last executing test programs: 18.985266286s ago: executing program 1 (id=380): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)={0x40, 0x13, 0x6, @multicast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001740)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001600)={0x40, 0x19, 0x2, "b3f0"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, &(0x7f0000000940)={0x40, 0x17, 0x1, '*'}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 15.00393306s ago: executing program 1 (id=420): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{}, &(0x7f0000000000), &(0x7f0000000180)}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000400000000dfffff1918120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r2}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = add_key$user(&(0x7f0000000080), &(0x7f0000000140)={'syz', 0x0}, &(0x7f0000000180)='5', 0x1, 0xfffffffffffffffd) keyctl$KEYCTL_MOVE(0x1e, r6, 0xfffffffffffffffb, 0xffffffffffffffff, 0x1) socket$inet6_icmp(0xa, 0x2, 0x3a) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 14.127722561s ago: executing program 1 (id=425): fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(0xffffffffffffffff, 0xf503, 0x0) removexattr(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000040)=@random={'osx.', 'system.posix_acl_access\x00'}) r0 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/igmp\x00') r1 = syz_io_uring_setup(0x4b6, &(0x7f0000000100)={0x0, 0x0, 0x400, 0x0, 0x210}, &(0x7f0000ff0000), &(0x7f0000000000)) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000040)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r1, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) pread64(r0, &(0x7f0000000140)=""/167, 0x11d, 0x4000040000038) pread64(r0, &(0x7f00000000c0)=""/87, 0x57, 0x128) fremovexattr(r0, &(0x7f00000000c0)=@random={'user.', 'system.posix_acl_access\x00'}) 13.876327936s ago: executing program 1 (id=426): syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000005700)=ANY=[@ANYBLOB="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"], 0x1, 0x550f, &(0x7f00000001c0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000180)='./file0/file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mkdir(&(0x7f0000000400)='./file1/file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', 0x0, 0x3376039, 0x0) chdir(&(0x7f00000001c0)='./bus\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000ec0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x2, 0x0) 13.476459889s ago: executing program 1 (id=433): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$SNDRV_TIMER_IOCTL_STATUS32(0xffffffffffffffff, 0x80585414, &(0x7f0000000440)) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000007e40)=[{{&(0x7f0000000340)={0xa, 0x4e20, 0x0, @dev}, 0x58, 0x0}}], 0x6c00, 0xff97) 12.841229047s ago: executing program 1 (id=437): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x128) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0xc9d7, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r5 = dup(r4) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r5}}) 12.78286553s ago: executing program 32 (id=437): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x128) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0xc9d7, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r5 = dup(r4) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r5}}) 4.283045118s ago: executing program 0 (id=531): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x40000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4010}, 0x44) ioctl$KVM_RUN(r3, 0xae80, 0x0) 4.060632061s ago: executing program 3 (id=534): syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f00000001c0), 0x83, 0x4bc, &(0x7f0000000a40)="$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") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r2}, 0x10) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r3 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r3, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x1200, 0x0, 0x3) 3.973183807s ago: executing program 0 (id=536): r0 = creat(&(0x7f00000005c0)='./file0\x00', 0x0) close(r0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r3}, 0x10) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 3.972477146s ago: executing program 3 (id=537): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000400"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{}, &(0x7f0000000000), &(0x7f0000000180)}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000400000000dfffff1918120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000540)={[{@test_dummy_encryption}]}, 0x1, 0x236, &(0x7f0000000300)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = add_key$user(&(0x7f0000000080), &(0x7f0000000140)={'syz', 0x0}, &(0x7f0000000180)='5', 0x1, 0xfffffffffffffffd) keyctl$KEYCTL_MOVE(0x1e, r6, 0xfffffffffffffffb, 0xffffffffffffffff, 0x1) syz_io_uring_setup(0x275a, &(0x7f0000000100)={0x0, 0x4219, 0x2, 0x0, 0x167}, &(0x7f0000000640), &(0x7f00000001c0)) socket$inet6_icmp(0xa, 0x2, 0x3a) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r2, 0x0, 0xfc}, 0x18) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c000280050001000000000024000280140001"], 0x64}}, 0x0) 3.022841482s ago: executing program 0 (id=541): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) setitimer(0x2, 0x0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x4) ioctl$sock_bt_hci(r0, 0x400448e1, &(0x7f0000000300)) 2.922818118s ago: executing program 2 (id=543): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800001965ba917c62e1e6902300000000000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='br_fdb_add\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='br_fdb_add\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000001c000100000000000000000007000000", @ANYRES32=r4, @ANYBLOB="4000aa000a0002"], 0x28}}, 0x0) 2.854337652s ago: executing program 2 (id=546): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000400"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{}, &(0x7f0000000000), &(0x7f0000000180)}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000400000000dfffff1918120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000540)={[{@test_dummy_encryption}]}, 0x1, 0x236, &(0x7f0000000300)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = add_key$user(&(0x7f0000000080), &(0x7f0000000140)={'syz', 0x0}, &(0x7f0000000180)='5', 0x1, 0xfffffffffffffffd) keyctl$KEYCTL_MOVE(0x1e, r6, 0xfffffffffffffffb, 0xffffffffffffffff, 0x1) syz_io_uring_setup(0x275a, &(0x7f0000000100)={0x0, 0x4219, 0x2, 0x0, 0x167}, &(0x7f0000000640), &(0x7f00000001c0)) socket$inet6_icmp(0xa, 0x2, 0x3a) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r2, 0x0, 0xfc}, 0x18) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c000280050001000000000024000280140001"], 0x64}}, 0x0) 2.701647521s ago: executing program 3 (id=549): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000400"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{}, &(0x7f0000000000), &(0x7f0000000180)}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b0000000000000000000000008000000000", @ANYRES32], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000400000000dfffff1918120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000540)={[{@test_dummy_encryption}]}, 0x1, 0x236, &(0x7f0000000300)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = add_key$user(&(0x7f0000000080), &(0x7f0000000140)={'syz', 0x0}, &(0x7f0000000180)='5', 0x1, 0xfffffffffffffffd) keyctl$KEYCTL_MOVE(0x1e, r6, 0xfffffffffffffffb, 0xffffffffffffffff, 0x1) syz_io_uring_setup(0x275a, &(0x7f0000000100)={0x0, 0x4219, 0x2, 0x0, 0x167}, &(0x7f0000000640), &(0x7f00000001c0)) socket$inet6_icmp(0xa, 0x2, 0x3a) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r2, 0x0, 0xfc}, 0x18) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c000280050001000000000024000280140001"], 0x64}}, 0x0) 1.428333155s ago: executing program 2 (id=550): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{}, 0x0, &(0x7f0000000180)}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000", @ANYRES32], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r0}, 0x10) mkdirat(0xffffffffffffff9c, 0x0, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = add_key$user(&(0x7f0000000080), &(0x7f0000000140)={'syz', 0x0}, &(0x7f0000000180)='5', 0x1, 0xfffffffffffffffd) keyctl$KEYCTL_MOVE(0x1e, r4, 0xfffffffffffffffb, 0xffffffffffffffff, 0x1) syz_io_uring_setup(0x275a, &(0x7f0000000100)={0x0, 0x4219, 0x2, 0x0, 0x167}, &(0x7f0000000640), &(0x7f00000001c0)) socket$inet6_icmp(0xa, 0x2, 0x3a) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r0, 0x0, 0xfc}, 0x18) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 1.427006476s ago: executing program 3 (id=551): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x4) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000540)={0x0, 0x0, 0x0, &(0x7f00000002c0)=""/138, 0x0}) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000740)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140)={0x1, r2}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000940)) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x20000) getrandom(&(0x7f0000000340)=""/4080, 0xfffffef0, 0x0) 1.415459266s ago: executing program 4 (id=552): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000f0a9c8085000000040000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000180000003d030100000000009500f000000000006926000000000000bf67000000000000560602000fff07006706000020000000170200000ee60000bf050000000000002d350000000000006507000002080000070700004c0000001f75000000000000bf54000000000000070400000400f9ffad35010000000000840400000000000014000000000000009500000000000000db13d5d8b741f2cdaabc83df03395287fd51a700ea6553f304000000815dcf00c3eebc52267b042d196bde7c382d21ff79a8583a7482c5994747e19325b1ee980cbd800d845dacbcf5ad8cdbc7abf9"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000240)='./file0\x00', 0x18000, &(0x7f0000002f40)=ANY=[@ANYRES8=0x0, @ANYRES16, @ANYRES16=0x0, @ANYRESDEC, @ANYRES32, @ANYRES32], 0x1, 0x2ee, &(0x7f00000006c0)="$eJzs3M9PE1sUwPHTH5S2BMri5b28l7xwoxvdTKC6VhoDibGJBKnxR2IywFSbji2ZaTA1RnTl1vhHuCAs2ZEo/wAbd7px446NiQtZGMd0OkNpGUBKaRG+n4TMYe49nXtnBnLuhGHzzuvHxbyt5fWKhONKQiIiWyLDEhZfyNuG3TgmO72QiwPfPv5/6+69G5lsdmJaqcnMzKW0Umpo5N2TZwmv21q/bAw/2Pya/rLx98a/mz9nHhVsVbBVqVxRupotf67os6ah5gt2UVNqyjR021CFkm1Y9fZyvT1vlhcWqkovzQ8mFyzDtpVeqqqiUVWVsqpYVRV5qBdKStM0NZgUHCS3PD2tZ9pMnuvwYHBMLCujR0Qksaslt9yTAQEAgJ5qrf/DojpZ/6+cW68M3F4d8ur/tVhQ/X/5U/2zmur/uIgE1v/+8QPrf/1w9f/uiuhsOVL9j5NhJLZrV6gR1hqtjJ70fn5dL++vjLoB9T8AAAAAAAAAAAAAAAAAAAAAAH+CLcdJOY6T8rf+V7+IxEXE/z4gNSIiV3swZHTQEa4/ToHGi3vRIRHz1WJuMVffeh3WRcQUQ0YlJT/c+8FTi/03j1TNsLw3l7z8pcVcxG3J5KXg5o9Jqk9a8x1n8np2YkzVNef3SXJnflpS8ldwfjowPyYXzu/I1yQlH+akLKbMu+No5D8fU+razWxLfsLtBwAAAADAaaCpbYHrd03bq72ev72+bn0+EGmsr0cD1+dR+S/a27kDAAAAAHBW2NWnRd00DWufICEH92k/iB7TJ/sz/N0s/28Zjm+m+wT+wZua4t7Ojp+W0CFOyx5BWNrJGqnNRh11Fv5jo736yNR4965g0zD+efP2e+cOcWU1fsBM2w8i+98AfV37BQQAAACgaxpFv79nvLcDAgAAAAAAAAAAAAAAAAAAAAAAAAAAAADgDOrGv0nr9RwBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAk+JXAAAA//+qDgR1") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f00000002c0)=ANY=[@ANYRES8=r1], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETKMSGREDIRECT(r2, 0x541c, &(0x7f0000000000)) 1.256429346s ago: executing program 4 (id=553): pipe2(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000380)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x24, 0x0, &(0x7f00000004c0)) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 939.933004ms ago: executing program 0 (id=554): pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffffed7a00000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000740)=ANY=[@ANYBLOB="5001"], 0x150) write$FUSE_OPEN(r2, &(0x7f0000000280)={0x20}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) 906.965946ms ago: executing program 0 (id=555): openat$pfkey(0xffffffffffffff9c, 0x0, 0x80, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x18, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000200009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r2, r4, 0x25, 0x0, @val=@netfilter}, 0x40) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r4}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 859.229189ms ago: executing program 4 (id=556): r0 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @multicast1}, {0x1, @local}, 0x4a, {0x2, 0x4e23, @dev}}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x4e, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000b40)=""/119, 0x77}, {&(0x7f0000000bc0)=""/95, 0x5f}], 0x2, 0x4000ffe, 0x0) 798.188903ms ago: executing program 5 (id=558): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000010000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) removexattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)=ANY=[@ANYBLOB='o']) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x2a442, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000600)={0xa}) syz_fuse_handle_req(r0, &(0x7f00000006c0)="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", 0x2000, &(0x7f0000003280)={&(0x7f0000000340)={0x50, 0xffffffffffffffda, 0x9, {0x7, 0x29, 0x47b, 0x40, 0xf80b, 0x0, 0x8, 0xb6, 0x0, 0x0, 0x4, 0x2}}, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x18, 0x0, 0x4, {0x9}}, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002780)={0x20, 0x0, 0x75560054, {0x0, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x4000001) 732.360856ms ago: executing program 3 (id=559): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002780), &(0x7f00000027c0)='./file0\x00', 0x0, &(0x7f0000002800)=ANY=[@ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000020000,us', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x6, 0xc, 0xffffffff, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x5, &(0x7f0000000040)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x6d}, @call={0x85, 0x0, 0x0, 0x7d}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0xad, &(0x7f00000003c0)=""/173, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) getresgid(0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12015b014813442024040075ee6901020301090224"], 0x0) 731.991586ms ago: executing program 4 (id=560): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x7fa962bfffff, 0x13012, r1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) sendto$inet6(r0, &(0x7f0000002380)="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", 0xfffffed0, 0x400c881, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffff29}, &(0x7f0000000000)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000440)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000480)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000180)=0x40) 726.193567ms ago: executing program 4 (id=561): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x0, 0x3, 0x0, @void, @value}, 0x28) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000001200)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x40, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f000049c000/0x18000)=nil, &(0x7f0000000400)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000640)=0x4) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b, 0x0, 0x9, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 694.293878ms ago: executing program 0 (id=562): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000400"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{}, &(0x7f0000000000), &(0x7f0000000180)}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000400000000dfffff1918120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000540)={[{@test_dummy_encryption}]}, 0x1, 0x236, &(0x7f0000000300)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = add_key$user(&(0x7f0000000080), &(0x7f0000000140)={'syz', 0x0}, &(0x7f0000000180)='5', 0x1, 0xfffffffffffffffd) keyctl$KEYCTL_MOVE(0x1e, r6, 0xfffffffffffffffb, 0xffffffffffffffff, 0x1) syz_io_uring_setup(0x275a, &(0x7f0000000100)={0x0, 0x4219, 0x2, 0x0, 0x167}, &(0x7f0000000640), &(0x7f00000001c0)) socket$inet6_icmp(0xa, 0x2, 0x3a) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r2, 0x0, 0xfc}, 0x18) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c000280050001000000000024000280140001"], 0x64}}, 0x0) 662.09616ms ago: executing program 4 (id=563): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_emit_ethernet(0x36, &(0x7f0000000080)={@link_local, @random="50a245d5cde0", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @broadcast}, @timestamp_reply={0x11, 0x0, 0x0, 0x0, 0xa, 0x9}}}}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x60, 0x0, 0x0, 0x0, 0xee01}, {}, {}, 