last executing test programs: 49.166646006s ago: executing program 4 (id=1350): r0 = syz_open_dev$usbfs(0x0, 0x0, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r2 = socket$inet6(0xa, 0x3, 0xa8) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000100)={{{@in=@multicast2, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@private2, 0x0, 0x32}, 0x0, @in=@multicast1, 0x0, 0x0, 0x0, 0x4}}, 0xe8) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, @fixed}, 0xe) r3 = socket$inet6(0xa, 0x1, 0x0) r4 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000004c0)=@base={0xf, 0x7, 0x4, 0x6}, 0x48) syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x2000400, &(0x7f0000000240)={[], [{@fsmagic}, {@permit_directio}, {@uid_lt}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@fsuuid={'fsuuid', 0x3d, {[0x39, 0x66, 0x33, 0x34, 0x61, 0x39, 0x62, 0x31], 0x2d, [0x64, 0x65, 0x37, 0x3b], 0x2d, [0x62, 0x62, 0x64, 0x62], 0x2d, [0x39, 0x61, 0x39, 0x39], 0x2d, [0x37, 0x36, 0x33, 0x0, 0x32, 0x35, 0x62, 0x34]}}}]}, 0x3, 0x520, &(0x7f00000010c0)="$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") socket$inet(0x2, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r4, &(0x7f0000000380), &(0x7f0000000380)=@udp6=r3}, 0x20) ioctl$int_in(r2, 0x73, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed000e, &(0x7f00000003c0)={[{@jqfmt_vfsold}, {@journal_path={'journal_path', 0x3d, '.'}}, {@debug}, {@commit={'commit', 0x3d, 0x6}}, {@mblk_io_submit}, {@resuid}, {@init_itable_val={'init_itable', 0x3d, 0x600}}, {@grpquota}]}, 0xfe, 0x46a, &(0x7f0000000dc0)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000580)='./file2\x00', 0x2000000, &(0x7f00000000c0)=ANY=[@ANYRES64=0x0, @ANYRESDEC], 0xfd, 0x22e, &(0x7f0000000a40)="$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") listxattr(&(0x7f0000000100)='./file1\x00', 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4000}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) 46.734687514s ago: executing program 4 (id=1353): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="9000000000010104000000000000000002000000240001801400018008000100e000000208000200ac1414000c0002800500010000000000240002800c00028005000100000000001400018008000100e000000208000200e000000208000740000000002c000e801400018008000100e000000208000200000000000c0002"], 0x90}}, 0x0) fcntl$setstatus(r0, 0x4, 0x6100) lseek(r0, 0x4, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x1, 0x1}, 0x48) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) capget(&(0x7f0000000000)={0x0, 0xffffffffffffffff}, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE_wg(r3, 0x1, 0x19, &(0x7f0000000080)='wg0\x00', 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) sendmmsg$inet(r3, &(0x7f0000000b00)=[{{&(0x7f0000000680)={0x2, 0x4e20, @multicast2}, 0x10, 0x0}}], 0x1, 0xc044) sendmmsg$inet(r3, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000940)="4a4b1091d520ad6fe99665f97f7d40315878c0cf55a0326945b02d63ab7be97f7acd520aebb94b5ac63b51363870a641d0890dcef8a9ca353cad1633ecbd239abaed680353cc2481fdc73111cb4da6874aa61bf0f7b9c34f3bb36739f465d19753bf9cced30bb4b760fb591bcae63058ef44954c9671c88282a207c8294437cebb9a58ed7c7705a6fb641960d368b41acbbc4dd2253c083da6516b12140948029eb0d0762b5a74", 0xa7}, {&(0x7f0000003c80)="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", 0x4ca}], 0x2}}], 0x1, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_MCAST_MSFILTER(r5, 0x0, 0x30, &(0x7f0000000600)={0x4, {{0x2, 0x4e20, @private=0xa010100}}, 0x0, 0x5, [{{0x2, 0x4e22, @rand_addr=0x64010101}}, {{0x2, 0x4e21, @empty}}, {{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x4e22, @local}}, {{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x13}}}]}, 0x310) 46.669515539s ago: executing program 4 (id=1354): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000480)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x5, [@TCA_CODEL_INTERVAL={0x8}]}}]}, 0x3c}}, 0x0) 46.631016312s ago: executing program 4 (id=1355): r0 = socket$nl_audit(0x10, 0x3, 0x9) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x453, 0x0, 0x0, 0x0, "1e"}, 0x14}}, 0x0) 46.509749062s ago: executing program 4 (id=1356): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f000001ff80)=ANY=[@ANYBLOB="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"/2590], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000100)=r0) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000080)) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@bridge_dellink={0x34, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x5, 0x0, 0x1, {0xc, 0x5, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x0, 0x2}]}}]}]}, 0x34}}, 0x40000000) sendmsg$NFT_BATCH(r2, 0x0, 0x24000800) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_freezer_state(r5, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r6, &(0x7f0000000040)='FROZEN\x00', 0x7) read(r6, &(0x7f00000000c0)=""/29, 0x1d) r7 = openat$cgroup_procs(r5, &(0x7f0000000480)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f0000000240), 0x12) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="8338a09201c53119"]) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0xa30, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 34.171282357s ago: executing program 4 (id=1394): r0 = memfd_create(&(0x7f0000000580)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc5\x1d\xe7jDf\x87@\x8fg\x15RJw\x82\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7g\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05', 0x0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0x0, 0x2012, r0, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) r2 = userfaultfd(0x1) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000080)={&(0x7f00003c3000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x1000}) 11.476712775s ago: executing program 3 (id=1447): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1770, 0xff00, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0xffffffffffffff3b, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, "6652de90"}]}}, 0x0}, 0x0) fsconfig$FSCONFIG_SET_FLAG(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 9.480296017s ago: executing program 0 (id=1455): r0 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300), 0xc, &(0x7f0000000540)={0x0, 0x2c}}, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r1 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)={0xc000, 0x60, 0x3}, 0x18) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) r3 = syz_open_dev$loop(&(0x7f00000001c0), 0x0, 0x103382) ioctl$LOOP_SET_BLOCK_SIZE(r3, 0x4c07, 0x0) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000080)={0x3, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0xfffff034}, {0x3d, 0x0, 0x0, 0x1}, {0x6, 0x0, 0x40, 0x3}]}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000001fc0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0008004500001c000000000001907800000000ffffffff1200907800000000579d6e778aefb887a69ae441ac0d9ed22427a94b450974276b6d8fe0ebb81919ea22f8518928067775780e8f866033f744d39c3bce02bd864e875969bfa35b08c83c4b9281c6a0899e1a55050d25efbded02dafc03cd96628c1db24c0fcd495ef1ebac16ce5ce86150af8d40d8b617b7e57169b2201d8d6ae8377931c042d8c5f69748e15fede9d8ac8d81affcb41a8338b254b471abc696d5ee5acc0cbb7ed69475e3aa30191cdeb6a8b52307862db561f8e8d3c76d12e7aa5404b1ac77"], 0x0) fallocate(r1, 0x44, 0x1, 0x7ffc) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {0x0}], 0x7, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[], 0x81, 0x150f, &(0x7f0000000400)="$eJzs3AuYjtXaOPB1r7UehsTbJIdh3et+eNNgmSTJISGHJEmSJKeEpEmShMSQU9KQhBwnyWEIyWEak8b5fMg5abKlSZKQkLD+1/S1P3v/29/u29/Xt+1rz/27rnXNumc99z3ree+53vd5nuua+bbX6PotG9RpTkTifwX+40uSECJGCDFcCFFICBEIISrHVlbiyjL7l/FQ6tXeAbuauP+5G/c/d+P+527c/9yN+5+7cf9zN+5/7sb9Zyw32zG3+HU8/tlD/8u87v+k5/+xOev5FPDz/3+S7oX+O0fx5/+/kewKU77cVOGG3v9ACvc/d+P+527c/9yN+5+7cf9zN+7/v7/af2eN+5+7cf8Zy83+wefF+cS/wDNrHn/cuNq/f4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGcofz/gothPjz/GrvizHGGGOMMcYYY38cn/dq74AxxhhjjDHGGGP/90BIoYQWgcgj8ooYkU/kF9eIAuJaUVAUEhFxnYgV14vC4gZRRBQVxURxESdKiJLCCBRWkAhFKVFaRMWNooy4ScSLsqKcKC+cqCASxM2iorhFVBK3isriNlHF3i6qimqiuqgh7hA1xZ2ilqgt6oi7RF1RT9QXDcTdoqG4RzQS94rG4j7RRNwvmooHRDPxoGguHhItxMOipXhEtBKPitaijWgr2on2/6P8F0U/8ZLoLwaIJDFQDBIvi8FiiBgqhonh4hUxQrwqRorXRLIYJUaL18UY8YYYK94U48R4MUG8JSaKSWKymCKmimkiRbwtpot3xAzxrpgpZonZYo5IFXPFPPGemC8WiIXifbFIfCAWiyViqVgm0sSHIl0sFxniI7FCfCwyxUqxSqwWa8RasU6sFxvERrFJbBZbxFaxTWwXO8QnYqfYJXaLPWKv2Cf2i0/FAfGZOCg+F1nii38w/9z/l98bBAiQIEGDhjyQB2IgBvJDfigABaAgFIQIRCAWYqEwFIYiUASKQTGIgzgoCSUBAYGAoBSUgihEoQyUgXiIh3JQDhw4SIAEqAi3QCWoBJWhMlSBKlAVqkE1qAE1oCbUhFpQC+pAHagLdaE+1Ie74W64BxpBI2gMjaEJNIGm0BSaQTNoDs2hBbSAltASWkEraA2toS20hfbQHjpAB+gIHaEzdIYu0AW6QldIhEToBt2gO3SHHtADekJP6AW9oDf0gT7wIrwIL8FLMADqyoEwCAbBYBgMQ2EYDINXYAS8Cq/Ca5AMo2A0vA6vwxswFs7COBgPE2AC1JSTYDJMAZLTIAVSYDpMhxkwA2bCLJgFcyAV5sI8mAfzYQEsgPdhEXwAH8ASWALLIA3SIB2WQwZkwAo4B5mwElbBalgDa2ENrIcNsB42wWbYBFthK2yH7fAJfAK7YBfsgT2wD/bBp/ApfAafQTJkQRYcgkNwGA7DETgC2ZANR+EoHINjcByOwwk4ASfhFJyGU3AGzsBZOAfn4TxcgAtwEZ6P+7rFvrIbk4XMoaWWeWQeGSNjZH6ZXxaQBWRBWVBGZETGylhZWBaWRWQRWUwWk3EyTpaUJSVKlCRDWUqWklEZlWVkGRkv42U5WU466WSCTJAVZUVZSVaSleVtsoq8XVaV1WQnV0PWkDVlZ1dL1pZ1ZB1ZV9aT9WUD2UA2lA1lI9lINpaNZRPZRDaVD8hmciAMhYdkTmdaylHQSo6G1rKNbCvbyTfgMdlBjoWOspPsLJ+Q42EcdJUdXKJ8WnaTk6G7fFZOgedkTzkNeskXZG/ZR/aVL8p+sqPrLwfImTBQDpJzYLAcIofKYXI+1JM5HasvX5PJcpQcLV+Xy+ANOVa+KcfJ8XKCfEtOlJPkZDlFTpXTZIp8W06X78gZ8l05U86Ss+UcmSrnynnyPTlfLpAL5ftykfxALpZL5FK5TKbJD2W6XC4z5EdyhfxYZsqVcpVcLdfItXKdXC83yI1yk9wst8itcpvcLnfIT+ROuUvulnvkXrlP7pefygPyM3lQfi6z5BfykPyTPCy/lEfkVzJbfi2Pym/kMfmtPC6/kyfk9/KkPCVPyx/kGfmjPCvPyfPyJ3lB/iwvykvysvRSKFBSKaVVoPKovCpG5VP51TWqgLpWFVSFVERdp2LV9aqwukEVUUVVMVVcxakSqqQyCpVVpEJVSpVWUXWjKqNuUvGqrCqnyiunKqgEdbOqqG5RldStqrK6TVVRt6uqqpqqrmqoO1RNdaeqpWqrOuouVVfVU/VVA3W3aqjuUY3Uvaqxuk81UferpuoB1Uw9qJqrh1QL9bBqqR5RrdSjqrVqo9qqdqq9ekx1UI+rjqqT6qyeUF3Uk6qrekolqqdVN/WM6q6eVT3Uc6qnel71Ui+o3qqP6qsuqcvKq/5qgEpSA9Ug9bIarIaooWqYGq5eUSPUq2qkek0lq1FqtHpdjVFvqLHqTTVOjVcT1FtqopqkJqspaqqaplLU22q6ekfNUO+qmWqWmq3mqFQ1Vw39tdLC/0b+O38jf+QvP3272qE+UTvVLrVb7VF71T61X+1XB9QBdVAdVFkqSx1Sh9RhdVgdUUdUtspWR/MJIdQxdTznnT2HOqV+Uj+oM+pHdVadU+fUT+qCuqAu/voaCA1aaqW1DnQenVfH6Hw6v75GF9DX6oK6kI7o63Ssvl4X1jfoIrqoLqaL6zhdQpfURqO2mnSoS+nSOqpv1GX0TTpel9XldHntdAWdoG/+X+f/3v7a6/a6g+6gO+qOurPurLvoLrqr7qoTdaLuprvp7rq77qF76J66p+6le+neurfuq/vqfrqf7q/76ySdpAfpl/VgPUQP1cP0cP2KHqFH6JF6pE7WyXq0Hq3H6DF6rB6rx+lxeoKeoCfqiXqynqyn6qk6Rafo6Xq6nqFn6Jl6pp6tZ+tUnarn6Xl6vp6vF+qFepFepBfrxXqpXqrTdJpO1+k6Q2foFXqFztQr9Uq9Wq/Wa/VavV6v1xv1Rr1Zb9Zb9VadqXfoHXqn3ql36916r96r9+v9+oA+oA/qgzpLZ+lD+pA+rA/rI/qIztbZ+qg+qo/pY/q4Pq5P6BP6pD6pT+vT+ow+o8/qs/q8Pq8v6Av6or6oL+vLOZd9gQxkoAMd5AnyBDFBTJA/yB8UCAoEBYOCQSSIBLFBbFA4uCEoEhQNigXFg7igRFAyMAEGNqAgDEoFpYNocGNQJrgpiA/KBuWC8oELKgQJwc1BxeCWoFJwa1A5uC2oEtweVA2qBdWDGsEdQc3gzqBWUDuoE9wV1A3qBfWDBsHdQcPgnqBRcG/QOLgvaBLcHzQNHgiaBQ8GzYOHghbBw0HL4JGgVfBo0DpoE7QN2gXt/9D63p8t+rjrbwaYJDPQDDIvm8FmiBlqhpnh5hUzwrxqRprXTLIZZUab180Y84YZa94048x4M8G8ZSaaSWaymWKmmmkmxbxtppt3zAzzrplpZpnZZo5JNXPNPPOemW8WmIXmfbPIfGAWmyVmqVlm0syHJt0sNxnmI7PCfGwyzUqzyqw2a8xas86sNxvMRrPJbDZbzFazzWw3O8wnZqfZZXabPWav2Wf2m0/NAfOZOWg+N1nmC3PI/MkcNl+aI+Yrk22+NkfNN+aY+dYcN9+ZE+Z7c9KcMqfND+aM+dGcNefMefOTuWB+NhfNJXPZ+JyL+5yPd9SoMQ/mwRiMwfyYHwtgASyIBTGCEYzFWCyMhbEIFsFiWAzjMA5LYknMQUhYCkthFKNYBstgPMZjOSyHDh0mYAJWxIpYCSthZayMVbAKVsWqWB2r4x14B96Jd2JtrI134V1YD+thA2yADbEhNsJG2BgbYxNsgk2xKTbDZtgcm2MLbIEtsSW2wlbYGltjW2yL7bE9dsAO2BE7YmfsjF2wC3bFrpiIidgNu2F37I49sAf2xJ7YC3thb+yNfbEv9sN+2B/7YxIm4SAchINxMA7FoTgch+MIHIEjcSQmYzKOxtE4BsfgWByL43A8TsC3cCJOwsk4BafiNEzBFJyO03EGzsCZOBNn42xMxVSch/NwPs7HhbgQF+EiXIyLcSkuxTRMw3RMxwzMwBW4AjMxE1fhKlyDa3AdrsMNuAE34SbcgltwG27DHbgDd+JO3I27cS/uxf24Hw/gATyIBzELs/AQHsLDeBiP4BHMxmw8ikfxGB7D43gcT+AJPIkn8TSexjN4Bs/iWTyP5/EC/owX8RJeRo8xVor89hpbwF5rC9pCNsbms38ZF7PFbZwtYUtaY4vYon8Vo7U23pa15Wx562wFm2Bv/k1c1Vaz1W0Ne4etae+0tX4TN7T32Eb2XtvY3mcb2Lv/Km5i77dN7SO2mX3UNrdtbAvbzra0j9hW9lHb2raxbW0728U+abvap2yifdp2s8/8Jk63y+0Gu9FuspvtAfuZPW9/ssfst/aC/dn2twPscPuKHWFftSPtazbZjvpNPMG+ZSfaSXaynWKn2mm/iWfbOTbVzrXz7Ht2vl3wmzjNfmgX2Qy72C6xS+2yX+KcPWXYj+wK+7HNtCvtKrvarrFr7Tq7/j/3utputdvsdrvffmp32l12t91j99p9v8Q553HQfm6z7Bf2qP3GHrZf2iP2uM22X/8S55zfcfudPWG/tyftKXva/mDP2B/tWXvul/PPOfcf7CV72XorCEiSIk0B5aG8FEP5KD9dQwXoWipIhShC11EsXU+F6QYqQkWpGBWnOCpBJckQkiWikEpRaYrSjVSGbqJ4KkvlqDw5qkAJdDNVpFuoEt1Klek2qkK3U1WqRtWpBt1BNelOqkW1qQ7dRXWpHtWnBnQ3NaR7qBHdS43pPmpC91NTeoCa0YPUnB6iFvQwtaRHqBU9Sq2pDbWldtSeHqMO9Dh1pE7UmZ6gLvQkdaWnKJGepm70DHWnZ6kHPUc96XnqRS9Qb+pDfelF6kcvUX8aQEk0kAbRyzSYhtBQGkbD6RUaQa/SSHqNkmkUjabXaQy9QWPpTRpH42kCvUUTaRJNpik0laZRCr1N0+kdmkHv0kyaRbNpDqXSXJpH79F8WkAL6X1aRB/QYlpCS2kZpdGHlE7LKYM+ohX0MWXSSlpFq2kNraV1tJ420EbaRJtpC22lbbSddtAntJN20W7aQ3tpH+2nT+kAfUYH6XPKoi/oEP2JDtOXdIS+omz6mo7SN3SMvqXj9B2doO/pJJ0KBP1AZ+hHOkvn6Dz9RBfoZ7pIl+gyeRIhhDJUoQ6DME+YN4wJ84X5w2vCAuG1YcGwUBgJrwtjw+vDwuENYZGwaFgsLB7GhSXCkqEJMbQhhWFYKiwdRsMbwzLhTWF8WDYsF5YPXVghTAhvDiuGt4SVwlvDyuFtYZXw9rBqWC185L4a4R1hzfDOsFZYO6wT3hXWDeuF9cMG4d1hw/CesFF4b9g4vC+sFN4fNg0fCJuFD4bNw4fCFuHDYcvwkbBV+GjYOmwTtg3bhe3Dx8IO4eNhx7BT2Dl8IuwSPhl2DZ8KE8Onw27hM7+7nhQODAeFL4cvh97fq5ZGl0XToh9G06PLoxnRj6Iroh9HM6Mro6uiq6Nromuj66LroxuiG6ObopujW6Jbo9ui26PeN8grHDjplNMucHlcXhfj8rn87hpXwF3rCrpCLuKuc7HuelfY3eCKuKKumCvu4lwJV9IZh846cqEr5Uq7qLvRlXE3uXhX1pVz5Z1zFVyCa+fau/aug3vcdXSdXGf3hHvCPemedE+5p9zTrpt7xnV3z7oe7jnX0z3vnncvuN6uj+vrXnT93EuuvxvgklySG+QGucFusBvqhrrhbrgb4Ua4kW6kS3bJbrQb7ca4MW6sG+vGuXFugpvgJrqJbrKb7Ka6qS7Fpbjpbrqb4Wa4mW6mm+1mu1SX6ua5eW6+m+8WuoVuUfwit9gtdkvdUpfm0ly6S3cZLsOtcCtcpst0q9wqt8atcevcOrfBbXCb3Ca3xW1x29w2t8PtcDvdTrfb7XZ73V633+13B9wBd9AddFkuyx1yh9xhd9gdcV+5bPe1O+q+ccfct+64+86dcN+7k+6UO+1+cGfcj+6sO+fOu5/cBfezu+guucvOu5TI25HpkXciMyLvRmZGZkVmR+ZEUiNzI/Mi70XmRxZEFkbejyyKfBBZHFkSWRpZFkmLfBhJjyyPZEQ+iqyIfBzJjKyMrIqsjqyJrI14X2Jn6Ev50j7qb/Rl/E0+3pf15Xx573wFn+Bv9hX9Lb6Sv9VX9rf5Kv52X9VX89X9o761b+Pb+na+vX/Md/CP+46+k+/sn/Bd/JO+q3/KJ/qnfTf/jO/un/U9/HO+p3/e9/Iv+N6+j+/rX/T9/Eu+vx/gk/xAP8i/7Af7IX6oH+aH+1f8CP+qH+lf88l+lB/tX/dj/Bt+rH/Tj/Pj/QT/lp/oJ/nJfoqf6qf5FP+2n+7f8TP8u36mn+Vn+zk+1c/18/x7fr5f4Bf69/0i/4Ff7Jf4pX6ZT/Mf+nS/3Gf4j/wK/7HP9Cv9Kr/ar/Fr/Tq/3m/wG/0mv9lv8Vv9Nr/d7/Cf+J1+l9/t9/i9fp/f7z/1B/xn/qD/3Gf5L/wh/yd/2H/pj/ivfLb/2h/13/hj/lt/3H/nT/jv/Ul/yp/2P/gz/kd/1p/z5/1P/oL/2V/0l/zl/9HfrMX88Y/TGWOMMcb+xW0r8vfXB/6N78lfR45BQohrdxXP/st1JYTY8mvdITKuS0QI8fSAXg/9edStm5SU9OuxmUoEpZcIISJX8vOIK/FK0Vk8KRJFJ1Hxb+5viOxzgX6nfvQ2IfL/RU7OVd+f4yv1b/kv6j/2xIT0KuH52L9Tf4kQ8aWv5OQTV+Ir9Sv9F/WLdvid/ef7MkWIjn+RU0Bcia/UTxCPi2dE4l8dyRhjjDHGGGOM/YchsnqP37t/zrk/j9NXcvKKK/Hv3Z8zxhhjjDHGGGPs6nuuT9+nHktM7NSDJzzhCU/+c3K135kYY4wxxhhjf7QrF/1XeyeMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxlju9c/4d2JX+xwZY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4yxq+3/BQAA//8SbzYB") bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7}, 0x48) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000080)={0x3, 0x8003}, 0x4) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) 9.465947889s ago: executing program 3 (id=1458): creat(&(0x7f0000000840)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000340)='./bus\x00', 0x0, 0x1000, 0x0) open(&(0x7f00000005c0)='./bus\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./bus\x00', 0x400e, &(0x7f0000000280)={[{@i_version}, {@nobh}, {@data_err_ignore}, {@nolazytime}, {@init_itable_val={'init_itable', 0x3d, 0x4}}, {@acl}]}, 0x1, 0x42f, &(0x7f0000000940)="$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") r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x42, 0x0) fallocate(r1, 0x3, 0x0, 0x8000c62) 9.339476709s ago: executing program 0 (id=1459): r0 = syz_io_uring_setup(0x3d1a, &(0x7f0000000480), &(0x7f0000000080), &(0x7f0000000040)) io_uring_enter(r0, 0x0, 0x464f, 0x1, 0x0, 0x0) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000000)=[0x0, 0xa9a], 0x2) io_uring_enter(r0, 0x47fa, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000140), 0x2) 7.421131155s ago: executing program 0 (id=1460): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x5169, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000340)) syz_io_uring_setup(0x2fd7, &(0x7f0000000280), &(0x7f0000000040), &(0x7f00000005c0)) io_uring_enter(r0, 0x41b, 0x0, 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)=@gettaction={0x24, 0x32, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9d}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r5 = io_uring_setup(0x168e, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mremap(&(0x7f0000241000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) mremap(&(0x7f0000b8e000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f00004e5000/0x2000)=nil) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x5, 0x0, 0x0}, 0x90) listen(r3, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000ce", 0x18, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@sack_perm={0x2, 0x4}]}}}}}}}}, 0x0) 7.420698255s ago: executing program 1 (id=1461): syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='sched_switch\x00'}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x2000000000000320, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000f2ff850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000070000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ptrace$peeksig(0x4209, r0, 0x0, &(0x7f0000000dc0)=[{}]) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x8, 0x3, 0x650, 0x0, 0xa, 0x148, 0x368, 0x10, 0x5b8, 0x2a8, 0x2a8, 0x5b8, 0x2a8, 0x3, 0x0, {[{{@ip={@multicast2=0xe000000b, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x2f8, 0x368, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x7a, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x64, './file0\x00'}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f2f7b9f28413d9d8ad470ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc2d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @broadcast, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x1f0, 0x250, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth1_to_bond\x00'}}, @inet=@rpfilter={{0x28}}]}, @common=@SET={0x60}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x6b0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) 7.418170575s ago: executing program 3 (id=1463): r0 = timerfd_create(0x0, 0x0) readv(r0, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000140)="441009000000000000006e0000", 0xd) getsockopt$inet_opts(r1, 0x0, 0x4, 0x0, &(0x7f00000017c0)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000002240)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(r2, 0x8905, &(0x7f0000001300)) setsockopt$inet6_tcp_int(r2, 0x6, 0x4, 0x0, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) setsockopt$sock_int(r2, 0x1, 0x12, &(0x7f0000000180)=0x4000000, 0x4) sendto$inet6(r2, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) poll(&(0x7f0000000040)=[{r2}], 0x1, 0x800) sendto$inet6(r2, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090011006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) shutdown(r2, 0x1) 4.634829202s ago: executing program 2 (id=1464): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b708000000005aab7b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000009500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x10) syz_emit_ethernet(0x42, &(0x7f0000000200)={@link_local, @random="50a245d5cde0", @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x6c, 0x0, @empty, @broadcast}, @parameter_prob={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @multicast1}}}}}}, 0x0) 4.591722696s ago: executing program 1 (id=1465): r0 = syz_open_dev$loop(&(0x7f0000000000), 0x7, 0x0) ioctl$IOC_PR_CLEAR(r0, 0x401070cd, 0x0) 4.503620382s ago: executing program 2 (id=1466): r0 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x800714, &(0x7f0000000400), 0xfe, 0x43a, &(0x7f00000008c0)="$eJzs289vFFUcAPDvzLag/GpFREHQKhobf7S0oHLwotHEgyYmesBjbQtBFmpoTYQ0Wo3BoyHxbjya+Bd40otRTyZe9W5IiDYmoKea2Z0pu0u39Mcui8znkwy8t/N23/vum7fz9r1uAKU1lP2TROyIiN8iYqCebS4wVP/v2uL85D+L85NJLC29+WdSK3d1cX6yKFo8b3ueGU4j0k+TvJJms+cvnJ6oVqfP5fnRuTPvjc6ev/DMqTMTJ6dPTp8dP3bs6JGx558bf7YjcWZxXd3/4cyBfa++fen1yeOX3vnpm6y9ew/WzzfG0SlDWeB/LdW0nnu805X12M6GdNLXw4awLpWIyLqrvzb+B6IS1ztvIF75pKeNA7oquzdtbX96YQm4gyXR6xYAvVHc6LPvv8Vxi6Yet4UrL9a/AGVxX8uP+pm+SPMy/V2sfygiji/8+2V2RJfWIQAAGn2XzX+eXmn+l8behnK78j2UwYi4JyJ2R8S9EbEnIu6LqJW9PyIeWGf9rVtDN85/0ssbCmyNsvnfC/neVvP8r5j9xWAlz+2sxd+fnDhVnT6cvyfD0b81y4+tUsf3L//6ebtzjfO/7MjqL+aCeTsu97Us0E1NzE10alJ65eOI/X0rxZ8s7wQkEbEvIvav76V3FYlTT359oF2hm8e/ig7sMy19FfFEvf8XoiX+QrL6/uToXVGdPjxaXBU3+vmXi2+0q39T8XdA1v/bmq//lhIDfyeN+7Wz66/j4u+ftf1Os9Hrf0vyVm3Pekv+2AcTc3PnxiK2JK/V8k2Pj19/bpEvymfxDx9aefzvzp+Txf9gRGQX8cGIeCgiHs7b/khEPBoRh1aJ/8eXHnt34/F3Vxb/1Iqff8vX/2Bz/68/UTn9w7ft6l9b/x+tpYbzR2qffzex1gZu5r0DAACA/4s0InZEko4sp9N0ZKT+N/x7YltanZmde+rEzPtnp+q/ERiM/rRY6RpoWA8dSxbyV6znx/O14uL8kXzd+IvK3bX8yORMdarHsUPZbW8z/jN/VHrdOqDr/F4Lyqt1/Kc9agdw67n/Q3kZ/1Bexj+U10rj/6OWvL0AuDO5/0N5Gf9QXsY/lJfxD6W0md/1S5Q5Eelt0QyJLiV6/ckEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQGf8FAAD//yWS7pw=") r1 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r2 = open(&(0x7f0000000400)='./bus\x00', 0x16543e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r2, 0x0) ftruncate(r2, 0x7fff) io_setup(0x7f, &(0x7f0000000100)=0x0) io_submit(r3, 0x2, &(0x7f0000000380)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000002c0)="7f", 0x1}, &(0x7f0000000180)={0x0, 0x0, 0x3, 0x1, 0x0, r0, 0x0}]) 4.487157324s ago: executing program 1 (id=1467): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005efe2100850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) sendmsg$netlink(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000540)=ANY=[], 0x1b8}, {0x0, 0x1f88}], 0x2}, 0x0) 2.464189679s ago: executing program 0 (id=1468): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = memfd_create(&(0x7f0000000240)='+\x8b\x8a\xa9\x16\x11\x91J\xbc+ \x18\x17\xc2:}\xa3\x9bO\xdd\xdf\xdf\x92\xd5\xed\xb4\x17\xe5\xd6\x9a\xb2\xd8\x9ba\xde\xb2.F\xc0\x99}|\xaf\xd3\x1d\x84[*_\x9f\x9d\xb0rYP\x1b\x9f \xe0\x9cgq\x103\x89\x11\x87Rv\x169\xdf\xe3>B\x04\x00\x00\x00W\xd3\xec\xfb\xdf?\xa2\x90+\xa4!\xb2\xf2\xff\x90\a\xc3\x12\xc4;\xffh\xf1x=\xb9c\xce\x03h\xdap\x88U\x1788\x82\xd7\xfd\x83\x00Sx\x91%\x99_\xfe\xd4c\x83\x86\x0f\xa4a-\xaf\x9e\xd9\xef\xe0)]\x00F\xfa\x03\xbc4\xc4\x9a\v\x03\x8b\xa4\xf3\x8f\xf4\"\'\xd3\a9\x14H}j&~\xe9\x16\x83o\xbd\xab\xcd[\xbd\xcb\x04\xfc\xe7\xe3\x9e?\x12\xf0\xf4\x83M3\xd88\x92?@\v\xe6\xd1\xd2\xe4\xde\xdaUeJ\x9fR\xd1`\xfa\xc8\v\xed\xfd\x0e\xc8\x89W\x847\x88\x82\x94\x14\xe33\xb7H\xc8b\xd6@3F#\xb7\x04C\x8dm\t\x16a\x0fI\xf4\xfe\xf8\x06j\x19Pz&\xb8\x0f\x98`W\xdb\xc6\"81A\xa4\x8bT\xf1\xcb\xab\xa3\t\xef\xdf&\x0e\xad\x03\x123.\xc2V\xaa\xd5\xf8\xde\x8aV\xa4p{\xcez\xa2\x92\xdb8*wLO\f\x97X\x05\x9a\xc2\xe8\x85\x9d\xcb\xc8\xf0\xc4\x01\x03\xe3?\x9f1\xf4\xfb\xa5y`KB\xdf\xae#\x94C\a\x04\xea\xccG\xf2\b\x8f\xf7\xb1\xe96\x90\xf5P\xa4\'\xce\xe3\xa24\x196\xc5Q\xa1K\x95\xd6\xfal\xe9\xd1\\\r&\xb2c\xb3\x8d\xa7\xb7\xa8\x03S\xbd\xdd\b{\xae\f\x10\xc2\xbb\xd0\xdd*\xa3\xb4\fJ\x00X\xab`N; LF\xa5D\xee\xdf\x7f\x80p\xf6o\x1c\xbdXR\xf2\xa0\x81a\xa1\xe1B\x93Xn\xaf\xfc\x05?\xab\xac\x91x\xa8#\xe1\xbeQ\xd1^\x9b\xb9)\xd3\n\xf7(3!\x18\b\xc0\xaampRl\xfdQ\x03\x8c\xd5\xe4\\\xed\x9a\xd1?\xd21\xc8\x90\x1dl|\xd1\x14\xbc3\xe0\x1e\x0e\xe6\x88Y\x99K\x93\x1c@_P\x8c\xc7\x9eZ\xb74KT:\x8a\xdbJ#w\x18\x14\x00\x93\x86\xa5wo\xf6M\xe7D\xf4*\xe3X\x1d\x19\x83\xa7w\xc7+7\x89s\xed\x8a\xd7O\xdd\rhh`\xc0\xa8$\x06pu\xa0\xd0L\x0ez@I\xb8\x83\xb2f\x93j\a0I\xc8l\xe5\x9b\x06\xb5\xac`d\xa3\xcf/\x14\x10\xab\xab\t\xec\xc1c\fA\xaf\x14\xef\xbap@*7\x86\xdf\',\x03Y\xb1$\xf0\xb5}\xf0\x82%)9`\x8f\x04\x85m\x80\xd2\xcf@\x06}\xea\xe7w`\xa5\x11\x9f\x9b\x9e\x8f\xb7cb\x1a\xe1\xcf\x87\x1c\\\xf5\xc21\xf7\x82C*\xd5;\x00\x00\x00\x00\x03\xba\xe3\xdc\x92\'\x8e\xd5\x7fG\xfd.\x91\x89T\x99t\xd4d,\xd5\x92O\xf1\xafT!Y\x8e\\\xac\xf7\x11R\x05p\x1a\"\r\xe9\xe5\x8b&\x0f\x8c\xfb\xef\xf8\xd5\x18\xde\xeb\xe5\x19\xdd\xebQ8\xc5iS+\x06D\x16\xfe\xf5.\xe5\v\x89\xb0\"\xa3M\xe9\x81\x11P\xdb\xc4\xc2y\x14\x04\x06\xf6\f\xb0\xecz\x8d`\xb5\x9b\xb43\xcc1\xa7\x9e\xa8\xb5\'\xc6MAe\x0f\xd1\xfcG\xc2/\xe8\xe9t\xcaQ\xf1\fI\x1chM\xc1\x92\xe3\xc3\x01M\xc8/\xefJ\xcb\xd0]\f\xff\xf5\x92\xce\x97Z\xea\xe8\x99\xfa\x96\xce\xa7\x02\xad\xa2\xce\x955\xeaNg\x02\xcd\xfd\x1a}.\xd3\"x\x89/8H\xc2\x93B\na)\x86\xa9U\xa0\xb7\x18\xfb\xe9\xd1\x97', 0x3) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000300)=[{0x0}, {&(0x7f0000000080)="a1", 0x20000081}], 0x2, 0x0) vmsplice(r3, &(0x7f0000000040)=[{&(0x7f00000000c0)='c', 0x1}], 0x1, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000740)=ANY=[], 0xff67) syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) sendfile(r0, r1, &(0x7f0000000000), 0xfffb) fcntl$addseals(r1, 0x409, 0x8) lseek(r1, 0x0, 0x4) 2.460881079s ago: executing program 1 (id=1469): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x1, 0xa, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=ANY=[@ANYBLOB="850000002a00000084000000000000009500000000000000"], &(0x7f0000000180)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000040)=r3, 0x4) write$binfmt_misc(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="72b9800007"], 0xd) 2.455165619s ago: executing program 2 (id=1470): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$tipc(0x1e, 0x1, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r1, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r2, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, &(0x7f00000001c0)=[{&(0x7f00000000c0)="c4", 0x1}], 0x1}, 0x0) 2.45053644s ago: executing program 3 (id=1471): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000cc0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) syz_emit_ethernet(0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaabb08"], 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x8001, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1}, 0x0, &(0x7f0000000040)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r2}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socket$inet_udp(0x2, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) write$cgroup_subtree(r0, &(0x7f0000000180)=ANY=[], 0x240) 2.378240266s ago: executing program 1 (id=1472): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x3, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000ef7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000000000000000000000000008500000050"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 2.377521956s ago: executing program 2 (id=1473): timerfd_create(0x9, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') read$FUSE(r0, &(0x7f0000001880)={0x2020}, 0x2020) 2.276268184s ago: executing program 2 (id=1474): sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000240)=ANY=[@ANYBLOB="010000000000000001"]) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000440)=ANY=[@ANYBLOB="01000000000000008604"]) 174.914845ms ago: executing program 0 (id=1475): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x5b, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000000000000000000000000008500000050"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) 167.868226ms ago: executing program 1 (id=1476): socket(0x0, 0x3, 0x100) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x1, 0x551b, &(0x7f000000b2c0)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x1, &(0x7f00000003c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000895", @ANYRES16=0x0], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r5, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) ioctl$USBDEVFS_ALLOW_SUSPEND(r5, 0x5522) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="0000000000000000b702000014000000b703"], &(0x7f0000001dc0)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) socket$inet(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x4001, 0x3, 0x2b8, 0x180, 0x0, 0x148, 0x180, 0x148, 0x220, 0x240, 0x240, 0x220, 0x240, 0x7fffffe, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth1_to_batadv\x00', {}, {}, 0x11}, 0x0, 0x118, 0x180, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'vlan0\x00', {0x0, 0x0, 0x1ff, 0x0, 0x0, 0xed, 0x7}}}, @common=@inet=@multiport={{0x50}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x318) 162.178746ms ago: executing program 2 (id=1477): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af365", 0x20}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x8, 0x42, 0x40, 0x42}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000140), 0x1003, r0}, 0x38) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x2, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000000240)={r0, &(0x7f0000000100), &(0x7f0000002240)=""/99}, 0x20) 155.998697ms ago: executing program 3 (id=1478): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 74.865273ms ago: executing program 0 (id=1479): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x5, 0x4, 0xfff, 0x4}, 0x48) r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x40, &(0x7f00000008c0)={[{@nobh}, {@noauto_da_alloc}, {@jqfmt_vfsold}, {@data_err_ignore}, {@resuid}, {@dioread_nolock}, {@usrjquota}, {@discard}, {@jqfmt_vfsv1}]}, 0xfc, 0x564, &(0x7f0000002bc0)="$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") r1 = creat(0x0, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) finit_module(r0, &(0x7f0000000340)='noauto_da_alloc', 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) ftruncate(r1, 0x1f) r6 = open(&(0x7f0000000200)='./bus\x00', 0x14507e, 0x0) fallocate(r6, 0x0, 0x0, 0x1000f8) sendfile(r6, r6, 0x0, 0x100000008) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0xc}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 0s ago: executing program 3 (id=1480): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x8}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r3}, &(0x7f0000000400), &(0x7f00000004c0)=r4}, 0x20) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='hugetlb.2MB.usage_in_bytes\x00', 0x100002, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000180)={0x0, 0x0, 0x1000}, 0x20) socket$inet6_udp(0xa, 0x2, 0x0) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_DEV_SETUP(r6, 0x405c5503, &(0x7f0000000940)={{}, 'syz0\x00'}) ioctl$UI_SET_EVBIT(r6, 0x40045564, 0x12) ioctl$UI_SET_SNDBIT(0xffffffffffffffff, 0x4004556a, 0x2) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETSHIFTSTATE(r7, 0x4b2f, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1e, 0x4, &(0x7f0000000bc0)=ANY=[@ANYBLOB="b4000000000000007911b00000000000000000000000000000000000000000009ccb7f1cf15770db5b3e2c7d727afaf820900153dfd5107e1ca4546479867681b7eb40a87b271548ae67b3fc10ed28299d5bb2d55fb4ddac0c62318cd3696fe065ecac5169f78c576830f29e8a39a72af71473851172d5f2a6469d7ece29ed4f9446ebd8fbd6a89818668bd3def83ce6fb591257bac2083050c0d61836068639747ebdea78d83be8b644d6d50d2b854898ff5274b361bb57b79fda13f91f03617d591630de34264e3db9b5a6f93372fbe0c42a459b2bb6187461d45378cb863cec1ac9224e6954ac732aaedb92ff653df7aba85610c01a26ceab9332ee49c801f1dd442383ad844d2205ce9a8492802eef4afbec2b7bf88b868e4d69ac07cce17e77f2ab755e08"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, r5}, 0x90) syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000002480)=ANY=[@ANYBLOB="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"], 0x1, 0x11f4, &(0x7f0000001280)="$eJzs3M+LG2UYB/DHbWvr1v2h1moL0he96GXo7sGLgiyyBWlAaRuhFYSpO9GQMQmZsBARV09e/TvEozdBvOllL/4N3vbisQdxxMTapsRDqXTa8Plc8pD3/cLzkjDwDvPO0ZvffNrrVFknH8fKE2/FyjAi3UqRYiVu+zJee+PnX166ev3G5Z1Wa/dKSpd2rm29nlJav/DjB59/9/JP49Pvf7/+w8k43Pzw6Pft3w7PHp47+vPaJ90qdavUH4xTnm4OBuP8ZlmkvW7Vy1J6ryzyqkjdflWM5sY75WA4nKS8v7e2OhwVVZXy/iT1ikkaD9J4NEn5x3m3n7IsS2urwYNof3urruuIuj4RT0Zd1/VTsRqn4+lYi/XYiM14Jp6N5+JMPB9n44V4Mc5NZzXdNwAAAAAAAAAAAAAAAAAAACyXBzr/f6Hh5gEAAAAAAAAAAAAAAAAAAGBJXL1+4/JOq7V7JaVTEeXX++399uxzNr7TiW6UUcTF2Ig/Ynr6f2ZWX3qntXsxTW3GV+XBP/mD/fax+fzW9HUCC/Nbs3yaz5+M1bvz27ERZxbntxfmT8Wrr9yVz2Ijfv0oBlHGXvydvZP/Yiult99t3ZM/P50HAAAAyyBL/1q4f8+y/xqf5e/j/sA9++vjcf54s2snopp81svLshg1XtzuaPbNQUQ8Io0tcXHi0Wjj/y2Ozf2Rmu/nMS2auybx8Nz50ZvuBAAAAAAAAAAAgPvxMB4nbHqNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/MUOHAsAAAAACPO3TqNjAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4KgAA//86R81g") r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_all\x00', 0x275a, 0x0) write$cgroup_int(r8, &(0x7f0000000040), 0x12) kernel console output (not intermixed with test programs): trings: Mfr=0, Product=0, SerialNumber=0 [ 350.149448][ T20] usb 3-1: config 0 descriptor?? [ 350.341336][ T3248] usb 5-1: USB disconnect, device number 18 [ 350.670053][ T20] apple 0003:05AC:0262.0017: hidraw0: USB HID v0.00 Device [HID 05ac:0262] on usb-dummy_hcd.2-1/input0 [ 350.767354][ T4225] syz.0.1148[4225] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 350.767513][ T4225] syz.0.1148[4225] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 350.770046][ T26] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 350.908340][ T512] usb 3-1: USB disconnect, device number 23 [ 351.330457][ T26] usb 2-1: config 17 has an invalid descriptor of length 255, skipping remainder of the config [ 351.356337][ T26] usb 2-1: config 17 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 351.470854][ T26] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 351.532304][ T26] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 352.100063][ T3248] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 352.136226][ T4239] loop2: detected capacity change from 0 to 1024 [ 352.247408][ T4239] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsv1,bsddf,barrier=0x0000000000000000,norecovery,data_err=ignore,resuid=0x0000000000000000,nodelalloc,acl,noinit_itable,,errors=continue. Quota mode: none. [ 352.518833][ T3248] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 352.534060][ T3248] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 352.544897][ T3248] usb 1-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 352.545731][ T4221] loop1: detected capacity change from 0 to 16 [ 352.555502][ T3248] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 352.570274][ T3248] usb 1-1: config 0 descriptor?? [ 352.961653][ T4221] erofs: (device loop1): mounted with root inode @ nid 36. [ 352.971254][ T4221] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 353.413772][ T4221] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -35 in[64, 4032] out[1851] [ 353.430608][ T4221] erofs: (device loop1): z_erofs_readpage: failed to read, err [-117] [ 353.895373][ T3248] lg-g15 0003:046D:C222.0018: unknown main item tag 0x0 [ 353.905457][ T3248] lg-g15 0003:046D:C222.0018: unknown main item tag 0x0 [ 353.930108][ T3248] lg-g15 0003:046D:C222.0018: unknown main item tag 0x0 [ 353.932605][ T4268] loop4: detected capacity change from 0 to 512 [ 353.939850][ T3248] lg-g15 0003:046D:C222.0018: unknown main item tag 0x0 [ 353.952227][ T3248] lg-g15 0003:046D:C222.0018: hidraw0: USB HID v0.00 Device [HID 046d:c222] on usb-dummy_hcd.0-1/input0 [ 354.010770][ T4268] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 354.034438][ T4268] EXT4-fs error (device loop4): mb_free_blocks:1865: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 354.049439][ T4268] EXT4-fs (loop4): Remounting filesystem read-only [ 354.056265][ T4268] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.1161: invalid indirect mapped block 1 (level 1) [ 354.070278][ T4268] EXT4-fs (loop4): 1 truncate cleaned up [ 354.075908][ T4268] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,dioread_nolock,. Quota mode: none. [ 354.147683][ T3248] usb 1-1: USB disconnect, device number 18 [ 354.276948][ T547] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 354.841794][ T4275] kernel read not supported for file /policy (pid: 4275 comm: syz.4.1161) [ 354.923755][ T30] audit: type=1400 audit(2000000501.790:1103): avc: denied { module_load } for pid=4267 comm="syz.4.1161" path="/selinux/policy" dev="selinuxfs" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=system permissive=1 [ 355.190177][ T26] usb 2-1: string descriptor 0 read error: -71 [ 355.197274][ T26] aiptek 2-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 355.208069][ T26] usb 2-1: USB disconnect, device number 21 [ 355.300063][ T547] usb 3-1: Using ep0 maxpacket: 8 [ 355.334153][ T4280] loop1: detected capacity change from 0 to 1024 [ 355.398079][ T4280] EXT4-fs (loop1): Unrecognized mount option "dont_hash" or missing