last executing test programs: 1m27.143758936s ago: executing program 1 (id=2542): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x9, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000009500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='sys_enter\x00', r1}, 0x10) mknod$loop(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) rename(&(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000100)='./file1\x00') 1m27.124743026s ago: executing program 1 (id=2543): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000fc0f00000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=@migrate={0xa0, 0x21, 0x1, 0x0, 0x1, {{@in6=@empty, @in6=@remote}, 0x0, 0x1}, [@migrate={0x50, 0x11, [{@in=@empty, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@multicast2, @in6=@empty, 0x6c, 0x1, 0x0, 0x3506, 0x2, 0x2}]}]}, 0xa0}}, 0x0) 1m27.105976226s ago: executing program 1 (id=2544): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) io_setup(0x7, &(0x7f0000000040)=0x0) io_submit(r2, 0x1, &(0x7f0000000680)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x6, r0, 0x0, 0x0, 0x1}]) 1m27.022898418s ago: executing program 1 (id=2549): syz_mount_image$exfat(&(0x7f00000005c0), &(0x7f0000000240)='./file0\x00', 0x3000050, &(0x7f0000000600)=ANY=[], 0x1, 0x14fe, &(0x7f0000002180)="$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") mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, 0x0) chdir(&(0x7f00000003c0)='./file0\x00') open(&(0x7f0000000000)='./file0\x00', 0x10800, 0x59) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xc40a, &(0x7f0000000180)={[{@noblock_validity}, {@dioread_lock}, {@nobh}, {@nojournal_checksum}, {@acl}, {@usrjquota, 0x2e}, {@grpquota}, {@nodiscard}, {@jqfmt_vfsv0}, {@noload}], [], 0x2c}, 0x84, 0x459, &(0x7f0000000900)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42, 0x10) 1m26.88822824s ago: executing program 1 (id=2556): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000780)={0x2c, r2, 0xc13, 0x70bd28, 0x25dfdbfd, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}]}]}, 0x2c}}, 0x2004010) 1m26.756543322s ago: executing program 1 (id=2560): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'dummy0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000300)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x7d}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='kfree\x00', r3}, 0x10) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x335, 0x20001}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}}, 0x0) 1m26.731563762s ago: executing program 32 (id=2560): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'dummy0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000300)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x7d}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='kfree\x00', r3}, 0x10) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x335, 0x20001}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}}, 0x0) 1m9.993007138s ago: executing program 3 (id=3038): sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@private=0xa010100, @in=@multicast2, 0x0, 0x0, 0x1, 0x0, 0xa}, {0x7, 0x5, 0xb, 0x0, 0x0, 0x0, 0xffffdffffffffffd}, {0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x2b}, 0x0, @in6=@private1, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x1}}, 0xe8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e21, 0x7, @loopback, 0xfcb}, 0x1c) 1m9.979996029s ago: executing program 3 (id=3039): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@private2, 0x800, 0x0, 0x2, 0x1}, 0x20) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@mcast2, 0x800, 0x0, 0x2, 0x0, 0x0, 0x8c}, 0x20) 1m9.099949512s ago: executing program 3 (id=3075): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0xffff, 0x10000, @mcast1}, {0xa, 0x0, 0x0, @empty}, 0x0, {[0x200020, 0x0, 0x0, 0x1000, 0x400]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x4e24, 0x0, @mcast2}}, 0x5c) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x0, 0x0, @private1}, {0xa, 0x0, 0x0, @mcast1}, 0x0, {[0x0, 0x2]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2}, {0xa, 0x0, 0x0, @empty}, 0x0, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x3]}}, 0x5c) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000080)=0xf, 0x4) 1m9.084949762s ago: executing program 3 (id=3076): syz_mount_image$exfat(&(0x7f00000005c0), &(0x7f0000000240)='./file0\x00', 0x3000050, &(0x7f0000000600)=ANY=[], 0x1, 0x14fe, &(0x7f0000002180)="$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") mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, 0x0) chdir(&(0x7f00000003c0)='./file0\x00') open(&(0x7f0000000000)='./file0\x00', 0x10800, 0x59) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xc40a, &(0x7f0000000180)={[{@noblock_validity}, {@dioread_lock}, {@nobh}, {@nojournal_checksum}, {@acl}, {@usrjquota, 0x2e}, {@grpquota}, {@nodiscard}, {@jqfmt_vfsv0}, {@noload}], [], 0x2c}, 0x84, 0x459, &(0x7f0000000900)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42, 0x10) 1m9.007328643s ago: executing program 3 (id=3078): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x2, 0x4, 0x4, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x6, 0x4, 0x1, 0x0, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) close(r0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r1}, &(0x7f0000000840), &(0x7f0000000880)=r0}, 0x20) 1m8.908639265s ago: executing program 3 (id=3082): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000400)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x6, 0x7, 0x0, 0x6}]}, 0x10) r1 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'xfrm0\x00', 0x0}) r3 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r3, &(0x7f0000000180)='`', 0x5dc, 0x0, &(0x7f0000000740)={0x6, 0x0, r2, 0x1, 0x0, 0x6, @random="4a99fee2084d"}, 0x14) 1m8.908337035s ago: executing program 33 (id=3082): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000400)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x6, 0x7, 0x0, 0x6}]}, 0x10) r1 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'xfrm0\x00', 0x0}) r3 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r3, &(0x7f0000000180)='`', 0x5dc, 0x0, &(0x7f0000000740)={0x6, 0x0, r2, 0x1, 0x0, 0x6, @random="4a99fee2084d"}, 0x14) 50.157227572s ago: executing program 6 (id=3617): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000080)="430fc73f1f26660f08f30f012ce5000001000f3235010000000f20e035400000000f22e00f22e435008000001f300f20e035000040000f22e035000000000f22d8c4e18173f53866baf80cb83879e487ef66baf80cb87413f489ef66bafc0cb8bc000000efec66b88e008ec02d1aa8000031310f1c460041ae", 0x79}], 0x1, 0x34, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 50.024736124s ago: executing program 6 (id=3625): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) munmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_COPY(r1, 0xc028aa05, &(0x7f0000000340)={&(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x10000}) 50.007034494s ago: executing program 6 (id=3628): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x4, 0x0, @mcast1={0xff, 0x7}, 0x8a4}}, {{0xa, 0x4e20, 0x100, @remote}}}, 0x108) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) 49.460664543s ago: executing program 6 (id=3640): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000240)={[{@nogrpid}, {@journal_dev={'journal_dev', 0x3d, 0x5}}, {@data_err_abort}]}, 0x2, 0x521, &(0x7f0000000cc0)="$eJzs3U9sI1cZAPBvJsnau02bFHoAVOhSCgtarZ1421XVC+VUIVQJ0SOHbUi8URQ7jmKnNGEP2SN3JCpx48SZAxIHpJ64I3GAG5dyQCqwAjVISBh5PM46f5xYaWJv499PGvnNvLG/93Y071mfN/MCmFg3I2IvIq5FxLsRMZcfT/It3uxunfM+efxwef/xw+Uk2u13/pFk9Z1j0feejmfyzyxGxA/eivhRciToHyOaO7vrS7VadSs/VG7VN8vNnd07a/Wl1epqdaNSubd4b+H1u69VLqyvL9V//fH1iPjdb7/80R/2vvWTTrNm87r+flykbtdnDuJ0TEfE9y4j2BhM5f25dp43n+tNXKQ0Ij4XES9n9/9cTGVX87DDl+nbI2wdAHAZ2u25aM/17wMAV12a5cCStJTnAmYjTUulbg7vhbiR1hrN1u0Hje2NlW6ubD5m0gdrtepCniucj5nkwdp0dTEr9/Zr1cqR/bsR8XxE/KxwPdsvLTdqK+P84gMAE+yZI/P/vwvd+R8AuOKKT4qFcbYDABid4rgbAACMnPkfACaP+R8AJo/5HwAmj/kfACaP+R8AJsr33367s7X38+dfr7y3s73eeO/OSrW5XqpvL5eWG1ubpdVGYzV7Zk/9rM+rNRqbi6/G9vvlVrXZKjd3du/XG9sbrfvZc73vV2dG0isA4DTPv/Thn5OI2HvjerZF3/P+z5yrX7zs1gGXKR13A4CxmRp3A4CxOb7aFzAp5ONhcv2v3W5H39q9EfHooNT3MNCB/0Xog6HCpNYNhafPrS9+ivw/8Jkm/w+T63z5f9/l4SqQ/4fJ1W4n1vwHgAkjxw8kZ9T3//6/0O7bOfr7vwEFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACACTKbbUlaytcCn400LZUino2I+ZhJHqzVqgsR8VxE/KkwU+jsL1rmAwA+49K/Jfn6X7fmXpk9Wnut8J9C9hoRP/7FOz9/f6nV2lqMuJb88+B464P8eGUc7QeACTY93Gm9ebo3j/d88vjhcm+7tDae4OPvdBcX7cTdz7duzXTepWKWa7jxr+RQFzvfV6YuIP7eo4j4wkn9T7LcyHy+8unR+J3Yz440fnoofprVdV87/xafv4C2wKT5sDP+vHnS/ZfGzez15Pu/OPyQe6re+Ld/bPxLD8a/qQHj381hY7z6++8eO9ie69Y9ivjSdMR+78P7xp9e/GRA/FeGjP+XF7/ycl6cP1KVLTt9K07qf3LopHKrvllu7uzeWasvrVZXqxuVyr3Fewuv332tUs5y1OVepvq4v79x+7lBbev0/8aA+MUz+v/1Ifv/y/+++8OvnhL/m187+fq/cEr8zpz4jSHjL934TXFQXSf+yoD+n3X9bw8Z/6O/7q4MeSoAMALNnd31pVqtuvXpC8VTz0kvIsQQhSRi75JDPCkUfvXTt84+uTCy9pyzEIOqpp6WFl6ZQuHpaMYQhXGPTMBle3LTj7slAAAAAAAAAAAAAADAIKP4c6Jx9xEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICr6/8BAAD//xOl1VI=") r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x185641, 0x0) r1 = open(&(0x7f00000003c0)='./bus\x00', 0x84902, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x11, r1, 0x0) write$FUSE_ATTR(r0, &(0x7f0000000440)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0xffffffffff7ffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc000}}}, 0x78) 49.238861426s ago: executing program 6 (id=3650): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x20400, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x3000002, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000007c0)='\x00\x00\x03\x06\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Xd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~\x00\x00\x00\x00\x00\x00\x00\x00\x00') mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000300)='\x00\x00\x03\x06\x00\x00\x00\x01\x00x\x92\x12\xbc\x00\x00\xbb\x0642\x9c\x1a\xd1\xcbx\xb0\xd6\x1e\x10gQ\xca\x0e;\xf7\'\x8c\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn\x05\x00\x00\x00-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \xac\xc4K\x03\xfa\x13Vz\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafd%\xf1\xdbjE\x01\xd1sD5hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\x851Y9OB\xdeB\xe1\x02-&\"1hS\x92\xe4$-\x02\x00\xe4\x8e\"\x85\xc9x\xef\x81E.r\x89\xe5\x00\x9e\x97\x96\xb8j\x81\xf0\xdca\xfb\xa6\xff\xff\xff\xff\x00\x00\x00\x00d\xf0\xf1j\x11\x12\xc0\xbb\xfdq~#\xf7\xa8\"$,\xf4\x84|\x89o\x00<\xa6-\xb0\xd3\x80\xbe\xcf\a\x00\xfc\xa6\xb1\x05\x94\x84l\xbfA\xeb\xd8\t\x00\x00\x00CvNhx461\x04N<\xedV\xcet\xaa~\xf3j\x94\xec\x92\x86uY\xf6\xb5\t?,~\xa67\\\xb9\xc9K\xf8\x9d\x96\xc0\xb5\xc7wF\x99\x12\x97T\x90.\x9c\xe3\x9a\xf1\xb9\x9c\x13\xbc\x19\xde/\xaahB\t\x97\a03\xcd\xb3\xc8\xd5l\x14!\xf9Xg2\x1d\xeeB\xccT\x0e\xd8\xef\xc8\xe9\xb4\xf3l\xc3\xf2\x998\xc8\xc2|2\xee\xb4W\x99f.\xeb\xe9\x05\xcbkz3+\xdd\xe1*8\x95@0t0\xad\xe3#\xd7\x19\xe7Q\xdfmI\xe5\x1e\xe4\x87\xc9\x8f\xa7\xe0\xd9v\xf6\x01\x9d\x8f`,\x1a8\x81I\x86l\x8f2\r:\xc1\x02\xd6Z%\xa7Ks\x8bUolS\x05\xbe\x97\x1fGe\x94\xa6\xa3\xab\xdb\r\x17\xff[\xb1\x00\xff\x7f\x00\x00\x00\x00') 49.040646169s ago: executing program 6 (id=3654): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r0}, 0x10) futex(&(0x7f000000cffc)=0x4, 0x0, 0x4, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x1, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000af3000/0x3000)=nil, 0x3000, 0x0) 49.00363007s ago: executing program 34 (id=3654): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r0}, 0x10) futex(&(0x7f000000cffc)=0x4, 0x0, 0x4, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x1, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000af3000/0x3000)=nil, 0x3000, 0x0) 18.128105172s ago: executing program 5 (id=4472): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000005000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) setns(r1, 0x24020000) syz_clone3(&(0x7f00000008c0)={0x10860000, 0x0, 0x0, 0x0, {0x28}, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[r0], 0x1}, 0x58) 18.096510983s ago: executing program 5 (id=4473): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f0000000540)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, 0x0, 0x0) 18.051143594s ago: executing program 5 (id=4474): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b000085"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x18) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'veth1_to_batadv\x00', 0x0}) bind$packet(r1, &(0x7f0000000080)={0x11, 0x2, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) bind$packet(r1, &(0x7f0000000400)={0x11, 0x10, r2, 0x1, 0x6, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) 18.050974394s ago: executing program 5 (id=4475): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8f1018, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) move_mount(0xffffffffffffff9c, &(0x7f00000003c0)='./file0/../file0\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file0/../file0/file0\x00', 0x102) 18.050701154s ago: executing program 5 (id=4476): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000600)='sys_enter\x00', r2}, 0x10) capget(&(0x7f0000feaff9), 0x0) 17.912394096s ago: executing program 5 (id=4478): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) setgid(0x0) 17.912128336s ago: executing program 35 (id=4478): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) setgid(0x0) 8.849790234s ago: executing program 8 (id=4780): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000fb"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x4c, 0x12, 0x101, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, 0x1400}}, 0x4c}}, 0x0) 8.827551415s ago: executing program 8 (id=4781): r0 = io_uring_setup(0x76a3, &(0x7f0000000340)={0x0, 0x20, 0x400, 0x80, 0x1c9}) close(r0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r2}, 0x10) clock_nanosleep(0x9, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, 0x0) 8.724514266s ago: executing program 8 (id=4782): pipe2(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r0, &(0x7f0000000b80)=[{&(0x7f0000000bc0)="96", 0x1}, {&(0x7f0000000700)='<', 0x1}, {&(0x7f0000000e80)="fbc64fb10135717fd6badded0494f33d4aecb9c99eb03b9e11e2a182d3d81cd3db635b2f5245f788b47e0c2d4f291eb96f7550dc0b74803628be3606fe3e1008017766318c873d4fc14448d6ec359379fefc8a421b449113a9b003152e43085df9c2dcf8d3d3e9a9d083515745af705c405c503df0b1c468fbf91fb655647d9a763abc92690ebdc8df7ac9b65293e23df850cad960d54a4ee1e8bad375a2e1fbb1c9d54fbc3bcf2cd82b87d627b1e658f1159ed7b68cf0d7157586b0b5ae08b021b811fcf482e84a1e26018c5199ee44354105dbd2a79ab7786b9f21aeb1fe5a1905cf5f48", 0xe5}], 0x3, 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) splice(r1, 0x0, r0, 0x0, 0x1, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) close_range(r0, 0xffffffffffffffff, 0x0) 8.461388271s ago: executing program 8 (id=4788): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0xc0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/file0\x00', &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x18d811, 0x0) 8.44188282s ago: executing program 8 (id=4791): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0xff48, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, 0x0, &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x10) geteuid() 8.364631892s ago: executing program 8 (id=4793): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='kfree\x00', r0}, 0x10) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000600)={0x0, 0x22, 0xf, {[@main=@item_012={0x1, 0x0, 0xa, '9'}, @local=@item_4={0x3, 0x2, 0x0, "89d48617"}, @main=@item_012={0x2, 0x0, 0xc, "e05a"}, @main=@item_4={0x3, 0x0, 0xb, "51b1c180"}]}}, 0x0}, 0x0) 8.352930072s ago: executing program 36 (id=4793): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='kfree\x00', r0}, 0x10) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000600)={0x0, 0x22, 0xf, {[@main=@item_012={0x1, 0x0, 0xa, '9'}, @local=@item_4={0x3, 0x2, 0x0, "89d48617"}, @main=@item_012={0x2, 0x0, 0xc, "e05a"}, @main=@item_4={0x3, 0x0, 0xb, "51b1c180"}]}}, 0x0}, 0x0) 864.446767ms ago: executing program 7 (id=5068): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e000000080000000000180003801400038010"], 0x44}}, 0x20008000) 799.233697ms ago: executing program 7 (id=5069): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@sack_perm, @window, @sack_perm, @sack_perm, @timestamp, @timestamp, @timestamp, @timestamp], 0x20000149) setsockopt$inet_tcp_int(r0, 0x6, 0x3, &(0x7f0000000080)=0x7, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 672.549749ms ago: executing program 2 (id=5081): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x2, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e000000080000000000180003801400038010"], 0x44}}, 0x0) 626.68571ms ago: executing program 7 (id=5084): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r2}, 0x10) sendmmsg$inet(r0, &(0x7f0000006f00)=[{{&(0x7f0000006c00)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000006e80)=[@ip_ttl={{0x14, 0x0, 0x2, 0x8002}}], 0x18}}], 0x1, 0x40) 617.512741ms ago: executing program 2 (id=5085): syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000980)='./file1\x00', 0x0, &(0x7f0000000f40)=ANY=[], 0x5, 0x2b2, &(0x7f00000006c0)="$eJzs3U9rY1UUAPDz0jR9OosUcaMIPtCFqzJ166ZRRhC7UiKoCw3ODEgSBqYQmArGruYTuPR7+BHcuPEbDLgV3E0XlSfvX/7ga402VXR+v9Xh3nfuPXm3TbLJeZ+/Mh3ffZDE2dMnkaZJdI7iKM6T2I9ONL6JbgAA/x/neR6/5mWY5JUNM7udGy0MALgx1ef/X/rgBwD+4z78+JP3B8fHdz7IsjRe6j+eDZOImD6eDav5wf34MiZxL25HPy4i8oUqfve94zvRzQr78fp0PhsWmdPPfqzXH/wSUeYfRj/22/MPs8pK/nw23I3nI4vB/d2m1H682J7/Zkt+DHvxxmsr9R9EP376Ih7EJO5GkbvM//owy97Jv3361afFNkV+0onhXnldKfcFCQAAAAAAAAAAAAAAAAAAAACA7TrIsqRq31P27ymG6v47Oxfl/EHW2F/vz1PlJ81CVX+gvOmWM8/ju6a/zu0sy/L6wmV+N17uerAAAAAAAAAAAAAAAAAAAAAAFE4ePbk1mkzuPTx5dDq+dtB0A2h+1v931zlaGXk1TsejncsX3Nt8r9VuA0WtV14c3W5s6ba0B2eLkeeKera+xV4sRj6KKmgOZqt7vfB2tejpeJTVU81NHo+SP9srbQ7u+9WpXly3sLz8k7jI1880XZS6ntXb0t3o3Wqd+i3P883Weevn6ozqkaRssbHZ7rt10PoCiyAtziJd/OMXUz9cvuClbxk7137TAQAAAAAAAAAAAAAAAAAAWi1/9NsyeXZlaufGigIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAf9jy+f9NkEbE+sgfgnmdfNU1ddCLhyf/8ksEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgGfB7AAAA//8rlFqg") r0 = creat(&(0x7f0000000280)='./bus\x00', 0x2) pwritev2(r0, &(0x7f0000000040)=[{&(0x7f0000000980)="ca", 0x1}], 0x1, 0x10fffff, 0xffffffff, 0x0) r1 = open(&(0x7f0000000200)='./bus\x00', 0x44000, 0x0) r2 = dup3(r1, r0, 0x0) finit_module(r2, 0x0, 0x200000000000000) 585.057641ms ago: executing program 2 (id=5086): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x18) fchownat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) 584.393591ms ago: executing program 0 (id=5088): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f00000000c0)={@remote}, 0x14) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'veth1_to_hsr\x00', 0x0}) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000080)={@remote, r2}, 0x14) close_range(r0, 0xffffffffffffffff, 0x0) 547.512571ms ago: executing program 7 (id=5089): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) pipe(&(0x7f0000005880)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_selinux(r2, &(0x7f00000000c0), 0x0, 0x0, 0x0) 547.277802ms ago: executing program 2 (id=5090): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x6174, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r0, &(0x7f0000004740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000010c0)=""/7, 