0x4}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x11c2, 0x2208, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xc}}}}}]}}]}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x9}}}, 0xb8}}, 0x4000) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_LOG_BASE(0xffffffffffffffff, 0x4008af00, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x11, 0x2b, &(0x7f0000000480)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1, 0x8031, 0xffffffffffffffff, 0x0) 646.854121ms ago: executing program 5 (id=564): bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdir(0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4016, &(0x7f0000000780), 0x1, 0x43c, &(0x7f0000000280)="$eJzs28tvG0UYAPBv7SR9k1CVR9MCgYKIeCRNWkoPXEAgcQAJCQ7lGJK0CnUb1ASJVhEEhMoRVeKOOCLxF3CCCwJOSFzhjipVKJcWTkZr7ya2Y7tJ6tSh/v2kbWd2x5n5vDv2zI43gJ41kv6TROyPiD8iYrCarS8wUv3v1srS9D8rS9NJlMtv/51Uyt1cWZrOi+av25dn+iIKnydxpEm9C5evnJ8qlWYvZfnxxQsfjC9cvvL83IWpc7PnZi9Onj598sTEi6cmX+hInGlcN4c/nj96+PV3r705febae798l+TxN8TRISPtDj5VLne4uu46UJNO+rrYEDalWO2m0V/p/4NRjLWTNxivfdbVxgHbqlwulx9sfXi5DNzDkuh2C4DuyL/o0/lvvt2loceOcOPl6gQojftWtlWP9EUhK9PfML/tpJGIOLP879fpFttzHwIAoM4P6fjnuWbjv0LU3he6L1tDGYqI+yPiYESciohDEfFARKXsQxHx8Cbrb1wkWT/+KVzfUmAblI7/XsrWturHf/noL4aKWe5AJf7+5OxcafZ49p6MRv+uND/Rpo4fX/39y1bHasd/6ZbWn48Fs3Zc79tV/5qZqcWpO4m51o1PI4b7msWfrK4EJBFxOCKGt1jH3DPfHm117Pbxt9GBdabyNxFPV8//cjTEn0var0+O747S7PHx/KpY79ffrr7Vqv47ir8D0vO/t+n1vxr/UFK7Xruw+Tqu/vlFyznNVq//geSdun0fTS0uXpqIGEjeqDa6dv9kQ7nJtfJp/KPHsvgH6vv/wVh7J45ERHoRPxIRj0bEY1nbH4+IJyLiWJv4f37lyfe3Fv/uNn+1M9L4ZzZ1/tcSA9G4p3mieP6n7+sqHdpo/JGd/5OV1Gi2ZyOffxtp19auZgAAAPj/KUTE/kgKY6vpQmFsrPob/kOxt1CaX1h89uz8hxdnqs8IDEV/Ib/TNVhzP3Qim9bn+cmG/InsvvFXxT2V/Nj0fGmm28FDj9vXov+n/ip2u3XAtvO8FvQu/R96l/4PvUv/h55U+ZVfk/6/pwttAbqg2ff/J11oB3D3NfR/y37QQ8z/oXfp/9C79H/oSQt74vYPyUtIrEtEYUc04x5MxI5oRrc/mQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADrjvwAAAP//qSDljg==") mkdir(&(0x7f0000000080)='./bus\x00', 0x3) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000100)=@v1={0x0, @adiantum, 0x0, @desc1}) chdir(&(0x7f0000000140)='./bus\x00') r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x194) getdents(r1, &(0x7f0000001fc0)=""/184, 0xb8) getdents(r1, 0x0, 0x0) 595.378424ms ago: executing program 5 (id=565): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="1500000065ffff001000000800395032303030"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENT(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="58000000000000009fed2788c5532994414b47034801d524faf416638217", @ANYRES32], 0x58) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000100)='./file0\x00') read$FUSE(r1, &(0x7f0000002380)={0x2020}, 0x2020) socket$inet_udplite(0x2, 0x2, 0x88) mkdir(&(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xfffe) 354.737339ms ago: executing program 2 (id=566): mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x5, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x1f, 0x80000, 0x2f0c07f996e5f8c, 0xc, 0x0, 0x0, 0x1000}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000066c0)="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", 0x2000, &(0x7f0000008b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x90, 0x0, 0x0, {0x100000000404, 0x0, 0xc, 0x0, 0x8000000, 0x0, {0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xa000, 0x0, 0x0, r2}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(r0, &(0x7f0000008bc0)={0x2020, 0x0, 0x0}, 0x2020) readlink(&(0x7f0000000000)='./file0/file0/file0/file0/file0\x00', &(0x7f0000000140)=""/176, 0xb0) write$FUSE_INIT(r0, &(0x7f0000000280)={0x50, 0x0, r3, {0x7, 0x24}}, 0x50) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000003c0)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x1000}}) close_range(r4, 0xffffffffffffffff, 0x0) 132.421221ms ago: executing program 5 (id=567): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, 0x0, &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x25dfdbff, {}, [@NHA_OIF={0x8, 0x5, r5}]}, 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x20, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x192}}, 0x20}, 0x1, 0x0, 0x0, 0x40001}, 0x0) 132.099671ms ago: executing program 3 (id=568): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000500000005000000090000000100", @ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r2, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) syz_open_procfs(0x0, &(0x7f00000000c0)='net/stat\x00') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) 124.051892ms ago: executing program 5 (id=569): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$key(0xf, 0x3, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$unix(0x1, 0x5, 0x0) socketpair(0x27, 0x1, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) write$cgroup_devices(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b2388a8"], 0xffdd) 73.081525ms ago: executing program 2 (id=570): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4, 0x0, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x4, 0x0, &(0x7f00000000c0)) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, @void, @value}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000004c0)={'wg1\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRESOCT=r1], 0x0, 0x2db4445d, 0x0, 0x0, 0x0, 0x0, '\x00', r2, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r3}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f0000000000)={'bridge0\x00', @random="010000201000"}) 351.999µs ago: executing program 2 (id=571): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_GET_NESTED_STATE(r3, 0xc080aebe, &(0x7f000000a100)={{0x0, 0x0, 0x80}}) 0s ago: executing program 5 (id=572): syz_usb_connect(0x3, 0x24, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) unshare(0x64000600) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.186' (ED25519) to the list of known hosts. [ 20.519315][ T28] audit: type=1400 audit(1740083797.655:66): avc: denied { mounton } for pid=282 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 20.520346][ T282] cgroup: Unknown subsys name 'net' [ 20.541792][ T28] audit: type=1400 audit(1740083797.655:67): avc: denied { mount } for pid=282 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 20.568696][ T28] audit: type=1400 audit(1740083797.675:68): avc: denied { unmount } for pid=282 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 20.568835][ T282] cgroup: Unknown subsys name 'devices' [ 20.709125][ T282] cgroup: Unknown subsys name 'hugetlb' [ 20.714664][ T282] cgroup: Unknown subsys name 'rlimit' [ 20.817449][ T28] audit: type=1400 audit(1740083797.945:69): avc: denied { setattr } for pid=282 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 20.841019][ T28] audit: type=1400 audit(1740083797.955:70): avc: denied { mounton } for pid=282 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 20.868766][ T28] audit: type=1400 audit(1740083797.955:71): avc: denied { mount } for pid=282 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 20.875979][ T284] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 20.901547][ T28] audit: type=1400 audit(1740083798.035:72): avc: denied { relabelto } for pid=284 comm="mkswap" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.927173][ T28] audit: type=1400 audit(1740083798.035:73): avc: denied { write } for pid=284 comm="mkswap" path="/root/swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.958129][ T28] audit: type=1400 audit(1740083798.095:74): avc: denied { read } for pid=282 comm="syz-executor" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.983723][ T28] audit: type=1400 audit(1740083798.095:75): avc: denied { open } for pid=282 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.983784][ T282] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 22.046253][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.053145][ T292] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.060555][ T292] device bridge_slave_0 entered promiscuous mode [ 22.067226][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.074163][ T292] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.081475][ T292] device bridge_slave_1 entered promiscuous mode [ 22.130646][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.137621][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.144780][ T295] device bridge_slave_0 entered promiscuous mode [ 22.161543][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.168575][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.175746][ T295] device bridge_slave_1 entered promiscuous mode [ 22.200219][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.207198][ T296] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.214453][ T296] device bridge_slave_0 entered promiscuous mode [ 22.222545][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.229440][ T296] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.236574][ T296] device bridge_slave_1 entered promiscuous mode [ 22.277719][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.284580][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.292048][ T294] device bridge_slave_0 entered promiscuous mode [ 22.308280][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.315546][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.322948][ T294] device bridge_slave_1 entered promiscuous mode [ 22.356681][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.363570][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.370809][ T293] device bridge_slave_0 entered promiscuous mode [ 22.378461][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.385307][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.392609][ T293] device bridge_slave_1 entered promiscuous mode [ 22.500213][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.507068][ T292] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.514202][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.520963][ T292] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.561015][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.567877][ T295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.574955][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.581776][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.599478][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.606321][ T296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.613442][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.620238][ T296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.646480][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.653488][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.660567][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.667365][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.680111][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.687168][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.694269][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.701660][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.709372][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.716520][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.723939][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.731055][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.738932][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 22.746213][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 22.770028][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 22.778089][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.784923][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.792285][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 22.800710][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.807561][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.840346][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 22.847842][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 22.855543][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 22.875900][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 22.883285][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 22.891596][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.898459][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.905727][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 22.914669][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.921522][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.929627][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 22.950793][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 22.959199][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 22.966876][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 22.975240][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 22.983373][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.990235][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.997627][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.005624][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.012475][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.019737][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.027795][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.034613][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.053611][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.061940][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.069888][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.077089][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 23.084810][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.092380][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.100626][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.108411][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.115556][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.123111][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.131195][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.138055][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.147982][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 23.155912][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.165342][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 23.173645][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.181811][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.189063][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.198975][ T292] device veth0_vlan entered promiscuous mode [ 23.208000][ T295] device veth0_vlan entered promiscuous mode [ 23.220082][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 23.228033][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.235815][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 23.244178][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.252428][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 23.260597][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.268364][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 23.276460][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.284561][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.291414][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.298613][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 23.306713][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.321073][ T292] device veth1_macvtap entered promiscuous mode [ 23.329415][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 23.336938][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 23.345040][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.354134][ T295] device veth1_macvtap entered promiscuous mode [ 23.371644][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 23.379192][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 23.386986][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.394995][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 23.403595][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.414206][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 23.422525][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.443820][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.451924][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.459501][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.466679][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 23.475263][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 23.483776][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 23.492463][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.500723][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 23.509065][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 23.517120][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 23.525271][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 23.533901][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 