last executing test programs: 7.297613035s ago: executing program 0 (id=201): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8801, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r0, 0xf504, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000380)={0x2, 0x200000000004e23, @local}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000b40)={{r5}, &(0x7f0000000940), &(0x7f0000000980)=r6}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r6, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x8, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x29, &(0x7f0000000400)=[{}, {}], 0x10, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0x39, 0x8, 0x8, &(0x7f0000000300)}}, 0x10) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f0000000800)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x68, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x71}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x20}, @ETHTOOL_A_LINKINFO_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x81}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x9}]}, 0x68}, 0x1, 0x0, 0x0, 0x40}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10) syz_open_dev$usbfs(&(0x7f0000000100), 0x206, 0x8401) 7.296984044s ago: executing program 2 (id=202): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800000020b9078792"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) r0 = socket$unix(0x1, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000280)='ext4_mb_discard_preallocations\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x3ffffffffffffda, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240), 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) mount$incfs(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r4 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="f30500000f00000000001400000018000774080002000000002345444c047b673500000000804d276c34ccc2712bf908a7b8b0e5ce"], 0x2c}}, 0x0) getdents64(r4, 0xfffffffffffffffe, 0x29) write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) 6.286835617s ago: executing program 2 (id=204): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0}, &(0x7f0000000000), &(0x7f0000000180)}, 0x20) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{}, &(0x7f0000000040), &(0x7f0000000140)=r6}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000fdffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x10) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) close(0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) close(r5) 6.114956541s ago: executing program 2 (id=205): mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) r1 = userfaultfd(0x1) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa04, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}}) 5.841692823s ago: executing program 0 (id=207): prlimit64(0x0, 0x0, 0x0, 0x0) getpid() sched_setaffinity(0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@loopback, @in, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x3c}, 0xa, @in=@dev, 0x0, 0x4}}, 0xe8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) 5.813967676s ago: executing program 0 (id=208): mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000040), 0x12) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB="18020000000000000000000000000000850000005300000085000000230000009500000000000000a94be0c51261be6a99e5e06bb0a232d5e1f59f18f845f82e9a7cde9e8f1b547edf612a03f1737d951d7a617558b674e1c4fdfd771ebe7c33af3e4917be59ac67f0bbabcb8f41c23ba8d91633a8b9c70e804744dc081ac69cfea08e4e5a06f70c6792f2888d6fd95f202028070000003771bc3f325a6386a9d49e3c13b32461acf0be4b31638c29187d748841f439547bcdac15e52a4b6a2981eb4afadbbdf9157fa588f475c4cd2e44e2129dc6b93993909613e8d95f5610c067d9b97c524c210af077707d71e8512e"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc0, &(0x7f0000000140)=""/192}, 0x80) r3 = socket$inet6(0xa, 0x3, 0x8000000003c) prlimit64(0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) connect$inet6(r3, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c) sendmsg(r3, &(0x7f00000000c0)={0x0, 0x952b, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xfff2}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0x2a, &(0x7f0000006780), 0x4) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) recvmmsg(r4, &(0x7f0000005dc0)=[{{0x0, 0x0, 0x0}}], 0x4000000000002b1, 0x0, 0x0) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r5, 0xfff) syz_emit_ethernet(0x4a, &(0x7f0000000440)={@local, @random="24be2842400a", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008004f0fffeffe809005300fff5dd000000100001000a0c10000000000000000000", 0x58}], 0x1) sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9092dc1b6dbe9ab5becdcc777", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 5.599640403s ago: executing program 0 (id=210): r0 = syz_usb_connect$cdc_ecm(0x0, 0x76, &(0x7f0000000a00)=ANY=[@ANYBLOB="12011003020000202505a1a4400000000101090264000101000000090400001202060000052406000005240000000d240f01040000000000ff0700053deafd8f0724140800030008241c04800309000c241b0700fe0f00078100020905810300020104cf0905820200027f00000905030200040004049993567641f5ef23dbcc63332242a143d683ad1bb23d701d19a2740200d3dcebf116bc77f96a40d982689e80d1d2662319ec19c37212173849357ce5dbc8a18fdb7e8c5afe078c0baf6b59e941615746ac1d588461c815b50d24a6bbb130ad16402bcb29492b12129fcba5bf4e2b3247ab47592cec"], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x810}}]}) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3}, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$binder(0x0, &(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000001c0), 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='stats=']) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000240), 0x25, 0x4b6, &(0x7f0000000540)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) pwritev2(r4, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5406, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x103042, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0xfffffdef) umount2(&(0x7f00000001c0)='./file0\x00', 0x0) getdents64(r2, 0x0, 0x4100) ioctl$BLKFRASET(r2, 0x1264, &(0x7f0000000140)=0x8) ioctl$RTC_SET_TIME(r1, 0x4024700a, &(0x7f0000000040)={0x0, 0x8000000, 0xa, 0x14, 0x0, 0x3e, 0x1}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000480), 0x109242, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello') 5.082231155s ago: executing program 1 (id=213): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x1, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0x9a, &(0x7f0000000000)={@multicast, @random="36e8a070c9db", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "3000bb", 0x64, 0x2b, 0x0, @private2, @local, {[], {0x0, 0x0, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "82f63de64f6ce2ee11028289aefdb3449391a823213e6336516748a7949bb108", "402fa83b1d661c18462075368a186092", {"09deb8f71aa23f010300a99e9a16af2d", "040876a663a86d97f46b9665cc18492b"}}}}}}}}, 0x0) 5.013086121s ago: executing program 1 (id=214): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x8, 0x10001, 0x9, 0x1}, 0x48) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000180)=@generic={0x0}, 0x18) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}, {}, {}, {0x4}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000d00)='sched_switch\x00'}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000740)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r4, 0x10f, 0x8a, 0x0, 0x0) dup(0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@metacopy_on}]}) r5 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) mknodat$loop(r5, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x100000, &(0x7f0000000200)=ANY=[], 0x1, 0x0, 0x0) linkat(r6, &(0x7f0000000140)='./file1\x00', r6, &(0x7f00000002c0)='./file0\x00', 0x0) 4.158000481s ago: executing program 2 (id=206): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc086, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) r2 = syz_open_dev$vcsn(&(0x7f0000000080), 0x1, 0x0) readv(r2, &(0x7f0000002b00)=[{&(0x7f0000000740)=""/40, 0x28}, {&(0x7f00000004c0)=""/205, 0xcd}, {0x0}, {0x0}, {&(0x7f0000000680)=""/176, 0xb0}, {&(0x7f00000017c0)=""/4099, 0x1003}, {0x0}, {0x0}], 0x8) 4.108622785s ago: executing program 1 (id=215): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000540)=ANY=[@ANYBLOB="1201000074020440fd07010099480102030109021b0001000000000904000001c5b3e30009050b"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 3.408327112s ago: executing program 4 (id=222): r0 = socket$tipc(0x1e, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x0, 0x5, 0x10001, 0x9}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0xd2, &(0x7f0000000200)={@link_local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "14017b", 0x9c, 0x11, 0x0, @private2, @mcast2, {[], {0x0, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "5f7d521c4320e93d18e38e33b4e9b67c409c1652d9c4ce0ecdde2e1e46f6ffe4", "6a69850cc41e324e4b74bbe2d035ad8b347375115ab5835fa31bd24e36ccf35a6ab56bd8f9e9aa2f5cac9d895ae82be5", "a770610ab9f7594b914359a8db5b87f85252781b64f7fdd894815601", {"64da494e18a6e4f94017b5a54f94a09d", "b4143f166707d971b98cab1a955c5522"}}}}}}}}, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x1}}, 0x10) bind$tipc(r1, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r2 = socket$tipc(0x1e, 0x4, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x83f}, 0x10) bind$tipc(r1, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) sendmsg$tipc(r0, &(0x7f00000006c0)={&(0x7f0000000300)=@nameseq={0x1e, 0x1, 0x2, {0x0, 0x1, 0x4}}, 0x10, &(0x7f00000008c0)=[{0x0}, {0x0}, {&(0x7f0000000580)="77d6993f1007d345e52cb48dea798ff0e332c82f1b25b154dc02be2af15419dbed44dba582ddf559e0a3e70bf4530d4a625151c7e4cacc0f6dea6451374aedf974d88aeee6e8f30d14d614061ddaeb72bb042e2b6a3f074d7e2cad6620ae846dfa29d36b8a5dd9d94fbb2eb9591fe06fc7d6e94f522a9bcf4f424b9056be", 0x7e}, {&(0x7f0000000680)="d80fb2c09d4faa90107123d16cda2154e1ec1347ddd22ef9806495", 0x1b}, {&(0x7f00000007c0)="8e2617b5239abe798181324c5efd06b35d44686089997cd8161c2c1c38a702a62eabbebb1a79b6805e3c8bd0ac56ac7e5dc6a3a9f9ad225efcdb65032e2184147fd7afa1e849c1b0c79c6c68d7e96cea26604cf0b3587a28de604d1b3810a59290056f5d34a05edd13063da4f38fd4", 0x6f}], 0x5}, 0x0) bind$tipc(r0, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x3, 0x4}}, 0x10) bind$tipc(r0, &(0x7f0000000100)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) sendmsg$tipc(r0, &(0x7f0000002340)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10, 0x0}, 0x0) 3.407875542s ago: executing program 4 (id=223): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x4, 0x4}, 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0xb, 0x0, r1, 0x20}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000006007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000005000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') r4 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/4\x00') mount$9p_fd(0x20100000, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)=ANY=[@ANYRESDEC=r3, @ANYRESDEC=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYRESHEX=r4]) getuid() socket$nl_xfrm(0x10, 0x3, 0x6) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r5, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000580)={'veth0_to_team\x00', &(0x7f0000000040)=@ethtool_ringparam={0x10}}) r7 = syz_open_pts(r5, 0x0) r8 = dup3(r7, r5, 0x0) read$watch_queue(r5, &(0x7f0000002e00)=""/4088, 0xff8) ioctl$TCSETA(r8, 0x5406, &(0x7f0000000000)={0x8, 0x0, 0x0, 0x0, 0x0, "064e52dd1ddd8565"}) r9 = gettid() r10 = inotify_init1(0x0) fcntl$setown(r10, 0x8, 0xffffffffffffffff) fcntl$getownex(r10, 0x10, &(0x7f0000000040)={0x0, 0x0}) kcmp(r9, r11, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) read$watch_queue(r8, &(0x7f0000004e00)=""/4084, 0xfdef) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r8, 0x0, 0x25, 0x5, @void}, 0x10) 3.224015617s ago: executing program 3 (id=226): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x8, 0x10001, 0x9, 0x1}, 0x48) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000180)=@generic={0x0}, 0x18) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}, {}, {}, {0x4}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000d00)='sched_switch\x00'}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000740)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r4, 0x10f, 0x8a, 0x0, 0x0) dup(0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@metacopy_on}]}) r5 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) mknodat$loop(r5, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x100000, &(0x7f0000000200)=ANY=[], 0x1, 0x0, 0x0) linkat(r6, &(0x7f0000000140)='./file1\x00', r6, &(0x7f00000002c0)='./file0\x00', 0x0) 2.570996941s ago: executing program 0 (id=227): prlimit64(0x0, 0x0, 0x0, 0x0) getpid() sched_setaffinity(0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@loopback, @in, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x3c}, 0xa, @in=@dev, 0x0, 0x4}}, 0xe8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) 2.559641752s ago: executing program 4 (id=228): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000e006"]) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000180)='memory.max\x00', 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0xc, 0x0, 0x0}, 0x90) r0 = syz_open_procfs(0x0, 0x0) fchdir(r0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40106614, 0x0) open(0x0, 0x0, 0x0) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x2007ffb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x10, r1, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) syz_emit_ethernet(0x3e, &(0x7f00000004c0)=ANY=[], 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) readv(r2, &(0x7f0000001380)=[{&(0x7f0000000080)=""/45, 0x2d}], 0x1) 2.509502295s ago: executing program 0 (id=229): r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) r5 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x0) io_setup(0x6, &(0x7f0000001380)=0x0) io_submit(r6, 0x1, &(0x7f00000000c0)=[&(0x7f0000000100)={0x1000000, 0x0, 0x0, 0x5, 0x0, r5, 0x0}]) syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@dellink={0x20, 0x11, 0x101, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x20}}, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0xfffffecc) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x7151, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r9}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r10}, 0x10) r11 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0xb8, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r11, 0x0, 0x0) syz_usb_control_io$hid(r11, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x8, {[@global=@item_012={0x0, 0x1, 0xa}, @main=@item_012={0x1, 0x0, 0x0, 'V'}, @global=@item_4={0x3, 0x1, 0x0, "00001000"}]}}, 0x0}, 0x0) 2.298502953s ago: executing program 2 (id=230): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002a20702500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000000000206104724e000000000001090224000100000000090400000103000200092100000001220500090581"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r1, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) syz_usb_control_io(r0, &(0x7f0000000500)={0x2c, &(0x7f0000000680)=ANY=[@ANYBLOB="000007000000985f"], 0x0, 0x0, 0x0, 0x0}, 0x0) 2.297054433s ago: executing program 3 (id=231): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='mm_page_alloc\x00', r0}, 0x10) r1 = socket(0xa, 0x1, 0x0) setsockopt(r1, 0x29, 0x6, 0x0, 0x2000) 2.284687164s ago: executing program 3 (id=232): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x2ce03, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40081271, &(0x7f0000001080)) 2.20691206s ago: executing program 3 (id=233): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0xe0, &(0x7f0000000f00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffeae, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x23, 0x0}}, 0xffffff8b) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0xc9d7, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r0, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20) syz_emit_ethernet(0x66, &(0x7f00000006c0)={@multicast, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4adf7", 0x30, 0x3a, 0x0, @empty, @local, {[], @time_exceed={0x2, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "a49063", 0x0, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @loopback}}}}}}}}, 0x0) 2.178000972s ago: executing program 3 (id=234): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4d9, 0xa055, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x408, 0xcd, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000ac0)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x5, {0x5, 0x0, "000200"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 2.100382329s ago: executing program 1 (id=235): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x12, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="18060000000000000000000000e3af0018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000e000000b70000000000000095"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 2.046633403s ago: executing program 1 (id=236): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18030000000000000000000000000000181c0000", @ANYRES32, @ANYBLOB="0000000000000000b7020000140000e0b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f0000000280)={0x14, 0x0, 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x4000000, 0x32702) syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0xb51981) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x10, 0x4, 0x6, 0x7ff, 0x1026, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000380), 0x5, r2}, 0x38) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000140)='mm_page_alloc\x00', r3}, 0x10) mincore(&(0x7f0000f0c000/0x3000)=nil, 0x0, &(0x7f0000afaf0a)=""/246) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000840)=""/151}, 0x20) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000580)=ANY=[@ANYRES64, @ANYRES32, @ANYRES64=r4, @ANYRESDEC=r5, @ANYRES8=r1, @ANYRESOCT=r4], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000540)='kfree\x00', r6}, 0x10) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$incfs(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000340), 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x2, 0xfff, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffd}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8}, 0x10) syz_mount_image$fuse(&(0x7f0000000140), &(0x7f00000001c0)='./file0\x00', 0x8a0a5, &(0x7f00000002c0)=ANY=[@ANYRES16], 0x0, 0x0, 0x0) keyctl$restrict_keyring(0xa, 0x0, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000400)='id\x0f\xac\xd1\xeb\xf4\xd8&w\xef\x9f`T3%\xfa\xbf\xef\xeb\x8e1w\xfd') syz_usb_connect$cdc_ecm(0x0, 0x0, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io(r4, &(0x7f00000011c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0}, 0x0) 1.664730855s ago: executing program 4 (id=237): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) mkdir(0x0, 0x0) mkdir(0x0, 0x139) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x0, 0x0, 0x0, 0x401}, 0x48) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0}) close(r5) setsockopt$sock_attach_bpf(r6, 0x10f, 0x87, &(0x7f0000000180), 0x127) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) close(r6) 748.850879ms ago: executing program 4 (id=238): openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$usbfs(&(0x7f0000000100), 0x71, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r2, @ANYRES32=r2], 0x44}}, 0x0) 530.078317ms ago: executing program 4 (id=239): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f00000003c0)={&(0x7f0000000180), 0x10, &(0x7f0000000380)=[{&(0x7f0000000480)="c3e972bd85a6d84136d6dd55048d3593a74f338ce6772ab9a6f64041c2f6fbbecdc08ebcd3192b6a53662dae7c8e9c665e80a5d0925f728dcac30c29793992e588952653d414cb8ccdabc38767fee819ec5af0c5ee936880fe8549b4ed347779cab4ffd4e0b62c53a1c01db28f2b3f91c34211c9353bc1dece61511917c2245fd66cb8dffeacb4d46d627c97b498bf1ff6b313bfbc9765457c831771d5eec7997ec242e4505f01c1bb3e069b2e630f42a2be86598a61", 0x64}, {&(0x7f0000000300)='V', 0x1}, {&(0x7f0000001600)="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", 0x1000}, {&(0x7f0000000340)="b768eb20304f2fdc5a9694a4867840d93170ca1a86406f", 0xfffffec0}], 0x4, 0x0, 0x0, 0x8010}, 0x0) sendmmsg(r1, &(0x7f0000003b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000000f00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = dup2(r1, r0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000080), 0x4) sendmmsg$unix(r3, &(0x7f0000001340)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000000400)=@abs, 0x6e, &(0x7f0000000140)=[{&(0x7f0000000540)="ce966893ffb05ffac67725c545826081671e1f50a2f88e2bbe535fe73b6b2333ad91d82dd7c4a8aa9173460b74355ef25afb06273a9681ef7a882a6a55ccb3d3f9a41fe75fbdd647210d3db8e24c9e2b121f6a5f0e4c9256f2c458b547799229a71603df174364af938e18e4b94f01d061ded21a45cdc1ed4a0ceff8e39388d28484123f0ba51b43bf9e07319beeaa63a38101a092397d4f8a7def986475167d66b6755c6262a4c38cfeb29e268f53", 0xaf}, {&(0x7f0000000600)="478497813717f9d817936bd52fe6e6a5a7cee00fcf6063fa6664fccca256fad90ea34e3c78ff04040a5d2c06318825713c5851503e153a331a93579725b8afbee3a827841febbdbf58470345d71ad620923c72ccc6bd4ffb5ff6ee6e9336efc0aa1080e0", 0x64}, {&(0x7f0000001480)="84a13f5db46521d1c680585a417396fa3a38c1036194db971226ddb9a710bbcf04ec5db1348729a48e71ebe5b6977b0d5c27b8991a0256aa96dc6fe189631dde4ef5c8edde469d61a4cd2a16bd7a17f104aac6755c389937c8a6bccb31793727f3bad854fb9e65d04cedaab0547ff72493128387cf385153f6bd2b9bebd164270a2a553631558dfa80fffab821efabc00067a714f433bc044452352b5874d698d1e4c66673dfa299c6ec391f011633bdc00a680a4cdd47bbca124d193178e377352d0225d8e7dbf859d91b9c99dd4d24b9a134ca2e693d01054cabf1d7c3a70b8e7a5045523e761ac7682351fa54", 0xffc6}, {&(0x7f0000000780)="0100f94945de15ae1b313eaa6869b3e26002c9d0d6c7f71ea65cc6e63e970913fdf880198807394b7254e54f274d4a18af84c893d9f8415cea7ad9def74b81ebcc00dabea85cc664b083d7a58a822bc720236070c9d1ed132adc1f41842a9404143a4b4d5fadbb81f57023a5e8396a50ebe5329990e52a0ff67e8174db0aab6dfe2e0eb2edf960", 0x87}], 0x4, &(0x7f0000000680)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x100}}, {{&(0x7f0000000c40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000cc0)=[{&(0x7f0000000d40)="c485ae5463e7373921aedf2b7f3ae0a8ca79444055ffcf6255979ed13acbb80c6c24ae23d9cd68c29e71179e603b5a7717414c78fd06b7e6fba140d99fb90339afecfcf70226b4c3cb279deade7ea2faac187730d9c71b13baa3785a902a13a2a6eaf38897f74e3f2d95b85e3ed05fcdf8b0f816609ec82877bb99096f1ea9cabeaca507ca87e4d1d4639bef", 0x8c}, {&(0x7f0000000e00)="8b98cc2669d0a84b16b18485e3b802e1a345a2f3c74c6e268b06dafc8d209377a5f6f4f27f66694c92d88c41c6c52719f4111a4789847b715f48d7bfdc03b4349a0943c963db4bc0333edc", 0x4b}], 0x2, &(0x7f0000000ec0)=ANY=[@ANYBLOB="30000002b5371de60000000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32], 0x30, 0xc040041}}, {{0x0, 0x0, &(0x7f0000000fc0)=[{&(0x7f0000000f00)="893958bb763d38091e7e242e6b89748e3ae0e526db912907f759bc2da4327401b44bb9cbd9420fd576eeac9c46c7d3a21d84aa3bbb63db4454d363cb9d87a0a72ec46625171cadc7be01cdcfc4bd17e09d0ffe8e3d65175491881c81a2ef8257beea93031b11889c28a46ec4e5bd48f92f08a9b66a331e00e0b1d5e413b9b1b110fc3619d4ce658d63b1ebca69fca2afa68a8ac0d1339abf12ef5bc3aa5f10223527c3f42aa9d10b4459ed9a54e16836", 0xb0}], 0x1, &(0x7f0000001280)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xc0}}], 0x5, 0x0) 238.822141ms ago: executing program 2 (id=240): socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x16, &(0x7f0000000100)={@remote}, 0x14) socket$netlink(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) socket$igmp(0x2, 0x3, 0x2) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x26e1, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) splice(r3, 0x0, r5, 0x0, 0x800ff06, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f0000000080)='cgroup.controllers\x00', 0x0, 0x0) openat$cgroup_ro(r7, &(0x7f00000000c0)='cpuset.effective_cpus\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan0\x00'}) socket$inet(0x10, 0xa, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00'}, 0x10) bind$packet(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(r2, &(0x7f0000000040)=ANY=[@ANYRES16=r4], 0xfffffc8f) splice(r1, 0x0, r4, 0x0, 0x800, 0x0) 173.121846ms ago: executing program 1 (id=241): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc086, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) r2 = syz_open_dev$vcsn(&(0x7f0000000080), 0x1, 0x0) readv(r2, &(0x7f0000002b00)=[{&(0x7f0000000740)=""/40, 0x28}, {&(0x7f00000004c0)=""/205, 0xcd}, {0x0}, {0x0}, {&(0x7f0000000680)=""/176, 0xb0}, {&(0x7f00000017c0)=""/4099, 0x1003}, {0x0}, {0x0}], 0x8) 0s ago: executing program 3 (id=242): syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000040)='./file0\x00', 0x1008801, &(0x7f0000000080)=ANY=[], 0x1, 0x1f8, &(0x7f0000000400)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) add_key(0x0, &(0x7f0000000000)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$UI_SET_ABSBIT(0xffffffffffffffff, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x3) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f0000000380)={'syztnl1\x00', 0x0, 0x2f, 0x0, 0x0, 0x645c, 0x7, @private1, @local, 0x40}}) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x0, 0x2, &(0x7f0000000300)=@raw=[@map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x6}], &(0x7f0000000600)='GPL\x00', 0x7cd693f9, 0xb8, &(0x7f0000000640)=""/184, 0x40f00, 0x1, '\x00', 0x0, 0x21, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000740)={0x5, 0x9, 0x7ff, 0x10}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.83' (ED25519) to the list of known hosts. [ 29.101548][ T24] audit: type=1400 audit(1721823088.190:66): avc: denied { mounton } for pid=282 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 29.102825][ T282] cgroup: Unknown subsys name 'net' [ 29.124197][ T24] audit: type=1400 audit(1721823088.190:67): avc: denied { mount } for pid=282 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 29.151278][ T24] audit: type=1400 audit(1721823088.220:68): avc: denied { unmount } for pid=282 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 29.151480][ T282] cgroup: Unknown subsys name 'devices' [ 29.319650][ T282] cgroup: Unknown subsys name 'hugetlb' [ 29.325071][ T282] cgroup: Unknown subsys name 'rlimit' [ 29.460177][ T24] audit: type=1400 audit(1721823088.550:69): avc: denied { setattr } for pid=282 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=161 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 29.483387][ T24] audit: type=1400 audit(1721823088.550:70): avc: denied { mounton } for pid=282 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 29.490124][ T285] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 29.508284][ T24] audit: type=1400 audit(1721823088.550:71): avc: denied { mount } for pid=282 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 29.539300][ T24] audit: type=1400 audit(1721823088.600:72): avc: denied { relabelto } for pid=285 comm="mkswap" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 29.564777][ T24] audit: type=1400 audit(1721823088.600:73): avc: denied { write } for pid=285 comm="mkswap" path="/root/swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 29.610378][ T24] audit: type=1400 audit(1721823088.700:74): avc: denied { read } for pid=282 comm="syz-executor" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 29.635799][ T24] audit: type=1400 audit(1721823088.700:75): avc: denied { open } for pid=282 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 29.635826][ T282] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 30.512442][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.519348][ T292] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.526576][ T292] device bridge_slave_0 entered promiscuous mode [ 30.534369][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.541345][ T292] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.548565][ T292] device bridge_slave_1 entered promiscuous mode [ 30.619524][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.626372][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.633849][ T293] device bridge_slave_0 entered promiscuous mode [ 30.651398][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.658398][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.665527][ T293] device bridge_slave_1 entered promiscuous mode [ 30.714309][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.721473][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.728786][ T294] device bridge_slave_0 entered promiscuous mode [ 30.735275][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.742376][ T296] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.749699][ T296] device bridge_slave_0 entered promiscuous mode [ 30.779205][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.786057][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.793403][ T294] device bridge_slave_1 entered promiscuous mode [ 30.800009][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.806839][ T296] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.814424][ T296] device bridge_slave_1 entered promiscuous mode [ 30.845004][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.851869][ T292] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.858989][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.865736][ T292] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.886297][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.893291][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.901317][ T295] device bridge_slave_0 entered promiscuous mode [ 30.908556][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.915392][ T293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.922512][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.929292][ T293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.940473][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.947318][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.954824][ T295] device bridge_slave_1 entered promiscuous mode [ 31.028655][ T300] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.035675][ T300] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.043293][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 31.050787][ T300] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.057735][ T300] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.088693][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 31.095978][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 31.119485][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 31.127521][ T300] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.134371][ T300] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.141917][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 31.150031][ T300] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.156851][ T300] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.182571][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 31.190669][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.197495][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.205090][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 31.228582][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 31.236268][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 31.244457][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.251304][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.258739][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 31.266466][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 31.274389][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 31.282986][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.289838][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.312100][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 31.319936][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 31.328551][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 31.335761][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 31.344790][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 31.353083][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.359936][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.367274][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 31.375316][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.382157][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.389351][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 31.397045][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 31.404957][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 31.413104][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.419955][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.427091][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 31.443047][ T293] device veth0_vlan entered promiscuous mode [ 31.449429][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 31.457251][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 31.465477][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 31.473378][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 31.494233][ T294] device veth0_vlan entered promiscuous mode [ 31.502013][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 31.510988][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 31.519402][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 31.527575][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 31.535468][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 31.542933][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 31.556511][ T292] device veth0_vlan entered promiscuous