last executing test programs: 8.740159561s ago: executing program 4 (id=6207): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x4e, &(0x7f0000000040)=0x5) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000020000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) mount$overlay(0x0, &(0x7f0000001340)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r5 = dup(0xffffffffffffffff) write$FUSE_BMAP(r5, 0x0, 0x0) write$FUSE_DIRENTPLUS(r5, 0x0, 0x0) getresuid(&(0x7f00000002c0), &(0x7f0000000480), &(0x7f00000004c0)=0x0) ioprio_get$uid(0x0, r6) 7.650049476s ago: executing program 4 (id=6212): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x100000, &(0x7f0000001800)={[{@dax_inode}, {@barrier_val={'barrier', 0x3d, 0xc8}}, {@oldalloc}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") bpf$MAP_CREATE(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x19) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x10, "df3f0400000000000000000000000609000040"}) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x1a) creat(&(0x7f0000000040)='./bus\x00', 0x0) 7.03160826s ago: executing program 2 (id=6216): syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x1810714, &(0x7f00000007c0), 0x1, 0x472, &(0x7f0000000c00)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x1, 0x7fe4, 0x1, 0x100, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000180018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='ext4_request_inode\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000e80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='ext4_request_inode\x00', r2}, 0x10) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) 6.92079274s ago: executing program 2 (id=6218): write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000004c0), &(0x7f0000000e80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000003c0)={[{@utf8}, {@utf8}, {@uni_xlate}, {@fat=@codepage={'codepage', 0x3d, '855'}}, {@shortname_winnt}, {@uni_xlateno}, {@shortname_win95}, {@shortname_win95}, {@uni_xlate}, {@numtail}, {@iocharset={'iocharset', 0x3d, 'cp861'}}, {@shortname_winnt}, {@uni_xlate}, {@uni_xlateno}, {@iocharset={'iocharset', 0x3d, 'maciceland'}}, {@shortname_winnt}]}, 0x1, 0x2b7, &(0x7f0000000a40)="$eJzs3c9qY1UcB/DfTdPkqmCycCWKF3ThapjOE6RIBwazUrJQFypOB2QShA4U/INxQBBcuXHpA4ggzM6XcOMb+ACCO7soHLnJvU1ak9QLTeufz2fT03PO957fzblp6SKn770weXi/iAePP/s18jyL1iAGcZJFP1pR+yLOGXwTAMC/2UnK4/c01ySXRUS+vbIAgC06SanZ7/8nWy8JANiyN996+/X94fDgjaLI4+7kq+NR+Zd9+XU+vv8gPoxxHMbt6MVpRDozb99NKU3bRakfr0ymx6MyOXn35+r6+79FzPJ70Yv+rOt8/t7wYK+YW8pPyzqertYflPk70YvnVqx/b3hwZ0U+Rp149eWl+m9FL375ID6KcdyfFbHIf75XFK+lb//49J2yvDKfTY9H3dm8hbRzzVsDAAAAAAAAAAAAAAAAAAAAAMB/2K3q7JxuzM7vKbuq83d2TstvdqOo9c+fzzPPZ/WFLpwPNE3xXX2+zu2iKFI1cZFvx/PtaN/MXQMAAAAAAAAAAAAAAAAAAMA/y6OPP3n4/nh8eHQljfo0gPpj/c2v82SWGiz1vBSbU93FWq2quWGJ2PmympNFbKynvIkrelkuazy1ruYffmx6wfzyObvlWvm6OeUWNly03u6lnqh7stWvYfdscl4/JD/VPSml1Im/uXpn3VBq9Ph1Vg71Gm9l55lZY7phTmTrCvv6xcX7shrKLt5FJyKr3mUX47tVI9btYN7oef7rz4rMaR0AAAAAAAAAAAAAAAAAALBViw/9rhh8vDHaSt2tlQUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA12rx//8bNKZV+PDo+2cvmdyJo0c3fIsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD8D/wZAAD//1lbV6k=") syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00', 0x0}) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wake_lock', 0x202, 0x0) write$binfmt_misc(r4, &(0x7f0000000100)=ANY=[@ANYBLOB="5ce1fcaa059691"], 0x4c) 6.92027405s ago: executing program 4 (id=6219): openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/cpuinfo\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00'}, 0x10) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) syz_open_procfs(r5, &(0x7f0000000040)='net/if_inet6\x00') 4.911522864s ago: executing program 4 (id=6221): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x247, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0xa0}}}}]}}]}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="0000d2"], 0x0, 0x0, 0x0, 0x0}, 0x0) 4.905123475s ago: executing program 2 (id=6222): pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000480)=ANY=[@ANYBLOB="9802"], 0x298) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000580)=ANY=[@ANYBLOB="b0"], 0xb0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r3, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getdents(r5, 0x0, 0x0) 4.73239064s ago: executing program 3 (id=6225): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lirc_mode2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4000000}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r3) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f00000001c0)=0x20000, 0x4) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) bind$xdp(r4, &(0x7f00000002c0)={0x2c, 0xa, r6}, 0x10) r7 = socket(0x18, 0x0, 0x2) sched_setaffinity(0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x80, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) 4.721074991s ago: executing program 1 (id=6226): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) 4.364645212s ago: executing program 1 (id=6227): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x2000480, &(0x7f0000000100), 0x5, 0x75b, &(0x7f0000000800)="$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") r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYRESOCT=r0], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="100000000400000004fd00000200000000000000", @ANYRES32=0x1, @ANYBLOB="9b00"/19, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000ffffffff00"/27], 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$packet(0x11, 0x1, 0x300) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000000)={0x4001}, 0x10) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000005e000102"], 0x1c}}, 0x0) openat(0xffffffffffffffff, &(0x7f0000000100)='./file2\x00', 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000400)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r7, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x14, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x7d}}, {{0x6, 0x0, 0x6, 0x9, 0x0, 0x6, 0xe7030000}, {0x4, 0x0, 0x0, 0x6}}, [@printk={@llu, {0x5, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x14}}], {{0x4, 0x1, 0x5, 0x3}, {0x5, 0x0, 0xb, 0x3, 0x0, 0x2}}}, &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 4.357262572s ago: executing program 2 (id=6228): socket(0x1, 0x803, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="170000000000000004000000ff0000000000", @ANYRES32=0x1, @ANYBLOB="00000000000000000000000000000000000000008f01d9806f7fa933adac4feb1b3131e3d967251ac26d6e2b31b81d811cd1bfc6738753ece65fd6bc6fbf6940b24aeb6f431ab9ec5ad2856d423bd489ed5447dfa4da70c142c9bac34ec351c13f138f0a855c54fcbd8488c24af0b3db9a46848cf50ef482adc5f8f328ca1716eec02259da05721643e7f769ffb1903dd136cdeb718fad8d3f54a2c2e8dd3e6a1fbc438845afcb230bf862dd151c3941fe000000003d9c0433430b376badc96e19df0737d139774a6a48ba8a5ea67f936af51051f6c1f81fe11f97e0da0dbd31375371959c3d825fe192c0f72e3b80670189fb7e550897732d102bd03542a699305069", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, 0x0) 3.936512759s ago: executing program 0 (id=6229): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') openat$cgroup_ro(r0, &(0x7f0000000040)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x3) ioctl$KVM_RUN(r1, 0xae80, 0x0) preadv(r0, &(0x7f0000000080)=[{&(0x7f00000005c0)=""/237, 0xed}], 0x1, 0x40009, 0x2) 3.869413355s ago: executing program 0 (id=6230): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00'}) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@func_proto, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x20}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2}}]}}, 0x0, 0x4e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$MAP_CREATE(0x0, 0x0, 0x3753) listen(0xffffffffffffffff, 0x10001) syz_mount_image$vfat(&(0x7f0000003880), &(0x7f0000000e80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10000, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x1, 0x2ad, &(0x7f0000000580)="$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") mkdirat(0xffffffffffffff9c, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000500)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 3.830288978s ago: executing program 3 (id=6231): syz_mount_image$exfat(&(0x7f0000000300), &(0x7f0000000180)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0xa1200b, &(0x7f0000000000)=ANY=[@ANYRESDEC, @ANYRES64], 0x21, 0x1514, &(0x7f0000000540)="$eJzs3AuYjtXaOPD7Xms9jGnS2ySHYa11P7xpsAxJckiSQ5IkW5KcEkKTJAmJcZY0JCHHSXIYQnJqTHI+n3JOkqRJkpCQsP7XtPW3925/X9/eX/+/6/vm/l3Xc73rfp/3Xu9a7z3vPM965nrmu24jajWpXb0REcF/C/71IQUAYgBgCADcAAABAJSPLx+fvT+PxJT/3puwP9cj6dd6BOxa4vrnbFz/nI3rn7Nx/XM2rn8OEvz+Ka5/zsb1z9m4/ozlZNtnFbqRt5y78fX/nIyP//+LZJWe+NXG0jd3/6+81su/PnL9czT+/udsXP+cjeufs3H9czauf87G9c/ZuP6M5WT//rVj/tvB/4btWv/8McYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhjLGc77qxQA/Na+1uNijDHGGGOMMcbYn8fn/vfyUv7sgTDGGGOMMcYYY+z/IQQBEhQEkAtyQwzkgVi4DuLgesgLN0AEboR4uAnywc2QHwpAQSgECVAYioAGAxYIQigKxSAKt0BxuBUSoQSUhFLgoDQkQRkoC7dBObgdysMdUAHuhIpQCSpDFbgLqsLdUA3ugepwL9SAmlALasN9UAfuh7rwANSDB6E+PAQN4GFoCH+BRvAINIZHoQk8Bk3hcWgGzaEFtIRW/1b+S9ALXobe0AdSoC/0g/4wAAbCIBgMQ+AVGAqvwjB4DVJhOIyA12EkvAGj4E0YDWN+/cTGwXiYABNhEkyGNHgbpsA7MBXehWkwHWbATEiHWTAb3oM5MBfmwfswHz6ABbAQFsFiWAIfQgYshUz4CJbBx7AcVsBKWAWrYQ2shXWwHjbARtgEm2ELbIVtsB0+gR2wE3bBbtgDe2EffAr74TM4AJ/DQfjiX8w/9w/53REQUKBAhQpzYS6MwRiMxViMwzjMi3kxghGMx3jMh/kwP+bHglgQEzABi2ARNGiQkLAoFsUoRrE4FsdETMSSWBIdOkzCJCyLt2E5LIflsTxWwApYESthJayCVbAqVsVqWA2rY3WsgTWwFtbC+/A+vB/rYl2sh/WwPtbHBtgAG2JDbISNsDE2xibYBJtiU2yGzbAFtsBW2ApbY2tsg22wHbbD9tgeO2JHTMZk7ISdsDN2xi7YBbtiV+yG3bA79sAe+BK+hC/jy9gHa4i++AL0wwE4AAfhYByMr+BQfBVfxdcwFYfjCHwdX8c3cBSexdE4BsfiWKwqxuMEnIgkJmMapuEUnIJTcSpOw+k4HWdiOs7C2Tgb5+BcnIvv43z8AD/AhbgQF2NZXIIZuBQzMROX4TlcjitwJa7C1bgGV+M6XI/rcCNuwo24BbfgNtyGn+AnuBN34m7cjXtRAeCn+Bl+hql4EA/iITyEh/EwHsEjmIVZeBSP4jE8hsfxOJ7AE3gST+FpPIVn8AyexXN4Hs/jBbyAF/GFhG8a7y2xIRVENiWUyCVyiRgRI2JFrIgTcSKvyCsiIiLiRbzIJ/KJ/CK/KCgKigSRIIqIIsIII0iEoqgoKqIiKoqL4iJRJIqSoqRwwokkkSTKirKinCgnyos7RAVxp6goKom2roqoIqqKdq6auEdUF9VFDVFT1BK1RW1RR9QRdUVdUU/UE/VFfdFAPCwair44CB8R2ZVpIoZjUzECm4nmooVoKd7AJ0RrMQrbiLainXhKjMHR2FG0dsniGdFJTMDO4jkxEZ8XXcVk7CZeFN1FD9FTvCR6iTaut+gjpmFf0U/MxAFioBgkBos5WFNkV6yWeE2kiuFihHhdLMY3xCjxphgtxoix4i0xTowXE8REMUlMFmnibTFFvCOminfFNDFdzBAzRbqYJWaL98QcMVfME++L+eIDsUAsFIvEYrFEfCgyxFKRKT4Sy8THYrlYIVaKVWK1WCPWinVivdggNopNYrPYIraKbWK7+ETsEDvFLrFb7BF7xT7xqdgvPhMHxOfioPhCHBJfisPiK3FEfC2yxDfiqPhWHBPfiePie3FC/CBOilPitPhRnBE/ibPinDgvfhYXxC/iorgkLgsvQKIUUkolA5lL5pYxMo+MldfJOHm9zCtvkBF5o4yXN8l88maZXxaQBWUhmSALyyJSSyOtJBnKorKYjMpbZHF5q0yUJWRJWUo6WVomyTKyrLxNlpO3y/LyDllB3ikrykqysqwi75JV5d2ymrxHVpf3yhqypqwla8v7ZB15v6wrH5D15IOyvnxINpAPy4byL7KRfEQ2lo/KJvIx2VQ+LpvJ5rKFbClbySdka/mkbCPbynbyKdledpAd5dMyWT4jO8lnZWf5nOwin5dd5Quym3xRdpc9ZE95SV6WXvaWfWSK7Cv7yf5ygBwoB8nBcoh8RQ6Vr8ph8jWZKofLEfJ1OVK+IUfJN+VoOUaOlW/JcXK8nCAnyklyskyTb8sp8h05Vb4rp8npcoacKdPlLDnoSk/z/gv57/yT/GG/vvu24MpBWu6Su+UeuVfuk/vkfrlfHpAH5EF5UB6Sh+RheVgekUdklsySR+VReUwek8flcXlCnpAn5Sn5s/xRnpE/ybPynDwnf5YX5AV58cpnAAqVUFIpFahcKreKUXlUrLpOxanrVV51g4qoG1W8uknlUzer/KqAKqgKqQRVWBVRWhllFalQFVXFVFTdglfGqkqqUsqp0ipJlflX8lVxdatKVCX+Lv+PxtdKtVKtVWvVRrVR7VQ71V61Vx1VR5WsklUn1Ul1Vp1VF9VFdVVdVTfVTXVX3VVP1VP1Ur1Ub9VbpagU1U/1VwPUQDVIDVZD1CtqqBqqhqlhKlWlqhFqhBqpRqpRapQarUarsWqsGqfGqQlqgpqkJqk0laamqClqqpqqpqlpaoaaodJVupqtZqs5ao6ap+ap+Wq+WqAWqEVqkVqilqgMlaEyVaZappap5WqFWqFWqVVqjVqj1ql1aoPaoDapTWqL2qKWq+1qu9qhdqhdapfao/aofWqf2q/2qwPqgDqoDqpD6pA6rA6rI+qIylJZ6qg6qo6pY+q4Oq5OqBPqpDqpTqvT6ow6o86qs+q8Oq8uqAvqorqoLqvL2ad9gQhEoAIV5ApyBTFBTBAbxAZxQVyQN8gbRIJIEB/EB/mCm4P8QYGgYFAoSAgKB0UCHZjABhSEQdGgWBANbgmKB7cGiUGJoGRQKnBB6SApKBOUDW4LygW3B+WDO4IKwZ1BxaBSUDmoEtwVVA3uDqoF9wTVg3uDGkHNoFZQO7gvqBPcH9QNHgjqBQ8G9YOHggbBw0HD4C9Bo+CRoHHwaNAkeCxoGjweNAuaBy2ClkGrP7V/788WeNL11n10iu6r++n+eoAeqAfpwXqIfkUP1a/qYfo1naqH6xH6dT1Sv6FH6Tf1aD1Gj9Vv6XF6vJ6gJ+pJerJO02/rKfodPVW/q6fp6XqGnqnT9Sw9W7+n5+i5ep5+X8/XH+gFeqFepBfrJfpDnaGX6kz9kV6mP9bL9Qq9Uq/Sq/UavVav0+v1Br1Rb9Kb9Ra9VW/T2/UneofeqXfp3XqP3qv36U/1fv2ZPqA/1wf1F/qQ/lIf1l/pI/prnaW/0Uf1t/qY/k4f19/rE/oHfVKf0qf1j/qM/kmf1ef0ef2zvqB/0Rf1JX1Z++yT++zDu1FGmVwml4kxMSbWxJo4E2fymrwmYiIm3sSbfCafyW/ym4KmoEkwCaaIKWKykSFT1BQ1URM1xU1xk2gSTUlT0jjjTJJJMmVNWVPOlDPlTXlTwVQwFU1FU9lUNneZu8zd5m5zj7nH3GvuNTVNTVPb1DZ1TB1T19Q19Uw9U9/UNw1MA9PQNDSNTCPT2DQ2TUwT09Q0Nc1MM9PCtDCtTCvT2rQ2bUwb0860M+1Ne9PRdDTJJtl0Mp1MZ9PZdDFdTFfT1XQz3Ux30930ND1NL9PL9Da9TYpJMf1MPzPADDCDzCAzxAwxQ81QM8wMM6km1YwwI8xIM9KMMqPMaDPGjDVvmXFmvJlgJppJZrJJM2lmiplippqpZpqZZmaYGSbdpJvZZraZY+aYeWaemW/mmwVmgVlkFpklZonJMBkm02SaZWaZWW7GXgew0qw2q81as9asN+vNRrPRbDabzVaz1Ww3280Os8PsMrvMHrPH7DP7zH6z3xwwB8xBc9AcMoc8Apgj5ojJMlnmqDlqjplj5rg5bk6YE+akOWlOm9PmjDljzpqz5rw5by6YX8xFc8lcNt7E2Dw21l5n4+z1Nq+9wf5jXNAWsgm2sC1itc1vC/xdbKy1ibaELfnbEtOWsYkx2Y+lrLOlbZItYyvaSrayrWLvslXt3bba7+I69n5b1z5g69kHbW1739/F9e1DtoF9zDa0j9tGtrltbFvaJvYx29Q+bpvZ5raFbWnb2w62o33aJttnbCf77O/iDLvUrrcb7Ea7ye63n9nz9md7zH5nL9hfbG/bxw6xr9ih9lU7zL5mU+3w38Vj7Vt2nB1vJ9iJdpKd/Lt4hp1p0+0sO9u+Z+fYub+Ll9gP7XybaRfYhXaRXfxrnD2mTPuRXWY/tsvtCrvSrrKr7Rq71q77v2NdZbfYrXab3Wc/tTvsTrvL7rZ77N5f4+x5HLCf24P2C3vUfmsP26/sEXvcZtlvfo2z53fcfm9P2B/sSXvKnrY/2jP2J3vWnsuev8+e+4/2kr1svQVCEiRJUUC5KDfFUB6Kpesojq6nvHQDRehGiqebKB/dTPmpABWkQpRAhakIaTJkiSikolSMonQLFadbKZFKUEkqRY5KUxKVobJ0G5Wj26k83UEV6E6qSJWoMlWhu6gq3U3V6B6qTvdSDapJtag23Ud16H6qSw9QPXqQ6tND1IAepob0F2pEj1BjepSa0GPUlB6nZtScWlBLakVPUGt6ktpQW2pHT1F76kAd6WlKpmeoEz1Lnek56kLPU1d6gbrRi9SdelBPeol60cvUm/pQCvWlftSfBtBAGkSDaQi9QkPpVRpGr1EqDacR9DqNpDdoFL1Jo2kMjaW3aByNpwk0kSbRZEqjt2kKvUNT6V2aRtNpBs2kdJpFs+k9mkNzaR69T/PpA1pAC2kRLaYl9CFl0FLKpI9oGX1My2kFraRVtJrW0FpaR+tpA22kTbSZttBW2kbb6RPaQTtpF+2mPbSX9tGntJ/yXPnCfUGH6Es6TF/REfqasugbOkrf0jH6jo7T93SCfqCTdIpO0490hn6is3SOztPPdIF+oYt0iS6TJwgxFKEMVRiEucLcYUyYJ4wNrwvjwuvDvOENYSS8MYwPbwrzhTeH+cMCYcGwUJgQFg6LhDo0oQ0pDMOiYbEwGt4SFg9vDRPDEmHJsFTowtJhUlgmLBveFpYLbw/Lh3eEFcI7w4phpfCxB6uEd4VVw7vDauE9YfXw3rBGWDOsFdYO7wvrhPeHdcMHwnrhg2G58KGwQfhwCFfuV2kcPho2CR8Lm4aPh83C5mGLsGXYKnwibB0+GbYJ24btwqfC9mGHsGP4dJgcPhN2Cp/9w/0pYd+wX9g/7B96/4BcFF0cXRL9MJoRXRrNjH4UXRb9OLo8uiK6Mroqujq6Jro2ui66ProhujG6Kbo5uiW6Nbot6n3t3ODQCSedcoHL5XK7GJfHxbrrXJy73uV1N7iIu9HFu5tcPnezy+8KuIKukEtwhV0Rp51x1pELXVFXzEXdLa64u9UluhKupCvlnCvtklxL18q1cq3dk66Na+vauafcU66D6+Cedk+7Z1wn96zr7J5zXdzzrqt7wb3gXnTdXQ/X073kermXXW/Xx6W4FNfP9XMD3AA3yA1yQ9wQN9QNdcPcMJfqUt0IN8KNdCPdKDfKjXaj3Vg31o1z49wEN8FNcpNcmktzU9wUN9VNddlLlRluhkt36W62m+3muDlunpvn5ifOdwvcArfILXJL3BKX4TJcpst0y9wyt9wtdyvdSrfarXZr3Vq33q13G91Gt9ltdlvdVrfdbXc73A63y+1ye9wet8/tc/vdfnfAHXAH3UF3yB1yh91hd8R97bLcN+6o+9Ydc9+54+57d8L94E66U+60+9GdcT+5s+6cO+9+dhfcL+6iu+QuO+/SIm9HpkTeiUyNvBuZFpkemRGZGUmPzIrMjrwXmROZG5kXeT8yP/JBZEFkYWRRZHFkSeTDSEZkaSQz8lFkWeTjyPLIisjKyKrI6sgaBb7wjtAX9cV81N/ii/tbfaIv4Uv6Ut750j7Jl/Fl/W2+nL/dl/d3+Ar+Tl/RV/KV/eO+mW/uW/iWvpV/wrf2T/o2vq1v55/y7X0H39E/7ZP9M76Tf9Z39s/5Lv5539W/4Lv5F31338P39C/5Xv5l39v38Sm+r+/n+/sBfqAf5Af7If4VP9S/6of513yqH+5H+Nf9SP+GH+Xf9KP9GD/Wv+XH+fF+gp/oJ/nJPs2/7af4d/xU/66f5qf7GX6mT/ez/Gz/np/j5/p5/n0/33/gF/iFfpFf7Jf4D32GX+oz/Ud+mf/YL/cr/Eq/yq/2a/xav86v9xv8Rr/Jb/Zb/Fa/zW/3n/gdfqff5Xf7PX6v3+c/9fv9Z/6A/9wf9F/4Q/5Lf9h/5Y/4r32W/8Yf9d/6Y/47f9x/70/4H/xJf8qf9j/6M/4nf9af8+f9z/6C/8Vf9Jf85X/xnrWaf87Fc8YYY4yx/3H6/8H+vv/kOQUA4kr7F+/99TsLZf3tfgkAm/P/tT1QJLSPAMAzfbo98ttWo0ZKym/3DyyXEBRbCACRf3iDK/EKaAcdIBnaQtl/Or6BoscF+oP+o3cAxP5NTgxcja/2/+V/0P8TT43NqBCej/9P+l8IkFjsak72Kvy3eAW0y54NtIVy/0H/BVr/wfjzfJUG0OZvcuIAoE2efxx/EjwJz0Ly372SMcYYY4wxxhj7q4Gicpc/Wj9nr88T1NWc3HA1/qP1OWOMMcYYY4wxxq6953v0fPqJ5OS2XbjBDW7ksEaH/+Q11/o3E2OMMcYYY+zPdvWk/+pzea7lgBhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMsRzo/8d/GrvWc2SMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcautf8TAAD//x/uMoA=") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000020000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b70300000000002085000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = getpid() bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{}, 0x0, &(0x7f0000000280)=r0}, 0x20) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) futex(0x0, 0xa, 0x10000001, 0x0, 0x0, 0x0) r4 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r4, 0x40087703, 0x100000002) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r4, 0x0) 2.661537429s ago: executing program 0 (id=6232): openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r0}, 0x0, &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/cpuinfo\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00'}, 0x10) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) syz_open_procfs(r5, &(0x7f0000000040)='net/if_inet6\x00') 2.660976559s ago: executing program 3 (id=6233): write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000004c0), &(0x7f0000000e80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000003c0)={[{@utf8}, {@utf8}, {@uni_xlate}, {@fat=@codepage={'codepage', 0x3d, '855'}}, {@shortname_winnt}, {@uni_xlateno}, {@shortname_win95}, {@shortname_win95}, {@uni_xlate}, {@numtail}, {@iocharset={'iocharset', 0x3d, 'cp861'}}, {@shortname_winnt}, {@uni_xlate}, {@uni_xlateno}, {@iocharset={'iocharset', 0x3d, 'maciceland'}}, {@shortname_winnt}]}, 0x1, 0x2b7, &(0x7f0000000a40)="$eJzs3c9qY1UcB/DfTdPkqmCycCWKF3ThapjOE6RIBwazUrJQFypOB2QShA4U/INxQBBcuXHpA4ggzM6XcOMb+ACCO7soHLnJvU1ak9QLTeufz2fT03PO957fzblp6SKn770weXi/iAePP/s18jyL1iAGcZJFP1pR+yLOGXwTAMC/2UnK4/c01ySXRUS+vbIAgC06SanZ7/8nWy8JANiyN996+/X94fDgjaLI4+7kq+NR+Zd9+XU+vv8gPoxxHMbt6MVpRDozb99NKU3bRakfr0ymx6MyOXn35+r6+79FzPJ70Yv+rOt8/t7wYK+YW8pPyzqertYflPk70YvnVqx/b3hwZ0U+Rp149eWl+m9FL375ID6KcdyfFbHIf75XFK+lb//49J2yvDKfTY9H3dm8hbRzzVsDAAAAAAAAAAAAAAAAAAAAAMB/2K3q7JxuzM7vKbuq83d2TstvdqOo9c+fzzPPZ/WFLpwPNE3xXX2+zu2iKFI1cZFvx/PtaN/MXQMAAAAAAAAAAAAAAAAAAMA/y6OPP3n4/nh8eHQljfo0gPpj/c2v82SWGiz1vBSbU93FWq2quWGJ2PmympNFbKynvIkrelkuazy1ruYffmx6wfzyObvlWvm6OeUWNly03u6lnqh7stWvYfdscl4/JD/VPSml1Im/uXpn3VBq9Ph1Vg71Gm9l55lZY7phTmTrCvv6xcX7shrKLt5FJyKr3mUX47tVI9btYN7oef7rz4rMaR0AAAAAAAAAAAAAAAAAALBViw/9rhh8vDHaSt2tlQUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA12rx//8bNKZV+PDo+2cvmdyJo0c3fIsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD8D/wZAAD//1lbV6k=") syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00', 0x0}) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wake_lock', 0x202, 0x0) write$binfmt_misc(r4, &(0x7f0000000100)=ANY=[@ANYBLOB="5ce1fcaa059691"], 0x4c) 2.529671461s ago: executing program 2 (id=6234): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1b96, 0xa, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='kfree\x00', r2}, 0x10) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000d40)={0x2c, &(0x7f0000000780)=ANY=[@ANYBLOB='\x00\x00\a'], 0x0, 0x0, 0x0, 0x0}, 0x0) 2.172496312s ago: executing program 1 (id=6235): r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./bus\x00', 0x400e, &(0x7f0000000180)={[{@data_journal}, {@jqfmt_vfsv0}, {@errors_continue}, {@nodelalloc}, {@init_itable_val={'init_itable', 0x3d, 0x4}}, {@acl}]}, 0x1, 0x42f, &(0x7f0000000280)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f00000006c0)=""/247, 0xf7}, {&(0x7f00000007c0)=""/142, 0x8e}], 0x2, 