23.542162][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 23.551310][ T293] device veth0_vlan entered promiscuous mode [ 23.570624][ T292] request_module fs-gadgetfs succeeded, but still no fs? [ 23.578313][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 23.586489][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.595226][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 23.603949][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.612445][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 23.620584][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.628697][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.635987][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.643413][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.651070][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.659098][ T294] device veth0_vlan entered promiscuous mode [ 23.666436][ T296] device veth0_vlan entered promiscuous mode [ 23.678477][ T293] device veth1_macvtap entered promiscuous mode [ 23.700963][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.727522][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 23.740385][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.750241][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 23.759299][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 23.769472][ T296] device veth1_macvtap entered promiscuous mode [ 23.778472][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 23.786509][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 23.795139][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 23.804165][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 23.812731][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.822881][ T294] device veth1_macvtap entered promiscuous mode [ 23.838126][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 23.846810][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 23.856451][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 23.864675][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 23.877868][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 23.886248][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 23.911370][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 23.919728][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 23.926141][ T326] loop4: detected capacity change from 0 to 16 [ 23.953236][ T326] erofs: (device loop4): mounted with root inode @ nid 36. [ 24.000585][ T332] loop3: detected capacity change from 0 to 128 [ 24.020963][ T334] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 24.040543][ T332] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4'. [ 24.049335][ T332] device bridge_slave_1 left promiscuous mode [ 24.055394][ T332] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.063442][ T332] device bridge_slave_0 left promiscuous mode [ 24.084289][ T332] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.331240][ T348] tipc: Started in network mode [ 24.336079][ T348] tipc: Node identity 0e3158b677aa, cluster identity 4711 [ 24.343515][ T348] tipc: Enabled bearer , priority 0 [ 24.352917][ T347] tipc: Resetting bearer [ 24.366276][ T347] tipc: Disabling bearer [ 24.577407][ T24] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 24.768596][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 24.779423][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 24.789257][ T24] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 24.802260][ T24] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 24.811321][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 24.822327][ T24] usb 4-1: config 0 descriptor?? [ 24.867405][ T39] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 24.989299][ T373] loop2: detected capacity change from 0 to 256 [ 24.998265][ T318] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 25.007945][ T316] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 25.047478][ T39] usb 1-1: Using ep0 maxpacket: 16 [ 25.054271][ T39] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 25.065143][ T39] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 25.074674][ T39] usb 1-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 25.084003][ T39] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 25.092353][ T39] usb 1-1: config 0 descriptor?? [ 25.177396][ T318] usb 5-1: Using ep0 maxpacket: 32 [ 25.183571][ T318] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 25.194460][ T318] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 25.204050][ T318] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 25.212935][ T318] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 25.223579][ T318] usb 5-1: config 0 descriptor?? [ 25.229473][ T318] hub 5-1:0.0: USB hub found [ 25.236867][ T24] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 25.244739][ T24] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 25.253656][ T24] plantronics 0003:047F:FFFF.0001: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 25.377448][ T312] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 25.430213][ T318] hub 5-1:0.0: 1 port detected [ 25.499635][ T39] hid-picolcd 0003:04D8:F002.0002: unknown main item tag 0x0 [ 25.507005][ T39] hid-picolcd 0003:04D8:F002.0002: unknown main item tag 0x0 [ 25.514822][ T39] hid-picolcd 0003:04D8:F002.0002: unknown main item tag 0x0 [ 25.525253][ T39] hid-picolcd 0003:04D8:F002.0002: unknown main item tag 0x0 [ 25.533135][ T39] hid-picolcd 0003:04D8:F002.0002: unknown main item tag 0x0 [ 25.540765][ T39] hid-picolcd 0003:04D8:F002.0002: unknown main item tag 0x0 [ 25.547978][ T39] hid-picolcd 0003:04D8:F002.0002: unknown main item tag 0x0 [ 25.555137][ T39] hid-picolcd 0003:04D8:F002.0002: unknown main item tag 0x0 [ 25.562882][ T39] hid-picolcd 0003:04D8:F002.0002: unknown main item tag 0x0 [ 25.570338][ T39] hid-picolcd 0003:04D8:F002.0002: unknown main item tag 0x0 [ 25.577604][ T39] hid-picolcd 0003:04D8:F002.0002: unknown main item tag 0x0 [ 25.579831][ T312] usb 3-1: config index 0 descriptor too short (expected 45, got 36) [ 25.592967][ T312] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 25.604114][ T312] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 25.615050][ T312] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 25.627695][ T312] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 25.636512][ T312] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 25.646216][ T312] usb 3-1: config 0 descriptor?? [ 25.651142][ T39] hid-picolcd 0003:04D8:F002.0002: No report with id 0xf3 found [ 25.651287][ T373] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 25.658745][ T39] hid-picolcd 0003:04D8:F002.0002: No report with id 0xf4 found [ 25.702791][ T39] usb 1-1: USB disconnect, device number 2 [ 25.868325][ T375] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 25.876655][ T375] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 26.047166][ T318] hub 5-1:0.0: activate --> -90 [ 26.077767][ T312] plantronics 0003:047F:FFFF.0003: unknown main item tag 0xd [ 26.085774][ T312] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 26.086593][ T364] usb 4-1: USB disconnect, device number 2 [ 26.095161][ T312] plantronics 0003:047F:FFFF.0003: hiddev97,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 26.124780][ T28] kauditd_printk_skb: 59 callbacks suppressed [ 26.124794][ T28] audit: type=1400 audit(1740083803.255:135): avc: denied { read write } for pid=377 comm="syz.1.24" name="fuse" dev="devtmpfs" ino=93 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 26.153882][ T28] audit: type=1400 audit(1740083803.255:136): avc: denied { open } for pid=377 comm="syz.1.24" path="/dev/fuse" dev="devtmpfs" ino=93 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 26.237276][ T28] audit: type=1400 audit(1740083803.365:137): avc: denied { unmount } for pid=295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 26.268636][ T385] device pim6reg1 entered promiscuous mode [ 26.292749][ T39] usb 3-1: USB disconnect, device number 2 [ 26.309872][ T387] device pim6reg1 entered promiscuous mode [ 26.326973][ T389] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3832186367 (7664372734 ns) > initial count (4194322 ns). Using initial count to start timer. [ 26.404590][ T394] loop1: detected capacity change from 0 to 1024 [ 26.411302][ T394] ======================================================= [ 26.411302][ T394] WARNING: The mand mount option has been deprecated and [ 26.411302][ T394] and is ignored by this kernel. Remove the mand [ 26.411302][ T394] option from the mount to silence this warning. [ 26.411302][ T394] ======================================================= [ 26.446875][ T394] EXT4-fs: Ignoring removed nobh option [ 26.452456][ T394] EXT4-fs: Ignoring removed bh option [ 26.463107][ T394] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 26.471621][ T28] audit: type=1400 audit(1740083803.595:138): avc: denied { create } for pid=398 comm="syz.0.32" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 26.490094][ T394] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 26.515912][ T28] audit: type=1400 audit(1740083803.645:139): avc: denied { write } for pid=393 comm="syz.1.30" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 26.557524][ T28] audit: type=1400 audit(1740083803.645:140): avc: denied { add_name } for pid=393 comm="syz.1.30" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 26.578651][ T28] audit: type=1400 audit(1740083803.645:141): avc: denied { create } for pid=393 comm="syz.1.30" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 26.598743][ T28] audit: type=1400 audit(1740083803.645:142): avc: denied { read write open } for pid=393 comm="syz.1.30" path="/5/file1/bus" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 26.608798][ T404] kvm: pic: level sensitive irq not supported [ 26.621681][ T28] audit: type=1400 audit(1740083803.645:143): avc: denied { append } for pid=393 comm="syz.1.30" name="bus" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 26.630760][ T394] syz.1.30 (394) used greatest stack depth: 22184 bytes left [ 26.654373][ T28] audit: type=1400 audit(1740083803.645:144): avc: denied { map } for pid=393 comm="syz.1.30" path="/5/file1/bus" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 26.661988][ T404] kvm: pic: non byte read [ 26.723305][ T295] EXT4-fs (loop1): unmounting filesystem. [ 26.732962][ T413] loop3: detected capacity change from 0 to 512 [ 26.741041][ T413] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 26.754404][ T413] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 26.767296][ T413] EXT4-fs (loop3): 1 truncate cleaned up [ 26.773511][ T413] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 26.867244][ T294] EXT4-fs (loop3): unmounting filesystem. [ 26.883593][ T368] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 26.895417][ T368] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 26.908042][ T318] usb 5-1-port1: cannot reset (err = -71) [ 26.913804][ T19] usb 5-1: USB disconnect, device number 2 [ 26.919849][ T318] usb 5-1-port1: attempt power cycle [ 27.053446][ T364] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 27.061334][ T364] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 27.167417][ T312] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 27.347419][ T312] usb 4-1: Using ep0 maxpacket: 16 [ 27.353512][ T312] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 27.370266][ T312] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 27.381854][ T312] usb 4-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 27.390774][ T312] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 27.402783][ T312] usb 4-1: config 0 descriptor?? [ 27.418742][ T430] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 27.501279][ T468] incfs: Can't find or create .index dir in ./file0 [ 27.507972][ T468] incfs: mount failed -14 [ 27.769237][ T474] loop0: detected capacity change from 0 to 40427 [ 27.776393][ T474] F2FS-fs (loop0): heap/no_heap options were deprecated [ 27.784464][ T474] F2FS-fs (loop0): invalid crc value [ 27.790771][ T474] F2FS-fs (loop0): Found nat_bits in checkpoint [ 27.822458][ T474] F2FS-fs (loop0): Start checkpoint disabled! [ 27.829483][ T474] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 27.839087][ T312] input: HID 05ac:8241 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:05AC:8241.0005/input/input5 [ 27.840167][ T364] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 27.863033][ T474] syz.0.62: attempt to access beyond end of device [ 27.863033][ T474] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 27.910727][ T314] kworker/u4:3: attempt to access beyond end of device [ 27.910727][ T314] loop0: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 27.930027][ T312] appleir 0003:05AC:8241.0005: input,hiddev96,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.3-1/input0 [ 28.022607][ T481] loop1: detected capacity change from 0 to 512 [ 28.030543][ T481] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 28.042658][ T481] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 28.052811][ T481] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 28.063076][ T364] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 28.074114][ T364] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 28.084190][ T481] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 28.092803][ T364] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 28.102179][ T481] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c040e018, mo2=0000] [ 28.117460][ T364] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 28.126166][ T481] EXT4-fs (loop1): orphan cleanup on readonly fs [ 28.137018][ T364] usb 5-1: config 0 descriptor?? [ 28.146274][ T481] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.64: bg 0: block 34: padding at end of block bitmap is not set [ 28.162759][ T481] EXT4-fs error (device loop1): ext4_acquire_dquot:6781: comm syz.1.64: Failed to acquire dquot type 1 [ 28.178033][ T481] EXT4-fs (loop1): 1 truncate cleaned up [ 28.183871][ T481] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 28.213416][ T481] syz.1.64 (481) used greatest stack depth: 20616 bytes left [ 28.213809][ T295] EXT4-fs (loop1): unmounting filesystem. [ 28.565027][ T364] pyra 0003:1E7D:2CF6.0006: hidraw1: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.4-1/input0 [ 28.868678][ T499] device pim6reg1 entered promiscuous mode [ 29.165144][ T364] pyra 0003:1E7D:2CF6.0006: couldn't init struct pyra_device [ 29.173116][ T364] pyra 0003:1E7D:2CF6.0006: couldn't install mouse [ 29.180564][ T364] pyra: probe of 0003:1E7D:2CF6.0006 failed with error -32 [ 29.189514][ T511] loop0: detected capacity change from 0 to 128 [ 29.192168][ T364] usb 5-1: USB disconnect, device number 7 [ 29.206514][ T511] EXT4-fs (loop0): Test dummy encryption mode enabled [ 29.216835][ T511] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 29.225674][ T511] ext4 filesystem being mounted at /21/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 29.433458][ T517] netlink: 8 bytes leftover after parsing attributes in process `syz.0.73'. [ 29.442163][ T517] netlink: 12 bytes leftover after parsing attributes in process `syz.0.73'. [ 29.451115][ T517] netlink: 16 bytes leftover after parsing attributes in process `syz.0.73'. [ 29.459761][ T517] netlink: 16 bytes leftover after parsing attributes in process `syz.0.73'. [ 29.535785][ T520] loop3: detected capacity change from 0 to 512 [ 29.542405][ T520] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 29.550785][ T520] EXT4-fs (loop3): invalid journal inode [ 29.556259][ T520] EXT4-fs (loop3): can't get journal size [ 29.563031][ T520] EXT4-fs (loop3): 1 truncate cleaned up [ 29.568700][ T520] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 29.598978][ T294] EXT4-fs (loop3): unmounting filesystem. [ 29.911450][ T544] netlink: 24 bytes leftover after parsing attributes in process `syz.2.85'. [ 29.968409][ T24] usb 4-1: USB disconnect, device number 3 [ 30.035193][ T293] EXT4-fs (loop0): unmounting filesystem. [ 30.083237][ T556] netlink: 4 bytes leftover after parsing attributes in process `syz.0.90'. [ 30.125749][ T559] loop0: detected capacity change from 0 to 128 [ 30.157049][ T541] loop4: detected capacity change from 0 to 131072 [ 30.157667][ T559] syz.0.91: attempt to access beyond end of device [ 30.157667][ T559] loop0: rw=0, sector=121, nr_sectors = 120 limit=128 [ 30.164926][ T541] F2FS-fs (loop4): Wrong NAT boundary, start(2560) end(9728) blocks(1024) [ 30.185165][ T541] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 