0x7}, 0x8}], 0x1, 0x45833af92e4b39ff, 0x0) 531.139202ms ago: executing program 0 (id=5092): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) socket$tipc(0x1e, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c00000010004b0400f4ed00000000007a000900", @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b00010062726964676500001c00028008000400000000000600060000000000060009"], 0x4c}}, 0x0) 474.919743ms ago: executing program 7 (id=5093): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./file1\x00', 0x101880a, &(0x7f0000005a80)=ANY=[@ANYBLOB="6e6f646973636172642c6261636b67726f756e645f67633d73796e632c61636c2c6673796e635f6d6f64653d7374726963742c696e6c696e655f78617474722c6673796e635f6d6f64653d706f7369782c646973636172645f756e69743d7365676d656e742c6261636b67726f756e645f67633d6f6e2c6e6f696e6c696e655f78617474722c646973636172645f756e69743d626c6f636b2c6673796e635f6d6f64653d7374726963742c617467632c657874656e745f63616368652c6661756c745f696e6a656374696f6e3d30303030303030303030303030303031343033302c00271d57a599b8b169a579679e220c689eaaec4fa6229021e75c68a687d319b615573b0b0ceefba8e2e2419434463974ef8174b66469344931de0ccad650792761"], 0x1, 0x550b, &(0x7f0000000540)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1a37c1, 0x42) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0xf501, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) write$uinput_user_dev(r1, &(0x7f0000005f00)={'syz0\x00', {0x6, 0x6, 0x1, 0x8}, 0x2a, [0x5ccc, 0xc00, 0xffff0001, 0x5, 0x4625dfad, 0xffffffff, 0x5, 0x4, 0x401, 0x8, 0x9, 0x7fffffff, 0xe, 0x2314, 0x8, 0x1, 0x73, 0x4, 0x1, 0x5, 0x4, 0x0, 0x55715636, 0x583, 0xfffffffe, 0xfff, 0xf, 0x3, 0xe000000, 0xb7c3, 0x81, 0xfffffffa, 0xffffffff, 0x9, 0x6, 0x7, 0x7, 0x7e, 0x1, 0x0, 0x8, 0x2, 0xff, 0x8, 0x664, 0x0, 0x7fffffff, 0x2, 0x8, 0x8, 0x7fff, 0x3, 0x2, 0x1ff, 0x769c, 0x9a, 0x81, 0x7, 0x3, 0x0, 0x8, 0x9, 0x9, 0x4], [0x5, 0xb, 0x3, 0xfffffffe, 0x80000000, 0x80000000, 0x10, 0x7, 0x5, 0x800, 0x1, 0x9, 0x8, 0xffffffff, 0x7fff, 0x23b, 0xfffd, 0x40, 0x80000001, 0x7, 0x3, 0x7fff, 0x800, 0x7, 0x8, 0x9, 0x3, 0x47, 0x3, 0x5, 0x1ff, 0x800, 0xb0de, 0x7, 0x2, 0x8, 0x1, 0x1, 0x1, 0xff, 0x100, 0x9, 0x4, 0x2, 0xb3, 0x1, 0x1, 0x1, 0x63e5, 0x100, 0x1, 0x0, 0xb, 0x9, 0x1, 0x2, 0x3, 0x5, 0xfffffffb, 0x1, 0x5, 0xa, 0x7, 0x6], [0x7ff, 0x9, 0x4, 0x80000001, 0x2, 0x9, 0x2, 0x6, 0x9, 0xffffffff, 0x1000, 0x8, 0x3, 0xb, 0x4a242a93, 0x2a, 0x0, 0x5, 0x10, 0x9, 0x44, 0x400, 0x80000001, 0x25f, 0x2, 0x4, 0x8001, 0x10, 0x0, 0x7, 0x9, 0xfff, 0x95, 0x6, 0x2, 0x8, 0x99be, 0x38b, 0x3, 0x8, 0x3, 0x7, 0x24, 0x7, 0xa, 0x3ff, 0x5, 0x4, 0x4a2, 0x3e, 0x8, 0x8, 0xbf1, 0x3, 0x6, 0x2, 0x2, 0xa, 0x7f, 0x3, 0x8, 0x8, 0x34], [0x81, 0xe, 0x49e1, 0x4, 0xffff, 0x7, 0x0, 0x17, 0x4, 0x80, 0x10000000, 0x2, 0x8, 0x4, 0x800, 0xffff8001, 0xe0000, 0x6, 0x7fff, 0x0, 0x4, 0x1, 0x18f7, 0x1, 0x8445, 0xb2d6, 0xf, 0x7, 0x80000000, 0x10001, 0x401, 0xb, 0x2, 0x10000, 0x400, 0x3ff, 0x5, 0x4, 0x8001, 0x8, 0x2, 0x7, 0x4, 0x56d0, 0x40, 0x7, 0x1, 0x8000, 0x8, 0x1, 0xfffffffa, 0x3, 0x8f33, 0x80, 0x9, 0x0, 0x400, 0x3, 0x8, 0x2, 0x35, 0x7fa, 0x69e, 0x2]}, 0x45c) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143242, 0x0) 396.732774ms ago: executing program 0 (id=5096): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000060000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) geteuid() 396.308394ms ago: executing program 4 (id=5097): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x1000}}) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x2a442, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x141001, 0x0) write$FUSE_WRITE(r1, &(0x7f00000001c0)={0x18, 0x0, 0x0, {0xc}}, 0x18) 365.319534ms ago: executing program 4 (id=5098): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 364.780804ms ago: executing program 0 (id=5099): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0b00000007000000d7c900000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) 320.121065ms ago: executing program 9 (id=5100): r0 = open(&(0x7f0000000000)='./bus\x00', 0x40, 0x170) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) fgetxattr(r0, &(0x7f00000003c0)=@known='security.selinux\x00', 0x0, 0x0) 319.879945ms ago: executing program 0 (id=5101): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x2a, &(0x7f0000000100)=r2, 0x4) sendmsg$unix(r1, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="14"], 0x18, 0x48000}, 0x0) write(r1, &(0x7f0000000140)="bedb6032555a", 0x6) recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x2) 318.509935ms ago: executing program 2 (id=5110): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42, 0x10) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, 0x0) 244.683146ms ago: executing program 0 (id=5102): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0xfffffd9d) r1 = socket(0x1e, 0x4, 0x0) connect$tipc(r1, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x1, 0x4}}, 0x10) sendfile(r1, r0, 0x0, 0x8010002b) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000000)=0x71, 0x4) 244.304896ms ago: executing program 9 (id=5103): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000100)={0x20, 0x1, 0x1, 0x201, 0x0, 0x0, {}, [@CTA_MARK_MASK={0x8}, @CTA_FILTER={0x4}]}, 0x20}}, 0x0) 244.049826ms ago: executing program 4 (id=5104): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) 237.013936ms ago: executing program 2 (id=5105): openat$ptp0(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5543, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x2}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x18) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000100)={0x2939a4cb3fa6444b, 0x8, 0x5, {0x5, 0x9, "ff6b75"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 210.989697ms ago: executing program 9 (id=5106): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x8}]}}]}, 0x38}}, 0x0) 184.506597ms ago: executing program 9 (id=5107): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000280)={'wg2\x00'}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'wg2\x00', @multicast}) 139.825017ms ago: executing program 4 (id=5108): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x4, 0x8, 0xa, 0x0, 0xffffffffffffffff, 0x1000000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r0}, &(0x7f0000000300), &(0x7f0000000540)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) 139.230988ms ago: executing program 9 (id=5109): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000140)=0x13) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000003680)='sched_switch\x00', r1}, 0x10) ioctl$TCSETSW(r0, 0x5403, &(0x7f00000000c0)={0xfffffffa, 0x0, 0x0, 0x0, 0x0, "ff24e57a1c873d098b488659cdd21490da2ffa"}) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000000)=0xd) 124.118368ms ago: executing program 4 (id=5111): open(&(0x7f0000000380)='./file0\x00', 0x121bfd, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r1 = open(&(0x7f0000000200)='./bus\x00', 0x1612c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/locks\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x200) fcntl$setlease(r0, 0x400, 0x1) 88.804078ms ago: executing program 9 (id=5112): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x20c006, &(0x7f0000000200)={[{@i_version}, {@mblk_io_submit}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@discard}, {@data_err_abort}], [{@seclabel}]}, 0x1, 0x43d, &(0x7f0000000900)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000001400)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r1, 0x107, 0x15, 0x0, &(0x7f0000000040)) 18.39583ms ago: executing program 4 (id=5113): mkdir(0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x141, 0x58, 0xa5, 0x75, 0x20, 0x99fa, 0x8988, 0x65cd, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x6c, 0x7, 0x0, 0x70, 0xcf, 0xee}}]}}]}}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x4000000000000, 0x0, 0x0, 0x0, 0xfffffffffffffffb}}}, 0xb8}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb4, 0x15, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb4}}, 0x0) 0s ago: executing program 7 (id=5114): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)={0x34, r3, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}]}]}, 0x34}}, 0x0) kernel console output (not intermixed with test programs): mode [ 133.012748][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 133.028048][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 133.046440][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 133.074866][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 133.088265][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 133.096505][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 133.114549][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 133.128314][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 133.137834][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 133.146222][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 133.154723][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 133.166597][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 133.175244][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 133.184627][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 133.234993][ T7791] syz.0.3282 (7791) used greatest stack depth: 19112 bytes left [ 133.253002][ T7853] loop4: detected capacity change from 0 to 256 [ 133.279762][ T7853] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0x606a960c, utbl_chksum : 0xe619d30d) [ 133.387249][ T7859] SELinux: failed to load policy [ 133.767127][ T7916] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3340'. [ 133.839296][ T7926] netlink: 'syz.6.3343': attribute type 4 has an invalid length. [ 133.855769][ T7926] netlink: 3657 bytes leftover after parsing attributes in process `syz.6.3343'. [ 133.938915][ T7940] 9pnet: p9_errstr2errno: server reported unknown error @í [ 134.056613][ T28] kauditd_printk_skb: 67 callbacks suppressed [ 134.056630][ T28] audit: type=1400 audit(1742927518.476:3361): avc: denied { getopt } for pid=7962 comm="syz.6.3364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 134.123229][ T7969] loop6: detected capacity change from 0 to 1024 [ 134.129910][ T7969] EXT4-fs: Ignoring removed orlov option [ 134.146482][ T7969] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 134.158869][ T7967] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7967 comm=syz.2.3366 [ 134.174706][ T7977] tmpfs: Unknown parameter 'nolazytimeÿÿ' [ 134.180229][ T7974] loop4: detected capacity change from 0 to 1024 [ 134.180668][ T28] audit: type=1400 audit(1742927518.606:3362): avc: denied { write } for pid=7968 comm="syz.6.3367" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 134.218139][ T7331] EXT4-fs (loop6): unmounting filesystem. [ 134.218780][ T28] audit: type=1400 audit(1742927518.606:3363): avc: denied { add_name } for pid=7968 comm="syz.6.3367" name="cpu.stat" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 134.229084][ T7974] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 134.244553][ T28] audit: type=1400 audit(1742927518.606:3364): avc: denied { read append open } for pid=7968 comm="syz.6.3367" path="/60/file1/cpu.stat" dev="loop6" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 134.254056][ T7980] loop5: detected capacity change from 0 to 512 [ 134.276915][ T28] audit: type=1400 audit(1742927518.616:3365): avc: denied { map } for pid=7968 comm="syz.6.3367" path="/60/file1/cpu.stat" dev="loop6" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 134.305803][ T28] audit: type=1400 audit(1742927518.616:3366): avc: denied { write } for pid=7968 comm="syz.6.3367" name="cpu.stat" dev="loop6" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 134.334789][ T7974] EXT4-fs (loop4): re-mounted. Quota mode: writeback. [ 134.334955][ T28] audit: type=1400 audit(1742927518.756:3367): avc: denied { remount } for pid=7973 comm="syz.4.3379" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 134.363706][ T7980] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2186: inode #15: comm syz.5.3369: corrupted in-inode xattr [ 134.382351][ T7987] x_tables: duplicate underflow at hook 4 [ 134.387777][ T7980] EXT4-fs error (device loop5): ext4_orphan_get:1405: comm syz.5.3369: couldn't read orphan inode 15 (err -117) [ 134.399875][ T7980] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 134.420016][ T28] audit: type=1400 audit(1742927518.846:3368): avc: denied { ioctl } for pid=7978 comm="syz.5.3369" path=2F3130362F66696C65302F80 dev="loop5" ino=18 ioctlcmd=0x660f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 134.449044][ T2696] EXT4-fs (loop4): unmounting filesystem. [ 134.458856][ T6135] EXT4-fs (loop5): unmounting filesystem. [ 134.510885][ T28] audit: type=1400 audit(1742927518.936:3369): avc: denied { read } for pid=7993 comm="syz.0.3389" path="socket:[43393]" dev="sockfs" ino=43393 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 134.593171][ T8010] syz.4.3381[8010] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 134.593250][ T8010] syz.4.3381[8010] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 134.612895][ T28] audit: type=1400 audit(1742927519.036:3370): avc: denied { write } for pid=7993 comm="syz.0.3389" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 134.663780][ T8017] loop4: detected capacity change from 0 to 128 [ 134.676260][ T8014] netlink: 'syz.2.3394': attribute type 4 has an invalid length. [ 134.705722][ T8017] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 134.723181][ T8017] ext4 filesystem being mounted at /417/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 134.744953][ T8021] input: syz0 as /devices/virtual/input/input21 [ 134.759110][ T2696] EXT4-fs (loop4): unmounting filesystem. [ 134.871710][ T8043] loop5: detected capacity change from 0 to 1024 [ 134.902820][ T8043] EXT4-fs: Ignoring removed i_version option [ 134.915532][ T8043] EXT4-fs: Ignoring removed nomblk_io_submit option [ 134.965974][ T8043] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 135.065612][ T6135] EXT4-fs (loop5): unmounting filesystem. [ 135.363324][ T8095] loop6: detected capacity change from 0 to 512 [ 135.369862][ T8095] EXT4-fs: Ignoring removed bh option [ 135.375507][ T8095] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 135.389423][ T8095] EXT4-fs (loop6): 1 truncate cleaned up [ 135.394933][ T8095] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 135.423711][ T7331] EXT4-fs (loop6): unmounting filesystem. [ 135.437841][ T673] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 135.443489][ T8098] loop6: detected capacity change from 0 to 1024 [ 135.451785][ T8098] EXT4-fs: Ignoring removed i_version option [ 135.458380][ T8098] EXT4-fs: Ignoring removed nomblk_io_submit option [ 135.470508][ T8098] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 135.526012][ T7331] EXT4-fs (loop6): unmounting filesystem. [ 135.622320][ T8112] Dead loop on virtual device ip6_vti0, fix it urgently! [ 135.628807][ T673] usb 6-1: config 0 has an invalid interface number: 50 but max is 0 [ 135.629623][ T8112] Dead loop on virtual device ip6_vti0, fix it urgently! [ 135.638128][ T673] usb 6-1: config 0 has no interface number 0 [ 135.645042][ T8112] Dead loop on virtual device ip6_vti0, fix it urgently! [ 135.652796][ T673] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 135.657191][ T8112] Dead loop on virtual device ip6_vti0, fix it urgently! [ 135.666047][ T673] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.673364][ T8112] Dead loop on virtual device ip6_vti0, fix it urgently! [ 135.686410][ T673] usb 6-1: Product: syz [ 135.691363][ T673] usb 6-1: Manufacturer: syz [ 135.695813][ T673] usb 6-1: SerialNumber: syz [ 135.698447][ T8112] Dead loop on virtual device ip6_vti0, fix it urgently! [ 135.709577][ T673] usb 6-1: config 0 descriptor?? [ 135.815136][ T8127] incfs: iterate_incfs_dir / -22 [ 135.819993][ T8127] incfs: iterate_incfs_dir / -22 [ 135.924665][ T297] usb 6-1: USB disconnect, device number 7 [ 136.600109][ T673] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 136.619940][ T8210] loop5: detected capacity change from 0 to 1024 [ 136.627725][ T673] hid-generic 0000:0000:0000.0018: hidraw0: HID v0.00 Device [syz1] on syz0 [ 136.636971][ T8210] EXT4-fs: Ignoring removed oldalloc option [ 136.644695][ T8210] EXT4-fs: Ignoring removed mblk_io_submit option [ 136.653987][ T8210] EXT4-fs: Ignoring removed nomblk_io_submit option [ 136.674700][ T8210] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 136.753956][ T6135] EXT4-fs (loop5): unmounting filesystem. [ 137.147554][ T297] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 137.334033][ T8272] overlayfs: failed to clone upperpath [ 137.347583][ T297] usb 7-1: Using ep0 maxpacket: 16 [ 137.354989][ T297] usb 7-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 137.380162][ T297] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.397588][ T297] usb 7-1: Product: syz [ 137.401580][ T297] usb 7-1: Manufacturer: syz [ 137.406004][ T297] usb 7-1: SerialNumber: syz [ 137.418678][ T297] usb 7-1: config 0 descriptor?? [ 137.424700][ T297] ftdi_sio 7-1:0.0: FTDI USB Serial Device converter detected [ 137.432393][ T297] usb 7-1: Detected FT232H [ 137.625295][ T297] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 137.832926][ T297] ftdi_sio 7-1:0.0: GPIO initialisation failed: -71 [ 137.840655][ T297] usb 7-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 137.849356][ T297] usb 7-1: USB disconnect, device number 3 [ 137.856161][ T297] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 137.865538][ T297] ftdi_sio 7-1:0.0: device disconnected [ 137.930724][ T8289] overlayfs: missing 'lowerdir' [ 138.166907][ T8309] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3518'. [ 138.181974][ T8309] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3518'. [ 138.250031][ T8320] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3512'. [ 138.443249][ T8333] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 138.597557][ T24] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 138.642066][ T8358] netlink: 'syz.2.3530': attribute type 27 has an invalid length. [ 138.655258][ T8358] device lo left promiscuous mode [ 138.660479][ T8358] device tunl0 left promiscuous mode [ 138.675773][ T8358] device gre0 left promiscuous mode [ 138.687586][ T8358] device gretap0 left promiscuous mode [ 138.698350][ T8358] device erspan0 left promiscuous mode [ 138.704856][ T8358] device ip_vti0 left promiscuous mode [ 138.711028][ T8358] device ip6_vti0 left promiscuous mode [ 138.724201][ T8358] device sit0 left promiscuous mode [ 138.736661][ T8358] device ip6tnl0 left promiscuous mode [ 138.750507][ T8358] device ip6gre0 left promiscuous mode [ 138.783865][ T8358] device syz_tun left promiscuous mode [ 138.789684][ T8358] device ip6gretap0 left promiscuous mode [ 138.798216][ T8358] device bridge0 left promiscuous mode [ 138.804418][ T8358] device vcan0 left promiscuous mode [ 138.809697][ T24] usb 6-1: Using ep0 maxpacket: 16 [ 138.817914][ T8358] device dummy0 left promiscuous mode [ 138.823381][ T24] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 138.834134][ T8358] device veth0 left promiscuous mode [ 138.837647][ T24] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 138.849255][ T8358] device veth1 left promiscuous mode [ 138.855272][ T8358] device wg0 left promiscuous mode [ 138.861174][ T8358] device wg1 left promiscuous mode [ 138.864045][ T24] usb 6-1: config 0 interface 0 has no altsetting 0 [ 138.872578][ T24] usb 6-1: New USB device found, idVendor=060b, idProduct=430a, bcdDevice= 0.00 [ 138.882461][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.890990][ T8358] device wg2 left promiscuous mode [ 138.896980][ T24] usb 6-1: config 0 descriptor?? [ 138.907608][ T8358] device veth0_to_bridge left promiscuous mode [ 138.919830][ T8358] device bridge_slave_0 left promiscuous mode [ 138.927521][ T8358] device veth1_to_bridge left promiscuous mode [ 138.935886][ T8358] device bridge_slave_1 left promiscuous mode [ 138.943094][ T8358] device veth0_to_bond left promiscuous mode [ 138.949950][ T8358] device bond_slave_0 left promiscuous mode [ 138.956363][ T8358] device veth1_to_bond left promiscuous mode [ 138.963258][ T8358] device bond_slave_1 left promiscuous mode [ 138.970028][ T8358] device veth0_to_team left promiscuous mode [ 138.982796][ T8358] device team_slave_0 left promiscuous mode [ 138.997724][ T8358] device veth1_to_team left promiscuous mode [ 139.004514][ T8358] device team_slave_1 left promiscuous mode [ 139.011562][ T8358] device veth0_to_batadv left promiscuous mode [ 139.018546][ T8358] device batadv_slave_0 left promiscuous mode [ 139.028606][ T8358] device veth1_to_batadv left promiscuous mode [ 139.035431][ T8358] device batadv_slave_1 left promiscuous mode [ 139.042247][ T8358] device xfrm0 left promiscuous mode [ 139.048562][ T8358] device veth0_to_hsr left promiscuous mode [ 139.055019][ T8358] device hsr_slave_0 left promiscuous mode [ 139.061525][ T8358] device veth1_to_hsr left promiscuous mode [ 139.068263][ T8358] device hsr_slave_1 left promiscuous mode [ 139.078324][ T8358] device veth1_virt_wifi left promiscuous mode [ 139.097728][ T8358] device veth0_virt_wifi left promiscuous mode [ 139.104755][ T8358] device veth1_vlan left promiscuous mode [ 139.114846][ T8358] device vlan0 left promiscuous mode [ 139.120277][ T8358] device vlan1 left promiscuous mode [ 139.126334][ T8358] device veth0_macvtap left promiscuous mode [ 139.133298][ T8358] device macsec0 left promiscuous mode [ 139.142568][ T8358] device bridge1 left promiscuous mode [ 139.162166][ T8365] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 139.175783][ T8365] IPv6: ADDRCONF(NETDEV_CHANGE): syz_tun: link becomes ready [ 139.195325][ T8365] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 139.219096][ T8365] device veth0_vlan left promiscuous mode [ 139.225319][ T8365] device veth0_vlan entered promiscuous mode [ 139.233498][ T8365] device veth1_macvtap left promiscuous mode [ 139.240845][ T8365] device veth1_macvtap entered promiscuous mode [ 139.252729][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 139.284666][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 139.293250][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 139.301839][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 139.310315][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 139.318732][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 139.324981][ T24] hid (null): unknown global tag 0xc [ 139.326829][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 139.332201][ T24] hid (null): unknown global tag 0xe [ 139.340029][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 139.344404][ T24] hid (null): invalid report_count 23915 [ 139.352947][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 139.357911][ T24] hid (null): unknown global tag 0xd [ 139.366353][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 139.370960][ T24] hid (null): unknown global tag 0xc [ 139.379292][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 139.386766][ T24] hid-generic 0003:060B:430A.0019: unexpected long global item [ 139.391877][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 139.407803][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 139.413431][ T24] hid-generic: probe of 0003:060B:430A.0019 failed with error -22 [ 139.421615][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 139.585739][ T24] usb 6-1: USB disconnect, device number 8 [ 139.601094][ T8403] 9pnet_fd: Insufficient options for proto=fd [ 139.650339][ T8405] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 139.707666][ T8412] loop6: detected capacity change from 0 to 512 [ 139.722294][ T8412] EXT4-fs (loop6): orphan cleanup on readonly fs [ 139.729093][ T8412] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.3546: bg 0: block 248: padding at end of block bitmap is not set [ 139.743831][ T8412] __quota_error: 59 callbacks suppressed [ 139.743846][ T8412] Quota error (device loop6): write_blk: dquota write failed [ 139.756808][ T8412] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 139.766948][ T8412] EXT4-fs error (device loop6): ext4_acquire_dquot:6782: comm syz.6.3546: Failed to acquire dquot type 1 [ 139.778955][ T8412] EXT4-fs (loop6): 1 truncate cleaned up [ 139.786100][ T8412] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 139.788933][ T8417] netlink: 'syz.4.3549': attribute type 27 has an invalid length. [ 139.814212][ T8412] EXT4-fs (loop6): warning: mounting fs with errors, running e2fsck is recommended [ 139.824087][ T28] audit: type=1400 audit(1742927524.236:3430): avc: denied { execute } for pid=8411 comm="syz.6.3546" name="file2" dev="loop6" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 139.870848][ T8412] Quota error (device loop6): write_blk: dquota write failed [ 139.881555][ T8412] Quota error (device loop6): qtree_write_dquot: Error -28 occurred while creating quota [ 139.901691][ T8412] EXT4-fs error (device loop6): ext4_acquire_dquot:6782: comm syz.6.3546: Failed to acquire dquot type 1 [ 139.933652][ T8412] EXT4-fs warning (device loop6): ext4_enable_quotas:7017: Failed to enable quota tracking (type=1, err=-28, ino=4). Please run e2fsck to fix. [ 139.964676][ T7331] EXT4-fs (loop6): unmounting filesystem. [ 140.024214][ T8418] IPv6: ADDRCONF(NETDEV_CHANGE): syz_tun: link becomes ready [ 140.036306][ T8418] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 140.100519][ T8418] device veth0_vlan left promiscuous mode [ 140.106726][ T8418] device veth0_vlan entered promiscuous mode [ 140.113937][ T8418] device veth1_macvtap left promiscuous mode [ 140.135940][ T8433] input: syz0 as /devices/virtual/input/input22 [ 140.152967][ T8418] device veth1_macvtap entered promiscuous mode [ 140.169547][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 140.181194][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 140.192381][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 140.202568][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 140.212826][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 140.213188][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 140.213594][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 140.213933][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 140.214285][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 140.214960][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 140.215497][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 140.215787][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 140.216038][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 140.216303][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 140.216618][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 140.216923][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 140.217188][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 140.218347][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 140.220750][ T8423] device bridge0 entered promiscuous mode [ 140.498031][ T8423] bridge0: port 1(macsec1) entered blocking state [ 140.505812][ T8423] bridge0: port 1(macsec1) entered disabled state [ 140.524739][ T8423] device bridge0 left promiscuous mode [ 140.590740][ T8445] loop4: detected capacity change from 0 to 16 [ 140.609526][ T8445] erofs: Unknown parameter 'kfree' [ 140.658206][ T616] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 140.777262][ T8452] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3560'. [ 141.218012][ T8468] input: syz0 as /devices/virtual/input/input23 [ 141.522790][ T8483] loop6: detected capacity change from 0 to 16 [ 141.537944][ T8483] erofs: Unknown parameter 'kfree' [ 141.628439][ T8486] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3573'. [ 141.650670][ T8486] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.680156][ T8486] device bridge_slave_1 left promiscuous mode [ 141.692597][ T8486] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.899096][ T8495] loop6: detected capacity change from 0 to 128 [ 141.914781][ T8495] FAT-fs (loop6): Directory bread(block 32) failed [ 141.926323][ T8495] FAT-fs (loop6): Directory bread(block 33) failed [ 141.932992][ T8495] FAT-fs (loop6): Directory bread(block 34) failed [ 141.940867][ T8495] FAT-fs (loop6): Directory bread(block 35) failed [ 141.947303][ T8495] FAT-fs (loop6): Directory bread(block 36) failed [ 141.953905][ T8495] FAT-fs (loop6): Directory bread(block 37) failed [ 141.961233][ T8495] FAT-fs (loop6): Directory bread(block 38) failed [ 141.967780][ T8495] FAT-fs (loop6): Directory bread(block 39) failed [ 141.974212][ T8495] FAT-fs (loop6): Directory bread(block 40) failed [ 141.986821][ T8495] FAT-fs (loop6): Directory bread(block 41) failed [ 142.037062][ T28] audit: type=1400 audit(1742927526.456:3431): avc: denied { mount } for pid=8492 comm="syz.6.3576" name="/" dev="loop6" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 142.286296][ T8498] netlink: 'syz.5.3578': attribute type 27 has an invalid length. [ 142.297161][ T8501] loop4: detected capacity change from 0 to 512 [ 142.324275][ T8498] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.331354][ T8498] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.340189][ T8501] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 142.349324][ T8501] ext4 filesystem being mounted at /482/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 142.370471][ T28] audit: type=1400 audit(1742927526.796:3432): avc: denied { mounton } for pid=8500 comm="syz.4.3589" path="/482/file0/bus" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 142.371576][ T8501] EXT4-fs error (device loop4): ext4_xattr_block_get:546: inode #18: comm syz.4.3589: corrupted xattr block 20 [ 142.393770][ T28] audit: type=1400 audit(1742927526.796:3433): avc: denied { map } for pid=8500 comm="syz.4.3589" path="/482/file0/bus" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 142.426955][ T2696] EXT4-fs error (device loop4): ext4_lookup:1858: inode #11: comm syz-executor: iget: checksum invalid [ 142.440219][ T2696] EXT4-fs error (device loop4): ext4_lookup:1858: inode #11: comm syz-executor: iget: checksum invalid [ 142.480398][ T8505] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 142.493155][ T8505] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.500067][ T8505] bridge0: port 1(bridge_slave_0) entered forwarding state [ 142.509228][ T8505] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.516092][ T8505] bridge0: port 2(bridge_slave_1) entered forwarding state [ 142.529373][ T8505] device veth0_vlan left promiscuous mode [ 142.535346][ T8505] device veth0_vlan entered promiscuous mode [ 142.542610][ T8505] device veth1_macvtap left promiscuous mode [ 142.549596][ T8505] device veth1_macvtap entered promiscuous mode [ 142.562288][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 142.569852][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 142.577274][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 142.585903][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 142.595196][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 142.603786][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 142.612163][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 142.620423][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 142.628388][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 142.636515][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 142.644716][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 142.653075][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 142.661066][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 142.669337][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 142.677312][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 142.685700][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 142.693656][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 142.701679][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 142.709606][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 142.725146][ T28] audit: type=1400 audit(1742927527.146:3434): avc: denied { unmount } for pid=7331 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 142.877215][ T28] audit: type=1400 audit(1742927527.296:3435): avc: denied { read } for pid=8516 comm="syz.6.3583" dev="nsfs" ino=4026532384 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 142.952217][ T2696] EXT4-fs (loop4): unmounting filesystem. [ 143.196235][ T8531] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.203174][ T8531] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.210615][ T8531] device bridge_slave_0 entered promiscuous mode [ 143.217244][ T8531] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.224160][ T8531] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.231560][ T8531] device bridge_slave_1 entered promiscuous mode [ 143.287207][ T861] device veth1_macvtap left promiscuous mode [ 143.300925][ T861] device veth0_vlan left promiscuous mode [ 143.338994][ T8547] Invalid ELF header magic: != ELF [ 143.424128][ T8550] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3596'. [ 143.455611][ T8531] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.462486][ T8531] bridge0: port 2(bridge_slave_1) entered forwarding state [ 143.469595][ T8531] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.476377][ T8531] bridge0: port 1(bridge_slave_0) entered forwarding state [ 143.523064][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 143.533619][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.545174][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.570324][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 143.587964][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.594856][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 143.618311][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 143.636529][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.643427][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 143.660676][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 143.677635][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 143.700292][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 143.724134][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 143.742349][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 143.750018][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 143.768353][ T8531] device veth0_vlan entered promiscuous mode [ 143.786225][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 143.791069][ T8563] loop6: detected capacity change from 0 to 40427 [ 143.804576][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 143.819485][ T8563] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 143.827120][ T8563] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 143.830225][ T8531] device veth1_macvtap entered promiscuous mode [ 143.842347][ T8563] F2FS-fs (loop6): invalid crc_offset: 33558524 [ 143.854839][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 143.862516][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 143.871518][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 143.882587][ T8563] F2FS-fs (loop6): Found nat_bits in checkpoint [ 143.912248][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 143.943327][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 144.005899][ T8563] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 144.013060][ T8563] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 144.061455][ T8560] F2FS-fs (loop6): invalid namelen(0), ino:0, run fsck to fix. [ 144.538999][ T8621] netem: change failed [ 144.551198][ T8623] netlink: 'syz.6.3628': attribute type 27 has an invalid length. [ 144.591174][ T8623] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.669534][ T8631] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 144.690124][ T8631] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.697012][ T8631] bridge0: port 1(bridge_slave_0) entered forwarding state [ 144.746915][ T8631] device veth0_vlan left promiscuous mode [ 144.756932][ T8631] device veth0_vlan entered promiscuous mode [ 144.766245][ T8631] device veth1_macvtap left promiscuous mode [ 144.773069][ T8631] device veth1_macvtap entered promiscuous mode [ 144.782267][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 144.790119][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 144.815555][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 144.827931][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 144.836296][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 144.845006][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 144.853378][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 144.868035][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 144.885386][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 144.894090][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 144.905507][ T8647] loop4: detected capacity change from 0 to 512 [ 144.908244][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 144.925595][ T8647] EXT4-fs: Ignoring removed mblk_io_submit option [ 144.935719][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 144.944041][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 144.955945][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 144.956028][ T8647] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 144.963735][ T8424] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 144.979548][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 144.987910][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 145.001172][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 145.020965][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 145.055944][ T8655] loop6: detected capacity change from 0 to 512 [ 145.065927][ T8656] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3641'. [ 145.114072][ T8655] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 145.139062][ T8655] ext4 filesystem being mounted at /116/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 145.177504][ T8424] usb 6-1: Using ep0 maxpacket: 16 [ 145.186567][ T8424] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 145.213204][ T8655] EXT4-fs error (device loop6): ext4_xattr_block_get:546: inode #18: comm syz.6.3640: corrupted xattr block 20 [ 145.225976][ T8424] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 145.250855][ T8424] usb 6-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 145.264929][ T7331] EXT4-fs error (device loop6): ext4_lookup:1858: inode #11: comm syz-executor: iget: checksum invalid [ 145.276094][ T8424] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.285960][ T7331] EXT4-fs error (device loop6): ext4_lookup:1858: inode #11: comm syz-executor: iget: checksum invalid [ 145.289985][ T8424] usb 6-1: config 0 descriptor?? [ 145.330951][ T8034] EXT4-fs (loop6): unmounting filesystem. [ 145.370772][ T8680] netlink: 'syz.0.3653': attribute type 27 has an invalid length. [ 145.468017][ T8680] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 145.484372][ T8680] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 145.511655][ T8680] device veth0_vlan left promiscuous mode [ 145.518068][ T8680] device veth0_vlan entered promiscuous mode [ 145.525940][ T8680] device veth1_macvtap left promiscuous mode [ 145.533396][ T8680] device veth1_macvtap entered promiscuous mode [ 145.547661][ T8375] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 145.556584][ T861] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 145.565292][ T861] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 145.573822][ T861] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 145.582724][ T861] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 145.591305][ T861] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 145.599910][ T861] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 145.608608][ T861] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 145.618105][ T861] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 145.626464][ T861] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 145.635053][ T861] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 145.643485][ T861] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 145.652040][ T861] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 145.660263][ T861] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 145.709215][ T8424] input: HID 05ac:8241 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:05AC:8241.001A/input/input24 [ 145.740202][ T8688] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.747099][ T8688] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.754394][ T8688] device bridge_slave_0 entered promiscuous mode [ 145.761588][ T8688] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.768730][ T8688] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.775656][ T8375] usb 5-1: unable to get BOS descriptor or descriptor too short [ 145.778531][ T8688] device bridge_slave_1 entered promiscuous mode [ 145.784688][ T8375] usb 5-1: config 10 has an invalid interface number: 198 but max is 0 [ 145.791140][ T8424] appleir 0003:05AC:8241.001A: input,hiddev96,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.5-1/input0 [ 145.797864][ T8375] usb 5-1: config 10 contains an unexpected descriptor of type 0x1, skipping [ 145.819600][ T8375] usb 5-1: config 10 has an invalid descriptor of length 0, skipping remainder of the config [ 145.829639][ T8375] usb 5-1: config 10 has no interface number 0 [ 145.835633][ T8375] usb 5-1: config 10 interface 198 altsetting 4 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 145.846502][ T8375] usb 5-1: config 10 interface 198 has no altsetting 0 [ 145.860374][ T8375] usb 5-1: New USB device found, idVendor=2998, idProduct=fec7, bcdDevice=e1.c6 [ 145.870094][ T8375] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.878280][ T8375] usb 5-1: Product: syz [ 145.882264][ T8375] usb 5-1: Manufacturer: syz [ 145.887032][ T8375] usb 5-1: SerialNumber: syz [ 145.951139][ T861] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 145.959106][ T861] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 145.968112][ T861] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 145.976303][ T861] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 145.984464][ T861] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.991327][ T861] bridge0: port 1(bridge_slave_0) entered forwarding state [ 146.000219][ T861] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 146.019880][ T861] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 146.028336][ T861] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 146.036347][ T861] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.043211][ T861] bridge0: port 2(bridge_slave_1) entered forwarding state [ 146.050514][ T861] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 146.058484][ T861] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 146.073859][ T861] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 146.085984][ T861] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 146.094760][ T861] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 146.099804][ T8375] usb 5-1: USB disconnect, device number 13 [ 146.105149][ T861] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 146.115734][ T8688] device veth0_vlan entered promiscuous mode [ 146.127070][ T861] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 146.136191][ T8688] device veth1_macvtap entered promiscuous mode [ 146.146808][ T861] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 146.156982][ T861] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 146.251768][ T28] kauditd_printk_skb: 22 callbacks suppressed [ 146.251781][ T28] audit: type=1400 audit(1742927530.676:3458): avc: denied { read } for pid=8711 comm="syz.7.3666" name="rtc0" dev="devtmpfs" ino=259 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 146.282069][ T28] audit: type=1400 audit(1742927530.676:3459): avc: denied { open } for pid=8711 comm="syz.7.3666" path="/dev/rtc0" dev="devtmpfs" ino=259 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 146.477527][ T8371] usb 6-1: USB disconnect, device number 9 [ 146.608906][ T8531] EXT4-fs (loop4): unmounting filesystem. [ 146.633555][ T28] audit: type=1400 audit(1742927531.056:3460): avc: denied { create } for pid=8717 comm="syz.4.3668" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 146.680063][ T320] device bridge_slave_0 left promiscuous mode [ 146.692249][ T28] audit: type=1400 audit(1742927531.116:3461): avc: denied { connect } for pid=8715 comm="syz.0.3667" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 146.699459][ T320] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.731455][ T320] device veth1_macvtap left promiscuous mode [ 146.737721][ T320] device veth0_vlan left promiscuous mode [ 146.744143][ T8725] futex_wake_op: syz.2.3672 tries to shift op by -1; fix this program [ 146.791647][ T8730] xt_bpf: check failed: parse error [ 146.862341][ T8728] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3670'. [ 146.879889][ T8728] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.897115][ T8728] device bridge_slave_1 left promiscuous mode [ 146.911841][ T8728] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.187259][ T8783] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3696'. [ 147.235663][ T8783] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.255228][ T8783] device bridge_slave_1 left promiscuous mode [ 147.277967][ T8783] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.323700][ T8785] SELinux: failed to load policy [ 147.439891][ T28] audit: type=1400 audit(1742927531.866:3462): avc: denied { read } for pid=8805 comm="syz.7.3708" dev="sockfs" ino=46077 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 147.578521][ T8814] loop4: detected capacity change from 0 to 8192 [ 147.609765][ T8814] syz.4.3711: attempt to access beyond end of device [ 147.609765][ T8814] loop4: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 147.778130][ T8375] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 147.864271][ T28] audit: type=1400 audit(1742927532.286:3463): avc: denied { read } for pid=8825 comm="syz.4.3717" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 147.912775][ T28] audit: type=1400 audit(1742927532.286:3464): avc: denied { open } for pid=8825 comm="syz.4.3717" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 147.961345][ T28] audit: type=1400 audit(1742927532.316:3465): avc: denied { ioctl } for pid=8825 comm="syz.4.3717" path="/dev/binderfs/binder0" dev="binder" ino=4 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 148.008757][ T28] audit: type=1400 audit(1742927532.316:3466): avc: denied { set_context_mgr } for pid=8825 comm="syz.4.3717" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 148.028673][ T8375] usb 8-1: Using ep0 maxpacket: 16 [ 148.034882][ T28] audit: type=1400 audit(1742927532.316:3467): avc: denied { write } for pid=8825 comm="syz.4.3717" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 148.069132][ T8375] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 148.097648][ T8375] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 148.117486][ T8375] usb 8-1: config 0 interface 0 has no altsetting 0 [ 148.123970][ T8375] usb 8-1: New USB device found, idVendor=060b, idProduct=430a, bcdDevice= 0.00 [ 148.140316][ T8375] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.158758][ T8375] usb 8-1: config 0 descriptor?? [ 148.577725][ T8375] hid (null): unknown global tag 0xc [ 148.596666][ T8375] hid (null): unknown global tag 0xe [ 148.617800][ T8375] hid (null): invalid report_count 23915 [ 148.623415][ T8375] hid (null): unknown global tag 0xd [ 148.629405][ T8375] hid (null): unknown global tag 0xc [ 148.637762][ T8375] hid-generic 0003:060B:430A.001B: unexpected long global item [ 148.645464][ T8375] hid-generic: probe of 0003:060B:430A.001B failed with error -22 [ 148.775288][ T301] usb 8-1: USB disconnect, device number 2 [ 149.319754][ T8896] netlink: 'syz.7.3745': attribute type 27 has an invalid length. [ 149.352986][ T8896] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.456705][ T8899] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 149.495074][ T8899] device veth0_vlan left promiscuous mode [ 149.509866][ T8899] device veth0_vlan entered promiscuous mode [ 149.522942][ T8899] device veth1_macvtap left promiscuous mode [ 149.536672][ T8899] device veth1_macvtap entered promiscuous mode [ 149.550334][ T861] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 149.574025][ T861] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 149.582624][ T861] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 149.598640][ T861] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.605560][ T861] bridge0: port 1(bridge_slave_0) entered forwarding state [ 149.619240][ T861] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 149.638129][ T861] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 149.648505][ T861] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 149.664383][ T861] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 149.677114][ T861] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 149.685392][ T861] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 149.693623][ T861] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 149.701877][ T861] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 149.710078][ T861] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 149.721014][ T861] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 149.729188][ T861] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 149.742348][ T861] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 149.750624][ T861] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 149.763842][ T861] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 149.776533][ T861] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 149.784668][ T861] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 149.792979][ T861] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 149.801054][ T861] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 149.810595][ T8932] Invalid ELF header magic: != ELF [ 149.814920][ T861] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 149.823974][ T861] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 149.832026][ T861] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 149.844916][ T861] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 149.856900][ T861] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 149.864377][ T861] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 149.872720][ T861] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 149.887739][ T861] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 149.899359][ T861] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 150.080963][ T8970] netlink: 'syz.4.3781': attribute type 27 has an invalid length. [ 150.122068][ T8970] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.200821][ T8973] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 150.239886][ T8973] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.246801][ T8973] bridge0: port 1(bridge_slave_0) entered forwarding state [ 150.294048][ T8973] device veth0_vlan left promiscuous mode [ 150.308361][ T8973] device veth0_vlan entered promiscuous mode [ 150.323254][ T8972] loop7: detected capacity change from 0 to 40427 [ 150.324331][ T8973] device veth1_macvtap left promiscuous mode [ 150.347944][ T8972] F2FS-fs (loop7): fault_injection options not supported [ 150.356796][ T8973] device veth1_macvtap entered promiscuous mode [ 150.363554][ T8972] F2FS-fs (loop7): invalid crc value [ 150.374053][ T861] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 150.381998][ T861] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 150.398392][ T8972] F2FS-fs (loop7): Found nat_bits in checkpoint [ 150.408160][ T861] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 150.426711][ T861] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 150.445460][ T861] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 150.464118][ T861] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 150.477964][ T861] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 150.496164][ T861] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 150.509265][ T861] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 150.516811][ T8972] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 150.535368][ T861] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 150.553849][ T861] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 150.567328][ T861] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 150.586123][ T861] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 150.594566][ T861] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 150.602637][ T8688] syz-executor: attempt to access beyond end of device [ 150.602637][ T8688] loop7: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 150.603460][ T861] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 150.630092][ T861] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 150.638523][ T861] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 150.646408][ T861] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 150.820861][ T9012] xt_hashlimit: size too large, truncated to 1048576 [ 150.872205][ T9014] xt_hashlimit: size too large, truncated to 1048576 [ 151.047465][ T8420] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 151.237688][ T8420] usb 8-1: Using ep0 maxpacket: 16 [ 151.243840][ T8420] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 151.270799][ T8420] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 151.296704][ T8420] usb 8-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 151.313414][ T9023] loop5: detected capacity change from 0 to 40427 [ 151.321950][ T8420] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.336510][ T9023] F2FS-fs (loop5): fault_injection options not supported [ 151.345994][ T8420] usb 8-1: config 0 descriptor?? [ 151.353489][ T9023] F2FS-fs (loop5): invalid crc value [ 151.368601][ T9023] F2FS-fs (loop5): Found nat_bits in checkpoint [ 151.464986][ T9023] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 151.575891][ T6135] syz-executor: attempt to access beyond end of device [ 151.575891][ T6135] loop5: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 151.762896][ T8420] input: HID 05ac:8241 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:05AC:8241.001C/input/input25 [ 151.859737][ T8420] appleir 0003:05AC:8241.001C: input,hiddev96,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.7-1/input0 [ 151.891540][ T28] kauditd_printk_skb: 15 callbacks suppressed [ 151.891554][ T28] audit: type=1400 audit(1742927536.316:3483): avc: denied { bind } for pid=9043 comm="syz.5.3810" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 151.977572][ T28] audit: type=1400 audit(1742927536.346:3484): avc: denied { listen } for pid=9043 comm="syz.5.3810" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 152.038840][ T28] audit: type=1400 audit(1742927536.346:3485): avc: denied { write } for pid=9043 comm="syz.5.3810" path="socket:[47500]" dev="sockfs" ino=47500 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 152.057678][ T9060] netlink: 'syz.5.3816': attribute type 27 has an invalid length. [ 152.100320][ T9060] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.107349][ T9060] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.159146][ T28] audit: type=1400 audit(1742927536.586:3486): avc: denied { relabelfrom } for pid=9062 comm="syz.4.3818" name="" dev="pipefs" ino=47527 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 152.234043][ T9061] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 152.277209][ T9061] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.282201][ T9065] loop4: detected capacity change from 0 to 8192 [ 152.284138][ T9061] bridge0: port 1(bridge_slave_0) entered forwarding state [ 152.315463][ T9061] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.322582][ T9061] bridge0: port 2(bridge_slave_1) entered forwarding state [ 152.330371][ T9065] VFS: Lookup of 'file0' in vfat loop4 would have caused loop [ 152.365772][ T9061] device veth0_vlan left promiscuous mode [ 152.379675][ T9061] device veth0_vlan entered promiscuous mode [ 152.398575][ T9061] device veth1_macvtap left promiscuous mode [ 152.408735][ T9061] device veth1_macvtap entered promiscuous mode [ 152.433470][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 152.433738][ T9071] loop4: detected capacity change from 0 to 512 [ 152.453218][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 152.453718][ T9071] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 1, start 00000001) [ 152.473090][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 152.483096][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 152.498928][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 152.518493][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 152.531831][ T301] usb 8-1: USB disconnect, device number 3 [ 152.550440][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 152.571804][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 152.582565][ T9074] loop4: detected capacity change from 0 to 512 [ 152.591861][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 152.608819][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 152.618206][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 152.627389][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 152.635845][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 152.645285][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 