0x4, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000004000000e27f00000100000000", @ANYBLOB, @ANYRES32=0x0, @ANYRES32], 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000400)={r4, &(0x7f00000004c0)="cf", 0x20000000}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000fd00000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) r6 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) pwrite64(r6, &(0x7f0000000080)='3', 0x500, 0x0) 1.856243619s ago: executing program 0 (id=6236): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x1000, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, &(0x7f0000000980)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$USBDEVFS_CLEAR_HALT(0xffffffffffffffff, 0xc0105502, &(0x7f0000000340)={0x1, 0x1}) socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYBLOB='\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) unshare(0x60600) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) openat(r5, &(0x7f0000000140)='./file0/file0\x00', 0xa4b40, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x140) 1.697614833s ago: executing program 3 (id=6237): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socket$inet_udp(0x2, 0x2, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, 0x0, 0x0, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) 1.517824349s ago: executing program 4 (id=6238): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) 1.465560023s ago: executing program 4 (id=6239): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28de, 0x1102, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x7, {[@main=@item_4={0x3, 0x0, 0x0, "6e3565c0"}, @main=@item_012={0x1, 0x0, 0xb, 'i'}]}}, 0x0}, 0x0) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0) 1.418745077s ago: executing program 3 (id=6240): syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x0, &(0x7f00000018c0)=ANY=[], 0x1, 0x1501, &(0x7f00000002c0)="$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") syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x100000, &(0x7f0000001800)={[{@dax_inode}, {@barrier_val={'barrier', 0x3d, 0xc8}}, {@oldalloc}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=") bpf$MAP_CREATE(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x19) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x10, "df3f0400000000000000000000000609000040"}) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x1a) creat(&(0x7f0000000040)='./bus\x00', 0x0) 1.27325269s ago: executing program 1 (id=6241): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) open(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x2d) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007500000004000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000100)) 1.175189339s ago: executing program 1 (id=6242): sysinfo(&(0x7f0000000280)=""/219) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r4}, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x7}, 0x1c) 818.15672ms ago: executing program 0 (id=6243): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x2040d0, &(0x7f0000000200), 0xfb, 0x497, &(0x7f0000000f40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0185879, &(0x7f00000004c0)={@desc={0x4100, 0x0, @desc4}}) 649.360424ms ago: executing program 0 (id=6244): socket(0x1, 0x803, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="170000000000000004000000ff0000000000", @ANYRES32=0x1, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, 0x0) 516.428256ms ago: executing program 3 (id=6245): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x2000480, &(0x7f0000000100), 0x5, 0x75b, &(0x7f0000000800)="$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") r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYRESOCT=r0], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="100000000400000004fd00000200000000000000", @ANYRES32=0x1, @ANYBLOB="9b00"/19, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000ffffffff00"/27], 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$packet(0x11, 0x1, 0x300) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000000)={0x4001}, 0x10) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000005e000102"], 0x1c}}, 0x0) openat(0xffffffffffffffff, &(0x7f0000000100)='./file2\x00', 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000400)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r7, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x14, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x7d}}, {{0x6, 0x0, 0x6, 0x9, 0x0, 0x6, 0xe7030000}, {0x4, 0x0, 0x0, 0x6}}, [@printk={@llu, {0x5, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x14}}], {{0x4, 0x1, 0x5, 0x3}, {0x5, 0x0, 0xb, 0x3, 0x0, 0x2}}}, &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 332.695102ms ago: executing program 1 (id=6246): openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r0}, 0x0, &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/cpuinfo\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00'}, 0x10) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) syz_open_procfs(r5, &(0x7f0000000040)='net/if_inet6\x00') 0s ago: executing program 2 (id=6247): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="1201000000000040341a020800000000000109022400010000000009040000020300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket$inet(0x2, 0x3, 0x2) userfaultfd(0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x6, [@ptr, @var={0x4, 0x0, 0x0, 0xe, 0x1}]}, {0x0, [0x0, 0x0, 0x0, 0xd5]}}, &(0x7f0000000140)=""/249, 0x3a, 0xf9, 0x1, 0x0, 0x0, @void, @value}, 0x20) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000300)='asymmetric\x00', 0x0, &(0x7f0000000380)="1f", 0x1, r5) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, 0x0, 0x0) socket$inet(0x2, 0x2, 0x2) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @empty}, 0xc) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) kernel console output (not intermixed with test programs): criptor?? [ 1363.732034][T22093] EXT4-fs (loop2): unmounting filesystem. [ 1363.853370][ T28] audit: type=1400 audit(1727206427.787:7254): avc: denied { read } for pid=23764 comm="syz.2.5785" name="kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1363.876645][ T28] audit: type=1400 audit(1727206427.797:7255): avc: denied { open } for pid=23764 comm="syz.2.5785" path="/dev/kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1363.900433][ T28] audit: type=1400 audit(1727206427.807:7256): avc: denied { ioctl } for pid=23764 comm="syz.2.5785" path="/dev/kvm" dev="devtmpfs" ino=83 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1363.968177][T23768] 9pnet_fd: Insufficient options for proto=fd [ 1364.141522][ T28] audit: type=1400 audit(1727206428.077:7257): avc: denied { create } for pid=23764 comm="syz.2.5785" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1364.296851][ T602] usbhid 2-1:0.0: can't add hid device: -71 [ 1364.302880][ T602] usbhid: probe of 2-1:0.0 failed with error -71 [ 1364.313632][ T602] usb 2-1: USB disconnect, device number 77 [ 1364.633215][ T28] audit: type=1400 audit(1727206428.567:7258): avc: denied { create } for pid=23785 comm="syz.1.5790" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1365.045717][T23792] loop4: detected capacity change from 0 to 512 [ 1365.055618][T23792] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1365.069644][T23792] EXT4-fs (loop4): 1 truncate cleaned up [ 1365.075134][T23792] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1365.169868][T23796] loop0: detected capacity change from 0 to 512 [ 1365.185933][T23796] EXT4-fs (loop0): Test dummy encryption mode enabled [ 1365.197216][T23796] EXT4-fs error (device loop0): __ext4_iget:5046: inode #11: block 1: comm syz.0.5793: invalid block [ 1365.208154][T23796] EXT4-fs error (device loop0): ext4_orphan_get:1401: comm syz.0.5793: couldn't read orphan inode 11 (err -117) [ 1365.240424][T23796] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 1365.303379][ T28] audit: type=1400 audit(1727206429.237:7259): avc: denied { mount } for pid=23795 comm="syz.0.5793" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 1365.538429][ T28] audit: type=1400 audit(1727206429.237:7260): avc: denied { read write } for pid=23795 comm="syz.0.5793" name="loop0" dev="devtmpfs" ino=114 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1365.560108][T23801] loop1: detected capacity change from 0 to 256 [ 1365.591420][T23801] exFAT-fs (loop1): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d) [ 1366.047330][T23675] EXT4-fs (loop4): unmounting filesystem. [ 1366.071666][T23789] loop2: detected capacity change from 0 to 131072 [ 1366.081698][T23807] loop4: detected capacity change from 0 to 512 [ 1366.088618][T23789] F2FS-fs (loop2): Test dummy encryption mode enabled [ 1366.096430][T23789] F2FS-fs (loop2): invalid crc value [ 1366.111731][T23789] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1366.129118][ T321] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1366.148066][T23789] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 1366.189376][T22093] F2FS-fs (loop2): f2fs_fill_dentries: corrupted namelen=1025, run fsck to fix. [ 1366.563991][T23817] 9pnet_fd: Insufficient options for proto=fd [ 1366.655394][T20924] EXT4-fs (loop0): unmounting filesystem. [ 1367.506769][ T28] kauditd_printk_skb: 49 callbacks suppressed [ 1367.506788][ T28] audit: type=1400 audit(1727206431.387:7310): avc: denied { create } for pid=23828 comm="syz.4.5801" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1367.601117][T19478] device bridge_slave_0 left promiscuous mode [ 1367.618023][T19478] bridge0: port 1(bridge_slave_0) entered disabled state [ 1367.626019][T19478] device veth1_macvtap left promiscuous mode [ 1367.634453][T19478] device veth0_vlan left promiscuous mode [ 1367.895189][ T28] audit: type=1400 audit(1727206431.657:7311): avc: denied { create } for pid=23836 comm="syz.1.5803" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1367.943263][ T28] audit: type=1400 audit(1727206431.667:7312): avc: denied { setopt } for pid=23836 comm="syz.1.5803" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1368.049881][ T28] audit: type=1400 audit(1727206431.827:7313): avc: denied { bind } for pid=23836 comm="syz.1.5803" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1368.069064][ T28] audit: type=1400 audit(1727206431.897:7314): avc: denied { create } for pid=23836 comm="syz.1.5803" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1368.088494][ T28] audit: type=1400 audit(1727206431.897:7315): avc: denied { mounton } for pid=23836 comm="syz.1.5803" path="/111/file0" dev="tmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1368.200850][ T28] audit: type=1400 audit(1727206432.137:7316): avc: denied { mounton } for pid=23846 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 1368.242725][ T28] audit: type=1400 audit(1727206432.137:7317): avc: denied { mount } for pid=23846 comm="syz-executor" name="/" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 1368.267235][ T28] audit: type=1400 audit(1727206432.137:7318): avc: denied { mounton } for pid=23846 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 1368.291625][ T28] audit: type=1400 audit(1727206432.137:7319): avc: denied { module_request } for pid=23846 comm="syz-executor" kmod="netdev-nr2" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 1368.330328][T23846] bridge0: port 1(bridge_slave_0) entered blocking state [ 1368.337250][T23846] bridge0: port 1(bridge_slave_0) entered disabled state [ 1368.344548][T23846] device bridge_slave_0 entered promiscuous mode [ 1368.351692][T23846] bridge0: port 2(bridge_slave_1) entered blocking state [ 1368.359693][T23846] bridge0: port 2(bridge_slave_1) entered disabled state [ 1368.367211][T23846] device bridge_slave_1 entered promiscuous mode [ 1368.377693][T23853] netlink: 164 bytes leftover after parsing attributes in process `syz.4.5807'. [ 1368.402482][T23855] 9pnet_fd: Insufficient options for proto=fd [ 1368.475707][T23846] bridge0: port 2(bridge_slave_1) entered blocking state [ 1368.482608][T23846] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1368.484092][T23859] loop1: detected capacity change from 0 to 512 [ 1368.498482][T23859] EXT4-fs error (device loop1): ext4_find_inline_data_nolock:164: inode #12: comm syz.1.5810: inline data xattr refers to an external xattr inode [ 1368.516259][T23859] EXT4-fs error (device loop1): ext4_orphan_get:1401: comm syz.1.5810: couldn't read orphan inode 12 (err -117) [ 1368.528233][T15935] bridge0: port 2(bridge_slave_1) entered disabled state [ 1368.528479][T23859] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1368.544010][T15935] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1368.553746][T15935] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1368.591548][T15935] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1368.622120][T15935] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1368.632251][T15935] bridge0: port 1(bridge_slave_0) entered blocking state [ 1368.639137][T15935] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1368.648094][T15935] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1368.656654][T15935] bridge0: port 2(bridge_slave_1) entered blocking state [ 1368.663518][T15935] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1368.728729][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1368.737165][T21758] EXT4-fs (loop1): unmounting filesystem. [ 1368.738244][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1368.764082][T23865] loop1: detected capacity change from 0 to 512 [ 1368.766397][ T1510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1368.781076][T23846] device veth0_vlan entered promiscuous mode [ 1368.787954][ T1510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1368.796805][ T1510] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1368.803994][ T1510] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1368.814872][ T1510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1368.839108][T23846] device veth1_macvtap entered promiscuous mode [ 1368.883421][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1368.893326][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1369.131504][T23872] loop2: detected capacity change from 0 to 2048 [ 1369.280744][T23872] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1369.303935][T23868] device syzkaller0 entered promiscuous mode [ 1369.519575][T23883] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5814'. [ 1370.992019][T23846] EXT4-fs (loop2): unmounting filesystem. [ 1371.015917][T23890] 9pnet_fd: Insufficient options for proto=fd [ 1371.022929][T23892] loop1: detected capacity change from 0 to 512 [ 1371.037063][T23896] loop2: detected capacity change from 0 to 256 [ 1371.047938][T23892] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1371.061478][T23892] ext4 filesystem being mounted at /114/file1 supports timestamps until 2038 (0x7fffffff) [ 1371.113305][T21758] EXT4-fs (loop1): unmounting filesystem. [ 1371.219500][T23907] device sit0 entered promiscuous mode [ 1371.224983][T23907] device vlan2 entered promiscuous mode [ 1371.231811][T23907] device sit0 left promiscuous mode [ 1371.537075][T23910] xt_TCPMSS: Only works on TCP SYN packets [ 1371.908854][ T60] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 1373.180974][T23924] loop0: detected capacity change from 0 to 512 [ 1373.199082][T23923] loop4: detected capacity change from 0 to 2048 [ 1373.256500][T23924] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1373.265122][T23923] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1373.268201][T23924] ext4 filesystem being mounted at /161/file0 supports timestamps until 2038 (0x7fffffff) [ 1373.385510][T23936] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5828'. [ 1374.025353][T23941] 9pnet_fd: Insufficient options for proto=fd [ 1374.087070][ T60] usb 4-1: unable to read config index 0 descriptor/all [ 1374.094423][T23675] EXT4-fs (loop4): unmounting filesystem. [ 1374.161858][ T60] usb 4-1: can't read configurations, error -71 [ 1374.166035][T23948] loop1: detected capacity change from 0 to 8192 [ 1374.195939][T23948] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1374.326877][ T28] kauditd_printk_skb: 35 callbacks suppressed [ 1374.326943][ T28] audit: type=1400 audit(1727206438.237:7355): avc: denied { mount } for pid=23947 comm="syz.1.5835" name="/" dev="loop1" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 1375.002814][ T28] audit: type=1400 audit(1727206438.937:7356): avc: denied { unmount } for pid=21758 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 1375.038766][T23965] loop3: detected capacity change from 0 to 512 [ 1375.066325][T23965] EXT4-fs error (device loop3): ext4_find_inline_data_nolock:164: inode #12: comm syz.3.5838: inline data xattr refers to an external xattr inode [ 1375.081803][T23965] EXT4-fs error (device loop3): ext4_orphan_get:1401: comm syz.3.5838: couldn't read orphan inode 12 (err -117) [ 1375.093782][T23965] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 1375.110339][T22927] EXT4-fs (loop3): unmounting filesystem. [ 1375.198256][T23971] device gretap0 entered promiscuous mode [ 1375.215275][T23971] device vlan2 entered promiscuous mode [ 1375.233059][T23971] device gretap0 left promiscuous mode [ 1375.448956][T23970] loop3: detected capacity change from 0 to 40427 [ 1375.485535][T23970] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 1375.505734][T23970] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 1375.526961][T23970] F2FS-fs (loop3): invalid crc value [ 1375.555085][T23970] F2FS-fs (loop3): Found nat_bits in checkpoint [ 1375.605177][T20924] EXT4-fs (loop0): unmounting filesystem. [ 1375.610926][ T4644] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 1375.624879][T23970] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 1375.636002][T23970] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 1375.836804][ T28] audit: type=1400 audit(1727206439.747:7357): avc: denied { append } for pid=23969 comm="syz.3.5840" path="/52/bus/memory.events" dev="loop3" ino=455 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 1375.960136][T23980] loop2: detected capacity change from 0 to 131072 [ 1375.968212][T23991] loop1: detected capacity change from 0 to 2048 [ 1375.968794][T23980] F2FS-fs (loop2): Segment count (31) mismatch with total segments from devices (0) [ 1375.985809][T23980] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 1376.010722][T23991] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1376.022061][ T317] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 1376.030091][T23980] F2FS-fs (loop2): invalid crc value [ 1376.034978][ T317] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 1376.096614][T23980] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1376.126795][ T4644] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1376.138912][ T4644] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1376.141099][T23998] netlink: 