressed [ 25.545585][ T625] syz.0.128[625] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 25.552084][ T625] syz.0.128[625] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 25.564520][ T625] request_module fs-coda succeeded, but still no fs? [ 25.635292][ T60] usb 5-1: config index 0 descriptor too short (expected 11366, got 18) [ 25.643430][ T60] usb 5-1: config 111 has too many interfaces: 114, using maximum allowed: 32 [ 25.652166][ T60] usb 5-1: config 111 has an invalid descriptor of length 111, skipping remainder of the config [ 25.662414][ T60] usb 5-1: config 111 has 0 interfaces, different from the descriptor's value: 114 [ 25.671510][ T60] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 25.680369][ T60] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 25.875264][ T19] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 25.916023][ T291] smartjoyplus 0003:0925:0005.0005: unknown main item tag 0x0 [ 25.923329][ T291] smartjoyplus 0003:0925:0005.0005: unknown main item tag 0x0 [ 25.931176][ T291] smartjoyplus 0003:0925:0005.0005: hidraw0: USB HID v0.00 Device [HID 0925:0005] on usb-dummy_hcd.2-1/input0 [ 25.942710][ T291] smartjoyplus 0003:0925:0005.0005: no output reports found [ 26.122303][ T24] usb 3-1: USB disconnect, device number 4 [ 26.245303][ T19] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 26.255991][ T19] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 26.265536][ T19] usb 1-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 26.274362][ T19] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 26.282932][ T19] usb 1-1: config 0 descriptor?? [ 26.315293][ T39] usb 4-1: string descriptor 0 read error: -71 [ 26.345306][ T39] uclogic 0003:256C:006D.0004: failed retrieving string descriptor #200: -71 [ 26.353927][ T39] uclogic 0003:256C:006D.0004: failed retrieving pen parameters: -71 [ 26.361890][ T39] uclogic 0003:256C:006D.0004: failed probing pen v2 parameters: -71 [ 26.369765][ T39] uclogic 0003:256C:006D.0004: failed probing parameters: -71 [ 26.377036][ T39] uclogic: probe of 0003:256C:006D.0004 failed with error -71 [ 26.385497][ T39] usb 4-1: USB disconnect, device number 2 [ 26.405291][ T60] usb 5-1: language id specifier not provided by device, defaulting to English [ 26.635583][ T60] usb 5-1: USB disconnect, device number 4 [ 26.680786][ T28] kauditd_printk_skb: 21 callbacks suppressed [ 26.680799][ T28] audit: type=1400 audit(1719648495.531:174): avc: denied { create } for pid=652 comm="syz.2.141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 26.766096][ T19] hid-multitouch 0003:1FD2:6007.0006: unknown main item tag 0x3 [ 26.774710][ T19] hid-multitouch 0003:1FD2:6007.0006: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.0-1/input0 [ 26.820560][ T659] overlayfs: missing 'lowerdir' [ 26.832584][ T28] audit: type=1400 audit(1719648495.681:175): avc: denied { name_bind } for pid=660 comm="syz.3.145" src=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 26.864914][ T28] audit: type=1400 audit(1719648495.711:176): avc: denied { create } for pid=664 comm="syz.3.147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 26.884282][ T28] audit: type=1400 audit(1719648495.711:177): avc: denied { connect } for pid=664 comm="syz.3.147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 26.904088][ T28] audit: type=1400 audit(1719648495.711:178): avc: denied { getopt } for pid=664 comm="syz.3.147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 26.965250][ T6] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 26.980464][ T19] usb 1-1: USB disconnect, device number 4 [ 27.139653][ T678] device pim6reg1 entered promiscuous mode [ 27.215481][ T6] usb 3-1: Using ep0 maxpacket: 16 [ 27.335414][ T6] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 27.345176][ T6] usb 3-1: config 0 has no interface number 0 [ 27.357921][ T6] usb 3-1: config 0 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 27.485351][ T6] usb 3-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice= 0.88 [ 27.499735][ T6] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 27.522129][ T6] usb 3-1: Product: syz [ 27.526324][ T6] usb 3-1: SerialNumber: syz [ 27.532979][ T6] usb 3-1: config 0 descriptor?? [ 27.671579][ T28] audit: type=1400 audit(1719648496.521:179): avc: denied { relabelfrom } for pid=683 comm="syz.1.155" name="" dev="pipefs" ino=15709 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 27.705347][ T28] audit: type=1400 audit(1719648496.521:180): avc: denied { accept } for pid=687 comm="syz.0.156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 27.753236][ T691] syz.1.157 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 27.790163][ T28] audit: type=1400 audit(1719648496.641:181): avc: denied { read } for pid=687 comm="syz.0.156" name="binder1" dev="binder" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 27.809192][ T6] snd-usb-audio: probe of 3-1:0.2 failed with error -2 [ 27.932712][ T682] syz.4.153 (682) used greatest stack depth: 21320 bytes left [ 27.940168][ T28] audit: type=1400 audit(1719648496.641:182): avc: denied { open } for pid=687 comm="syz.0.156" path="/dev/binderfs/binder1" dev="binder" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 27.964858][ T6] usb 3-1: USB disconnect, device number 5 [ 27.971432][ T28] audit: type=1400 audit(1719648496.761:183): avc: denied { ioctl } for pid=693 comm="syz.1.158" path="socket:[14882]" dev="sockfs" ino=14882 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.002747][ T358] udevd[358]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 28.047887][ T702] loop4: detected capacity change from 0 to 1024 [ 28.061340][ T706] loop3: detected capacity change from 0 to 512 [ 28.068016][ T702] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 28.078779][ T702] EXT4-fs (loop4): invalid journal inode [ 28.086563][ T706] EXT4-fs (loop3): 1 truncate cleaned up [ 28.096113][ T706] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 28.234974][ T731] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=731 comm=syz.4.174 [ 28.297699][ T732] EXT4-fs error (device loop3): ext4_find_dest_de:2112: inode #2: block 13: comm syz.3.164: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0 [ 28.643028][ T739] loop4: detected capacity change from 0 to 8192 [ 28.703359][ T726] loop0: detected capacity change from 0 to 40427 [ 28.728705][ T726] F2FS-fs (loop0): invalid crc value [ 28.734907][ T726] F2FS-fs (loop0): Found nat_bits in checkpoint [ 28.749069][ T760] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=760 comm=syz.1.187 [ 28.778954][ T726] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 29.168576][ T779] syz.0.171: attempt to access beyond end of device [ 29.168576][ T779] loop0: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 29.184573][ T779] syz.0.171: attempt to access beyond end of device [ 29.184573][ T779] loop0: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 29.198531][ T779] syz.0.171: attempt to access beyond end of device [ 29.198531][ T779] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 29.213654][ T779] syz.0.171: attempt to access beyond end of device [ 29.213654][ T779] loop0: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 29.228796][ T779] syz.0.171: attempt to access beyond end of device [ 29.228796][ T779] loop0: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 29.245088][ T779] syz.0.171: attempt to access beyond end of device [ 29.245088][ T779] loop0: rw=2049, sector=45112, nr_sectors = 8 limit=40427 [ 29.258700][ T779] syz.0.171: attempt to access beyond end of device [ 29.258700][ T779] loop0: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 29.272316][ T779] syz.0.171: attempt to access beyond end of device [ 29.272316][ T779] loop0: rw=2049, sector=45112, nr_sectors = 8 limit=40427 [ 29.276387][ T288] EXT4-fs (loop3): unmounting filesystem. [ 29.347974][ T790] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=790 comm=syz.1.200 [ 29.439120][ T286] syz-executor: attempt to access beyond end of device [ 29.439120][ T286] loop0: rw=2049, sector=45120, nr_sectors = 8 limit=40427 [ 29.599977][ T802] loop2: detected capacity change from 0 to 1024 [ 29.633232][ T802] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 29.653360][ T802] EXT4-fs (loop2): invalid journal inode [ 29.747473][ T818] tipc: Started in network mode [ 29.752162][ T818] tipc: Node identity 2007ff, cluster identity 4711 [ 29.758739][ T818] tipc: Node number set to 2099199 [ 29.866755][ T24] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 29.936563][ T838] SELinux: security_context_str_to_sid (s) failed with errno=-22 [ 30.118887][ T848] loop2: detected capacity change from 0 to 8192 [ 30.125322][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 30.189899][ T851] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 30.245281][ T24] usb 1-1: config 0 has an invalid interface number: 50 but max is 1 [ 30.253373][ T24] usb 1-1: config 0 has no interface number 1 [ 30.272194][ T24] usb 1-1: config 0 interface 50 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 30.282147][ T24] usb 1-1: config 0 interface 50 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 0 [ 30.284615][ T860] netlink: 'syz.1.230': attribute type 3 has an invalid length. [ 30.291915][ T24] usb 1-1: config 0 interface 50 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 30.308915][ T24] usb 1-1: config 0 interface 50 altsetting 0 endpoint 0xC has an invalid bInterval 0, changing to 7 [ 