value [ 355.590980][ T547] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 355.610068][ T547] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 355.629999][ T547] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 355.649988][ T547] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 355.680034][ T547] usb 3-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 355.688961][ T547] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.732792][ T547] usb 3-1: config 0 descriptor?? [ 355.794822][ T4288] netlink: 'syz.1.1164': attribute type 4 has an invalid length. [ 356.569669][ T547] kye 0003:0458:5011.0019: unknown main item tag 0x0 [ 356.591733][ T547] kye 0003:0458:5011.0019: hidraw0: USB HID v0.00 Device [HID 0458:5011] on usb-dummy_hcd.2-1/input0 [ 356.610470][ T547] kye 0003:0458:5011.0019: tablet-enabling feature report not found [ 356.618455][ T547] kye 0003:0458:5011.0019: tablet enabling failed [ 356.735228][ T3248] usb 3-1: USB disconnect, device number 24 [ 356.756085][ T4300] loop1: detected capacity change from 0 to 256 [ 356.810071][ T61] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 356.837822][ T4300] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 356.880367][ T4300] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1169'. [ 357.080002][ T61] usb 1-1: Using ep0 maxpacket: 32 [ 357.200135][ T61] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 357.216363][ T61] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 357.269266][ T61] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 357.303614][ T61] usb 1-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00 [ 357.314260][ T4315] netlink: 'syz.2.1174': attribute type 4 has an invalid length. [ 357.350811][ T61] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 357.358864][ T4315] netlink: 17 bytes leftover after parsing attributes in process `syz.2.1174'. [ 357.400642][ T61] usb 1-1: config 0 descriptor?? [ 357.709985][ T492] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 357.882327][ T61] ntrig 0003:1B96:000A.001A: unknown main item tag 0x0 [ 357.899018][ T61] ntrig 0003:1B96:000A.001A: item fetching failed at offset 1/5 [ 357.912803][ T61] ntrig 0003:1B96:000A.001A: parse failed [ 357.937690][ T61] ntrig: probe of 0003:1B96:000A.001A failed with error -22 [ 358.041300][ T4323] loop2: detected capacity change from 0 to 40427 [ 358.080265][ T492] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 358.107845][ T4323] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 358.120047][ T4323] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 358.146506][ T492] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 358.173851][ T492] usb 2-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 358.190036][ T492] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.202555][ T61] usb 1-1: USB disconnect, device number 19 [ 358.211151][ T4323] F2FS-fs (loop2): Found nat_bits in checkpoint [ 358.223483][ T492] usb 2-1: config 0 descriptor?? [ 358.375468][ T4323] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 358.398382][ T30] audit: type=1326 audit(2000000505.350:1104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4337 comm="syz.3.1183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f663817d9f9 code=0x7ffc0000 [ 358.408437][ T4323] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 358.428933][ T4323] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 358.440789][ T30] audit: type=1326 audit(2000000505.380:1105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4337 comm="syz.3.1183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=36 compat=0 ip=0x7f663817d9f9 code=0x7ffc0000 [ 358.466308][ T30] audit: type=1326 audit(2000000505.380:1106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4337 comm="syz.3.1183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f663817d9f9 code=0x7ffc0000 [ 358.546257][ T30] audit: type=1404 audit(2000000505.500:1107): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 358.556282][ T4323] overlayfs: failed to set xattr on upper [ 358.561510][ T30] audit: type=1400 audit(2000000505.500:1108): avc: denied { setattr } for pid=4322 comm="syz.2.1177" name="work" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=0 [ 358.617168][ T30] audit: type=1400 audit(2000000505.520:1109): avc: denied { mount } for pid=4322 comm="syz.2.1177" name="/" dev="overlay" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=0 [ 358.653361][ T30] audit: type=1400 audit(2000000505.550:1110): avc: denied { write } for pid=4322 comm="syz.2.1177" name="/" dev="loop2" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=0 [ 358.677892][ T30] audit: type=1404 audit(2000000505.550:1111): enforcing=0 old_enforcing=1 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 358.693916][ T30] audit: type=1400 audit(2000000505.560:1112): avc: denied { create } for pid=4322 comm="syz.2.1177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 358.730534][ T492] logitech-hidpp-device 0003:046D:C086.001B: hidraw0: USB HID v0.00 Device [HID 046d:c086] on usb-dummy_hcd.1-1/input0 [ 358.974021][ T492] usb 2-1: USB disconnect, device number 22 [ 359.280300][ T547] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 359.530198][ T547] usb 5-1: Using ep0 maxpacket: 8 [ 360.181839][ T4366] loop1: detected capacity change from 0 to 1024 [ 360.203926][ T4368] loop0: detected capacity change from 0 to 512 [ 360.237167][ T4371] loop3: detected capacity change from 0 to 512 [ 360.244449][ T30] kauditd_printk_skb: 21 callbacks suppressed [ 360.244483][ T30] audit: type=1400 audit(2000000507.200:1135): avc: denied { mounton } for pid=4367 comm="syz.0.1192" path="/28/file1" dev="tmpfs" ino=169 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 360.246123][ T4368] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 360.251654][ T30] audit: type=1400 audit(2000000507.200:1134): avc: denied { mounton } for pid=4365 comm="syz.1.1193" path="/43/file1" dev="tmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 361.012281][ T30] audit: type=1400 audit(2000000507.430:1136): avc: denied { create } for pid=4363 comm="syz.2.1190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 361.034076][ T4371] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 361.069180][ T4371] EXT4-fs error (device loop3): __ext4_iget:4892: inode #11: block 1: comm syz.3.1194: invalid block [ 361.070350][ T547] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 361.082396][ T4366] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsv1,bsddf,barrier=0x0000000000000000,norecovery,data_err=ignore,resuid=0x0000000000000000,nodelalloc,acl,noinit_itable,,errors=continue. Quota mode: none. [ 361.090176][ T547] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 361.117555][ T4368] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1053: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 361.118965][ T547] usb 5-1: Product: syz [ 361.133745][ T30] audit: type=1400 audit(2000000507.490:1137): avc: denied { mount } for pid=4363 comm="syz.2.1190" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 361.159759][ T547] usb 5-1: Manufacturer: syz [ 361.161397][ T4371] EXT4-fs (loop3): Remounting filesystem read-only [ 361.164575][ T547] usb 5-1: SerialNumber: syz [ 361.175513][ T4371] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.1194: couldn't read orphan inode 11 (err -117) [ 361.200726][ T4368] EXT4-fs (loop0): 1 truncate cleaned up [ 361.206268][ T4368] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 361.270214][ T4371] EXT4-fs (loop3): mounted filesystem without journal. Opts: noauto_da_alloc,errors=continue,max_dir_size_kb=0x0000000000000009,data_err=abort,errors=remount-ro,noinit_itable,mblk_io_submit,i_version,acl,. Quota mode: none. [ 361.323252][ T30] audit: type=1400 audit(2000000507.580:1138): avc: denied { unlink } for pid=4363 comm="syz.2.1190" name="#2c" dev="tmpfs" ino=179 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 361.345819][ T30] audit: type=1400 audit(2000000507.590:1139): avc: denied { mount } for pid=4363 comm="syz.2.1190" name="/" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 361.367640][ T30] audit: type=1400 audit(2000000508.250:1140): avc: denied { unmount } for pid=3807 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 361.387898][ T30] audit: type=1400 audit(2000000508.300:1141): avc: denied { map } for pid=4380 comm="syz.2.1195" path="socket:[34278]" dev="sockfs" ino=34278 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 361.531736][ T547] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 19 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 361.760778][ T26] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 362.016457][ T30] audit: type=1400 audit(2000000508.630:1142): avc: denied { create } for pid=4365 comm="syz.1.1193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 362.444722][ T30] audit: type=1400 audit(2000000508.960:1143): avc: denied { write } for pid=4365 comm="syz.1.1193" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 362.740000][ T26] usb 3-1: Using ep0 maxpacket: 32 [ 363.220455][ T26] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 363.502167][ T4388] ------------[ cut here ]------------ [ 363.507677][ T4388] trace type BPF program uses run-time allocation [ 363.515067][ T4388] WARNING: CPU: 1 PID: 4388 at kernel/bpf/verifier.c:11656 check_map_prog_compatibility+0x6f1/0x890 [ 363.526540][ T4388] Modules linked in: [ 363.530589][ T4388] CPU: 1 PID: 4388 Comm: syz.3.1194 Tainted: G W 5.15.152-syzkaller-00143-g70e1a731d986 #0 [ 363.542003][ T4388] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 363.552188][ T4388] RIP: 0010:check_map_prog_compatibility+0x6f1/0x890 [ 363.552261][ T26] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 363.558774][ T4388] Code: db e9 f9 fc ff ff e8 fe 39 ed ff 31 db e9 ed fc ff ff e8 f2 39 ed ff c6 05 0d 43 a3 05 01 48 c7 c7 60 c6 87 85 e8 1f 70 be ff <0f> 0b e9 5a fb ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 84 f9 ff [ 363.583870][ T4391] loop1: detected capacity change from 0 to 512 [ 363.589858][ T4388] RSP: 0018:ffffc90000957348 EFLAGS: 00010246 [ 363.596724][ T26] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 363.601996][ T4388] RAX: ece2c20864c5f500 RBX: 0000000000000001 RCX: 0000000000040000 [ 363.602051][ T4388] RDX: ffffc9000118a000 RSI: 00000000000029f8 RDI: 00000000000029f9 [ 363.602095][ T4388] RBP: ffffc90000957390 R08: ffffffff81576d35 R09: fffff5200012ad91 [ 363.602146][ T4388] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000011 [ 363.602187][ T4388] R13: ffff8881149f1800 R14: ffffc9000009d000 R15: dffffc0000000000 [ 363.613528][ T26] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 363.621080][ T4388] FS: 00007f6636b986c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 363.621146][ T4388] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 363.621190][ T4388] CR2: 00007f6636dbaf98 CR3: 0000000121204000 CR4: 00000000003506b0 [ 363.621237][ T4388] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 363.663848][ T26] usb 3-1: New USB device found, idVendor=1b96, idProduct=9f0a, bcdDevice= 0.15 [ 363.666937][ T4388] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 363.700285][ T26] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 363.706617][ T4388] Call Trace: [ 363.706640][ T4388] [ 363.706660][ T4388] ? show_regs+0x58/0x60 [ 363.733124][ T4388] ? __warn+0x160/0x2f0 [ 363.738530][ T4388] ? check_map_prog_compatibility+0x6f1/0x890 [ 363.746414][ T4388] ? report_bug+0x3d9/0x5b0 [ 363.751056][ T4388] ? check_map_prog_compatibility+0x6f1/0x890 [ 363.758839][ T4388] ? handle_bug+0x41/0x70 [ 363.763315][ T4388] ? exc_invalid_op+0x1b/0x50 [ 363.768113][ T4388] ? asm_exc_invalid_op+0x1b/0x20 [ 363.771152][ T26] usb 3-1: config 0 descriptor?? [ 363.773540][ T4388] ? __wake_up_klogd+0xd5/0x110 [ 363.785902][ T4388] ? check_map_prog_compatibility+0x6f1/0x890 [ 363.792479][ T4388] ? check_map_prog_compatibility+0x6f1/0x890 [ 363.798458][ T4388] resolve_pseudo_ldimm64+0x671/0x1240 [ 363.801422][ T547] usb 5-1: USB disconnect, device number 19 [ 363.803930][ T4388] ? check_attach_btf_id+0xef0/0xef0 [ 363.814988][ T4388] ? bpf_check+0x2b69/0x12bf0 [ 363.819591][ T4388] ? __sanitizer_cov_trace_switch+0x67/0xe0 [ 363.825402][ T4388] bpf_check+0x3174/0x12bf0 [ 363.827402][ T547] usblp0: removed [ 363.830530][ T4388] ? __schedule+0xcd4/0x1590 [ 363.830609][ T4388] ? __kasan_check_read+0x11/0x20 [ 363.843576][ T4388] ? cpupri_find+0xe4/0x2a0 [ 363.848082][ T4388] ? find_lowest_rq+0x196/0x760 [ 363.852850][ T4388] ? pick_next_pushable_task+0x210/0x210 [ 363.858386][ T4388] ? bpf_get_btf_vmlinux+0x60/0x60 [ 363.863519][ T4388] ? __kasan_check_write+0x14/0x20 [ 363.868631][ T4388] ? __switch_to+0x62a/0x1190 [ 363.873627][ T4388] ? find_lock_lowest_rq+0x75/0x480 [ 363.880015][ T4388] ? __kasan_check_write+0x14/0x20 [ 363.885259][ T4388] ? push_rt_task+0x46e/0x5c0 [ 363.890350][ T4391] EXT4-fs (loop1): Unrecognized mount option "obj_user=overlay" or missing value [ 363.899655][ T4388] ? _raw_spin_unlock+0x4d/0x70 [ 363.904484][ T4388] ? finish_task_switch+0x167/0x7b0 [ 363.909583][ T4388] ? requeue_task_rt+0x410/0x410 [ 363.914413][ T4388] ? __schedule+0xcd4/0x1590 [ 363.918902][ T4388] ? __sched_text_start+0x8/0x8 [ 363.923630][ T4388] ? __kasan_check_read+0x11/0x20 [ 363.928560][ T4388] ? preempt_schedule_irq+0xe7/0x140 [ 363.933719][ T4388] ? __cond_resched+0x20/0x20 [ 363.938375][ T4388] ? irqentry_exit_cond_resched+0x2a/0x30 [ 363.944022][ T4388] ? irqentry_exit+0x30/0x40 [ 363.948608][ T4388] ? sysvec_reschedule_ipi+0x7d/0x150 [ 363.953858][ T4388] ? asm_sysvec_reschedule_ipi+0x1b/0x20 [ 363.959508][ T4388] ? memset+0x35/0x40 [ 363.963379][ T4388] ? bpf_obj_name_cpy+0x196/0x1e0 [ 363.968302][ T4388] bpf_prog_load+0x12ac/0x1b50 [ 363.972963][ T4388] ? map_freeze+0x370/0x370 [ 363.977365][ T4388] ? irqentry_exit_cond_resched+0x2a/0x30 [ 363.982973][ T4388] ? irqentry_exit+0x30/0x40 [ 363.987557][ T4388] ? __sanitizer_cov_trace_switch+0x56/0xe0 [ 363.993313][ T4388] __sys_bpf+0x4bc/0x760 [ 363.997449][ T4388] ? bpf_link_show_fdinfo+0x2d0/0x2d0 [ 364.002839][ T4388] __x64_sys_bpf+0x7c/0x90 [ 364.007355][ T4388] do_syscall_64+0x3d/0xb0 [ 364.011730][ T4388] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 364.017524][ T4388] RIP: 0033:0x7f663817d9f9 [ 364.021831][ T4388] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 364.041376][ T4388] RSP: 002b:00007f6636b98038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 364.049668][ T4388] RAX: ffffffffffffffda RBX: 00007f663830c208 RCX: 00007f663817d9f9 [ 364.057533][ T4388] RDX: 0000000000000022 RSI: 0000000020000440 RDI: 0000000000000005 [ 364.065435][ T4388] RBP: 00007f66381eb8ee R08: 0000000000000000 R09: 0000000000000000 [ 364.073242][ T4388] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 364.081464][ T4388] R13: 0000000000000000 R14: 00007f663830c208 R15: 00007ffdd9031398 [ 364.089437][ T4388] [ 364.092332][ T4388] ---[ end trace 14dc88023a7b5ec7 ]--- [ 364.176030][ T4391] loop1: detected capacity change from 0 to 512 [ 364.216495][ T4391] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 364.227988][ T4391] ext4 filesystem being mounted at /44/file0 supports timestamps until 2038 (0x7fffffff) [ 364.305286][ T26] hid-generic 0003:1B96:9F0A.001C: hidraw0: USB HID v0.00 Device [HID 1b96:9f0a] on usb-dummy_hcd.2-1/input0 [ 364.370003][ T61] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 364.612896][ T3505] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 3: comm syz-executor: path /44/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=1656022908, rec_len=50957, size=2048 fake=0 [ 364.633521][ T61] usb 5-1: Using ep0 maxpacket: 32 [ 364.660552][ T3505] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5820: Corrupt filesystem [ 364.671340][ T3505] EXT4-fs error (device loop1): ext4_quota_off:6464: inode #3: comm syz-executor: mark_inode_dirty error [ 364.688597][ T3505] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5820: Corrupt filesystem [ 364.810233][ T4416] loop3: detected capacity change from 0 to 256 [ 364.817864][ T61] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 364.830680][ T3505] EXT4-fs error (device loop1): ext4_quota_off:6464: inode #4: comm syz-executor: mark_inode_dirty error [ 364.842849][ T61] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 364.854461][ T61] usb 5-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 364.866403][ T4416] exfat: Deprecated parameter 'namecase' [ 364.873103][ T4416] exfat: Deprecated parameter 'utf8' [ 364.932846][ T4416] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfc6d8, utbl_chksum : 0xe619d30d) [ 365.133358][ T61] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 365.289982][ T61] usb 5-1: config 0 descriptor?? [ 365.610045][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 365.610080][ T30] audit: type=1400 audit(2000000512.560:1164): avc: denied { unmount } for pid=3987 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 365.726220][ T30] audit: type=1400 audit(2000000512.680:1165): avc: denied { create } for pid=4422 comm="syz.3.1207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 365.779240][ T30] audit: type=1400 audit(2000000512.680:1166): avc: denied { bind } for pid=4422 comm="syz.3.1207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 365.813633][ T61] uclogic 0003:28BD:0094.001D: item fetching failed at offset 5/7 [ 365.832046][ T61] uclogic 0003:28BD:0094.001D: parse failed [ 365.849092][ T61] uclogic: probe of 0003:28BD:0094.001D failed with error -22 [ 365.864667][ T30] audit: type=1400 audit(2000000512.680:1167): avc: denied { node_bind } for pid=4422 comm="syz.3.1207" saddr=ff02::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 365.920077][ T20] usb 3-1: reset high-speed USB device number 25 using dummy_hcd [ 365.933557][ T30] audit: type=1400 audit(2000000512.720:1168): avc: denied { integrity } for pid=4421 