'syz.3.5846': attribute type 12 has an invalid length. [ 1376.148530][ T4644] usb 5-1: New USB device found, idVendor=04b3, idProduct=3108, bcdDevice= 0.00 [ 1376.157963][T23980] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 1376.193588][ T28] audit: type=1400 audit(1727206440.127:7358): avc: denied { connect } for pid=23997 comm="syz.3.5846" lport=256 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1376.195225][ T4644] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1376.243018][ T4644] usb 5-1: config 0 descriptor?? [ 1376.248228][T23980] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 1376.495194][T24004] loop0: detected capacity change from 0 to 512 [ 1376.536750][ T943] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 1376.547485][ T314] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1376.559661][T24006] F2FS-fs (loop2): checksum invalid, nid = 4, ino_of_node = 4, efdbe231 vs. 15bb5891 [ 1376.578836][T24006] F2FS-fs (loop2): checksum invalid, nid = 4, ino_of_node = 4, efdbe231 vs. 15bb5891 [ 1376.606750][ T28] audit: type=1400 audit(1727206440.517:7359): avc: denied { read } for pid=23979 comm="syz.2.5843" path="/6/file0/memory.stat" dev="loop2" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 1376.638673][ T28] audit: type=1400 audit(1727206440.517:7360): avc: denied { ioctl } for pid=23979 comm="syz.2.5843" path="/6/file0/memory.stat" dev="loop2" ino=10 ioctlcmd=0x6618 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 1376.936155][ T943] usb 4-1: Using ep0 maxpacket: 16 [ 1376.942510][T21758] EXT4-fs (loop1): unmounting filesystem. [ 1377.046842][ T4644] usbhid 5-1:0.0: can't add hid device: -71 [ 1377.052790][ T4644] usbhid: probe of 5-1:0.0 failed with error -71 [ 1377.062586][ T4644] usb 5-1: USB disconnect, device number 74 [ 1377.086971][ T943] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1377.287172][ T943] usb 4-1: New USB device found, idVendor=045e, idProduct=0721, bcdDevice=90.c4 [ 1377.296188][ T943] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1377.304586][ T943] usb 4-1: Product: syz [ 1377.308887][ T943] usb 4-1: Manufacturer: syz [ 1377.313319][ T943] usb 4-1: SerialNumber: syz [ 1377.321840][ T943] usb 4-1: config 0 descriptor?? [ 1377.671319][T24024] device sit0 entered promiscuous mode [ 1377.676951][T24024] device vlan2 entered promiscuous mode [ 1377.683251][T24024] device sit0 left promiscuous mode [ 1377.824035][ T28] audit: type=1400 audit(1727206441.747:7361): avc: denied { write } for pid=23997 comm="syz.3.5846" laddr=127.0.0.1 lport=256 faddr=127.0.0.1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1377.916382][ T943] usb 4-1: Found UVC 0.00 device syz (045e:0721) [ 1377.922750][ T943] usb 4-1: No valid video chain found. [ 1377.931069][ T943] usb 4-1: USB disconnect, device number 96 [ 1378.210739][ T28] audit: type=1400 audit(1727206441.967:7362): avc: denied { create } for pid=24031 comm="syz.1.5856" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 1378.261232][ T28] audit: type=1400 audit(1727206441.987:7363): avc: denied { sys_admin } for pid=24031 comm="syz.1.5856" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 1378.323727][ T28] audit: type=1400 audit(1727206442.237:7364): avc: denied { unmount } for pid=23675 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 1378.362930][T24044] loop2: detected capacity change from 0 to 512 [ 1378.398296][T24044] EXT4-fs error (device loop2): ext4_find_inline_data_nolock:164: inode #12: comm syz.2.5860: inline data xattr refers to an external xattr inode [ 1378.414619][T24043] loop4: detected capacity change from 0 to 4096 [ 1378.439708][T24043] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1378.448713][T24044] EXT4-fs error (device loop2): ext4_orphan_get:1401: comm syz.2.5860: couldn't read orphan inode 12 (err -117) [ 1378.468892][T24044] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1378.486011][T24052] loop0: detected capacity change from 0 to 512 [ 1378.500753][T23846] EXT4-fs (loop2): unmounting filesystem. [ 1378.502642][T23675] EXT4-fs (loop4): unmounting filesystem. [ 1378.520235][T24054] fuse: Bad value for 'group_id' [ 1378.528414][ T321] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1378.584829][T24060] device sit0 entered promiscuous mode [ 1378.595102][T24060] device vlan2 entered promiscuous mode [ 1378.620437][T24060] device sit0 left promiscuous mode [ 1379.584350][T24080] loop2: detected capacity change from 0 to 512 [ 1379.594599][T24080] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1379.597465][T24084] loop3: detected capacity change from 0 to 512 [ 1379.627913][T24080] EXT4-fs (loop2): 1 truncate cleaned up [ 1379.633390][T24080] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1379.637550][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 1379.637562][ T28] audit: type=1400 audit(1727206443.567:7366): avc: denied { setattr } for pid=24078 comm="syz.0.5872" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 1379.643002][T24084] EXT4-fs error (device loop3): ext4_find_inline_data_nolock:164: inode #12: comm syz.3.5873: inline data xattr refers to an external xattr inode [ 1379.662954][T24089] fuse: Bad value for 'group_id' [ 1379.759397][T24084] EXT4-fs error (device loop3): ext4_orphan_get:1401: comm syz.3.5873: couldn't read orphan inode 12 (err -117) [ 1379.771646][T24084] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 1379.890570][ T28] audit: type=1400 audit(1727206443.827:7367): avc: denied { append } for pid=84 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=18 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1379.959719][ T28] audit: type=1400 audit(1727206443.847:7368): avc: denied { read } for pid=24078 comm="syz.0.5872" path="/dev/fuse" dev="devtmpfs" ino=93 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 1380.000369][ T28] audit: type=1400 audit(1727206443.857:7369): avc: denied { write } for pid=24078 comm="syz.0.5872" path="/dev/fuse" dev="devtmpfs" ino=93 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 1380.025661][ T28] audit: type=1400 audit(1727206443.907:7370): avc: denied { unmount } for pid=20924 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 1380.052447][T22927] EXT4-fs (loop3): unmounting filesystem. [ 1380.058953][ T28] audit: type=1400 audit(1727206443.917:7371): avc: denied { read write } for pid=23675 comm="syz-executor" name="loop4" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1380.100833][ T28] audit: type=1400 audit(1727206443.917:7372): avc: denied { open } for pid=23675 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1380.157711][ T28] audit: type=1400 audit(1727206443.917:7373): avc: denied { ioctl } for pid=23675 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=118 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1380.176136][T24100] netlink: 'syz.3.5877': attribute type 12 has an invalid length. [ 1380.184136][ T28] audit: type=1400 audit(1727206443.967:7374): avc: denied { unmount } for pid=22927 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 1380.210380][ T28] audit: type=1400 audit(1727206443.977:7375): avc: denied { bpf } for pid=24094 comm="syz.0.5875" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1380.240466][T24102] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5878'. [ 1380.261229][T24104] loop4: detected capacity change from 0 to 512 [ 1380.444268][T23846] EXT4-fs (loop2): unmounting filesystem. [ 1381.430163][ T518] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 1382.310420][T24139] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5889'. [ 1382.325681][T24139] IPv6: NLM_F_CREATE should be specified when creating new route [ 1382.334178][T24139] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1382.341235][T24139] IPv6: NLM_F_CREATE should be set when creating new route [ 1382.348244][T24139] IPv6: NLM_F_CREATE should be set when creating new route [ 1382.406736][ T518] usb 4-1: Using ep0 maxpacket: 16 [ 1382.434188][T24147] loop0: detected capacity change from 0 to 512 [ 1382.453476][T24147] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1382.465159][T24147] EXT4-fs (loop0): 1 truncate cleaned up [ 1382.470688][T24147] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 1382.620624][T24150] netlink: 164 bytes leftover after parsing attributes in process `syz.4.5892'. [ 1382.689129][ T518] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1382.896818][ T518] usb 4-1: New USB device found, idVendor=045e, idProduct=0721, bcdDevice=90.c4 [ 1382.905731][ T518] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1382.913520][ T518] usb 4-1: Product: syz [ 1382.917517][ T518] usb 4-1: Manufacturer: syz [ 1382.921913][ T518] usb 4-1: SerialNumber: syz [ 1382.927375][ T518] usb 4-1: config 0 descriptor?? [ 1383.281234][T24159] loop4: detected capacity change from 0 to 8192 [ 1383.297506][T20924] EXT4-fs (loop0): unmounting filesystem. [ 1383.467083][T24159] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1383.626818][ T518] usb 4-1: Found UVC 0.00 device syz (045e:0721) [ 1383.633130][ T518] usb 4-1: No valid video chain found. [ 1383.639484][ T518] usb 4-1: USB disconnect, device number 97 [ 1384.898742][ T28] kauditd_printk_skb: 76 callbacks suppressed [ 1384.898760][ T28] audit: type=1400 audit(1727206448.237:7452): avc: denied { create } for pid=24174 comm="syz.4.5898" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1384.925360][ T28] audit: type=1400 audit(1727206448.237:7453): avc: denied { setopt } for pid=24174 comm="syz.4.5898" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1384.945393][ T28] audit: type=1400 audit(1727206448.377:7454): avc: denied { bind } for pid=24174 comm="syz.4.5898" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1384.965022][ T28] audit: type=1400 audit(1727206448.397:7455): avc: denied { create } for pid=24174 comm="syz.4.5898" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1384.993808][ T28] audit: type=1400 audit(1727206448.417:7456): avc: denied { mounton } for pid=24174 comm="syz.4.5898" path="/33/file0" dev="tmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1385.019833][ T28] audit: type=1400 audit(1727206448.877:7457): avc: denied { create } for pid=24178 comm="syz.0.5899" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1385.056755][ T28] audit: type=1400 audit(1727206448.927:7458): avc: denied { mount } for pid=24179 comm="syz.3.5900" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 1385.066829][ T60] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 1385.279799][ T28] audit: type=1400 audit(1727206448.937:7459): avc: denied { unmount } for pid=22927 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 1385.300147][ T28] audit: type=1400 audit(1727206449.067:7460): avc: denied { map } for pid=24178 comm="syz.0.5899" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=159 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 1385.324428][ T28] audit: type=1400 audit(1727206449.067:7461): avc: denied { execute } for pid=24178 comm="syz.0.5899" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=159 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 1385.636813][ T60] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1385.647881][ T60] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1385.659536][ T60] usb 3-1: New USB device found, idVendor=04b3, idProduct=3108, bcdDevice= 0.00 [ 1385.668579][ T60] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1385.680170][ T60] usb 3-1: config 0 descriptor?? [ 1385.711202][T24196] netlink: 164 bytes leftover after parsing attributes in process `syz.3.5904'. [ 1385.791499][T24198] loop0: detected capacity change from 0 to 512 [ 1385.798249][T24198] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1385.809469][T24198] EXT4-fs (loop0): 1 truncate cleaned up [ 1385.814962][T24198] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 1386.279309][T24211] loop4: detected capacity change from 0 to 512 [ 1386.287623][T24211] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1386.299063][T24211] EXT4-fs (loop4): 1 truncate cleaned up [ 1386.304538][T24211] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1386.566949][ T60] usbhid 3-1:0.0: can't add hid device: -71 [ 1386.581850][ T60] usbhid: probe of 3-1:0.0 failed with error -71 [ 1386.592569][ T60] usb 3-1: USB disconnect, device number 102 [ 1386.642192][T20924] EXT4-fs (loop0): unmounting filesystem. [ 1387.481625][T23675] EXT4-fs (loop4): unmounting filesystem. [ 1387.587112][T24233] loop2: detected capacity change from 0 to 256 [ 1387.647428][ T321] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1387.815049][T24237] loop4: detected capacity change from 0 to 256 [ 1388.526981][T24242] loop0: detected capacity change from 0 to 512 [ 1388.572392][T24242] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1388.587402][T24242] ext4 filesystem being mounted at /177/file0 supports timestamps until 2038 (0x7fffffff) [ 1388.617687][T20924] EXT4-fs (loop0): unmounting filesystem. [ 1389.225725][T24264] netlink: 164 bytes leftover after parsing attributes in process `syz.0.5921'. [ 1390.093492][T24279] loop2: detected capacity change from 0 to 256 [ 1390.147269][ T321] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1390.455205][ T518] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 1390.506044][T24291] loop2: detected capacity change from 0 to 512 [ 1390.522815][T24291] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1390.531643][T24291] ext4 filesystem being mounted at /26/file0 supports timestamps until 2038 (0x7fffffff) [ 1390.548767][T23846] EXT4-fs (loop2): unmounting filesystem. [ 1390.713934][T24302] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5934'. [ 1390.896793][ T518] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1390.907565][ T518] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1390.917070][ T518] usb 4-1: New USB device found, idVendor=04b3, idProduct=3108, bcdDevice= 0.00 [ 1390.925912][ T518] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1390.951114][ T518] usb 4-1: config 0 descriptor?? [ 1391.311634][T24311] loop0: detected capacity change from 0 to 2048 [ 1391.328205][T24311] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 1391.345790][T20924] EXT4-fs (loop0): unmounting filesystem. [ 1391.716764][ T518] usbhid 4-1:0.0: can't add hid device: -71 [ 1391.722567][ T518] usbhid: probe of 4-1:0.0 failed with error -71 [ 1391.739128][ T518] usb 4-1: USB disconnect, device number 98 [ 1392.025598][ T28] kauditd_printk_skb: 68 callbacks suppressed [ 1392.025611][ T28] audit: type=1400 audit(1727206455.957:7530): avc: denied { mounton } for pid=24323 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 1392.035876][T24326] loop4: detected capacity change from 0 to 256 [ 1392.086736][ T28] audit: type=1400 audit(1727206455.997:7531): avc: denied { read } for pid=24323 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1392.111938][ T28] audit: type=1400 audit(1727206455.997:7532): avc: denied { open } for pid=24323 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1392.138190][ T28] audit: type=1400 audit(1727206455.997:7533): avc: denied { mounton } for pid=24323 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 1392.161410][ T28] audit: type=1400 audit(1727206455.997:7534): avc: denied { module_request } for pid=24323 comm="syz-executor" kmod="netdev-nr1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 1392.253458][T24323] bridge0: port 1(bridge_slave_0) entered blocking state [ 1392.260451][T24323] bridge0: port 1(bridge_slave_0) entered disabled state [ 1392.262947][ T28] audit: type=1400 audit(1727206456.197:7535): avc: denied { create } for pid=24331 comm="syz.0.5942" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1392.268211][T24323] device bridge_slave_0 entered promiscuous mode [ 1392.293511][T24323] bridge0: port 2(bridge_slave_1) entered blocking state [ 1392.300672][T24323] bridge0: port 2(bridge_slave_1) entered disabled state [ 1393.027995][T24323] device bridge_slave_1 entered promiscuous mode [ 1393.111343][T24346] loop4: detected capacity change from 0 to 256 [ 1393.120224][ T28] audit: type=1400 audit(1727206457.057:7536): avc: denied { create } for pid=24345 comm="syz.4.5947" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1393.164277][T24349] loop2: detected capacity change from 0 to 2048 [ 1393.198004][T24349] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1393.209946][ T28] audit: type=1400 audit(1727206457.147:7537): avc: denied { create } for pid=24323 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1393.231634][ T4644] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1393.239381][ T4644] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1393.339563][ T943] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1393.350260][ T943] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1393.359744][ T943] bridge0: port 1(bridge_slave_0) entered blocking state [ 1393.366594][ T943] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1393.375072][ T943] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1393.384538][ T943] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1393.393808][ T943] bridge0: port 2(bridge_slave_1) entered blocking state [ 1393.400672][ T943] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1393.413836][ T28] audit: type=1400 audit(1727206457.147:7538): avc: denied { write } for pid=24323 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1393.434482][ T28] audit: type=1400 audit(1727206457.147:7539): avc: denied { read } for pid=24323 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1393.435812][T23846] EXT4-fs (loop2): unmounting filesystem. [ 1393.467133][ T4644] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1393.512905][ T518] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1393.520983][ T518] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1393.528730][ T518] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1393.536563][ T518] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1393.549469][ T4644] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1393.557769][ T4644] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1393.571853][ T518] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1393.579684][ T518] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1393.587080][ T518] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1393.595029][T24323] device veth0_vlan entered promiscuous mode [ 1393.606435][ T518] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1393.615451][T24323] device veth1_macvtap entered promiscuous mode [ 1393.624489][ T4644] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1393.632586][ T4644] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1393.641646][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1393.650014][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1393.675389][T24358] loop1: detected capacity change from 0 to 256 [ 1393.684066][T24358] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d) [ 1393.887869][T19478] device bridge_slave_0 left promiscuous mode [ 1393.893945][T19478] bridge0: port 1(bridge_slave_0) entered disabled state [ 1393.902443][T19478] device veth1_macvtap left promiscuous mode [ 1393.908888][T19478] device veth0_vlan left promiscuous mode [ 1394.207837][T24363] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1394.233199][T24370] loop4: detected capacity change from 0 to 256 [ 1394.267084][ T314] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1394.919668][T24384] loop1: detected capacity change from 0 to 2048 [ 1394.928734][T24384] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1394.943036][T24323] EXT4-fs (loop1): unmounting filesystem. [ 1394.948740][ T1492] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 1394.967864][T24389] loop1: detected capacity change from 0 to 512 [ 1394.976138][T24389] EXT4-fs error (device loop1): ext4_find_inline_data_nolock:164: inode #12: comm syz.1.5959: inline data xattr refers to an external xattr inode [ 1394.991140][T24389] EXT4-fs error (device loop1): ext4_orphan_get:1401: comm syz.1.5959: couldn't read orphan inode 12 (err -117) [ 1395.003131][T24389] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1395.018881][T24323] EXT4-fs (loop1): unmounting filesystem. [ 1395.086734][ T312] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 1395.097572][T24394] loop4: detected capacity change from 0 to 256 [ 1395.456642][ T1492] usb 3-1: device descriptor read/64, error -71 [ 1395.827008][ T312] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1395.837767][ T312] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1395.846734][ T1492] usb 3-1: device descriptor read/64, error -71 [ 1395.847396][ T312] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1395.862308][ T312] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1395.875392][ T312] usb 4-1: config 0 descriptor?? [ 1395.897228][T24401] IPv6: NLM_F_CREATE should be specified when creating new route [ 1395.904801][T24401] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1395.911817][T24401] IPv6: NLM_F_CREATE should be set when creating new route [ 1395.918848][T24401] IPv6: NLM_F_CREATE should be set when creating new route [ 1396.051625][T24403] loop1: detected capacity change from 0 to 40427 [ 1396.058444][T24403] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 1396.066055][T24403] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1396.075489][T24403] F2FS-fs (loop1): invalid crc value [ 1396.082244][T24403] F2FS-fs (loop1): Found nat_bits in checkpoint [ 1396.106521][T24403] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 1396.113566][T24403] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 1396.166792][ T1492] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 1396.356907][ T312] hid (null): bogus close delimiter [ 1396.436739][ T1492] usb 3-1: device descriptor read/64, error -71 [ 1396.787942][T19478] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 1396.797279][T19478] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 1396.826754][ T1492] usb 3-1: device descriptor read/64, error -71 [ 1396.902985][T24417] loop1: detected capacity change from 0 to 256 [ 1396.911663][T24417] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d) [ 1397.110555][ T1492] usb usb3-port1: attempt power cycle [ 1397.296784][ T312] uclogic 0003:256C:006D.00C9: interface is invalid, ignoring [ 1397.499668][ T312] usb 4-1: USB disconnect, device number 99 [ 1397.526743][ T1492] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 1397.697456][ T1492] usb 3-1: device descriptor read/8, error -71 [ 1397.807830][T24429] loop1: detected capacity change from 0 to 2048 [ 1397.821018][T24429] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1397.848942][T24323] EXT4-fs (loop1): unmounting filesystem. [ 1397.877951][T24434] loop1: detected capacity change from 0 to 512 [ 1397.918414][T24434] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1397.927226][T24434] ext4 filesystem being mounted at /11/file1 supports timestamps until 2038 (0x7fffffff) [ 1397.942067][ T28] kauditd_printk_skb: 13 callbacks suppressed [ 1397.942081][ T28] audit: type=1400 audit(1727206461.877:7553): avc: denied { mounton } for pid=24433 comm="syz.1.5970" path="/11/file1/bus" dev="loop1" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 1397.970923][ T28] audit: type=1400 audit(1727206461.877:7554): avc: denied { write } for pid=24433 comm="syz.1.5970" name="bus" dev="loop1" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 1397.992621][ T1492] usb 3-1: device descriptor read/8, error -71 [ 1397.993702][ T28] audit: type=1400 audit(1727206461.877:7555): avc: denied { add_name } for pid=24433 comm="syz.1.5970" name="work" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 1398.020804][T24323] EXT4-fs (loop1): unmounting filesystem. [ 1398.022769][ T28] audit: type=1400 audit(1727206461.877:7556): avc: denied { setattr } for pid=24433 comm="syz.1.5970" name="work" dev="loop1" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 1398.048991][ T28] audit: type=1400 audit(1727206461.877:7557): avc: denied { remove_name } for pid=24433 comm="syz.1.5970" name="#5d" dev="loop1" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 1398.067262][T24440] loop1: detected capacity change from 0 to 256 [ 1398.077424][ T28] audit: type=1400 audit(1727206461.877:7558): avc: denied { rename } for pid=24433 comm="syz.1.5970" name="#5d" dev="loop1" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 1398.100195][ T28] audit: type=1400 audit(1727206461.877:7559): avc: denied { unlink } for pid=24433 comm="syz.1.5970" name="#5d" dev="loop1" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1398.122997][ T28] audit: type=1400 audit(1727206461.877:7560): avc: denied { unlink } for pid=24433 comm="syz.1.5970" name="#5e" dev="loop1" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 1398.147345][ T28] audit: type=1400 audit(1727206461.907:7561): avc: denied { remove_name } for pid=24323 comm="syz-executor" name="lost+found" dev="loop1" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1398.173866][ T28] audit: type=1400 audit(1727206461.907:7562): avc: denied { rmdir } for pid=24323 comm="syz-executor" name="lost+found" dev="loop1" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1398.296894][ T1492] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 1398.476795][ T1492] usb 3-1: device descriptor read/8, error -71 [ 1398.587318][T24448] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1398.603407][T24450] loop4: detected capacity change from 0 to 256 [ 1398.948025][ T1492] usb 3-1: device descriptor read/8, error -71 [ 1399.061452][T24458] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5975'. [ 1399.076977][ T1492] usb usb3-port1: unable to enumerate USB device [ 1400.602972][T24471] loop1: detected capacity change from 0 to 256 [ 1401.027895][T24474] loop4: detected capacity change from 0 to 2048 [ 1401.033198][T24476] loop3: detected capacity change from 0 to 512 [ 1401.067272][ T321] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1401.071642][T24474] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1401.110242][T23675] EXT4-fs (loop4): unmounting filesystem. [ 1401.133656][T24483] device sit0 entered promiscuous mode [ 1401.139004][T24483] device vlan2 entered promiscuous mode [ 1401.144879][T24483] device sit0 left promiscuous mode [ 1401.306729][ T60] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 1401.546722][ T60] usb 2-1: Using ep0 maxpacket: 16 [ 1401.666817][ T60] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1401.677766][ T60] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1401.687344][ T60] usb 2-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice= 0.00 [ 1401.696187][ T60] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1401.704772][ T60] usb 2-1: config 0 descriptor?? [ 1402.187557][ T60] apple 0003:05AC:0247.00CA: unknown main item tag 0x0 [ 1402.196434][ T60] apple 0003:05AC:0247.00CA: unknown main item tag 0x0 [ 1402.203209][ T60] apple 0003:05AC:0247.00CA: item fetching failed at offset 2/160 [ 1402.210933][ T60] apple 0003:05AC:0247.00CA: parse failed [ 1402.216488][ T60] apple: probe of 0003:05AC:0247.00CA failed with error -22 [ 1402.388430][ T518] usb 2-1: USB disconnect, device number 78 [ 1402.456760][ T6] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 1402.655511][T24497] bridge0: port 1(bridge_slave_0) entered blocking state [ 1402.662560][T24497] bridge0: port 1(bridge_slave_0) entered disabled state [ 1402.670268][T24497] device bridge_slave_0 entered promiscuous mode [ 1402.677303][T24497] bridge0: port 2(bridge_slave_1) entered blocking state [ 1402.684223][T24497] bridge0: port 2(bridge_slave_1) entered disabled state [ 1402.691734][T24497] device bridge_slave_1 entered promiscuous mode [ 1402.736749][ T6] usb 5-1: device descriptor read/64, error -71 [ 1402.794268][T24497] bridge0: port 2(bridge_slave_1) entered blocking state [ 1402.801152][T24497] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1402.808255][T24497] bridge0: port 1(bridge_slave_0) entered blocking state [ 1402.815012][T24497] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1402.840683][ T943] bridge0: port 1(bridge_slave_0) entered disabled state [ 1402.849584][ T943] bridge0: port 2(bridge_slave_1) entered disabled state [ 1402.857239][ T943] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1402.864573][ T943] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1402.869713][T24502] loop3: detected capacity change from 0 to 40427 [ 1402.881026][T24502] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 1402.888689][T24502] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 1402.898703][T24502] F2FS-fs (loop3): invalid crc value [ 1402.905003][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1402.913371][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 1402.915378][T24502] F2FS-fs (loop3): Found nat_bits in checkpoint [ 1402.920239][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1402.967119][T24502] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 1402.974044][T24502] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 1402.979072][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1402.989333][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 1402.996171][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1403.003425][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1403.026971][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1403.046571][T24497] device veth0_vlan entered promiscuous mode [ 1403.070058][ T943] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1403.079173][ T943] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1403.097417][ T943] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1403.104718][ T943] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1403.119616][T24511] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5989'. [ 1403.139202][ T943] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1403.149289][T24497] device veth1_macvtap entered promiscuous mode [ 1403.160678][ T943] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1403.175556][ T943] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1403.176746][ T6] usb 5-1: device descriptor read/64, error -71 [ 1403.203196][T24514] loop0: detected capacity change from 0 to 256 [ 1403.567471][ T3283] device bridge_slave_0 left promiscuous mode [ 1403.573441][ T3283] bridge0: port 1(bridge_slave_0) entered disabled state [ 1403.581530][ T3283] device veth1_macvtap left promiscuous mode [ 1403.587579][ T3283] device veth0_vlan left promiscuous mode [ 1403.617866][T19478] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 1403.627405][T19478] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 1403.630016][ T6] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 1403.693816][ T28] kauditd_printk_skb: 40 callbacks suppressed [ 1403.693832][ T28] audit: type=1400 audit(1727206467.627:7603): avc: denied { setopt } for pid=24517 comm="syz.3.5990" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1403.766874][T24521] loop1: detected capacity change from 0 to 512 [ 1403.827225][T24524] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5990'. [ 1403.870223][T24521] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1403.879507][T24521] ext4 filesystem being mounted at /17/file0 supports timestamps until 2038 (0x7fffffff) [ 1403.894575][ T28] audit: type=1400 audit(1727206467.827:7604): avc: denied { write } for pid=84 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1403.976248][ T28] audit: type=1400 audit(1727206467.827:7605): avc: denied { remove_name } for pid=84 comm="syslogd" name="messages" dev="tmpfs" ino=18 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1403.999428][ T28] audit: type=1400 audit(1727206467.827:7606): avc: denied { rename } for pid=84 comm="syslogd" name="messages" dev="tmpfs" ino=18 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1404.021534][ T28] audit: type=1400 audit(1727206467.827:7607): avc: denied { add_name } for pid=84 comm="syslogd" name="messages.0" dev="tmpfs" ino=17 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1404.081405][ T28] audit: type=1400 audit(1727206467.827:7608): avc: denied { unlink } for pid=84 comm="syslogd" name="messages.0" dev="tmpfs" ino=17 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1404.120077][ T28] audit: type=1400 audit(1727206467.827:7609): avc: denied { create } for pid=84 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1404.204314][ T6] usb 5-1: device descriptor read/64, error -71 [ 1404.213459][ T28] audit: type=1400 audit(1727206468.147:7610): avc: denied { create } for pid=24529 comm="syz.0.5992" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 1404.265452][T24530] xt_hashlimit: size too large, truncated to 1048576 [ 1404.478274][T24536] bridge0: port 1(bridge_slave_0) entered blocking state [ 1404.485163][T24536] bridge0: port 1(bridge_slave_0) entered disabled state [ 1404.493248][T24536] device bridge_slave_0 entered promiscuous mode [ 1404.501315][T24536] bridge0: port 2(bridge_slave_1) entered blocking state [ 1404.503978][T24541] loop0: detected capacity change from 0 to 8192 [ 1404.514670][T24536] bridge0: port 2(bridge_slave_1) entered disabled state [ 1404.518137][T24541] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1404.523030][T24536] device bridge_slave_1 entered promiscuous mode [ 1404.614460][T24544] loop3: detected capacity change from 0 to 512 [ 1404.620728][ T6] usb 5-1: device descriptor read/64, error -71 [ 1404.629346][T24323] EXT4-fs (loop1): unmounting filesystem. [ 1404.632026][T24536] bridge0: port 2(bridge_slave_1) entered blocking state [ 1404.641295][T24544] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1404.641800][T24536] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1404.658546][T24536] bridge0: port 1(bridge_slave_0) entered blocking state [ 1404.659857][T24544] EXT4-fs (loop3): 1 truncate cleaned up [ 1404.665291][T24536] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1404.695650][ T943] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1404.705386][ T943] bridge0: port 1(bridge_slave_0) entered disabled state [ 1404.727683][ T943] bridge0: port 2(bridge_slave_1) entered disabled state [ 1404.747020][T24544] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 1404.888912][ T6] usb usb5-port1: attempt power cycle [ 1404.921606][T24536] device veth0_vlan entered promiscuous mode [ 1404.934956][T24536] device veth1_macvtap entered promiscuous mode [ 1404.969468][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1404.986385][T24555] loop2: detected capacity change from 0 to 512 [ 1405.008858][T24555] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1405.147402][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1405.160398][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1405.170406][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1405.180167][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1405.188762][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1405.302931][ T28] audit: type=1400 audit(1727206469.237:7611): avc: denied { mount } for pid=24554 comm="syz.2.5998" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 1405.499038][ T6] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 1405.508612][T24555] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038 (0x7fffffff) [ 1405.515488][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1405.528315][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1405.536455][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 1405.537000][T22927] EXT4-fs (loop3): unmounting filesystem. [ 1405.543419][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1405.554392][ T28] audit: type=1400 audit(1727206469.237:7612): avc: denied { read } for pid=84 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 1405.556431][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1405.589765][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 1405.596710][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1405.613098][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1405.625961][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1405.696758][ T6] usb 5-1: device descriptor read/8, error -71 [ 1406.008269][T24574] loop1: detected capacity change from 0 to 512 [ 1406.012251][T24575] device gretap0 entered promiscuous mode [ 1406.032863][T24575] device vlan2 entered promiscuous mode [ 1406.038928][T24574] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1406.051143][T24575] device gretap0 left promiscuous mode [ 1406.058871][T24574] EXT4-fs (loop1): 1 truncate cleaned up [ 1406.066209][T24574] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1406.152969][T24536] EXT4-fs (loop2): unmounting filesystem. [ 1406.158686][ T6] usb 5-1: device descriptor read/8, error -71 [ 1406.747882][ T10] device bridge_slave_1 left promiscuous mode [ 1406.753922][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 1406.796142][ T6] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 1406.798088][T24323] EXT4-fs (loop1): unmounting filesystem. [ 1406.824972][ T10] device bridge_slave_0 left promiscuous mode [ 1406.832874][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 1406.844227][ T10] device veth1_macvtap left promiscuous mode [ 1406.850415][ T10] device veth0_vlan left promiscuous mode [ 1407.007836][ T6] usb 5-1: device descriptor read/8, error -71 [ 1407.189707][T24593] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6006'. [ 1407.220421][T24597] loop1: detected capacity change from 0 to 40427 [ 