30.310436][ T851] kvm: emulating exchange as write [ 30.319853][ T24] usb 1-1: config 0 interface 50 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 30.398040][ T869] xt_CT: You must specify a L4 protocol and not use inversions on it [ 30.412729][ T871] loop2: detected capacity change from 0 to 16 [ 30.419771][ T871] erofs: (device loop2): mounted with root inode @ nid 36. [ 30.459346][ T874] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=874 comm=syz.1.238 [ 30.515347][ T24] usb 1-1: New USB device found, idVendor=0499, idProduct=1034, bcdDevice=26.ff [ 30.524196][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 30.535323][ T24] usb 1-1: Product: syz [ 30.539291][ T24] usb 1-1: Manufacturer: syz [ 30.543769][ T24] usb 1-1: SerialNumber: syz [ 30.569614][ T24] usb 1-1: config 0 descriptor?? [ 30.572351][ T882] xt_bpf: check failed: parse error [ 30.641644][ T902] syz.2.250[902] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 30.641681][ T902] syz.2.250[902] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 30.667891][ T906] loop3: detected capacity change from 0 to 128 [ 30.696977][ T906] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 30.712058][ T914] loop4: detected capacity change from 0 to 256 [ 30.719591][ T909] xt_bpf: check failed: parse error [ 30.727792][ T906] ext4 filesystem being mounted at /root/syzkaller.W0aRAD/41/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 30.794627][ T288] EXT4-fs (loop3): unmounting filesystem. [ 30.847735][ T24] usb 1-1: invalid MIDI in EP 0 [ 30.854895][ T24] snd-usb-audio: probe of 1-1:0.50 failed with error -22 [ 30.966995][ T24] snd-usb-audio: probe of 1-1:0.0 failed with error -2 [ 30.974755][ T24] usb 1-1: USB disconnect, device number 5 [ 31.135367][ T19] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 31.211597][ T951] xt_bpf: check failed: parse error [ 31.405247][ T19] usb 4-1: Using ep0 maxpacket: 16 [ 31.525296][ T19] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 31.546474][ T19] usb 4-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 31.566461][ T19] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 31.586289][ T19] usb 4-1: config 0 descriptor?? [ 31.613951][ T983] loop2: detected capacity change from 0 to 8192 [ 31.891296][ T28] kauditd_printk_skb: 87 callbacks suppressed [ 31.891316][ T28] audit: type=1326 audit(1719648500.741:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=932 comm="syz.3.263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe81bb75b99 code=0x7ffc0000 [ 31.962972][ T28] audit: type=1326 audit(1719648500.781:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=932 comm="syz.3.263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=114 compat=0 ip=0x7fe81bb75b99 code=0x7ffc0000 [ 31.985948][ T28] audit: type=1326 audit(1719648500.781:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=932 comm="syz.3.263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe81bb75b99 code=0x7ffc0000 [ 32.008897][ T28] audit: type=1326 audit(1719648500.781:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=932 comm="syz.3.263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=4 compat=0 ip=0x7fe81bb75b99 code=0x7ffc0000 [ 32.045249][ T28] audit: type=1326 audit(1719648500.781:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=932 comm="syz.3.263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe81bb75b99 code=0x7ffc0000 [ 32.068352][ T24] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 32.075734][ T28] audit: type=1326 audit(1719648500.791:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=932 comm="syz.3.263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fe81bb75b99 code=0x7ffc0000 [ 32.098772][ T28] audit: type=1326 audit(1719648500.791:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=932 comm="syz.3.263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe81bb75b99 code=0x7ffc0000 [ 32.121982][ T28] audit: type=1326 audit(1719648500.791:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=932 comm="syz.3.263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe81bb75b99 code=0x7ffc0000 [ 32.145242][ T28] audit: type=1326 audit(1719648500.791:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=932 comm="syz.3.263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe81bb75b99 code=0x7ffc0000 [ 32.168924][ T934] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 32.177127][ T28] audit: type=1326 audit(1719648500.791:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=932 comm="syz.3.263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe81bb7579b code=0x7ffc0000 [ 32.181317][ T934] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 32.225806][ T19] hid (null): report_id 2838798905 is invalid [ 32.231708][ T19] hid (null): unknown global tag 0xc [ 32.236934][ T19] hid (null): unknown global tag 0xa5 [ 32.242135][ T19] hid (null): unknown global tag 0xd [ 32.247376][ T19] hid (null): unknown global tag 0xc [ 32.252490][ T19] hid (null): global environment stack underflow [ 32.259228][ T19] hid-generic 0003:0158:0100.0007: unknown main item tag 0x1 [ 32.266484][ T19] hid-generic 0003:0158:0100.0007: unknown main item tag 0x0 [ 32.273599][ T19] hid-generic 0003:0158:0100.0007: unknown main item tag 0x0 [ 32.280848][ T19] hid-generic 0003:0158:0100.0007: unknown main item tag 0x2 [ 32.288034][ T19] hid-generic 0003:0158:0100.0007: unknown main item tag 0x0 [ 32.295236][ T19] hid-generic 0003:0158:0100.0007: unknown main item tag 0x0 [ 32.302416][ T19] hid-generic 0003:0158:0100.0007: unknown main item tag 0x0 [ 32.309641][ T19] hid-generic 0003:0158:0100.0007: unknown main item tag 0x0 [ 32.316845][ T19] hid-generic 0003:0158:0100.0007: unknown main item tag 0x4 [ 32.324035][ T19] hid-generic 0003:0158:0100.0007: unknown main item tag 0x0 [ 32.331669][ T19] hid-generic 0003:0158:0100.0007: unknown main item tag 0x0 [ 32.339084][ T19] hid-generic 0003:0158:0100.0007: unknown main item tag 0x0 [ 32.346323][ T19] hid-generic 0003:0158:0100.0007: unknown main item tag 0x0 [ 32.353572][ T19] hid-generic 0003:0158:0100.0007: unknown main item tag 0x0 [ 32.360840][ T19] hid-generic 0003:0158:0100.0007: unknown main item tag 0x0 [ 32.368171][ T19] hid-generic 0003:0158:0100.0007: unknown main item tag 0x0 [ 32.375495][ T19] hid-generic 0003:0158:0100.0007: unknown main item tag 0x0 [ 32.382706][ T19] hid-generic 0003:0158:0100.0007: unknown main item tag 0x0 [ 32.390076][ T19] hid-generic 0003:0158:0100.0007: unknown main item tag 0x0 [ 32.397502][ T19] hid-generic 0003:0158:0100.0007: unknown main item tag 0x0 [ 32.406094][ T19] hid-generic 0003:0158:0100.0007: unknown main item tag 0x0 [ 32.413717][ T19] hid-generic 0003:0158:0100.0007: unknown main item tag 0x0 [ 32.420963][ T19] hid-generic 0003:0158:0100.0007: unknown main item tag 0x0 [ 32.428311][ T19] hid-generic 0003:0158:0100.0007: unknown main item tag 0x0 [ 32.435774][ T19] hid-generic 0003:0158:0100.0007: unknown main item tag 0x0 [ 32.444252][ T19] hid-generic 0003:0158:0100.0007: unknown main item tag 0x0 [ 32.451539][ T19] hid-generic 0003:0158:0100.0007: unknown main item tag 0x0 [ 32.458710][ T19] hid-generic 0003:0158:0100.0007: unknown main item tag 0x0 [ 32.466015][ T19] hid-generic 0003:0158:0100.0007: unknown main item tag 0x0 [ 32.475364][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 189, changing to 11 [ 32.486356][ T39] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 32.488224][ T19] hid-generic 0003:0158:0100.0007: unknown main item tag 0x0 [ 32.493838][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 58801, setting to 1024 [ 32.511971][ T24] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 32.525082][ T24] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 32.526579][ T19] hid-generic 0003:0158:0100.0007: unknown main item tag 0x0 [ 32.538195][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 32.541317][ T19] hid-generic 0003:0158:0100.0007: unknown main item tag 0x0 [ 32.541340][ T19] hid-generic 0003:0158:0100.0007: unknown main item tag 0x0 [ 32.541359][ T19] hid-generic 0003:0158:0100.0007: unknown main item tag 0x0 [ 32.541379][ T19] hid-generic 0003:0158:0100.0007: unknown main item tag 0x0 [ 32.541398][ T19] hid-generic 0003:0158:0100.0007: unknown main item tag 0x0 [ 32.541418][ T19] hid-generic 0003:0158:0100.0007: unexpected long global item [ 32.541609][ T19] hid-generic: probe of 0003:0158:0100.0007 failed with error -22 [ 32.542688][ T19] usb 4-1: USB disconnect, device number 3 [ 32.565480][ T24] usb 3-1: config 0 descriptor?? [ 32.625303][ T999] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 32.755259][ T39] usb 1-1: Using ep0 maxpacket: 16 [ 32.873291][ T1024] netlink: 8 bytes leftover after parsing attributes in process `syz.4.302'. [ 32.881925][ T1024] netlink: 8 bytes leftover after parsing attributes in process `syz.4.302'. [ 32.895345][ T39] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 32.903274][ T39] usb 1-1: config 0 has no interface number 0 [ 32.909503][ T39] usb 1-1: config 0 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 33.045330][ T39] usb 1-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice= 0.88 [ 33.054394][ T39] usb 1-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 33.062711][ T39] usb 1-1: Product: syz [ 33.069579][ T24] plantronics 0003:047F:FFFF.0008: unknown main item tag 0xd [ 33.081782][ T1040] device pim6reg1 entered promiscuous mode [ 33.091444][ T39] usb 1-1: SerialNumber: syz [ 33.101607][ T24] plantronics 