30.196925][ T541] F2FS-fs (loop4): invalid crc value [ 30.202925][ T314] kworker/u4:3: attempt to access beyond end of device [ 30.202925][ T314] loop0: rw=1, sector=241, nr_sectors = 800 limit=128 [ 30.203882][ T541] F2FS-fs (loop4): Found nat_bits in checkpoint [ 30.269254][ T541] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 30.276334][ T541] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 30.470417][ T572] loop3: detected capacity change from 0 to 1024 [ 30.477604][ T572] EXT4-fs: Ignoring removed oldalloc option [ 30.494508][ T572] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 30.520032][ T294] EXT4-fs (loop3): unmounting filesystem. [ 30.545541][ T583] loop3: detected capacity change from 0 to 256 [ 30.572317][ T585] loop4: detected capacity change from 0 to 128 [ 30.579070][ T585] EXT4-fs (loop4): Test dummy encryption mode enabled [ 30.590960][ T585] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 30.599607][ T585] ext4 filesystem being mounted at /15/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 30.776221][ T592] netlink: 8 bytes leftover after parsing attributes in process `syz.4.100'. [ 30.784937][ T592] netlink: 12 bytes leftover after parsing attributes in process `syz.4.100'. [ 30.793748][ T592] netlink: 16 bytes leftover after parsing attributes in process `syz.4.100'. [ 30.802536][ T592] netlink: 16 bytes leftover after parsing attributes in process `syz.4.100'. [ 30.885761][ T595] syz.2.101 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 31.320401][ T610] device wg2 entered promiscuous mode [ 31.341360][ T612] loop0: detected capacity change from 0 to 512 [ 31.349481][ T612] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 31.378275][ T614] loop1: detected capacity change from 0 to 512 [ 31.379598][ T612] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 31.393248][ T612] ext4 filesystem being mounted at /31/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 31.396263][ T614] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 31.441210][ T614] EXT4-fs (loop1): 1 truncate cleaned up [ 31.447297][ T292] EXT4-fs (loop4): unmounting filesystem. [ 31.453344][ T614] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 31.464449][ T293] EXT4-fs (loop0): unmounting filesystem. [ 31.494465][ T614] syz.1.108 (pid 614) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 31.572698][ T295] EXT4-fs (loop1): unmounting filesystem. [ 31.625847][ T636] loop1: detected capacity change from 0 to 128 [ 31.916060][ T643] loop3: detected capacity change from 0 to 128 [ 31.931236][ T643] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 31.943372][ T643] ext4 filesystem being mounted at /19/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 31.961675][ T10] kworker/u4:1: attempt to access beyond end of device [ 31.961675][ T10] loop1: rw=1, sector=145, nr_sectors = 432 limit=128 [ 31.976021][ T643] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 31.989747][ T28] kauditd_printk_skb: 58 callbacks suppressed [ 31.989761][ T28] audit: type=1400 audit(1740083809.125:201): avc: denied { write } for pid=642 comm="syz.3.118" name="encrypted_dir" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 32.019168][ T643] fscrypt: loop3: 1 inode(s) still busy after removing key with identifier 69b2f6edeee720cce0577937eb8a6751, including ino 12 [ 32.021374][ T650] loop4: detected capacity change from 0 to 128 [ 32.034221][ T28] audit: type=1400 audit(1740083809.125:202): avc: denied { add_name } for pid=642 comm="syz.3.118" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 32.059886][ T650] EXT4-fs (loop4): Test dummy encryption mode enabled [ 32.061691][ T28] audit: type=1400 audit(1740083809.125:203): avc: denied { create } for pid=642 comm="syz.3.118" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 32.075776][ T650] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 32.086965][ T28] audit: type=1400 audit(1740083809.165:204): avc: denied { read } for pid=642 comm="syz.3.118" name="file0" dev="loop3" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 32.117380][ T650] ext4 filesystem being mounted at /18/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 32.118258][ T294] EXT4-fs (loop3): unmounting filesystem. [ 32.141518][ T28] audit: type=1400 audit(1740083809.275:205): avc: denied { create } for pid=653 comm="syz.1.121" name="#9" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 32.162383][ T28] audit: type=1400 audit(1740083809.275:206): avc: denied { link } for pid=653 comm="syz.1.121" name="#9" dev="tmpfs" ino=166 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 32.184594][ T28] audit: type=1400 audit(1740083809.275:207): avc: denied { rename } for pid=653 comm="syz.1.121" name="#a" dev="tmpfs" ino=166 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 32.217662][ T656] bridge: RTM_NEWNEIGH with invalid ether address [ 32.297952][ T662] loop3: detected capacity change from 0 to 1024 [ 32.308924][ T662] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 32.557692][ T28] audit: type=1400 audit(1740083809.675:208): avc: denied { execute } for pid=661 comm="syz.3.125" path="/21/file1/bus" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 32.586082][ T28] audit: type=1400 audit(1740083809.715:209): avc: denied { mounton } for pid=671 comm="syz.0.126" path="/33/file0" dev="tmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 32.598274][ T662] syz.3.125 (662) used greatest stack depth: 19624 bytes left [ 32.616820][ T294] EXT4-fs (loop3): unmounting filesystem. [ 32.631849][ T28] audit: type=1400 audit(1740083809.765:210): avc: denied { mount } for pid=673 comm="syz.3.127" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 32.668434][ T677] loop3: detected capacity change from 0 to 128 [ 32.675117][ T677] EXT4-fs (loop3): Test dummy encryption mode enabled [ 32.682651][ T677] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 32.691240][ T677] ext4 filesystem being mounted at /23/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 33.004528][ T595] Bluetooth: hci0: Opcode 0x080f failed: -110 [ 33.068190][ T292] EXT4-fs (loop4): unmounting filesystem. [ 33.090836][ T689] loop4: detected capacity change from 0 to 256 [ 33.103383][ T689] FAT-fs (loop4): Directory bread(block 64) failed [ 33.109857][ T689] FAT-fs (loop4): Directory bread(block 65) failed [ 33.116306][ T689] FAT-fs (loop4): Directory bread(block 66) failed [ 33.121019][ T686] loop2: detected capacity change from 0 to 512 [ 33.122777][ T689] FAT-fs (loop4): Directory bread(block 67) failed [ 33.135221][ T689] FAT-fs (loop4): Directory bread(block 68) failed [ 33.141817][ T689] FAT-fs (loop4): Directory bread(block 69) failed [ 33.148350][ T689] FAT-fs (loop4): Directory bread(block 70) failed [ 33.150365][ T686] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 33.154723][ T689] FAT-fs (loop4): Directory bread(block 71) failed [ 33.163910][ T686] ext4 filesystem being mounted at /23/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 33.169992][ T689] FAT-fs (loop4): Directory bread(block 72) failed [ 33.186894][ T689] FAT-fs (loop4): Directory bread(block 73) failed [ 33.241898][ T296] EXT4-fs (loop2): unmounting filesystem. [ 33.350570][ T695] loop2: detected capacity change from 0 to 512 [ 33.356927][ T695] EXT4-fs: Ignoring removed nobh option [ 33.369488][ T695] EXT4-fs error (device loop2): ext4_do_update_inode:5226: inode #3: comm syz.2.133: corrupted inode contents [ 33.381366][ T695] EXT4-fs (loop2): Remounting filesystem read-only [ 33.387868][ T695] EXT4-fs error (device loop2): ext4_dirty_inode:6091: inode #3: comm syz.2.133: mark_inode_dirty error [ 33.399365][ T695] EXT4-fs (loop2): Remounting filesystem read-only [ 33.406275][ T695] EXT4-fs error (device loop2): ext4_do_update_inode:5226: inode #3: comm syz.2.133: corrupted inode contents [ 33.418038][ T695] EXT4-fs (loop2): Remounting filesystem read-only [ 33.424520][ T695] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #3: comm syz.2.133: mark_inode_dirty error [ 33.435804][ T695] EXT4-fs (loop2): Remounting filesystem read-only [ 33.442640][ T695] EXT4-fs error (device loop2): ext4_acquire_dquot:6781: comm syz.2.133: Failed to acquire dquot type 0 [ 33.453811][ T695] EXT4-fs (loop2): Remounting filesystem read-only [ 33.460662][ T695] EXT4-fs error (device loop2): ext4_do_update_inode:5226: inode #16: comm syz.2.133: corrupted inode contents [ 33.472293][ T24] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 33.472741][ T695] EXT4-fs (loop2): Remounting filesystem read-only [ 33.485979][ T695] EXT4-fs error (device loop2): ext4_dirty_inode:6091: inode #16: comm syz.2.133: mark_inode_dirty error [ 33.497857][ T695] EXT4-fs (loop2): Remounting filesystem read-only [ 33.504371][ T695] EXT4-fs error (device loop2): ext4_do_update_inode:5226: inode #16: comm syz.2.133: corrupted inode contents [ 33.516814][ T695] EXT4-fs (loop2): Remounting filesystem read-only [ 33.523329][ T695] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #16: comm syz.2.133: mark_inode_dirty error [ 33.535066][ T695] EXT4-fs (loop2): Remounting filesystem read-only [ 33.541707][ T695] EXT4-fs error (device loop2): ext4_do_update_inode:5226: inode #16: comm syz.2.133: corrupted inode contents [ 33.564252][ T294] EXT4-fs (loop3): unmounting filesystem. [ 33.566903][ T695] EXT4-fs (loop2): Remounting filesystem read-only [ 33.576825][ T695] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 33.585711][ T695] EXT4-fs (loop2): Remounting filesystem read-only [ 33.592474][ T695] EXT4-fs error (device loop2): ext4_do_update_inode:5226: inode #16: comm syz.2.133: corrupted inode contents [ 33.604836][ T695] EXT4-fs (loop2): Remounting filesystem read-only [ 33.612018][ T695] EXT4-fs error (device loop2): ext4_truncate:4313: inode #16: comm syz.2.133: mark_inode_dirty error [ 33.623423][ T695] EXT4-fs (loop2): Remounting filesystem read-only [ 33.630016][ T695] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 33.639940][ T695] EXT4-fs (loop2): Remounting filesystem read-only [ 33.654876][ T695] EXT4-fs (loop2): 1 truncate cleaned up [ 33.661697][ T695] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 33.671492][ T695] ext4 filesystem being mounted at /25/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 33.674604][ T709] loop0: detected capacity change from 0 to 512 [ 33.681861][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 33.685823][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 33.704274][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 33.714100][ T709] EXT4-fs: Ignoring removed bh option [ 33.714374][ T24] usb 5-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 33.727673][ T709] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 33.729443][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.750663][ T24] usb 5-1: config 0 descriptor?? [ 33.834649][ T296] EXT4-fs (loop2): unmounting filesystem. [ 33.852953][ T709] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2809: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 33.868924][ T709] EXT4-fs (loop0): 1 truncate cleaned up [ 33.874506][ T709] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 33.934358][ T709] syz.0.137[709] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 33.934430][ T709] syz.0.137[709] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 33.966298][ T293] EXT4-fs (loop0): unmounting filesystem. [ 34.054595][ T721] loop2: detected capacity change from 0 to 128 [ 34.061438][ T721] EXT4-fs (loop2): Test dummy encryption mode enabled [ 34.069526][ T721] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 34.078095][ T721] ext4 filesystem being mounted at /28/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 34.369514][ T24] input: HID 05ac:8241 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:05AC:8241.0007/input/input6 [ 34.579210][ T728] __nla_validate_parse: 8 callbacks suppressed [ 34.579227][ T728] netlink: 8 bytes leftover after parsing attributes in process `syz.2.141'. [ 34.594177][ T728] netlink: 12 bytes leftover after parsing attributes in process `syz.2.141'. [ 34.603803][ T728] netlink: 16 bytes leftover after parsing attributes in process `syz.2.141'. [ 34.612781][ T728] netlink: 16 bytes leftover after parsing attributes in process `syz.2.141'. [ 34.683892][ T24] appleir 0003:05AC:8241.0007: input,hiddev96,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.4-1/input0 [ 34.700778][ T24] usb 5-1: USB disconnect, device number 8 [ 34.906938][ T296] EXT4-fs (loop2): unmounting filesystem. [ 34.948929][ T740] tipc: Started in network mode [ 34.953652][ T740] tipc: Node identity fe1f479675f6, cluster identity 4711 [ 34.960781][ T740] tipc: Enabled bearer , priority 0 [ 34.968119][ T739] tipc: Resetting bearer [ 34.979203][ T739] tipc: Disabling bearer [ 35.039913][ T745] loop2: detected capacity change from 0 to 128 [ 35.047073][ T745] EXT4-fs (loop2): Test dummy encryption mode enabled [ 35.056664][ T745] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 35.059336][ T747] overlayfs: statfs failed on './file0' [ 35.066845][ T745] ext4 filesystem being mounted at /32/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 35.183951][ T757] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 35.259993][ T759] netlink: 8 bytes leftover after parsing attributes in process `syz.2.149'. [ 35.268737][ T759] netlink: 12 bytes leftover after parsing attributes in process `syz.2.149'. [ 35.277495][ T759] netlink: 16 bytes leftover after parsing attributes in process `syz.2.149'. [ 35.286240][ T759] netlink: 16 bytes leftover after parsing attributes in process `syz.2.149'. [ 35.414069][ T762] netlink: 'syz.4.153': attribute type 4 has an invalid length. [ 35.423415][ T764] netlink: 32 bytes leftover after parsing attributes in process `syz.1.154'. [ 35.459915][ T771] loop4: detected capacity change from 0 to 128 [ 35.474208][ T771] EXT4-fs (loop4): Test dummy encryption mode enabled [ 35.483387][ T771] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 35.492287][ T771] ext4 filesystem being mounted at /21/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 35.577836][ T778] process 'syz.1.158' launched './file0' with NULL argv: empty string added [ 35.701088][ T785] netlink: 8 bytes leftover after parsing attributes in process `syz.4.157'. [ 35.821997][ T782] tipc: Enabled bearer , priority 0 [ 35.829171][ T781] tipc: Resetting bearer [ 35.841258][ T781] tipc: Disabling bearer [ 35.893339][ T296] EXT4-fs (loop2): unmounting filesystem. [ 36.312149][ T292] EXT4-fs (loop4): unmounting filesystem. [ 36.327738][ T807] device wg2 entered promiscuous mode [ 36.428087][ T818] tipc: Started in network mode [ 36.432905][ T818] tipc: Node identity 7f000001, cluster identity 4711 [ 36.434539][ T821] loop4: detected capacity change from 0 to 128 [ 36.439916][ T818] tipc: Enabled bearer , priority 10 [ 36.455423][ T818] tipc: Enabling of bearer rejected, failed to enable media [ 36.463791][ T821] EXT4-fs (loop4): Test dummy encryption mode enabled [ 36.475738][ T821] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 36.495947][ T821] ext4 filesystem being mounted at /25/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 36.525806][ T832] loop1: detected capacity change from 0 to 128 [ 36.553647][ T832] EXT4-fs (loop1): Test dummy encryption mode enabled [ 36.562817][ T832] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 36.571588][ T832] ext4 filesystem being mounted at /36/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 37.210263][ T28] kauditd_printk_skb: 43 callbacks suppressed [ 37.210278][ T28] audit: type=1400 audit(1740083814.345:252): avc: denied { write } for pid=845 comm="syz.2.181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 37.300522][ T292] EXT4-fs (loop4): unmounting filesystem. [ 37.345416][ T869] binder_alloc: 868: binder_alloc_buf, no vma [ 37.405436][ T295] EXT4-fs (loop1): unmounting filesystem. [ 37.431691][ T873] device wg2 entered promiscuous mode [ 37.480942][ T28] audit: type=1400 audit(1740083814.615:253): avc: denied { read } for pid=876 comm="syz.2.188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 37.514246][ T885] loop4: detected capacity change from 0 to 1024 [ 37.520636][ T885] EXT4-fs: Ignoring removed orlov option [ 37.521745][ T887] loop3: detected capacity change from 0 to 128 [ 37.537110][ T885] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 37.541112][ T887] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 37.555559][ T887] ext4 filesystem being mounted at /34/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 37.567388][ T312] tipc: Node number set to 2130706433 [ 37.592585][ T28] audit: type=1400 audit(1740083814.725:254): avc: denied { link } for pid=886 comm="syz.3.193" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop3" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 37.643453][ T294] EXT4-fs (loop3): unmounting filesystem. [ 37.682088][ T894] device pim6reg1 entered promiscuous mode [ 37.759301][ T899] loop3: detected capacity change from 0 to 128 [ 37.766904][ T899] EXT4-fs (loop3): Test dummy encryption mode enabled [ 37.791503][ T899] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 37.800816][ T899] ext4 filesystem being mounted at /36/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 37.811389][ T434] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 37.861491][ T905] loop1: detected capacity change from 0 to 512 [ 37.878743][ T905] EXT4-fs (loop1): orphan cleanup on readonly fs [ 37.887700][ T905] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.198: bg 0: block 248: padding at end of block bitmap is not set [ 37.902782][ T905] Quota error (device loop1): write_blk: dquota write failed [ 37.911096][ T905] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 37.922051][ T905] EXT4-fs error (device loop1): ext4_acquire_dquot:6781: comm syz.1.198: Failed to acquire dquot type 1 [ 38.041523][ T434] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 38.048633][ T905] EXT4-fs (loop1): 1 truncate cleaned up [ 38.052870][ T434] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 38.071296][ T905] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 38.172923][ T905] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 38.197480][ T434] usb 3-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 38.200223][ T905] EXT4-fs (loop1): re-mounted. Quota mode: writeback. [ 38.214279][ T434] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 38.224190][ T434] usb 3-1: config 0 descriptor?? [ 38.250538][ T905] syz.1.198 (905) used greatest stack depth: 19216 bytes left [ 38.273812][ T295] EXT4-fs (loop1): unmounting filesystem. [ 38.410771][ T292] EXT4-fs (loop4): unmounting filesystem. [ 38.478293][ T28] audit: type=1400 audit(1740083815.565:255): avc: denied { accept } for pid=917 comm="syz.4.200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 38.786569][ T294] EXT4-fs (loop3): unmounting filesystem. [ 38.872660][ T936] Driver unsupported XDP return value 0 on prog (id 134) dev N/A, expect packet loss! [ 38.907234][ T28] audit: type=1400 audit(1740083816.035:256): avc: denied { create } for pid=941 comm="syz.3.210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 38.926461][ T28] audit: type=1400 audit(1740083816.045:257): avc: denied { read } for pid=941 comm="syz.3.210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 38.959869][ T28] audit: type=1400 audit(1740083816.095:258): avc: denied { write } for pid=941 comm="syz.3.210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 39.126871][ T434] hid-led: probe of 0003:0FC5:B080.0008 failed with error -32 [ 39.135536][ T434] usb 3-1: USB disconnect, device number 3 [ 39.387497][ T28] audit: type=1400 audit(1740083816.525:259): avc: denied { read } for pid=951 comm="syz.0.213" name="file0" dev="tmpfs" ino=306 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 39.444880][ T959] loop1: detected capacity change from 0 to 128 [ 39.451758][ T959] EXT4-fs (loop1): Test dummy encryption mode enabled [ 39.459687][ T959] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 39.468845][ T959] ext4 filesystem being mounted at /47/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 39.643377][ T964] __nla_validate_parse: 16 callbacks suppressed [ 39.643409][ T964] netlink: 8 bytes leftover after parsing attributes in process `syz.1.216'. [ 39.658203][ T964] netlink: 12 bytes leftover after parsing attributes in process `syz.1.216'. [ 39.666891][ T964] netlink: 16 bytes leftover after parsing attributes in process `syz.1.216'. [ 39.675592][ T964] netlink: 16 bytes leftover after parsing attributes in process `syz.1.216'. [ 40.057553][ T39] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 40.267422][ T39] usb 3-1: Using ep0 maxpacket: 32 [ 40.273696][ T39] usb 3-1: config 0 has an invalid interface number: 219 but max is 0 [ 40.299440][ T39] usb 3-1: config 0 has no interface number 0 [ 40.305513][ T39] usb 3-1: config 0 interface 219 altsetting 0 has an invalid endpoint with address 0xDB, skipping [ 40.306454][ T295] EXT4-fs (loop1): unmounting filesystem. [ 40.316576][ T39] usb 3-1: config 0 interface 219 altsetting 0 bulk endpoint 0xB has invalid maxpacket 255 [ 40.339715][ T39] usb 3-1: New USB device found, idVendor=108c, idProduct=0169, bcdDevice=75.b9 [ 40.348819][ T39] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 40.356575][ T39] usb 3-1: Product: syz [ 40.360734][ T39] usb 3-1: Manufacturer: syz [ 40.365093][ T39] usb 3-1: SerialNumber: syz [ 40.370375][ T39] usb 3-1: config 0 descriptor?? [ 40.375350][ T969] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 40.382414][ T969] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 40.559551][ T996] binder: 995:996 ioctl c0306201 400000000380 returned -14 [ 40.579942][ T999] loop1: detected capacity change from 0 to 128 [ 40.586614][ T999] EXT4-fs (loop1): Test dummy encryption mode enabled [ 40.601602][ T999] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 40.610502][ T999] ext4 filesystem being mounted at /50/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 40.691831][ T1004] capability: warning: `syz.0.229' uses deprecated v2 capabilities in a way that may be insecure [ 40.883261][ T1006] netlink: 8 bytes leftover after parsing attributes in process `syz.1.228'. [ 40.892175][ T1006] netlink: 12 bytes leftover after parsing attributes in process `syz.1.228'. [ 40.901176][ T1006] netlink: 16 bytes leftover after parsing attributes in process `syz.1.228'. [ 40.909939][ T1006] netlink: 16 bytes leftover after parsing attributes in process `syz.1.228'. [ 41.098873][ T1018] device veth1_macvtap left promiscuous mode [ 41.104844][ T1018] device macsec0 entered promiscuous mode [ 41.344900][ T1029] netlink: 8 bytes leftover after parsing attributes in process `syz.3.236'. [ 41.353952][ T1029] netlink: 12 bytes leftover after parsing attributes in process `syz.3.236'. [ 41.500934][ T295] EXT4-fs (loop1): unmounting filesystem. [ 41.626375][ T1049] loop0: detected capacity change from 0 to 2048 [ 41.721848][ T1049] loop0: p1 < > p4 [ 41.754946][ T1049] loop0: p4 size 8388608 extends beyond EOD, truncated [ 41.786363][ T1052] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 41.818546][ T1052] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 41.856838][ T103] loop0: p1 < > p4 [ 41.861740][ T103] loop0: p4 size 8388608 extends beyond EOD, truncated [ 41.898671][ T374] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 41.911005][ T353] udevd[353]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 41.911312][ T374] udevd[374]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 41.935476][ T1060] device pim6reg1 entered promiscuous mode [ 42.137434][ T434] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 42.402299][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 42.402313][ T28] audit: type=1400 audit(1740083819.535:267): avc: denied { write } for pid=1072 comm="syz.1.250" name="ppp" dev="devtmpfs" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 42.434037][ T28] audit: type=1400 audit(1740083819.535:268): avc: denied { append } for pid=1072 comm="syz.1.250" name="ppp" dev="devtmpfs" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 42.460709][ T28] audit: type=1400 audit(1740083819.575:269): avc: denied { create } for pid=1072 comm="syz.1.250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 42.487585][ T434] usb 5-1: Using ep0 maxpacket: 16 [ 42.493827][ T434] usb 5-1: config 1 has an invalid descriptor of length 171, skipping remainder of the config [ 42.504230][ T434] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 42.515719][ T434] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 42.525301][ T434] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 42.534394][ T434] usb 5-1: Product: syz [ 42.538947][ T434] usb 5-1: Manufacturer: syz [ 42.543488][ T434] usb 5-1: SerialNumber: syz [ 42.754824][ T434] usb 5-1: 0:2 : does not exist [ 42.762552][ T434] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 42.775741][ T434] usb 5-1: USB disconnect, device number 9 [ 42.855400][ T312] usb 3-1: USB disconnect, device number 4 [ 42.894663][ T1082] loop0: detected capacity change from 0 to 1024 [ 42.918139][ T1082] EXT4-fs (loop0): can't mount with journal_checksum, fs mounted w/o journal [ 43.016006][ T374] udevd[374]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 43.704798][ T28] audit: type=1400 audit(1740083820.835:270): avc: denied { mount } for pid=1097 comm="syz.1.258" name="/" dev="configfs" ino=14439 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 43.728417][ T28] audit: type=1400 audit(1740083820.835:271): avc: denied { search } for pid=1097 comm="syz.1.258" name="/" dev="configfs" ino=14439 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 43.752425][ T1102] loop4: detected capacity change from 0 to 128 [ 43.765907][ T28] audit: type=1400 audit(1740083820.895:272): avc: denied { read } for pid=1097 comm="syz.1.258" name="/" dev="configfs" ino=14439 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 43.791259][ T1102] EXT4-fs (loop4): Test dummy encryption mode enabled [ 43.802522][ T28] audit: type=1400 audit(1740083820.895:273): avc: denied { open } for pid=1097 comm="syz.1.258" path="/" dev="configfs" ino=14439 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 43.846653][ T1102] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 43.855660][ T28] audit: type=1400 audit(1740083820.985:274): avc: denied { mount } for pid=1101 comm="syz.4.259" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 43.885561][ T1102] ext4 filesystem being mounted at /47/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 43.963973][ T1116] overlayfs: failed to clone upperpath [ 43.996387][ T28] audit: type=1400 audit(1740083821.125:275): avc: denied { sys_module } for pid=1118 comm="syz.0.267" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 44.358729][ T28] audit: type=1400 audit(1740083821.135:276): avc: denied { nlmsg_read } for pid=1118 comm="syz.0.267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 44.586363][ T1133] kvm: emulating exchange as write [ 44.592803][ T292] EXT4-fs (loop4): unmounting filesystem. [ 44.789637][ T1146] loop0: detected capacity change from 0 to 128 [ 44.796780][ T1146] EXT4-fs (loop0): Test dummy encryption mode enabled [ 44.808961][ T1146] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 44.817666][ T1146] ext4 filesystem being mounted at /69/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 45.068068][ T1156] overlayfs: failed to clone upperpath [ 45.154119][ T1163] __nla_validate_parse: 14 callbacks suppressed [ 45.154137][ T1163] netlink: 8 bytes leftover after parsing attributes in process `syz.0.274'. [ 45.169433][ T1163] netlink: 12 bytes leftover after parsing attributes in process `syz.0.274'. [ 45.178028][ T1163] netlink: 16 bytes leftover after parsing attributes in process `syz.0.274'. [ 45.186706][ T1163] netlink: 16 bytes leftover after parsing attributes in process `syz.0.274'. [ 45.215779][ T1168] netlink: 4 bytes leftover after parsing attributes in process `syz.3.281'. [ 45.302752][ T1170] device wg2 entered promiscuous mode [ 45.839148][ T1176] netlink: 8 bytes leftover after parsing attributes in process `syz.3.285'. [ 45.847826][ T1176] netlink: 12 bytes leftover after parsing attributes in process `syz.3.285'. [ 45.856431][ T1176] netlink: 16 bytes leftover after parsing attributes in process `syz.3.285'. [ 45.865514][ T1176] netlink: 16 bytes leftover after parsing attributes in process `syz.3.285'. [ 46.178394][ T293] EXT4-fs (loop0): unmounting filesystem. [ 46.461806][ T1208] netlink: 8 bytes leftover after parsing attributes in process `syz.3.293'. [ 46.787384][ T318] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 47.227212][ T318] usb 2-1: Using ep0 maxpacket: 16 [ 47.233680][ T318] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 47.269270][ T1227] overlayfs: failed to clone upperpath [ 47.279019][ T318] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 47.309553][ T318] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 47.330891][ T318] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 47.339274][ T318] usb 2-1: Product: syz [ 47.343436][ T318] usb 2-1: Manufacturer: syz [ 47.349671][ T318] usb 2-1: SerialNumber: syz [ 47.350503][ T1231] loop4: detected capacity change from 0 to 128 [ 47.373915][ T1231] EXT4-fs (loop4): Test dummy encryption mode enabled [ 47.399047][ T1231] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 47.417236][ T1231] ext4 filesystem being mounted at /54/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 47.563600][ T318] usb 2-1: 0:2 : does not exist [ 47.811707][ T318] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 47.856403][ T318] usb 2-1: USB disconnect, device number 2 [ 47.949151][ T1248] loop0: detected capacity change from 0 to 128 [ 47.955678][ T1248] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 47.978104][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 47.978118][ T28] audit: type=1400 audit(1740083825.115:286): avc: denied { watch } for pid=1247 comm="syz.0.307" path="/75/file0/file0" dev="loop0" ino=1048603 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 48.286205][ T292] EXT4-fs (loop4): unmounting filesystem. [ 48.349038][ T28] audit: type=1400 audit(1740083825.485:287): avc: denied { create } for pid=1255 comm="syz.4.310" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 48.370064][ T1252] device syzkaller0 entered promiscuous mode [ 48.377949][ T28] audit: type=1400 audit(1740083825.505:288): avc: denied { connect } for pid=1255 comm="syz.4.310" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 48.432997][ T28] audit: type=1400 audit(1740083825.565:289): avc: denied { mounton } for pid=1259 comm="syz.1.311" path="/60/file0" dev="tmpfs" ino=358 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 48.469331][ T1262] device bridge_slave_0 left promiscuous mode [ 48.476664][ T1262] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.601212][ T1275] loop1: detected capacity change from 0 to 128 [ 48.641852][ T1275] EXT4-fs (loop1): Test dummy encryption mode enabled [ 48.670020][ T1275] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 48.688162][ T1275] ext4 filesystem being mounted at /62/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 48.747542][ T1282] loop2: detected capacity change from 0 to 128 [ 48.784950][ T1282] EXT4-fs: Invalid want_extra_isize 1779 [ 48.839031][ T1279] loop4: detected capacity change from 0 to 40427 [ 48.846029][ T1279] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 48.858437][ T1279] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 48.869082][ T1279] F2FS-fs (loop4): invalid crc value [ 48.875628][ T1279] F2FS-fs (loop4): Found nat_bits in checkpoint [ 49.003324][ T1279] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 49.010944][ T1279] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 49.105953][ T28] audit: type=1400 audit(1740083826.235:290): avc: denied { setattr } for pid=1278 comm="syz.4.319" name="#367" dev="tmpfs" ino=367 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 49.134030][ T28] audit: type=1400 audit(1740083826.265:291): avc: denied { unlink } for pid=292 comm="syz-executor" name="bus" dev="tmpfs" ino=367 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 49.158414][ T10] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 49.168565][ T10] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 49.176679][ T1295] input: syz0 as /devices/virtual/input/input7 [ 49.178414][ T28] audit: type=1400 audit(1740083826.305:292): avc: denied { read write } for pid=1294 comm="syz.2.323" name="uinput" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 49.209052][ T28] audit: type=1400 audit(1740083826.305:293): avc: denied { open } for pid=1294 comm="syz.2.323" path="/dev/uinput" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 49.234443][ T28] audit: type=1400 audit(1740083826.305:294): avc: denied { ioctl } for pid=1294 comm="syz.2.323" path="/dev/uinput" dev="devtmpfs" ino=258 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 49.237491][ T318] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 