1407.239721][T24597] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 1407.266481][T24597] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1407.281279][T24597] F2FS-fs (loop1): invalid crc value [ 1407.348840][T24597] F2FS-fs (loop1): Found nat_bits in checkpoint [ 1407.401064][T24597] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 1407.408007][T24597] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 1407.476818][ T6] usb 5-1: device descriptor read/8, error -71 [ 1407.522601][T24609] loop0: detected capacity change from 0 to 8192 [ 1407.552054][T24612] loop3: detected capacity change from 0 to 512 [ 1407.554428][T24609] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1407.570061][T24612] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1407.606960][ T6] usb usb5-port1: unable to enumerate USB device [ 1407.638878][T24612] EXT4-fs (loop3): 1 truncate cleaned up [ 1407.644928][T24612] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 1408.657504][T22927] EXT4-fs (loop3): unmounting filesystem. [ 1408.730936][ T28] kauditd_printk_skb: 56 callbacks suppressed [ 1408.730954][ T28] audit: type=1400 audit(1727206472.667:7669): avc: denied { bpf } for pid=24626 comm="syz.3.6014" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1408.759158][ T28] audit: type=1400 audit(1727206472.667:7670): avc: denied { map_create } for pid=24626 comm="syz.3.6014" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1408.760331][ T317] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 1408.849789][T24631] loop0: detected capacity change from 0 to 512 [ 1408.858525][ T28] audit: type=1400 audit(1727206472.667:7671): avc: denied { map_read map_write } for pid=24626 comm="syz.3.6014" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1408.912653][ T28] audit: type=1400 audit(1727206472.697:7672): avc: denied { prog_load } for pid=24625 comm="syz.0.6013" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1408.936431][T24631] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1408.975530][ T28] audit: type=1400 audit(1727206472.697:7673): avc: denied { perfmon } for pid=24625 comm="syz.0.6013" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1408.996547][ T28] audit: type=1400 audit(1727206472.697:7674): avc: denied { prog_run } for pid=24625 comm="syz.0.6013" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1408.999329][ T317] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 1409.015959][ T28] audit: type=1400 audit(1727206472.847:7675): avc: denied { mounton } for pid=24630 comm="syz.0.6017" path="/8/bus" dev="tmpfs" ino=60 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1409.025030][T24631] EXT4-fs (loop0): 1 truncate cleaned up [ 1409.046557][ T28] audit: type=1400 audit(1727206472.917:7676): avc: denied { read } for pid=24632 comm="syz.3.6016" name="kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1409.064797][T24631] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 1409.075383][ T28] audit: type=1400 audit(1727206472.917:7677): avc: denied { open } for pid=24632 comm="syz.3.6016" path="/dev/kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1409.121986][ T28] audit: type=1400 audit(1727206472.917:7678): avc: denied { ioctl } for pid=24632 comm="syz.3.6016" path="/dev/kvm" dev="devtmpfs" ino=83 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1409.189741][T24640] loop3: detected capacity change from 0 to 256 [ 1409.769902][T24497] EXT4-fs (loop0): unmounting filesystem. [ 1409.908399][T24658] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6021'. [ 1410.496763][ T4644] usb 2-1: new full-speed USB device number 79 using dummy_hcd [ 1410.504369][T24666] loop2: detected capacity change from 0 to 8192 [ 1410.511829][T24666] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1410.926857][ T4644] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1410.937834][ T4644] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1410.947438][ T4644] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1410.960026][ T4644] usb 2-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00 [ 1410.968867][ T4644] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1410.977848][ T4644] usb 2-1: config 0 descriptor?? [ 1411.033208][T24675] syz.3.6026[24675] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1411.033255][T24675] syz.3.6026[24675] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1411.066795][T24677] fuse: Unknown parameter 'user_i00000000000000000000' [ 1411.447557][ T4644] ntrig 0003:1B96:000A.00CB: unknown main item tag 0x0 [ 1411.454258][ T4644] ntrig 0003:1B96:000A.00CB: unknown main item tag 0x0 [ 1411.461011][ T1492] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 1411.468509][ T4644] ntrig 0003:1B96:000A.00CB: unknown main item tag 0x0 [ 1411.475152][ T4644] ntrig 0003:1B96:000A.00CB: unknown main item tag 0x0 [ 1411.482144][ T4644] ntrig 0003:1B96:000A.00CB: unknown main item tag 0x0 [ 1411.489594][ T4644] ntrig 0003:1B96:000A.00CB: hidraw0: USB HID v0.00 Device [HID 1b96:000a] on usb-dummy_hcd.1-1/input0 [ 1411.697587][T24689] loop0: detected capacity change from 0 to 256 [ 1411.716740][ T1492] usb 4-1: Using ep0 maxpacket: 16 [ 1411.836763][ T1492] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1411.847624][ T1492] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1411.862529][ T1492] usb 4-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice= 0.00 [ 1411.871458][ T1492] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1411.880100][ T943] usb 2-1: USB disconnect, device number 79 [ 1411.886646][ T1492] usb 4-1: config 0 descriptor?? [ 1412.297804][T24694] loop2: detected capacity change from 0 to 40427 [ 1412.316783][T24694] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 1412.324596][T24694] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 1412.336392][T24694] F2FS-fs (loop2): invalid crc value [ 1412.342999][T24694] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1412.349960][ T1492] apple 0003:05AC:0247.00CC: unknown main item tag 0x0 [ 1412.356650][ T1492] apple 0003:05AC:0247.00CC: unknown main item tag 0x0 [ 1412.370173][ T1492] apple 0003:05AC:0247.00CC: item fetching failed at offset 2/160 [ 1412.378837][ T1492] apple 0003:05AC:0247.00CC: parse failed [ 1412.385993][T24701] loop1: detected capacity change from 0 to 256 [ 1412.392136][ T1492] apple: probe of 0003:05AC:0247.00CC failed with error -22 [ 1412.419282][T24701] exfat: Deprecated parameter 'utf8' [ 1412.423389][T24694] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 1412.426469][T24701] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 1412.433170][T24694] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 1412.479160][T24699] bridge0: port 1(bridge_slave_0) entered blocking state [ 1412.486151][T24699] bridge0: port 1(bridge_slave_0) entered disabled state [ 1412.493759][T24699] device bridge_slave_0 entered promiscuous mode [ 1412.501159][T24699] bridge0: port 2(bridge_slave_1) entered blocking state [ 1412.508500][T24699] bridge0: port 2(bridge_slave_1) entered disabled state [ 1412.515968][T24699] device bridge_slave_1 entered promiscuous mode [ 1412.552536][ T1510] usb 4-1: USB disconnect, device number 100 [ 1412.620268][T24707] xt_TCPMSS: Only works on TCP SYN packets [ 1412.818660][T24709] loop0: detected capacity change from 0 to 512 [ 1412.835278][T24709] EXT4-fs error (device loop0): ext4_find_inline_data_nolock:164: inode #12: comm syz.0.6036: inline data xattr refers to an external xattr inode [ 1412.850141][T24709] EXT4-fs error (device loop0): ext4_orphan_get:1401: comm syz.0.6036: couldn't read orphan inode 12 (err -117) [ 1412.862228][T24709] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 1412.881332][T24497] EXT4-fs (loop0): unmounting filesystem. [ 1412.909406][T24699] bridge0: port 2(bridge_slave_1) entered blocking state [ 1412.916305][T24699] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1412.923402][T24699] bridge0: port 1(bridge_slave_0) entered blocking state [ 1412.930165][T24699] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1412.954602][ T602] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1412.962019][ T602] bridge0: port 1(bridge_slave_0) entered disabled state [ 1412.969570][ T602] bridge0: port 2(bridge_slave_1) entered disabled state [ 1412.980889][ T602] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1412.989368][ T602] bridge0: port 1(bridge_slave_0) entered blocking state [ 1412.996199][ T602] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1413.285480][T24699] device veth0_vlan entered promiscuous mode [ 1413.295522][ T1510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1413.305030][ T1510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1413.313191][ T1510] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1413.322068][ T1510] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1413.329432][ T1510] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1413.332868][T24721] loop1: detected capacity change from 0 to 512 [ 1413.338708][ T1510] bridge0: port 2(bridge_slave_1) entered blocking state [ 1413.350189][ T1510] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1413.357742][ T1510] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1413.358633][ T10] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 1413.365598][ T1510] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1413.386375][ T10] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 1413.400797][T24719] fuse: Unknown parameter 'user_i00000000000000000000' [ 1413.400933][ T1510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1413.415667][ T1510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1413.428208][T24699] device veth1_macvtap entered promiscuous mode [ 1413.445202][T24721] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1413.454683][ T943] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1413.462516][ T943] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1413.478062][ T943] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1413.496822][T24721] ext4 filesystem being mounted at /25/file1 supports timestamps until 2038 (0x7fffffff) [ 1413.510157][ T943] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1413.532691][ T943] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1413.554514][ T317] device bridge_slave_1 left promiscuous mode [ 1413.560978][ T317] bridge0: port 2(bridge_slave_1) entered disabled state [ 1413.568394][ T317] device bridge_slave_0 left promiscuous mode [ 1413.574380][ T317] bridge0: port 1(bridge_slave_0) entered disabled state [ 1413.582621][ T317] device veth1_macvtap left promiscuous mode [ 1413.588674][ T317] device veth0_vlan left promiscuous mode [ 1413.616658][T24323] EXT4-fs (loop1): unmounting filesystem. [ 1413.958526][T24734] device syzkaller0 entered promiscuous mode [ 1414.018040][T24740] loop0: detected capacity change from 0 to 256 [ 1414.074414][T24742] loop4: detected capacity change from 0 to 512 [ 1414.084126][T24742] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1414.095058][T24742] EXT4-fs (loop4): 1 truncate cleaned up [ 1414.100661][T24742] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1414.439161][ T28] kauditd_printk_skb: 58 callbacks suppressed [ 1414.439184][ T28] audit: type=1400 audit(1727206478.377:7737): avc: denied { read write } for pid=24536 comm="syz-executor" name="loop2" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1414.487158][ T28] audit: type=1400 audit(1727206478.407:7738): avc: denied { append } for pid=84 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=19 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1414.510746][ T28] audit: type=1400 audit(1727206478.407:7739): avc: denied { open } for pid=24536 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1414.536631][ T28] audit: type=1400 audit(1727206478.407:7740): avc: denied { ioctl } for pid=24536 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=116 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1414.562289][ T28] audit: type=1400 audit(1727206478.417:7741): avc: denied { bpf } for pid=24748 comm="syz.2.6047" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1414.592974][ T28] audit: type=1400 audit(1727206478.417:7742): avc: denied { map_create } for pid=24748 comm="syz.2.6047" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1414.622145][ T28] audit: type=1400 audit(1727206478.417:7743): avc: denied { map_read map_write } for pid=24748 comm="syz.2.6047" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1414.662080][ T28] audit: type=1400 audit(1727206478.417:7744): avc: denied { prog_load } for pid=24748 comm="syz.2.6047" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1414.681104][ T28] audit: type=1400 audit(1727206478.417:7745): avc: denied { perfmon } for pid=24748 comm="syz.2.6047" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1414.701824][ T28] audit: type=1400 audit(1727206478.467:7746): avc: denied { read write } for pid=24750 comm="syz.2.6048" name="raw-gadget" dev="devtmpfs" ino=166 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1414.761155][T24752] loop3: detected capacity change from 0 to 40427 [ 1414.773922][T24752] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 1414.781597][T24752] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 1414.790451][T24752] F2FS-fs (loop3): invalid crc value [ 1414.797489][T24752] F2FS-fs (loop3): Found nat_bits in checkpoint [ 1414.806856][ T1492] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 1414.832520][T24752] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 1414.839445][T24752] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 1414.894725][T24759] fuse: Unknown parameter 'user_id00000000000000000000' [ 1414.937472][T24699] EXT4-fs (loop4): unmounting filesystem. [ 1414.965672][T24767] input: syz0 as /devices/virtual/input/input62 [ 1415.023307][T24769] loop4: detected capacity change from 0 to 8192 [ 1415.030625][T24769] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1415.075823][ T1492] usb 3-1: Using ep0 maxpacket: 16 [ 1415.198951][ T1492] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1415.218923][ T1492] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1415.240065][ T1492] usb 3-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice= 0.00 [ 1415.261700][ T1492] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1415.329387][ T1492] usb 3-1: config 0 descriptor?? [ 1415.403033][ T10] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 1415.412607][ T10] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 1415.537048][T24779] device erspan0 entered promiscuous mode [ 1415.542674][T24779] device vlan2 entered promiscuous mode [ 1415.548606][T24779] device erspan0 left promiscuous mode [ 1415.805191][ T1492] apple 0003:05AC:0247.00CD: unknown main item tag 0x0 [ 1415.893646][ T1492] apple 0003:05AC:0247.00CD: unknown main item tag 0x0 [ 1415.902612][ T1492] apple 0003:05AC:0247.00CD: item fetching failed at offset 2/160 [ 1415.910703][ T1492] apple 0003:05AC:0247.00CD: parse failed [ 1415.930505][ T1492] apple: probe of 0003:05AC:0247.00CD failed with error -22 [ 1416.000687][ T1492] usb 3-1: USB disconnect, device number 107 [ 1416.510442][T24794] fuse: Unknown parameter 'user_id00000000000000000000' [ 1416.547650][T24798] loop2: detected capacity change from 0 to 512 [ 1416.554701][T24798] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1416.566412][T24798] EXT4-fs (loop2): 1 truncate cleaned up [ 1416.572193][T24798] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1416.933054][T24811] loop0: detected capacity change from 0 to 256 [ 1416.950811][T24812] loop4: detected capacity change from 0 to 512 [ 1416.986380][T24812] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1416.995697][T24812] ext4 filesystem being mounted at /6/file1 supports timestamps until 2038 (0x7fffffff) [ 1417.032699][T24699] EXT4-fs (loop4): unmounting filesystem. [ 1417.985999][T24536] EXT4-fs (loop2): unmounting filesystem. [ 1418.015960][T24828] fuse: Unknown parameter 'user_id00000000000000000000' [ 1418.159454][T24836] loop2: detected capacity change from 0 to 8192 [ 1418.175967][T24836] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1418.583339][T24852] netlink: 'syz.1.6078': attribute type 12 has an invalid length. [ 1418.856743][ T943] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 1418.867125][T24854] loop0: detected capacity change from 0 to 512 [ 1418.888319][T24854] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1418.897425][T24854] ext4 filesystem being mounted at /22/file0 supports timestamps until 2038 (0x7fffffff) [ 1418.931356][T24858] loop2: detected capacity change from 0 to 512 [ 1418.953462][T24497] EXT4-fs (loop0): unmounting filesystem. [ 1418.956907][T24858] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1418.993920][T24865] loop0: detected capacity change from 0 to 256 [ 1419.008266][T24858] EXT4-fs (loop2): 1 truncate cleaned up [ 1419.018560][T24858] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1420.256766][ T943] usb 2-1: Using ep0 maxpacket: 16 [ 1420.513255][ T28] kauditd_printk_skb: 141 callbacks suppressed [ 1420.513278][ T28] audit: type=1400 audit(1727206484.447:7888): avc: denied { ioctl } for pid=24851 comm="syz.1.6078" path="/dev/raw-gadget" dev="devtmpfs" ino=166 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1420.639596][T24877] loop4: detected capacity change from 0 to 512 [ 1420.678344][ T28] audit: type=1400 audit(1727206484.497:7889): avc: denied { read write } for pid=24699 comm="syz-executor" name="loop4" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1420.703882][T24536] EXT4-fs (loop2): unmounting filesystem. [ 1420.711975][ T28] audit: type=1400 audit(1727206484.497:7890): avc: denied { read write } for pid=24497 comm="syz-executor" name="loop0" dev="devtmpfs" ino=114 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1420.739640][T24879] fuse: Bad value for 'fd' [ 1420.741619][ T28] audit: type=1400 audit(1727206484.507:7893): avc: denied { append } for pid=84 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=19 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1420.766318][ T943] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1420.772975][T24877] EXT4-fs error (device loop4): ext4_find_inline_data_nolock:164: inode #12: comm syz.4.6086: inline data xattr refers to an external xattr inode [ 1420.790916][ T28] audit: type=1400 audit(1727206484.497:7891): avc: denied { open } for pid=24497 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=114 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1420.795398][T24877] EXT4-fs error (device loop4): ext4_orphan_get:1401: comm syz.4.6086: couldn't read orphan inode 12 (err -117) [ 1420.827175][T24877] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1420.835542][ T28] audit: type=1400 audit(1727206484.497:7892): avc: denied { open } for pid=24699 