comm="syz-executor" lockdown_reason="debugfs access" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=lockdown permissive=1 [ 366.077224][ T3248] usb 5-1: USB disconnect, device number 20 [ 366.116718][ T30] audit: type=1400 audit(2000000512.720:1169): avc: denied { create } for pid=4424 comm="syz.3.1210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 366.136977][ T30] audit: type=1400 audit(2000000512.730:1170): avc: denied { write } for pid=4424 comm="syz.3.1210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 366.156500][ T30] audit: type=1400 audit(2000000512.930:1171): avc: denied { mounton } for pid=4428 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 366.181350][ T30] audit: type=1400 audit(2000000512.930:1172): avc: denied { mount } for pid=4428 comm="syz-executor" name="/" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 366.205882][ T30] audit: type=1400 audit(2000000512.930:1173): avc: denied { read } for pid=4428 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 366.997833][ T4435] loop2: detected capacity change from 0 to 256 [ 367.045065][ T4428] bridge0: port 1(bridge_slave_0) entered blocking state [ 367.052420][ T4428] bridge0: port 1(bridge_slave_0) entered disabled state [ 367.072330][ T4428] device bridge_slave_0 entered promiscuous mode [ 367.082318][ T10] device bridge_slave_1 left promiscuous mode [ 367.164667][ T4435] FAT-fs (loop2): Directory bread(block 64) failed [ 367.171533][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 367.189648][ T10] device bridge_slave_0 left promiscuous mode [ 367.195867][ T4435] FAT-fs (loop2): Directory bread(block 65) failed [ 367.206090][ T4435] FAT-fs (loop2): Directory bread(block 66) failed [ 367.223506][ T4435] FAT-fs (loop2): Directory bread(block 67) failed [ 367.249275][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 367.260281][ T4435] FAT-fs (loop2): Directory bread(block 68) failed [ 367.281230][ T4435] FAT-fs (loop2): Directory bread(block 69) failed [ 367.300086][ T4435] FAT-fs (loop2): Directory bread(block 70) failed [ 367.306825][ T4435] FAT-fs (loop2): Directory bread(block 71) failed [ 367.314672][ T4435] FAT-fs (loop2): Directory bread(block 72) failed [ 367.321952][ T4435] FAT-fs (loop2): Directory bread(block 73) failed [ 367.342067][ T61] usb 3-1: USB disconnect, device number 25 [ 367.525341][ T4448] loop3: detected capacity change from 0 to 256 [ 367.645411][ T4428] bridge0: port 2(bridge_slave_1) entered blocking state [ 367.652916][ T4428] bridge0: port 2(bridge_slave_1) entered disabled state [ 367.674815][ T4428] device bridge_slave_1 entered promiscuous mode [ 367.878692][ T4448] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 368.830997][ T4464] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1216'. [ 368.960070][ T20] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 369.174902][ T3248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 369.544712][ T4470] loop4: detected capacity change from 0 to 1024 [ 371.141602][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 371.141654][ T30] audit: type=1400 audit(2000000516.200:1189): avc: denied { read } for pid=4466 comm="syz.4.1222" name="loop-control" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 371.190199][ T3248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 371.201967][ T4478] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1223'. [ 371.374352][ T30] audit: type=1400 audit(2000000516.200:1190): avc: denied { open } for pid=4466 comm="syz.4.1222" path="/dev/loop-control" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 371.420157][ T4470] EXT4-fs (loop4): Mount option "noacl" will be removed by 3.5 [ 371.420157][ T4470] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 371.420157][ T4470] [ 371.439490][ T4470] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 371.448915][ T4470] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 371.460562][ T4470] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869) [ 371.485436][ T4470] EXT4-fs (loop4): invalid journal inode [ 371.513632][ T30] audit: type=1400 audit(2000000516.200:1191): avc: denied { ioctl } for pid=4466 comm="syz.4.1222" path="/dev/loop-control" dev="devtmpfs" ino=111 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 372.679066][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 372.688144][ T20] usb 1-1: unable to read config index 0 descriptor/all [ 372.698263][ T20] usb 1-1: can't read configurations, error -71 [ 372.709020][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 372.742475][ T30] audit: type=1400 audit(2000000519.700:1192): avc: denied { write } for pid=4491 comm="syz.3.1229" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 372.780975][ T6] bridge0: port 1(bridge_slave_0) entered blocking state [ 372.788773][ T6] bridge0: port 1(bridge_slave_0) entered forwarding state [ 372.850718][ T30] audit: type=1400 audit(2000000519.810:1193): avc: denied { create } for pid=4495 comm="syz.2.1230" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 372.873909][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 372.909439][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 372.920021][ T30] audit: type=1400 audit(2000000519.810:1194): avc: denied { setopt } for pid=4497 comm="syz.4.1231" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 372.984272][ T6] bridge0: port 2(bridge_slave_1) entered blocking state [ 372.991948][ T6] bridge0: port 2(bridge_slave_1) entered forwarding state [ 373.094670][ T3248] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 373.103572][ T3248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 373.115224][ T3248] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 373.130361][ T4504] loop4: detected capacity change from 0 to 2048 [ 373.360050][ T30] audit: type=1400 audit(2000000520.150:1195): avc: denied { create } for pid=4495 comm="syz.2.1230" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 373.434254][ T4504] Alternate GPT is invalid, using primary GPT. [ 373.492530][ T4504] loop4: p2 p3 p7 [ 373.941562][ T3248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 373.967475][ T3248] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 374.160090][ T30] audit: type=1400 audit(2000000521.090:1196): avc: denied { getopt } for pid=4517 comm="syz.2.1239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 374.182655][ T101] Alternate GPT is invalid, using primary GPT. [ 374.188865][ T101] loop4: p2 p3 p7 [ 374.224248][ T30] audit: type=1400 audit(2000000521.180:1197): avc: denied { read } for pid=4520 comm="syz.2.1240" name="kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 374.232263][ T3248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 374.257324][ T30] audit: type=1400 audit(2000000521.180:1198): avc: denied { open } for pid=4520 comm="syz.2.1240" path="/dev/kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 374.272635][ T3248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 374.613129][ T4525] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 375.168165][ T3064] udevd[3064]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 375.187445][ T4428] device veth0_vlan entered promiscuous mode [ 375.200672][ T3350] udevd[3350]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 375.215940][ T2922] udevd[2922]: inotify_add_watch(7, /dev/loop4p7, 10) failed: No such file or directory [ 375.226579][ T4525] SELinux: failed to load policy [ 375.287015][ T3248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 375.313431][ T3248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 375.323494][ T3064] udevd[3064]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 375.336115][ T3350] udevd[3350]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 375.348277][ T4531] loop0: detected capacity change from 0 to 128 [ 375.351028][ T2922] udevd[2922]: inotify_add_watch(7, /dev/loop4p7, 10) failed: No such file or directory [ 375.401713][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 375.405531][ T4533] loop2: detected capacity change from 0 to 512 [ 375.429654][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 375.450691][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 375.469193][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 375.490810][ T4428] device veth1_macvtap entered promiscuous mode [ 375.529419][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 375.542106][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 375.572250][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 375.589608][ T4533] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 375.624072][ T4533] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 375.658265][ T4533] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b016c118, mo2=0002] [ 375.662373][ T4545] loop4: detected capacity change from 0 to 256 [ 375.678548][ T4533] System zones: 1-12 [ 375.685397][ T3248] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 375.694256][ T3248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 375.745641][ T4533] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2213: inode #15: comm syz.2.1243: corrupted in-inode xattr [ 375.840396][ T4545] exfat: Deprecated parameter 'namecase' [ 375.868316][ T4545] exfat: Deprecated parameter 'namecase' [ 375.930509][ T4533] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.1243: couldn't read orphan inode 15 (err -117) [ 375.964886][ T4545] exfat: Unknown parameter 'iocharseÌ' [ 376.060845][ T4533] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsold,data_err=abort,debug,noload,mblk_io_submit,commit=0x0000000000000005,init_itable=0x0000000000000601,grpquota,,errors=continue. Quota mode: writeback. [ 376.670097][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 376.670141][ T30] audit: type=1400 audit(2000000523.600:1206): avc: denied { create } for pid=4548 comm="syz.3.1247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 376.700039][ T30] audit: type=1400 audit(2000000523.610:1207): avc: denied { connect } for pid=4548 comm="syz.3.1247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 376.742196][ T30] audit: type=1400 audit(2000000523.700:1208): avc: denied { mounton } for pid=4428 comm="syz-executor" path="/root/syzkaller.GmOBao/syz-tmp" dev="sda1" ino=1986 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 377.550296][ T4533] EXT4-fs error (device loop2): ext4_map_blocks:602: inode #2: block 13: comm syz.2.1243: lblock 0 mapped to illegal pblock 13 (length 1) [ 377.556173][ T30] audit: type=1400 audit(2000000523.700:1209): avc: denied { mount } for pid=4428 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 377.590277][ T30] audit: type=1400 audit(2000000523.700:1210): avc: denied { mount } for pid=4428 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 377.613308][ T30] audit: type=1400 audit(2000000523.730:1211): avc: denied { map } for pid=4532 comm="syz.2.1243" path="/37/file0/bus" dev="devtmpfs" ino=114 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 377.670673][ T30] audit: type=1400 audit(2000000523.910:1212): avc: denied { create } for pid=4543 comm="syz.4.1246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 377.731732][ T30] audit: type=1400 audit(2000000524.010:1213): avc: denied { write } for pid=4543 comm="syz.4.1246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 377.763515][ T3807] EXT4-fs error (device loop2): ext4_map_blocks:602: inode #2: block 13: comm syz-executor: lblock 0 mapped to illegal pblock 13 (length 1) [ 377.778711][ T30] audit: type=1400 audit(2000000524.180:1214): avc: denied { mounton } for pid=4428 comm="syz-executor" path="/dev/binderfs" dev="devtmpfs" ino=362 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 377.863842][ T3807] EXT4-fs warning (device loop2): htree_dirblock_to_tree:1082: inode #2: lblock 0: comm syz-executor: error -117 reading directory block [ 377.923953][ T3807] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5820: Corrupt filesystem [ 377.959021][ T3807] EXT4-fs error (device loop2): ext4_dirty_inode:6024: inode #2: comm syz-executor: mark_inode_dirty error [ 378.089631][ T30] audit: type=1400 audit(2000000525.040:1215): avc: denied { ioctl } for pid=4572 comm="syz.4.1256" path="socket:[35426]" dev="sockfs" ino=35426 ioctlcmd=0x8955 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 378.501462][ T10] device bridge_slave_1 left promiscuous mode [ 378.509604][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 378.732144][ T10] device bridge_slave_0 left promiscuous mode [ 378.889403][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 379.425768][ T10] device veth1_macvtap left promiscuous mode [ 379.879837][ T4602] loop1: detected capacity change from 0 to 2048 [ 379.944142][ T4602] loop1: p1 p2 p3 [ 379.952729][ T26] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 381.610133][ T26] usb 5-1: config 0 has an invalid interface number: 25 but max is 0 [ 381.627256][ T26] usb 5-1: config 0 has no interface number 0 [ 381.683198][ T26] usb 5-1: config 0 interface 25 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 381.694429][ T26] usb 5-1: config 0 interface 25 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 381.704375][ T26] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 381.714989][ T26] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.727189][ T26] usb 5-1: config 0 descriptor?? [ 382.023704][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 382.023741][ T30] audit: type=1400 audit(2000001041.977:1227): avc: denied { write } for pid=4598 comm="syz.4.1267" name="mcfilter6" dev="proc" ino=4026532579 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 382.669086][ T30] audit: type=1400 audit(2000001042.547:1228): avc: denied { name_bind } for pid=4598 comm="syz.4.1267" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 382.779519][ T30] audit: type=1400 audit(2000001042.617:1229): avc: denied { bind } for pid=4623 comm="syz.1.1272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 382.812578][ T4607] bridge0: port 1(bridge_slave_0) entered blocking state [ 382.822699][ T4607] bridge0: port 1(bridge_slave_0) entered disabled state [ 382.832624][ T4607] device bridge_slave_0 entered promiscuous mode [ 382.841783][ T4607] bridge0: port 2(bridge_slave_1) entered blocking state [ 382.849192][ T4607] bridge0: port 2(bridge_slave_1) entered disabled state [ 382.874730][ T4607] device bridge_slave_1 entered promiscuous mode [ 382.894838][ T26] uclogic 0003:256C:006D.001E: No inputs registered, leaving [ 382.906608][ T30] audit: type=1400 audit(2000001042.857:1230): avc: denied { create } for pid=4630 comm="syz.3.1274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 382.935074][ T30] audit: type=1400 audit(2000001042.857:1231): avc: denied { connect } for pid=4630 comm="syz.3.1274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 382.970342][ T26] uclogic 0003:256C:006D.001E: hidraw0: USB HID v0.00 Device [HID 256c:006d] on usb-dummy_hcd.4-1/input25 [ 382.971736][ T30] audit: type=1400 audit(2000001042.857:1232): avc: denied { write } for pid=4630 comm="syz.3.1274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 383.034814][ T30] audit: type=1400 audit(2000001042.857:1233): avc: denied { read } for pid=4630 comm="syz.3.1274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 383.056673][ T4629] device syzkaller0 entered promiscuous mode [ 383.058652][ T30] audit: type=1326 audit(2000001042.887:1234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4630 comm="syz.3.1274" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f663817d9f9 code=0x0 [ 383.158905][ T4634] loop3: detected capacity change from 0 to 512 [ 383.216774][ T4634] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 383.246745][ T30] audit: type=1400 audit(2000001043.197:1235): avc: denied { setopt } for pid=4630 comm="syz.3.1274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 383.272978][ T30] audit: type=1400 audit(2000001043.197:1236): avc: denied { ioctl } for pid=4630 comm="syz.3.1274" path="socket:[35930]" dev="sockfs" ino=35930 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 383.316952][ T4634] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1274'. [ 383.518635][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 383.528166][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 383.550397][ T512] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 383.559122][ T512] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 383.568116][ T512] bridge0: port 1(bridge_slave_0) entered blocking state [ 383.576615][ T512] bridge0: port 1(bridge_slave_0) entered forwarding state [ 383.585698][ T512] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 383.602400][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 383.612290][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 383.621227][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 383.628868][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 383.660026][ T1286] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 383.672019][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 383.698013][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 383.727979][ T512] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 383.763172][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 383.772033][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 383.780088][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 383.793073][ T4607] device veth0_vlan entered promiscuous mode [ 383.850729][ T547] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 383.876419][ T4607] device veth1_macvtap entered promiscuous mode [ 383.905226][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 383.920012][ T1286] usb 2-1: Using ep0 maxpacket: 8 [ 383.923658][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 383.942021][ T10] device bridge_slave_1 left promiscuous mode [ 383.954639][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 383.965053][ T10] device bridge_slave_0 left promiscuous mode [ 383.974764][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 383.985783][ T10] device veth1_macvtap left promiscuous mode [ 383.992506][ T10] device veth0_vlan left promiscuous mode [ 384.132309][ T6] usb 5-1: USB disconnect, device number 21 [ 384.201313][ T1286] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 384.214774][ T1286] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 384.244376][ T1286] usb 2-1: Product: syz [ 384.248793][ T1286] usb 2-1: Manufacturer: syz [ 384.277761][ T1286] usb 2-1: SerialNumber: syz [ 384.318967][ T4642] loop3: detected capacity change from 0 to 40427 [ 384.375498][ T4642] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 384.386430][ T4642] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 384.406867][ T4642] F2FS-fs (loop3): invalid crc value [ 384.465367][ T4642] F2FS-fs (loop3): Found nat_bits in checkpoint [ 384.474111][ T4664] loop2: detected capacity change from 0 to 128 [ 384.739167][ T1286] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 23 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 384.802018][ T4642] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 384.811961][ T4642] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 384.984089][ T4668] overlayfs: filesystem on './file1' not supported [ 386.198219][ T4676] loop4: detected capacity change from 0 to 128 [ 386.246053][ T4676] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (16076!