mode [ 31.563063][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 31.570928][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 31.578901][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 31.587036][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 31.600055][ T296] device veth0_vlan entered promiscuous mode [ 31.608531][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 31.615748][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 31.623696][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 31.631428][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 31.650061][ T292] device veth1_macvtap entered promiscuous mode [ 31.656871][ T293] device veth1_macvtap entered promiscuous mode [ 31.663515][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 31.671546][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 31.678811][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 31.686749][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 31.694815][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 31.702345][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 31.710336][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 31.718306][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 31.745409][ T294] device veth1_macvtap entered promiscuous mode [ 31.752272][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 31.760671][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 31.767896][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 31.775935][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 31.784224][ T314] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.791064][ T314] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.798254][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 31.806325][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 31.814387][ T314] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.821253][ T314] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.828410][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 31.836179][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 31.843967][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 31.851802][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 31.859570][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 31.867585][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 31.875726][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 31.883954][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 31.891902][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 31.900190][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 31.908225][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 31.915616][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 31.923734][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 31.931957][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 31.943065][ T295] device veth0_vlan entered promiscuous mode [ 31.951142][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 31.959563][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 31.967698][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 31.975780][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 31.983803][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 31.991346][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 31.999711][ T296] device veth1_macvtap entered promiscuous mode [ 32.018466][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 32.026640][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 32.034963][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 32.044537][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 32.053275][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 32.062280][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 32.071011][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 32.085659][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 32.094034][ T292] cgroup: cgroup: disabling cgroup2 socket matching due to net_prio or net_cls activation [ 32.094483][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 32.116410][ T295] device veth1_macvtap entered promiscuous mode [ 32.157671][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 32.170053][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 32.178246][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 32.185720][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 32.194088][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 32.210223][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 32.218891][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 32.226965][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 32.235316][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 32.243544][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 32.251833][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 32.322750][ T331] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 32.737028][ T351] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 32.811924][ T351] ext4 filesystem being mounted at /2/file0 supports timestamps until 2038 (0x7fffffff) [ 33.360159][ T372] netlink: 'syz.0.16': attribute type 298 has an invalid length. [ 33.397877][ T314] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 33.593209][ T379] syz.1.19[379] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 33.593263][ T379] syz.1.19[379] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 33.611522][ T379] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 33.632054][ T379] SELinux: failed to load policy [ 33.638059][ T314] usb 5-1: Using ep0 maxpacket: 32 [ 33.657904][ T15] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 33.692814][ T386] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 33.702212][ T386] EXT4-fs (loop1): orphan cleanup on readonly fs [ 33.710062][ T386] EXT4-fs warning (device loop1): ext4_enable_quotas:6467: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 33.725076][ T386] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 33.757859][ T314] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 33.769034][ T314] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 33.779095][ T314] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 33.788557][ T314] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.798496][ T386] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.21: bg 0: block 40: padding at end of block bitmap is not set [ 33.821055][ T386] EXT4-fs error (device loop1) in ext4_mb_clear_bb:5648: Corrupt filesystem [ 33.830581][ T314] hub 5-1:4.0: USB hub found [ 33.830690][ T386] EXT4-fs (loop1): 1 truncate cleaned up [ 33.840529][ T386] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 34.017882][ T15] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 34.028038][ T15] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 34.047903][ T314] hub 5-1:4.0: 2 ports detected [ 34.118461][ T406] netlink: 8 bytes leftover after parsing attributes in process `syz.3.27'. [ 34.127867][ T24] kauditd_printk_skb: 64 callbacks suppressed [ 34.127879][ T24] audit: type=1400 audit(1721823093.200:140): avc: denied { ioctl } for pid=399 comm="syz.3.27" path="socket:[14935]" dev="sockfs" ino=14935 ioctlcmd=0x8915 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 34.309075][ T24] audit: type=1400 audit(1721823093.340:141): avc: denied { create } for pid=367 comm="syz.4.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 34.328761][ T314] hub 5-1:4.0: hub_hub_status failed (err = -71) [ 34.335184][ T314] hub 5-1:4.0: config failed, can't get hub status (err -71) [ 34.347935][ T15] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 34.362018][ T15] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 34.370139][ T314] usb 5-1: USB disconnect, device number 2 [ 34.385061][ T15] usb 1-1: SerialNumber: syz [ 34.644951][ T409] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 34.668867][ T15] usb 1-1: 0:2 : does not exist [ 34.677328][ T15] usb 1-1: USB disconnect, device number 2 [ 35.067480][ T24] audit: type=1400 audit(1721823094.090:142): avc: denied { read } for pid=417 comm="syz.2.30" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 35.278664][ T419] F2FS-fs (loop2): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 35.286141][ T419] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 35.296335][ T419] F2FS-fs (loop2): invalid crc value [ 35.317030][ T423] EXT4-fs (loop3): mounted filesystem without journal. Opts: stripe=0x0000000000000401,errors=remount-ro, [ 35.338552][ T317] udevd[317]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 35.356519][ T419] F2FS-fs (loop2): Found nat_bits in checkpoint [ 35.443074][ T419] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 35.450472][ T419] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 36.007963][ T314] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 36.130221][ T24] audit: type=1400 audit(1721823095.220:143): avc: denied { append } for pid=456 comm="syz.3.40" name="001" dev="devtmpfs" ino=160 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 36.397874][ T314] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 36.409086][ T314] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 36.418817][ T314] usb 2-1: New USB device found, idVendor=056a, idProduct=0016, bcdDevice= 0.00 [ 36.427738][ T314] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 36.435938][ T314] usb 2-1: config 0 descriptor?? [ 36.440799][ T300] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 36.448061][ T463] ====================================================== [ 36.448061][ T463] WARNING: the mand mount option is being deprecated and [ 36.448061][ T463] will be removed in v5.15! [ 36.448061][ T463] ====================================================== [ 36.493943][ T463] F2FS-fs (loop0): invalid crc value [ 36.500740][ T463] F2FS-fs (loop0): Found nat_bits in checkpoint [ 36.532538][ T463] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 36.545455][ T24] audit: type=1400 audit(1721823095.630:144): avc: denied { write } for pid=462 comm="syz.0.42" name="/" dev="loop0" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 36.566688][ T24] audit: type=1400 audit(1721823095.630:145): avc: denied { add_name } for pid=462 comm="syz.0.42" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 36.567112][ T292] attempt to access beyond end of device [ 36.567112][ T292] loop0: rw=2049, want=45104, limit=40427 [ 36.586905][ T24] audit: type=1400 audit(1721823095.630:146): avc: denied { read write open } for pid=462 comm="syz.0.42" path="/3/file0/file1" dev="loop0" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 36.733237][ T24] audit: type=1400 audit(1721823095.820:147): avc: denied { create } for pid=469 comm="syz.0.43" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 36.753822][ T24] audit: type=1400 audit(1721823095.820:148): avc: denied { write } for pid=469 comm="syz.0.43" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 36.867956][ T300] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 36.878784][ T300] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 36.888905][ T300] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 36.897896][ T300] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 36.906424][ T300] usb 4-1: config 0 descriptor?? [ 37.257215][ T314] wacom 0003:056A:0016.0001: unknown main item tag 0x0 [ 37.263926][ T476] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.263936][ T476] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.264367][ T476] device bridge_slave_0 entered promiscuous mode [ 37.272011][ T314] wacom 0003:056A:0016.0001: Unknown device_type for 'HID 056a:0016'. Assuming pen. [ 37.279831][ T476] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.286054][ T314] wacom 0003:056A:0016.0001: hidraw0: USB HID v0.00 Device [HID 056a:0016] on usb-dummy_hcd.1-1/input0 [ 37.293554][ T476] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.301471][ T314] input: Wacom Graphire4 6x8 Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:056A:0016.0001/input/input4 [ 37.311739][ T476] device bridge_slave_1 entered promiscuous mode [ 37.323470][ T314] usb 2-1: USB disconnect, device number 2 [ 37.386587][ T476] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.393455][ T476] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.400639][ T476] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.407409][ T476] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.430445][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 37.438043][ T315] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.445129][ T315] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.456557][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 37.464731][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.471588][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.487814][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 37.495891][ T315] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.502744][ T315] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.510093][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 37.517917][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 37.525498][ T24] audit: type=1400 audit(1721823096.610:149): avc: denied { setopt } for pid=458 comm="syz.3.41" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 37.556815][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 37.565484][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 37.574409][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 37.582864][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 37.593466][ T476] device veth0_vlan entered promiscuous mode [ 37.627676][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 37.693171][ T476] device veth1_macvtap entered promiscuous mode [ 37.708725][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 37.730015][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 37.750494][ T488] incfs: Unexpected inode type [ 37.777998][ T300] usbhid 4-1:0.0: can't add hid device: -71 [ 37.784249][ T300] usbhid: probe of 4-1:0.0 failed with error -71 [ 37.798816][ T490] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 37.819542][ T300] usb 4-1: USB disconnect, device number 2 [ 37.833442][ T490] EXT4-fs error (device loop0): ext4_free_branches:1026: inode #11: comm syz.0.56: invalid indirect mapped block 4294967295 (level 1) [ 37.847401][ T490] EXT4-fs error (device loop0): ext4_free_branches:1026: inode #11: comm syz.0.56: invalid indirect mapped block 4294967295 (level 1) [ 37.861619][ T490] EXT4-fs (loop0): 2 truncates cleaned up [ 37.867313][ T490] EXT4-fs (loop0): mounted filesystem without journal. Opts: noauto_da_alloc,init_itable=0x0000000000000006,dioread_nolock,,errors=continue [ 37.883022][ T7] device bridge_slave_1 left promiscuous mode [ 37.889175][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.896474][ T7] device bridge_slave_0 left promiscuous mode [ 37.902633][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.910411][ T7] device veth1_macvtap left promiscuous mode [ 37.916232][ T7] device veth0_vlan left promiscuous mode [ 37.999769][ T490] netlink: 20 bytes leftover after parsing attributes in process `syz.0.56'. [ 38.751361][ T512] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.758380][ T512] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.765520][ T512] device bridge_slave_0 entered promiscuous mode [ 38.774951][ T512] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.781960][ T512] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.789208][ T512] device bridge_slave_1 entered promiscuous mode [ 38.855904][ T512] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.862786][ T512] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.869886][ T512] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.876634][ T512] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.890197][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.897351][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.946343][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 38.960489][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 38.978672][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 38.986999][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 38.995186][ T300] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.002068][ T300] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.009615][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 39.018706][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 39.026815][ T300] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.033988][ T300] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.047533][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 