49.259917][ T28] audit: type=1400 audit(1740083826.345:295): avc: denied { read } for pid=88 comm="acpid" name="event3" dev="devtmpfs" ino=624 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 49.455019][ T295] EXT4-fs (loop1): unmounting filesystem. [ 49.461795][ T318] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 49.494348][ T318] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 49.549331][ T318] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 49.558499][ T318] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 49.566292][ T318] usb 1-1: Product: syz [ 49.570298][ T318] usb 1-1: Manufacturer: syz [ 49.574679][ T318] usb 1-1: SerialNumber: syz [ 49.591183][ T1315] loop4: detected capacity change from 0 to 512 [ 49.598090][ T1315] ext4: Unknown parameter 'permit_directio' [ 49.611600][ T1315] xt_TPROXY: Can be used only with -p tcp or -p udp [ 49.785067][ T1284] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 49.806867][ T1321] loop4: detected capacity change from 0 to 128 [ 50.113001][ T1321] EXT4-fs (loop4): Test dummy encryption mode enabled [ 50.165865][ T1321] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 50.214271][ T1321] ext4 filesystem being mounted at /67/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 50.368141][ T1328] loop2: detected capacity change from 0 to 256 [ 50.382350][ T1328] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 50.384241][ T1331] overlayfs: failed to clone upperpath [ 50.396900][ T1328] exFAT-fs (loop2): hint_cluster is invalid (17) [ 50.410325][ T1331] overlayfs: failed to clone upperpath [ 50.545056][ T1333] __nla_validate_parse: 11 callbacks suppressed [ 50.545107][ T1333] netlink: 8 bytes leftover after parsing attributes in process `syz.4.332'. [ 50.560435][ T1333] netlink: 12 bytes leftover after parsing attributes in process `syz.4.332'. [ 50.569385][ T1333] netlink: 16 bytes leftover after parsing attributes in process `syz.4.332'. [ 50.578136][ T1333] netlink: 16 bytes leftover after parsing attributes in process `syz.4.332'. [ 50.748425][ T1340] loop2: detected capacity change from 0 to 128 [ 50.754064][ T1338] device syzkaller0 entered promiscuous mode [ 50.755687][ T292] EXT4-fs (loop4): unmounting filesystem. [ 50.788310][ T1344] loop4: detected capacity change from 0 to 128 [ 50.795964][ T1344] EXT4-fs (loop4): Test dummy encryption mode enabled [ 50.819353][ T1344] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 50.829608][ T1344] ext4 filesystem being mounted at /68/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 50.928589][ T1284] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 50.951970][ T1351] loop2: detected capacity change from 0 to 512 [ 50.969123][ T1351] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 50.978100][ T1351] ext4 filesystem being mounted at /54/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.013279][ T1351] EXT4-fs error (device loop2): ext4_do_update_inode:5226: inode #2: comm syz.2.340: corrupted inode contents [ 51.026292][ T1351] EXT4-fs error (device loop2): ext4_dirty_inode:6091: inode #2: comm syz.2.340: mark_inode_dirty error [ 51.051057][ T1355] netlink: 8 bytes leftover after parsing attributes in process `syz.4.338'. [ 51.059762][ T1355] netlink: 12 bytes leftover after parsing attributes in process `syz.4.338'. [ 51.068380][ T1355] netlink: 16 bytes leftover after parsing attributes in process `syz.4.338'. [ 51.077063][ T1355] netlink: 16 bytes leftover after parsing attributes in process `syz.4.338'. [ 51.134215][ T1351] EXT4-fs error (device loop2): ext4_do_update_inode:5226: inode #2: comm syz.2.340: corrupted inode contents [ 51.159045][ T1284] loop0: detected capacity change from 0 to 256 [ 51.177585][ T1284] exfat: Unknown parameter ' €' [ 51.187158][ T1351] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #2: comm syz.2.340: mark_inode_dirty error [ 51.195359][ T1359] loop1: detected capacity change from 0 to 128 [ 51.228477][ T353] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 51.228593][ T318] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 51.244684][ T318] cdc_ncm 1-1:1.0: setting rx_max = 16384 [ 51.271710][ T296] EXT4-fs (loop2): unmounting filesystem. [ 51.438226][ T318] cdc_ncm 1-1:1.0: setting tx_max = 36 [ 51.565616][ T318] cdc_ncm 1-1:1.0 eth1: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 51.579739][ T318] usb 1-1: USB disconnect, device number 3 [ 51.587653][ T318] cdc_ncm 1-1:1.0 eth1: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM (NO ZLP) [ 51.656019][ T292] EXT4-fs (loop4): unmounting filesystem. [ 52.012320][ T1385] loop0: detected capacity change from 0 to 128 [ 52.019222][ T1385] EXT4-fs (loop0): Test dummy encryption mode enabled [ 52.027094][ T1385] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 52.035989][ T1385] ext4 filesystem being mounted at /80/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 52.146295][ T1391] device pim6reg1 entered promiscuous mode [ 52.248624][ T1396] netlink: 8 bytes leftover after parsing attributes in process `syz.0.350'. [ 52.257387][ T1396] netlink: 12 bytes leftover after parsing attributes in process `syz.0.350'. [ 52.479878][ T1404] device syzkaller0 entered promiscuous mode [ 52.564609][ T1410] Zero length message leads to an empty skb [ 52.908154][ T293] EXT4-fs (loop0): unmounting filesystem. [ 52.925315][ T1422] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 52.932850][ T1422] overlayfs: failed to set xattr on upper [ 53.394342][ T1434] loop1: detected capacity change from 0 to 256 [ 53.464667][ T374] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 53.486430][ T1434] loop1: detected capacity change from 0 to 512 [ 53.508048][ T374] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 53.826630][ T1450] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 55.157576][ T844] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 55.177578][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 55.177593][ T28] audit: type=1400 audit(1740083832.315:305): avc: denied { map } for pid=1487 comm="syz.0.382" path="socket:[21692]" dev="sockfs" ino=21692 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 55.206573][ T28] audit: type=1400 audit(1740083832.315:306): avc: denied { read } for pid=1487 comm="syz.0.382" path="socket:[21692]" dev="sockfs" ino=21692 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 55.347487][ T844] usb 2-1: Using ep0 maxpacket: 8 [ 55.353954][ T844] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 55.363251][ T844] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.379195][ T844] usb 2-1: config 0 descriptor?? [ 55.586511][ T844] asix 2-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 55.641162][ T1510] loop0: detected capacity change from 0 to 128 [ 55.648239][ T1510] EXT4-fs (loop0): Test dummy encryption mode enabled [ 55.656057][ T1510] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 55.665017][ T1510] ext4 filesystem being mounted at /90/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 55.768991][ T1517] tipc: Enabled bearer , priority 0 [ 55.788404][ T1517] device syzkaller0 entered promiscuous mode [ 55.794555][ T1517] tipc: Resetting bearer [ 55.810169][ T1516] tipc: Resetting bearer [ 55.906273][ T1518] __nla_validate_parse: 11 callbacks suppressed [ 55.906303][ T1518] netlink: 8 bytes leftover after parsing attributes in process `syz.0.390'. [ 55.921077][ T1518] netlink: 12 bytes leftover after parsing attributes in process `syz.0.390'. [ 55.929797][ T1518] netlink: 16 bytes leftover after parsing attributes in process `syz.0.390'. [ 55.938474][ T1518] netlink: 16 bytes leftover after parsing attributes in process `syz.0.390'. [ 55.951453][ T1516] tipc: Disabling bearer [ 56.139457][ T1525] loop2: detected capacity change from 0 to 128 [ 56.146174][ T1525] EXT4-fs (loop2): Test dummy encryption mode enabled [ 56.156982][ T1525] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 56.166266][ T1525] ext4 filesystem being mounted at /72/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 56.353915][ T1532] netlink: 8 bytes leftover after parsing attributes in process `syz.2.394'. [ 56.362845][ T1532] netlink: 12 bytes leftover after parsing attributes in process `syz.2.394'. [ 56.371716][ T1532] netlink: 16 bytes leftover after parsing attributes in process `syz.2.394'. [ 56.380331][ T1532] netlink: 16 bytes leftover after parsing attributes in process `syz.2.394'. [ 56.497751][ T293] EXT4-fs (loop0): unmounting filesystem. [ 57.198651][ T1554] netlink: 8 bytes leftover after parsing attributes in process `syz.3.403'. [ 57.207350][ T1554] netlink: 12 bytes leftover after parsing attributes in process `syz.3.403'. [ 57.251212][ T296] EXT4-fs (loop2): unmounting filesystem. [ 57.424346][ T1560] loop2: detected capacity change from 0 to 512 [ 57.430839][ T1560] EXT4-fs: Ignoring removed mblk_io_submit option [ 57.439682][ T1560] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 57.449031][ T1560] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b002c118, mo2=0002] [ 57.456807][ T1560] System zones: 1-12 [ 57.461212][ T1560] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2186: inode #15: comm syz.2.405: corrupted in-inode xattr [ 57.473337][ T1560] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.405: couldn't read orphan inode 15 (err -117) [ 57.485424][ T1560] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 57.524766][ T296] EXT4-fs (loop2): unmounting filesystem. [ 57.657376][ T1582] loop0: detected capacity change from 0 to 8192 [ 57.877372][ T19] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 58.068478][ T19] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 58.080849][ T19] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 58.089790][ T19] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.097564][ T19] usb 5-1: Product: syz [ 58.101558][ T19] usb 5-1: Manufacturer: syz [ 58.105957][ T19] usb 5-1: SerialNumber: syz [ 58.279646][ T844] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 58.289628][ T844] asix: probe of 2-1:0.0 failed with error -71 [ 58.298287][ T844] usb 2-1: USB disconnect, device number 3 [ 58.817446][ T312] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 58.907451][ T844] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 59.107486][ T844] usb 1-1: Using ep0 maxpacket: 32 [ 59.114357][ T844] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 59.125611][ T844] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 59.130470][ T19] cdc_ncm 5-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 59.141460][ T19] cdc_ncm 5-1:1.0: dwNtbInMaxSize=20 is too small. Using 2048 [ 59.143639][ T844] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 59.148855][ T19] cdc_ncm 5-1:1.0: setting rx_max = 2048 [ 59.162713][ T844] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.175971][ T844] usb 1-1: config 0 descriptor?? [ 59.184144][ T844] hub 1-1:0.0: USB hub found [ 59.217431][ T312] usb 3-1: Using ep0 maxpacket: 32 [ 59.223709][ T312] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 59.231847][ T312] usb 3-1: config 0 has no interface number 0 [ 59.239587][ T312] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 59.253913][ T312] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.261947][ T312] usb 3-1: Product: syz [ 59.265927][ T312] usb 3-1: Manufacturer: syz [ 59.270368][ T312] usb 3-1: SerialNumber: syz [ 59.275455][ T312] usb 3-1: config 0 descriptor?? [ 59.281019][ T312] smsc95xx v2.0.0 [ 59.400038][ T844] hub 1-1:0.0: 1 port detected [ 59.525173][ T19] cdc_ncm 5-1:1.0 eth1: register 'cdc_ncm' at usb-dummy_hcd.4-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 59.540766][ T19] usb 5-1: USB disconnect, device number 10 [ 59.544055][ T28] audit: type=1400 audit(1740083836.675:307): avc: denied { read } for pid=141 comm="dhcpcd" name="n16" dev="tmpfs" ino=2971 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 59.546775][ T19] cdc_ncm 5-1:1.0 eth1: unregister 'cdc_ncm' usb-dummy_hcd.4-1, CDC NCM (NO ZLP) [ 59.578656][ T28] audit: type=1400 audit(1740083836.705:308): avc: denied { open } for pid=141 comm="dhcpcd" path="/run/udev/data/n16" dev="tmpfs" ino=2971 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 59.602220][ T28] audit: type=1400 audit(1740083836.705:309): avc: denied { getattr } for pid=141 comm="dhcpcd" path="/run/udev/data/n16" dev="tmpfs" ino=2971 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 59.663714][ T28] audit: type=1400 audit(1740083836.795:310): avc: denied { create } for pid=1614 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 59.690529][ T312] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 59.712076][ T312] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 59.733024][ T28] audit: type=1400 audit(1740083836.795:311): avc: denied { write } for pid=1614 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth1.link" dev="tmpfs" ino=2973 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 59.735702][ T312] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 59.759346][ T28] audit: type=1400 audit(1740083836.795:312): avc: denied { append } for pid=1614 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" dev="tmpfs" ino=2973 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 59.787839][ T312] smsc95xx: probe of 3-1:0.67 failed with error -71 [ 59.797421][ T28] audit: type=1400 audit(1740083836.835:313): avc: denied { unlink } for pid=1627 comm="rm" name="resolv.conf.eth1.link" dev="tmpfs" ino=2973 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 59.836355][ T312] usb 3-1: USB disconnect, device number 5 [ 59.842075][ T28] audit: type=1400 audit(1740083836.955:314): avc: denied { setattr } for pid=1625 comm="syz.1.425" name="igmp" dev="proc" ino=4026532647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 59.978908][ T1650] xt_TPROXY: Can be used only with -p tcp or -p udp [ 60.073509][ T844] hub 1-1:0.0: activate --> -90 [ 60.081244][ T1640] loop1: detected capacity change from 0 to 40427 [ 60.117874][ T1640] F2FS-fs (loop1): invalid crc value [ 60.138381][ T1640] F2FS-fs (loop1): Found nat_bits in checkpoint [ 60.184882][ T1640] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 60.201632][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 60.201647][ T28] audit: type=1400 audit(1740083837.335:316): avc: denied { mounton } for pid=1639 comm="syz.1.426" path="/77/file1/bus" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 60.202903][ T1661] loop4: detected capacity change from 0 to 128 [ 60.209821][ T28] audit: type=1400 audit(1740083837.345:317): avc: denied { setattr } for pid=1639 comm="syz.1.426" name="work" dev="loop1" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 60.259025][ T1640] F2FS-fs (loop1): switch extent_cache option is not allowed [ 60.276714][ T28] audit: type=1400 audit(1740083837.345:318): avc: denied { remove_name } for pid=1639 comm="syz.1.426" name="#13" dev="loop1" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 60.279151][ T295] syz-executor: attempt to access beyond end of device [ 60.279151][ T295] loop1: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 60.298891][ T28] audit: type=1400 audit(1740083837.345:319): avc: denied { rename } for pid=1639 comm="syz.1.426" name="#13" dev="loop1" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 60.336289][ T295] syz-executor: attempt to access beyond end of device [ 60.336289][ T295] loop1: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 60.350542][ T1661] EXT4-fs (loop4): Test dummy encryption mode enabled [ 60.355429][ T28] audit: type=1400 audit(1740083837.345:320): avc: denied { unlink } for pid=1639 comm="syz.1.426" name="#13" dev="loop1" ino=24 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 60.392742][ T1661] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 60.407228][ T1661] ext4 filesystem being mounted at /79/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 60.410759][ T10] kworker/u4:1: attempt to access beyond end of device [ 60.410759][ T10] loop1: rw=2049, sector=45096, nr_sectors = 24 limit=40427 [ 60.461193][ T28] audit: type=1400 audit(1740083837.395:321): avc: denied { remount } for pid=1639 comm="syz.1.426" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 60.916668][ T1596] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.934608][ T1596] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 60.960765][ T844] usb 1-1-port1: cannot reset (err = -71) [ 60.966591][ T39] usb 1-1: USB disconnect, device number 4 [ 60.975409][ T844] usb 1-1-port1: attempt power cycle [ 61.056980][ T292] EXT4-fs (loop4): unmounting filesystem. [ 61.124381][ T1681] kvm: pic: level sensitive irq not supported [ 61.124437][ T1681] kvm: pic: non byte read [ 61.138049][ T314] device bridge_slave_1 left promiscuous mode [ 61.143988][ T314] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.166634][ T314] device bridge_slave_0 left promiscuous mode [ 61.180812][ T28] audit: type=1400 audit(1740083838.315:322): avc: denied { mounton } for pid=1684 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 61.206046][ T314] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.274048][ T314] device veth1_macvtap left promiscuous mode [ 61.293198][ T314] device veth0_vlan left promiscuous mode [ 61.400951][ T1689] __nla_validate_parse: 10 callbacks suppressed [ 61.400970][ T1689] netlink: 8 bytes leftover after parsing attributes in process `syz.3.440'. [ 61.415920][ T1689] netlink: 12 bytes leftover after parsing attributes in process `syz.3.440'. [ 61.424641][ T1689] netlink: 16 bytes leftover after parsing attributes in process `syz.3.440'. [ 61.433305][ T1689] netlink: 16 bytes leftover after parsing attributes in process `syz.3.440'. [ 61.647904][ T1697] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 61.661374][ T28] audit: type=1400 audit(1740083838.795:323): avc: denied { read } for pid=1701 comm="syz.2.446" name="loop-control" dev="devtmpfs" ino=113 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 61.686678][ T1697] device bridge_slave_1 left promiscuous mode [ 61.695828][ T1697] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.709068][ T28] audit: type=1400 audit(1740083838.795:324): avc: denied { open } for pid=1701 comm="syz.2.446" path="/dev/loop-control" dev="devtmpfs" ino=113 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 61.739037][ T1703] device vlan0 entered promiscuous mode [ 61.743709][ T28] audit: type=1400 audit(1740083838.795:325): avc: denied { ioctl } for pid=1701 comm="syz.2.446" path="/dev/loop-control" dev="devtmpfs" ino=113 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 61.772101][ T1697] tipc: Enabling of bearer rejected, failed to enable media [ 61.812885][ T1712] loop4: detected capacity change from 0 to 128 [ 61.823735][ T1712] EXT4-fs (loop4): Test dummy encryption mode enabled [ 61.831383][ T1684] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.834544][ T1712] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 61.838715][ T1684] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.846816][ T1712] ext4 filesystem being mounted at /84/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 61.854583][ T1684] device bridge_slave_0 entered promiscuous mode [ 61.870807][ T1684] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.877934][ T1684] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.885285][ T1684] device bridge_slave_1 entered promiscuous mode [ 61.958279][ T1684] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.965120][ T1684] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.972273][ T1684] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.979130][ T1684] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.188156][ T1718] netlink: 8 bytes leftover after parsing attributes in process `syz.4.449'. [ 62.196764][ T1718] netlink: 12 bytes leftover after parsing attributes in process `syz.4.449'. [ 62.205571][ T1718] netlink: 16 bytes leftover after parsing attributes in process `syz.4.449'. [ 62.214235][ T1718] netlink: 16 bytes leftover after parsing attributes in process `syz.4.449'. [ 62.354710][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.363695][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.371952][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.394293][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 62.411147][ T1725] device pim6reg1 entered promiscuous mode [ 62.422240][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 62.435317][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 62.448533][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 62.456689][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 62.464346][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 62.478160][ T1684] device veth0_vlan entered promiscuous mode [ 62.503433][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 62.514107][ T1684] device veth1_macvtap entered promiscuous mode [ 62.533748][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 62.557177][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 62.679397][ T292] EXT4-fs (loop4): unmounting filesystem. [ 62.728291][ T1755] loop2: detected capacity change from 0 to 512 [ 63.175089][ T1750] netlink: 8 bytes leftover after parsing attributes in process `syz.3.460'. [ 63.183731][ T1750] netlink: 12 bytes leftover after parsing attributes in process `syz.3.460'. [ 63.334958][ T1755] EXT4-fs error (device loop2): ext4_acquire_dquot:6781: comm syz.2.463: Failed to acquire dquot type 0 [ 63.347341][ T1755] EXT4-fs (loop2): Remounting filesystem read-only [ 63.354175][ T1755] EXT4-fs error (device loop2): ext4_acquire_dquot:6781: comm syz.2.463: Failed to acquire dquot type 0 [ 63.374214][ T1755] EXT4-fs (loop2): Remounting filesystem read-only [ 63.381934][ T1755] EXT4-fs error (device loop2): ext4_acquire_dquot:6781: comm syz.2.463: Failed to acquire dquot type 0 [ 63.393256][ T1755] EXT4-fs (loop2): Remounting filesystem read-only [ 63.399763][ T1755] EXT4-fs (loop2): 1 orphan inode deleted [ 63.405468][ T1755] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 63.414286][ T1755] ext4 filesystem being mounted at /85/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.470444][ T1765] device syzkaller0 entered promiscuous mode [ 63.643826][ T296] EXT4-fs (loop2): unmounting filesystem. [ 64.521050][ T1790] device pim6reg1 entered promiscuous mode [ 64.533056][ T1792] loop5: detected capacity change from 0 to 1024 [ 64.567933][ T374] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 64.592270][ T1792] loop5: detected capacity change from 0 to 2048 [ 64.859692][ T1792] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 64.866383][ T1800] loop2: detected capacity change from 0 to 128 [ 64.885244][ T1800] EXT4-fs (loop2): Test dummy encryption mode enabled [ 64.894847][ T1792] EXT4-fs (loop5): re-mounted. Quota mode: none. [ 64.899035][ T1800] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 64.909893][ T1800] ext4 filesystem being mounted at /87/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 64.928279][ T1684] EXT4-fs (loop5): unmounting filesystem. [ 65.053529][ T1809] tipc: Started in network mode [ 65.208233][ T1809] tipc: Node identity 423cb0ab22a6, cluster identity 4711 [ 65.227060][ T1809] tipc: Enabled bearer , priority 0 [ 65.274972][ T1807] tipc: Resetting bearer [ 65.295600][ T1807] tipc: Disabling bearer [ 65.438804][ T1825] xt_hashlimit: size too large, truncated to 1048576 [ 65.473382][ T28] kauditd_printk_skb: 18 callbacks suppressed [ 65.488198][ T28] audit: type=1400 audit(1740083842.605:338): avc: denied { execute_no_trans } for pid=1827 comm="syz.3.485" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=74 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 65.737481][ T296] EXT4-fs (loop2): unmounting filesystem. [ 65.759230][ T1835] loop5: detected capacity change from 0 to 512 [ 65.803888][ T1835] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 1, start 00000001) [ 65.833770][ T1845] loop2: detected capacity change from 0 to 128 [ 65.872856][ T1845] EXT4-fs (loop2): Test dummy encryption mode enabled [ 65.916627][ T1845] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 65.937469][ T1845] ext4 filesystem being mounted at /89/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 66.425078][ T1873] __nla_validate_parse: 15 callbacks suppressed [ 66.425106][ T1873] netlink: 8 bytes leftover after parsing attributes in process `syz.0.500'. [ 66.439995][ T1873] netlink: 12 bytes leftover after parsing attributes in process `syz.0.500'. [ 66.448707][ T1873] netlink: 16 bytes leftover after parsing attributes in process `syz.0.500'. [ 66.457378][ T1873] netlink: 16 bytes leftover after parsing attributes in process `syz.0.500'. [ 66.497554][ T28] audit: type=1400 audit(1740083843.615:339): avc: denied { read write } for pid=1875 comm="syz.4.503" name="usbmon9" dev="devtmpfs" ino=182 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 66.522026][ T28] audit: type=1400 audit(1740083843.615:340): avc: denied { open } for pid=1875 comm="syz.4.503" path="/dev/usbmon9" dev="devtmpfs" ino=182 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 66.680301][ T296] EXT4-fs (loop2): unmounting filesystem. [ 66.776125][ T1883] loop2: detected capacity change from 0 to 1024 [ 66.789719][ T1883] EXT4-fs: Ignoring removed oldalloc option [ 66.799100][ T1883] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 66.846318][ T296] EXT4-fs (loop2): unmounting filesystem. [ 66.857958][ T1890] loop5: detected capacity change from 0 to 128 [ 66.867760][ T1890] EXT4-fs (loop5): Test dummy encryption mode enabled [ 66.876244][ T1890] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 66.885020][ T1890] ext4 filesystem being mounted at /11/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 67.005068][ T1895] netlink: 8 bytes leftover after parsing attributes in process `syz.3.507'. [ 67.014088][ T1895] netlink: 12 bytes leftover after parsing attributes in process `syz.3.507'. [ 67.022848][ T1895] netlink: 16 bytes leftover after parsing attributes in process `syz.3.507'. [ 67.031527][ T1895] netlink: 16 bytes leftover after parsing attributes in process `syz.3.507'. [ 67.475800][ T1902] netlink: 8 bytes leftover after parsing attributes in process `syz.5.508'. [ 67.484548][ T1902] netlink: 12 bytes leftover after parsing attributes in process `syz.5.508'. [ 67.795524][ T1684] EXT4-fs (loop5): unmounting filesystem. [ 67.821786][ T1913] loop5: detected capacity change from 0 to 128 [ 67.854234][ T1913] EXT4-fs (loop5): Test dummy encryption mode enabled [ 67.862625][ T1913] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 67.878605][ T1913] ext4 filesystem being mounted at /12/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 67.909350][ T28] audit: type=1400 audit(1740083845.035:341): avc: denied { watch watch_reads } for pid=1922 comm="syz.0.517" path="/118" dev="tmpfs" ino=667 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 68.686999][ T1684] EXT4-fs (loop5): unmounting filesystem. [ 68.690117][ T28] audit: type=1400 audit(1740083845.825:342): avc: denied { block_suspend } for pid=1937 comm="syz.2.522" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 68.714680][ T1940] af_packet: tpacket_rcv: packet too big, clamped from 42 to 4294967286. macoff=82 [ 68.733949][ T28] audit: type=1400 audit(1740083845.865:343): avc: denied { ioctl } for pid=1935 comm="syz.0.520" path="socket:[23683]" dev="sockfs" ino=23683 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 69.422847][ T1957] loop5: detected capacity change from 0 to 128 [ 69.470672][ T1763] kworker/u4:6: attempt to access beyond end of device [ 69.470672][ T1763] loop5: rw=1, sector=145, nr_sectors = 896 limit=128 [ 69.518906][ T1968] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 69.537964][ T1968] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 69.546834][ T1971] loop2: detected capacity change from 0 to 128 [ 69.564499][ T1971] EXT4-fs (loop2): Test dummy encryption mode enabled [ 69.574673][ T405] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 69.583751][ T405] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.602338][ T405] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 69.610746][ T405] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.627117][ T405] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.647937][ T405] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.656115][ T405] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.664343][ T405] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.695244][ T1971] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 69.709937][ T1971] ext4 filesystem being mounted at /95/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 69.755304][ T1980] syz.5.535 uses obsolete (PF_INET,SOCK_PACKET) [ 70.679985][ T296] EXT4-fs (loop2): unmounting filesystem. [ 70.772614][ T1998] loop2: detected capacity change from 0 to 128 [ 70.779004][ T2001] loop4: detected capacity change from 0 to 1024 [ 70.798089][ T911] Bluetooth: hci0: Frame reassembly failed (-84) [ 70.810789][ T2001] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 70.838295][ T1998] syz.2.538: attempt to access beyond end of device [ 70.838295][ T1998] loop2: rw=0, sector=121, nr_sectors = 120 limit=128 [ 70.852759][ T292] EXT4-fs (loop4): unmounting filesystem. [ 70.865374][ T8] kworker/u4:0: attempt to access beyond end of device [ 70.865374][ T8] loop2: rw=1, sector=241, nr_sectors = 800 limit=128 [ 70.920487][ T2014] bridge: RTM_NEWNEIGH with invalid ether address [ 70.945126][ T2019] loop2: detected capacity change from 0 to 128 [ 70.945982][ T2011] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 70.961962][ T2019] EXT4-fs (loop2): Test dummy encryption mode enabled [ 70.972859][ T2019] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 70.975875][ T2011] loop4: detected capacity change from 0 to 512 [ 70.981405][ T2019] ext4 filesystem being mounted at /98/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 71.009255][ T2011] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 71.044744][ T2011] ext4 filesystem being mounted at /98/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 71.630865][ T2029] __nla_validate_parse: 19 callbacks suppressed [ 71.630885][ T2029] netlink: 8 bytes leftover after parsing attributes in process `syz.2.546'. [ 71.645613][ T2029] netlink: 12 bytes leftover after parsing attributes in process `syz.2.546'. [ 71.654235][ T2029] netlink: 16 bytes leftover after parsing attributes in process `syz.2.546'. [ 71.662924][ T2029] netlink: 16 bytes leftover after parsing attributes in process `syz.2.546'. [ 71.674141][ T2033] netlink: 8 bytes leftover after parsing attributes in process `syz.3.549'. [ 71.682770][ T2033] netlink: 12 bytes leftover after parsing attributes in process `syz.3.549'. [ 71.691470][ T2033] netlink: 16 bytes leftover after parsing attributes in process `syz.3.549'. [ 71.700168][ T2033] netlink: 16 bytes leftover after parsing attributes in process `syz.3.549'. [ 72.361557][ T296] EXT4-fs (loop2): unmounting filesystem. [ 72.373079][ T292] EXT4-fs (loop4): unmounting filesystem. [ 72.475518][ T2044] loop4: detected capacity change from 0 to 128 [ 72.664659][ T2046] tipc: Started in network mode [ 72.718956][ T2046] tipc: Node identity 2e999431590f, cluster identity 4711 [ 72.785263][ T2046] tipc: Enabled bearer , priority 0 [ 72.797383][ T2046] tipc: Resetting bearer [ 72.807502][ T597] Bluetooth: hci0: command 0x1003 tx timeout [ 72.813881][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 72.822833][ T2004] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 72.829287][ T2046] tipc: Disabling bearer [ 72.919922][ T2056] netlink: 4 bytes leftover after parsing attributes in process `syz.0.555'. [ 73.019076][ T2063] fuse: Unknown parameter '0x0000000000000003' [ 73.036635][ T28] audit: type=1400 audit(1740083850.165:344): avc: denied { map } for pid=2064 comm="syz.4.560" path="socket:[24952]" dev="sockfs" ino=24952 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 73.152161][ T2076] loop5: detected capacity change from 0 to 512 [ 73.158845][ T2076] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 73.170466][ T2076] EXT4-fs (loop5): 1 truncate cleaned up [ 73.175920][ T2076] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 73.192529][ T1684] EXT4-fs (loop5): unmounting filesystem. [ 73.397987][ T2079] netlink: 8 bytes leftover after parsing attributes in process `syz.0.562'. [ 73.647618][ T2089] device batadv_slave_0 entered promiscuous mode [ 73.674261][ T28] audit: type=1400 audit(1740083850.805:345): avc: denied { create } for pid=2091 comm="syz.5.569" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 73.674490][ T2092] device syzkaller0 entered promiscuous mode [ 73.760814][ T19] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 73.809570][ T2102] ================================================================== [ 73.817462][ T2102] BUG: KASAN: use-after-free in enqueue_timer+0xa6/0x480 [ 73.824319][ T2102] Write of size 8 at addr ffff8881175a4a00 by task syz.5.572/2102 [ 73.831954][ T2102] [ 73.834129][ T2102] CPU: 1 PID: 2102 Comm: syz.5.572 Not tainted 6.1.124-syzkaller-00016-ga5f88b652947 #0 [ 