=39978) [ 386.297984][ T4676] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 386.704419][ T4673] loop2: detected capacity change from 0 to 40427 [ 386.725904][ T547] usb 2-1: USB disconnect, device number 23 [ 386.738911][ T547] usblp0: removed [ 386.815456][ T4673] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 386.830066][ T4673] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 386.877553][ T4673] F2FS-fs (loop2): Found nat_bits in checkpoint [ 387.007751][ T4673] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 387.030053][ T4673] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 387.323079][ T547] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 387.494579][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 387.494662][ T30] audit: type=1400 audit(2000001047.417:1251): avc: denied { write } for pid=4672 comm="syz.2.1280" name="vga_arbiter" dev="devtmpfs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 388.296022][ T30] audit: type=1400 audit(2000001047.417:1252): avc: denied { open } for pid=4672 comm="syz.2.1280" path="/dev/vga_arbiter" dev="devtmpfs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 388.340229][ T547] usb 2-1: config 0 has an invalid interface number: 18 but max is 0 [ 388.348963][ T547] usb 2-1: config 0 has no interface number 0 [ 388.356359][ T547] usb 2-1: config 0 interface 18 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 388.367753][ T547] usb 2-1: config 0 interface 18 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 388.450371][ T547] usb 2-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.10 [ 388.476149][ T547] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 388.499870][ T547] usb 2-1: Manufacturer: syz [ 388.514892][ T547] usb 2-1: config 0 descriptor?? [ 388.518690][ T10] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 388.521660][ T4607] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 388.532517][ T4607] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 388.537166][ T10] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 388.545357][ T4607] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 388.566258][ T4607] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 388.590045][ T4607] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 388.608059][ T4607] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 388.616857][ T4607] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 388.627986][ T30] audit: type=1400 audit(2000001048.587:1253): avc: denied { remove_name } for pid=4607 comm="syz-executor" name="file0" dev="loop2" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 388.665152][ T30] audit: type=1400 audit(2000001048.617:1254): avc: denied { rmdir } for pid=4607 comm="syz-executor" name="file0" dev="loop2" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 388.845885][ T30] audit: type=1400 audit(2000001048.797:1255): avc: denied { write } for pid=4681 comm="syz.1.1282" name="kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 389.117537][ T30] audit: type=1400 audit(2000001049.067:1256): avc: denied { read } for pid=4700 comm="syz.4.1288" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 389.190713][ T30] audit: type=1400 audit(2000001049.067:1257): avc: denied { open } for pid=4700 comm="syz.4.1288" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 389.240449][ T547] input: syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.18/0003:054C:03D5.001F/input/input21 [ 389.270726][ T547] sony 0003:054C:03D5.001F: input,hidraw0: USB HID v0.00 Joystick [syz] on usb-dummy_hcd.1-1/input18 [ 389.290034][ T30] audit: type=1400 audit(2000001049.067:1258): avc: denied { ioctl } for pid=4700 comm="syz.4.1288" path="/dev/binderfs/binder0" dev="binder" ino=10 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 389.358758][ T30] audit: type=1400 audit(2000001049.067:1259): avc: denied { set_context_mgr } for pid=4700 comm="syz.4.1288" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 389.421967][ T30] audit: type=1400 audit(2000001049.067:1260): avc: denied { map } for pid=4700 comm="syz.4.1288" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 389.456821][ T4714] device pim6reg1 entered promiscuous mode [ 389.546077][ T20] usb 2-1: USB disconnect, device number 24 [ 389.879628][ T4724] loop4: detected capacity change from 0 to 256 [ 389.915668][ T4724] exfat: Deprecated parameter 'namecase' [ 389.924188][ T4724] exfat: Deprecated parameter 'utf8' [ 389.985110][ T4724] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfc6d8, utbl_chksum : 0xe619d30d) [ 392.744964][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 392.745000][ T30] audit: type=1400 audit(2000001050.967:1266): avc: denied { sys_admin } for pid=4725 comm="syz.3.1295" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 393.893930][ T4753] bridge0: port 1(bridge_slave_0) entered blocking state [ 393.918433][ T4757] incfs: Can't find or create .index dir in ./file0 [ 393.925421][ T4757] incfs: mount failed -14 [ 393.936259][ T30] audit: type=1400 audit(2000001053.867:1267): avc: denied { mounton } for pid=4756 comm="syz.4.1305" path="/123/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 393.960163][ T4753] bridge0: port 1(bridge_slave_0) entered disabled state [ 393.970316][ T30] audit: type=1400 audit(2000001053.867:1268): avc: denied { write } for pid=4756 comm="syz.4.1305" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 394.032785][ T30] audit: type=1400 audit(2000001053.867:1269): avc: denied { add_name } for pid=4756 comm="syz.4.1305" name=".index" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 394.097848][ T4753] device bridge_slave_0 entered promiscuous mode [ 394.242089][ T4753] bridge0: port 2(bridge_slave_1) entered blocking state [ 394.249022][ T4753] bridge0: port 2(bridge_slave_1) entered disabled state [ 394.278074][ T4753] device bridge_slave_1 entered promiscuous mode [ 394.285784][ T30] audit: type=1400 audit(2000001053.867:1270): avc: denied { associate } for pid=4756 comm="syz.4.1305" name=".index" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 394.410092][ T30] audit: type=1400 audit(2000001054.027:1271): avc: denied { getopt } for pid=4754 comm="syz.2.1306" lport=141 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 394.645065][ T20] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 394.695871][ T4773] loop2: detected capacity change from 0 to 256 [ 395.271686][ T4773] exfat: Deprecated parameter 'namecase' [ 395.279818][ T4773] exfat: Deprecated parameter 'utf8' [ 395.340208][ T4773] exfat: Deprecated parameter 'namecase' [ 395.357665][ T4773] exfat: Deprecated parameter 'utf8' [ 395.386214][ T4773] exFAT-fs (loop2): failed to load upcase table (idx : 0x00012153, chksum : 0x555ffa9e, utbl_chksum : 0xe619d30d) [ 395.514237][ T30] audit: type=1400 audit(2000001055.467:1272): avc: denied { write } for pid=4772 comm="syz.2.1310" path=2F372FE91F7189591E9233614B2F66696C6532 dev="loop2" ino=1048765 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 395.605581][ T4777] loop7: detected capacity change from 0 to 16384 [ 395.632135][ T10] device bridge_slave_1 left promiscuous mode [ 395.642711][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 395.654968][ T10] device bridge_slave_0 left promiscuous mode [ 395.663526][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 395.679760][ T10] device veth1_macvtap left promiscuous mode [ 395.687143][ T10] device veth0_vlan left promiscuous mode [ 395.690008][ T20] usb 4-1: Using ep0 maxpacket: 32 [ 395.759781][ T30] audit: type=1400 audit(2000001055.707:1273): avc: denied { read } for pid=4776 comm="syz.1.1311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 395.795829][ T4771] loop4: detected capacity change from 0 to 512 [ 395.820242][ T20] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 395.829222][ T20] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 395.841843][ T20] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 395.854887][ T20] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 395.855087][ T4771] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 395.942831][ T4771] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #16: comm syz.4.1309: invalid indirect mapped block 83886080 (level 1) [ 395.969600][ T4771] EXT4-fs (loop4): Remounting filesystem read-only [ 395.981199][ T4771] EXT4-fs (loop4): 1 orphan inode deleted [ 396.002729][ T4771] EXT4-fs (loop4): 1 truncate cleaned up [ 396.009537][ T4771] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,lazytime,debug_want_extra_isize=0x000000000000006e,block_validity,block_validity,quota,. Quota mode: writeback. [ 396.050290][ T20] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 396.086207][ T20] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 396.112423][ T30] audit: type=1400 audit(2000001056.067:1274): avc: denied { read } for pid=4788 comm="syz.1.1314" name="usbmon0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 396.133706][ T20] usb 4-1: Product: syz [ 396.174004][ T20] usb 4-1: Manufacturer: syz [ 396.185584][ T20] usb 4-1: SerialNumber: syz [ 396.201228][ T4771] EXT4-fs (loop4): Unrecognized mount option "€" or missing value [ 396.268297][ T30] audit: type=1400 audit(2000001056.067:1275): avc: denied { open } for pid=4788 comm="syz.1.1314" path="/dev/usbmon0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 397.359377][ T1286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 397.382579][ T1286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 397.446375][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 397.466401][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 397.470415][ T20] usb 4-1: 0:2 : does not exist [ 397.486743][ T26] bridge0: port 1(bridge_slave_0) entered blocking state [ 397.493964][ T26] bridge0: port 1(bridge_slave_0) entered forwarding state [ 397.517915][ T20] usb 4-1: USB disconnect, device number 17 [ 397.552617][ T4794] loop1: detected capacity change from 0 to 2048 [ 397.570224][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 397.578840][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 397.608419][ T26] bridge0: port 2(bridge_slave_1) entered blocking state [ 397.615483][ T26] bridge0: port 2(bridge_slave_1) entered forwarding state [ 397.645611][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 397.681751][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 397.702084][ T4794] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 397.713453][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 397.727235][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 397.794882][ T4804] loop4: detected capacity change from 0 to 256 [ 397.853481][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 397.853515][ T30] audit: type=1400 audit(2000001057.807:1278): avc: denied { read } for pid=4797 comm="syz.2.1318" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 397.925314][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 397.937650][ T30] audit: type=1400 audit(2000001057.837:1279): avc: denied { open } for pid=4797 comm="syz.2.1318" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 397.973629][ T4804] exfat: Deprecated parameter 'namecase' [ 398.081945][ T30] audit: type=1400 audit(2000001057.987:1280): avc: denied { read write } for pid=4793 comm="syz.1.1315" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 398.812192][ T4804] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 398.855768][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 398.871553][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 398.879688][ T30] audit: type=1400 audit(2000001057.987:1281): avc: denied { open } for pid=4793 comm="syz.1.1315" path="/14/file0/file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 398.917983][ T30] audit: type=1400 audit(2000001058.007:1282): avc: denied { audit_read } for pid=4793 comm="syz.1.1315" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 398.948906][ T4753] device veth0_vlan entered promiscuous mode [ 398.961860][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 398.970753][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 399.645946][ T30] audit: type=1400 audit(2000001059.597:1283): avc: denied { getopt } for pid=4814 comm="syz.1.1320" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 399.647186][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 400.418071][ T30] audit: type=1400 audit(2000001059.807:1284): avc: denied { read } for pid=4814 comm="syz.1.1320" path="socket:[36385]" dev="sockfs" ino=36385 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 400.457501][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 400.518826][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 400.534452][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 400.552389][ T4753] device veth1_macvtap entered promiscuous mode [ 400.561613][ T4822] loop2: detected capacity change from 0 to 512 [ 400.612429][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 400.622054][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 400.649740][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 400.660546][ T4822] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 400.686631][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 400.697572][ T4822] EXT4-fs (loop2): 1 truncate cleaned up [ 400.703188][ T4822] EXT4-fs (loop2): mounted filesystem without journal. Opts: noload,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000068,lazytime,block_validity,quota,,errors=continue. Quota mode: writeback. [ 400.711102][ T4825] loop1: detected capacity change from 0 to 512 [ 400.795649][ T30] audit: type=1400 audit(2000001060.747:1285): avc: denied { name_bind } for pid=4828 comm="syz.0.1296" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 400.843252][ T4825] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 400.890013][ T6] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 400.897885][ T4825] ext4 filesystem being mounted at /16/file0 supports timestamps until 2038 (0x7fffffff) [ 401.011275][ T30] audit: type=1400 audit(2000001060.967:1286): avc: denied { map } for pid=4823 comm="syz.1.1323" path="/16/file0/cpu.stat" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 401.086715][ T4822] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=4822 comm=syz.2.1322 [ 401.114206][ T30] audit: type=1400 audit(2000001060.997:1287): avc: denied { execute } for pid=4823 comm="syz.1.1323" path="/16/file0/cpu.stat" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 403.820171][ T6] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 403.838529][ T4849] loop2: detected capacity change from 0 to 256 [ 403.849303][ T6] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 403.884302][ T6] usb 4-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 403.903386][ T6] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 403.923242][ T6] usb 4-1: config 0 descriptor?? [ 403.975173][ T4849] FAT-fs (loop2): Unrecognized mount option "nOnumtail=0" or missing value [ 404.140355][ T4849] loop2: detected capacity change from 0 to 2048 [ 404.220091][ T4849] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 404.290348][ T6] usbhid 4-1:0.0: can't add hid device: -71 [ 404.299765][ T6] usbhid: probe of 4-1:0.0 failed with error -71 [ 404.329407][ T6] usb 4-1: USB disconnect, device number 18 [ 404.541652][ T45] device bridge_slave_1 left promiscuous mode [ 404.560341][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 404.595890][ T45] device bridge_slave_0 left promiscuous mode [ 404.602131][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 404.621964][ T45] device veth1_macvtap left promiscuous mode [ 404.627920][ T45] device veth0_vlan left promiscuous mode [ 404.885586][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 404.885619][ T30] audit: type=1400 audit(2000001064.837:1292): avc: denied { bind } for pid=4867 comm="syz.3.1334" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 404.945445][ T30] audit: type=1400 audit(2000001064.837:1293): avc: denied { node_bind } for pid=4867 comm="syz.3.1334" saddr=fec0:ffff::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 405.054726][ T30] audit: type=1400 audit(2000001065.007:1294): avc: denied { relabelfrom } for pid=4858 comm="syz.0.1332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 405.095844][ T30] audit: type=1400 audit(2000001065.027:1295): avc: denied { relabelto } for pid=4858 comm="syz.0.1332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 405.170138][ T4854] bridge0: port 1(bridge_slave_0) entered blocking state [ 