152.655310][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 152.664449][ T9074] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 152.707714][ T9074] ext4 filesystem being mounted at /42/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 152.722263][ T28] audit: type=1400 audit(1742927537.146:3487): avc: denied { append } for pid=9073 comm="syz.4.3822" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 152.758552][ T28] audit: type=1400 audit(1742927537.176:3488): avc: denied { setattr } for pid=9073 comm="syz.4.3822" path="/42/file1/file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 152.785248][ T28] audit: type=1400 audit(1742927537.216:3489): avc: denied { ioctl } for pid=9073 comm="syz.4.3822" path="/42/file1/file1" dev="loop4" ino=15 ioctlcmd=0x6609 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 152.822910][ T9074] EXT4-fs error (device loop4): ext4_do_update_inode:5226: inode #18: comm syz.4.3822: corrupted inode contents [ 152.840716][ T9083] device vlan2 entered promiscuous mode [ 152.857981][ T9074] EXT4-fs error (device loop4): ext4_dirty_inode:6091: inode #18: comm syz.4.3822: mark_inode_dirty error [ 152.872646][ T9083] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3824'. [ 152.884020][ T9074] EXT4-fs error (device loop4): ext4_do_update_inode:5226: inode #18: comm syz.4.3822: corrupted inode contents [ 152.920491][ T9074] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2954: inode #18: comm syz.4.3822: mark_inode_dirty error [ 152.933494][ T9074] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2957: inode #18: comm syz.4.3822: mark inode dirty (error -117) [ 152.953833][ T9074] EXT4-fs warning (device loop4): ext4_evict_inode:299: xattr delete (err -117) [ 152.975048][ T28] audit: type=1400 audit(1742927537.396:3490): avc: denied { create } for pid=9088 comm="syz.2.3828" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 153.028390][ T28] audit: type=1400 audit(1742927537.416:3491): avc: denied { connect } for pid=9088 comm="syz.2.3828" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 153.054212][ T8531] EXT4-fs (loop4): unmounting filesystem. [ 153.144540][ T28] audit: type=1400 audit(1742927537.566:3492): avc: denied { map } for pid=9098 comm="syz.7.3833" path="/dev/ashmem" dev="devtmpfs" ino=265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 153.279970][ T9120] loop4: detected capacity change from 0 to 256 [ 153.298091][ T9124] loop5: detected capacity change from 0 to 1024 [ 153.304775][ T9124] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 153.314875][ T9124] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 153.325029][ T9124] EXT4-fs error (device loop5): ext4_get_journal_inode:5710: inode #5: comm syz.5.3845: unexpected bad inode w/o EXT4_IGET_BAD [ 153.338137][ T9124] EXT4-fs (loop5): no journal found [ 153.338501][ T9120] FAT-fs (loop4): Directory bread(block 64) failed [ 153.343169][ T9124] EXT4-fs (loop5): can't get journal size [ 153.356605][ T9120] FAT-fs (loop4): Directory bread(block 65) failed [ 153.363847][ T9124] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 153.383048][ T6135] EXT4-fs (loop5): unmounting filesystem. [ 153.404625][ T9120] FAT-fs (loop4): Directory bread(block 66) failed [ 153.444336][ T9120] FAT-fs (loop4): Directory bread(block 67) failed [ 153.457610][ T9120] FAT-fs (loop4): Directory bread(block 68) failed [ 153.464087][ T9120] FAT-fs (loop4): Directory bread(block 69) failed [ 153.490040][ T9120] FAT-fs (loop4): Directory bread(block 70) failed [ 153.496393][ T9120] FAT-fs (loop4): Directory bread(block 71) failed [ 153.507576][ T9120] FAT-fs (loop4): Directory bread(block 72) failed [ 153.512752][ T9135] loop7: detected capacity change from 0 to 128 [ 153.517476][ T9120] FAT-fs (loop4): Directory bread(block 73) failed [ 153.554136][ T9120] syz.4.3844: attempt to access beyond end of device [ 153.554136][ T9120] loop4: rw=524288, sector=1160, nr_sectors = 4 limit=256 [ 153.580640][ T9120] syz.4.3844: attempt to access beyond end of device [ 153.580640][ T9120] loop4: rw=0, sector=1160, nr_sectors = 4 limit=256 [ 153.688264][ T9143] SELinux: failed to load policy [ 153.747310][ T9154] loop5: detected capacity change from 0 to 1024 [ 153.795676][ T9154] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 153.844652][ T9154] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 153.918300][ T9154] EXT4-fs (loop5): Delayed block allocation failed for inode 16 at logical offset 51 with max blocks 1 with error 28 [ 153.983462][ T9154] EXT4-fs (loop5): This should not happen!! Data will be lost [ 153.983462][ T9154] [ 153.991828][ T9158] loop7: detected capacity change from 0 to 40427 [ 153.999485][ T9161] EXT4-fs (loop5): re-mounted. Quota mode: none. [ 154.006276][ T9154] EXT4-fs (loop5): Total free blocks count 0 [ 154.012716][ T9154] EXT4-fs (loop5): Free/Dirty block details [ 154.018805][ T9154] EXT4-fs (loop5): free_blocks=68451041280 [ 154.024464][ T9158] F2FS-fs (loop7): invalid crc value [ 154.029825][ T9154] EXT4-fs (loop5): dirty_blocks=16 [ 154.034751][ T9154] EXT4-fs (loop5): Block reservation details [ 154.040990][ T9154] EXT4-fs (loop5): i_reserved_data_blocks=1 [ 154.054577][ T9158] F2FS-fs (loop7): Found nat_bits in checkpoint [ 154.145371][ T9158] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 154.239722][ T9187] netem: change failed [ 154.244575][ T9158] syz.7.3859: attempt to access beyond end of device [ 154.244575][ T9158] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 154.292640][ T8688] syz-executor: attempt to access beyond end of device [ 154.292640][ T8688] loop7: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 154.464428][ T9209] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3877'. [ 154.605480][ T9222] loop7: detected capacity change from 0 to 2048 [ 154.620102][ T9222] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 154.642983][ T9222] netlink: 140 bytes leftover after parsing attributes in process `syz.7.3883'. [ 154.652493][ T9222] netlink: 140 bytes leftover after parsing attributes in process `syz.7.3883'. [ 154.662341][ T9222] netlink: 140 bytes leftover after parsing attributes in process `syz.7.3883'. [ 154.680454][ T8688] EXT4-fs (loop7): unmounting filesystem. [ 154.763973][ T9237] netlink: 360 bytes leftover after parsing attributes in process `syz.7.3889'. [ 154.772986][ T9237] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3889'. [ 154.958861][ T9255] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3898'. [ 156.030747][ T9264] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9264 comm=syz.7.3902 [ 157.005579][ T9268] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3904'. [ 157.074313][ T9275] device pim6reg1 entered promiscuous mode [ 157.147548][ T8424] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 157.169611][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 157.169625][ T28] audit: type=1400 audit(1742927541.596:3495): avc: denied { mount } for pid=9288 comm="syz.5.3913" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 157.215970][ T9298] overlayfs: failed to clone upperpath [ 157.325956][ T28] audit: type=1400 audit(1742927541.746:3496): avc: denied { map } for pid=9316 comm="syz.2.3926" path="socket:[47805]" dev="sockfs" ino=47805 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 157.349897][ T28] audit: type=1400 audit(1742927541.776:3497): avc: denied { read accept } for pid=9316 comm="syz.2.3926" path="socket:[47805]" dev="sockfs" ino=47805 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 157.350369][ T8424] usb 8-1: config 220 has an invalid interface number: 76 but max is 2 [ 157.388135][ T8424] usb 8-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 157.399431][ T8424] usb 8-1: config 220 has no interface number 2 [ 157.405978][ T8424] usb 8-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 157.422132][ T8424] usb 8-1: config 220 interface 0 has no altsetting 0 [ 157.433178][ T8424] usb 8-1: config 220 interface 76 has no altsetting 0 [ 157.439948][ T8424] usb 8-1: config 220 interface 1 has no altsetting 0 [ 157.449895][ T28] audit: type=1400 audit(1742927541.876:3498): avc: denied { mount } for pid=9320 comm="syz.2.3929" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 157.455871][ T8424] usb 8-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 157.488091][ T8424] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.495963][ T8424] usb 8-1: Product: syz [ 157.500340][ T8424] usb 8-1: Manufacturer: syz [ 157.504926][ T8424] usb 8-1: SerialNumber: syz [ 157.565595][ T9340] loop5: detected capacity change from 0 to 1024 [ 157.578909][ T9338] tmpfs: Unknown parameter 'fowner>00000000000000060929' [ 157.579443][ T9340] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 157.602894][ T28] audit: type=1400 audit(1742927542.026:3499): avc: denied { rename } for pid=9339 comm="syz.5.3937" name="file0" dev="loop5" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 157.626324][ T28] audit: type=1400 audit(1742927542.026:3500): avc: denied { unlink } for pid=9339 comm="syz.5.3937" name="file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 157.649399][ T6135] EXT4-fs (loop5): unmounting filesystem. [ 157.734366][ T8424] usb 8-1: selecting invalid altsetting 0 [ 157.742917][ T8424] usb 8-1: Found UVC 7.01 device syz (8086:0b07) [ 157.760451][ T8424] usb 8-1: No valid video chain found. [ 157.772132][ T28] audit: type=1400 audit(1742927542.196:3501): avc: denied { write } for pid=9366 comm="syz.5.3949" path="socket:[47889]" dev="sockfs" ino=47889 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 157.782247][ T8424] usb 8-1: USB disconnect, device number 4 [ 157.808446][ T28] audit: type=1400 audit(1742927542.196:3502): avc: denied { bind } for pid=9365 comm="syz.0.3948" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 157.977910][ T9380] SELinux: Context system_u:object_r:man_t:s0 is not valid (left unmapped). [ 157.986731][ T28] audit: type=1400 audit(1742927542.406:3503): avc: denied { relabelto } for pid=9379 comm="syz.5.3955" name="215" dev="tmpfs" ino=1127 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:man_t:s0" [ 158.012434][ T28] audit: type=1400 audit(1742927542.406:3504): avc: denied { associate } for pid=9379 comm="syz.5.3955" name="215" dev="tmpfs" ino=1127 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:man_t:s0" [ 158.338619][ T9404] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 158.437722][ T9411] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3968'. [ 158.453007][ T9411] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3968'. [ 158.473732][ T9411] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3968'. [ 158.609208][ T9424] skbuff: bad partial csum: csum=65506/2 headroom=144 headlen=65526 [ 158.732783][ T9435] SELinux: failed to load policy [ 159.187473][ T297] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 159.377258][ T9464] loop7: detected capacity change from 0 to 1024 [ 159.389017][ T297] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 159.411003][ T9464] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 159.419931][ T297] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 159.433143][ T297] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 159.446009][ T297] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 159.454920][ T297] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.463870][ T297] usb 5-1: config 0 descriptor?? [ 159.487812][ T8688] EXT4-fs (loop7): unmounting filesystem. [ 159.553412][ T9477] loop7: detected capacity change from 0 to 512 [ 159.603144][ T9477] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 159.617649][ T9477] ext4 filesystem being mounted at /54/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 159.698901][ T8688] EXT4-fs (loop7): unmounting filesystem. [ 159.875883][ T297] plantronics 0003:047F:FFFF.001D: unknown main item tag 0x0 [ 159.894141][ T297] plantronics 0003:047F:FFFF.001D: No inputs registered, leaving [ 159.903875][ T297] plantronics 0003:047F:FFFF.001D: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 160.123385][ T9502] input: syz0 as /devices/virtual/input/input26 [ 160.320949][ T9516] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4012'. [ 160.350060][ T9516] netem: unknown loss type 13 [ 160.354588][ T9516] netem: change failed [ 160.479947][ T9530] loop5: detected capacity change from 0 to 1024 [ 160.503513][ T9530] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 160.533209][ T6135] EXT4-fs (loop5): unmounting filesystem. [ 160.730025][ T9559] loop5: detected capacity change from 0 to 128 [ 160.742232][ T9559] EXT4-fs (loop5): Test dummy encryption mode enabled [ 160.765500][ T9559] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 160.778174][ T9559] ext4 filesystem being mounted at /228/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 160.827602][ T6135] EXT4-fs (loop5): unmounting filesystem. [ 161.238411][ T297] usb 5-1: reset high-speed USB device number 14 using dummy_hcd [ 161.380495][ T9593] overlayfs: failed to clone upperpath [ 161.397543][ T297] usb 5-1: device descriptor read/64, error -32 [ 161.417547][ T8375] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 161.598680][ T8375] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 161.609196][ T8375] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 161.626040][ T8375] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 161.636704][ T8375] usb 8-1: New USB device found, idVendor=056a, idProduct=010e, bcdDevice= 0.00 [ 161.645822][ T8375] usb 8-1: New USB device strings: Mfr=0, Product=32, SerialNumber=0 [ 161.654308][ T8375] usb 8-1: Product: syz [ 161.660441][ T8375] usb 8-1: config 0 descriptor?? [ 161.667524][ T297] usb 5-1: device descriptor read/64, error -32 [ 161.789929][ T9620] loop5: detected capacity change from 0 to 1024 [ 161.800225][ T9620] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 161.820040][ T6135] EXT4-fs (loop5): unmounting filesystem. [ 161.947524][ T297] usb 5-1: reset high-speed USB device number 14 using dummy_hcd [ 162.068762][ T8375] wacom 0003:056A:010E.001E: unknown main item tag 0x0 [ 162.086044][ T8375] wacom 0003:056A:010E.001E: unknown main item tag 0x0 [ 162.094011][ T8375] wacom 0003:056A:010E.001E: hidraw1: USB HID vff.ea Device [syz] on usb-dummy_hcd.7-1/input0 [ 162.104882][ T297] usb 5-1: device descriptor read/64, error -32 [ 162.230814][ T9662] xt_hashlimit: size too large, truncated to 1048576 [ 162.268966][ T8424] usb 8-1: USB disconnect, device number 5 [ 162.617534][ T297] usb 5-1: device descriptor read/64, error -71 [ 162.887040][ T9703] loop7: detected capacity change from 0 to 1024 [ 162.896850][ T9703] EXT4-fs: Ignoring removed bh option [ 162.902310][ T297] usb 5-1: reset high-speed USB device number 14 using dummy_hcd [ 162.910778][ T9703] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 162.928961][ T9703] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 162.948372][ T297] usb 5-1: device firmware changed [ 162.953417][ T8371] usb 5-1: USB disconnect, device number 14 [ 162.967016][ T9703] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:3841: comm syz.7.4091: Allocating blocks 497-513 which overlap fs metadata [ 162.984293][ T9703] EXT4-fs (loop7): pa ffff88810bbbadc8: logic 256, phys. 385, len 8 [ 162.986271][ T28] kauditd_printk_skb: 14 callbacks suppressed [ 162.986286][ T28] audit: type=1400 audit(1742927547.406:3519): avc: denied { listen } for pid=9712 comm="syz.2.4097" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 162.992141][ T9703] EXT4-fs error (device loop7): ext4_mb_release_inode_pa:4881: group 0, free 0, pa_free 1 [ 163.007013][ T9703] EXT4-fs error (device loop7): mb_free_blocks:1815: group 0, inode 15: block 129:freeing already freed block (bit 8); block bitmap corrupt. [ 163.055583][ T8688] EXT4-fs (loop7): unmounting filesystem. [ 163.107625][ T40] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 163.127702][ T8371] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 163.154270][ T9735] syz.2.4107[9735] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 163.154357][ T9735] syz.2.4107[9735] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 163.179928][ T28] audit: type=1400 audit(1742927547.606:3520): avc: denied { watch watch_reads } for pid=9736 comm="syz.7.4108" path="/proc/152/task" dev="proc" ino=49448 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 163.301881][ T9752] loop7: detected capacity change from 0 to 1024 [ 163.314602][ T9752] EXT4-fs: Ignoring removed nobh option [ 163.320239][ T9752] EXT4-fs: Ignoring removed bh option [ 163.325711][ T9752] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 163.342129][ T40] usb 6-1: config 220 has an invalid interface number: 76 but max is 2 [ 163.350270][ T8371] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 163.353466][ T9752] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 163.362804][ T40] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 163.388565][ T8371] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 163.401487][ T8371] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.408368][ T9752] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:3841: comm syz.7.4116: Allocating blocks 497-513 which overlap fs metadata [ 163.417480][ T40] usb 6-1: config 220 has no interface number 2 [ 163.424527][ T9751] EXT4-fs (loop7): pa ffff88810bbba930: logic 16, phys. 241, len 17 [ 163.429043][ T8371] usb 5-1: Product: syz [ 163.429059][ T8371] usb 5-1: Manufacturer: syz [ 163.436858][ T9751] EXT4-fs error (device loop7): ext4_mb_release_inode_pa:4881: group 0, free 0, pa_free 1 [ 163.447528][ T40] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 163.473403][ T8371] usb 5-1: SerialNumber: syz [ 163.483443][ T8688] EXT4-fs (loop7): unmounting filesystem. [ 163.495895][ T40] usb 6-1: config 220 interface 0 has no altsetting 0 [ 163.507499][ T40] usb 6-1: config 220 interface 76 has no altsetting 0 [ 163.517060][ T40] usb 6-1: config 220 interface 1 has no altsetting 0 [ 163.537172][ T40] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 163.546385][ T40] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.554534][ T40] usb 6-1: Product: syz [ 163.558811][ T40] usb 6-1: Manufacturer: syz [ 163.564702][ T40] usb 6-1: SerialNumber: syz [ 163.570688][ T28] audit: type=1400 audit(1742927547.996:3521): avc: denied { mounton } for pid=9768 comm="syz.7.4123" path="/77/file0" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 163.596356][ T9773] 9pnet: p9_errstr2errno: server reported unknown error ¤ÑÅl0î„&IØü0‚Ñ(|9Ê’å0%cÞ»ØÞÙ$ƒQûÂMÍ- [ 163.607229][ T28] audit: type=1400 audit(1742927548.036:3522): avc: denied { unmount } for pid=8688 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 163.794290][ T40] usb 6-1: selecting invalid altsetting 0 [ 163.801112][ T40] usb 6-1: Found UVC 7.01 device syz (8086:0b07) [ 163.807297][ T40] usb 6-1: No valid video chain found. [ 163.819919][ T40] usb 6-1: USB disconnect, device number 10 [ 164.180391][ T9803] fuse: Bad value for 'fd' [ 164.484500][ T8371] cdc_ncm 5-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 164.490864][ T8371] cdc_ncm 5-1:1.0: dwNtbInMaxSize=20 is too small. Using 2048 [ 164.498085][ T8371] cdc_ncm 5-1:1.0: setting