39.056724][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 39.065587][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 39.073774][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 39.089891][ T380] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 39.098179][ T380] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 39.112026][ T380] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 39.120258][ T380] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 39.135899][ T380] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 39.143624][ T380] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 39.151613][ T512] device veth0_vlan entered promiscuous mode [ 39.155256][ T24] kauditd_printk_skb: 87 callbacks suppressed [ 39.155270][ T24] audit: type=1400 audit(1721823098.240:237): avc: denied { create } for pid=525 comm="syz.3.63" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 39.166211][ T380] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 39.190941][ T380] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 39.198947][ T24] audit: type=1400 audit(1721823098.240:238): avc: denied { write } for pid=525 comm="syz.3.63" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 39.209977][ T528] exfat: Deprecated parameter 'utf8' [ 39.218140][ T53] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 39.230799][ T528] exfat: Deprecated parameter 'namecase' [ 39.236523][ T528] exfat: Deprecated parameter 'utf8' [ 39.243860][ T512] device veth1_macvtap entered promiscuous mode [ 39.253584][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 39.261655][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 39.263847][ T528] exFAT-fs (loop3): failed to load upcase table (idx : 0x00012153, chksum : 0xc3dffc2e, utbl_chksum : 0xe619d30d) [ 39.270035][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 39.297657][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 39.354154][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 39.408573][ T9] device bridge_slave_1 left promiscuous mode [ 39.414588][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.423910][ T9] device bridge_slave_0 left promiscuous mode [ 39.430618][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.442395][ T9] device veth1_macvtap left promiscuous mode [ 39.448882][ T9] device veth0_vlan left promiscuous mode [ 39.727854][ T53] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 39.742079][ T53] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 39.754246][ T53] usb 1-1: New USB device found, idVendor=056a, idProduct=0016, bcdDevice= 0.00 [ 39.763447][ T53] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 39.776439][ T53] usb 1-1: config 0 descriptor?? [ 39.810693][ T24] audit: type=1400 audit(1721823098.900:239): avc: denied { ioctl } for pid=540 comm="syz.1.66" path="socket:[15634]" dev="sockfs" ino=15634 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 39.889208][ T524] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 39.896903][ T24] audit: type=1400 audit(1721823098.980:240): avc: denied { create } for pid=540 comm="syz.1.66" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 40.053992][ T546] x_tables: ip_tables: udplite match: only valid for protocol 136 [ 40.226020][ T547] netlink: 220 bytes leftover after parsing attributes in process `syz.2.67'. [ 40.287870][ T524] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 40.300490][ T524] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 40.312350][ T53] wacom 0003:056A:0016.0002: unknown main item tag 0x0 [ 40.320026][ T53] wacom 0003:056A:0016.0002: Unknown device_type for 'HID 056a:0016'. Assuming pen. [ 40.329568][ T524] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 40.341011][ T53] wacom 0003:056A:0016.0002: hidraw0: USB HID v0.00 Device [HID 056a:0016] on usb-dummy_hcd.0-1/input0 [ 40.352132][ T524] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.362583][ T53] input: Wacom Graphire4 6x8 Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:056A:0016.0002/input/input7 [ 40.377007][ T524] usb 4-1: config 0 descriptor?? [ 40.516268][ T481] usb 1-1: USB disconnect, device number 3 [ 40.776440][ T24] audit: type=1400 audit(1721823099.860:241): avc: denied { write } for pid=551 comm="syz.2.69" name="fib_triestat" dev="proc" ino=4026532301 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 41.180686][ T564] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 41.193975][ T564] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 41.206327][ T564] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2800: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 41.210694][ T524] usbhid 4-1:0.0: can't add hid device: -32 [ 41.225177][ T524] usbhid: probe of 4-1:0.0 failed with error -32 [ 41.238021][ T564] EXT4-fs (loop0): 1 truncate cleaned up [ 41.243522][ T564] EXT4-fs (loop0): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000068,lazytime,nombcache,noload,,errors=continue [ 41.266137][ T564] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 41.267658][ T24] audit: type=1400 audit(1721823100.350:242): avc: denied { create } for pid=563 comm="syz.0.74" name=E91F7189591E9233614B scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sock_file permissive=1 trawcon=2321202E2F6367726F75702F66696C65306161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 41.634427][ T24] audit: type=1400 audit(1721823100.500:243): avc: denied { name_bind } for pid=559 comm="syz.2.72" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 41.743499][ T24] audit: type=1400 audit(1721823100.500:244): avc: denied { node_bind } for pid=559 comm="syz.2.72" saddr=172.20.20.170 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 41.845743][ T24] audit: type=1326 audit(1721823100.930:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=573 comm="syz.1.76" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febacb81f19 code=0x7ffc0000 [ 41.845766][ T569] loop2: unable to read partition table [ 41.874093][ T569] loop2: partition table beyond EOD, truncated [ 41.880216][ T569] loop_reread_partitions: partition scan of loop2 () failed (rc=-5) [ 41.893025][ T24] audit: type=1326 audit(1721823100.930:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=573 comm="syz.1.76" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febacb81f19 code=0x7ffc0000 [ 41.988052][ T93] loop2: unable to read partition table [ 41.993800][ T93] loop2: partition table beyond EOD, truncated [ 42.339055][ T25] usb 4-1: USB disconnect, device number 3 [ 42.581216][ T597] netlink: 220 bytes leftover after parsing attributes in process `syz.2.80'. [ 42.594566][ T598] syz.0.83[598] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 42.594628][ T598] syz.0.83[598] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 42.747805][ T25] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 43.017820][ T25] usb 4-1: Using ep0 maxpacket: 16 [ 43.057834][ T481] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 43.137873][ T25] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 43.148663][ T25] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 43.158350][ T25] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 43.167880][ T25] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 43.177385][ T25] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 43.186891][ T25] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 43.196344][ T25] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 43.307874][ T25] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 43.307890][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 43.307901][ T25] usb 4-1: SerialNumber: syz [ 43.348418][ T25] cdc_acm: probe of 4-1:1.0 failed with error -12 [ 43.428021][ T481] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 43.442596][ T481] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 43.455636][ T481] usb 2-1: New USB device found, idVendor=056a, idProduct=0016, bcdDevice= 0.00 [ 43.471796][ T607] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.478832][ T481] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 43.487113][ T607] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.497377][ T481] usb 2-1: config 0 descriptor?? [ 43.502556][ T607] device bridge_slave_0 entered promiscuous mode [ 43.527157][ T607] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.534710][ T607] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.545230][ T607] device bridge_slave_1 entered promiscuous mode [ 43.599188][ T604] F2FS-fs (loop2): Small segment_count (9 < 1 * 24) [ 43.634665][ T604] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 43.662363][ T25] usb 4-1: USB disconnect, device number 4 [ 43.739995][ T604] F2FS-fs (loop2): Found nat_bits in checkpoint [ 43.845440][ T604] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 43.850294][ T607] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.852745][ T604] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 43.859171][ T607] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.859257][ T607] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.859275][ T607] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.902740][ T512] attempt to access beyond end of device [ 43.902740][ T512] loop2: rw=2049, want=45104, limit=40427 [ 43.909465][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 43.921830][ T25] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.930252][ T25] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.944202][ T524] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 43.952405][ T524] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.959266][ T524] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.966535][ T524] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 43.974864][ T524] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.981774][ T524] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.000791][ T535] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 44.008643][ T535] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 44.020975][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 44.033842][ T535] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 44.043041][ T535] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 44.050588][ T535] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 44.059034][ T607] device veth0_vlan entered promiscuous mode [ 44.073693][ T524] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 44.083648][ T607] device veth1_macvtap entered promiscuous mode [ 44.096433][ T524] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 44.109575][ T481] wacom 0003:056A:0016.0003: unknown main item tag 0x0 [ 44.116436][ T481] wacom 0003:056A:0016.0003: Unknown device_type for 'HID 056a:0016'. Assuming pen. [ 44.126638][ T481] wacom 0003:056A:0016.0003: hidraw0: USB HID v0.00 Device [HID 056a:0016] on usb-dummy_hcd.1-1/input0 [ 44.138066][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 44.142428][ T624] EXT4-fs error (device loop2): ext4_fill_super:4955: inode #2: comm syz.2.91: casefold flag without casefold feature [ 44.148550][ T481] input: Wacom Graphire4 6x8 Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:056A:0016.0003/input/input10 [ 44.159862][ T624] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 44.180700][ T624] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 44.205738][ T24] kauditd_printk_skb: 56 callbacks suppressed [ 44.205752][ T24] audit: type=1400 audit(1721823103.290:303): avc: denied { write } for pid=623 comm="syz.2.91" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 44.234319][ T24] audit: type=1400 audit(1721823103.330:304): avc: denied { open } for pid=623 comm="syz.2.91" path="/9/bus/file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 44.270668][ T24] audit: type=1400 audit(1721823103.350:305): avc: denied { mounton } for pid=623 comm="syz.2.91" path="/9/bus/bus" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 44.341618][ T24] audit: type=1400 audit(1721823103.430:306): avc: denied { remove_name } for pid=623 comm="syz.2.91" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 44.373969][ T624] EXT4-fs error (device loop2): ext4_map_blocks:600: inode #2: block 16: comm syz.2.91: lblock 0 mapped to illegal pblock 16 (length 1) [ 44.390738][ T501] device bridge_slave_1 left promiscuous mode [ 44.398992][ T24] audit: type=1400 audit(1721823103.460:307): avc: denied { unlink } for pid=623 comm="syz.2.91" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 44.424139][ T501] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.432525][ T501] device bridge_slave_0 left promiscuous mode [ 44.811944][ T501] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.830363][ T535] usb 2-1: USB disconnect, device number 3 [ 44.928200][ T501] device veth1_macvtap left promiscuous mode [ 45.018953][ T512] EXT4-fs error (device loop2): ext4_map_blocks:600: inode #2: block 16: comm syz-executor: lblock 0 mapped to illegal pblock 16 (length 1) [ 45.044821][ T501] device veth0_vlan left promiscuous mode [ 45.048749][ T512] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5869: Corrupt filesystem [ 45.060929][ T512] EXT4-fs error (device loop2): ext4_dirty_inode:6079: inode #2: comm syz-executor: mark_inode_dirty error [ 45.314212][ T24] audit: type=1326 audit(1721823104.400:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=651 comm="syz.0.100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7d85c2f19 code=0x7ffc0000 [ 45.346741][ T24] audit: type=1326 audit(1721823104.400:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=651 comm="syz.0.100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7d85c2f19 code=0x7ffc0000 [ 45.372350][ T24] audit: type=1326 audit(1721823104.430:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=651 comm="syz.0.100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fa7d85c2f19 code=0x7ffc0000 [ 45.410423][ T24] audit: type=1326 audit(1721823104.430:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=651 comm="syz.0.100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7d85c2f19 code=0x7ffc0000 [ 45.433770][ T24] audit: type=1326 audit(1721823104.430:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=654 comm="syz.0.100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa7d85f4f05 code=0x7ffc0000 [ 45.445308][ T650] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.473606][ T650] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.481923][ T650] device bridge_slave_0 entered promiscuous mode [ 45.497871][ T314] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 45.514542][ T650] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.523625][ T668] netlink: 220 bytes leftover after parsing attributes in process `syz.4.96'. [ 45.524291][ T661] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 45.532967][ T650] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.558509][ T650] device bridge_slave_1 entered promiscuous mode [ 45.569851][ T661] EXT4-fs error (device loop0): ext4_mb_generate_buddy:808: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 45.584552][ T661] EXT4-fs (loop0): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 16 with error 28 [ 45.597115][ T661] EXT4-fs (loop0): This should not happen!! Data will be lost [ 45.597115][ T661] [ 45.607853][ T661] EXT4-fs (loop0): Total free blocks count 0 [ 45.613658][ T661] EXT4-fs (loop0): Free/Dirty block details [ 45.626694][ T661] EXT4-fs (loop0): free_blocks=2415919104 [ 45.637902][ T661] EXT4-fs (loop0): dirty_blocks=16 [ 45.642845][ T661] EXT4-fs (loop0): Block reservation details [ 45.648714][ T661] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 45.656938][ T669] EXT4-fs (loop0): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 16 with error 28 [ 45.687140][ T650] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.694051][ T650] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.701129][ T650] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.707895][ T650] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.716714][ T669] EXT4-fs (loop0): This should not happen!! Data will be lost [ 45.716714][ T669] [ 45.737859][ T53] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 45.769017][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 45.776752][ T25] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.785421][ T25] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.798881][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 45.806939][ T300] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.813826][ T300] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.821552][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 45.829595][ T300] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.836444][ T300] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.855763][ T650] device