405.177152][ T4854] bridge0: port 1(bridge_slave_0) entered disabled state [ 405.185201][ T4854] device bridge_slave_0 entered promiscuous mode [ 405.193071][ T4854] bridge0: port 2(bridge_slave_1) entered blocking state [ 405.200027][ T4854] bridge0: port 2(bridge_slave_1) entered disabled state [ 405.207985][ T4854] device bridge_slave_1 entered promiscuous mode [ 405.405122][ T4856] loop4: detected capacity change from 0 to 40427 [ 405.452739][ T4856] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 405.463254][ T4856] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 405.482517][ T4856] F2FS-fs (loop4): invalid crc value [ 405.520322][ T4856] F2FS-fs (loop4): Found nat_bits in checkpoint [ 405.590020][ T1286] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 405.628007][ T4854] bridge0: port 2(bridge_slave_1) entered blocking state [ 405.635075][ T4854] bridge0: port 2(bridge_slave_1) entered forwarding state [ 405.642331][ T4854] bridge0: port 1(bridge_slave_0) entered blocking state [ 405.649237][ T4854] bridge0: port 1(bridge_slave_0) entered forwarding state [ 405.681796][ T4856] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 405.688834][ T4856] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 405.762515][ T30] audit: type=1400 audit(2000001065.717:1296): avc: denied { ioctl } for pid=4855 comm="syz.4.1331" path="/126/bus/bus" dev="loop4" ino=455 ioctlcmd=0xf501 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 405.859984][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 405.870568][ T6] bridge0: port 1(bridge_slave_0) entered disabled state [ 405.901465][ T6] bridge0: port 2(bridge_slave_1) entered disabled state [ 405.998880][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 406.007810][ T20] bridge0: port 1(bridge_slave_0) entered blocking state [ 406.010027][ T1286] usb 1-1: device descriptor read/64, error -71 [ 406.014743][ T20] bridge0: port 1(bridge_slave_0) entered forwarding state [ 406.029031][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 406.037488][ T20] bridge0: port 2(bridge_slave_1) entered blocking state [ 406.044443][ T20] bridge0: port 2(bridge_slave_1) entered forwarding state [ 406.190452][ T30] audit: type=1400 audit(2000001066.057:1297): avc: denied { map } for pid=4855 comm="syz.4.1331" path="socket:[36598]" dev="sockfs" ino=36598 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 406.743817][ T30] audit: type=1400 audit(2000001066.067:1298): avc: denied { read } for pid=4855 comm="syz.4.1331" path="socket:[36598]" dev="sockfs" ino=36598 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 406.880277][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 406.889053][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 406.890525][ T2227] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 406.912356][ T1286] usb 1-1: device descriptor read/64, error -71 [ 406.933843][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 406.934313][ T2227] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 406.943779][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 406.974767][ T4854] device veth0_vlan entered promiscuous mode [ 406.990938][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 406.999171][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 407.031675][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 407.039401][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 407.066624][ T4854] device veth1_macvtap entered promiscuous mode [ 407.075421][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 407.084374][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 407.100856][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 407.130339][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 407.138940][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 407.160736][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 407.169799][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 407.180010][ T1286] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 407.301660][ T30] audit: type=1400 audit(2000001067.257:1299): avc: denied { bind } for pid=4893 comm="syz.1.1330" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 407.364613][ T45] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm kworker/u4:2: bg 0: block 234: padding at end of block bitmap is not set [ 407.384800][ T45] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1812 with error 28 [ 407.414195][ T45] EXT4-fs (loop2): This should not happen!! Data will be lost [ 407.414195][ T45] [ 407.573159][ T45] EXT4-fs (loop2): Total free blocks count 0 [ 407.599459][ T45] EXT4-fs (loop2): Free/Dirty block details [ 407.669103][ T45] EXT4-fs (loop2): free_blocks=0 [ 407.708499][ T45] EXT4-fs (loop2): dirty_blocks=1824 [ 407.732756][ T4898] loop1: detected capacity change from 0 to 2048 [ 407.748526][ T45] EXT4-fs (loop2): Block reservation details [ 407.807956][ T45] EXT4-fs (loop2): i_reserved_data_blocks=114 [ 407.904620][ T4898] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 408.142847][ T1286] usb 1-1: device descriptor read/64, error -71 [ 408.389236][ T4911] loop2: detected capacity change from 0 to 256 [ 408.438177][ T4916] SELinux: failed to load policy [ 408.569123][ T4918] loop2: detected capacity change from 0 to 256 [ 408.650021][ T1286] usb 1-1: device descriptor read/64, error -71 [ 409.387167][ T1286] usb usb1-port1: attempt power cycle [ 409.393477][ T30] audit: type=1400 audit(2000001068.757:1300): avc: denied { read } for pid=4914 comm="syz.4.1345" name="vga_arbiter" dev="devtmpfs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 409.426173][ T4920] loop1: detected capacity change from 0 to 512 [ 409.452339][ T30] audit: type=1400 audit(2000001069.407:1301): avc: denied { getopt } for pid=4914 comm="syz.4.1345" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 409.460362][ T45] Bluetooth: hci0: Frame reassembly failed (-84) [ 409.615507][ T4920] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 409.702934][ T4920] ext4 filesystem being mounted at /2/bus supports timestamps until 2038 (0x7fffffff) [ 409.825583][ T4928] syz.2.1346[4928] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 409.825785][ T4928] syz.2.1346[4928] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 410.014627][ T4935] loop4: detected capacity change from 0 to 512 [ 410.060042][ T1286] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 410.072541][ T4935] EXT4-fs (loop4): Unrecognized mount option "fsmagic=0x0000000000000000" or missing value [ 410.200190][ T4941] loop4: detected capacity change from 0 to 512 [ 410.232588][ T4941] EXT4-fs (loop4): error: journal path . is not a block device [ 410.390604][ T1286] usb 1-1: device descriptor read/8, error -71 [ 412.179198][ T61] Bluetooth: hci0: command 0x1003 tx timeout [ 412.257420][ T48] Bluetooth: hci0: sending frame failed (-49) [ 412.280075][ T1286] usb 1-1: device descriptor read/8, error -71 [ 412.296373][ T4935] loop4: detected capacity change from 0 to 16 [ 412.339697][ T4935] erofs: (device loop4): mounted with root inode @ nid 36. [ 412.348567][ T4935] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=86 [ 412.357496][ T4935] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=86 [ 412.429249][ T4951] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1353'. [ 412.438713][ T4951] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1353'. [ 412.570327][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 412.570360][ T30] audit: type=1400 audit(2000001072.517:1308): avc: denied { audit_write } for pid=4954 comm="syz.4.1355" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 412.617600][ T30] audit: type=1107 audit(2000001072.527:1309): pid=4954 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 413.088362][ T30] audit: type=1400 audit(2000001073.037:1310): avc: denied { mounton } for pid=4958 comm="syz.1.1357" path="/4/file0" dev="tmpfs" ino=40 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 413.158157][ T4959] loop1: detected capacity change from 0 to 512 [ 413.200461][ T30] audit: type=1400 audit(2000001073.157:1311): avc: denied { remount } for pid=4958 comm="syz.1.1357" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 413.252908][ T30] audit: type=1400 audit(2000001073.207:1312): avc: denied { unmount } for pid=4854 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 413.286642][ T4967] loop2: detected capacity change from 0 to 1024 [ 413.306968][ T4967] EXT4-fs (loop2): Mount option "nouser_xattr" will be removed by 3.5 [ 413.306968][ T4967] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 413.306968][ T4967] [ 413.344035][ T4967] EXT4-fs (loop2): mounted filesystem without journal. Opts: user_xattr,noquota,barrier=0x0000000000000002,jqfmt=vfsv1,nouser_xattr,max_dir_size_kb=0x00000000000007b1,noquota,min_batch_time=0x0000000000000008,delalloc,user_xattr,quota,,errors=continue. Quota mode: writeback. [ 413.456653][ T4974] loop1: detected capacity change from 0 to 512 [ 413.480397][ T4974] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 413.492198][ T4974] EXT4-fs error (device loop1): __ext4_iget:4892: inode #11: block 1: comm syz.1.1361: invalid block [ 413.503664][ T4974] EXT4-fs (loop1): Remounting filesystem read-only [ 413.510592][ T4974] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.1361: couldn't read orphan inode 11 (err -117) [ 413.523640][ T4974] EXT4-fs (loop1): mounted filesystem without journal. Opts: noauto_da_alloc,errors=continue,max_dir_size_kb=0x0000000000000009,data_err=abort,errors=remount-ro,noinit_itable,mblk_io_submit,i_version,acl,. Quota mode: none. [ 413.930130][ T30] audit: type=1400 audit(2000001073.627:1313): avc: denied { setattr } for pid=4966 comm="syz.2.1360" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 414.260298][ T512] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 414.340117][ T61] Bluetooth: hci0: command 0x1001 tx timeout [ 414.347357][ T48] Bluetooth: hci0: sending frame failed (-49) [ 414.509985][ T512] usb 2-1: Using ep0 maxpacket: 32 [ 414.569855][ T4998] device syzkaller0 entered promiscuous mode [ 414.630185][ T512] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 414.641124][ T512] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 414.652010][ T512] usb 2-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 414.661259][ T512] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 414.687438][ T512] usb 2-1: config 0 descriptor?? [ 415.171950][ T512] hkems 0003:2006:0118.0020: unbalanced delimiter at end of report description [ 415.190396][ T512] hkems 0003:2006:0118.0020: parse failed [ 415.196013][ T512] hkems: probe of 0003:2006:0118.0020 failed with error -22 [ 415.392180][ T61] usb 2-1: USB disconnect, device number 25 [ 415.688543][ T5007] bridge0: port 1(bridge_slave_0) entered blocking state [ 415.695753][ T5007] bridge0: port 1(bridge_slave_0) entered disabled state [ 415.708241][ T5007] device bridge_slave_0 entered promiscuous mode [ 415.723239][ T5007] bridge0: port 2(bridge_slave_1) entered blocking state [ 415.730390][ T5007] bridge0: port 2(bridge_slave_1) entered disabled state [ 415.738495][ T5007] device bridge_slave_1 entered promiscuous mode [ 415.831929][ T5012] loop2: detected capacity change from 0 to 512 [ 415.863694][ T5012] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #13: comm syz.2.1373: attempt to clear invalid blocks 2 len 1 [ 415.877298][ T5012] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 415.892506][ T5012] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.1373: invalid indirect mapped block 1819239214 (level 0) [ 415.907407][ T5012] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.1373: invalid indirect mapped block 1819239214 (level 1) [ 415.922880][ T5012] EXT4-fs (loop2): 1 truncate cleaned up [ 415.931116][ T5012] EXT4-fs (loop2): mounted filesystem without journal. Opts: auto_da_alloc=0x0000000000000003,,errors=continue. Quota mode: none. [ 416.072202][ T5012] EXT4-fs (loop2): shut down requested (2) [ 416.118932][ T5007] bridge0: port 2(bridge_slave_1) entered blocking state [ 416.125891][ T5007] bridge0: port 2(bridge_slave_1) entered forwarding state [ 416.133102][ T5007] bridge0: port 1(bridge_slave_0) entered blocking state [ 416.140019][ T5007] bridge0: port 1(bridge_slave_0) entered forwarding state [ 416.150699][ T30] audit: type=1400 audit(2000001076.067:1314): avc: denied { unmount } for pid=4607 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 416.238907][ T512] bridge0: port 1(bridge_slave_0) entered disabled state [ 416.246850][ T512] bridge0: port 2(bridge_slave_1) entered disabled state [ 416.255760][ T512] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 416.264059][ T512] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 416.281888][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 416.290726][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 416.297632][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 417.000838][ T20] Bluetooth: hci0: command 0x1009 tx timeout [ 417.048453][ T5024] loop2: detected capacity change from 0 to 512 [ 417.134729][ T5024] EXT4-fs error (device loop2): ext4_ext_check_inode:501: inode #15: comm syz.2.1376: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 24833, max 4(4), depth 0(0) [ 417.153303][ T5024] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.1376: couldn't read orphan inode 15 (err -117) [ 417.178962][ T5024] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 417.190976][ T5024] ext4 filesystem being mounted at /32/file0 supports timestamps until 2038 (0x7fffffff) [ 417.204775][ T512] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 417.230680][ T512] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 417.235459][ T30] audit: type=1400 audit(2000001077.187:1315): avc: denied { setattr } for pid=5023 comm="syz.2.1376" name=".pending_reads" dev="loop2" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 417.239033][ T512] bridge0: port 2(bridge_slave_1) entered blocking state [ 417.267968][ T512] bridge0: port 2(bridge_slave_1) entered forwarding state [ 417.283046][ T10] device bridge_slave_1 left promiscuous mode [ 417.292815][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 417.301650][ T10] device bridge_slave_0 left promiscuous mode [ 417.307734][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 417.318601][ T10] device veth1_macvtap left promiscuous mode [ 417.326382][ T10] device veth0_vlan left promiscuous mode [ 417.415851][ T5034] loop1: detected capacity change from 0 to 512 [ 417.472963][ T5034] EXT4-fs (loop1): mounted filesystem without journal. Opts: quota,barrier=0x0000000000001000,grpjquota=,norecovery,dioread_lock,,errors=continue. Quota mode: writeback. [ 417.494726][ T5034] ext4 filesystem being mounted at /11/file1 supports timestamps until 2038 (0x7fffffff) [ 417.619838][ T5040] loop2: detected capacity change from 0 to 1024 [ 417.646859][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 417.655066][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 417.667919][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 417.676900][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 417.682754][ T5040] EXT4-fs (loop2): mounted filesystem without journal. Opts: user_xattr,noquota,barrier=0x0000000000000002,jqfmt=vfsv1,block_validity,max_dir_size_kb=0x00000000000007b1,noquota,min_batch_time=0x0000000000000008,delalloc,user_xattr,quota,,errors=continue. Quota mode: writeback. [ 417.727699][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 417.736502][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 417.749210][ T5007] device veth0_vlan entered promiscuous mode [ 417.759112][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 417.767689][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 417.791548][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 417.799593][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 417.807274][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 417.815703][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 417.825482][ T5007] device veth1_macvtap entered promiscuous mode [ 417.843362][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 417.852737][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 417.862023][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 417.882510][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 417.891877][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 419.974164][ T5014] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 420.472241][ T5057] loop0: detected capacity change from 0 to 512 [ 420.538451][ T30] audit: type=1400 audit(2000001080.487:1316): avc: denied { shutdown } for pid=5063 comm="syz.2.1388" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 420.946726][ T5057] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 421.221388][ T5057] ext4 filesystem being mounted at /3/file0 supports timestamps until 2038 (0x7fffffff) [ 421.645343][ T5077] loop2: detected capacity change from 0 to 256 [ 421.720775][ T5077] exfat: Deprecated parameter 'utf8' [ 421.726233][ T5077] exfat: Deprecated parameter 'utf8' [ 421.740461][ T5077] exfat: Deprecated parameter 'utf8' [ 421.796646][ T5077] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xfa3b3837, utbl_chksum : 0xe619d30d) [ 421.820064][ T512] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 421.840203][ T5060] bridge0: port 1(bridge_slave_0) entered blocking state [ 421.857374][ T5060] bridge0: port 1(bridge_slave_0) entered disabled state [ 421.871148][ T5060] device bridge_slave_0 entered promiscuous mode [ 421.884056][ T5060] bridge0: port 2(bridge_slave_1) entered blocking state [ 421.891425][ T5060] bridge0: port 2(bridge_slave_1) entered disabled state [ 421.899430][ T5060] device bridge_slave_1 entered promiscuous mode [ 422.079970][ T512] usb 2-1: Using ep0 maxpacket: 16 [ 422.121460][ T5060] bridge0: port 2(bridge_slave_1) entered blocking state [ 422.128386][ T5060] bridge0: port 2(bridge_slave_1) entered