rx_max = 2048 [ 164.607515][ T301] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 164.687447][ T8371] cdc_ncm 5-1:1.0 eth1: register 'cdc_ncm' at usb-dummy_hcd.4-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 164.699875][ T8371] usb 5-1: USB disconnect, device number 15 [ 164.705873][ T8371] cdc_ncm 5-1:1.0 eth1: unregister 'cdc_ncm' usb-dummy_hcd.4-1, CDC NCM (NO ZLP) [ 164.788763][ T301] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 164.799575][ T301] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 164.809210][ T301] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 164.821879][ T301] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 164.830678][ T301] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.839143][ T301] usb 6-1: config 0 descriptor?? [ 164.958602][ T28] audit: type=1400 audit(1742927549.386:3523): avc: denied { read } for pid=140 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 165.246592][ T301] plantronics 0003:047F:FFFF.001F: No inputs registered, leaving [ 165.255756][ T301] plantronics 0003:047F:FFFF.001F: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 165.528485][ T8371] usb 6-1: USB disconnect, device number 11 [ 166.152692][ T9872] loop5: detected capacity change from 0 to 1024 [ 166.167877][ T9872] EXT4-fs: Ignoring removed orlov option [ 166.173367][ T9872] EXT4-fs: Ignoring removed nomblk_io_submit option [ 166.187587][ T9872] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 166.228438][ T9872] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 166.258067][ T6135] EXT4-fs (loop5): unmounting filesystem. [ 166.337520][ T301] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 166.518675][ T301] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 166.526745][ T301] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 166.536896][ T301] usb 5-1: config 220 has no interface number 2 [ 166.543241][ T301] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 166.556190][ T301] usb 5-1: config 220 interface 0 has no altsetting 0 [ 166.562801][ T301] usb 5-1: config 220 interface 76 has no altsetting 0 [ 166.569480][ T301] usb 5-1: config 220 interface 1 has no altsetting 0 [ 166.577362][ T301] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 166.586254][ T301] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.594056][ T301] usb 5-1: Product: syz [ 166.598025][ T301] usb 5-1: Manufacturer: syz [ 166.602440][ T301] usb 5-1: SerialNumber: syz [ 166.815780][ T301] usb 5-1: selecting invalid altsetting 0 [ 166.821538][ T301] usb 5-1: Found UVC 7.01 device syz (8086:0b07) [ 166.827850][ T301] usb 5-1: No valid video chain found. [ 166.838330][ T301] usb 5-1: USB disconnect, device number 16 [ 166.897533][ T8371] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 167.087630][ T8371] usb 6-1: Using ep0 maxpacket: 16 [ 167.093715][ T8371] usb 6-1: config 0 has an invalid interface number: 8 but max is 0 [ 167.101690][ T8371] usb 6-1: config 0 has no interface number 0 [ 167.107724][ T8371] usb 6-1: config 0 interface 8 altsetting 101 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 167.119308][ T8371] usb 6-1: config 0 interface 8 altsetting 101 endpoint 0x81 has invalid wMaxPacketSize 0 [ 167.129750][ T8371] usb 6-1: config 0 interface 8 has no altsetting 0 [ 167.136379][ T8371] usb 6-1: New USB device found, idVendor=046d, idProduct=c53f, bcdDevice= 0.00 [ 167.145649][ T8371] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.154427][ T8371] usb 6-1: config 0 descriptor?? [ 167.562923][ T8371] logitech-djreceiver 0003:046D:C53F.0020: item fetching failed at offset 1/5 [ 167.571829][ T8371] logitech-djreceiver 0003:046D:C53F.0020: logi_dj_probe: parse failed [ 167.579927][ T8371] logitech-djreceiver: probe of 0003:046D:C53F.0020 failed with error -22 [ 167.763301][ T8371] usb 6-1: USB disconnect, device number 12 [ 168.280481][ T28] audit: type=1400 audit(1742927552.706:3524): avc: denied { wake_alarm } for pid=9929 comm="syz.4.4193" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 168.345052][ T9932] netlink: 140 bytes leftover after parsing attributes in process `syz.2.4191'. [ 168.362479][ T9932] netlink: 140 bytes leftover after parsing attributes in process `syz.2.4191'. [ 168.372015][ T9932] netlink: 140 bytes leftover after parsing attributes in process `syz.2.4191'. [ 168.413224][ T9947] 9pnet: p9_errstr2errno: server reported unknown error œæçæŒÎsÅ‚Ü·M6 [ 168.468254][ T301] hid-generic 0000:007F:FFFFFFFE.0021: unknown main item tag 0x0 [ 168.475837][ T301] hid-generic 0000:007F:FFFFFFFE.0021: unknown main item tag 0x0 [ 168.494961][ T301] hid-generic 0000:007F:FFFFFFFE.0021: unknown main item tag 0x0 [ 168.510332][ T301] hid-generic 0000:007F:FFFFFFFE.0021: unknown main item tag 0x0 [ 168.525589][ T301] hid-generic 0000:007F:FFFFFFFE.0021: unknown main item tag 0x0 [ 168.540868][ T301] hid-generic 0000:007F:FFFFFFFE.0021: unknown main item tag 0x0 [ 168.556236][ T301] hid-generic 0000:007F:FFFFFFFE.0021: unknown main item tag 0x0 [ 168.572578][ T301] hid-generic 0000:007F:FFFFFFFE.0021: unknown main item tag 0x0 [ 168.587900][ T301] hid-generic 0000:007F:FFFFFFFE.0021: unknown main item tag 0x0 [ 168.601182][ T9972] xt_hashlimit: size too large, truncated to 1048576 [ 168.604264][ T301] hid-generic 0000:007F:FFFFFFFE.0021: unknown main item tag 0x0 [ 168.620982][ T301] hid-generic 0000:007F:FFFFFFFE.0021: unknown main item tag 0x0 [ 168.634161][ T301] hid-generic 0000:007F:FFFFFFFE.0021: unknown main item tag 0x0 [ 168.649476][ T301] hid-generic 0000:007F:FFFFFFFE.0021: unknown main item tag 0x0 [ 168.664682][ T301] hid-generic 0000:007F:FFFFFFFE.0021: unknown main item tag 0x0 [ 168.679948][ T301] hid-generic 0000:007F:FFFFFFFE.0021: unknown main item tag 0x0 [ 168.696201][ T301] hid-generic 0000:007F:FFFFFFFE.0021: unknown main item tag 0x0 [ 168.711384][ T301] hid-generic 0000:007F:FFFFFFFE.0021: unknown main item tag 0x0 [ 168.726823][ T301] hid-generic 0000:007F:FFFFFFFE.0021: unknown main item tag 0x0 [ 168.740806][ T301] hid-generic 0000:007F:FFFFFFFE.0021: unknown main item tag 0x0 [ 168.748443][ T301] hid-generic 0000:007F:FFFFFFFE.0021: unknown main item tag 0x0 [ 168.755922][ T301] hid-generic 0000:007F:FFFFFFFE.0021: unknown main item tag 0x0 [ 168.763511][ T301] hid-generic 0000:007F:FFFFFFFE.0021: unknown main item tag 0x0 [ 168.771045][ T301] hid-generic 0000:007F:FFFFFFFE.0021: unknown main item tag 0x0 [ 168.778620][ T301] hid-generic 0000:007F:FFFFFFFE.0021: unknown main item tag 0x0 [ 168.786134][ T301] hid-generic 0000:007F:FFFFFFFE.0021: unknown main item tag 0x0 [ 168.793720][ T301] hid-generic 0000:007F:FFFFFFFE.0021: unknown main item tag 0x0 [ 168.801276][ T301] hid-generic 0000:007F:FFFFFFFE.0021: unknown main item tag 0x0 [ 168.808817][ T301] hid-generic 0000:007F:FFFFFFFE.0021: unknown main item tag 0x0 [ 168.816322][ T301] hid-generic 0000:007F:FFFFFFFE.0021: unknown main item tag 0x0 [ 168.823892][ T301] hid-generic 0000:007F:FFFFFFFE.0021: unknown main item tag 0x0 [ 168.831436][ T301] hid-generic 0000:007F:FFFFFFFE.0021: unknown main item tag 0x0 [ 168.839007][ T301] hid-generic 0000:007F:FFFFFFFE.0021: unknown main item tag 0x0 [ 168.846523][ T301] hid-generic 0000:007F:FFFFFFFE.0021: unknown main item tag 0x0 [ 168.854101][ T301] hid-generic 0000:007F:FFFFFFFE.0021: unknown main item tag 0x0 [ 168.861642][ T301] hid-generic 0000:007F:FFFFFFFE.0021: unknown main item tag 0x0 [ 168.869317][ T301] hid-generic 0000:007F:FFFFFFFE.0021: unknown main item tag 0x0 [ 168.876880][ T301] hid-generic 0000:007F:FFFFFFFE.0021: unknown main item tag 0x0 [ 168.884579][ T301] hid-generic 0000:007F:FFFFFFFE.0021: unknown main item tag 0x0 [ 168.892270][ T301] hid-generic 0000:007F:FFFFFFFE.0021: unknown main item tag 0x0 [ 168.900110][ T301] hid-generic 0000:007F:FFFFFFFE.0021: unknown main item tag 0x0 [ 168.907824][ T301] hid-generic 0000:007F:FFFFFFFE.0021: unknown main item tag 0x0 [ 168.915533][ T301] hid-generic 0000:007F:FFFFFFFE.0021: unknown main item tag 0x0 [ 168.924913][ T301] hid-generic 0000:007F:FFFFFFFE.0021: unknown main item tag 0x0 [ 168.933241][ T301] hid-generic 0000:007F:FFFFFFFE.0021: hidraw0: HID v0.00 Device [syz1] on syz0 [ 169.015556][ T9988] bridge: RTM_NEWNEIGH with invalid ether address [ 169.218484][T10019] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4236'. [ 169.315530][T10027] loop4: detected capacity change from 0 to 8192 [ 169.437508][ T8371] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 169.440112][T10027] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 169.452424][T10027] FAT-fs (loop4): Filesystem has been set read-only [ 169.518441][ T28] audit: type=1400 audit(1742927553.946:3525): avc: denied { watch_reads } for pid=10031 comm="syz.4.4242" path="/93/file1" dev="tmpfs" ino=504 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 169.617492][ T8371] usb 6-1: Using ep0 maxpacket: 32 [ 169.623611][ T8371] usb 6-1: config 0 has an invalid interface number: 151 but max is 0 [ 169.632392][ T8371] usb 6-1: config 0 has no interface number 0 [ 169.639799][ T8371] usb 6-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f [ 169.652955][ T8371] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.660903][ T8371] usb 6-1: Product: syz [ 169.664907][ T8371] usb 6-1: Manufacturer: syz [ 169.669398][ T8371] usb 6-1: SerialNumber: syz [ 169.677510][ T8371] usb 6-1: config 0 descriptor?? [ 169.929510][T10071] 9pnet: p9_errstr2errno: server reported unknown error œæçæŒÎsÅ‚Ü·M6 [ 169.938398][ T28] audit: type=1400 audit(1742927554.366:3526): avc: denied { write } for pid=84 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 169.974067][ T28] audit: type=1400 audit(1742927554.366:3527): avc: denied { remove_name } for pid=84 comm="syslogd" name="messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 169.998719][ T28] audit: type=1400 audit(1742927554.366:3528): avc: denied { rename } for pid=84 comm="syslogd" name="messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 170.024228][ T28] audit: type=1400 audit(1742927554.366:3529): avc: denied { add_name } for pid=84 comm="syslogd" name="messages.0" dev="tmpfs" ino=6 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 170.048068][ T28] audit: type=1400 audit(1742927554.366:3530): avc: denied { unlink } for pid=84 comm="syslogd" name="messages.0" dev="tmpfs" ino=6 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 170.072339][ T28] audit: type=1400 audit(1742927554.366:3531): avc: denied { create } for pid=84 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 170.093704][T10013] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 170.109983][T10082] futex_wake_op: syz.7.4263 tries to shift op by -1; fix this program [ 170.115575][T10013] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 170.148496][ T8371] usb 6-1: USB disconnect, device number 13 [ 170.155118][ T616] udevd[616]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.151/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 170.303259][T10103] 9pnet: p9_errstr2errno: server reported unknown error õ1 g;-‡~ [ 170.325230][ T28] audit: type=1400 audit(1742927554.746:3532): avc: denied { bind } for pid=10104 comm="syz.0.4274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 170.751495][T10126] loop5: detected capacity change from 0 to 512 [ 170.801869][T10126] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 170.810774][T10126] ext4 filesystem being mounted at /257/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 170.840093][ T6135] EXT4-fs (loop5): unmounting filesystem. [ 171.050981][T10139] xt_bpf: check failed: parse error [ 171.138335][T10148] loop4: detected capacity change from 0 to 1024 [ 171.162344][T10148] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 171.171657][T10148] ext4 filesystem being mounted at /98/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 171.186065][T10148] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.4289: bg 0: block 393: padding at end of block bitmap is not set [ 171.200627][T10148] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 63 with max blocks 65 with error 117 [ 171.213039][T10148] EXT4-fs (loop4): This should not happen!! Data will be lost [ 171.213039][T10148] [ 171.232421][ T8531] EXT4-fs (loop4): unmounting filesystem. [ 171.343886][T10156] futex_wake_op: syz.5.4291 tries to shift op by -1; fix this program [ 171.409825][T10161] overlayfs: failed to clone lowerpath [ 171.507031][T10164] loop5: detected capacity change from 0 to 8192 [ 171.739657][T10170] FAT-fs (loop5): error, corrupted directory (invalid entries) [ 171.747145][T10170] FAT-fs (loop5): Filesystem has been set read-only [ 171.897111][ T28] audit: type=1400 audit(1742927556.316:3533): avc: denied { getopt } for pid=10177 comm="syz.5.4300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 171.948803][T10180] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 172.547486][ T8371] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 172.728513][ T8371] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 172.743766][ T8371] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 172.761849][ T8371] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 172.780179][ T8371] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 172.791437][ T8371] usb 5-1: SerialNumber: syz [ 172.808377][ T8371] cdc_ether: probe of 5-1:1.0 failed with error -22 [ 172.819401][ T8371] usb-storage 5-1:1.0: USB Mass Storage device detected [ 172.850006][ T8371] usb-storage 5-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 172.858696][T10234] netlink: 'syz.2.4325': attribute type 16 has an invalid length. [ 172.866397][T10234] netlink: 'syz.2.4325': attribute type 17 has an invalid length. [ 172.867602][ T8371] scsi host1: usb-storage 5-1:1.0 [ 172.894535][T10234] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 172.927621][T10234] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 172.959792][T10234] IPv6: ADDRCONF(NETDEV_CHANGE): syz_tun: link becomes ready [ 172.991378][T10234] IPv6: ADDRCONF(NETDEV_CHANGE): syz_tun: link becomes ready [ 173.025689][T10234] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 173.053394][T10234] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 173.089235][T10240] loop5: detected capacity change from 0 to 8192 [ 173.108373][T10234] device veth1_to_hsr entered promiscuous mode [ 173.241841][ T8421] usb 5-1: USB disconnect, device number 17 [ 173.300225][T10240] FAT-fs (loop5): error, corrupted directory (invalid entries) [ 173.308797][T10240] FAT-fs (loop5): Filesystem has been set read-only [ 173.422165][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 173.422180][ T28] audit: type=1400 audit(1742927557.846:3535): avc: denied { write } for pid=10264 comm="syz.5.4336" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 174.000900][ T28] audit: type=1400 audit(1742927558.426:3536): avc: denied { getopt } for pid=10327 comm="syz.2.4368" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 174.055251][ T28] audit: type=1400 audit(1742927558.476:3537): avc: denied { create } for pid=10330 comm="syz.2.4369" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 174.056124][T10331] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 174.085141][T10331] FAT-fs (loop5): unable to read boot sector [ 174.109837][ T28] audit: type=1400 audit(1742927558.476:3538): avc: denied { mounton } for pid=10330 comm="syz.2.4369" path="/1031/file0" dev="tmpfs" ino=5406 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 174.146614][T10333] overlayfs: failed to clone lowerpath [ 174.174751][ T28] audit: type=1400 audit(1742927558.526:3539): avc: denied { unlink } for pid=296 comm="syz-executor" name="file0" dev="tmpfs" ino=5406 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 174.239058][ T28] audit: type=1400 audit(1742927558.566:3540): avc: denied { mount } for pid=10332 comm="syz.2.4370" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 174.748139][ T28] audit: type=1400 audit(1742927559.176:3541): avc: denied { name_bind } for pid=10391 comm="syz.0.4396" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 174.819977][T10400] devtmpfs: Unknown parameter 'posixacl' [ 175.281731][T10423] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4411'. [ 175.373327][ T28] audit: type=1400 audit(1742927559.796:3542): avc: denied { read } for pid=10436 comm="syz.4.4417" name="ppp" dev="devtmpfs" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 175.396390][T10439] SELinux: policydb version 0 does not match my version range 15-33 [ 175.404474][T10439] SELinux: failed to load policy [ 175.527082][ T28] audit: type=1400 audit(1742927559.946:3543): avc: denied { view } for pid=10456 comm="syz.4.4426" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 175.572101][T10464] loop4: detected capacity change from 0 to 512 [ 175.594339][T10464] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #15: comm syz.4.4429: casefold flag without casefold feature [ 175.611475][T10464] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.4429: couldn't read orphan inode 15 (err -117) [ 175.624122][T10464] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 175.656908][ T8531] EXT4-fs (loop4): unmounting filesystem. [ 175.780978][ T28] audit: type=1400 audit(1742927560.206:3544): avc: denied { lock } for pid=10490 comm="syz.4.4441" path="socket:[50687]" dev="sockfs" ino=50687 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 175.808392][ T8421] kernel write not supported for file bpf-prog (pid: 8421 comm: kworker/0:13) [ 176.217557][T10532] 9pnet_fd: Insufficient options for proto=fd [ 176.712463][T10579] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.720172][T10579] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.728178][T10579] device bridge_slave_0 entered promiscuous mode [ 176.735827][T10579] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.742817][T10579] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.750516][T10579] device bridge_slave_1 entered promiscuous mode [ 176.806702][T10579] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.813590][T10579] bridge0: port 2(bridge_slave_1) entered forwarding state [ 176.820704][T10579] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.827581][T10579] bridge0: port 1(bridge_slave_0) entered forwarding state [ 176.851276][ T328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 176.859009][ T328] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.866109][ T328] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.875671][ T328] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 176.883854][ T328] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.890742][ T328] bridge0: port 1(bridge_slave_0) entered forwarding state [ 176.899335][ T328] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 176.907363][ T328] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.914232][ T328] bridge0: port 2(bridge_slave_1) entered forwarding state [ 176.928299][ T328] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 176.937945][ T328] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 176.953730][ T328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 176.965939][ T328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 176.973997][ T328] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 176.981611][ T328] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 176.989927][T10579] device veth0_vlan entered promiscuous mode [ 177.001910][ T328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 177.011388][T10579] device veth1_macvtap entered promiscuous mode [ 177.021994][ T328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 177.032396][ T328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 177.198174][T10610] loop8: detected capacity change from 0 to 2048 [ 177.208579][T10610] loop8: p3 < > p4 < > [ 177.212619][T10610] loop8: partition table partially beyond EOD, truncated [ 177.220464][T10610] loop8: p3 start 4284289 is beyond EOD, truncated [ 177.240422][ T102] loop8: p3 < > p4 < > [ 177.246740][ T102] loop8: partition table partially beyond EOD, truncated [ 177.265621][ T102] loop8: p3 start 4284289 is beyond EOD, truncated [ 177.328920][ T616] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 177.348031][ T616] udevd[616]: inotify_add_watch(7, /dev/loop8p4, 10) failed: No such file or directory [ 177.458567][T10630] loop8: detected capacity change from 0 to 512 [ 177.496009][T10630] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 177.506366][T10630] ext4 filesystem being mounted at /10/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 177.511206][T10639] loop4: detected capacity change from 0 to 1024 [ 177.524138][T10639] EXT4-fs (loop4): INFO: recovery required on readonly filesystem [ 177.532438][T10639] EXT4-fs (loop4): write access will be enabled during recovery [ 177.540003][T10639] EXT4-fs (loop4): barriers disabled [ 177.545124][T10639] JBD2: no valid journal superblock found [ 177.550696][T10639] EXT4-fs (loop4): error loading journal [ 177.562511][T10579] EXT4-fs (loop8): unmounting filesystem. [ 177.752391][T10667] loop4: detected capacity change from 0 to 2048 [ 177.800737][T10667] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 177.862848][ T8531] EXT4-fs (loop4): unmounting filesystem. [ 177.931981][T10685] loop8: detected capacity change from 0 to 4096 [ 177.966411][T10685] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 178.052575][T10579] EXT4-fs (loop8): unmounting filesystem. [ 178.547681][ T8421] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 178.648074][T10749] I/O error, dev loop17, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 178.658343][T10749] FAT-fs (loop17): unable to read boot sector [ 178.758159][ T8421] usb 5-1: Using ep0 maxpacket: 32 [ 178.764569][ T8421] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 178.787382][ T8421] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 178.797230][ T8421] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 178.827469][ T8421] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.849557][ T8421] usb 5-1: config 0 descriptor?? [ 178.858794][ T8421] hub 5-1:0.0: USB hub found [ 178.882809][T10768] 9pnet: p9_errstr2errno: server reported unknown error b0x0000000000000004 [ 178.977794][T10777] syz.7.4564[10777] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 178.977886][T10777] syz.7.4564[10777] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 179.056589][ T8421] hub 5-1:0.0: 1 port detected [ 179.073790][T10786] loop8: detected capacity change from 0 to 512 [ 179.133487][T10786] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 179.153435][T10786] EXT4-fs (loop8): orphan cleanup on readonly fs [ 179.160812][T10786] __quota_error: 22 callbacks suppressed [ 179.160829][T10786] Quota error (device loop8): dq_insert_tree: Quota tree root isn't allocated! [ 179.176136][T10786] Quota error (device loop8): qtree_write_dquot: Error -5 occurred while creating quota [ 179.179254][T10779] netlink: 'syz.2.4568': attribute type 12 has an invalid length. [ 179.185989][T10786] EXT4-fs error (device loop8): ext4_acquire_dquot:6782: comm syz.8.4571: Failed to acquire dquot type 1 [ 179.206494][T10793] incfs: Options parsing error. -22 [ 179.211928][T10786] EXT4-fs error (device loop8): ext4_validate_block_bitmap:438: comm syz.8.4571: bg 0: block 40: padding at end of block bitmap is not set [ 179.226341][T10793] incfs: mount failed -22 [ 179.227981][T10786] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 179.245129][T10786] EXT4-fs (loop8): 1 truncate cleaned up [ 179.255974][T10786] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 179.274052][T10786] EXT4-fs error (device loop8): ext4_xattr_block_get:546: inode #16: comm syz.8.4571: corrupted xattr block 31 [ 179.298707][T10786] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop8 ino=16 [ 179.312937][T10786] EXT4-fs error (device loop8): ext4_xattr_block_get:546: inode #16: comm syz.8.4571: corrupted xattr block 31 [ 179.336252][T10786] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop8 ino=16 [ 179.355405][ T28] audit: type=1400 audit(1742927563.776:3567): avc: denied { read } for pid=10785 comm="syz.8.4571" name="file2" dev="loop8" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 179.377945][T10786] EXT4-fs error (device loop8): ext4_get_link:104: inode #16: comm syz.8.4571: bad symlink. [ 179.418500][T10579] EXT4-fs (loop8): unmounting filesystem. [ 179.430552][ T28] audit: type=1400 audit(1742927563.856:3568): avc: denied { accept } for pid=10809 comm="syz.0.4581" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 179.673194][ T301] hub 5-1:0.0: activate --> -90 [ 179.777502][ T8421] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 179.874093][ T301] hub 5-1:0.0: hub_ext_port_status failed (err = -71) [ 179.884001][ T8424] usb 5-1: USB disconnect, device number 18 [ 179.988526][ T8421] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 179.999368][ T8421] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 180.008989][ T8421] usb 9-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 180.017773][ T8421] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.026140][ T8421] usb 9-1: config 0 descriptor?? [ 180.309735][ T8424] kernel write not supported for file bpf-prog (pid: 8424 comm: kworker/0:14) [ 180.357375][T10845] netlink: 'syz.7.4596': attribute type 4 has an invalid length. [ 180.359707][T10844] overlayfs: failed to clone upperpath [ 180.372798][T10845] netlink: 'syz.7.4596': attribute type 4 has an invalid length. [ 180.437142][ T8421] hid-generic 0003:04F3:0755.0022: failed to start in urb: -90 [ 180.445507][ T8421] hid-generic 0003:04F3:0755.0022: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.8-1/input0 [ 180.480098][ T28] audit: type=1400 audit(1742927564.906:3569): avc: denied { create } for pid=10856 comm="syz.4.4602" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 180.504143][ T28] audit: type=1400 audit(1742927564.906:3570): avc: denied { bind } for pid=10856 comm="syz.4.4602" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 180.516484][T10862] incfs: Unexpected inode type [ 180.528441][T10862] incfs_lookup_dentry err:-12 [ 180.533167][ T28] audit: type=1400 audit(1742927564.906:3571): avc: denied { node_bind } for pid=10856 comm="syz.4.4602" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 180.637983][ T8371] usb 9-1: USB disconnect, device number 2 [ 181.258503][T10916] loop4: detected capacity change from 0 to 256 [ 181.265105][T10916] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 181.340835][T10914] loop8: detected capacity change from 0 to 40427 [ 181.348190][T10914] F2FS-fs (loop8): Fix alignment : done, start(4096) end(16896) block(12288) [ 181.356860][T10914] F2FS-fs (loop8): Invalid uid value -1 [ 181.466034][ T28] audit: type=1400 audit(1742927565.886:3572): avc: denied { watch_reads } for pid=10922 comm="syz.4.4632" path="/150" dev="tmpfs" ino=800 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 181.598104][T10939] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4640'. [ 181.608812][T10941] fuse: Bad value for 'fd' [ 181.635943][T10947] IPv6: NLM_F_CREATE should be specified when creating new route [ 181.680323][T10953] overlayfs: failed to clone lowerpath [ 181.839033][ T8420] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 181.941800][ T28] audit: type=1400 audit(1742927566.366:3573): avc: denied { write } for pid=10985 comm="syz.0.4659" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 181.988561][T10983] loop8: detected capacity change from 0 to 8192 [ 182.058565][ T8420] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 182.070560][ T8420] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 182.087623][ T8420] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 182.102628][ T8420] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 182.120517][ T8420] usb 5-1: SerialNumber: syz [ 182.213745][T10983] FAT-fs (loop8): error, corrupted directory (invalid entries) [ 182.221544][T10983] FAT-fs (loop8): Filesystem has been set read-only [ 182.328479][ T8420] usb 5-1: 0:2 : does not exist [ 182.338620][ T8420] usb 5-1: USB disconnect, device number 19 [ 182.561149][ T616] udevd[616]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 182.613246][T11048] device gre0 entered promiscuous mode [ 182.636645][T11048] device vlan2 entered promiscuous mode [ 182.662137][ T28] audit: type=1400 audit(1742927567.086:3574): avc: denied { getattr } for pid=11050 comm="syz.0.4692" name="/" dev="dmabuf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 182.662410][T11048] device gre0 left promiscuous mode [ 183.793056][T11098] netlink: 'syz.8.4711': attribute type 12 has an invalid length. [ 184.107531][ T691] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 184.161260][T11143] syz.4.4732[11143] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 184.161344][T11143] syz.4.4732[11143] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 184.300432][ T691] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1023 [ 184.337448][ T691] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 184.358839][ T691] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 184.372854][ T691] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.380960][ T691] usb 9-1: Product: syz [ 184.384934][ T691] usb 9-1: Manufacturer: syz [ 184.394931][ T691] usb 9-1: SerialNumber: syz [ 184.414356][T11118] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 184.561362][ T8420] kernel write not supported for file bpf-prog (pid: 8420 comm: kworker/0:12) [ 184.624163][T11189] loop4: detected capacity change from 0 to 2048 [ 184.633877][ T691] usblp 9-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 184.673166][T11189] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 184.704020][ T28] audit: type=1400 audit(1742927569.126:3575): avc: denied { read write } for pid=11117 comm="syz.8.4717" name="lp0" dev="devtmpfs" ino=1074 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 184.730750][ T8420] usb 9-1: USB disconnect, device number 3 [ 184.747742][ T8420] usblp0: removed [ 184.761605][ T28] audit: type=1400 audit(1742927569.146:3576): avc: denied { open } for pid=11117 comm="syz.8.4717" path="/dev/usb/lp0" dev="devtmpfs" ino=1074 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 184.791324][ T8531] EXT4-fs (loop4): unmounting filesystem. [ 184.807980][T11202] capability: warning: `syz.4.4756' uses 32-bit capabilities (legacy support in use) [ 184.860654][ T28] audit: type=1400 audit(1742927569.286:3577): avc: denied { setopt } for pid=11212 comm="syz.4.4761" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 184.881764][ T28] audit: type=1400 audit(1742927569.286:3578): avc: denied { listen } for pid=11212 comm="syz.4.4761" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 185.177368][T11229] loop4: detected capacity change from 0 to 40427 [ 185.191302][T11229] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 185.198956][T11229] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 185.207993][T11229] F2FS-fs (loop4): invalid crc value [ 185.214548][T11229] F2FS-fs (loop4): Found nat_bits in checkpoint [ 185.307856][T11229] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 185.320186][T11229] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 185.381716][ T28] audit: type=1400 audit(1742927569.806:3579): avc: denied { mounton } for pid=11228 comm="syz.4.4768" path="/175/bus/bus" dev="loop4" ino=457 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 185.428586][ T28] audit: type=1400 audit(1742927569.836:3580): avc: denied { setattr } for pid=11228 comm="syz.4.4768" name="work" dev="loop4" ino=458 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 185.450531][ T320] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 185.459788][ T28] audit: type=1400 audit(1742927569.836:3581): avc: denied { unlink } for pid=11228 comm="syz.4.4768" name="#1b" dev="loop4" ino=461 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 185.482420][ T28] audit: type=1400 audit(1742927569.846:3582): avc: denied { rmdir } for pid=8531 comm="syz-executor" name="file0" dev="loop4" ino=455 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 185.504303][ T320] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 185.907468][ T8421] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 186.098539][ T8421] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 186.117439][ T8421] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 186.127117][ T8421] usb 5-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 186.142392][ T8421] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.154091][ T8421] usb 5-1: config 0 descriptor?? [ 186.230904][T11288] overlayfs: failed to clone upperpath [ 186.335646][T11290] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.344457][T11290] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.351959][T11290] device bridge_slave_0 entered promiscuous mode [ 186.364775][T11290] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.371812][T11290] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.379242][T11290] device bridge_slave_1 entered promiscuous mode [ 186.457959][T11290] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.464844][T11290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 186.471972][T11290] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.478730][T11290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 186.505165][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 186.512834][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.520162][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.529160][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 186.537168][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.544033][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 186.555195][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 186.563483][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.569182][ T8421] hid-generic 0003:04F3:0755.0023: failed to start in urb: -90 [ 186.570369][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 186.586348][ T8421] hid-generic 0003:04F3:0755.0023: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.4-1/input0 [ 186.599111][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 186.606948][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 186.626015][ T8] device bridge_slave_1 left promiscuous mode [ 186.632773][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.640303][ T8] device bridge_slave_0 left promiscuous mode [ 186.646270][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.654879][ T8] device veth1_macvtap left promiscuous mode [ 186.660771][ T8] device veth0_vlan left promiscuous mode [ 186.747259][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 186.756386][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 186.768216][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 186.775490][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 186.776930][ T8420] usb 5-1: USB disconnect, device number 20 [ 186.788928][T11290] device veth0_vlan entered promiscuous mode [ 186.789260][ T28] audit: type=1400 audit(1742927571.216:3583): avc: denied { setopt } for pid=11328 comm="syz.7.4813" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 186.817563][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 186.829010][T11290] device veth1_macvtap entered promiscuous mode [ 186.839473][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 186.850125][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 187.558365][ T28] audit: type=1400 audit(1742927571.986:3584): avc: denied { write } for pid=11383 comm="syz.7.4837" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 187.737565][ T8421] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 187.749136][T11417] IPv6: NLM_F_REPLACE set, but no existing node found! [ 187.928594][ T8421] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1023 [ 187.949161][T11455] loop4: detected capacity change from 0 to 512 [ 187.957592][ T8421] usb 10-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 187.977892][T11455] EXT4-fs: Ignoring removed nobh option [ 187.986317][T11455] EXT4-fs: Ignoring removed mblk_io_submit option [ 187.994121][ T8421] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 188.005490][T11455] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 188.026520][ T8421] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.027484][ T8531] EXT4-fs (loop4): unmounting filesystem. [ 188.034510][ T8421] usb 10-1: Product: syz [ 188.044105][ T8421] usb 10-1: Manufacturer: syz [ 188.049210][ T8421] usb 10-1: SerialNumber: syz [ 188.059046][T11369] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 188.271606][ T8421] usblp 10-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 188.418044][ T8421] usb 10-1: USB disconnect, device number 2 [ 188.428911][ T8421] usblp0: removed [ 189.088822][T11526] netlink: 96 bytes leftover after parsing attributes in process `syz.9.4899'. [ 189.257504][ T691] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 189.457873][ T691] usb 5-1: Using ep0 maxpacket: 32 [ 189.464023][ T691] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 189.484370][ T691] usb 5-1: config 0 has no interface number 0 [ 189.501332][ T691] usb 5-1: config 0 interface 184 has no altsetting 0 [ 189.520374][ T691] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 189.535856][ T691] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.549213][ T691] usb 5-1: Product: syz [ 189.559259][ T691] usb 5-1: Manufacturer: syz [ 189.569163][ T691] usb 5-1: SerialNumber: syz [ 189.588191][ T691] usb 5-1: config 0 descriptor?? [ 189.598924][ T691] smsc75xx v1.0.0 [ 189.794020][ T28] kauditd_printk_skb: 35 callbacks suppressed [ 189.794036][ T28] audit: type=1400 audit(1742927574.216:3620): avc: denied { create } for pid=11599 comm="syz.0.4931" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 189.840950][ T28] audit: type=1400 audit(1742927574.266:3621): avc: denied { create } for pid=11601 comm="syz.0.4932" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 189.869683][ T28] audit: type=1400 audit(1742927574.266:3622): avc: denied { read } for pid=11601 comm="syz.0.4932" path="socket:[54575]" dev="sockfs" ino=54575 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 189.926715][ T28] audit: type=1400 audit(1742927574.346:3623): avc: denied { read write } for pid=11608 