veth0_vlan entered promiscuous mode [ 45.864700][ T672] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 45.876727][ T672] EXT4-fs (loop0): 1 truncate cleaned up [ 45.882276][ T672] EXT4-fs (loop0): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000068,lazytime,nombcache,noload,,errors=continue [ 45.904519][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 45.915436][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 45.924136][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 45.927883][ T314] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 520 [ 45.931683][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 45.941338][ T314] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 45.948344][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 45.957982][ T314] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 45.965442][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 45.996777][ T650] device veth1_macvtap entered promiscuous mode [ 46.003648][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 46.011997][ T53] usb 2-1: Using ep0 maxpacket: 16 [ 46.024222][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 46.047654][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 46.077996][ T314] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 46.103475][ T314] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 46.112024][ T314] usb 4-1: SerialNumber: syz [ 46.128104][ T53] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 46.144285][ T53] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 46.155941][ T53] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 46.159276][ T648] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 46.178921][ T648] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 46.213374][ T53] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 46.223442][ T53] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 46.233255][ T53] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 46.243097][ T53] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 46.268979][ T501] device bridge_slave_1 left promiscuous mode [ 46.274978][ T501] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.328865][ T53] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 46.357069][ T53] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 46.376897][ T53] usb 2-1: SerialNumber: syz [ 46.436803][ T53] cdc_acm: probe of 2-1:1.0 failed with error -12 [ 46.453105][ T648] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 46.470944][ T648] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 46.541256][ T501] device bridge_slave_0 left promiscuous mode [ 46.551689][ T501] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.559649][ T501] device veth1_macvtap left promiscuous mode [ 46.565485][ T501] device veth0_vlan left promiscuous mode [ 46.638438][ T320] usb 2-1: USB disconnect, device number 4 [ 46.708006][ T481] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 46.883301][ T314] cdc_ether: probe of 4-1:1.0 failed with error -22 [ 47.036602][ T314] usb 4-1: USB disconnect, device number 5 [ 47.131370][ T705] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 47.143334][ T705] EXT4-fs error (device loop2): ext4_mb_generate_buddy:808: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 47.158470][ T705] EXT4-fs (loop2): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 16 with error 28 [ 47.170923][ T705] EXT4-fs (loop2): This should not happen!! Data will be lost [ 47.170923][ T705] [ 47.180498][ T705] EXT4-fs (loop2): Total free blocks count 0 [ 47.186428][ T705] EXT4-fs (loop2): Free/Dirty block details [ 47.192318][ T705] EXT4-fs (loop2): free_blocks=2415919104 [ 47.198228][ T705] EXT4-fs (loop2): dirty_blocks=16 [ 47.203337][ T705] EXT4-fs (loop2): Block reservation details [ 47.209247][ T705] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 47.215506][ T711] EXT4-fs (loop2): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 16 with error 28 [ 47.227765][ T711] EXT4-fs (loop2): This should not happen!! Data will be lost [ 47.227765][ T711] [ 47.387882][ T481] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 255, changing to 11 [ 47.402883][ T481] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 59391, setting to 1024 [ 47.749718][ T726] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 47.815172][ T481] usb 5-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 47.844916][ T481] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 47.853834][ T481] usb 5-1: Product: syz [ 47.858901][ T481] usb 5-1: Manufacturer: syz [ 47.863399][ T481] usb 5-1: SerialNumber: syz [ 48.036090][ T481] usb 5-1: config 0 descriptor?? [ 48.078041][ T686] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 48.643201][ T481] usb 5-1: USB disconnect, device number 3 [ 49.064458][ T750] incfs: ino conflict with backing FS 1 [ 49.220437][ T359] udevd[359]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 49.456949][ T24] kauditd_printk_skb: 41 callbacks suppressed [ 49.456988][ T24] audit: type=1400 audit(1721823108.540:354): avc: denied { wake_alarm } for pid=752 comm="syz.1.127" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 49.846057][ T24] audit: type=1400 audit(1721823108.930:355): avc: denied { unmount } for pid=607 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 49.874451][ T24] audit: type=1400 audit(1721823108.950:356): avc: denied { unmount } for pid=476 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 49.978214][ T759] exfat: Deprecated parameter 'utf8' [ 49.985493][ T759] exfat: Deprecated parameter 'namecase' [ 49.999397][ T759] exfat: Deprecated parameter 'utf8' [ 50.023595][ T763] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.030833][ T763] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.053338][ T763] device bridge_slave_0 entered promiscuous mode [ 50.063076][ T763] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.076403][ T759] exFAT-fs (loop2): failed to load upcase table (idx : 0x00012153, chksum : 0xc3dffc2e, utbl_chksum : 0xe619d30d) [ 50.088531][ T763] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.100856][ T763] device bridge_slave_1 entered promiscuous mode [ 50.153407][ T763] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.160301][ T763] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.167369][ T763] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.174294][ T763] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.216465][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 50.225159][ T314] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.233894][ T314] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.557844][ T481] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 50.570695][ T481] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.577556][ T481] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.604553][ T481] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.619564][ T481] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.626456][ T481] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.661038][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 50.698046][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 50.717576][ T763] device veth0_vlan entered promiscuous mode [ 50.724239][ T481] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 50.737634][ T481] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 50.756038][ T481] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 50.771046][ T481] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 50.792161][ T763] device veth1_macvtap entered promiscuous mode [ 50.805703][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 50.814217][ T25] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 50.919645][ T481] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 50.937792][ T481] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 51.102088][ T501] device bridge_slave_1 left promiscuous mode [ 51.120159][ T501] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.160232][ T501] device bridge_slave_0 left promiscuous mode [ 51.189794][ T501] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.228183][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 51.247955][ T501] device veth1_macvtap left promiscuous mode [ 51.253926][ T501] device veth0_vlan left promiscuous mode [ 51.261505][ T784] EXT4-fs (loop3): 1 orphan inode deleted [ 51.267374][ T784] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,delalloc,usrquota, [ 51.286074][ T784] ext4 filesystem being mounted at /23/file1 supports timestamps until 2038 (0x7fffffff) [ 51.319167][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 51.335021][ T25] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 51.361753][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 51.387792][ T15] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 51.443875][ T25] usb 3-1: config 0 descriptor?? [ 51.780660][ T792] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.788738][ T792] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.796131][ T792] device bridge_slave_0 entered promiscuous mode [ 51.803596][ T792] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.810748][ T792] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.818371][ T792] device bridge_slave_1 entered promiscuous mode [ 51.873136][ T792] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.880100][ T792] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.887212][ T792] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.893118][ T24] audit: type=1400 audit(1721823110.980:357): avc: denied { mounton } for pid=797 comm="syz.3.137" path="/24/file0/file0" dev="loop3" ino=1048600 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 51.894008][ T792] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.917453][ T798] request_module fs-hugetlbfs succeeded, but still no fs? [ 51.931300][ T524] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.938661][ T524] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.978705][ T694] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 51.986269][ T694] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 52.003007][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 52.011714][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 52.020219][ T320] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.027130][ T320] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.036176][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 52.044484][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 52.052638][ T320] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.059491][ T320] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.074097][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 52.081877][ T15] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 52.093026][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 52.101976][ T15] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 52.148047][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 52.156774][ T15] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 52.198735][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 52.387880][ T25] usbhid 3-1:0.0: can't add hid device: -32 [ 52.394637][ T25] usbhid: probe of 3-1:0.0 failed with error -32 [ 52.412049][ T15] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.466766][ T792] device veth0_vlan entered promiscuous mode [ 52.474129][ T15] usb 1-1: config 0 descriptor?? [ 52.487481][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 52.496031][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 52.504587][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 52.513356][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 52.522086][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 52.529504][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 52.770632][ T792] device veth1_macvtap entered promiscuous mode [ 52.777975][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 52.785960][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 52.794264][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 52.807608][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 52.816146][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 52.829025][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 52.837163][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 53.340003][ T817] syz.3.139[817] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 53.340065][ T817] syz.3.139[817] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 53.410635][ T817] overlayfs: filesystem on './file0' not supported [ 53.656123][ T15] usb 1-1: language id specifier not provided by device, defaulting to English [ 53.667164][ T315] usb 3-1: USB disconnect, device number 2 [ 53.793864][ T829] futex_wake_op: syz.1.144 tries to shift op by -1; fix this program [ 53.806023][ T829] 9pnet: Insufficient options for proto=fd [ 54.701188][ T841] incfs: ino conflict with backing FS 1 [ 54.909678][ T15] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0004/input/input13 [ 54.924896][ T15] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0004/input/input14 [ 54.939773][ T15] uclogic 0003:256C:006D.0004: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.0-1/input0 [ 55.099423][ T501] device bridge_slave_1 left promiscuous mode [ 55.105408][ T501] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.119564][ T15] usb 1-1: USB disconnect, device number 4 [ 55.133610][ T501] device bridge_slave_0 left promiscuous mode [ 55.139704][ T501] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.147632][ T501] device veth1_macvtap left promiscuous mode [ 55.154300][ T501] device veth0_vlan left promiscuous mode [ 55.350817][ T862] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.358277][ T862] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.365568][ T862] device bridge_slave_0 entered promiscuous mode [ 55.374581][ T862] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.381823][ T862] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.389320][ T862] device bridge_slave_1 entered promiscuous mode [ 55.444563][ T862] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.451451][ T862] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.458557][ T862] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.465348][ T862] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.504433][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.511846][ T15] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.519957][ T15] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.539027][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.600570][ T870] syz.1.157[870] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 55.600880][ T870] syz.1.157[870] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 55.758675][ T870] overlayfs: filesystem on './file0' not supported [ 55.800175][ T15] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.807038][ T15] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.823205][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.831309][ T15] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.838165][ T15] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.845339][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.853500][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.869634][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.883519][ T862] device veth0_vlan entered promiscuous mode [ 55.890666][ T780] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 55.899531][ T872] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 55.899894][ T780] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 55.916197][ T780] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 55.925441][ T24] audit: type=1400 audit(1721823115.010:358): avc: denied { map } for pid=871 comm="syz.0.158" path="/1/file0/blkio.bfq.avg_queue_size" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 55.957049][ T24] audit: type=1400 audit(1721823115.040:359): avc: denied { ioctl } for pid=871 comm="syz.0.158" path="/1/file0/blkio.bfq.avg_queue_size" dev="loop0" ino=18 ioctlcmd=0x744c scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 55.987240][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 55.993246][ T24] audit: type=1400 audit(1721823115.040:360): avc: denied { create } for pid=871 comm="syz.0.158" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 55.998513][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.024472][ T862] device veth1_macvtap entered promiscuous mode [ 56.045289][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 56.050264][ T24] audit: type=1400 audit(1721823115.120:361): avc: denied { bind } for pid=878 comm="syz.4.159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 