last executing test programs: 2m8.998631872s ago: executing program 32 (id=63): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x19) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x200008, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@metacopy_on}, {@xino_auto}]}) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') read$FUSE(r0, &(0x7f0000000ec0)={0x2020}, 0x2020) 2m8.226461585s ago: executing program 33 (id=78): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r0, &(0x7f0000000500)=@file={0x1, './file0\x00'}, 0x6e) read$msr(r1, &(0x7f0000000080)=""/213, 0xd5) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x284083, 0x0) sendmmsg$unix(r0, &(0x7f0000002e40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002580)=[@rights={{0x14, 0x1, 0x1, [r2]}}], 0x18}}], 0x1, 0x0) 1m59.18549752s ago: executing program 34 (id=255): r0 = socket(0x1e, 0x80004, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x7, 0x0, 0x1000004}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) write(r1, &(0x7f0000000b80)="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", 0xd4d) 1m38.765241179s ago: executing program 6 (id=816): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000080)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)={0x3dc, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_PEERS={0x39c, 0x8, 0x0, 0x1, [{0x48, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @remote}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}]}, {0x350, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x46, 0x5, 0x9}, @WGPEER_A_ALLOWEDIPS={0x4}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_ALLOWEDIPS={0x30c, 0x9, 0x0, 0x1, [{0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x2e}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x1}}]}, {0x118, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x22}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x8}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x2}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @empty}}, {0x5, 0x3, 0x2}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x16}}, {0x5, 0x3, 0x2}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @local}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x54, 0x2, @loopback}, {0x5, 0x3, 0x3}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}]}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r2}]}, 0x3dc}}, 0x0) 1m38.74030919s ago: executing program 6 (id=817): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000940)) 1m38.681171631s ago: executing program 6 (id=818): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x19, &(0x7f0000000a00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000010000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000820000008500000023000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xf, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m38.654610211s ago: executing program 6 (id=819): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f0000000580), 0x5, 0x504, &(0x7f0000002580)="$eJzs3c9rXFsdAPDvzCR5SZtn33uKvFfBFirUHzSTH0gTFcSVuiiIBTcKNSbTWDPphMykNqFgqrsuXIiiIC7c+xe4sStLQVwrbl1Ji9YIVSpcmTtz00kyk041mfHlfj4wnXvnTOd7ziTfkzPnnjs3gNy62PynEDEZEb+PiHOt3f1PuNi62312b6l5K0SSXP9rIX1ecz97avb/zkbETkSMR8RXvxjxrcLhuPWt7dXFarWy0d4vN9bWy/Wt7Su31hZXKiuV2zPzVxcW5qfnZheOra0PfvidB9d+/eWxXz3/wZNHP/rtb5rVmmyXdbbjOLWaPhpvdzw2EhGfO4lgQ1Bqt2di2BXhv9L8+X0wIi6l+X8uSulPsz8vTrRmwElLkiT5d/JGr+KdBDi1iukYuFCciojWdrE4NdUaw38ozhSrtXrjUzdrm7eXW2Plt2K0ePNWtTLd/qzwVowWmvsz6fbL/dkD+3MR6Rj4x6WJdH9qqVZdHmxXBxxw9kD+/6PUyn8gJ/r/yA+cNvIf8kv+Q37Jf8gv+Q/5Jf8hv+Q/5Jf8h/yS/5Bfnfmfncj15pDqAgzWUX//xwZYD2CgvnLtWvOWZOe/L9/Z2lyt3bmyXKmvTq1tLk0t1TbWp1ZqtZX0nJ21V71etVZbn/l0bN4tNyr1Rrm+tX1jrbZ5u3EjPa//RmV0IK0C+vH2hYd/LETEzmcm0lt0/MmXq3C6JUkhhn0OMjAcpWF3QMDQOPQH+fUan/F7fkkY8P7W5St694yf7Vn0+Vg/keoAA1A8qvDF48FVBBi4y+85/gd5Zf4f8sv8P+TXK8b4hgeQA0fN/0f7Wn5d9Tv///z16gOcvCPn/4FTbbLL9b+SJPnemx3X7pqOiA9ExB9Ko29k1/oCToPiXwrt8f/lcx+bPFg6VvhnOgcwFhHf/fn1n95dbDQ2ZpqP/23v8cbP2o/PDqP+QG/7Z/iyPM3yGADIr91n95ay2yDjPv1CaxHC4fgj7bnJ8XQEc2a3sG+tQuGY1i7s3I+Id7vFL7Svd9468nFmt3Qo/jvt+0LrJdL6jqTXTR9M/Pc64n+0I/75//ldgXx42Ox/prvlXzHN6djLv/39z+QxrY/O+r9szXVn/Kz/K/Xo/y70GePbv/h+t8O76WLvp/cjznftf7N442msg/GbdbvcZ/wn3/jah3uVJb9svU63+JnmVrmxtl6ub21fuZXVYv7qwsL89NzsQjmdoy5nM9WHffbd3z3qFb/Z/rYe7f/TofZPtOv0iT7b/6+PPP76xSPif/xS99+/d9L7A+9/kuzV4ZN9xv/77J+/2ausGX+5x/tf7BY/stKIuT7j13/yJecOA8D/kfrW9upitVrZ6LIx2rvIhg0bg94YiQEGfVXPsTOYDgo4MS+Tftg1AQAAAAAAAAAAAPrVa/Xvw2NcTjzsNgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnAb/CQAA//9AntRF") mount$overlay(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000000), 0x18040, &(0x7f0000000240)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x40000, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000480)=ANY=[]) 1m38.529793113s ago: executing program 6 (id=820): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x10, &(0x7f0000000700)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0xe, 0x0, &(0x7f00000001c0)="3f6c00c2231bc4cb501d70870800", 0x0, 0xdbf, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m38.279381047s ago: executing program 6 (id=833): connect$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x4e23, 0x6, @remote, 0x3}, 0x1c) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000240)=ANY=[@ANYBLOB="e0000002ac1414aa0100000002"], 0x18) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2}}}}}, 0x0) 1m38.235330738s ago: executing program 35 (id=833): connect$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x4e23, 0x6, @remote, 0x3}, 0x1c) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000240)=ANY=[@ANYBLOB="e0000002ac1414aa0100000002"], 0x18) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2}}}}}, 0x0) 1m31.925148519s ago: executing program 8 (id=959): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f0000000640)={0x1, &(0x7f0000000680)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4625, 0x7, @loopback}, 0x1c) listen(r0, 0x0) 1m31.845292281s ago: executing program 8 (id=961): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000080)={[{@nobh}, {@usrjquota}]}, 0x1, 0x77e, &(0x7f0000000a80)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105042, 0x40) write$cgroup_subtree(r1, 0x0, 0x32600) 1m31.605761855s ago: executing program 8 (id=964): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = memfd_create(&(0x7f00000005c0)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'\b\x00\x00\x00\x00\x00\x00\x00\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94k\xcd\t\x00\x90k\xd6\x05\xb6&\xd0\x9daA\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\x03gB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\xbd#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x92!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xe2\x05\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\xbd\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7\x8en\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xef\x03Ga\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\b\xc8NC\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xcaf2\x02F1\xc6\x82\x00E\xae\x9d\x17\x871N:\xb4\xea \x8e\xdelP\x83\x1f\'\xe2\xd6\xc0\xc3\xfc\xc9677u\xf3RUP@o>\xee\xb8\xa3\t\x02\xb7\\,\xebK\xed\x1b\xc9e\xb3\x16\xce\x9bI\xdb\xfa\x82\x85\t\x9bg\xd0s\xe2\f{\x8cp~;\xf8\x96\xf2\x91\x06\x89\xa6D\xce\xac\x03\xc1\x83\xd1\xe6 |\xa75\xd7\x80t\xfc\xf8\xd2\x12N\x1cB7^\xfd4\xae\xb0VFw\b!\xae\x1baTv\xc0z\x19\xc5\xc8w\xba\x97N\x9a`\x8f\xfc\x9ee\xf9\x00\x1cQA\x14]\r\xd4\"\xc2\x12GD\xdb{\x88\xaa\x81\xc8\xa2\xdeI\xa2\xbel\x0e\xec\x17fNI\x05\xff\x8d\xf4_\x1a\vqA\xb7\x0ed<\x98\xee\xb8\x19\xec\x9f\xee\xe1_\xacG\x8b\xa3\xc3\x13\x80\x0f\xf4I\xdeAwG\xbdkno\xa2\b\x126\x97\x9b\xf9|P\xd94\v\x15\xcb\xc0\x9d\x11\xf3\x18\xae!2\x1b\x12\xa9\xc8~\xb7S\x94\xb5\xc7;\xa90D>s\xe9\xa4N\xf8\xdb\xab\xa0\x94~\xa1]b\xa4\xe5\xe2e\x1c\x8b\xd2\xc7Md\x93\x02\xd8\xb0,\xeb\x03\xaa\v\xed\x9bR\x8a\x80\xc2\x1f\x17ej\x973wv\x83a\xe06\x96\xde\xbc%Uh;H\xf8S\xf1\xa1g\x02\xc4\xc3\xa4\xa8\x96\t\xfex\xa2?\xcb\\Y\x1e\xfe\xca\xa0i\x80O\x11\xac\xb7$\xdb\xbc\xb0\xcb\xacqU\xb5*\x00\x00\x00\x00\x00\x00\x00\f\xda\xf8oV\x89\xd3\x1f\x99+\xe5T\x8eM4\x1c\xc6\x7f\xd4\xf2\xcc\xd3\x94\xca\xd4\x00\x00\x00\x00\x00\x00\x00\x00\x00~A9\xf6IBu2L\x9e\xa2\xd0\x92\xd1\xbc\xb8\tJ\xa1\aN\x87\x95\xbb\xa9s\xab\x90\x06\xc6!p\x9e?~\xf9\xe6\xae*\v\xa3\xd9gxKN\'z]*\x93\xf7\b\x91\xd0\xff\xd9\xc6a\xb5q\x9c\xa1Go\xd58\x93\xe0,\x9f\xe4\xa9\xd9A\x9e\x95e\x98\xd0V\x9d\xed\x97\xf1\xc5\xce\xf5\x90!d\x9a\xd8\x10\xbbx\r8\xff\x8bNUK\xebA\xe5\x92f\xc4\xd1\xa8\x15\xbf\xb5iW\xdb.kbf*\x89\xf0\xecq m-~\xbbf?\xec=\xd2\xe2\x1e\x8d/o\xcd\xc8x\xdb\xe6\xd0W\xca\xc5kz\x8e9\xfa\x86\x0f\x96p', 0x3) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000000}) fcntl$addseals(r1, 0x409, 0xb) 1m31.3255378s ago: executing program 8 (id=970): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000000)='binfmt_misc\x00', 0xc00, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) chroot(&(0x7f0000000200)='./file0/file0\x00') pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='./file0\x00') 1m31.28797394s ago: executing program 8 (id=972): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008f00850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000180)={0x28, 0x0, 0x0, @local}, 0x10) connect$vsock_stream(r1, &(0x7f0000000400)={0x28, 0x0, 0x2710, @host}, 0x10) 1m31.169468992s ago: executing program 8 (id=975): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002a20702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000280)='kfree\x00', r0}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="3183000000010000000019000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x50}, 0x4886) 1m31.131056972s ago: executing program 36 (id=975): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002a20702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000280)='kfree\x00', r0}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="3183000000010000000019000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x50}, 0x4886) 1m24.588262708s ago: executing program 7 (id=1129): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f00000002c0)='mm_page_alloc\x00', r0}, 0x10) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f00000001c0)=0x20000, 0x4) 1m24.551664298s ago: executing program 