comm="syz.9.4935" name="raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 189.950588][ T28] audit: type=1400 audit(1742927574.346:3624): avc: denied { open } for pid=11608 comm="syz.9.4935" path="/dev/raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 189.975398][ T28] audit: type=1400 audit(1742927574.396:3625): avc: denied { write } for pid=11601 comm="syz.0.4932" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 190.009991][T11614] netlink: 96 bytes leftover after parsing attributes in process `syz.0.4938'. [ 190.025398][ T28] audit: type=1400 audit(1742927574.446:3626): avc: denied { create } for pid=11610 comm="syz.7.4936" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 190.049632][T11617] IPv6: NLM_F_REPLACE set, but no existing node found! [ 190.067693][ T28] audit: type=1400 audit(1742927574.496:3627): avc: denied { getopt } for pid=11610 comm="syz.7.4936" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 190.134021][ T28] audit: type=1400 audit(1742927574.556:3628): avc: denied { mount } for pid=11626 comm="syz.0.4944" name="/" dev="ramfs" ino=55468 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 190.171792][T11631] xt_bpf: check failed: parse error [ 190.197458][ T8424] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 190.208442][ T28] audit: type=1400 audit(1742927574.636:3629): avc: denied { ioctl } for pid=11634 comm="syz.0.4948" path="socket:[54611]" dev="sockfs" ino=54611 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 190.378562][ T8424] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 190.389811][ T8424] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 190.402294][ T8424] usb 10-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 190.413085][ T8424] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.427190][ T8424] usb 10-1: config 0 descriptor?? [ 190.433157][T11649] netlink: 1036 bytes leftover after parsing attributes in process `syz.7.4955'. [ 190.443208][T11649] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 190.802581][ T691] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000044: -71 [ 190.813857][ T691] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_DATA [ 190.824105][ T691] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 190.834860][ T691] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 190.841649][ T8424] hid-steam 0003:28DE:1142.0024: item fetching failed at offset 3/5 [ 190.844463][ T691] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 190.853708][ T8424] hid-steam 0003:28DE:1142.0024: steam_probe:parse of hid interface failed [ 190.863162][ T691] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 190.871824][ T8424] hid-steam: probe of 0003:28DE:1142.0024 failed with error -22 [ 190.887498][ T691] smsc75xx: probe of 5-1:0.184 failed with error -71 [ 190.892054][ T691] usb 5-1: USB disconnect, device number 21 [ 191.050786][ T40] usb 10-1: USB disconnect, device number 3 [ 191.597478][ T40] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 191.665090][T11752] syz.2.5003[11752] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 191.665139][T11752] syz.2.5003[11752] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 191.777469][ T40] usb 5-1: Using ep0 maxpacket: 32 [ 191.794654][ T40] usb 5-1: config 0 has an invalid interface number: 151 but max is 0 [ 191.802672][ T40] usb 5-1: config 0 has no interface number 0 [ 191.809950][ T40] usb 5-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f [ 191.818867][ T40] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.826697][ T40] usb 5-1: Product: syz [ 191.830689][ T40] usb 5-1: Manufacturer: syz [ 191.835048][ T40] usb 5-1: SerialNumber: syz [ 191.840128][ T40] usb 5-1: config 0 descriptor?? [ 192.190891][T11772] 9pnet_fd: Insufficient options for proto=fd [ 192.208272][T11774] overlayfs: failed to clone upperpath [ 192.247094][T11735] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 192.255463][T11735] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 192.267364][ T40] usb 5-1: USB disconnect, device number 22 [ 192.468392][ T616] udevd[616]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.151/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 192.800232][T11808] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 192.884823][T11816] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5029'. [ 194.045573][T11953] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 194.236476][T11973] overlayfs: missing 'lowerdir' [ 194.302019][T11982] sch_fq: defrate 0 ignored. [ 194.332090][T11985] device wg2 entered promiscuous mode [ 194.424953][T11994] loop9: detected capacity change from 0 to 512 [ 194.465028][T11994] EXT4-fs: Ignoring removed i_version option [ 194.475581][T11994] EXT4-fs: Ignoring removed mblk_io_submit option [ 194.484728][T11994] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 194.508547][T11994] EXT4-fs (loop9): 1 truncate cleaned up [ 194.514018][T11994] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 194.537107][ C0] ================================================================== [ 194.544991][ C0] BUG: KASAN: use-after-free in dev_map_generic_redirect+0x9f/0x7d0 [ 194.552811][ C0] Read of size 8 at addr ffff88813a325480 by task syz.0.5102/11980 [ 194.560526][ C0] [ 194.562720][ C0] CPU: 0 PID: 11980 Comm: syz.0.5102 Tainted: G W 6.1.128-syzkaller-00031-gf628136006cc #0 [ 194.573893][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 194.583788][ C0] Call Trace: [ 194.586912][ C0] [ 194.589604][ C0] dump_stack_lvl+0x151/0x1b7 [ 194.594210][ C0] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 194.599502][ C0] ? _printk+0xd1/0x111 [ 194.603495][ C0] ? __virt_addr_valid+0x242/0x2f0 [ 194.608442][ C0] print_report+0x158/0x4e0 [ 194.612776][ C0] ? kernel_sendpage+0x251/0x2d0 [ 194.617556][ C0] ? __virt_addr_valid+0x242/0x2f0 [ 194.622500][ C0] ? kasan_complete_mode_report_info+0x90/0x1b0 [ 194.628575][ C0] ? dev_map_generic_redirect+0x9f/0x7d0 [ 194.634039][ C0] kasan_report+0x13c/0x170 [ 194.638382][ C0] ? dev_map_generic_redirect+0x9f/0x7d0 [ 194.643854][ C0] __asan_report_load8_noabort+0x14/0x20 [ 194.649325][ C0] dev_map_generic_redirect+0x9f/0x7d0 [ 194.654623][ C0] ? kasan_quarantine_put+0x34/0x1a0 [ 194.659737][ C0] ? bq_enqueue+0x3e0/0x3e0 [ 194.664072][ C0] ? bpf_prog_run_generic_xdp+0xa35/0x1200 [ 194.669725][ C0] xdp_do_generic_redirect+0x42e/0xb40 [ 194.675008][ C0] do_xdp_generic+0x53e/0x800 [ 194.679529][ C0] ? generic_xdp_tx+0x560/0x560 [ 194.684212][ C0] ? migrate_disable+0xd9/0x190 [ 194.688896][ C0] __netif_receive_skb_core+0x19ae/0x43d0 [ 194.694453][ C0] ? stack_depot_save+0x13/0x20 [ 194.699145][ C0] ? free_unref_page_prepare+0x9f1/0xa00 [ 194.704608][ C0] ? free_the_page+0x13/0x20 [ 194.709029][ C0] ? page_frag_free+0x108/0x120 [ 194.713717][ C0] ? napi_consume_skb+0x135/0x2d0 [ 194.718679][ C0] ? qdisc_run+0x260/0x260 [ 194.722916][ C0] ? tipc_sendmsg+0x55/0x70 [ 194.727260][ C0] ? check_preempt_wakeup+0x720/0xb30 [ 194.732468][ C0] ? __reset_page_owner+0x175/0x190 [ 194.737509][ C0] ? __kasan_check_write+0x14/0x20 [ 194.742454][ C0] __netif_receive_skb+0x11c/0x530 [ 194.747398][ C0] ? __netif_receive_skb_list_core+0x890/0x890 [ 194.753389][ C0] ? __kasan_check_write+0x14/0x20 [ 194.758329][ C0] ? _raw_spin_lock_irq+0xa5/0x1b0 [ 194.763275][ C0] ? _raw_spin_lock_irqsave+0x210/0x210 [ 194.768663][ C0] process_backlog+0x32c/0x630 [ 194.773263][ C0] __napi_poll+0xbe/0x5c0 [ 194.777429][ C0] net_rx_action+0x595/0xdd0 [ 194.781853][ C0] ? net_tx_action+0x560/0x560 [ 194.786581][ C0] ? kvm_sched_clock_read+0x18/0x40 [ 194.791609][ C0] ? sched_clock+0x9/0x10 [ 194.795782][ C0] ? irqtime_account_irq+0x79/0x260 [ 194.800816][ C0] handle_softirqs+0x1db/0x650 [ 194.805409][ C0] __do_softirq+0xb/0xd [ 194.809403][ C0] do_softirq+0xf6/0x150 [ 194.813482][ C0] [ 194.816261][ C0] [ 194.819035][ C0] ? __local_bh_enable_ip+0x80/0x80 [ 194.824066][ C0] ? eth_get_headlen+0x240/0x240 [ 194.828845][ C0] __local_bh_enable_ip+0x75/0x80 [ 194.833705][ C0] netif_rx+0x84/0x2c0 [ 194.837613][ C0] tipc_clone_to_loopback+0x3be/0x4a0 [ 194.842820][ C0] tipc_mcast_xmit+0x1676/0x1b40 [ 194.847594][ C0] ? tipc_bcbase_xmit+0xb60/0xb60 [ 194.852475][ C0] ? tipc_msg_build+0xd5b/0x1190 [ 194.857229][ C0] ? tipc_msg_fragment+0x760/0x760 [ 194.862213][ C0] ? tipc_nametbl_lookup_mcast_nodes+0x424/0xa10 [ 194.868337][ C0] __tipc_sendmsg+0x2617/0x3240 [ 194.873028][ C0] ? avc_has_perm_noaudit+0x2dd/0x430 [ 194.878228][ C0] ? rht_lock+0x130/0x130 [ 194.882514][ C0] ? wait_woken+0x100/0x100 [ 194.886844][ C0] ? avc_has_perm+0x16f/0x260 [ 194.891356][ C0] ? avc_has_perm_noaudit+0x430/0x430 [ 194.896572][ C0] ? __kasan_check_write+0x14/0x20 [ 194.901514][ C0] ? _raw_spin_lock_bh+0xa4/0x1b0 [ 194.906372][ C0] ? _raw_spin_lock_irq+0x1b0/0x1b0 [ 194.911440][ C0] ? __local_bh_enable_ip+0x58/0x80 [ 194.916477][ C0] ? lock_sock_nested+0x261/0x300 [ 194.921304][ C0] ? sock_init_data+0xc0/0xc0 [ 194.925815][ C0] ? _raw_spin_unlock_bh+0x50/0x60 [ 194.930850][ C0] tipc_sendmsg+0x55/0x70 [ 194.935012][ C0] ? tipc_recvmsg+0x13b0/0x13b0 [ 194.939700][ C0] kernel_sendmsg+0x213/0x320 [ 194.944234][ C0] ? sock_sendmsg+0x300/0x300 [ 194.948726][ C0] ? __filemap_get_folio+0x95e/0xae0 [ 194.953851][ C0] ? page_cache_prev_miss+0x410/0x410 [ 194.959056][ C0] sock_no_sendpage+0x14c/0x1c0 [ 194.963751][ C0] ? __receive_sock+0x140/0x140 [ 194.968430][ C0] ? atime_needs_update+0x810/0x810 [ 194.973466][ C0] ? sanity+0x1af/0x4f0 [ 194.977466][ C0] kernel_sendpage+0x251/0x2d0 [ 194.982055][ C0] sock_sendpage+0x85/0xb0 [ 194.986311][ C0] pipe_to_sendpage+0x257/0x340 [ 194.990993][ C0] ? sock_fasync+0x100/0x100 [ 194.995424][ C0] ? generic_splice_sendpage+0x220/0x220 [ 195.000891][ C0] ? page_cache_pipe_buf_confirm+0x14a/0x260 [ 195.006707][ C0] __splice_from_pipe+0x334/0x860 [ 195.011565][ C0] ? generic_splice_sendpage+0x220/0x220 [ 195.017038][ C0] generic_splice_sendpage+0x195/0x220 [ 195.022331][ C0] ? iter_file_splice_write+0xf90/0xf90 [ 195.027710][ C0] ? fsnotify_perm+0x269/0x5b0 [ 195.032308][ C0] ? iter_file_splice_write+0xf90/0xf90 [ 195.037692][ C0] direct_splice_actor+0xff/0x130 [ 195.042569][ C0] splice_direct_to_actor+0x4b4/0xbb0 [ 195.047762][ C0] ? do_splice_direct+0x3c0/0x3c0 [ 195.052619][ C0] ? pipe_to_sendpage+0x340/0x340 [ 195.057481][ C0] ? rw_verify_area+0xa7/0x1c0 [ 195.062077][ C0] do_splice_direct+0x27f/0x3c0 [ 195.066766][ C0] ? splice_direct_to_actor+0xbb0/0xbb0 [ 195.072149][ C0] ? fsnotify_perm+0x6a/0x5b0 [ 195.076663][ C0] ? security_file_permission+0x86/0xb0 [ 195.082040][ C0] ? rw_verify_area+0xa7/0x1c0 [ 195.086644][ C0] do_sendfile+0x613/0xfe0 [ 195.090903][ C0] ? do_preadv+0x350/0x350 [ 195.095160][ C0] ? xfd_validate_state+0x6f/0x170 [ 195.100103][ C0] __x64_sys_sendfile64+0x1ce/0x230 [ 195.105131][ C0] ? __ia32_sys_sendfile+0x240/0x240 [ 195.110252][ C0] ? switch_fpu_return+0xe/0x10 [ 195.114937][ C0] ? exit_to_user_mode_prepare+0x7e/0xa0 [ 195.120409][ C0] x64_sys_call+0x140/0x9a0 [ 195.124744][ C0] do_syscall_64+0x3b/0xb0 [ 195.128996][ C0] ? clear_bhb_loop+0x55/0xb0 [ 195.133509][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 195.139237][ C0] RIP: 0033:0x7f34d4b8d169 [ 195.143494][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 195.163030][ C0] RSP: 002b:00007f34d5a12038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 195.171284][ C0] RAX: ffffffffffffffda RBX: 00007f34d4da6080 RCX: 00007f34d4b8d169 [ 195.179087][ C0] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 195.186897][ C0] RBP: 00007f34d4c0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 195.194713][ C0] R10: 000000008010002b R11: 0000000000000246 R12: 0000000000000000 [ 195.202519][ C0] R13: 0000000000000000 R14: 00007f34d4da6080 R15: 00007fff71df6778 [ 195.210337][ C0] [ 195.213196][ C0] [ 195.215366][ C0] Allocated by task 616: [ 195.219449][ C0] kasan_set_track+0x4b/0x70 [ 195.223873][ C0] kasan_save_alloc_info+0x1f/0x30 [ 195.228818][ C0] __kasan_kmalloc+0x9c/0xb0 [ 195.233247][ C0] kmalloc_trace+0x44/0xa0 [ 195.237498][ C0] kernfs_fop_open+0x70e/0xb10 [ 195.242098][ C0] do_dentry_open+0x891/0x1250 [ 195.246698][ C0] vfs_open+0x73/0x80 [ 195.250517][ C0] path_openat+0x2532/0x2d60 [ 195.254942][ C0] do_filp_open+0x230/0x480 [ 195.259288][ C0] do_sys_openat2+0x151/0x870 [ 195.263807][ C0] __x64_sys_openat+0x243/0x290 [ 195.268486][ C0] x64_sys_call+0x6bf/0x9a0 [ 195.272823][ C0] do_syscall_64+0x3b/0xb0 [ 195.277076][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 195.282806][ C0] [ 195.284973][ C0] Freed by task 40: [ 195.288619][ C0] kasan_set_track+0x4b/0x70 [ 195.293047][ C0] kasan_save_free_info+0x2b/0x40 [ 195.297908][ C0] ____kasan_slab_free+0x131/0x180 [ 195.302865][ C0] __kasan_slab_free+0x11/0x20 [ 195.307457][ C0] kmem_cache_free_bulk+0x59c/0x780 [ 195.312489][ C0] kfree_rcu_work+0x2ae/0x760 [ 195.317004][ C0] process_one_work+0x73d/0xcb0 [ 195.321696][ C0] worker_thread+0xa60/0x1260 [ 195.326204][ C0] kthread+0x26d/0x300 [ 195.330110][ C0] ret_from_fork+0x1f/0x30 [ 195.334364][ C0] [ 195.336532][ C0] Last potentially related work creation: [ 195.342085][ C0] kasan_save_stack+0x3b/0x60 [ 195.346603][ C0] __kasan_record_aux_stack+0xb4/0xc0 [ 195.351804][ C0] kasan_record_aux_stack_noalloc+0xb/0x10 [ 195.357451][ C0] kvfree_call_rcu+0x9f/0x800 [ 195.361959][ C0] kernfs_unlink_open_file+0x327/0x3d0 [ 195.367254][ C0] kernfs_fop_release+0x253/0x310 [ 195.372115][ C0] __fput+0x1e5/0x870 [ 195.375933][ C0] ____fput+0x15/0x20 [ 195.379754][ C0] task_work_run+0x24d/0x2e0 [ 195.384181][ C0] exit_to_user_mode_loop+0x94/0xa0 [ 195.389303][ C0] exit_to_user_mode_prepare+0x5a/0xa0 [ 195.394597][ C0] syscall_exit_to_user_mode+0x26/0x130 [ 195.399977][ C0] do_syscall_64+0x47/0xb0 [ 195.404232][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 195.409958][ C0] [ 195.412194][ C0] Second to last potentially related work creation: [ 195.418551][ C0] kasan_save_stack+0x3b/0x60 [ 195.423063][ C0] __kasan_record_aux_stack+0xb4/0xc0 [ 195.428272][ C0] kasan_record_aux_stack_noalloc+0xb/0x10 [ 195.433914][ C0] kvfree_call_rcu+0x9f/0x800 [ 195.438428][ C0] kernfs_unlink_open_file+0x327/0x3d0 [ 195.443721][ C0] kernfs_fop_release+0x253/0x310 [ 195.448590][ C0] __fput+0x1e5/0x870 [ 195.452399][ C0] ____fput+0x15/0x20 [ 195.456222][ C0] task_work_run+0x24d/0x2e0 [ 195.460654][ C0] exit_to_user_mode_loop+0x94/0xa0 [ 195.465680][ C0] exit_to_user_mode_prepare+0x5a/0xa0 [ 195.471064][ C0] syscall_exit_to_user_mode+0x26/0x130 [ 195.476445][ C0] do_syscall_64+0x47/0xb0 [ 195.480700][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 195.486425][ C0] [ 195.488599][ C0] The buggy address belongs to the object at ffff88813a325480 [ 195.488599][ C0] which belongs to the cache kmalloc-96 of size 96 [ 195.502307][ C0] The buggy address is located 0 bytes inside of [ 195.502307][ C0] 96-byte region [ffff88813a325480, ffff88813a3254e0) [ 195.515155][ C0] [ 195.517324][ C0] The buggy address belongs to the physical page: [ 195.523594][ C0] page:ffffea0004e8c940 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x13a325 [ 195.533640][ C0] flags: 0x4000000000000200(slab|zone=1) [ 195.539116][ C0] raw: 4000000000000200 ffffea0004275580 dead000000000006 ffff888100042900 [ 195.547541][ C0] raw: 0000000000000000 0000000000200020 00000001ffffffff 0000000000000000 [ 195.555943][ C0] page dumped because: kasan: bad access detected [ 195.562201][ C0] page_owner tracks the page as allocated [ 195.567749][ C0] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY), pid 1640, tgid 1639 (syz.0.568), ts 44220866278, free_ts 44220380352 [ 195.585543][ C0] post_alloc_hook+0x213/0x220 [ 195.590145][ C0] prep_new_page+0x1b/0x110 [ 195.594483][ C0] get_page_from_freelist+0x3a98/0x3b10 [ 195.599864][ C0] __alloc_pages+0x234/0x610 [ 195.604291][ C0] alloc_slab_page+0x6c/0xf0 [ 195.608715][ C0] new_slab+0x90/0x3e0 [ 195.612620][ C0] ___slab_alloc+0x6f9/0xb80 [ 195.617050][ C0] __slab_alloc+0x5d/0xa0 [ 195.621212][ C0] __kmem_cache_alloc_node+0x207/0x2a0 [ 195.626526][ C0] __kmalloc+0xa3/0x1e0 [ 195.630500][ C0] tracepoint_add_func+0x26e/0x940 [ 195.635451][ C0] tracepoint_probe_register_prio_may_exist+0x11c/0x180 [ 195.642218][ C0] bpf_probe_register+0x152/0x1e0 [ 195.647081][ C0] bpf_raw_tp_link_attach+0x456/0x6b0 [ 195.652295][ C0] bpf_raw_tracepoint_open+0x22d/0x4a0 [ 195.657584][ C0] __sys_bpf+0x4f5/0x7f0 [ 195.661662][ C0] page last free stack trace: [ 195.666176][ C0] free_unref_page_prepare+0x9f1/0xa00 [ 195.671468][ C0] free_unref_page+0xb2/0x5c0 [ 195.675980][ C0] __free_pages+0x61/0xf0 [ 195.680151][ C0] __vunmap+0x9c6/0xb80 [ 195.684142][ C0] vfree+0x5c/0x80 [ 195.687701][ C0] bpf_check+0x1189e/0x17ed0 [ 195.692125][ C0] bpf_prog_load+0x1304/0x1bf0 [ 195.696725][ C0] __sys_bpf+0x52c/0x7f0 [ 195.700804][ C0] __x64_sys_bpf+0x7c/0x90 [ 195.705059][ C0] x64_sys_call+0x87f/0x9a0 [ 195.709417][ C0] do_syscall_64+0x3b/0xb0 [ 195.713649][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 195.719382][ C0] [ 195.721547][ C0] Memory state around the buggy address: [ 195.727024][ C0] ffff88813a325380: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 195.734917][ C0] ffff88813a325400: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 195.742820][ C0] >ffff88813a325480: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 195.750711][ C0] ^ [ 195.754619][ C0] ffff88813a325500: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 195.762519][ C0] ffff88813a325580: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 195.770414][ C0] ================================================================== [ 195.778383][ C0] Disabling lock debugging due to kernel taint [ 195.807891][ T28] kauditd_printk_skb: 63 callbacks suppressed [ 195.807908][ T28] audit: type=1400 audit(1742927580.236:3693): avc: denied { unmount } for pid=11290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 195.835468][T11290] EXT4-fs (loop9): unmounting filesystem. [ 195.927554][ T40] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 196.107519][ T40] usb 5-1: Using ep0 maxpacket: 32 [ 196.113709][ T40] usb 5-1: config 0 has an invalid interface number: 108 but max is 0 [ 196.121944][ T40] usb 5-1: config 0 has no interface number 0 [ 196.127965][ T40] usb 5-1: config 0 interface 108 has no altsetting 0 [ 196.135865][ T40] usb 5-1: New USB device found, idVendor=99fa, idProduct=8988, bcdDevice=65.cd [ 196.144739][ T40] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.152539][ T40] usb 5-1: Product: syz [ 196.156497][ T40] usb 5-1: Manufacturer: syz [ 196.160951][ T40] usb 5-1: SerialNumber: syz [ 196.166191][ T40] usb 5-1: config 0 descriptor?? [ 196.372558][ T28] audit: type=1400 audit(1742927580.796:3694): avc: denied { write } for pid=11995 comm="syz.4.5113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 196.373096][T11996] netlink: 100 bytes leftover after parsing attributes in process `syz.4.5113'. [ 196.392706][ T28] audit: type=1400 audit(1742927580.796:3695): avc: denied { nlmsg_write } for pid=11995 comm="syz.4.5113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 196.404811][ T40] usb 5-1: USB disconnect, device number 23 [ 196.422361][ T28] audit: type=1400 audit(1742927580.796:3696): avc: denied { nlmsg_read } for pid=11995 comm="syz.4.5113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1