56.053467][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 56.080262][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.095150][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 56.103840][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 56.145785][ T885] futex_wake_op: syz.3.156 tries to shift op by -1; fix this program [ 56.162229][ T885] 9pnet: Insufficient options for proto=fd [ 56.191916][ T887] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 56.202887][ T887] ext4 filesystem being mounted at /8/mnt supports timestamps until 2038 (0x7fffffff) [ 56.309171][ T24] audit: type=1400 audit(1721823115.400:362): avc: denied { accept } for pid=892 comm="syz.3.163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 56.351287][ T900] kvm: pic: non byte read [ 56.396693][ T24] audit: type=1400 audit(1721823115.480:363): avc: denied { create } for pid=906 comm="syz.1.168" dev="anon_inodefs" ino=18597 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 56.420440][ T903] netlink: 'syz.0.167': attribute type 1 has an invalid length. [ 56.510761][ T24] audit: type=1400 audit(1721823115.520:364): avc: denied { ioctl } for pid=906 comm="syz.1.168" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=18597 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 56.538708][ T501] device bridge_slave_1 left promiscuous mode [ 56.544709][ T501] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.575732][ T501] device bridge_slave_0 left promiscuous mode [ 56.586166][ T501] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.625169][ T501] device veth1_macvtap left promiscuous mode [ 56.674634][ T501] device veth0_vlan left promiscuous mode [ 57.022380][ T917] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 57.031390][ T917] ext4 filesystem being mounted at /10/file0 supports timestamps until 2038 (0x7fffffff) [ 57.059672][ T917] EXT4-fs error (device loop4) in ext4_do_update_inode:5275: error 27 [ 57.074332][ T917] EXT4-fs error (device loop4): ext4_dirty_inode:6079: inode #2: comm syz.4.170: mark_inode_dirty error [ 57.086654][ T917] EXT4-fs error (device loop4) in ext4_do_update_inode:5275: error 27 [ 57.095387][ T917] EXT4-fs error (device loop4): __ext4_ext_dirty:182: inode #2: comm syz.4.170: mark_inode_dirty error [ 57.121656][ T24] audit: type=1400 audit(1721823116.210:365): avc: denied { mounton } for pid=926 comm="syz.1.172" path="/proc/113/task" dev="proc" ino=18240 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 57.144856][ T24] audit: type=1400 audit(1721823116.210:366): avc: denied { mounton } for pid=916 comm="syz.4.170" path="/10/file0/file0" dev="loop4" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 57.159861][ T923] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 57.168688][ T24] audit: type=1400 audit(1721823116.210:367): avc: denied { write } for pid=916 comm="syz.4.170" name="file0" dev="loop4" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 57.282022][ T792] EXT4-fs error (device loop4): ext4_readdir:260: inode #2: block 3: comm syz-executor: path /10/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=514, rec_len=0, size=2048 fake=0 [ 57.317815][ T932] futex_wake_op: syz.1.174 tries to shift op by -1; fix this program [ 57.325893][ T792] EXT4-fs error (device loop4): ext4_readdir:260: inode #2: block 12: comm syz-executor: path /10/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 57.326328][ T792] EXT4-fs error (device loop4): ext4_readdir:260: inode #2: block 13: comm syz-executor: path /10/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 57.379538][ T792] EXT4-fs error (device loop4): ext4_readdir:260: inode #2: block 14: comm syz-executor: path /10/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 57.435151][ T932] 9pnet: Insufficient options for proto=fd [ 57.449502][ T792] EXT4-fs error (device loop4): ext4_readdir:260: inode #2: block 15: comm syz-executor: path /10/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 57.498420][ T792] EXT4-fs error (device loop4): ext4_readdir:260: inode #2: block 16: comm syz-executor: path /10/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0 [ 57.520707][ T937] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 57.535543][ T937] ext4 filesystem being mounted at /6/mnt supports timestamps until 2038 (0x7fffffff) [ 57.682468][ T951] netlink: 4 bytes leftover after parsing attributes in process `syz.3.181'. [ 57.728141][ T948] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e01c, mo2=0002] [ 57.745720][ T948] System zones: 1-12 [ 57.756417][ T948] EXT4-fs (loop0): orphan cleanup on readonly fs [ 57.786211][ T948] EXT4-fs error (device loop0): ext4_get_branch:178: inode #13: block 33619980: comm syz.0.180: invalid block [ 57.827102][ T948] EXT4-fs error (device loop0): ext4_free_branches:1026: inode #13: comm syz.0.180: invalid indirect mapped block 1819239214 (level 1) [ 57.872975][ T948] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.180: bg 0: block 361: padding at end of block bitmap is not set [ 57.917883][ T948] EXT4-fs error (device loop0) in ext4_mb_clear_bb:5648: Corrupt filesystem [ 57.946588][ T948] EXT4-fs error (device loop0): ext4_clear_blocks:880: inode #13: comm syz.0.180: attempt to clear invalid blocks 33619980 len 1 [ 57.988729][ T948] EXT4-fs error (device loop0): ext4_free_branches:1026: inode #13: comm syz.0.180: invalid indirect mapped block 1819239214 (level 0) [ 58.038155][ T948] EXT4-fs (loop0): 1 truncate cleaned up [ 58.054941][ T948] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 58.086207][ T954] EXT4-fs (loop3): mounted filesystem without journal. Opts: stripe=0x0000000000000401,errors=remount-ro, [ 58.644551][ T948] syz.0.180[948] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 58.644612][ T948] syz.0.180[948] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 58.740779][ T967] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 58.765369][ T967] ext4 filesystem being mounted at /39/file0 supports timestamps until 2038 (0x7fffffff) [ 58.804676][ T967] EXT4-fs error (device loop1) in ext4_do_update_inode:5275: error 27 [ 58.813685][ T967] EXT4-fs error (device loop1): ext4_dirty_inode:6079: inode #2: comm syz.1.185: mark_inode_dirty error [ 58.825348][ T967] EXT4-fs error (device loop1) in ext4_do_update_inode:5275: error 27 [ 58.834047][ T967] EXT4-fs error (device loop1): __ext4_ext_dirty:182: inode #2: comm syz.1.185: mark_inode_dirty error [ 58.892191][ T293] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 3: comm syz-executor: path /39/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=514, rec_len=0, size=2048 fake=0 [ 58.913545][ T293] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 12: comm syz-executor: path /39/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 58.938155][ T293] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 13: comm syz-executor: path /39/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 58.959553][ T293] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 14: comm syz-executor: path /39/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 58.981947][ T293] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 15: comm syz-executor: path /39/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 59.009076][ T293] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 16: comm syz-executor: path /39/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0 [ 59.031545][ T20] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 59.077877][ T15] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 59.092874][ T976] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 59.317784][ T15] usb 1-1: Using ep0 maxpacket: 32 [ 59.458073][ T20] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 59.485911][ T20] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 59.507026][ T985] incfs: ino conflict with backing FS 1 [ 59.685876][ T20] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 59.742607][ T15] usb 1-1: unable to get BOS descriptor or descriptor too short [ 59.762696][ T20] usb 3-1: New USB device found, idVendor=a9cd, idProduct=cdee, bcdDevice= 5.b9 [ 59.780836][ T20] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.798105][ T20] usb 3-1: config 0 descriptor?? [ 59.848629][ T20] usb 3-1: MIDIStreaming interface descriptor not found [ 59.857970][ T15] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 59.884719][ T15] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 59.997816][ T15] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 60.016790][ T15] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 60.026886][ T15] usb 1-1: SerialNumber: syz [ 60.057845][ T974] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 60.078271][ T15] cdc_ether 1-1:1.0: skipping garbage [ 60.123700][ T25] usb 3-1: USB disconnect, device number 3 [ 60.279805][ T974] binder: Bad value for 'stats' [ 60.339009][ T974] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 60.357929][ T974] ext4 filesystem being mounted at /9/file0 supports timestamps until 2038 (0x7fffffff) [ 60.389880][ T974] EXT4-fs error (device loop0): ext4_mb_generate_buddy:808: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 60.405206][ T974] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 23 with error 28 [ 60.417499][ T974] EXT4-fs (loop0): This should not happen!! Data will be lost [ 60.417499][ T974] [ 60.427385][ T974] EXT4-fs (loop0): Total free blocks count 0 [ 60.433493][ T974] EXT4-fs (loop0): Free/Dirty block details [ 60.439466][ T974] EXT4-fs (loop0): free_blocks=65280 [ 60.449201][ T974] EXT4-fs (loop0): dirty_blocks=23 [ 60.454145][ T974] EXT4-fs (loop0): Block reservation details [ 60.456152][ T992] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.461105][ T974] EXT4-fs (loop0): i_reserved_data_blocks=32 [ 60.472702][ T992] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.473914][ T996] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 31 with error 28 [ 60.488277][ T992] device bridge_slave_0 entered promiscuous mode [ 60.492270][ T996] EXT4-fs (loop0): This should not happen!! Data will be lost [ 60.492270][ T996] [ 60.514831][ T992] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.526939][ T974] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 60.534175][ T992] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.553365][ T992] device bridge_slave_1 entered promiscuous mode [ 60.656413][ T1000] futex_wake_op: syz.2.196 tries to shift op by 32; fix this program [ 60.677536][ T992] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.684422][ T992] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.691534][ T992] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.698293][ T992] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.754331][ T998] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.775965][ T998] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.783766][ T998] device bridge_slave_0 entered promiscuous mode [ 60.802940][ T998] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.810065][ T998] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.817408][ T998] device bridge_slave_1 entered promiscuous mode [ 60.833162][ T780] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.841087][ T780] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.848969][ T780] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.898779][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.907139][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.914009][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.929771][ T24] kauditd_printk_skb: 14 callbacks suppressed [ 60.929784][ T24] audit: type=1400 audit(1721823120.020:382): avc: denied { read } for pid=999 comm="syz.2.196" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 60.960078][ T1005] binder: 999:1005 ioctl c0306201 200011c0 returned -14 [ 60.968106][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.976143][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.983071][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.997832][ T24] audit: type=1400 audit(1721823120.020:383): avc: denied { open } for pid=999 comm="syz.2.196" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 61.021598][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 61.029482][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 61.055820][ T24] audit: type=1400 audit(1721823120.050:384): avc: denied { ioctl } for pid=999 comm="syz.2.196" path="/dev/binderfs/binder0" dev="binder" ino=13 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 61.082203][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 61.090906][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 61.099722][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 61.107200][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 61.118215][ T501] device bridge_slave_1 left promiscuous mode [ 61.124244][ T501] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.140238][ T501] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.160233][ T501] device veth1_macvtap left promiscuous mode [ 61.174720][ T501] device veth0_vlan left promiscuous mode [ 61.228132][ T15] cdc_ether: probe of 1-1:1.0 failed with error -71 [ 61.249416][ T15] usb 1-1: USB disconnect, device number 5 [ 61.310777][ T992] device veth0_vlan entered promiscuous mode [ 61.342641][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 61.350841][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 61.364476][ T992] device veth1_macvtap entered promiscuous mode [ 61.377064][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 61.384760][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 61.393504][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 61.418625][ T780] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.426267][ T780] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.434119][ T780] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 61.442419][ T780] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 61.451184][ T780] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.458087][ T780] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.465323][ T780] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 61.473644][ T780] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 61.481808][ T780] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.488769][ T780] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.496039][ T780] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 61.518104][ T780] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 61.526508][ T780] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 61.556460][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 61.565010][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 61.600877][ T481] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 61.611616][ T24] audit: type=1400 audit(1721823120.700:385): avc: denied { connect } for pid=1009 comm="syz.2.199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 61.641416][ T24] audit: type=1400 audit(1721823120.730:386): avc: denied { write } for pid=1009 comm="syz.2.199" path="socket:[18855]" dev="sockfs" ino=18855 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 61.695925][ T24] audit: type=1326 audit(1721823120.780:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1017 comm="syz.2.200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f317ae47f19 code=0x7ffc0000 [ 61.700712][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 61.728681][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 61.735955][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 61.744874][ T998] device veth0_vlan entered promiscuous mode [ 61.751277][ T24] audit: type=1326 audit(1721823120.810:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1017 comm="syz.2.200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=127 compat=0 ip=0x7f317ae47f19 code=0x7ffc0000 [ 61.774952][ T24] audit: type=1326 audit(1721823120.820:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1017 comm="syz.2.200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f317ae47f19 code=0x7ffc0000 [ 61.802113][ T1008] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.809551][ T1008] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.817596][ T1008] device bridge_slave_0 entered promiscuous mode [ 61.833783][ T24] audit: type=1400 audit(1721823120.920:390): avc: denied { read write } for pid=1021 comm="syz.3.203" name="ppp" dev="devtmpfs" ino=133 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 61.858663][ T24] audit: type=1400 audit(1721823120.940:391): avc: denied { open } for pid=1021 comm="syz.3.203" path="/dev/ppp" dev="devtmpfs" ino=133 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 61.892064][ T998] device veth1_macvtap entered