7 (id=1130): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0xd8d0481}], 0x1, 0x0) 1m24.494855169s ago: executing program 7 (id=1132): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x4e20}, 0x6e) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 1m24.45199757s ago: executing program 7 (id=1133): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x181) mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x2, 0x0) chdir(&(0x7f0000000000)='./file0\x00') syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x1809449, 0x0, 0xff, 0x0, 0x0) mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) 1m24.42688053s ago: executing program 7 (id=1134): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0xa, r2, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000400)='ex\x0f\xac\xd1\xeb\xf4\xd8&w\xef\x9f`T3%\xfa\xbf\xef\xeb\x8e1w\xfd') 1m24.311868872s ago: executing program 7 (id=1136): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd, 0x0, 0xffffffffffffffff, 0x28}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f00000000c0)="3d6ee2e04b69000000a0ce576eed", 0x0, 0xfffc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m24.306970063s ago: executing program 37 (id=1136): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="b702000008000000bfa300000000000007030000ffffffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000001404000001007d60b7030000000000006a0a00fe40000900850000001f000000b70000000000000095000000000000006623848adf1dc9a764ab51a064caff0c9b27a26293fddf0180000071ff31f1622271d5518193e09483c5a020c334f8c76334d8ce8303b81ddaa52e8756ad60a07d6f27c125e16d024098f755d8583da60f27c162dbba0700002ac9170f50f2568836077b7f711a18ebf608d87b885297b6b6981978d51514b00dcc4a2748b376358c33c9753beab62bdf27dc04e4cb4bc598affd989b1ca58949a54d5827df14feecea46408a05d572077f1252fbb72c3d099c501bc4ded6fca17a3447222c95edb47b770009524edd5fa5c53e9c37251709f1ff7f0000f07bf7f53ce129a9ecd3b4dd15100f2b450f98526a0d8cac7c97fc2f64015306a1bd88345710fb6379b4c53cf55eefb4c0974486a8d25a363adbd83b49e13fbd1757b27020bd9b8cff3f48c9411670c34f23ab8caf7851b290feb3045a1b622f20c4383a0280f040de7667f8b1d0842835e81c35af41e5b5b924275cb1749289b44e9728e7a73f148ac8206afe120c1437490d9900000011000003971b32fdffffffffffffffaf580278e1342aabd1b623f6c4f128858e4eb6b42f2173184c2b99b645f6ec0e14e5d7c95a0008000000f30f6c0000000000ff0000b8f5001a1d2a34dc0973ec302bc23211d3e3b6e6dad65a51e5497a3419cecec38126247b27113ad4c7915c8f82c333a7b350802f0311807010d1ed50c18411aa6900daccc02f4ba4b078f07e41f781eee222c7d071d5a94d82ca9a0846c1af59cee16639b4970f8f0a82c6a712fd5722d677d406160ffaffffffb4e0bde6749aa52c408b74251914c5d3255fd88a42e7ebb69ebcd8eee623e51dbb1f1b548c91a6825c0686fdc16be1cbb72c217fda18bd746253ca66093daf35923300b600000000ac376e0a4649a8a84e1d293a6b109c5e59b366bca5cc3d936c53d4a48c05099e6fc37e5aa23bff8cce0600000000000300a568a8532623d12b40b50ac26f2e8255470a04bfbe7acb581b90991d965a01d1f84cb6b973558e1e3f8118c77ccf0b3c6eb6443870004da10c75723b65f83769ad1f0e4ef6b9ef1cec23264fd8fdac6264af1cb467020bdc12b797b6c156c439105829d2ae1c45f7cfa40df68f536a03353a55a8a8e176e5d48887d31c8e0f77f2c1e68ec7c01bd5a2028a8fc107007f5f4c67600a6ade3deb1f200abe1f753754678dae8b4e3ba3d086d4b95dfc5817e3dafae2d38b522f942cc750399d9029f071fdb1e05882f8a4b8fbd219ccac3a895828b4f22b6527ce31ceb02b7b2b4492510134552f0b076b168394f8417f25cc82ae04007193cbe69de8bf35e4bebd15412426b2020ab1f05fc44ae9ae094c1b81d3ef947692b44d2afb09c7498dedf0f87c38bbcab7357836f03e8a7c392e535694a3ead2de11e6b1781e2a017ac341fda2e563ee95085742f5fee9f95f4741b226e428d20b00bc140000e4b2f5efd0a0b1ceba000830ba8634b5aa26bdbe91614e92fae3c7349531df9bf4c01ebf5d8eb7d53e5f30647661623fbdb3f6c3652c423ce6ecc1be5d4e8133fc32f68ea86a2df1e7df98a0ae216c405d0ae9eed114ff2d6fe27dfdff1cf9194849c4cc0da9533e5983863e526a7dc0d8728f3b573ca4427bdb44df9341e9b8420e896598a156c935c800436a312e7ae3c011e46851ac599f0427729ab9c55ae0ab4c0000000000000000000000000000c87bcc2ac5aed9467b51d92e0993af4beaf1f3d47dcdfab9165f98155d93e383d6b85158b54675c1585037508c1e9461a1c3d1a6e2402045cae150a7016f716eebbdf6afc4414d900be0bdf19f4a273f44f4357380b4387f1c8b104f0e406b2f04e5ed88631be6411f9927fe9f83412b7c5a676ceec8b454ebf6481c98e86b6933a02daea0b4ec0be5b3d916bd70208b4588626c27c318475802e2c62681bd1a331422a6e47bbd40857d52c4894944fae5c5000000000000000000000000e0c47613e950b6aefeae054fc723f62ac7d13941de11b018f1f48ac50335df91c771729f81929128135b2803562c1171ee00a3f4a31281aa363e087d53d86dd85e3ff979a7e72d16fdd7e1a0f07a1c8e6085d280d760f74975ceb3a5be6cfb4da8e0aeb769b8b75f4aad803ed77d34872eed2711aa40a3b38099dc2752e8ec9b520faf39e416752aa0830206736570f5d41a4df848c9052551cf8dcb1be000000000eb2577188e8e96bd825d462350905d3eb916b397d2a46a64081e85661d7a5a2716cc87cb1976d15d9b6418e94f165911803e43830432226c660f4da67bb7c8ceb3755c07197d8b80b8d16b12c2ec63bebe107aa2350a7ae564bf69a6c52a2da1496016dd66a1c1b112"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd, 0x0, 0xffffffffffffffff, 0x28}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f00000000c0)="3d6ee2e04b69000000a0ce576eed", 0x0, 0xfffc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 36.710161309s ago: executing program 1 (id=2716): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="a800000000010904000500000000000002000000240001801400018008000100e000000108000200ac1e01010c00028005000100000009002400028014000180080001000000010908000200ac1e00010c000280050001000000000044000f800800014000000006080003400000002b080003400000000808000240000000400800014000000000fb0001400000000708000140000044f10800034000000003080007"], 0xa8}}, 0x0) 36.686670589s ago: executing program 1 (id=2718): r0 = socket(0x28, 0x5, 0x0) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r1, 0x4) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) sendmmsg(r0, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000001400)=[{0x0}, {&(0x7f0000000340)='6', 0x1}], 0x2}}], 0x1, 0x20000014) 36.674775559s ago: executing program 1 (id=2720): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file1\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x35d, &(0x7f0000000f00)="$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") r0 = open(&(0x7f0000000340)='./file1\x00', 0x185102, 0x38) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x28011, r0, 0x0) preadv2(r0, &(0x7f0000000840)=[{&(0x7f0000000380)=""/115, 0x73}], 0x1, 0x8, 0xff, 0x0) 36.569357121s ago: executing program 1 (id=2724): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nodelalloc}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x5}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$eJzs3d9rW1UcAPDvTdPup66DMdQHGezByVy6tv6YIDgfRYcDfZ+hzcpouowmHWsduD24F19kCCIOxD/Adx+H/4B/xUAHQ0bRBxEiN73psjZp2i4z2fL5wG3Pyb23535z7vf2nNyEBDC0jqU/chEvR8Q3ScShlnX5yFYeW9tu9eH1mXRJol7/9M8kkuyx5vZJ9vtAVnkpIn79KuJkbnO71eWV+WK5XFrM6hO1hSsT1eWVU5cWinOludLlqenpM29NT737zts9i/X1839//8ndD898fXz1u5/vH76dxNk4mK1rjeMJ3GitHCv+m5VG4+yGDSd70NggSfp9AOzKSJbno5FeAw7FSJb1wPPvy4ioA0Mqkf8wpJrjgObcvkfz4GfGgw/WJkCN2Mda48+vvTYSextzo/2ryWMzo3S+O96D9tM2fvnjzu10ia1fh9jXpQ6wIzduRsTpfH7z9T/Jrn+7d7rx4vHWNrYxbP9/oJ/upuOfN9qN/3Lr459oM/450CZ3d6N7/ufu96CZjtLx33ttx7/rl67xkaz2QmPMN5pcvFQunY6IFyPiRNS73vo4s3qv3mld6/gvXdL2m2PB7Dju5/c8vs9ssVaMiLFdhvyYBzcjXsm3iz9Z7/+kTf+nz8f5bbZxtHTn1U7rusf/dNV/initbf8/6tZk6/uTE43zYaJ5Vmz2162jv3Vqv9/xp/2/f+v4x5PW+7XVnbfx495/Sp3W7fb8H0s+a5SbSXCtWKstTkaMJR9vfnzq0b7NenP7NP4Tx7e+/rU7/9PJ1+fbjP/WkVsdNx2E/p/dUf/vvHDvoy9+6NT+9vr/zUbpRPZIdv1rLztXtnuAT/r8AQAAAAAAwCDJRcTBSHKF9XIuVyisvb/jSOzPlSvV2smLlaXLs9H4rOx4jOaad7oPtbwfYjJ7P2yzPrWhPh0RhyPi25F9jXphplKe7XfwAAAAAAAAAAAAAAAAAAAAMCAOdPj8f+r3kX4fHfDUNb7YYE+/jwLoh65f+d+Lb3oCBlLX/AeeW/Ifhpf8h+El/2F4yX8YXvIfhpf8h+El/wEAAAAAAAAAAAAAAAAAAAAAAAAAAKCnzp87ly711YfXZ9L67NXlpfnK1VOzpep8YWFppjBTWbxSmKtU5sqlwkxlodvfK1cqVyanYunaRK1UrU1Ul1cuLFSWLtcuXFoozpUulEb/l6gAAAAAAAAAAAAAAAAAAADg2VJdXpkvlsulRYWOhfdjIA7jaQa4Zle75wclCoUOhZtZ9+5srz5elAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgg/8CAAD//4yLMZo=") stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) setxattr$security_capability(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080), &(0x7f0000000200)=@v3={0x3000000, [{0x9, 0xfffffff5}, {0x1, 0x6}], r0}, 0x18, 0x1) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x4008, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) truncate(&(0x7f0000000180)='./file0/file1\x00', 0x73d) 36.484735652s ago: executing program 1 (id=2730): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000000)=0x4, 0x4) r1 = socket(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'ip6gretap0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000080)="330320000a00140000007ef52f555f2a0c9fe67025c1d97bfbf719143baa4b1f0f858c6632f47042195e", 0xfdef, 0x40008c1, &(0x7f00000000c0)={0x11, 0x86dd, r2, 0x1, 0x62}, 0x14) 34.79350336s ago: executing program 1 (id=2764): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) mremap(&(0x7f000046d000/0x4000)=nil, 0x4000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15) 34.7776504s ago: executing program 38 (id=2764): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) mremap(&(0x7f000046d000/0x4000)=nil, 0x4000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15) 26.599609202s ago: executing program 5 (id=3021): pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$can_bcm(0x1d, 0x2, 0x2) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 25.668900687s ago: executing program 5 (id=3052): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000010018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) r2 = syz_create_resource$binfmt(&(0x7f0000000040)='./file3\x00') execveat$binfmt(0xffffffffffffff9c, r2, 0x0, &(0x7f0000000880)={[], 0xf000}, 0x0) 25.152114075s ago: executing program 5 (id=3065): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000700000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='br_fdb_add\x00', r0}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=@bridge_delneigh={0x28, 0x1c, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r3, 0x80, 0x4a, 0x2}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}, 0x28}}, 0x0) 25.133942215s ago: executing program 5 (id=3066): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) mount$bind(&(0x7f0000000480)='./file0/file0\x00', &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x1805406, 0x0) mount$bind(&(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x4f098, 