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1420.835568][ T28] audit: type=1400 audit(1727206484.507:7895): avc: denied { ioctl } for pid=24497 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=114 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1420.835589][ T28] audit: type=1400 audit(1727206484.507:7894): avc: denied { ioctl } for pid=24699 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=118 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1420.835607][ T28] audit: type=1400 audit(1727206484.587:7896): avc: denied { bpf } for pid=24878 comm="syz.0.6085" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1420.835623][ T28] audit: type=1400 audit(1727206484.587:7897): avc: denied { map_create } for pid=24878 comm="syz.0.6085" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1420.946772][ T943] usb 2-1: New USB device found, idVendor=045e, idProduct=0721, bcdDevice=90.c4 [ 1420.990687][T24699] EXT4-fs (loop4): unmounting filesystem. [ 1421.030057][T24893] loop4: detected capacity change from 0 to 512 [ 1421.058321][ T943] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1421.066396][ T943] usb 2-1: Product: syz [ 1421.070451][ T943] usb 2-1: Manufacturer: syz [ 1421.074829][ T943] usb 2-1: SerialNumber: syz [ 1421.080109][T24890] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6089'. [ 1421.093868][ T943] usb 2-1: config 0 descriptor?? [ 1421.176921][T24895] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6088'. [ 1421.188818][T24895] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6088'. [ 1421.346612][T24897] loop2: detected capacity change from 0 to 8192 [ 1421.353915][T24897] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1421.956232][T24906] loop4: detected capacity change from 0 to 512 [ 1421.971083][T24903] 9pnet_fd: Insufficient options for proto=fd [ 1421.979755][T24908] loop1: detected capacity change from 0 to 256 [ 1421.993306][T24906] EXT4-fs (loop4): Test dummy encryption mode enabled [ 1422.001959][T24908] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d) [ 1422.016783][ T943] usb 2-1: Found UVC 0.00 device syz (045e:0721) [ 1422.026508][ T943] usb 2-1: No valid video chain found. [ 1422.102657][T24906] EXT4-fs error (device loop4): __ext4_iget:5046: inode #11: block 1: comm syz.4.6093: invalid block [ 1422.113625][T24906] EXT4-fs error (device loop4): ext4_orphan_get:1401: comm syz.4.6093: couldn't read orphan inode 11 (err -117) [ 1422.114212][ T943] usb 2-1: USB disconnect, device number 80 [ 1422.132643][T24906] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1423.052219][T24925] loop0: detected capacity change from 0 to 256 [ 1423.155230][T24925] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 1423.831879][T24941] loop2: detected capacity change from 0 to 256 [ 1424.126638][T24950] loop1: detected capacity change from 0 to 512 [ 1424.185731][T24699] EXT4-fs (loop4): unmounting filesystem. [ 1424.223263][T24953] 9pnet_fd: Insufficient options for proto=fd [ 1424.926038][T24966] loop1: detected capacity change from 0 to 256 [ 1424.943286][T24966] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d) [ 1424.999118][T24972] loop3: detected capacity change from 0 to 256 [ 1425.015405][T24972] exfat: Deprecated parameter 'utf8' [ 1425.023169][T24972] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 1425.209035][T24980] xt_TCPMSS: Only works on TCP SYN packets [ 1426.407854][ T28] kauditd_printk_skb: 55 callbacks suppressed [ 1426.407874][ T28] audit: type=1400 audit(1727206489.737:7953): avc: denied { name_bind } for pid=24986 comm="syz.2.6116" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 1426.486617][ T28] audit: type=1400 audit(1727206489.747:7954): avc: denied { write } for pid=24986 comm="syz.2.6116" path="socket:[103298]" dev="sockfs" ino=103298 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 1426.493656][T24998] loop1: detected capacity change from 0 to 512 [ 1426.511631][ T28] audit: type=1400 audit(1727206489.747:7955): avc: denied { nlmsg_read } for pid=24986 comm="syz.2.6116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 1426.538345][ T28] audit: type=1400 audit(1727206490.387:7956): avc: denied { read } for pid=24992 comm="syz.3.6119" name="uinput" dev="devtmpfs" ino=170 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1426.562099][ T28] audit: type=1400 audit(1727206490.387:7957): avc: denied { open } for pid=24992 comm="syz.3.6119" path="/dev/uinput" dev="devtmpfs" ino=170 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1426.587258][T24998] EXT4-fs (loop1): Test dummy encryption mode enabled [ 1426.594678][ T28] audit: type=1400 audit(1727206490.417:7958): avc: denied { ioctl } for pid=24992 comm="syz.3.6119" path="/dev/uinput" dev="devtmpfs" ino=170 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1426.637054][T24998] EXT4-fs error (device loop1): __ext4_iget:5046: inode #11: block 1: comm syz.1.6117: invalid block [ 1426.665849][T24998] EXT4-fs error (device loop1): ext4_orphan_get:1401: comm syz.1.6117: couldn't read orphan inode 11 (err -117) [ 1426.677751][ T28] audit: type=1400 audit(1727206490.417:7959): avc: denied { read write } for pid=24991 comm="syz.0.6118" name="raw-gadget" dev="devtmpfs" ino=166 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1426.701718][ T28] audit: type=1400 audit(1727206490.417:7960): avc: denied { open } for pid=24991 comm="syz.0.6118" path="/dev/raw-gadget" dev="devtmpfs" ino=166 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1426.701897][T24998] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1426.786634][T25005] loop3: detected capacity change from 0 to 8192 [ 1426.794309][ T28] audit: type=1400 audit(1727206490.527:7961): avc: denied { name_bind } for pid=24999 comm="syz.3.6121" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 1426.816009][ T602] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 1426.837411][T25005] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1426.866530][ T28] audit: type=1400 audit(1727206490.527:7962): avc: denied { node_bind } for pid=24999 comm="syz.3.6121" saddr=224.0.0.1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 1427.047907][T25004] loop2: detected capacity change from 0 to 40427 [ 1427.066729][ T602] usb 1-1: Using ep0 maxpacket: 16 [ 1427.079292][T25004] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 1427.096724][T25004] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 1427.115454][T25004] F2FS-fs (loop2): invalid crc value [ 1427.145271][T25004] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1427.196852][ T602] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1427.220736][T25014] loop4: detected capacity change from 0 to 512 [ 1427.226748][ T602] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1427.245204][ T602] usb 1-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice= 0.00 [ 1427.257634][ T602] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1427.268405][ T602] usb 1-1: config 0 descriptor?? [ 1427.275130][T25004] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 1427.279194][T25014] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1427.282163][T25004] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 1427.291236][T25014] ext4 filesystem being mounted at /20/file0 supports timestamps until 2038 (0x7fffffff) [ 1427.332207][T24699] EXT4-fs (loop4): unmounting filesystem. [ 1427.683490][T25029] loop3: detected capacity change from 0 to 256 [ 1427.697153][T25029] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d) [ 1427.837780][T24323] EXT4-fs (loop1): unmounting filesystem. [ 1427.885504][T25034] loop1: detected capacity change from 0 to 256 [ 1427.892011][T25034] exfat: Deprecated parameter 'utf8' [ 1427.899996][T25034] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 1427.912760][ T602] apple 0003:05AC:0247.00CE: unknown main item tag 0x0 [ 1427.919977][ T602] apple 0003:05AC:0247.00CE: unknown main item tag 0x0 [ 1427.926927][ T602] apple 0003:05AC:0247.00CE: item fetching failed at offset 2/160 [ 1428.174374][T25038] xt_TCPMSS: Only works on TCP SYN packets [ 1428.365782][ T602] apple 0003:05AC:0247.00CE: parse failed [ 1428.371403][ T602] apple: probe of 0003:05AC:0247.00CE failed with error -22 [ 1428.379383][ T602] usb 1-1: USB disconnect, device number 84 [ 1429.086215][T25048] loop1: detected capacity change from 0 to 512 [ 1429.093623][T25048] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1429.125298][T25048] EXT4-fs (loop1): 1 truncate cleaned up [ 1429.130872][T25048] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1429.948798][T24323] EXT4-fs (loop1): unmounting filesystem. [ 1430.679915][T25076] loop3: detected capacity change from 0 to 512 [ 1430.754251][T25076] EXT4-fs (loop3): Test dummy encryption mode enabled [ 1430.877306][T25076] EXT4-fs error (device loop3): __ext4_iget:5046: inode #11: block 1: comm syz.3.6140: invalid block [ 1431.375749][T25076] EXT4-fs error (device loop3): ext4_orphan_get:1401: comm syz.3.6140: couldn't read orphan inode 11 (err -117) [ 1431.388068][T25076] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 1431.429279][ T28] kauditd_printk_skb: 52 callbacks suppressed [ 1431.429294][ T28] audit: type=1400 audit(1727206495.367:8015): avc: denied { create } for pid=25092 comm="syz.2.6145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1431.473639][ T28] audit: type=1400 audit(1727206495.367:8016): avc: denied { write } for pid=25092 comm="syz.2.6145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1431.481490][T25094] netlink: 'syz.2.6145': attribute type 12 has an invalid length. [ 1431.524890][ T28] audit: type=1400 audit(1727206495.457:8017): avc: denied { connect } for pid=25092 comm="syz.2.6145" lport=256 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1431.560477][T25089] loop1: detected capacity change from 0 to 40427 [ 1431.570787][ T28] audit: type=1400 audit(1727206495.457:8018): avc: denied { read write } for pid=25092 comm="syz.2.6145" name="raw-gadget" dev="devtmpfs" ino=166 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1431.599708][T25096] loop0: detected capacity change from 0 to 256 [ 1431.606212][T25089] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 1431.621185][T25089] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1431.630045][T25089] F2FS-fs (loop1): invalid crc value [ 1431.637026][ T28] audit: type=1400 audit(1727206495.457:8019): avc: denied { open } for pid=25092 comm="syz.2.6145" path="/dev/raw-gadget" dev="devtmpfs" ino=166 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1431.638042][T25096] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 1431.660866][ T28] audit: type=1400 audit(1727206495.457:8020): avc: denied { ioctl } for pid=25092 comm="syz.2.6145" path="/dev/raw-gadget" dev="devtmpfs" ino=166 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1431.687426][T25089] F2FS-fs (loop1): Found nat_bits in checkpoint [ 1431.714317][ T28] audit: type=1400 audit(1727206495.637:8021): avc: denied { mount } for pid=25095 comm="syz.0.6146" name="/" dev="loop0" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 1431.758017][T25089] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 1431.764927][T25089] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 1431.780692][ T28] audit: type=1400 audit(1727206495.717:8022): avc: denied { create } for pid=25088 comm="syz.1.6143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1431.806867][ T6] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 1431.888125][ T28] audit: type=1400 audit(1727206495.827:8023): avc: denied { write } for pid=25088 comm="syz.1.6143" name="/" dev="loop1" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1431.909752][ T28] audit: type=1400 audit(1727206495.827:8024): avc: denied { add_name } for pid=25088 comm="syz.1.6143" name="memory.events" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1431.983053][T25104] syz.0.6146[25104] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1431.983291][T25104] syz.0.6146[25104] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1432.056752][ T6] usb 3-1: Using ep0 maxpacket: 16 [ 1432.074091][T22927] EXT4-fs (loop3): unmounting filesystem. [ 1432.098634][T25106] loop3: detected capacity change from 0 to 512 [ 1432.110773][T25106] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1432.122166][T25106] EXT4-fs (loop3): 1 truncate cleaned up [ 1432.127698][T25106] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 1432.196773][ T6] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1432.255864][ T10] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 1432.268716][ T10] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 1432.557226][ T6] usb 3-1: New USB device found, idVendor=045e, idProduct=0721, bcdDevice=90.c4 [ 1432.568040][T25120] fuse: Unknown parameter '0x0000000000000008' [ 1432.574074][ T6] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1432.582069][ T6] usb 3-1: Product: syz [ 1432.586334][ T6] usb 3-1: Manufacturer: syz [ 1432.591656][ T6] usb 3-1: SerialNumber: syz [ 1432.609030][ T6] usb 3-1: config 0 descriptor?? [ 1432.617333][T25126] loop0: detected capacity change from 0 to 512 [ 1432.623660][T25126] EXT4-fs: dax option not supported [ 1432.672314][ T60] hid-generic 0001:0200:0000.00CF: unknown main item tag 0x0 [ 1432.679636][ T60] hid-generic 0001:0200:0000.00CF: unknown main item tag 0x0 [ 1432.687061][ T60] hid-generic 0001:0200:0000.00CF: unknown main item tag 0x0 [ 1432.694378][ T60] hid-generic 0001:0200:0000.00CF: unknown main item tag 0x0 [ 1432.701620][ T60] hid-generic 0001:0200:0000.00CF: unknown main item tag 0x0 [ 1432.708789][ T60] hid-generic 0001:0200:0000.00CF: unknown main item tag 0x0 [ 1432.715985][ T60] hid-generic 0001:0200:0000.00CF: unknown main item tag 0x0 [ 1432.723377][ T60] hid-generic 0001:0200:0000.00CF: unknown main item tag 0x0 [ 1432.730949][ T60] hid-generic 0001:0200:0000.00CF: unknown main item tag 0x0 [ 1432.738205][ T60] hid-generic 0001:0200:0000.00CF: unknown main item tag 0x0 [ 1432.745383][ T60] hid-generic 0001:0200:0000.00CF: unknown main item tag 0x0 [ 1432.752600][ T60] hid-generic 0001:0200:0000.00CF: unknown main item tag 0x0 [ 1432.759797][ T60] hid-generic 0001:0200:0000.00CF: unknown main item tag 0x0 [ 1432.767204][ T60] hid-generic 0001:0200:0000.00CF: unknown main item tag 0x0 [ 1432.774717][ T60] hid-generic 0001:0200:0000.00CF: unknown main item tag 0x0 [ 1432.781971][ T60] hid-generic 0001:0200:0000.00CF: unknown main item tag 0x0 [ 1432.789181][ T60] hid-generic 0001:0200:0000.00CF: unknown main item tag 0x0 [ 1432.796325][ T60] hid-generic 0001:0200:0000.00CF: unknown main item tag 0x0 [ 1432.803557][ T60] hid-generic 0001:0200:0000.00CF: unknown main item tag 0x0 [ 1432.810751][ T60] hid-generic 0001:0200:0000.00CF: unknown main item tag 0x0 [ 1432.817969][ T60] hid-generic 0001:0200:0000.00CF: unknown main item tag 0x0 [ 1432.825138][ T60] hid-generic 0001:0200:0000.00CF: unknown main item tag 0x0 [ 1432.832365][ T60] hid-generic 0001:0200:0000.00CF: unknown main item tag 0x0 [ 1432.839555][ T60] hid-generic 0001:0200:0000.00CF: unknown main item tag 0x0 [ 1432.846783][ T60] hid-generic 0001:0200:0000.00CF: unknown main item tag 0x0 [ 1432.853971][ T60] hid-generic 0001:0200:0000.00CF: unknown main item tag 0x0 [ 1432.861234][ T60] hid-generic 0001:0200:0000.00CF: unknown main item tag 0x0 [ 1432.868394][ T60] hid-generic 0001:0200:0000.00CF: unknown main item tag 0x0 [ 1432.875826][ T60] hid-generic 0001:0200:0000.00CF: unknown main item tag 0x0 [ 1432.883114][ T60] hid-generic 0001:0200:0000.00CF: unknown main item tag 0x0 [ 1432.890355][ T60] hid-generic 0001:0200:0000.00CF: unknown main item tag 0x0 [ 1432.897755][ T60] hid-generic 0001:0200:0000.00CF: unknown main item tag 0x0 [ 1432.904989][ T60] hid-generic 0001:0200:0000.00CF: unknown main item tag 0x0 [ 1432.912384][ T60] hid-generic 0001:0200:0000.00CF: unknown main item tag 0x0 [ 1432.919632][ T60] hid-generic 0001:0200:0000.00CF: unknown main item tag 0x0 [ 1432.926848][ T60] hid-generic 0001:0200:0000.00CF: unknown main item tag 0x0 [ 1432.950314][ T60] hid-generic 0001:0200:0000.00CF: unknown main item tag 0x0 [ 1432.951497][T22927] EXT4-fs (loop3): unmounting filesystem. [ 1432.957605][ T60] hid-generic 0001:0200:0000.00CF: unknown main item tag 0x0 [ 1432.970425][ T60] hid-generic 0001:0200:0000.00CF: unknown main item tag 0x0 [ 1432.977645][ T60] hid-generic 0001:0200:0000.00CF: unknown main item tag 0x0 [ 1432.980741][T25131] loop3: detected capacity change from 0 to 512 [ 1432.984782][ T60] hid-generic 0001:0200:0000.00CF: unknown main item tag 0x0 [ 1432.984807][ T60] hid-generic 0001:0200:0000.00CF: unknown main item tag 0x0 [ 1433.005280][ T60] hid-generic 0001:0200:0000.00CF: unknown main item tag 0x0 [ 1433.008816][T25131] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1433.012869][ T60] hid-generic 0001:0200:0000.00CF: unknown main item tag 0x0 [ 1433.021526][T25131] ext4 filesystem being mounted at /120/file0 supports timestamps until 2038 (0x7fffffff) [ 1433.028546][ T60] hid-generic 0001:0200:0000.00CF: unknown main item tag 0x0 [ 1433.045626][ T60] hid-generic 0001:0200:0000.00CF: unknown main item tag 0x0 [ 1433.066742][ T60] hid-generic 0001:0200:0000.00CF: unknown main item tag 0x0 [ 1433.073980][ T60] hid-generic 0001:0200:0000.00CF: unknown main item tag 0x0 [ 1433.086744][ T60] hid-generic 0001:0200:0000.00CF: unknown main item tag 0x0 [ 1433.093965][ T60] hid-generic 0001:0200:0000.00CF: unknown main item tag 0x0 [ 1433.109430][ T60] hid-generic 0001:0200:0000.00CF: unknown main item tag 0x0 [ 1433.122810][ T60] hid-generic 0001:0200:0000.00CF: unknown main item tag 0x0 [ 1433.131596][ T60] hid-generic 0001:0200:0000.00CF: unknown main item tag 0x0 [ 1433.139060][ T60] hid-generic 0001:0200:0000.00CF: unknown main item tag 0x0 [ 1433.146372][ T60] hid-generic 0001:0200:0000.00CF: unknown main item tag 0x0 [ 1433.153607][ T60] hid-generic 0001:0200:0000.00CF: unknown main item tag 0x0 [ 1433.161268][ T60] hid-generic 0001:0200:0000.00CF: hidraw0: HID v0.00 Device [syz0] on syz1 [ 1433.188411][T25136] loop0: detected capacity change from 0 to 512 [ 1433.200725][T25136] EXT4-fs (loop0): Test dummy encryption mode enabled [ 1433.208627][T25136] EXT4-fs error (device loop0): __ext4_iget:5046: inode #11: block 1: comm syz.0.6157: invalid block [ 1433.220640][T25136] EXT4-fs error (device loop0): ext4_orphan_get:1401: comm syz.0.6157: couldn't read orphan inode 11 (err -117) [ 1433.232548][T25136] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 1433.255190][T25138] device gretap0 entered promiscuous mode [ 1433.261325][T25138] device vlan2 entered promiscuous mode [ 1433.275583][T25138] device gretap0 left promiscuous mode [ 1433.828176][T22927] EXT4-fs (loop3): unmounting filesystem. [ 1434.062111][T24497] EXT4-fs (loop0): unmounting filesystem. [ 1434.085039][T25151] loop0: detected capacity change from 0 to 256 [ 1434.093768][T25151] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 1434.263746][T25155] syz.0.6160[25155] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1434.263820][T25155] syz.0.6160[25155] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1434.300624][T25159] fuse: Unknown parameter '0x0000000000000008' [ 1434.945739][ T6] usb 3-1: Found UVC 0.00 device syz (045e:0721) [ 1434.957297][ T6] usb 3-1: No valid video chain found. [ 1434.970164][ T6] usb 3-1: USB disconnect, device number 108 [ 1435.481533][T25184] device syzkaller0 entered promiscuous mode [ 1435.934240][T25197] fuse: Unknown parameter '0x0000000000000008' [ 1436.566730][ T6] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 1436.793916][T25212] loop3: detected capacity change from 0 to 40427 [ 1436.805487][T25212] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 1436.813450][T25212] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 1436.824559][T25212] F2FS-fs (loop3): invalid crc value [ 1436.830104][ T28] kauditd_printk_skb: 58 callbacks suppressed [ 1436.830118][ T28] audit: type=1400 audit(1727206500.767:8083): avc: denied { create } for pid=25213 comm="syz.0.6181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1436.855574][ T28] audit: type=1400 audit(1727206500.767:8084): avc: denied { setopt } for pid=25213 comm="syz.0.6181" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1436.855719][ T6] usb 3-1: Using ep0 maxpacket: 8 [ 1436.879512][T25212] F2FS-fs (loop3): Found nat_bits in checkpoint [ 1436.904875][T25212] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 1436.911932][T25212] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 1436.927944][ T28] audit: type=1400 audit(1727206500.867:8085): avc: denied { create } for pid=25211 comm="syz.3.6180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1437.038651][T25222] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6181'. [ 1437.094697][ T28] audit: type=1400 audit(1727206500.987:8086): avc: denied { module_request } for pid=25213 comm="syz.0.6181" kmod="rtnl-link-bridg" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 1437.116641][ T6] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1437.129619][ T6] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1437.139202][ T6] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1437.151789][ T6] usb 3-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 1437.160621][ T6] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1437.172155][ T6] usb 3-1: config 0 descriptor?? [ 1437.222105][ T28] audit: type=1400 audit(1727206501.157:8087): avc: denied { write } for pid=25211 comm="syz.3.6180" name="/" dev="loop3" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1437.260320][ T28] audit: type=1400 audit(1727206501.177:8088): avc: denied { add_name } for pid=25211 comm="syz.3.6180" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1437.282562][ T28] audit: type=1400 audit(1727206501.177:8089): avc: denied { create } for pid=25211 comm="syz.3.6180" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 1437.303897][ T28] audit: type=1400 audit(1727206501.197:8090): avc: denied { append open } for pid=25211 comm="syz.3.6180" path="/124/bus/memory.events" dev="loop3" ino=456 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 1437.563188][ T10] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 1437.586654][ T10] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 1437.625559][ T28] audit: type=1400 audit(1727206501.557:8091): avc: denied { mounton } for pid=25226 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 1437.658676][ T28] audit: type=1400 audit(1727206501.587:8092): avc: denied { mount } for pid=25226 comm="syz-executor" name="/" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 1437.697480][ T6] hid-steam 0003:28DE:1102.00D0: unknown main item tag 0x0 [ 1437.704804][ T6] hid-steam 0003:28DE:1102.00D0: : USB HID v0.00 Device [HID 28de:1102] on usb-dummy_hcd.2-1/input0 [ 1437.721590][ T6] hid-steam 0003:28DE:1102.00D1: unknown main item tag 0x0 [ 1437.747014][ T328] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1437.794722][T25233] loop1: detected capacity change from 0 to 512 [ 1437.801617][T25233] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1437.811605][ T6] hid-steam 0003:28DE:1102.00D1: hidraw0: USB HID v0.00 Device [HID 28de:1102] on usb-dummy_hcd.2-1/input0 [ 1437.834221][T25233] EXT4-fs (loop1): 1 truncate cleaned up [ 1437.843141][T25233] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1438.214915][ T6] hid-steam 0003:28DE:1102.00D0: Steam Controller 'XXXXXXXXXX' connected [ 1438.398241][T25226] bridge0: port 1(bridge_slave_0) entered blocking state [ 1438.412787][T25226] bridge0: port 1(bridge_slave_0) entered disabled state [ 1438.428491][T25226] device bridge_slave_0 entered promiscuous mode [ 1438.446242][T25226] bridge0: port 2(bridge_slave_1) entered blocking state [ 1438.453305][T25226] bridge0: port 2(bridge_slave_1) entered disabled state [ 1438.460939][T25226] device bridge_slave_1 entered promiscuous mode [ 1438.509403][T25226] bridge0: port 2(bridge_slave_1) entered blocking state [ 1438.516252][T25226] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1438.523380][T25226] bridge0: port 1(bridge_slave_0) entered blocking state [ 1438.530152][T25226] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1438.549925][ T4644] bridge0: port 1(bridge_slave_0) entered disabled state [ 1438.558120][ T4644] bridge0: port 2(bridge_slave_1) entered disabled state [ 1438.565514][ T4644] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1438.572981][ T4644] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1438.592366][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1438.595692][T25249] loop0: detected capacity change from 0 to 512 [ 1438.606464][ T312] bridge0: port 1(bridge_slave_0) entered blocking state [ 1438.613358][ T312] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1438.655163][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1438.666071][T24323] EXT4-fs (loop1): unmounting filesystem. [ 1438.672783][ T312] bridge0: port 2(bridge_slave_1) entered blocking state [ 1438.673137][T25251] fuse: Unknown parameter 'fd0x0000000000000008' [ 1438.679651][ T312] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1438.701615][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1438.712099][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1438.727490][T25249] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1438.736400][T25249] ext4 filesystem being mounted at /52/file1 supports timestamps until 2038 (0x7fffffff) [ 1438.773603][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1438.786444][T24497] EXT4-fs (loop0): unmounting filesystem. [ 1438.791993][ T4644] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1438.792294][ T4644] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1438.913963][ T4644] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1439.159809][T25226] device veth0_vlan entered promiscuous mode [ 1439.324494][ T1510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1439.333776][ T1510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1439.344906][T25209] input: Steam Controller as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:28DE:1102.00D0/input/input64 [ 1439.350245][T25226] device veth1_macvtap entered promiscuous mode [ 1439.363025][ T312] usb 3-1: reset high-speed USB device number 109 using dummy_hcd [ 1439.371214][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1439.392574][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1439.405997][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1439.425432][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1439.436379][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1439.812418][T25275] loop4: detected capacity change from 0 to 256 [ 1439.834390][T25275] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d) [ 1439.906743][ T943] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 1439.977622][ T10] device bridge_slave_1 left promiscuous mode [ 1439.984273][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 1440.000950][ T10] device bridge_slave_0 left promiscuous mode [ 1440.007484][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 1440.038925][ T10] device veth1_macvtap left promiscuous mode [ 1440.060217][ T10] device veth0_vlan left promiscuous mode [ 1440.367145][ T943] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1440.379257][ T943] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1440.393101][ T943] usb 2-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 1440.405593][ T943] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1440.452076][ T6] usb 3-1: USB disconnect, device number 109 [ 1440.454197][ T943] usb 2-1: config 0 descriptor?? [ 1440.466121][ T6] hid-steam 0003:28DE:1102.00D0: Steam Controller 'XXXXXXXXXX' disconnected [ 1440.997985][ T943] arvo 0003:1E7D:30D4.00D2: unknown main item tag 0x0 [ 1441.011320][ T943] arvo 0003:1E7D:30D4.00D2: item fetching failed at offset 5/7 [ 1441.019316][ T943] arvo 0003:1E7D:30D4.00D2: parse failed [ 1441.024822][ T943] arvo: probe of 0003:1E7D:30D4.00D2 failed with error -22 [ 1441.039296][T25294] fuse: Unknown parameter 'fd0x0000000000000008' [ 1441.139385][T25300] device syzkaller0 entered promiscuous mode [ 1441.396782][ T943] usb 2-1: USB disconnect, device number 81 [ 1441.409552][ T518] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 1441.544857][T25308] loop4: detected capacity change from 0 to 512 [ 1441.590622][ T314] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1441.746844][ T518] usb 4-1: Using ep0 maxpacket: 16 [ 1441.876929][ T518] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1441.888114][ T518] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1441.940492][ T518] usb 4-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice= 0.00 [ 1441.949982][ T518] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1441.960377][ T518] usb 4-1: config 0 descriptor?? [ 1442.469196][ T518] apple 0003:05AC:0247.00D3: unknown main item tag 0x0 [ 1442.476496][ T518] apple 0003:05AC:0247.00D3: unknown main item tag 0x0 [ 1442.483269][ T518] apple 0003:05AC:0247.00D3: item fetching failed at offset 2/160 [ 1442.491057][ T518] apple 0003:05AC:0247.00D3: parse failed [ 1442.496632][ T518] apple: probe of 0003:05AC:0247.00D3 failed with error -22 [ 1442.626291][ T943] usb 4-1: USB disconnect, device number 101 [ 1443.146119][T25332] loop3: detected capacity change from 0 to 2048 [ 1443.158823][T25332] EXT4-fs error (device loop3): ext4_orphan_get:1422: comm syz.3.6210: bad orphan inode 8192 [ 1443.169159][T25332] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 1443.206768][ T943] usb 2-1: new full-speed USB device number 82 using dummy_hcd [ 1443.292793][T25340] loop4: detected capacity change from 0 to 1024 [ 1443.523220][ T314] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1443.616760][ T943] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1443.634896][ T943] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1443.656530][ T943] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1443.669585][ T943] usb 2-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00 [ 1443.678810][ T943] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1443.692790][ T943] usb 2-1: config 0 descriptor?? [ 1443.703580][T25349] loop0: detected capacity change from 0 to 256 [ 1443.727735][ T314] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1443.794294][T25350] syz.4.6212[25350] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1443.794376][T25350] syz.4.6212[25350] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1443.986882][ T28] kauditd_printk_skb: 77 callbacks suppressed [ 1443.986918][ T28] audit: type=1400 audit(1727206507.857:8170): avc: denied { map } for pid=25348 comm="syz.0.6214" path="/dev/ashmem" dev="devtmpfs" ino=177 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1444.099021][T25356] loop2: detected capacity change from 0 to 512 [ 1444.122276][T22927] EXT4-fs (loop3): unmounting filesystem. [ 1444.123548][T25356] EXT4-fs error (device loop2): ext4_find_inline_data_nolock:164: inode #12: comm syz.2.6216: inline data xattr refers to an external xattr inode [ 1444.142924][T25356] EXT4-fs error (device loop2): ext4_orphan_get:1401: comm syz.2.6216: couldn't read orphan inode 12 (err -117) [ 1444.164500][T25356] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1444.208871][T24536] EXT4-fs (loop2): unmounting filesystem. [ 1444.221932][ T28] audit: type=1400 audit(1727206508.157:8171): avc: denied { create } for pid=25360 comm="syz.4.6219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1444.243499][T25363] loop2: detected capacity change from 0 to 256 [ 1444.269206][ T28] audit: type=1400 audit(1727206508.197:8172): avc: denied { mount } for pid=25362 comm="syz.2.6218" name="/" dev="loop2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 1446.210409][ T943] ntrig 0003:1B96:000A.00D4: unknown main item tag 0x0 [ 1446.217294][ T943] ntrig 0003:1B96:000A.00D4: unknown main item tag 0x0 [ 1446.224084][ T943] ntrig 0003:1B96:000A.00D4: unknown main item tag 0x0 [ 1446.230933][ T943] ntrig 0003:1B96:000A.00D4: unknown main item tag 0x0 [ 1446.237872][ T28] audit: type=1400 audit(1727206510.167:8173): avc: denied { unmount } for pid=24536 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 1446.268280][ T943] ntrig 0003:1B96:000A.00D4: unknown main item tag 0x0 [ 1446.279203][ T943] ntrig 0003:1B96:000A.00D4: hidraw0: USB HID v0.00 Device [HID 1b96:000a] on usb-dummy_hcd.1-1/input0 [ 1446.321063][T25377] 9pnet_fd: Insufficient options for proto=fd [ 1446.409411][ T943] usb 2-1: USB disconnect, device number 82 [ 1446.420641][ T28] audit: type=1400 audit(1727206510.357:8174): avc: denied { read } for pid=25386 comm="syz.1.6226" name="uinput" dev="devtmpfs" ino=170 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1446.443842][ T28] audit: type=1400 audit(1727206510.357:8175): avc: denied { open } for pid=25386 comm="syz.1.6226" path="/dev/uinput" dev="devtmpfs" ino=170 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1446.557006][ T28] audit: type=1400 audit(1727206510.357:8176): avc: denied { ioctl } for pid=25386 comm="syz.1.6226" path="/dev/uinput" dev="devtmpfs" ino=170 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1446.723559][ T602] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 1446.731114][ T28] audit: type=1400 audit(1727206510.527:8177): avc: denied { create } for pid=25383 comm="syz.3.6225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1446.752319][ T28] audit: type=1400 audit(1727206510.527:8178): avc: denied { setopt } for pid=25383 comm="syz.3.6225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1446.761824][T25394] loop1: detected capacity change from 0 to 2048 [ 1446.779283][ T28] audit: type=1400 audit(1727206510.567:8179): avc: denied { bind } for pid=25383 comm="syz.3.6225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1446.800969][T25394] EXT4-fs error (device loop1): ext4_orphan_get:1422: comm syz.1.6227: bad orphan inode 8192 [ 1446.811396][T25394] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1446.976730][ T602] usb 5-1: Using ep0 maxpacket: 16 [ 1447.106810][ T602] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1447.122046][ T602] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1447.138144][ T602] usb 5-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice= 0.00 [ 1447.152311][ T602] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1447.175702][ T602] usb 5-1: config 0 descriptor?? [ 1447.316053][T25411] loop3: detected capacity change from 0 to 256 [ 1447.458238][T25412] loop0: detected capacity change from 0 to 256 [ 1448.484385][T25420] loop3: detected capacity change from 0 to 256 [ 1448.950438][ T602] apple 0003:05AC:0247.00D5: unknown main item tag 0x0 [ 1448.957208][ T602] apple 0003:05AC:0247.00D5: unknown main item tag 0x0 [ 1448.964023][ T602] apple 0003:05AC:0247.00D5: item fetching failed at offset 2/160 [ 1448.964487][T24323] EXT4-fs (loop1): unmounting filesystem. [ 1448.972394][ T602] apple 0003:05AC:0247.00D5: parse failed [ 1448.982867][ T602] apple: probe of 0003:05AC:0247.00D5 failed with error -22 [ 1449.002677][T25428] loop1: detected capacity change from 0 to 512 [ 1449.009353][T25428] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1449.020307][T25428] EXT4-fs (loop1): 1 truncate cleaned up [ 1449.025769][T25428] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1449.036133][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 1449.036146][ T28] audit: type=1400 audit(1727206512.967:8184): avc: denied { read append } for pid=25427 comm="syz.1.6235" path="/58/bus/cpuset.effective_cpus" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 1449.090626][ T602] usb 5-1: USB disconnect, device number 79 [ 1449.166830][T25375] usb 3-1: new full-speed USB device number 110 using dummy_hcd [ 1449.423930][ T28] audit: type=1400 audit(1727206513.247:8185): avc: denied { read write } for pid=24497 comm="syz-executor" name="loop0" dev="devtmpfs" ino=114 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1449.454631][ T28] audit: type=1400 audit(1727206513.247:8186): avc: denied { open } for pid=24497 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=114 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1449.480024][ T28] audit: type=1400 audit(1727206513.317:8187): avc: denied { unmount } for pid=22927 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 1449.500100][ T28] audit: type=1400 audit(1727206513.327:8188): avc: denied { ioctl } for pid=24497 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=114 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1449.532310][ T28] audit: type=1400 audit(1727206513.387:8189): avc: denied { bpf } for pid=25432 comm="syz.3.6237" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1449.553071][ T28] audit: type=1400 audit(1727206513.387:8190): avc: denied { prog_load } for pid=25432 comm="syz.3.6237" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1449.572423][ T28] audit: type=1400 audit(1727206513.387:8191): avc: denied { map_create } for pid=25432 comm="syz.3.6237" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1449.580916][T25433] device syzkaller0 entered promiscuous mode [ 1449.595439][ T28] audit: type=1400 audit(1727206513.387:8192): avc: denied { map_read map_write } for pid=25432 comm="syz.3.6237" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1449.624850][ T28] audit: type=1400 audit(1727206513.397:8193): avc: denied { perfmon } for pid=25432 comm="syz.3.6237" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1449.677323][T25375] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1449.736709][T25375] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1449.754340][T25375] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1449.767044][T25375] usb 