promiscuous mode [ 61.901995][ T1008] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.909074][ T1008] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.916445][ T1008] device bridge_slave_1 entered promiscuous mode [ 61.927195][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 61.945330][ T780] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 62.008846][ T1026] incfs: ino conflict with backing FS 1 [ 62.260086][ T780] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 62.268417][ T780] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 62.276561][ T780] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 62.830822][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.846942][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.895741][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.915489][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.956760][ T300] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.963660][ T300] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.020640][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.062437][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.090823][ T300] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.097716][ T300] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.200024][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.207540][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.216205][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.254057][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 63.257857][ T1031] F2FS-fs (loop4): Found nat_bits in checkpoint [ 63.275597][ T1008] device veth0_vlan entered promiscuous mode [ 63.289920][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 63.329073][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 63.336320][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 63.352864][ T1008] device veth1_macvtap entered promiscuous mode [ 63.372564][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 63.389801][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 63.404149][ T1031] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 63.411858][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 63.547147][ T1035] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.554358][ T1035] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.562043][ T1035] device bridge_slave_0 entered promiscuous mode [ 63.569717][ T780] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 63.672251][ T1059] fuse: Unknown parameter 'ÿ0x0000000000000008' [ 63.757809][ T524] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 63.813838][ T780] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 63.822235][ T780] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 63.830407][ T780] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 63.872302][ T25] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 63.880061][ T998] attempt to access beyond end of device [ 63.880061][ T998] loop4: rw=2049, want=45104, limit=40427 [ 63.880089][ T1035] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.898970][ T1035] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.906249][ T1035] device bridge_slave_1 entered promiscuous mode [ 63.985188][ T1035] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.992163][ T1035] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.999265][ T1035] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.006019][ T1035] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.043717][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.053045][ T320] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.061206][ T320] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.079006][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.087104][ T320] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.094010][ T320] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.103346][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.111573][ T320] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.118460][ T320] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.147814][ T524] usb 1-1: Using ep0 maxpacket: 32 [ 64.159702][ T780] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.168657][ T780] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.176521][ T780] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.185094][ T780] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.358188][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 64.385250][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 64.434966][ T25] usb 4-1: New USB device found, idVendor=056e, idProduct=00fb, bcdDevice= 0.00 [ 64.445313][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.460584][ T25] usb 4-1: config 0 descriptor?? [ 64.466325][ T780] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.474220][ T780] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.483807][ T501] device bridge_slave_1 left promiscuous mode [ 64.489848][ T501] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.490884][ T524] usb 1-1: unable to get BOS descriptor or descriptor too short [ 64.504458][ T501] device bridge_slave_0 left promiscuous mode [ 64.510560][ T501] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.518811][ T501] device bridge_slave_1 left promiscuous mode [ 64.524772][ T501] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.532443][ T501] device bridge_slave_0 left promiscuous mode [ 64.538504][ T501] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.552032][ T501] device veth1_macvtap left promiscuous mode [ 64.558163][ T501] device veth0_vlan left promiscuous mode [ 64.564070][ T501] device veth1_macvtap left promiscuous mode [ 64.570831][ T501] device veth0_vlan left promiscuous mode [ 64.577855][ T524] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 64.590770][ T524] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 64.604893][ T1072] EXT4-fs (loop4): Unrecognized mount option "smackfsfloor=" or missing value [ 64.697833][ T524] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 64.713033][ T524] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 64.721085][ T524] usb 1-1: SerialNumber: syz [ 64.737879][ T1052] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 64.758224][ T524] cdc_ether 1-1:1.0: skipping garbage [ 64.821003][ T1035] device veth0_vlan entered promiscuous mode [ 64.835588][ T780] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 64.843902][ T780] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 64.852847][ T1035] device veth1_macvtap entered promiscuous mode [ 64.879161][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 64.898237][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 64.912459][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 64.928775][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 64.937043][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 64.938860][ T25] elecom 0003:056E:00FB.0005: unknown main item tag 0x6 [ 64.952089][ T25] elecom 0003:056E:00FB.0005: item fetching failed at offset 4/5 [ 64.961835][ T1052] binder: Bad value for 'stats' [ 64.970342][ T25] elecom: probe of 0003:056E:00FB.0005 failed with error -22 [ 65.060709][ T1052] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 65.070222][ T1052] ext4 filesystem being mounted at /13/file0 supports timestamps until 2038 (0x7fffffff) [ 65.083744][ T1052] EXT4-fs error (device loop0): ext4_mb_generate_buddy:808: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 65.098023][ T1052] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 23 with error 28 [ 65.110577][ T1052] EXT4-fs (loop0): This should not happen!! Data will be lost [ 65.110577][ T1052] [ 65.120425][ T1052] EXT4-fs (loop0): Total free blocks count 0 [ 65.126461][ T1052] EXT4-fs (loop0): Free/Dirty block details [ 65.132308][ T1052] EXT4-fs (loop0): free_blocks=65280 [ 65.137440][ T1052] EXT4-fs (loop0): dirty_blocks=23 [ 65.142875][ T1052] EXT4-fs (loop0): Block reservation details [ 65.149595][ T1052] EXT4-fs (loop0): i_reserved_data_blocks=32 [ 65.149885][ T315] usb 4-1: USB disconnect, device number 6 [ 65.156388][ T1088] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 31 with error 28 [ 65.175642][ T1088] EXT4-fs (loop0): This should not happen!! Data will be lost [ 65.175642][ T1088] [ 65.187791][ T535] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 65.198575][ T1052] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 65.317806][ T25] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 65.547833][ T535] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 65.558758][ T535] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 65.568654][ T535] usb 3-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 65.577611][ T535] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.586473][ T535] usb 3-1: config 0 descriptor?? [ 65.643590][ T1102] 9pnet_virtio: no channels available for device [ 65.675924][ T1105] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 65.682983][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 65.739197][ T1107] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 65.754780][ T501] device bridge_slave_1 left promiscuous mode [ 65.760894][ T501] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.774313][ T501] device bridge_slave_0 left promiscuous mode [ 65.780425][ T501] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.789283][ T501] device veth1_macvtap left promiscuous mode [ 65.795190][ T501] device veth0_vlan left promiscuous mode [ 65.848082][ T25] usb 2-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 65.857054][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.916012][ T524] cdc_ether: probe of 1-1:1.0 failed with error -71 [ 65.923526][ T524] usb 1-1: USB disconnect, device number 6 [ 65.930582][ T25] usb 2-1: Product: syz [ 65.934562][ T25] usb 2-1: Manufacturer: syz [ 65.939023][ T25] usb 2-1: SerialNumber: syz [ 65.950163][ T25] usb 2-1: config 0 descriptor?? [ 66.219650][ T25] snd-usb-audio: probe of 2-1:0.0 failed with error -2 [ 66.267835][ T535] usbhid 3-1:0.0: can't add hid device: -71 [ 66.273675][ T535] usbhid: probe of 3-1:0.0 failed with error -71 [ 66.280587][ T535] usb 3-1: USB disconnect, device number 4 [ 66.411170][ T5] usb 2-1: USB disconnect, device number 5 [ 66.756297][ T24] kauditd_printk_skb: 8 callbacks suppressed [ 66.756311][ T24] audit: type=1400 audit(1721823125.840:400): avc: denied { create } for pid=1128 comm="syz.3.232" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 66.782890][ T24] audit: type=1400 audit(1721823125.850:401): avc: denied { read append } for pid=1128 comm="syz.3.232" name="file0" dev="tmpfs" ino=68 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 66.806037][ T24] audit: type=1400 audit(1721823125.850:402): avc: denied { ioctl open } for pid=1128 comm="syz.3.232" path="/8/file0" dev="tmpfs" ino=68 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 66.829344][ T24] audit: type=1400 audit(1721823125.870:403): avc: denied { unlink } for pid=992 comm="syz-executor" name="file0" dev="tmpfs" ino=68 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 66.877837][ T524] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 67.007845][ T5] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 67.128001][ T1090] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 67.217868][ T535] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 67.237896][ T524] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 67.248757][ T524] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 67.258474][ T524] usb 1-1: New USB device found, idVendor=056a, idProduct=00b8, bcdDevice= 0.00 [ 67.267325][ T524] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.275835][ T524] usb 1-1: config 0 descriptor?? [ 67.279371][ T5] usb 3-1: Using ep0 maxpacket: 32 [ 67.351544][ T24] audit: type=1400 audit(1721823126.440:404): avc: denied { unmount } for pid=998 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 67.407869][ T5] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 67.418918][ T5] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 67.429142][ T5] usb 3-1: New USB device found, idVendor=0461, idProduct=4e72, bcdDevice= 0.00 [ 67.438348][ T5] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.458846][ T5] usb 3-1: config 0 descriptor?? [ 67.497944][ T1090] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 67.598078][ T535] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 67.609686][ T535] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 67.623937][ T535] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.661496][ T535] usb 2-1: config 0 descriptor?? [ 67.780230][ T1090] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 67.790010][ T1090] usb 4-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 67.798943][ T1090] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.808755][ T1090] usb 4-1: config 0 descriptor?? [ 67.849345][ T524] wacom 0003:056A:00B8.0006: unknown main item tag 0x0 [ 67.856061][ T524] wacom 0003:056A:00B8.0006: item fetching failed at offset 3/5 [ 67.863886][ T524] wacom 0003:056A:00B8.0006: parse failed [ 67.869572][ T524] wacom: probe of 0003:056A:00B8.0006 failed with error -22 [ 67.900714][ T24] audit: type=1400 audit(1721823126.990:405): avc: denied { remount } for pid=1136 comm="syz.1.236" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 68.038706][ T5] hid-rmi 0003:0461:4E72.0007: item fetching failed at offset 1/5 [ 68.046577][ T5] hid-rmi 0003:0461:4E72.0007: parse failed [ 68.056614][ T5] hid-rmi: probe of 0003:0461:4E72.0007 failed with error -22 [ 68.065077][ T5] usb 1-1: USB disconnect, device number 7 [ 68.128462][ T535] keytouch 0003:0926:3333.0008: fixing up Keytouch IEC report descriptor [ 68.138082][ T535] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0008/input/input15 [ 68.223545][ T535] keytouch 0003:0926:3333.0008: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 68.237828][ T24] audit: type=1400 audit(1721823127.310:406): avc: denied { read } for pid=78 comm="acpid" name="event3" dev="devtmpfs" ino=480 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 68.261430][ T24] audit: type=1400 audit(1721823127.310:407): avc: denied { open } for pid=78 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=480 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 68.289449][ T801] usb 3-1: USB disconnect, device number 5 [ 68.296325][ T24] audit: type=1400 audit(1721823127.310:408): avc: denied { ioctl } for pid=78 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=480 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 68.318021][ T1090] holtek_kbd 0003:04D9:A055.0009: unknown main item tag 0x0 [ 68.334232][ T1090] holtek_kbd 0003:04D9:A055.0009: item fetching failed at offset 3/5 [ 68.336011][ T535] usb 2-1: USB disconnect, device number 6 [ 68.344544][ T1090] holtek_kbd: probe of 0003:04D9:A055.0009 failed with error -22 [ 68.522376][ T524] usb 4-1: USB disconnect, device number 7 [ 168.567721][ C0] rcu: INFO: rcu_preempt self-detected stall on CPU [ 168.574177][ C0] rcu: 0-...!: (1 GPs behind) idle=34e/1/0x4000000000000000 softirq=7715/7716 fqs=39 last_accelerate: a54e/cc60 dyntick_enabled: 1 [ 168.587595][ C0] (t=10002 jiffies g=6409 q=280) [ 168.592545][ C0] rcu: rcu_preempt kthread starved for 9925 jiffies! g6409 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=1 [ 168.603648][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 168.613465][ C0] rcu: RCU grace-period kthread stack dump: [ 168.619196][ C0] task:rcu_preempt state:I stack: 0 pid: 13 ppid: 2 flags:0x00004000 [ 168.628213][ C0] Call Trace: [ 168.631378][ C0] __schedule+0xbe6/0x1330 [ 168.635596][ C0] ? release_firmware_map_entry+0x18d/0x18d [ 168.641336][ C0] ? _raw_spin_lock_irqsave+0xf9/0x210 [ 168.646643][ C0] ? _raw_spin_lock+0x1b0/0x1b0 [ 168.651403][ C0] schedule+0x13d/0x1d0 [ 168.655385][ C0] schedule_timeout+0x18c/0x360 [ 168.660418][ C0] ? prepare_to_swait_event+0x39f/0x3e0 [ 168.665799][ C0] ? console_conditional_schedule+0x10/0x10 [ 168.671526][ C0] ? run_local_timers+0x160/0x160 [ 168.676388][ C0] rcu_gp_kthread+0xefc/0x23a0 [ 168.680988][ C0] ? dyntick_save_progress_counter+0x1c0/0x1c0 [ 168.686978][ C0] ? rcu_barrier_callback+0x50/0x50 [ 168.692096][ C0] ? _raw_spin_lock+0x1b0/0x1b0 [ 168.696787][ C0] ? __kasan_check_read+0x11/0x20 [ 168.701644][ C0] ? __kthread_parkme+0xb9/0x1c0 [ 168.706416][ C0] kthread+0x34b/0x3d0 [ 168.710323][ C0] ? rcu_barrier_callback+0x50/0x50 [ 168.715357][ C0] ? kthread_blkcg+0xd0/0xd0 [ 168.719783][ C0] ret_from_fork+0x1f/0x30 [ 168.724061][ C0] NMI backtrace for cpu 0 [ 168.728211][ C0] CPU: 0 PID: 1150 Comm: syz.4.239 Not tainted 5.10.222-syzkaller-01494-gfd58936f3c1f #0 [ 168.737836][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 168.747728][ C0] Call Trace: [ 168.750854][ C0] [ 168.753649][ C0] dump_stack_lvl+0x1e2/0x24b [ 168.758148][ C0] ? panic+0x812/0x812 [ 168.762048][ C0] ? bfq_pos_tree_add_move+0x43b/0x43b [ 168.767347][ C0] ? _raw_spin_lock_irqsave+0xf9/0x210 [ 168.772650][ C0] ? _raw_spin_lock+0x1b0/0x1b0 [ 168.777333][ C0] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 168.783243][ C0] dump_stack+0x15/0x17 [ 168.787235][ C0] nmi_trigger_cpumask_backtrace+0x2b5/0x300 [ 168.793042][ C0] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 168.798947][ C0] arch_trigger_cpumask_backtrace+0x10/0x20 [ 168.804675][ C0] rcu_dump_cpu_stacks+0x199/0x2b0 [ 168.809621][ C0] rcu_sched_clock_irq+0xf8a/0x1890 [ 168.814657][ C0] ? rcutree_dead_cpu+0x340/0x340 [ 168.819512][ C0] ? hrtimer_run_queues+0x15f/0x440 [ 168.824545][ C0] update_process_times+0x198/0x200 [ 168.829584][ C0] tick_sched_timer+0x188/0x240 [ 168.834265][ C0] ? tick_setup_sched_timer+0x480/0x480 [ 168.839647][ C0] __hrtimer_run_queues+0x3d7/0xa50 [ 168.844682][ C0] ? hrtimer_interrupt+0x8b0/0x8b0 [ 168.849631][ C0] ? clockevents_program_event+0x214/0x2c0 [ 168.855275][ C0] ? ktime_get_update_offsets_now+0x266/0x280 [ 168.861348][ C0] hrtimer_interrupt+0x39a/0x8b0 [ 168.866127][ C0] __sysvec_apic_timer_interrupt+0xfd/0x3c0 [ 168.871849][ C0] asm_call_irq_on_stack+0xf/0x20 [ 168.876882][ C0] [ 168.879666][ C0] sysvec_apic_timer_interrupt+0x85/0xe0 [ 168.885154][ C0] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 168.890952][ C0] RIP: 0010:rcu_read_unlock_special+0x3bb/0x4c0 [ 168.897022][ C0] Code: f7 e8 59 f4 1f 00 eb 0a bf 09 00 00 00 e8 0d 01 e8 ff 48 ba 00 00 00 00 00 fc ff df 48 8b 0c 24 48 89 4c 24 18 ff 74 24 18 9d <48> c7 44 24 20 0e 36 e0 45 4a c7 04 2a 00 00 00 00 65 48 8b 04 25 [ 168.916456][ C0] RSP: 0018:ffffc9000133e860 EFLAGS: 00000246 [ 168.922355][ C0] RAX: 0000000000000201 RBX: 0000000000000001 RCX: 0000000000000246 [ 168.930254][ C0] RDX: dffffc0000000000 RSI: ffffffff8507b520 RDI: ffffffff85601fc0 [ 168.938156][ C0] RBP: ffffc9000133e908 R08: ffffffff8498a921 R09: ffffed1024029bd1 [ 168.945960][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff8881145e0400 [ 168.954043][ C0] R13: 1ffff92000267d10 R14: ffff8881f70572c0 R15: ffffffff86798748 [ 168.961856][ C0] ? tipc_sk_lookup+0x511/0x650 [ 168.967319][ C0] ? sched_clock+0x3a/0x40 [ 168.971572][ C0] ? __rcu_read_unlock+0x90/0x90 [ 168.976341][ C0] ? debug_smp_processor_id+0x17/0x20 [ 168.981556][ C0] __rcu_read_unlock+0x61/0x90 [ 168.986152][ C0] tipc_sk_lookup+0x542/0x650 [ 168.990668][ C0] ? tipc_sk_rcv+0x1e30/0x1e30 [ 168.995265][ C0] ? __raw_callee_save___pv_queued_spin_unlock+0x10/0x17 [ 169.002125][ C0] tipc_sk_rcv+0x499/0x1e30 [ 169.006461][ C0] ? __stack_depot_save+0x468/0x4d0 [ 169.011512][ C0] ? kasan_set_track+0x5d/0x70 [ 169.016112][ C0] ? kasan_set_track+0x4b/0x70 [ 169.020698][ C0] ? kasan_set_free_info+0x23/0x40 [ 169.025647][ C0] ? __kasan_slab_free+0x11/0x20 [ 169.030426][ C0] ? slab_free_freelist_hook+0xc0/0x190 [ 169.035811][ C0] ? kmem_cache_free+0xa9/0x1e0 [ 169.040487][ C0] ? kfree_skbmem+0x104/0x170 [ 169.045007][ C0] ? tipc_sk_rcv+0x1b52/0x1e30 [ 169.049598][ C0] ? tipc_node_xmit+0x34b/0xe30 [ 169.054297][ C0] ? tipc_sk_filter_rcv+0x1da8/0x3e00 [ 169.059500][ C0] ? tipc_sk_rcv+0x8a1/0x1e30 [ 169.064006][ C0] ? tipc_node_distr_xmit+0x36a/0x4d0 [ 169.069217][ C0] ? tipc_sk_backlog_rcv+0x18b/0x210 [ 169.074352][ C0] ? __fput+0x33d/0x7b0 [ 169.078330][ C0] ? ____fput+0x15/0x20 [ 169.082324][ C0] ? __skb_queue_purge+0x180/0x180 [ 169.087273][ C0] ? bpf_get_current_uid_gid+0xa7/0xf0 [ 169.092562][ C0] ? bpf_trace_run2+0xf4/0x280 [ 169.097159][ C0] tipc_node_xmit+0x34b/0xe30 [ 169.101675][ C0] ? kfree_skbmem+0x104/0x170 [ 169.106186][ C0] ? tipc_node_get_linkname+0x190/0x190 [ 169.111569][ C0] ? __bpf_trace_kmem_free+0x6f/0x90 [ 169.116690][ C0] ? kmem_cache_free+0x1c0/0x1e0 [ 169.121462][ C0] ? kfree_skbmem+0x104/0x170 [ 169.125979][ C0] tipc_node_xmit_skb+0x153/0x1b0 [ 169.130838][ C0] ? __skb_queue_purge+0x180/0x180 [ 169.135786][ C0] ? trace_tipc_sk_rej_msg+0x2b/0x6f0 [ 169.140991][ C0] tipc_sk_rcv+0x1c0b/0x1e30 [ 169.145428][ C0] ? __skb_queue_purge+0x180/0x180 [ 169.151328][ C0] tipc_node_xmit+0x34b/0xe30 [ 169.156358][ C0] ? stack_trace_save+0x1c0/0x1c0 [ 169.161547][ C0] ? __kernel_text_address+0x9b/0x110 [ 169.166754][ C0] ? tipc_node_get_linkname+0x190/0x190 [ 169.172133][ C0] ? __kasan_check_write+0x14/0x20 [ 169.177077][ C0] ? _raw_spin_lock_irqsave+0xf9/0x210 [ 169.182375][ C0] ? _raw_spin_lock+0x1b0/0x1b0 [ 169.187061][ C0] tipc_sk_filter_rcv+0x1da8/0x3e00 [ 169.192106][ C0] ? tipc_sk_dump+0xf50/0xf50 [ 169.196609][ C0] ? __kasan_check_write+0x14/0x20 [ 169.201556][ C0] ? _raw_spin_lock_bh+0xa4/0x1b0 [ 169.206424][ C0] ? kmem_cache_free+0xa9/0x1e0 [ 169.211111][ C0] tipc_sk_rcv+0x8a1/0x1e30 [ 169.215442][ C0] ? __bpf_trace_kmem_free+0x6f/0x90 [ 169.220570][ C0] ? __skb_queue_purge+0x180/0x180 [ 169.225514][ C0] ? tipc_sk_filter_rcv+0x3583/0x3e00 [ 169.230721][ C0] tipc_node_xmit+0x34b/0xe30 [ 169.235234][ C0] ? tipc_node_get_linkname+0x190/0x190 [ 169.240619][ C0] tipc_node_distr_xmit+0x36a/0x4d0 [ 169.245650][ C0] ? tipc_node_xmit_skb+0x1b0/0x1b0 [ 169.250681][ C0] ? __kasan_check_write+0x14/0x20 [ 169.255627][ C0] ? _raw_spin_lock_irqsave+0xf9/0x210 [ 169.260925][ C0] ? __tipc_shutdown+0xe7c/0x1510 [ 169.265800][ C0] tipc_sk_backlog_rcv+0x18b/0x210 [ 169.270741][ C0] ? tipc_sk_timeout+0xab0/0xab0 [ 169.275513][ C0] __release_sock+0x148/0x410 [ 169.280173][ C0] release_sock+0x65/0x1b0 [ 169.284409][ C0] tipc_release+0xb6b/0x1440 [ 169.288842][ C0] sock_close+0xdf/0x270 [ 169.292914][ C0] ? sock_mmap+0xa0/0xa0 [ 169.296993][ C0] __fput+0x33d/0x7b0 [ 169.300812][ C0] ____fput+0x15/0x20 [ 169.304627][ C0] task_work_run+0x129/0x190 [ 169.309153][ C0] exit_to_user_mode_loop+0xbf/0xd0 [ 169.314179][ C0] syscall_exit_to_user_mode+0xa2/0x1a0 [ 169.319560][ C0] do_syscall_64+0x40/0x70 [ 169.323812][ C0] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 169.329671][ C0] RIP: 0033:0x7fb087436f19 [ 169.333924][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 169.353354][ C0] RSP: 002b:00007fb0860b8048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 169.361694][ C0] RAX: 00000000000203a0 RBX: 00007fb0875c6f60 RCX: 00007fb087436f19 [ 169.369759][ C0] RDX: 0000000000000000 RSI: 00000000200003c0 RDI: 0000000000000003 [ 169.377567][ C0] RBP: 00007fb0874a5e68 R08: 0000000000000000 R09: 0000000000000000 [ 169.385376][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 169.393195][ C0] R13: 000000000000000b R14: 00007fb0875c6f60 R15: 00007ffc66b24138 [ 198.889703][ C1] watchdog: BUG: soft lockup - CPU#1 stuck for 123s! [syz.4.239:1149] [ 198.897681][ C1] Modules linked in: [ 198.901436][ C1] CPU: 1 PID: 1149 Comm: syz.4.239 Not tainted 5.10.222-syzkaller-01494-gfd58936f3c1f #0 [ 198.911049][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 198.920962][ C1] RIP: 0010:kvm_wait+0xfc/0x150 [ 198.925642][ C1] Code: 38 f0 75 26 41 f7 c7 00 02 00 00 75 0f 0f 1f 44 00 00 0f 00 2d 15 56 d5 03 f4 eb 0e 0f 1f 44 00 00 0f 00 2d 06 56 d5 03 fb f4 <4c> 89 7c 24 18 ff 74 24 18 9d 48 c7 44 24 20 0e 36 e0 45 49 c7 04 [ 198.945595][ C1] RSP: 0018:ffffc90000c379e0 EFLAGS: 00000246 [ 198.951498][ C1] RAX: 0000000000000003 RBX: 1ffff92000186f40 RCX: ffffffff8150b334 [ 198.959309][ C1] RDX: 0000000000000001 RSI: 0000000000000003 RDI: ffffc90000c37a20 [ 198.967124][ C1] RBP: ffffc90000c37a90 R08: dffffc0000000000 R09: ffffed1024029bd2 [ 198.974934][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 198.982744][ C1] R13: ffff88812014de88 R14: 0000000000000003 R15: 0000000000000246 [ 198.990556][ C1] FS: 0000555556581500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 198.999321][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 199.005742][ C1] CR2: 0000001b32719ff8 CR3: 000000011814e000 CR4: 00000000003506a0 [ 199.013554][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 199.021369][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 199.029181][ C1] Call Trace: [ 199.032309][ C1] [ 199.035001][ C1] ? show_regs+0x58/0x60 [ 199.039077][ C1] ? watchdog_timer_fn+0x471/0x590 [ 199.044109][ C1] ? proc_watchdog_cpumask+0xd0/0xd0 [ 199.049231][ C1] ? __hrtimer_run_queues+0x3d7/0xa50 [ 199.054442][ C1] ? hrtimer_interrupt+0x8b0/0x8b0 [ 199.059390][ C1] ? clockevents_program_event+0x214/0x2c0 [ 199.065030][ C1] ? ktime_get_update_offsets_now+0x266/0x280 [ 199.070928][ C1] ? hrtimer_interrupt+0x39a/0x8b0 [ 199.075881][ C1] ? __sysvec_apic_timer_interrupt+0xfd/0x3c0 [ 199.081779][ C1] ? asm_call_irq_on_stack+0xf/0x20 [ 199.086817][ C1] [ 199.089592][ C1] ? sysvec_apic_timer_interrupt+0x85/0xe0 [ 199.095232][ C1] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 199.101237][ C1] ? __pv_queued_spin_lock_slowpath+0x6d4/0xc70 [ 199.107294][ C1] ? kvm_wait+0xfc/0x150 [ 199.111377][ C1] ? asm_common_interrupt+0x1e/0x40 [ 199.116411][ C1] ? kvm_arch_para_hints+0x30/0x30 [ 199.121357][ C1] ? __pv_queued_spin_lock_slowpath+0x6d4/0xc70 [ 199.127523][ C1] __pv_queued_spin_lock_slowpath+0x72f/0xc70 [ 199.133510][ C1] ? __pv_queued_spin_unlock_slowpath+0x280/0x280 [ 199.139762][ C1] _raw_spin_lock_bh+0x139/0x1b0 [ 199.144530][ C1] ? _raw_spin_lock_irq+0x1b0/0x1b0 [ 199.149564][ C1] ? memset+0x35/0x40 [ 199.153382][ C1] lock_sock_nested+0x92/0x300 [ 199.157984][ C1] ? locks_remove_posix+0x610/0x610 [ 199.163103][ C1] ? sock_init_data+0xc0/0xc0 [ 199.167618][ C1] ? __kasan_check_read+0x11/0x20 [ 199.172482][ C1] tipc_release+0x57/0x1440 [ 199.176821][ C1] sock_close+0xdf/0x270 [ 199.180895][ C1] ? sock_mmap+0xa0/0xa0 [ 199.184974][ C1] __fput+0x33d/0x7b0 [ 199.188797][ C1] ____fput+0x15/0x20 [ 199.192612][ C1] task_work_run+0x129/0x190 [ 199.197042][ C1] exit_to_user_mode_loop+0xbf/0xd0 [ 199.202082][ C1] syscall_exit_to_user_mode+0xa2/0x1a0 [ 199.207456][ C1] do_syscall_64+0x40/0x70 [ 199.211712][ C1] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 199.217459][ C1] RIP: 0033:0x7fb087436f19 [ 199.221705][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 199.241132][ C1] RSP: 002b:00007ffc66b24218 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 199.249460][ C1] RAX: 0000000000000000 RBX: 00007fb0875c8a60 RCX: 00007fb087436f19 [ 199.257272][ C1] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 199.265081][ C1] RBP: 00007fb0875c8a60 R08: 0000000000000006 R09: 0000000966b2453f [ 199.273159][ C1] R10: 00000000005f9b08 R11: 0000000000000246 R12: 0000000000010ecb [ 199.281059][ C1] R13: 0000000000000032 R14: 00007fb0875c8a60 R15: 00007fb0875c7038 [ 199.288887][ C1] Sending NMI from CPU 1 to CPUs 0: [ 199.294859][ C0] NMI backtrace for cpu 0 [ 199.294867][ C0] CPU: 0 PID: 1150 Comm: syz.4.239 Not tainted 5.10.222-syzkaller-01494-gfd58936f3c1f #0 [ 199.294874][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 199.294878][ C0] RIP: 0010:__kasan_check_write+0x15/0x20 [ 199.294891][ C0] Code: d2 e8 ef ed ff ff 5d c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 55 48 89 e5 89 f6 48 8b 4d 08 ba 01 00 00 00 e8 cc ed ff ff 5d 66 2e 0f 1f 84 00 00 00 00 00 55 48 89 e5 41 57 41 56 53 49 89 [ 199.294896][ C0] RSP: 0018:ffffc9000133e938 EFLAGS: 00000256 [ 199.294905][ C0] RAX: 0000000000000301 RBX: 0000000000000004 RCX: ffffffff8498a8ef [ 199.294910][ C0] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff88812014de80 [ 199.294914][ C0] RBP: ffffc9000133ea30 R08: dffffc0000000000 R09: ffffed1024029bd1 [ 199.294919][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: fffffffffffffc18 [ 199.294924][ C0] R13: ffff88812014de00 R14: ffff88812014de80 R15: 000000000000035c [ 199.294929][ C0] FS: 00007fb0860b86c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 199.294933][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 199.294938][ C0] CR2: 0000001b3271cff8 CR3: 000000011814e000 CR4: 00000000003506b0 [ 199.294942][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 199.294947][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 199.294949][ C0] Call Trace: [ 199.294951][ C0] [ 199.294954][ C0] ? show_regs+0x58/0x60 [ 199.294957][ C0] ? nmi_cpu_backtrace+0x133/0x160 [ 199.294960][ C0] ? __kasan_check_write+0x15/0x20 [ 199.294964][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 199.294967][ C0] ? nmi_handle+0xa8/0x280 [ 199.294970][ C0] ? __kasan_check_write+0x15/0x20 [ 199.294973][ C0] ? default_do_nmi+0x69/0x160 [ 199.294976][ C0] ? exc_nmi+0xad/0x100 [ 199.294979][ C0] ? end_repeat_nmi+0x16/0x31 [ 199.294982][ C0] ? tipc_sk_lookup+0x4df/0x650 [ 199.294985][ C0] ? __kasan_check_write+0x15/0x20 [ 199.294988][ C0] ? __kasan_check_write+0x15/0x20 [ 199.294991][ C0] ? __kasan_check_write+0x15/0x20 [ 199.294993][ C0] [ 199.294996][ C0] ? tipc_sk_lookup+0x4df/0x650 [ 199.295000][ C0] ? tipc_sk_rcv+0x1e30/0x1e30 [ 199.295002][ C0] ? tipc_sk_rcv+0x305/0x1e30 [ 199.295005][ C0] tipc_sk_rcv+0x499/0x1e30 [ 199.295009][ C0] ? __stack_depot_save+0x468/0x4d0 [ 199.295012][ C0] ? kasan_set_track+0x5d/0x70 [ 199.295015][ C0] ? kasan_set_track+0x4b/0x70 [ 199.295018][ C0] ? kasan_set_free_info+0x23/0x40 [ 199.295021][ C0] ? __kasan_slab_free+0x11/0x20 [ 199.295024][ C0] ? slab_free_freelist_hook+0xc0/0x190 [ 199.295027][ C0] ? kmem_cache_free+0xa9/0x1e0 [ 199.295030][ C0] ? kfree_skbmem+0x104/0x170 [ 199.295033][ C0] ? tipc_sk_rcv+0x1b52/0x1e30 [ 199.295036][ C0] ? tipc_node_xmit+0x34b/0xe30 [ 199.295040][ C0] ? tipc_sk_filter_rcv+0x1da8/0x3e00 [ 199.295043][ C0] ? tipc_sk_rcv+0x8a1/0x1e30 [ 199.295046][ C0] ? tipc_node_distr_xmit+0x36a/0x4d0 [ 199.295049][ C0] ? tipc_sk_backlog_rcv+0x18b/0x210 [ 199.295052][ C0] ? __fput+0x33d/0x7b0 [ 199.295055][ C0] ? ____fput+0x15/0x20 [ 199.295058][ C0] ? __skb_queue_purge+0x180/0x180 [ 199.295061][ C0] ? bpf_get_current_uid_gid+0xa7/0xf0 [ 199.295064][ C0] ? bpf_trace_run2+0xf4/0x280 [ 199.295067][ C0] tipc_node_xmit+0x34b/0xe30 [ 199.295070][ C0] ? kfree_skbmem+0x104/0x170 [ 199.295074][ C0] ? tipc_node_get_linkname+0x190/0x190 [ 199.295077][ C0] ? __bpf_trace_kmem_free+0x6f/0x90 [ 199.295080][ C0] ? kmem_cache_free+0x1c0/0x1e0 [ 199.295084][ C0] ? kfree_skbmem+0x104/0x170 [ 199.295087][ C0] tipc_node_xmit_skb+0x153/0x1b0 [ 199.295090][ C0] ? __skb_queue_purge+0x180/0x180 [ 199.295093][ C0] ? trace_tipc_sk_rej_msg+0x2b/0x6f0 [ 199.295096][ C0] tipc_sk_rcv+0x1c0b/0x1e30 [ 199.295099][ C0] ? __skb_queue_purge+0x180/0x180 [ 199.295102][ C0] tipc_node_xmit+0x34b/0xe30 [ 199.295105][ C0] ? stack_trace_save+0x1c0/0x1c0 [ 199.295109][ C0] ? __kernel_text_address+0x9b/0x110 [ 199.295112][ C0] ? tipc_node_get_linkname+0x190/0x190 [ 199.295115][ C0] ? __kasan_check_write+0x14/0x20 [ 199.295119][ C0] ? _raw_spin_lock_irqsave+0xf9/0x210 [ 199.295122][ C0] ? _raw_spin_lock+0x1b0/0x1b0 [ 199.295125][ C0] tipc_sk_filter_rcv+0x1da8/0x3e00 [ 199.295128][ C0] ? tipc_sk_dump+0xf50/0xf50 [ 199.295131][ C0] ? __kasan_check_write+0x14/0x20 [ 199.295134][ C0] ? _raw_spin_lock_bh+0xa4/0x1b0 [ 199.295137][ C0] ? kmem_cache_free+0xa9/0x1e0 [ 199.295140][ C0] tipc_sk_rcv+0x8a1/0x1e30 [ 199.295143][ C0] ? __bpf_trace_kmem_free+0x6f/0x90 [ 199.295146][ C0] ? __skb_queue_purge+0x180/0x180 [ 199.295150][ C0] ? tipc_sk_filter_rcv+0x3583/0x3e00 [ 199.295153][ C0] tipc_node_xmit+0x34b/0xe30 [ 199.295156][ C0] ? tipc_node_get_linkname+0x190/0x190 [ 199.295159][ C0] tipc_node_distr_xmit+0x36a/0x4d0 [ 199.295163][ C0] ? tipc_node_xmit_skb+0x1b0/0x1b0 [ 199.295166][ C0] ? __kasan_check_write+0x14/0x20 [ 199.295169][ C0] ? _raw_spin_lock_irqsave+0xf9/0x210 [ 199.295172][ C0] ? __tipc_shutdown+0xe7c/0x1510 [ 199.295175][ C0] tipc_sk_backlog_rcv+0x18b/0x210 [ 199.295185][ C0] ? tipc_sk_timeout+0xab0/0xab0 [ 199.295188][ C0] __release_sock+0x148/0x410 [ 199.295191][ C0] release_sock+0x65/0x1b0 [ 199.295194][ C0] tipc_release+0xb6b/0x1440 [ 199.295196][ C0] sock_close+0xdf/0x270 [ 199.295199][ C0] ? sock_mmap+0xa0/0xa0 [ 199.295201][ C0] __fput+0x33d/0x7b0 [ 199.295204][ C0] ____fput+0x15/0x20 [ 199.295207][ C0] task_work_run+0x129/0x190 [ 199.295210][ C0] exit_to_user_mode_loop+0xbf/0xd0 [ 199.295213][ C0] syscall_exit_to_user_mode+0xa2/0x1a0 [ 199.295216][ C0] do_syscall_64+0x40/0x70 [ 199.295219][ C0] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 199.295223][ C0] RIP: 0033:0x7fb087436f19 [ 199.295233][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 199.295236][ C0] RSP: 002b:00007fb0860b8048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 199.295244][ C0] RAX: 00000000000203a0 RBX: 00007fb0875c6f60 RCX: 00007fb087436f19 [ 199.295249][ C0] RDX: 0000000000000000 RSI: 00000000200003c0 RDI: 0000000000000003 [ 199.295254][ C0] RBP: 00007fb0874a5e68 R08: 0000000000000000 R09: 0000000000000000 [ 199.295259][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 199.295263][ C0] R13: 000000000000000b R14: 00007fb0875c6f60 R15: 00007ffc66b24138