0x0) mount$fuseblk(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x24000, 0x0) 25.115646306s ago: executing program 5 (id=3068): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb77, &(0x7f0000000c40)="$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") quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000100)={0x100000000006, 0x5, 0x7fff, 0xb, 0x6, 0x0, 0x372, 0x6, 0xd3}) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0xab01, 0x104) accept4$vsock_stream(r0, 0x0, 0x0, 0x80000) writev(r0, &(0x7f0000000780)=[{&(0x7f0000000280)="41206e0f", 0x4}, {0x0, 0x11}], 0x2) 25.053298696s ago: executing program 5 (id=3069): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000240)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x800000001fe, 0x82) r3 = dup(r2) ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f0000000040)={0x23, 0x3, 0x12, 0x0, 0x0, 0x0, 0x0}) 25.038636707s ago: executing program 39 (id=3069): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000240)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x800000001fe, 0x82) r3 = dup(r2) ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f0000000040)={0x23, 0x3, 0x12, 0x0, 0x0, 0x0, 0x0}) 2.435874661s ago: executing program 2 (id=3624): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) unshare(0x40000000) 2.298441223s ago: executing program 2 (id=3629): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x1f) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xc, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0x94) 2.276005703s ago: executing program 2 (id=3630): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffffffff}, [@printk={@ld}, @call={0x85, 0x0, 0x0, 0x7d}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r1}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 2.242375814s ago: executing program 2 (id=3632): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@bridge_delneigh={0x28, 0x1c, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r2, 0x80, 0xf2, 0x4}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}]}, 0x28}, 0x1, 0x1000000}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.231143254s ago: executing program 2 (id=3633): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='kfree\x00', r1}, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="a1ab0000000000000e003200000008001701"], 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x0) 2.180072214s ago: executing program 2 (id=3635): r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000740)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x8000}, {0xd, 0x24, 0xf, 0x1, 0x5}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x20, 0x0, 0x1, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x0, 0x21}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000006c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x209, 0x8, 0x1000, 0x1, 0x10, 0x10, 0xe, 0x800, 0x2, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000100)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 1.8828164s ago: executing program 0 (id=3645): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x0, 0x0, 0x4e22, 0x0, 0x2, 0x0, 0x0, 0x11}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x200000000000}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x2b}, 0xa, @in=@local, 0x0, 0x1, 0x0, 0x0, 0x4}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) getsockopt$inet_int(r1, 0x0, 0xe, 0x0, &(0x7f0000000040)) 1.843017481s ago: executing program 0 (id=3647): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000780)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r1, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r1], 0x40}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0x439, 0x80000000, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e21}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e24}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40080d5}, 0x0) 1.771641911s ago: executing program 0 (id=3650): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0xc9d7, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000880)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r2}, 0x10) nanosleep(&(0x7f0000000180), 0x0) 1.693408423s ago: executing program 0 (id=3652): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_team\x00', 0x0}) bind$packet(r1, &(0x7f0000000280)={0x11, 0x11, r2, 0x1, 0x3, 0x6, @local}, 0x14) bind$packet(r1, &(0x7f0000000100)={0x11, 0x17, r2, 0x1, 0x8, 0x6, @remote}, 0x14) 1.693003623s ago: executing program 0 (id=3654): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x46, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x8, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x49) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r0}, 0x10) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) 1.358398458s ago: executing program 0 (id=3656): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x5, [@enum={0x3, 0x2, 0x0, 0xf, 0x9000000, [{0x40000005}, {0xc}]}, @volatile={0x8, 0x0, 0x0, 0x9, 0xffffffff}]}, {0x0, [0x0, 0x0, 0x61]}}, 0x0, 0x45}, 0x28) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x60b, 