0003:047F:FFFF.0008: No inputs registered, leaving [ 33.111361][ T39] usb 1-1: config 0 descriptor?? [ 33.119172][ T24] plantronics 0003:047F:FFFF.0008: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 33.400623][ T39] snd-usb-audio: probe of 1-1:0.2 failed with error -2 [ 33.409852][ T39] usb 1-1: USB disconnect, device number 6 [ 33.456734][ T19] usb 3-1: USB disconnect, device number 6 [ 33.463938][ T1053] netlink: 4 bytes leftover after parsing attributes in process `syz.1.314'. [ 33.601372][ T1059] xt_bpf: check failed: parse error [ 33.896273][ T1076] netlink: 4 bytes leftover after parsing attributes in process `syz.3.325'. [ 33.900769][ T1073] loop4: detected capacity change from 0 to 2048 [ 33.917403][ T1073] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 33.935183][ T290] EXT4-fs (loop4): unmounting filesystem. [ 34.247597][ T1102] device pim6reg1 entered promiscuous mode [ 35.119474][ T1128] netlink: 4 bytes leftover after parsing attributes in process `syz.0.336'. [ 35.120896][ T1130] loop3: detected capacity change from 0 to 256 [ 35.728663][ T1160] device pim6reg1 entered promiscuous mode [ 36.156585][ T1168] loop3: detected capacity change from 0 to 1024 [ 36.197652][ T1168] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:477: comm syz.3.358: Invalid block bitmap block 0 in block_group 0 [ 36.212357][ T1168] EXT4-fs error (device loop3): ext4_free_blocks:6197: comm syz.3.358: Freeing blocks not in datazone - block = 0, count = 4096 [ 36.226055][ T1168] EXT4-fs error (device loop3): ext4_read_inode_bitmap:140: comm syz.3.358: Invalid inode bitmap blk 0 in block_group 0 [ 36.238732][ T1168] EXT4-fs error (device loop3) in ext4_free_inode:362: Corrupt filesystem [ 36.247447][ T1168] EXT4-fs (loop3): 1 orphan inode deleted [ 36.253188][ T1168] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 36.308292][ T288] EXT4-fs (loop3): unmounting filesystem. [ 36.337711][ T1168] syz.3.358 (1168) used greatest stack depth: 20584 bytes left [ 36.505438][ T1179] syz.4.365[1179] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 36.505483][ T1179] syz.4.365[1179] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 36.556023][ T1185] loop4: detected capacity change from 0 to 256 [ 36.910790][ T1195] netlink: 'syz.1.366': attribute type 4 has an invalid length. [ 37.258992][ T28] kauditd_printk_skb: 26 callbacks suppressed [ 37.259006][ T28] audit: type=1400 audit(1719648506.111:304): avc: denied { unlink } for pid=288 comm="syz-executor" name="file0" dev="sda1" ino=1966 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=blk_file permissive=1 [ 37.499479][ T1230] sit: Dst spoofed 0.0.0.0/400:: -> 0.0.0.0/2002:0:54d3:7419::b586:0 [ 39.034759][ T1285] geneve1: tun_chr_ioctl cmd 1074025681 [ 39.125247][ T6] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 39.256180][ T19] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 39.495131][ T28] audit: type=1400 audit(1719648508.341:305): avc: denied { write } for pid=1297 comm="syz.0.409" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 39.516653][ T28] audit: type=1400 audit(1719648508.371:306): avc: denied { add_name } for pid=1297 comm="syz.0.409" name="memory.events" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 39.537939][ T28] audit: type=1400 audit(1719648508.371:307): avc: denied { associate } for pid=1297 comm="syz.0.409" name="memory.events" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 39.675252][ T6] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 39.683752][ T6] usb 5-1: config 1 has an invalid descriptor of length 44, skipping remainder of the config [ 39.693855][ T6] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 39.706130][ T6] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 39.715627][ T6] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 39.726383][ T28] audit: type=1326 audit(1719648508.571:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1305 comm="syz.0.411" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff868b75b99 code=0x0 [ 39.748998][ T19] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 39.759801][ T19] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 39.769391][ T19] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 39.778197][ T19] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 39.786448][ T19] usb 3-1: config 0 descriptor?? [ 39.829689][ T1308] capability: warning: `syz.0.411' uses 32-bit capabilities (legacy support in use) [ 39.884409][ T28] audit: type=1400 audit(1719648508.731:309): avc: denied { remount } for pid=1305 comm="syz.0.411" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 39.935281][ T6] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 39.944248][ T6] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 