3-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00 [ 1449.775955][T25375] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1449.784722][T25444] loop3: detected capacity change from 0 to 256 [ 1449.785112][T25375] usb 3-1: config 0 descriptor?? [ 1449.813955][T25444] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 1449.863836][T24323] EXT4-fs (loop1): unmounting filesystem. [ 1449.927051][ T943] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 1450.064240][T25450] syz.3.6240[25450] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1450.064292][T25450] syz.3.6240[25450] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1450.186706][ T943] usb 5-1: Using ep0 maxpacket: 8 [ 1450.267516][T25375] ntrig 0003:1B96:000A.00D6: unknown main item tag 0x0 [ 1450.274285][T25375] ntrig 0003:1B96:000A.00D6: unknown main item tag 0x0 [ 1450.281010][T25375] ntrig 0003:1B96:000A.00D6: unknown main item tag 0x0 [ 1450.287923][T25375] ntrig 0003:1B96:000A.00D6: unknown main item tag 0x0 [ 1450.310950][T25375] ntrig 0003:1B96:000A.00D6: unknown main item tag 0x0 [ 1450.317746][ T943] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1450.323738][T25452] loop0: detected capacity change from 0 to 512 [ 1450.328475][ T943] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1450.344797][ T943] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1450.350385][T25452] EXT4-fs error (device loop0): ext4_orphan_get:1422: comm syz.0.6243: bad orphan inode 17 [ 1450.357594][T25375] ntrig 0003:1B96:000A.00D6: hidraw0: USB HID v0.00 Device [HID 1b96:000a] on usb-dummy_hcd.2-1/input0 [ 1450.367639][T25452] ext4_test_bit(bit=16, block=4) = 1 [ 1450.378531][ T943] usb 5-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 1450.383445][T25452] is_bad_inode(inode)=0 [ 1450.392752][ T943] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1450.396400][T25452] NEXT_ORPHAN(inode)=0 [ 1450.407731][ T943] usb 5-1: config 0 descriptor?? [ 1450.408005][T25452] max_ino=32 [ 1450.415648][T25452] i_nlink=1 [ 1450.418748][T25452] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 1450.431320][T25452] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm syz.0.6243: bg 0: block 7: invalid block bitmap [ 1450.446856][T24497] EXT4-fs (loop0): unmounting filesystem. [ 1450.489259][T25375] usb 3-1: USB disconnect, device number 110 [ 1450.649860][T25460] loop3: detected capacity change from 0 to 2048 [ 1450.697954][T25460] EXT4-fs error (device loop3): ext4_orphan_get:1422: comm syz.3.6245: bad orphan inode 8192 [ 1450.708418][T25460] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 1450.888022][ T943] hid-steam 0003:28DE:1102.00D7: unknown main item tag 0x0 [ 1450.895347][ T943] hid-steam 0003:28DE:1102.00D7: : USB HID v0.00 Device [HID 28de:1102] on usb-dummy_hcd.4-1/input0 [ 1450.907221][ T943] hid-steam 0003:28DE:1102.00D8: unknown main item tag 0x0 [ 1450.914908][ T943] hid-steam 0003:28DE:1102.00D8: hidraw0: USB HID v0.00 Device [HID 28de:1102] on usb-dummy_hcd.4-1/input0 [ 1451.006883][ T943] hid-steam 0003:28DE:1102.00D7: Steam Controller 'XXXXXXXXXX' connected [ 1451.038852][ T943] input: Steam Controller as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:28DE:1102.00D7/input/input67 [ 1451.094521][T25439] input: Steam Controller as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:28DE:1102.00D7/input/input68 [ 1451.181429][ T943] usb 5-1: USB disconnect, device number 80 [ 1451.193262][ T943] hid-steam 0003:28DE:1102.00D7: Steam Controller 'XXXXXXXXXX' disconnected [ 1451.207583][ T87] ================================================================== [ 1451.215460][ T87] BUG: KASAN: use-after-free in mutex_lock+0xa4/0x1e0 [ 1451.222055][ T87] Write of size 8 at addr ffff888117cb0450 by task acpid/87 [ 1451.229174][ T87] [ 1451.231342][ T87] CPU: 1 PID: 87 Comm: acpid Not tainted 6.1.99-syzkaller-00075-g2cd8ac816de5 #0 [ 1451.240280][ T87] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1451.250262][ T87] Call Trace: [ 1451.253390][ T87] [ 1451.256169][ T87] dump_stack_lvl+0x151/0x1b7 [ 1451.260737][ T87] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 1451.265971][ T87] ? _printk+0xd1/0x111 [ 1451.269965][ T87] ? __virt_addr_valid+0x242/0x2f0 [ 1451.274912][ T87] print_report+0x158/0x4e0 [ 1451.279247][ T87] ? do_syscall_64+0x3b/0xb0 [ 1451.283676][ T87] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1451.289578][ T87] ? __virt_addr_valid+0x242/0x2f0 [ 1451.294530][ T87] ? kasan_complete_mode_report_info+0x90/0x1b0 [ 1451.300603][ T87] ? mutex_lock+0xa4/0x1e0 [ 1451.304856][ T87] kasan_report+0x13c/0x170 [ 1451.309198][ T87] ? mutex_lock+0xa4/0x1e0 [ 1451.313464][ T87] kasan_check_range+0x294/0x2a0 [ 1451.318222][ T87] __kasan_check_write+0x14/0x20 [ 1451.322995][ T87] mutex_lock+0xa4/0x1e0 [ 1451.327082][ T87] ? bit_wait_io_timeout+0x120/0x120 [ 1451.332204][ T87] ? kasan_save_alloc_info+0x1f/0x30 [ 1451.337316][ T87] steam_input_open+0x91/0x1a0 [ 1451.342000][ T87] ? steam_input_register+0xa70/0xa70 [ 1451.347234][ T87] ? __kasan_check_write+0x14/0x20 [ 1451.352156][ T87] ? mutex_lock_interruptible+0xb1/0x1e0 [ 1451.357623][ T87] ? __kasan_check_write+0x14/0x20 [ 1451.362576][ T87] input_open_device+0x1a5/0x310 [ 1451.367345][ T87] ? kobject_get_unless_zero+0x229/0x320 [ 1451.372820][ T87] evdev_open+0x3df/0x620 [ 1451.376980][ T87] chrdev_open+0x4f7/0x620 [ 1451.381230][ T87] ? cd_forget+0x170/0x170 [ 1451.385483][ T87] ? fsnotify_perm+0x3e5/0x5b0 [ 1451.390083][ T87] ? cd_forget+0x170/0x170 [ 1451.394336][ T87] do_dentry_open+0x891/0x1250 [ 1451.398938][ T87] vfs_open+0x73/0x80 [ 1451.402762][ T87] path_openat+0x2532/0x2d60 [ 1451.407183][ T87] ? kasan_save_alloc_info+0x1f/0x30 [ 1451.412304][ T87] ? slab_post_alloc_hook+0x53/0x2c0 [ 1451.417422][ T87] ? getname+0x19/0x20 [ 1451.421329][ T87] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1451.427234][ T87] ? do_filp_open+0x480/0x480 [ 1451.431755][ T87] do_filp_open+0x230/0x480 [ 1451.436084][ T87] ? vfs_tmpfile+0x480/0x480 [ 1451.440512][ T87] ? alloc_fd+0x4fa/0x5a0 [ 1451.444678][ T87] do_sys_openat2+0x151/0x870 [ 1451.449193][ T87] ? set_current_blocked+0x40/0x40 [ 1451.454151][ T87] ? do_sys_open+0x220/0x220 [ 1451.458564][ T87] ? __fdget_pos+0x204/0x390 [ 1451.462988][ T87] ? ksys_read+0x24f/0x2c0 [ 1451.467244][ T87] __x64_sys_openat+0x243/0x290 [ 1451.471930][ T87] ? __ia32_sys_open+0x270/0x270 [ 1451.476718][ T87] ? debug_smp_processor_id+0x17/0x20 [ 1451.481912][ T87] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 1451.487815][ T87] ? exit_to_user_mode_prepare+0x39/0xa0 [ 1451.493281][ T87] x64_sys_call+0x6bf/0x9a0 [ 1451.497621][ T87] do_syscall_64+0x3b/0xb0 [ 1451.501872][ T87] ? clear_bhb_loop+0x55/0xb0 [ 1451.506389][ T87] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1451.512124][ T87] RIP: 0033:0x7f013ac749a4 [ 1451.516371][ T87] Code: 24 20 48 8d 44 24 30 48 89 44 24 28 64 8b 04 25 18 00 00 00 85 c0 75 2c 44 89 e2 48 89 ee bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 76 60 48 8b 15 55 a4 0d 00 f7 d8 64 89 02 48 83 [ 1451.535812][ T87] RSP: 002b:00007fff1a998670 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1451.544055][ T87] RAX: ffffffffffffffda RBX: 00007fff1a998958 RCX: 00007f013ac749a4 [ 1451.551866][ T87] RDX: 0000000000080800 RSI: 00007fff1a998858 RDI: 00000000ffffff9c [ 1451.559677][ T87] RBP: 00007fff1a998858 R08: 00000000000000f4 R09: 00007fff1a998858 [ 1451.567495][ T87] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000080800 [ 1451.575301][ T87] R13: 0000000000000020 R14: 00007fff1a998958 R15: 00007fff1a998858 [ 1451.583120][ T87] [ 1451.585975][ T87] [ 1451.588145][ T87] Allocated by task 943: [ 1451.592226][ T87] kasan_set_track+0x4b/0x70 [ 1451.596649][ T87] kasan_save_alloc_info+0x1f/0x30 [ 1451.601599][ T87] __kasan_kmalloc+0x9c/0xb0 [ 1451.606023][ T87] __kmalloc_node_track_caller+0xb3/0x1e0 [ 1451.611577][ T87] devm_kmalloc+0x55/0x180 [ 1451.615829][ T87] steam_probe+0x12e/0xbe0 [ 1451.620086][ T87] hid_device_probe+0x292/0x3a0 [ 1451.624771][ T87] really_probe+0x2b8/0x920 [ 1451.629115][ T87] __driver_probe_device+0x1a0/0x310 [ 1451.634234][ T87] driver_probe_device+0x54/0x3d0 [ 1451.639097][ T87] __device_attach_driver+0x2e3/0x490 [ 1451.644305][ T87] bus_for_each_drv+0x183/0x200 [ 1451.648990][ T87] __device_attach+0x312/0x510 [ 1451.653586][ T87] device_initial_probe+0x1a/0x20 [ 1451.658446][ T87] bus_probe_device+0xbe/0x1e0 [ 1451.663045][ T87] device_add+0xb60/0xf10 [ 1451.667213][ T87] hid_add_device+0x3ad/0x510 [ 1451.671727][ T87] usbhid_probe+0xc1f/0xff0 [ 1451.676067][ T87] usb_probe_interface+0x5b6/0xa90 [ 1451.681187][ T87] really_probe+0x2b8/0x920 [ 1451.685526][ T87] __driver_probe_device+0x1a0/0x310 [ 1451.690649][ T87] driver_probe_device+0x54/0x3d0 [ 1451.695512][ T87] __device_attach_driver+0x2e3/0x490 [ 1451.700727][ T87] bus_for_each_drv+0x183/0x200 [ 1451.705401][ T87] __device_attach+0x312/0x510 [ 1451.710115][ T87] device_initial_probe+0x1a/0x20 [ 1451.714948][ T87] bus_probe_device+0xbe/0x1e0 [ 1451.719726][ T87] device_add+0xb60/0xf10 [ 1451.723889][ T87] usb_set_configuration+0x190f/0x1e80 [ 1451.729182][ T87] usb_generic_driver_probe+0x8b/0x150 [ 1451.734576][ T87] usb_probe_device+0x144/0x260 [ 1451.739252][ T87] really_probe+0x2b8/0x920 [ 1451.743591][ T87] __driver_probe_device+0x1a0/0x310 [ 1451.748711][ T87] driver_probe_device+0x54/0x3d0 [ 1451.753572][ T87] __device_attach_driver+0x2e3/0x490 [ 1451.758779][ T87] bus_for_each_drv+0x183/0x200 [ 1451.763464][ T87] __device_attach+0x312/0x510 [ 1451.768066][ T87] device_initial_probe+0x1a/0x20 [ 1451.772928][ T87] bus_probe_device+0xbe/0x1e0 [ 1451.777526][ T87] device_add+0xb60/0xf10 [ 1451.781693][ T87] usb_new_device+0xf2f/0x1820 [ 1451.786295][ T87] hub_event+0x2db1/0x4830 [ 1451.790546][ T87] process_one_work+0x73d/0xcb0 [ 1451.795234][ T87] worker_thread+0xa60/0x1260 [ 1451.799746][ T87] kthread+0x26d/0x300 [ 1451.803650][ T87] ret_from_fork+0x1f/0x30 [ 1451.807907][ T87] [ 1451.810121][ T87] Freed by task 943: [ 1451.813808][ T87] kasan_set_track+0x4b/0x70 [ 1451.818323][ T87] kasan_save_free_info+0x2b/0x40 [ 1451.823178][ T87] ____kasan_slab_free+0x131/0x180 [ 1451.828129][ T87] __kasan_slab_free+0x11/0x20 [ 1451.832728][ T87] __kmem_cache_free+0x218/0x3b0 [ 1451.837503][ T87] kfree+0x7a/0xf0 [ 1451.841062][ T87] release_nodes+0xf1/0x230 [ 1451.845399][ T87] devres_release_all+0x148/0x1a0 [ 1451.850261][ T87] device_release_driver_internal+0x5bb/0x870 [ 1451.856248][ T87] device_release_driver+0x19/0x20 [ 1451.861195][ T87] bus_remove_device+0x2fa/0x360 [ 1451.865973][ T87] device_del+0x663/0xe90 [ 1451.870138][ T87] hid_destroy_device+0x68/0x110 [ 1451.874908][ T87] usbhid_disconnect+0x9e/0xc0 [ 1451.879509][ T87] usb_unbind_interface+0x1fa/0x8c0 [ 1451.884543][ T87] device_release_driver_internal+0x53e/0x870 [ 1451.890446][ T87] device_release_driver+0x19/0x20 [ 1451.895403][ T87] bus_remove_device+0x2fa/0x360 [ 1451.900598][ T87] device_del+0x663/0xe90 [ 1451.904772][ T87] usb_disable_device+0x380/0x720 [ 1451.909625][ T87] usb_disconnect+0x32a/0x890 [ 1451.914140][ T87] hub_event+0x1ed8/0x4830 [ 1451.918391][ T87] process_one_work+0x73d/0xcb0 [ 1451.923083][ T87] worker_thread+0xd71/0x1260 [ 1451.927593][ T87] kthread+0x26d/0x300 [ 1451.931496][ T87] ret_from_fork+0x1f/0x30 [ 1451.935752][ T87] [ 1451.937921][ T87] Last potentially related work creation: [ 1451.943475][ T87] kasan_save_stack+0x3b/0x60 [ 1451.947995][ T87] __kasan_record_aux_stack+0xb4/0xc0 [ 1451.953196][ T87] kasan_record_aux_stack_noalloc+0xb/0x10 [ 1451.958844][ T87] kvfree_call_rcu+0x9f/0x800 [ 1451.963350][ T87] neigh_destroy+0x429/0x560 [ 1451.967782][ T87] neigh_cleanup_and_release+0x73/0x1b0 [ 1451.973161][ T87] neigh_flush_dev+0x7b5/0x970 [ 1451.977757][ T87] neigh_changeaddr+0x30/0x40 [ 1451.982272][ T87] arp_netdev_event+0x6a/0x2a0 [ 1451.986872][ T87] raw_notifier_call_chain+0x8c/0xf0 [ 1451.991993][ T87] dev_set_mac_address+0x325/0x470 [ 1451.996941][ T87] dev_set_mac_address_user+0x31/0x50 [ 1452.002148][ T87] do_setlink+0x90f/0x4050 [ 1452.006399][ T87] rtnl_newlink+0x170f/0x2030 [ 1452.010915][ T87] rtnetlink_rcv_msg+0x9a5/0xca0 [ 1452.015687][ T87] netlink_rcv_skb+0x1cd/0x410 [ 1452.020297][ T87] rtnetlink_rcv+0x1c/0x20 [ 1452.024540][ T87] netlink_unicast+0x906/0xab0 [ 1452.029140][ T87] netlink_sendmsg+0xa15/0xd30 [ 1452.033955][ T87] __sys_sendto+0x480/0x600 [ 1452.038252][ T87] __x64_sys_sendto+0xe5/0x100 [ 1452.042854][ T87] x64_sys_call+0x15c/0x9a0 [ 1452.047193][ T87] do_syscall_64+0x3b/0xb0 [ 1452.051448][ T87] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1452.057174][ T87] [ 1452.059342][ T87] Second to last potentially related work creation: [ 1452.065769][ T87] kasan_save_stack+0x3b/0x60 [ 1452.070280][ T87] __kasan_record_aux_stack+0xb4/0xc0 [ 1452.075487][ T87] kasan_record_aux_stack_noalloc+0xb/0x10 [ 1452.081128][ T87] call_rcu+0xee/0x1340 [ 1452.085125][ T87] fib6_del+0xd30/0x1060 [ 1452.089201][ T87] fib6_clean_node+0x2ed/0x550 [ 1452.093809][ T87] fib6_walk_continue+0x52d/0x720 [ 1452.098664][ T87] fib6_walk+0x172/0x2d0 [ 1452.102741][ T87] fib6_clean_all+0x202/0x2c0 [ 1452.107253][ T87] rt6_disable_ip+0x166/0x9e0 [ 1452.111768][ T87] addrconf_ifdown+0x15e/0x1ab0 [ 1452.116455][ T87] addrconf_notify+0x32f/0xe10 [ 1452.121061][ T87] raw_notifier_call_chain+0x8c/0xf0 [ 1452.126183][ T87] dev_close_many+0x37c/0x530 [ 1452.130690][ T87] unregister_netdevice_many+0x4d1/0x1740 [ 1452.136243][ T87] default_device_exit_batch+0x975/0xa00 [ 1452.141710][ T87] cleanup_net+0x6c9/0xbf0 [ 1452.146322][ T87] process_one_work+0x73d/0xcb0 [ 1452.151002][ T87] worker_thread+0xa60/0x1260 [ 1452.155520][ T87] kthread+0x26d/0x300 [ 1452.159417][ T87] ret_from_fork+0x1f/0x30 [ 1452.163678][ T87] [ 1452.165842][ T87] The buggy address belongs to the object at ffff888117cb0400 [ 1452.165842][ T87] which belongs to the cache kmalloc-512 of size 512 [ 1452.179732][ T87] The buggy address is located 80 bytes inside of [ 1452.179732][ T87] 512-byte region [ffff888117cb0400, ffff888117cb0600) [ 1452.192746][ T87] [ 1452.194914][ T87] The buggy address belongs to the physical page: [ 1452.201173][ T87] page:ffffea00045f2c00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x117cb0 [ 1452.211233][ T87] head:ffffea00045f2c00 order:2 compound_mapcount:0 compound_pincount:0 [ 1452.219398][ T87] flags: 0x4000000000010200(slab|head|zone=1) [ 1452.225306][ T87] raw: 4000000000010200 0000000000000000 dead000000000001 ffff888100042f00 [ 1452.233719][ T87] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 1452.242132][ T87] page dumped because: kasan: bad access detected [ 1452.248390][ T87] page_owner tracks the page as allocated [ 1452.253939][ T87] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 7466, tgid 7466 (syz-executor), ts 490718932056, free_ts 489626953980 [ 1452.276683][ T87] post_alloc_hook+0x213/0x220 [ 1452.281282][ T87] prep_new_page+0x1b/0x110 [ 1452.285619][ T87] get_page_from_freelist+0x27ea/0x2870 [ 1452.290999][ T87] __alloc_pages+0x3a1/0x780 [ 1452.295424][ T87] alloc_slab_page+0x6c/0xf0 [ 1452.299855][ T87] new_slab+0x90/0x3e0 [ 1452.303762][ T87] ___slab_alloc+0x6f9/0xb80 [ 1452.308188][ T87] __slab_alloc+0x5d/0xa0 [ 1452.312348][ T87] __kmem_cache_alloc_node+0x1af/0x250 [ 1452.317643][ T87] __kmalloc_node_track_caller+0xa2/0x1e0 [ 1452.323196][ T87] __alloc_skb+0x125/0x2d0 [ 1452.327448][ T87] netlink_ack+0x392/0x12a0 [ 1452.331787][ T87] netlink_rcv_skb+0x24a/0x410 [ 1452.336503][ T87] rtnetlink_rcv+0x1c/0x20 [ 1452.340755][ T87] netlink_unicast+0x906/0xab0 [ 1452.345358][ T87] netlink_sendmsg+0xa15/0xd30 [ 1452.349958][ T87] page last free stack trace: [ 1452.354471][ T87] free_unref_page_prepare+0x83d/0x850 [ 1452.359766][ T87] free_unref_page+0xb2/0x5c0 [ 1452.364286][ T87] __free_pages+0x61/0xf0 [ 1452.368578][ T87] __vunmap+0x9f3/0xb60 [ 1452.372541][ T87] vfree+0x5c/0x80 [ 1452.376110][ T87] kcov_close+0x2b/0x50 [ 1452.380095][ T87] __fput+0x1e5/0x870 [ 1452.383911][ T87] ____fput+0x15/0x20 [ 1452.387730][ T87] task_work_run+0x24d/0x2e0 [ 1452.392158][ T87] do_exit+0xbd5/0x2b80 [ 1452.396150][ T87] do_group_exit+0x21a/0x2d0 [ 1452.400574][ T87] __x64_sys_exit_group+0x3f/0x40 [ 1452.405437][ T87] x64_sys_call+0x610/0x9a0 [ 1452.409775][ T87] do_syscall_64+0x3b/0xb0 [ 1452.414029][ T87] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1452.419758][ T87] [ 1452.421925][ T87] Memory state around the buggy address: [ 1452.427399][ T87] ffff888117cb0300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1452.435296][ T87] ffff888117cb0380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1452.443193][ T87] >ffff888117cb0400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1452.451088][ T87] ^ [ 1452.457603][ T87] ffff888117cb0480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1452.465501][ T87] ffff888117cb0500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1452.473487][ T87] ================================================================== [ 1452.519847][ T87] Disabling lock debugging due to kernel taint [ 1452.526210][T22927] EXT4-fs (loop3): unmounting filesystem. [ 1452.529913][ T87] hid 0003:28DE:1102.00D7: No HID_FEATURE_REPORT submitted - nothing to read [ 1452.540619][ T87] hid 0003:28DE:1102.00D7: No HID_FEATURE_REPORT submitted - nothing to read [ 1452.549458][ T87] hid 0003:28DE:1102.00D7: No HID_FEATURE_REPORT submitted - nothing to read [ 1452.558287][ T87] hid 0003:28DE:1102.00D7: No HID_FEATURE_REPORT submitted - nothing to read [ 1452.567110][ T87] hid 0003:28DE:1102.00D7: No HID_FEATURE_REPORT submitted - nothing to read [ 1452.576000][ T87] hid 0003:28DE:1102.00D7: No HID_FEATURE_REPORT submitted - nothing to read [ 1452.584896][ T87] hid 0003:28DE:1102.00D7: No HID_FEATURE_REPORT submitted - nothing to read [ 1452.593828][ T87] hid 0003:28DE:1102.00D7: No HID_FEATURE_REPORT submitted - nothing to read [ 1452.602647][ T87] hid 0003:28DE:1102.00D7: No HID_FEATURE_REPORT submitted - nothing to read [ 1452.611373][ T87] hid 0003:28DE:1102.00D7: No HID_FEATURE_REPORT submitted - nothing to read [ 1452.636794][ T1110] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 1453.066758][ T1110] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1453.077459][ T1110] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1453.087173][ T1110] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1453.099758][ T1110] usb 3-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 1453.108610][ T1110] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1453.117173][ T1110] usb 3-1: config 0 descriptor?? [ 1454.956739][ T1110] usbhid 3-1:0.0: can't add hid device: -71 [ 1454.962502][ T1110] usbhid: probe of 3-1:0.0 failed with error -71 [ 1454.969619][ T1110] usb 3-1: USB disconnect, device number 111