forwarding state [ 422.135668][ T5060] bridge0: port 1(bridge_slave_0) entered blocking state [ 422.142606][ T5060] bridge0: port 1(bridge_slave_0) entered forwarding state [ 422.200403][ T512] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 422.220069][ T512] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 422.229745][ T512] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 422.261213][ T512] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 422.282703][ T1286] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 422.293296][ T1286] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 422.307033][ T1286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 422.315363][ T1286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 422.339767][ T547] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 422.349450][ T547] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 422.391753][ T5060] device veth0_vlan entered promiscuous mode [ 422.415796][ T5060] device veth1_macvtap entered promiscuous mode [ 422.434277][ T1286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 422.444301][ T1286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 422.453622][ T1286] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 423.329942][ T512] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 423.338886][ T512] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 423.371039][ T1286] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 423.520757][ T1286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 423.530181][ T512] usb 2-1: Product: syz [ 423.534263][ T512] usb 2-1: Manufacturer: syz [ 423.538648][ T512] usb 2-1: SerialNumber: syz [ 423.579643][ T547] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 423.595067][ T547] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 423.670516][ T30] audit: type=1400 audit(2000001083.627:1317): avc: denied { mount } for pid=5095 comm="syz.0.1397" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 423.722170][ T5097] loop3: detected capacity change from 0 to 512 [ 423.791851][ T30] audit: type=1404 audit(2000001083.747:1318): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 423.860926][ T30] audit: type=1400 audit(2000001083.747:1319): avc: denied { remount } for pid=5096 comm="syz.3.1383" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 423.919762][ T5108] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2050 sclass=netlink_route_socket pid=5108 comm=syz.0.1398 [ 423.945965][ T5108] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1398'. [ 424.547020][ T30] audit: type=1404 audit(2000001083.767:1320): enforcing=0 old_enforcing=1 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 424.761864][ T30] audit: type=1400 audit(2000001083.837:1321): avc: denied { map_create } for pid=5100 comm="syz.0.1398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 424.807315][ T30] audit: type=1400 audit(2000001083.857:1322): avc: denied { prog_load } for pid=5100 comm="syz.0.1398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 424.870160][ T5112] loop0: detected capacity change from 0 to 512 [ 424.871137][ T512] usb 2-1: USB disconnect, device number 26 [ 424.890982][ T5114] loop2: detected capacity change from 0 to 512 [ 424.897389][ T30] audit: type=1400 audit(2000001083.977:1323): avc: denied { execmem } for pid=5096 comm="syz.3.1383" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 424.916747][ T30] audit: type=1400 audit(2000001084.127:1324): avc: denied { create } for pid=5100 comm="syz.0.1398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 424.937312][ T30] audit: type=1400 audit(2000001084.317:1325): avc: denied { create } for pid=5100 comm="syz.0.1398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 424.961968][ T5114] EXT4-fs (loop2): 1 truncate cleaned up [ 424.968557][ T5114] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,. Quota mode: none. [ 425.007039][ T5112] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 425.023325][ T5112] ext4 filesystem being mounted at /8/file0 supports timestamps until 2038 (0x7fffffff) [ 425.285326][ T2922] udevd[2922]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 425.570566][ T30] kauditd_printk_skb: 21 callbacks suppressed [ 425.570674][ T30] audit: type=1400 audit(2000001085.317:1347): avc: denied { bpf } for pid=5113 comm="syz.2.1401" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 426.247885][ T30] audit: type=1400 audit(2000001085.317:1348): avc: denied { map_read map_write } for pid=5113 comm="syz.2.1401" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 426.268313][ T30] audit: type=1400 audit(2000001085.367:1349): avc: denied { perfmon } for pid=5113 comm="syz.2.1401" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 426.289639][ T30] audit: type=1400 audit(2000001085.377:1350): avc: denied { prog_run } for pid=5113 comm="syz.2.1401" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 426.308701][ T30] audit: type=1400 audit(2000001085.447:1351): avc: denied { create } for pid=5113 comm="syz.2.1401" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 426.342083][ T30] audit: type=1400 audit(2000001085.477:1352): avc: denied { write } for pid=5113 comm="syz.2.1401" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 426.439332][ T30] audit: type=1400 audit(2000001086.147:1353): avc: denied { unmount } for pid=5060 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 426.459421][ T30] audit: type=1400 audit(2000001086.197:1354): avc: denied { unmount } for pid=4607 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 426.479470][ T30] audit: type=1400 audit(2000001086.377:1355): avc: denied { create } for pid=5126 comm="syz.3.1403" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 427.437659][ T30] audit: type=1400 audit(2000001087.387:1356): avc: denied { read write } for pid=5131 comm="syz.2.1404" name="raw-gadget" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 428.020129][ T547] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 428.086906][ T5120] EXT4-fs error (device loop0): ext4_do_update_inode:5191: inode #2: comm syz.0.1400: corrupted inode contents [ 428.393456][ T5120] EXT4-fs error (device loop0): ext4_dirty_inode:6024: inode #2: comm syz.0.1400: mark_inode_dirty error [ 428.412564][ T5138] loop1: detected capacity change from 0 to 512 [ 428.440909][ T5120] EXT4-fs error (device loop0): ext4_do_update_inode:5191: inode #2: comm syz.0.1400: corrupted inode contents [ 428.472100][ T5138] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 428.478313][ T5120] EXT4-fs error (device loop0): __ext4_ext_dirty:183: inode #2: comm syz.0.1400: mark_inode_dirty error [ 428.540046][ T547] usb 3-1: Using ep0 maxpacket: 32 [ 428.541046][ T5138] EXT4-fs (loop1): failed to initialize system zone (-117) [ 428.552333][ T5138] EXT4-fs (loop1): mount failed [ 428.660705][ T547] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 428.679972][ T547] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 428.710108][ T547] usb 3-1: New USB device found, idVendor=0461, idProduct=4e72, bcdDevice= 0.00 [ 428.719039][ T547] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 428.781563][ T547] usb 3-1: config 0 descriptor?? [ 428.800211][ T5132] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 429.442605][ T547] hid-rmi 0003:0461:4E72.0021: unknown main item tag 0x0 [ 429.449544][ T547] hid-rmi 0003:0461:4E72.0021: unknown main item tag 0x0 [ 429.470023][ T547] hid-rmi 0003:0461:4E72.0021: unknown main item tag 0x0 [ 429.477542][ T547] hid-rmi 0003:0461:4E72.0021: unknown main item tag 0x0 [ 429.498072][ T547] hid-rmi 0003:0461:4E72.0021: unknown main item tag 0x0 [ 429.515128][ T547] hid-rmi 0003:0461:4E72.0021: hidraw0: USB HID v0.00 Device [HID 0461:4e72] on usb-dummy_hcd.2-1/input0 [ 429.877391][ T547] usb 3-1: USB disconnect, device number 26 [ 430.430072][ T6] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 430.504171][ T5158] loop0: detected capacity change from 0 to 256 [ 430.536972][ T5158] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x1c9fa50a, utbl_chksum : 0xe619d30d) [ 430.549557][ T5158] exFAT-fs (loop0): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 430.600587][ T30] kauditd_printk_skb: 29 callbacks suppressed [ 430.600622][ T30] audit: type=1400 audit(2000001090.557:1386): avc: denied { unmount } for pid=5007 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 430.840248][ T6] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 430.850930][ T6] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 430.860459][ T6] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 430.870102][ T6] usb 2-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 430.878909][ T6] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.888772][ T6] usb 2-1: config 0 descriptor?? [ 430.932388][ T6] usb 2-1: MIDIStreaming interface descriptor not found [ 431.149306][ T6] usb 2-1: USB disconnect, device number 27 [ 431.158871][ T30] audit: type=1400 audit(2000001091.107:1387): avc: denied { create } for pid=5163 comm="syz.3.1413" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 431.180978][ T5166] loop0: detected capacity change from 0 to 1024 [ 431.220116][ T30] audit: type=1400 audit(2000001091.137:1388): avc: denied { setopt } for pid=5163 comm="syz.3.1413" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 431.241797][ T5166] EXT4-fs (loop0): Test dummy encryption mode enabled [ 431.248684][ T5166] EXT4-fs (loop0): Ignoring removed orlov option [ 431.255855][ T30] audit: type=1400 audit(2000001091.137:1389): avc: denied { write } for pid=5163 comm="syz.3.1413" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 431.309525][ T5166] EXT4-fs (loop0): Journaled quota options ignored when QUOTA feature is enabled [ 431.381868][ T5166] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000084,stripe=0x0000000000000009,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,grpjquota=./bus,data_err=abort,,errors=continue. Quota mode: writeback. [ 431.471551][ T30] audit: type=1400 audit(2000001091.427:1390): avc: denied { read write open } for pid=5161 comm="syz.0.1411" path="/11/bus/bus" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 431.845912][ T5173] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1412'. [ 433.618830][ T30] audit: type=1400 audit(2000001091.577:1391): avc: denied { name_bind } for pid=5162 comm="syz.2.1412" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 433.645103][ T30] audit: type=1400 audit(2000001091.577:1392): avc: denied { node_bind } for pid=5162 comm="syz.2.1412" saddr=224.0.0.1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 433.704127][ T30] audit: type=1400 audit(2000001091.797:1393): avc: denied { write } for pid=5162 comm="syz.2.1412" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 434.014628][ T30] audit: type=1400 audit(2000001093.967:1394): avc: denied { ioctl } for pid=5179 comm="syz.1.1416" path="socket:[39342]" dev="sockfs" ino=39342 ioctlcmd=0x8955 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 434.099626][ T30] audit: type=1400 audit(2000001094.047:1395): avc: denied { read write } for pid=5183 comm="syz.0.1417" name="fuse" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 434.904620][ T5193] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 434.939857][ T5192] usb usb8: usbfs: process 5192 (syz.2.1421) did not claim interface 0 before use [ 435.259999][ T317] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 435.530002][ T317] usb 4-1: device descriptor read/64, error -71 [ 435.920068][ T317] usb 4-1: device descriptor read/64, error -71 [ 436.031884][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 436.031929][ T30] audit: type=1400 audit(2000001095.987:1404): avc: denied { write } for pid=5207 comm="syz.1.1425" path="socket:[39382]" dev="sockfs" ino=39382 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 436.210055][ T317] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 436.290065][ T547] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 436.480065][ T317] usb 4-1: device descriptor read/64, error -71 [ 436.650174][ T547] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 436.661024][ T547] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 436.670039][ T547] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 436.679217][ T547] usb 3-1: config 0 descriptor?? [ 436.880047][ T317] usb 4-1: device descriptor read/64, error -71 [ 437.000162][ T317] usb usb4-port1: attempt power cycle [ 437.162616][ T547] keytouch 0003:0926:3333.0022: fixing up Keytouch IEC report descriptor [ 437.200097][ T547] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0022/input/input22 [ 437.211672][ T30] audit: type=1400 audit(2000001097.167:1405): avc: denied { read } for pid=5217 comm="syz.1.1430" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 437.285599][ T30] audit: type=1400 audit(2000001097.237:1406): avc: denied { read } for pid=86 comm="acpid" name="event3" dev="devtmpfs" ino=1073 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 437.300580][ T547] keytouch 0003:0926:3333.0022: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 437.347749][ T30] audit: type=1400 audit(2000001097.237:1407): avc: denied { open } for pid=86 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=1073 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 437.408959][ T61] usb 3-1: USB disconnect, device number 27 [ 437.415014][ T317] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 437.443953][ T30] audit: type=1400 audit(2000001097.237:1408): avc: denied { ioctl } for pid=86 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=1073 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 437.600095][ T317] usb 4-1: device descriptor read/8, error -71 [ 437.664551][ T5219] loop0: detected capacity change from 0 to 40427 [ 437.753239][ T5219] F2FS-fs (loop0): invalid crc value [ 437.762675][ T5219] F2FS-fs (loop0): Found nat_bits in checkpoint [ 437.846709][ T5219] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 437.880133][ T317] usb 4-1: device descriptor read/8, error -71 [ 438.301420][ T30] audit: type=1400 audit(2000001098.097:1409): avc: denied { mounton } for pid=5216 comm="syz.0.1429" path="/17/bus/file0" dev="loop0" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 438.348002][ T30] audit: type=1400 audit(2000001098.137:1410): avc: denied { read } for pid=5216 comm="syz.0.1429" dev="nsfs" ino=4026532299 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 438.375026][ T30] audit: type=1400 audit(2000001098.137:1411): avc: denied { open } for pid=5216 comm="syz.0.1429" path="net:[4026532299]" dev="nsfs" ino=4026532299 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 438.401756][ T30] audit: type=1400 audit(2000001098.137:1412): avc: denied { create } for pid=5216 comm="syz.0.1429" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 438.819197][ T317] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 438.849611][ T30] audit: type=1400 audit(2000001098.217:1413): avc: denied { setopt } for pid=5216 comm="syz.0.1429" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 438.956155][ T5007] attempt to access beyond end of device [ 438.956155][ T5007] loop0: rw=2049, want=45112, limit=40427 [ 439.070146][ T317] usb 4-1: device descriptor read/8, error -71 [ 439.324289][ T5240] loop0: detected capacity change from 0 to 512 [ 439.347155][ T317] usb 4-1: device descriptor read/8, error -71 [ 439.357909][ T5240] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 439.370899][ T5240] ext4 filesystem being mounted at /18/file0 supports timestamps until 2038 (0x7fffffff) [ 439.398446][ T5238] loop1: detected capacity change from 0 to 40427 [ 439.451521][ T5238] F2FS-fs (loop1): invalid crc value [ 439.463994][ T5238] F2FS-fs (loop1): Found nat_bits in checkpoint [ 439.470441][ T317] usb usb4-port1: unable to enumerate USB device [ 439.553073][ T5238] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 440.646163][ T5254] loop2: detected capacity change from 0 to 512 [ 440.663160][ T4854] attempt to access beyond end of device [ 440.663160][ T4854] loop1: rw=524288, want=45072, limit=40427 [ 440.675908][ T4854] attempt to access beyond end of device [ 440.675908][ T4854] loop1: rw=0, want=45072, limit=40427 [ 440.690612][ T5256] tipc: Started in network mode [ 440.695439][ T5256] tipc: Node identity ac1414aa, cluster identity 4711 [ 440.701496][ T5254] EXT4-fs (loop2): Mount option "nouser_xattr" will be removed by 3.5 [ 440.701496][ T5254] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 440.701496][ T5254] [ 440.720717][ T5256] tipc: New replicast peer: 100.1.1.1 [ 440.731455][ T5256] tipc: Enabled bearer , priority 10 [ 440.772956][ T5254] EXT4-fs error (device loop2): ext4_do_update_inode:5191: inode #3: comm syz.2.1437: corrupted inode contents [ 440.789538][ T4854] attempt to access beyond end of device [ 440.789538][ T4854] loop1: rw=2049, want=45104, limit=40427 [ 440.811645][ T5254] EXT4-fs (loop2): Remounting filesystem read-only [ 440.823891][ T5254] EXT4-fs error (device loop2): ext4_dirty_inode:6024: inode #3: comm syz.2.1437: mark_inode_dirty error [ 440.836398][ T5254] EXT4-fs error (device loop2): ext4_do_update_inode:5191: inode #3: comm syz.2.1437: corrupted inode contents [ 440.848628][ T5254] EXT4-fs error (device loop2): __ext4_ext_dirty:183: inode #3: comm syz.2.1437: mark_inode_dirty error [ 440.861771][ T5254] EXT4-fs (loop2): 1 truncate cleaned up [ 440.867354][ T5254] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,nouser_xattr,. Quota mode: writeback. [ 440.880426][ T5254] ext4 filesystem being mounted at /50/file1 supports timestamps until 2038 (0x7fffffff) [ 441.215116][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 441.215149][ T30] audit: type=1400 audit(2000001101.167:1436): avc: denied { write } for pid=5262 comm="syz.0.1439" laddr=172.20.20.10 lport=250 faddr=172.20.20.