0x500a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x50, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x4f8}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x4}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f00000001c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="000706000000"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) syz_open_dev$vcsn(0x0, 0xd8, 0x8503) 1.26534042s ago: executing program 4 (id=3658): r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0) pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r2}, 0x10) lseek(r0, 0x5, 0x4) 1.24410591s ago: executing program 4 (id=3659): pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x10) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) tee(r2, r0, 0x7fff, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.152852431s ago: executing program 4 (id=3660): mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1000, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x80800, 0x0) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0x5]}, 0x8) mount$9p_fd(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x10, &(0x7f00000004c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000300)="d5f4", 0x2}], 0x1) 630.23114ms ago: executing program 9 (id=3671): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2020000}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd2c, 0x25dfdbfd, {0x60, 0x0, 0x0, r3, {0x0, 0x3}, {0xffff, 0xffff}, {0xfff1, 0xfff2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_QUANTUM={0x8, 0x3, 0x80000100}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80d1}, 0x3000c81c) 611.2417ms ago: executing program 9 (id=3672): bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f00000001c0)={[{@usrquota}, {@grpjquota}, {@nodelalloc}]}, 0x1, 0x4bc, &(0x7f0000000a40)="$eJzs3ctvW1UaAPDPdpMmaWb6mNGo7UjTSh2p81DjPDRqMjObWc3MotJoKrEBqYTEDSVOHMVOaaIuUth1wQKBQEIs2PMXsKErKiTEGvaIBSqCEiRAQjK613abOHGwII1p7u8n3ebch/2dU+s7Ovf4Xt8AMuts8k8uYjgiPoyIo43VrQecbfzZuH9zJllyUa9f/iKXHpestw5tve5IRKxHxEBE/P/fEc/ktsetrq7NT5fLpeXmerG2sFSsrq5duLYwPVeaKy2OTV6cmpocnRif2rO23n7puduX3vlv/9vfvHjv7svvvZtUa7i5b3M79lKj6X1xfNO2QxHxz0cRrAcKzfYM9roi/CTJ5/ebiDiX5v/RKKSfJpAF9Xq9/n39cKfd63XgwMqnY+BcfiQiGuV8fmSkMYb/bQzly5Vq7a9XKyuLs42x8rHoy1+9Vi6NNs8VjkVfLlkfS8sP18fb1ici0jHwK4XBdH1kplKe3d+uDmhzpC3/vy408h/ICKf8kF3yH7JL/kN2yX/ILvkP2SX/IbvkP2SX/Ifskv+QXfIfskv+Qyb979KlZKm37n+fvb66Ml+5fmG2VJ0fWViZGZmpLC+NzFUqc+k9Ows/9n7lSmVp7G+xcqNYK1Vrxerq2pWFyspi7Up6X/+VUt++tAroxvEzdz7ORcT63wfTJdHf3CdX4WCr13PR63uQgd4o9LoDAnrG1B9kl3N8oP0netvHBQOdXrj0cL4QeLzke10BoGfOn/L9H2SV+X/ILvP/kF3G+MAOj+jbYrf5f+DxZP4fsmu4w/O/frXp2V2jEfHriPio0He49awv4CDIf5Zrjv/PH/3jcPve/ty36VcE/RHx/BuXX7sxXastjyXbv3ywvfZ6c/v4phd2PGEAeqWVp608BgCya+P+zZnWsp9xP/9X4yKE7fEPNecmB9LvKIc2cluuVcjt0bUL67ci4uRO8XPN5503TmSGNgrb4p9o/s013iKt76H0uen7E//Upvh/2BT/9M/+X4FsuJP0P6M75V8+zel4kH9b+5/hPbp2onP/l3/Q/xU69H9nuozx7JsvfNox/q2I0zvGb8UbSGO1x0/qdr7L+PeeeuJ3nfbV32q8z07xW5JSsbawVKyurl1If0durrQ4NnlxampydGJ8qpjOURdbM9Xb/ePkB3d3a/9Qh/i7tT/Z9ucu2//d799/8uwu8f90bufP/8Qu8Qcj4i9dxv9q/JOnO+1L4s92aH9+l/jJtoku41df/c/hLg8FAPZBdXVtfrpcLi0rKCj0pHDrl1GNtkKveybgUauuJqfmSdL3uiYAAAAAAAAAAABAt/bjcuJetxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4CD4IQAA//9HcdTQ") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file2\x00', 0x282, 0x140) 510.964392ms ago: executing program 9 (id=3673): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027f"], 0x57) 435.665903ms ago: executing program 9 (id=3675): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='mm_page_alloc\x00', r1}, 0x18) r2 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$VT_RESIZE(r2, 0x5609, &(0x7f0000000180)={0x65f5, 0x0, 0xff}) 405.094454ms ago: executing program 9 (id=3676): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e23}, 0x6e) listen(r1, 0x0) shutdown(r1, 0x0) connect$unix(r0, &(0x7f00000003c0)=@abs={0x1, 0x0, 0x4e23}, 0x6e) 391.287963ms ago: executing program 9 (id=3678): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) setxattr$incfs_size(0x0, &(0x7f0000000100), 0x0, 0x0, 0x3) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @local=@item_4={0x3, 0x2, 0x0, "53743ff6"}, @local=@item_012={0x2, 0x2, 0x2, "9000"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8}, @global=@item_4={0x3, 0x1, 0x5}, @local=@item_4={0x3, 0x2, 0x0, "00000400"}]}}, 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0xa0000) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000100)=""/101) 198.745107ms ago: executing program 4 (id=3682): sendmsg$sock(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000200)="1d1a", 0x2}], 0x1}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r1, 0x11b, 0x1, 0x0, &(0x7f0000000100)=0xfffffffffffffcf8) 198.251107ms ago: executing program 3 (id=3683): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r0, 0xffffffffffffffff, 0x200000000000000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000018010000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 181.349527ms ago: executing program 3 (id=3684): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pim6reg0\x00', 0x2}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f0000000380)=ANY=[@ANYBLOB="01000004"]) 