73.843670][ T2102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 73.853564][ T2102] Call Trace: [ 73.856691][ T2102] [ 73.859465][ T2102] dump_stack_lvl+0x151/0x1b7 [ 73.863981][ T2102] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 73.869274][ T2102] ? _printk+0xd1/0x111 [ 73.873269][ T2102] ? __virt_addr_valid+0x242/0x2f0 [ 73.878219][ T2102] print_report+0x158/0x4e0 [ 73.882554][ T2102] ? __virt_addr_valid+0x242/0x2f0 [ 73.887504][ T2102] ? kasan_complete_mode_report_info+0x90/0x1b0 [ 73.893575][ T2102] ? enqueue_timer+0xa6/0x480 [ 73.898087][ T2102] kasan_report+0x13c/0x170 [ 73.902427][ T2102] ? enqueue_timer+0xa6/0x480 [ 73.906943][ T2102] __asan_report_store8_noabort+0x17/0x20 [ 73.912494][ T2102] enqueue_timer+0xa6/0x480 [ 73.916834][ T2102] __mod_timer+0x8d3/0xcf0 [ 73.921091][ T2102] ? mod_timer_pending+0x30/0x30 [ 73.925866][ T2102] ? __kasan_kmalloc+0x9c/0xb0 [ 73.930462][ T2102] mod_timer+0x1f/0x30 [ 73.934376][ T2102] can_pernet_init+0x1dd/0x2d0 [ 73.938970][ T2102] ops_init+0x1cd/0x480 [ 73.942959][ T2102] setup_net+0x4ca/0xd60 [ 73.947040][ T2102] ? copy_net_ns+0x5b0/0x5b0 [ 73.951466][ T2102] ? __kasan_kmalloc+0x9c/0xb0 [ 73.956068][ T2102] copy_net_ns+0x35f/0x5b0 [ 73.960319][ T2102] create_new_namespaces+0x416/0x670 [ 73.965443][ T2102] unshare_nsproxy_namespaces+0x126/0x180 [ 73.970996][ T2102] ksys_unshare+0x545/0x980 [ 73.975334][ T2102] ? sighand_ctor+0x60/0x60 [ 73.979674][ T2102] ? fpregs_restore_userregs+0x130/0x290 [ 73.985140][ T2102] ? switch_fpu_return+0xe/0x10 [ 73.989826][ T2102] __x64_sys_unshare+0x38/0x40 [ 73.994427][ T2102] x64_sys_call+0x728/0x9a0 [ 73.998766][ T2102] do_syscall_64+0x3b/0xb0 [ 74.003022][ T2102] ? clear_bhb_loop+0x55/0xb0 [ 74.007533][ T2102] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 74.013272][ T2102] RIP: 0033:0x7f828c98d0a9 [ 74.017516][ T2102] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 74.018403][ T19] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 74.036964][ T2102] RSP: 002b:00007f828c7ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 74.036995][ T2102] RAX: ffffffffffffffda RBX: 00007f828cba5fa0 RCX: 00007f828c98d0a9 [ 74.037008][ T2102] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000064000600 [ 74.037020][ T2102] RBP: 00007f828ca0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 74.037030][ T2102] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 74.037042][ T2102] R13: 0000000000000000 R14: 00007f828cba5fa0 R15: 00007fffe873c4e8 [ 74.091368][ T19] usb 5-1: New USB device found, idVendor=11c2, idProduct=2208, bcdDevice= 0.00 [ 74.093813][ T2102] [ 74.105523][ T2102] [ 74.107692][ T2102] Allocated by task 2004: [ 74.111859][ T2102] kasan_set_track+0x4b/0x70 [ 74.112892][ T19] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.116283][ T2102] kasan_save_alloc_info+0x1f/0x30 [ 74.116304][ T2102] __kasan_kmalloc+0x9c/0xb0 [ 74.133473][ T2102] __kmalloc+0xb4/0x1e0 [ 74.137902][ T2102] hci_alloc_dev_priv+0x27/0x1c00 [ 74.142758][ T2102] hci_uart_tty_ioctl+0x401/0xa70 [ 74.147618][ T2102] tty_ioctl+0x903/0xc50 [ 74.151700][ T2102] __se_sys_ioctl+0x114/0x190 [ 74.156209][ T2102] __x64_sys_ioctl+0x7b/0x90 [ 74.160640][ T2102] x64_sys_call+0x98/0x9a0 [ 74.164887][ T2102] do_syscall_64+0x3b/0xb0 [ 74.168107][ T19] usb 5-1: config 0 descriptor?? [ 74.169137][ T2102] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 74.179646][ T2102] [ 74.181814][ T2102] Freed by task 2004: [ 74.185631][ T2102] kasan_set_track+0x4b/0x70 [ 74.190065][ T2102] kasan_save_free_info+0x2b/0x40 [ 74.194923][ T2102] ____kasan_slab_free+0x131/0x180 [ 74.199879][ T2102] __kasan_slab_free+0x11/0x20 [ 74.204465][ T2102] __kmem_cache_free+0x21d/0x410 [ 74.209252][ T2102] kfree+0x7a/0xf0 [ 74.212808][ T2102] hci_release_dev+0x14d3/0x1640 [ 74.217570][ T2102] bt_host_release+0x83/0xa0 [ 74.221998][ T2102] device_release+0x95/0x1c0 [ 74.226430][ T2102] kobject_put+0x178/0x260 [ 74.230678][ T2102] put_device+0x1f/0x30 [ 74.234675][ T2102] hci_dev_cmd+0x2be/0x9b0 [ 74.238926][ T2102] hci_sock_ioctl+0x415/0x7f0 [ 74.243526][ T2102] sock_do_ioctl+0x152/0x450 [ 74.247956][ T2102] sock_ioctl+0x455/0x740 [ 74.252204][ T2102] __se_sys_ioctl+0x114/0x190 [ 74.256939][ T2102] __x64_sys_ioctl+0x7b/0x90 [ 74.261364][ T2102] x64_sys_call+0x98/0x9a0 [ 74.265624][ T2102] do_syscall_64+0x3b/0xb0 [ 74.269877][ T2102] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 74.275599][ T2102] [ 74.277767][ T2102] Last potentially related work creation: [ 74.283329][ T2102] kasan_save_stack+0x3b/0x60 [ 74.287836][ T2102] __kasan_record_aux_stack+0xb4/0xc0 [ 74.293085][ T2102] kasan_record_aux_stack_noalloc+0xb/0x10 [ 74.298687][ T2102] insert_work+0x56/0x310 [ 74.302852][ T2102] __queue_work+0x9b6/0xd70 [ 74.307187][ T2102] queue_work_on+0x105/0x170 [ 74.311611][ T2102] __hci_cmd_sync_sk+0xc2a/0xf70 [ 74.316387][ T2102] hci_cmd_sync_status+0x52/0x130 [ 74.321248][ T2102] hci_dev_cmd+0x771/0x9b0 [ 74.325504][ T2102] hci_sock_ioctl+0x415/0x7f0 [ 74.330014][ T2102] sock_do_ioctl+0x152/0x450 [ 74.334457][ T2102] sock_ioctl+0x455/0x740 [ 74.338605][ T2102] __se_sys_ioctl+0x114/0x190 [ 74.343120][ T2102] __x64_sys_ioctl+0x7b/0x90 [ 74.347557][ T2102] x64_sys_call+0x98/0x9a0 [ 74.351821][ T2102] do_syscall_64+0x3b/0xb0 [ 74.356050][ T2102] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 74.361781][ T2102] [ 74.363950][ T2102] Second to last potentially related work creation: [ 74.370375][ T2102] kasan_save_stack+0x3b/0x60 [ 74.374886][ T2102] __kasan_record_aux_stack+0xb4/0xc0 [ 74.380096][ T2102] kasan_record_aux_stack_noalloc+0xb/0x10 [ 74.385737][ T2102] insert_work+0x56/0x310 [ 74.390007][ T2102] __queue_work+0x9b6/0xd70 [ 74.394337][ T2102] queue_work_on+0x105/0x170 [ 74.398762][ T2102] hci_cmd_timeout+0x199/0x200 [ 74.403360][ T2102] process_one_work+0x73d/0xcb0 [ 74.408048][ T2102] worker_thread+0xa60/0x1260 [ 74.412562][ T2102] kthread+0x26d/0x300 [ 74.416469][ T2102] ret_from_fork+0x1f/0x30 [ 74.420722][ T2102] [ 74.422888][ T2102] The buggy address belongs to the object at ffff8881175a4000 [ 74.422888][ T2102] which belongs to the cache kmalloc-8k of size 8192 [ 74.436809][ T2102] The buggy address is located 2560 bytes inside of [ 74.436809][ T2102] 8192-byte region [ffff8881175a4000, ffff8881175a6000) [ 74.450064][ T2102] [ 74.452231][ T2102] The buggy address belongs to the physical page: [ 74.458484][ T2102] page:ffffea00045d6800 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1175a0 [ 74.468545][ T2102] head:ffffea00045d6800 order:3 compound_mapcount:0 compound_pincount:0 [ 74.476702][ T2102] flags: 0x4000000000010200(slab|head|zone=1) [ 74.482614][ T2102] raw: 4000000000010200 ffffea00045d6600 dead000000000002 ffff888100043500 [ 74.491115][ T2102] raw: 0000000000000000 0000000000020002 00000001ffffffff 0000000000000000 [ 74.499524][ T2102] page dumped because: kasan: bad access detected [ 74.505784][ T2102] page_owner tracks the page as allocated [ 74.511332][ T2102] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 1517, tgid 1516 (syz.2.392), ts 55788176925, free_ts 52155321457 [ 74.533638][ T2102] post_alloc_hook+0x213/0x220 [ 74.538234][ T2102] prep_new_page+0x1b/0x110 [ 74.542573][ T2102] get_page_from_freelist+0x3a98/0x3b10 [ 74.547955][ T2102] __alloc_pages+0x234/0x610 [ 74.552388][ T2102] alloc_slab_page+0x6c/0xf0 [ 74.556809][ T2102] new_slab+0x90/0x3e0 [ 74.560714][ T2102] ___slab_alloc+0x6f9/0xb80 [ 74.565141][ T2102] __slab_alloc+0x5d/0xa0 [ 74.569306][ T2102] __kmem_cache_alloc_node+0x207/0x2a0 [ 74.574601][ T2102] __kmalloc_node+0xa3/0x1e0 [ 74.579029][ T2102] kvmalloc_node+0x221/0x640 [ 74.583454][ T2102] pfifo_fast_init+0x25e/0x7a0 [ 74.588056][ T2102] qdisc_create_dflt+0x144/0x3e0 [ 74.592838][ T2102] mq_init+0x2c8/0x6b0 [ 74.596740][ T2102] qdisc_create_dflt+0x144/0x3e0 [ 74.601519][ T2102] dev_activate+0x159/0x1130 [ 74.605958][ T2102] page last free stack trace: [ 74.610449][ T2102] free_unref_page_prepare+0x9f1/0xa00 [ 74.615758][ T2102] free_unref_page+0xb2/0x5c0 [ 74.620265][ T2102] __free_pages+0x61/0xf0 [ 74.624425][ T2102] free_pages+0x7c/0x90 [ 74.628417][ T2102] packet_set_ring+0x19bc/0x24e0 [ 74.633195][ T2102] packet_release+0x7a5/0xd10 [ 74.637699][ T2102] sock_close+0xdf/0x270 [ 74.641781][ T2102] __fput+0x1e5/0x870 [ 74.645597][ T2102] ____fput+0x15/0x20 [ 74.649418][ T2102] task_work_run+0x24d/0x2e0 [ 74.653844][ T2102] exit_to_user_mode_loop+0x94/0xa0 [ 74.658878][ T2102] exit_to_user_mode_prepare+0x5a/0xa0 [ 74.664175][ T2102] syscall_exit_to_user_mode+0x26/0x130 [ 74.669560][ T2102] do_syscall_64+0x47/0xb0 [ 74.673891][ T2102] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 74.679625][ T2102] [ 74.681791][ T2102] Memory state around the buggy address: [ 74.687260][ T2102] ffff8881175a4900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 74.695181][ T2102] ffff8881175a4980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 74.703060][ T2102] >ffff8881175a4a00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 74.710953][ T2102] ^ [ 74.714863][ T2102] ffff8881175a4a80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 74.722768][ T2102] ffff8881175a4b00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 74.730657][ T2102] ================================================================== [ 74.738556][ T2102] Disabling lock debugging due to kernel taint [ 74.848249][ T19] usbhid 5-1:0.0: can't add hid device: -71 [ 74.854604][ T19] usbhid: probe of 5-1:0.0 failed with error -71 [ 74.872079][ T19] usb 5-1: USB disconnect, device number 11 [ 74.887592][ C1] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN [ 74.899263][ C1] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 74.907513][ C1] CPU: 1 PID: 2093 Comm: syz.3.568 Tainted: G B 6.1.124-syzkaller-00016-ga5f88b652947 #0 [ 74.918530][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 74.928421][ C1] RIP: 0010:__queue_work+0x4f1/0xd70 [ 74.933541][ C1] Code: 39 03 0f 84 40 01 00 00 e8 5c 6c 2a 00 4c 89 e7 e8 64 69 d7 03 49 bd 00 00 00 00 00 fc ff df 4c 8b 65 d0 4c 89 f0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 f7 e8 70 09 72 00 49 8b 3e e8 18 62 d7 [ 74.952982][ C1] RSP: 0018:ffffc900001b0c78 EFLAGS: 00010046 [ 74.958882][ C1] RAX: 0000000000000000 RBX: 000000007fffffff RCX: ffff88811bfc3cc0 [ 74.966699][ C1] RDX: 0000000000000100 RSI: 000000007fffffff RDI: 000000007fffffff [ 74.974509][ C1] RBP: ffffc900001b0d00 R08: ffffffff814b261b R09: 0000000000000007 [ 74.982323][ C1] R10: ffffffffffffffff R11: dffffc0000000001 R12: ffff8881175a49c8 [ 74.990136][ C1] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff8881175a49e0 [ 74.997939][ C1] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 75.006706][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 75.013131][ C1] CR2: 0000400001000000 CR3: 000000012fc96000 CR4: 00000000003526a0 [ 75.020942][ C1] Call Trace: [ 75.024064][ C1] [ 75.026764][ C1] ? __die_body+0x62/0xb0 [ 75.030933][ C1] ? die_addr+0x9f/0xd0 [ 75.034915][ C1] ? exc_general_protection+0x317/0x4c0 [ 75.040298][ C1] ? asm_exc_general_protection+0x27/0x30 [ 75.045849][ C1] ? __queue_work+0x28b/0xd70 [ 75.050375][ C1] ? __queue_work+0x4f1/0xd70 [ 75.054885][ C1] ? __queue_work+0x29c/0xd70 [ 75.059389][ C1] delayed_work_timer_fn+0x61/0x80 [ 75.064335][ C1] ? queue_work_node+0x1d0/0x1d0 [ 75.069110][ C1] call_timer_fn+0x3b/0x2d0 [ 75.073567][ C1] ? queue_work_node+0x1d0/0x1d0 [ 75.078339][ C1] __run_timers+0x756/0xa10 [ 75.082680][ C1] ? calc_index+0x270/0x270 [ 75.087019][ C1] ? sched_clock+0x9/0x10 [ 75.091182][ C1] ? sched_clock_cpu+0x71/0x2b0 [ 75.095872][ C1] run_timer_softirq+0x69/0xf0 [ 75.100471][ C1] handle_softirqs+0x1db/0x650 [ 75.105072][ C1] ? irqtime_account_irq+0xdc/0x260 [ 75.110108][ C1] __irq_exit_rcu+0x52/0xf0 [ 75.114445][ C1] irq_exit_rcu+0x9/0x10 [ 75.118523][ C1] sysvec_apic_timer_interrupt+0xa9/0xc0 [ 75.123993][ C1] [ 75.126774][ C1] [ 75.129563][ C1] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 75.135361][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0x56/0x80 [ 75.141611][ C1] Code: f6 0d 87 e8 8c 9f 9a fc 48 83 3d e4 63 eb 01 00 74 34 48 89 df e8 6e 0f 00 00 90 41 f7 c6 00 02 00 00 74 01 fb bf 01 00 00 00 35 19 2d fc 65 8b 05 26 db df 7a 85 c0 74 05 5b 41 5e 5d c3 e8 [ 75.161144][ C1] RSP: 0018:ffffc90002447100 EFLAGS: 00000206 [ 75.167038][ C1] RAX: 0000000000000001 RBX: ffff888114010050 RCX: dffffc0000000000 [ 75.174850][ C1] RDX: 0000000000000000 RSI: 0000000000000246 RDI: 0000000000000001 [ 75.182661][ C1] RBP: ffffc90002447110 R08: ffffffff81a564dc R09: fffff94000a6b4d1 [ 75.190472][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 75.198287][ C1] R13: 0000000000000120 R14: 0000000000000246 R15: 0000000000000020 [ 75.206102][ C1] ? release_pages+0x1cc/0xf50 [ 75.210697][ C1] release_pages+0x204/0xf50 [ 75.215125][ C1] ? lru_cache_disable+0xc0/0xc0 [ 75.219895][ C1] ? folio_add_lru_vma+0x80/0x80 [ 75.224672][ C1] ? __kasan_check_read+0x11/0x20 [ 75.229531][ C1] ? free_swap_cache+0xe7/0x170 [ 75.234217][ C1] free_pages_and_swap_cache+0x8a/0xa0 [ 75.239511][ C1] tlb_flush_mmu+0xfe/0x1d0 [ 75.243854][ C1] unmap_page_range+0x22d1/0x2620 [ 75.248711][ C1] ? uncharge_batch+0x510/0x510 [ 75.253401][ C1] ? copy_page_range+0x2ed0/0x2ed0 [ 75.258352][ C1] ? mas_next_slot+0xac5/0xb00 [ 75.262957][ C1] ? uprobe_munmap+0x18d/0x450 [ 75.267545][ C1] unmap_vmas+0x4e4/0x660 [ 75.271713][ C1] ? unmap_page_range+0x2620/0x2620 [ 75.276746][ C1] ? folio_add_lru_vma+0x80/0x80 [ 75.281533][ C1] ? __kasan_check_write+0x14/0x20 [ 75.286491][ C1] ? tlb_gather_mmu_fullmm+0x165/0x210 [ 75.291765][ C1] exit_mmap+0x2e5/0xbb0 [ 75.295845][ C1] ? vm_brk+0x30/0x30 [ 75.299661][ C1] ? kiocb_set_cancel_fn+0x230/0x230 [ 75.304783][ C1] ? uprobe_clear_state+0x2cd/0x320 [ 75.309816][ C1] __mmput+0x95/0x310 [ 75.313635][ C1] mmput+0x56/0x170 [ 75.317279][ C1] do_exit+0xb24/0x2b80 [ 75.321271][ C1] ? put_task_struct+0x80/0x80 [ 75.325873][ C1] ? __kasan_check_write+0x14/0x20 [ 75.330817][ C1] ? _raw_spin_lock_irq+0xa5/0x1b0 [ 75.335765][ C1] do_group_exit+0x21a/0x2d0 [ 75.340191][ C1] ? __kasan_check_write+0x14/0x20 [ 75.345225][ C1] get_signal+0x169d/0x1820 [ 75.349567][ C1] ? ptrace_notify+0x350/0x350 [ 75.354164][ C1] ? memcg_rstat_updated+0x57/0x120 [ 75.359199][ C1] arch_do_signal_or_restart+0xb0/0x16f0 [ 75.364671][ C1] ? get_sigframe_size+0x10/0x10 [ 75.369444][ C1] ? __x64_sys_recvmmsg+0x195/0x240 [ 75.374476][ C1] ? debug_smp_processor_id+0x17/0x20 [ 75.379684][ C1] exit_to_user_mode_loop+0x74/0xa0 [ 75.384717][ C1] exit_to_user_mode_prepare+0x5a/0xa0 [ 75.390011][ C1] syscall_exit_to_user_mode+0x26/0x130 [ 75.395391][ C1] do_syscall_64+0x47/0xb0 [ 75.399644][ C1] ? clear_bhb_loop+0x55/0xb0 [ 75.404160][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 75.409888][ C1] RIP: 0033:0x7f07fd98d0a9 [ 75.414143][ C1] Code: Unable to access opcode bytes at 0x7f07fd98d07f. [ 75.420994][ C1] RSP: 002b:00007f07fe7e3038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 75.429243][ C1] RAX: 000000000003fffd RBX: 00007f07fdba6080 RCX: 00007f07fd98d0a9 [ 75.437057][ C1] RDX: 03fffffffffffcb5 RSI: 00004000000000c0 RDI: 0000000000000003 [ 75.444868][ C1] RBP: 00007f07fda0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 75.452685][ C1] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 75.460488][ C1] R13: 0000000000000001 R14: 00007f07fdba6080 R15: 00007fff2504d7b8 [ 75.468328][ C1] [ 75.471163][ C1] Modules linked in: [ 75.474906][ C1] ---[ end trace 0000000000000000 ]--- [ 75.480189][ C1] RIP: 0010:__queue_work+0x4f1/0xd70 [ 75.485323][ C1] Code: 39 03 0f 84 40 01 00 00 e8 5c 6c 2a 00 4c 89 e7 e8 64 69 d7 03 49 bd 00 00 00 00 00 fc ff df 4c 8b 65 d0 4c 89 f0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 f7 e8 70 09 72 00 49 8b 3e e8 18 62 d7 [ 75.504754][ C1] RSP: 0018:ffffc900001b0c78 EFLAGS: 00010046 [ 75.510657][ C1] RAX: 0000000000000000 RBX: 000000007fffffff RCX: ffff88811bfc3cc0 [ 75.518463][ C1] RDX: 0000000000000100 RSI: 000000007fffffff RDI: 000000007fffffff [ 75.526277][ C1] RBP: ffffc900001b0d00 R08: ffffffff814b261b R09: 0000000000000007 [ 75.534087][ C1] R10: ffffffffffffffff R11: dffffc0000000001 R12: ffff8881175a49c8 [ 75.541898][ C1] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff8881175a49e0 [ 75.549713][ C1] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 75.558912][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 75.565335][ C1] CR2: 0000400001000000 CR3: 000000012fc96000 CR4: 00000000003526a0 [ 75.573148][ C1] Kernel panic - not syncing: Fatal exception in interrupt [ 75.580288][ C1] Kernel Offset: disabled [ 75.584344][ C1] Rebooting in 86400 seconds..