39.952046][ T6] usb 5-1: Product: syz [ 39.956040][ T6] usb 5-1: Manufacturer: syz [ 39.960418][ T6] usb 5-1: SerialNumber: syz [ 40.285412][ T6] usb 5-1: 2:1 : no or invalid class specific endpoint descriptor [ 40.293411][ T6] usb 5-1: 2:1 : unknown format tag 0x0 is detected. processed as MPEG. [ 40.301835][ T6] usb 5-1: found format II with max.bitrate = 4, frame size=0 [ 40.310167][ T6] usb 5-1: 2:1 : no or invalid class specific endpoint descriptor [ 40.317860][ T6] usb 5-1: 2:1 : unknown format tag 0x0 is detected. processed as MPEG. [ 40.326220][ T6] usb 5-1: found format II with max.bitrate = 4, frame size=0 [ 40.388932][ T6] usb 5-1: USB disconnect, device number 5 [ 40.816646][ T1343] loop4: detected capacity change from 0 to 256 [ 40.829803][ T1343] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000001) [ 40.837881][ T1343] FAT-fs (loop4): Filesystem has been set read-only [ 40.973928][ T1349] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.980899][ T1349] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.988714][ T1349] device bridge_slave_0 entered promiscuous mode [ 40.996883][ T1349] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.998082][ T28] audit: type=1400 audit(1719648509.851:310): avc: denied { map } for pid=1355 comm="syz.4.432" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=18039 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 41.003792][ T1349] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.030866][ T28] audit: type=1400 audit(1719648509.881:311): avc: denied { read write } for pid=1355 comm="syz.4.432" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=18039 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 41.061103][ T1349] device bridge_slave_1 entered promiscuous mode [ 41.073358][ T1360] loop4: detected capacity change from 0 to 512 [ 41.081628][ T1360] EXT4-fs warning (device loop4): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 41.093286][ T1360] EXT4-fs warning (device loop4): dx_probe:880: Enable large directory feature to access it [ 41.103253][ T19] uclogic 0003:256C:006D.0009: interface is invalid, ignoring [ 41.105255][ T1360] EXT4-fs warning (device loop4): dx_probe:965: inode #2: comm syz.4.434: Corrupt directory, running e2fsck is recommended [ 41.123243][ T1360] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 41.131195][ T1360] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2213: inode #15: comm syz.4.434: corrupted in-inode xattr [ 41.143066][ T1360] EXT4-fs (loop4): Remounting filesystem read-only [ 41.149471][ T1360] EXT4-fs error (device loop4): ext4_orphan_get:1401: comm syz.4.434: couldn't read orphan inode 15 (err -117) [ 41.161317][ T1360] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 41.181399][ T1360] EXT4-fs warning (device loop4): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 41.192746][ T1360] EXT4-fs warning (device loop4): dx_probe:880: Enable large directory feature to access it [ 41.202598][ T1360] EXT4-fs warning (device loop4): dx_probe:965: inode #2: comm syz.4.434: Corrupt directory, running e2fsck is recommended [ 41.216314][ T1360] EXT4-fs warning (device loop4): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 41.227623][ T1360] EXT4-fs warning (device loop4): dx_probe:880: Enable large directory feature to access it [ 41.237918][ T1360] EXT4-fs warning (device loop4): dx_probe:965: inode #2: comm syz.4.434: Corrupt directory, running e2fsck is recommended [ 41.250536][ T1360] EXT4-fs error (device loop4): ext4_find_dest_de:2112: inode #2: block 3: comm syz.4.434: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 41.269195][ T1360] EXT4-fs (loop4): Remounting filesystem read-only [ 41.281892][ T290] EXT4-fs (loop4): unmounting filesystem. [ 41.299993][ T28] audit: type=1400 audit(1719648510.151:312): avc: denied { append } for pid=1364 comm="syz.4.435" name="001" dev="devtmpfs" ino=156 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 41.327317][ T1349] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.334146][ T1349] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.341380][ T1349] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.348221][ T1349] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.374115][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 41.382284][ T308] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.391131][ T308] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.409670][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 41.417768][ T308] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.424606][ T308] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.431873][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 41.440760][ T308] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.447630][ T308] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.472332][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 41.490792][ T1349] device veth0_vlan entered promiscuous mode [ 41.498673][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 41.507003][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 41.514648][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 41.721678][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 41.728994][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 41.752340][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 41.761037][ T1349] device veth1_macvtap entered promiscuous mode [ 41.796141][ T1377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 41.810380][ T28] audit: type=1400 audit(1719648510.661:313): avc: denied { mounton } for pid=1349 comm="syz-executor" path="/dev/binderfs" dev="devtmpfs" ino=370 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 41.810943][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 41.890962][ T1382] loop4: detected capacity change from 0 to 8192 [ 41.940262][ T1392] loop0: detected capacity change from 0 to 128 [ 41.965763][ T10] device bridge_slave_1 left promiscuous mode [ 41.972099][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.979771][ T10] device bridge_slave_0 left promiscuous mode [ 41.985996][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.993178][ T1396] random: crng reseeded on system resumption [ 41.999885][ T10] device veth1_macvtap left promiscuous mode [ 42.005938][ T10] device veth0_vlan left promiscuous mode [ 42.105369][ T1400] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 42.113738][ T1400] FAT-fs (loop4): Filesystem has been set read-only [ 42.397791][ T1413] syz.1.453[1413] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 42.397856][ T1413] syz.1.453[1413] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 42.423063][ T1417] loop0: detected capacity change from 0 to 128 [ 42.474268][ T1430] netlink: 'syz.0.461': attribute type 4 has an invalid length. [ 42.494823][ T291] usb 3-1: USB disconnect, device number 7 [ 42.876349][ T1448] loop2: detected capacity change from 0 to 128 [ 42.914135][ T1454] Driver unsupported XDP return value 0 on prog (id 329) dev N/A, expect packet loss! [ 42.997317][ T1467] loop2: detected capacity change from 0 to 512 [ 43.006316][ T1467] EXT4-fs (loop2): 1 truncate cleaned up [ 43.011850][ T1467] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 43.943196][ T1474] EXT4-fs error (device loop2): ext4_find_dest_de:2112: inode #2: block 13: comm syz.2.478: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0 [ 44.488159][ T1481] loop0: detected capacity change from 0 to 128 [ 44.522947][ T287] EXT4-fs (loop2): unmounting filesystem. [ 44.859288][ T1507] overlayfs: failed to resolve './file2': -2 [ 45.124578][ T1509] loop4: detected capacity change from 0 to 512 [ 45.130715][ T6] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 45.141720][ T1509] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 45.157383][ T1509] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1086: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 45.172347][ T1509] EXT4-fs (loop4): 1 truncate cleaned up [ 45.178219][ T1509] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 45.378270][ T6] usb 3-1: Using ep0 maxpacket: 16 [ 45.568135][ T1522] raw_sendmsg: syz.0.494 forgot to set AF_INET. Fix it! [ 45.575395][ T6] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 45.589947][ T6] usb 3-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 45.602107][ T290] EXT4-fs (loop4): unmounting filesystem. [ 45.603445][ T6] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 45.616668][ T6] usb 3-1: config 0 descriptor?? [ 45.616877][ T1524] random: crng reseeded on system resumption [ 45.640573][ T1526] loop4: detected capacity change from 0 to 128 [ 45.856814][ T1500] syz.2.489 (pid 1500) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 45.870057][ T1500] fscrypt: Adiantum using implementation "adiantum(xchacha12-simd,aes-aesni,nhpoly1305-generic)" [ 45.945286][ T394] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 46.177287][ T1500] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 46.186129][ T1500] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.261010][ T6] hid (null): invalid report_count 30189 [ 46.266856][ T6] hid (null): invalid report_size 1684763247 [ 46.273490][ T6] hid-generic 0003:0158:0100.000A: unknown main item tag 0x1 [ 46.280790][ T6] hid-generic 0003:0158:0100.000A: unexpected long global item [ 46.288287][ T6] hid-generic: probe of 0003:0158:0100.000A failed with error -22 [ 46.472472][ T1552] overlayfs: failed to resolve './file2': -2 [ 46.504042][ T394] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 46.510839][ T1302] usb 3-1: USB disconnect, device number 8 [ 46.526004][ T394] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 46.549062][ T394] usb 5-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 46.558966][ T394] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 46.651925][ T394] usb 5-1: config 0 descriptor?? [ 46.870125][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 46.870138][ T28] audit: type=1400 audit(1719648515.721:317): avc: denied { name_bind } for pid=1557 comm="syz.1.506" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 46.900190][ T28] audit: type=1400 audit(1719648515.751:318): avc: denied { create } for pid=1559 comm="syz.1.507" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 47.548360][ T1570] xt_CT: You must specify a L4 protocol and not use inversions on it [ 47.888027][ T394] sony 0003:054C:0268.000B: item fetching failed at offset 1/5 [ 47.899013][ T394] sony 0003:054C:0268.000B: parse failed [ 47.904538][ T394] sony: probe of 0003:054C:0268.000B failed with error -22 [ 47.945581][ T394] usb 5-1: USB disconnect, device number 6 [ 48.054817][ T1584] random: crng reseeded on system resumption [ 48.071085][ T1581] loop0: detected capacity change from 0 to 1024 [ 48.085833][ T1581] EXT4-fs: Ignoring removed orlov option [ 48.101608][ T1581] EXT4-fs (loop0): Test dummy encryption mode enabled [ 48.129121][ T1581] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 48.142344][ T1349] EXT4-fs (loop0): unmounting filesystem. [ 48.145376][ T28] audit: type=1400 audit(1719648516.971:319): avc: denied { ioctl } for pid=1593 comm="syz.2.522" path="/dev/binderfs/binder0" dev="binder" ino=16 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 48.173385][ T28] audit: type=1400 audit(1719648516.971:320): avc: denied { set_context_mgr } for pid=1593 comm="syz.2.522" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 48.197335][ T28] audit: type=1400 audit(1719648516.971:321): avc: denied { map } for pid=1593 comm="syz.2.522" path="/dev/binderfs/binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 48.220928][ T28] audit: type=1400 audit(1719648516.971:322): avc: denied { call } for pid=1593 comm="syz.2.522" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 48.260811][ T28] audit: type=1400 audit(1719648516.971:323): avc: denied { transfer } for pid=1593 comm="syz.2.522" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 48.488019][ T28] audit: type=1400 audit(1719648517.341:324): avc: denied { create } for pid=1610 comm="syz.0.529" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 48.507336][ T28] audit: type=1400 audit(1719648517.341:325): avc: denied { setopt } for pid=1610 comm="syz.0.529" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 48.586680][ T1615] 9pnet_fd: Insufficient options for proto=fd [ 48.839854][ T1622] random: crng reseeded on system resumption [ 48.875123][ T1627] loop0: detected capacity change from 0 to 16 [ 48.881785][ T1627] erofs: (device loop0): mounted with root inode @ nid 36. [ 49.002477][ T1648] loop4: detected capacity change from 0 to 512 [ 49.010200][ T1648] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 49.014768][ T1652] syz.1.547[1652] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 49.021701][ T1648] EXT4-fs (loop4): Test dummy encryption mode enabled [ 49.022001][ T1652] syz.1.547[1652] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 49.034286][ T1648] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13 [ 49.106435][ T1648] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #13: comm syz.4.545: attempt to clear invalid blocks 2 len 1 [ 49.249535][ T1648] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 49.313056][ T1648] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.545: invalid indirect mapped block 1819239214 (level 0) [ 49.330889][ T1648] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.545: invalid indirect mapped block 1819239214 (level 1) [ 49.345736][ T1648] EXT4-fs (loop4): 1 truncate cleaned up [ 49.351490][ T1648] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 49.424482][ T290] EXT4-fs (loop4): unmounting filesystem. [ 49.481818][ T1665] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.627525][ T1665] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.643044][ T1665] device bridge_slave_0 entered promiscuous mode SYZFAIL: SIGSEGV sig:7 handler:0x7f87c6a39460 pc:0x7f87c6a4dfb5 addr:0x7f87be7ffffc (errno 11: Resource temporarily unavailable) [ 49.698534][ T1665] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.705458][ T1665] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.715903][ T1665] device bridge_slave_1 entered promiscuous mode