162.459047ms ago: executing program 4 (id=3685): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@enum={0x2, 0x0, 0x0, 0xf}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x28}, 0x20) 142.250767ms ago: executing program 3 (id=3686): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0xff}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000015c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000009c3e850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000340)={[{@debug}, {@discard}, {@usrquota}, {@noinit_itable}, {@data_err_ignore}]}, 0x67, 0x52b, &(0x7f0000000a00)="$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") r2 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0) 101.838398ms ago: executing program 3 (id=3687): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000004080)={{r0}, &(0x7f0000004000), &(0x7f0000004040)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='kfree\x00', r1, 0x0, 0x8000000000004}, 0x18) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000a40)={'filter\x00', 0x7, 0x4, 0x3e8, 0xe8, 0x300, 0x0, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x1000, 0xc0, 0x3}}}, {{@uncond, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x7, 'syz0\x00', {0x10000}}}}, {{@arp={@broadcast, @rand_addr=0x64010100, 0x0, 0x0, 0x5, 0xd, {@empty, {[0xff, 0x0, 0xff, 0xff, 0x0, 0xff]}}, {@empty, {[0x0, 0x0, 0x0, 0xff]}}, 0xfffa, 0x6, 0x7, 0x0, 0xb2, 0x6, 'veth1_to_bond\x00', 'lo\x00', {}, {0xff}, 0x0, 0x210}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@multicast, @empty, @multicast1, @remote, 0xd, 0x1}}}], {{'\x00', 0xaf, 0xe8}, {0x28}}}}, 0x497) 90.072888ms ago: executing program 3 (id=3688): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$selinux_user(r2, &(0x7f0000000040)=ANY=[@ANYBLOB='system_u:objest_r:auth_cache_t r'], 0x27) 37.221059ms ago: executing program 4 (id=3689): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) newfstatat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0, 0x2000) syz_fuse_handle_req(r0, &(0x7f00000021c0), 0x2000, &(0x7f00000041c0)={&(0x7f0000000140)={0x50, 0x0, 0x0, {0x7, 0x29, 0x0, 0x0, 0x40, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004300)="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", 0x2000, &(0x7f0000008c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x78, 0x0, 0x7, {0xe, 0xcbff, 0x0, {0x5, 0xfffffffffffffff9, 0x1, 0x9, 0xa, 0x80000006, 0x1000005, 0x6, 0x101, 0xa000, 0x4, 0xffffffffffffffff, 0x0, 0x3, 0x5}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 0s ago: executing program 3 (id=3690): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$selinux_load(r2, &(0x7f0000000000)=ANY=[], 0xffaf) kernel console output (not intermixed with test programs): ing to 7 [ 105.870877][ T334] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 105.881911][ T334] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 105.896491][ T334] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 105.906234][ T334] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.920912][ T334] usb 3-1: config 0 descriptor?? [ 106.038261][ T5486] loop9: detected capacity change from 0 to 1024 [ 106.060641][ T5486] EXT4-fs: Ignoring removed orlov option [ 106.067256][ T5486] EXT4-fs: Ignoring removed mblk_io_submit option [ 106.093505][ T5486] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 106.182077][ T317] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 106.256542][ T2885] EXT4-fs (loop9): unmounting filesystem. [ 106.280186][ T5506] netlink: 104 bytes leftover after parsing attributes in process `syz.5.2043'. [ 106.334351][ T334] microsoft 0003:045E:07DA.0016: unknown main item tag 0x2 [ 106.347537][ T334] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 106.356500][ T334] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 106.364971][ T334] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 106.382867][ T334] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 106.395633][ T317] usb 2-1: config 0 has no interfaces? [ 106.404529][ T317] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 106.416006][ T334] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 106.426251][ T317] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.435397][ T334] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 106.443853][ T317] usb 2-1: Product: syz [ 106.449126][ T317] usb 2-1: Manufacturer: syz [ 106.454892][ T334] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 106.463386][ T317] usb 2-1: SerialNumber: syz [ 106.470013][ T334] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 106.477367][ T5521] loop9: detected capacity change from 0 to 8192 [ 106.483171][ T334] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0016/input/input19 [ 106.497325][ T317] usb 2-1: config 0 descriptor?? [ 106.508672][ T334] microsoft 0003:045E:07DA.0016: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 106.583668][ T288] usb 3-1: USB disconnect, device number 6 [ 106.609866][ T5526] fido_id[5526]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 106.617450][ T5528] loop5: detected