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 441.335693][ T30] audit: type=1400 audit(2000001101.217:1437): avc: denied { getopt } for pid=5262 comm="syz.0.1439" laddr=172.20.20.10 lport=250 faddr=172.20.20.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 441.445317][ T30] audit: type=1400 audit(2000001101.377:1438): avc: denied { mounton } for pid=5267 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 442.470041][ T1286] tipc: Node number set to 2886997162 [ 442.504272][ T30] audit: type=1400 audit(2000001101.377:1439): avc: denied { mounton } for pid=5267 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 442.681598][ T5267] bridge0: port 1(bridge_slave_0) entered blocking state [ 442.688486][ T5267] bridge0: port 1(bridge_slave_0) entered disabled state [ 442.696439][ T5267] device bridge_slave_0 entered promiscuous mode [ 442.704111][ T5267] bridge0: port 2(bridge_slave_1) entered blocking state [ 442.711582][ T5267] bridge0: port 2(bridge_slave_1) entered disabled state [ 442.719571][ T5267] device bridge_slave_1 entered promiscuous mode [ 442.829289][ T45] device bridge_slave_1 left promiscuous mode [ 442.835572][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 442.843729][ T45] device bridge_slave_0 left promiscuous mode [ 442.849767][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 442.859050][ T45] device veth1_macvtap left promiscuous mode [ 442.864985][ T45] device veth0_vlan left promiscuous mode [ 443.095145][ T5267] bridge0: port 2(bridge_slave_1) entered blocking state [ 443.102077][ T5267] bridge0: port 2(bridge_slave_1) entered forwarding state [ 443.109240][ T5267] bridge0: port 1(bridge_slave_0) entered blocking state [ 443.116183][ T5267] bridge0: port 1(bridge_slave_0) entered forwarding state [ 443.161908][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 443.170385][ T317] bridge0: port 1(bridge_slave_0) entered disabled state [ 443.177852][ T317] bridge0: port 2(bridge_slave_1) entered disabled state [ 443.192755][ T547] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 443.201128][ T547] bridge0: port 1(bridge_slave_0) entered blocking state [ 443.208019][ T547] bridge0: port 1(bridge_slave_0) entered forwarding state [ 443.221664][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 443.229902][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 443.236845][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 443.262789][ T547] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 443.270988][ T547] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 443.291227][ T547] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 443.314656][ T5267] device veth0_vlan entered promiscuous mode [ 443.332473][ T1286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 443.351244][ T1286] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 443.358963][ T1286] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 443.374438][ T5267] device veth1_macvtap entered promiscuous mode [ 443.383262][ T512] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 443.402777][ T547] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 443.411597][ T547] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 443.435951][ T30] audit: type=1400 audit(2000001103.387:1440): avc: denied { mounton } for pid=5267 comm="syz-executor" path="/root/syzkaller.MmKI6c/syz-tmp" dev="sda1" ino=2012 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 443.460920][ T30] audit: type=1400 audit(2000001103.387:1441): avc: denied { mount } for pid=5267 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 443.484074][ T30] audit: type=1400 audit(2000001103.387:1442): avc: denied { mount } for pid=5267 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 443.506318][ T30] audit: type=1400 audit(2000001103.417:1443): avc: denied { mounton } for pid=5267 comm="syz-executor" path="/dev/binderfs" dev="devtmpfs" ino=362 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 444.077366][ T5276] loop0: detected capacity change from 0 to 512 [ 444.126479][ T5276] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 444.133812][ T5276] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 444.154515][ T5276] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 56 vs 41 free clusters [ 444.169130][ T5276] EXT4-fs (loop0): Remounting filesystem read-only [ 444.175633][ T5276] Quota error (device loop0): write_blk: dquota write failed [ 444.183328][ T5276] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 444.193130][ T5276] EXT4-fs (loop0): 1 orphan inode deleted [ 444.198727][ T5276] EXT4-fs (loop0): mounted filesystem without journal. Opts: nobarrier,noblock_validity,mblk_io_submit,barrier=0x0000000000000003,errors=remount-ro,init_itable,noauto_da_alloc,resgid=0x000000000000ee01,resgid=0x000000000000ee002. Quota mode: writeback. [ 444.240614][ T5276] EXT4-fs error (device loop0): ext4_remount:5845: comm syz.0.1442: Abort forced by user [ 444.250867][ T5276] EXT4-fs (loop0): Remounting filesystem read-only [ 445.682756][ T5292] loop2: detected capacity change from 0 to 128 [ 445.783861][ T5292] EXT4-fs (loop2): mounted filesystem without journal. Opts: journal_dev=0x0000000000000000,nouid32,,errors=continue. Quota mode: none. [ 445.884839][ T5292] ext4 filesystem being mounted at /53/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 446.061917][ T5305] loop0: detected capacity change from 0 to 256 [ 446.085305][ T5305] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 446.098387][ T5300] bridge0: port 1(bridge_slave_0) entered blocking state [ 446.106822][ T5300] bridge0: port 1(bridge_slave_0) entered disabled state [ 446.115714][ T5300] device bridge_slave_0 entered promiscuous mode [ 446.133909][ T5300] bridge0: port 2(bridge_slave_1) entered blocking state [ 446.140877][ T5300] bridge0: port 2(bridge_slave_1) entered disabled state [ 446.148865][ T5300] device bridge_slave_1 entered promiscuous mode [ 446.301809][ T5300] bridge0: port 2(bridge_slave_1) entered blocking state [ 446.308699][ T5300] bridge0: port 2(bridge_slave_1) entered forwarding state [ 446.315982][ T5300] bridge0: port 1(bridge_slave_0) entered blocking state [ 446.322912][ T5300] bridge0: port 1(bridge_slave_0) entered forwarding state [ 446.373777][ T512] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 446.382479][ T512] bridge0: port 1(bridge_slave_0) entered disabled state [ 446.389818][ T512] bridge0: port 2(bridge_slave_1) entered disabled state [ 446.423832][ T512] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 446.432143][ T512] bridge0: port 1(bridge_slave_0) entered blocking state [ 446.439015][ T512] bridge0: port 1(bridge_slave_0) entered forwarding state [ 446.446570][ T512] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 446.455313][ T512] bridge0: port 2(bridge_slave_1) entered blocking state [ 446.462299][ T512] bridge0: port 2(bridge_slave_1) entered forwarding state [ 446.469597][ T512] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 446.492135][ T46] device bridge_slave_1 left promiscuous mode [ 446.498206][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 446.506814][ T46] device bridge_slave_0 left promiscuous mode [ 446.514897][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 446.524135][ T46] device veth1_macvtap left promiscuous mode [ 446.530068][ T46] device veth0_vlan left promiscuous mode [ 446.745578][ T512] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 446.760587][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 446.777602][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 446.786600][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 446.795077][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 446.804695][ T5300] device veth0_vlan entered promiscuous mode [ 446.823642][ T512] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 446.834501][ T5300] device veth1_macvtap entered promiscuous mode [ 446.849079][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 446.863234][ T512] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 447.675115][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 447.675148][ T30] audit: type=1400 audit(2000001107.627:1448): avc: denied { bind } for pid=5311 comm="syz.1.1453" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 447.716338][ T30] audit: type=1400 audit(2000001107.667:1449): avc: denied { name_bind } for pid=5309 comm="syz.2.1454" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 447.742978][ T30] audit: type=1400 audit(2000001107.667:1450): avc: denied { read } for pid=5309 comm="syz.2.1454" name="event2" dev="devtmpfs" ino=176 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 447.789992][ T30] audit: type=1400 audit(2000001107.667:1451): avc: denied { open } for pid=5309 comm="syz.2.1454" path="/dev/input/event2" dev="devtmpfs" ino=176 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 447.826040][ T30] audit: type=1400 audit(2000001107.697:1452): avc: denied { ioctl } for pid=5309 comm="syz.2.1454" path="/dev/input/event2" dev="devtmpfs" ino=176 ioctlcmd=0x4504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 447.944531][ T318] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 448.050039][ T1286] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 448.290094][ T1286] usb 2-1: Using ep0 maxpacket: 8 [ 448.320115][ T318] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 448.331149][ T318] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 448.341904][ T318] usb 4-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 448.350926][ T318] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 448.360122][ T318] usb 4-1: config 0 descriptor?? [ 448.410116][ T1286] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 448.418755][ T1286] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 448.428102][ T1286] usb 2-1: config 1 has no interface number 1 [ 448.590325][ T1286] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 448.599250][ T1286] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 448.608653][ T1286] usb 2-1: Product: syz [ 448.612763][ T1286] usb 2-1: Manufacturer: syz [ 448.617303][ T1286] usb 2-1: SerialNumber: syz [ 448.844421][ T318] gt683r_led 0003:1770:FF00.0023: hidraw0: USB HID v0.00 Device [HID 1770:ff00] on usb-dummy_hcd.3-1/input0 [ 448.864345][ T30] audit: type=1400 audit(2000001108.817:1453): avc: denied { setopt } for pid=5311 comm="syz.1.1453" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 448.884222][ T30] audit: type=1400 audit(2000001108.817:1454): avc: denied { bind } for pid=5311 comm="syz.1.1453" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 448.970215][ T1286] usb 2-1: 2:1 : no or invalid class specific endpoint descriptor [ 448.977953][ T1286] usb 2-1: 2:1 : format type 0 is detected, processed as PCM [ 448.985830][ T1286] usb 2-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 448.991777][ T1286] usb 2-1: 2:1 : invalid channels 0 [ 449.014376][ T1286] usb 2-1: USB disconnect, device number 28 [ 449.047102][ T6] usb 4-1: USB disconnect, device number 23 [ 449.055063][ T61] gt683r_led 0003:1770:FF00.0023: failed to send set report request: -19 [ 449.064401][ T61] gt683r_led 0003:1770:FF00.0023: failed to send set report request: -19 [ 449.708076][ T5330] loop3: detected capacity change from 0 to 512 [ 449.716412][ T30] audit: type=1400 audit(2000001109.667:1455): avc: denied { mounton } for pid=5328 comm="syz.3.1458" path="/1/bus" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 449.756581][ T5330] EXT4-fs (loop3): Ignoring removed nobh option [ 449.779672][ T5330] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 449.826054][ T5330] EXT4-fs (loop3): 1 truncate cleaned up [ 449.831859][ T5330] EXT4-fs (loop3): mounted filesystem without journal. Opts: i_version,nobh,data_err=ignore,nolazytime,init_itable=0x0000000000000004,acl,,errors=continue. Quota mode: none. [ 449.886648][ T30] audit: type=1400 audit(2000001109.837:1456): avc: denied { map } for pid=5328 comm="syz.3.1458" path="/1/bus" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 449.916457][ T30] audit: type=1400 audit(2000001109.837:1457): avc: denied { execute } for pid=5328 comm="syz.3.1458" path="/1/bus" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 450.179153][ T5326] loop2: detected capacity change from 0 to 40427 [ 450.261838][ T5326] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 450.269597][ T5326] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 450.280201][ T5326] F2FS-fs (loop2): invalid crc value [ 450.287947][ T5326] F2FS-fs (loop2): Found nat_bits in checkpoint [ 450.367037][ T5326] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 450.374052][ T5326] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 451.442961][ T45] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 451.453017][ T45] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 453.693812][ T5356] xt_hashlimit: overflow, rate too high: 0 [ 453.700585][ T5356] netlink: 'syz.1.1461': attribute type 27 has an invalid length. [ 454.370252][ T5356] bridge0: port 2(bridge_slave_1) entered disabled state [ 454.377560][ T5356] bridge0: port 1(bridge_slave_0) entered disabled state [ 454.441451][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 454.441486][ T30] audit: type=1400 audit(2000001113.667:1459): avc: denied { write } for pid=5352 comm="syz.2.1462" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 454.472022][ T30] audit: type=1400 audit(2000001113.667:1460): avc: denied { nlmsg_write } for pid=5352 comm="syz.2.1462" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 454.640845][ T5351] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 454.686807][ T5366] loop2: detected capacity change from 0 to 512 [ 454.719240][ T30] audit: type=1400 audit(2000001114.667:1461): avc: denied { write } for pid=5367 comm="syz.1.1467" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 454.824674][ T5366] EXT4-fs error (device loop2): ext4_orphan_get:1397: inode #15: comm syz.2.1466: casefold flag without casefold feature [ 454.837756][ T5366] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: inode #12: comm syz.2.1466: missing EA_INODE flag [ 454.850085][ T5366] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.1466: error while reading EA inode 12 err=-117 [ 454.863335][ T5366] EXT4-fs (loop2): 1 orphan inode deleted [ 454.868911][ T5366] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 454.887946][ T30] audit: type=1400 audit(2000001114.837:1462): avc: denied { map } for pid=5365 comm="syz.2.1466" path="/58/file0/bus" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 454.910397][ T30] audit: type=1400 audit(2000001114.847:1463): avc: denied { execute } for pid=5365 comm="syz.2.1466" path="/58/file0/bus" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 456.717331][ T30] audit: type=1400 audit(2000001116.667:1464): avc: denied { bind } for pid=5376 comm="syz.2.1470" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 456.764365][ T30] audit: type=1400 audit(2000001116.687:1465): avc: denied { listen } for pid=5376 comm="syz.2.1470" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 456.830135][ T30] audit: type=1400 audit(2000001116.777:1466): avc: denied { wake_alarm } for pid=5386 comm="syz.2.1473" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 456.858649][ T5377] device syzkaller0 entered promiscuous mode [ 459.134760][ T5404] loop0: detected capacity change from 0 to 1024 SYZFAIL: netlink_send_ext: short netlink write wrote=-1, want=108 (errno 13: Permission denied) loop exited with status 67 remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) SYZFAIL: repeatedly failed to execute the program proc=4 req=1394 state=1 status=1 (errno 11: Resource temporarily unavailable) [ 459.324171][ T30] audit: type=1400 audit(2000001119.187:1467): avc: denied { write } for pid=282 comm="syz-executor" path="pipe:[13733]" dev="pipefs" ino=13733 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 459.368168][ T5404] EXT4-fs (loop0): Ignoring removed nobh option [ 459.410294][ T5404] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 460.129506][ T5408] loop3: detected capacity change from 0 to 8192 [ 460.341945][ T5404] EXT4-fs: failed to create workqueue [ 460.347186][ T5404] EXT4-fs (loop0): mount failed [ 460.412873][ T30] audit: type=1400 audit(2000001120.137:1468): avc: denied { mount } for pid=5405 comm="syz.3.1480" name="/" dev="loop3" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 461.334425][ T2227] device bridge_slave_1 left promiscuous mode [ 461.340549][ T2227] bridge0: port 2(bridge_slave_1) entered disabled state [ 461.348654][ T2227] device bridge_slave_0 left promiscuous mode [ 461.354912][ T2227] bridge0: port 1(bridge_slave_0) entered disabled state [ 461.364201][ T2227] device veth1_macvtap left promiscuous mode [ 461.370541][ T2227] device veth0_vlan left promiscuous mode [ 462.024949][ T2227] tipc: Disabling bearer [ 462.030287][ T2227] tipc: Left network mode [ 462.742013][ T2227] device bridge_slave_1 left promiscuous mode [ 462.748050][ T2227] bridge0: port 2(bridge_slave_1) entered disabled state [ 462.756351][ T2227] device bridge_slave_0 left promiscuous mode [ 462.762811][ T2227] bridge0: port 1(bridge_slave_0) entered disabled state [ 462.772228][ T2227] device bridge_slave_1 left promiscuous mode [ 462.778227][ T2227] bridge0: port 2(bridge_slave_1) entered disabled state [ 462.786052][ T2227] device bridge_slave_0 left promiscuous mode [ 462.792095][ T2227] bridge0: port 1(bridge_slave_0) entered disabled state [ 462.801456][ T2227] device bridge_slave_1 left promiscuous mode [ 462.807468][ T2227] bridge0: port 2(bridge_slave_1) entered disabled state [ 462.815627][ T2227] device bridge_slave_0 left promiscuous mode [ 462.821849][ T2227] bridge0: port 1(bridge_slave_0) entered disabled state [ 462.831949][ T2227] device veth1_macvtap left promiscuous mode [ 462.837836][ T2227] device veth0_vlan left promiscuous mode [ 462.843971][ T2227] device veth1_macvtap left promiscuous mode [ 462.849857][ T2227] device veth0_vlan left promiscuous mode