capacity change from 0 to 512 [ 106.655165][ T5528] EXT4-fs (loop5): orphan cleanup on readonly fs [ 106.668611][ T5528] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.2051: bg 0: block 248: padding at end of block bitmap is not set [ 106.685316][ T5528] EXT4-fs error (device loop5): ext4_acquire_dquot:6801: comm syz.5.2051: Failed to acquire dquot type 1 [ 106.699501][ T5528] EXT4-fs (loop5): 1 truncate cleaned up [ 106.708947][ T5528] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 106.739610][ T5528] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 106.753055][ T5528] EXT4-fs (loop5): re-mounted. Quota mode: writeback. [ 106.775178][ T500] EXT4-fs (loop5): unmounting filesystem. [ 106.846630][ T5535] xt_NFQUEUE: number of total queues is 0 [ 106.885630][ T5537] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2054'. [ 106.914466][ T5539] loop5: detected capacity change from 0 to 128 [ 106.925800][ T5539] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 106.940055][ T5539] syz.5.2055 (pid 5539) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 106.959884][ T500] EXT4-fs (loop5): unmounting filesystem. [ 107.112992][ T2237] Bluetooth: hci0: Frame reassembly failed (-84) [ 107.129096][ T1511] Bluetooth: hci0: unexpected event 0x09 length: 0 < 3 [ 107.425240][ T5575] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2072'. [ 107.463533][ T5575] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2072'. [ 107.714854][ T5600] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2082'. [ 107.792892][ T5610] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2087'. [ 107.802970][ T5610] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2087'. [ 107.950387][ T5620] overlayfs: failed to clone upperpath [ 107.956980][ T5620] overlayfs: failed to clone lowerpath [ 107.966593][ T5622] syz.9.2091[5622] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 107.966681][ T5622] syz.9.2091[5622] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 108.052598][ T5636] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 108.074706][ T5636] SELinux: failed to load policy [ 108.092843][ T5640] loop9: detected capacity change from 0 to 256 [ 108.105297][ T5640] exFAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 108.116457][ T5640] exFAT-fs (loop9): Medium has reported failures. Some data may be lost. [ 108.128636][ T5640] exFAT-fs (loop9): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 108.177466][ T28] kauditd_printk_skb: 14 callbacks suppressed [ 108.177480][ T28] audit: type=1400 audit(622.129:1318): avc: denied { connect } for pid=5643 comm="syz.9.2100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 108.353607][ T5648] 9pnet_fd: p9_fd_create_unix (5648): problem connecting socket: ./file0: -5 [ 108.390581][ T28] audit: type=1400 audit(622.339:1319): avc: denied { write } for pid=5652 comm="syz.2.2104" name="rtc0" dev="devtmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 108.422192][ T28] audit: type=1400 audit(622.369:1320): avc: denied { ioctl } for pid=5652 comm="syz.2.2104" path="/dev/rtc0" dev="devtmpfs" ino=263 ioctlcmd=0x7003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 108.483141][ T5661] netlink: 'syz.2.2119': attribute type 2 has an invalid length. [ 108.557797][ T28] audit: type=1400 audit(622.509:1321): avc: denied { ioctl } for pid=5663 comm="syz.2.2111" path="/dev/usbmon5" dev="devtmpfs" ino=174 ioctlcmd=0x9204 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 108.614156][ T5666] __nla_validate_parse: 3 callbacks suppressed [ 108.614175][ T5666] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2110'. [ 108.632713][ T5666] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2110'. [ 108.664046][ T5671] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2114'. [ 108.677829][ T5671] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2114'. [ 108.688139][ T5671] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2114'. [ 108.700883][ T5671] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2114'. [ 108.755036][ T28] audit: type=1400 audit(622.709:1322): avc: denied { create } for pid=5678 comm="syz.2.2117" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 108.845475][ T38] usb 2-1: USB disconnect, device number 10 [ 108.929394][ T5693] loop1: detected capacity change from 0 to 128 [ 108.960048][ T5693] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 108.986621][ T285] EXT4-fs (loop1): unmounting filesystem. [ 109.172030][ T341] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 109.182171][ T2674] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 109.182171][ T1511] Bluetooth: hci0: command 0x1003 tx timeout [ 109.383066][ T341] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 109.402043][ T341] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 109.437745][ T341] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 109.472032][ T341] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.506809][ T341] usb 3-1: Product: syz [ 109.511388][ T341] usb 3-1: Manufacturer: syz [ 109.522116][ T341] usb 3-1: SerialNumber: syz [ 109.768357][ T341] usb 3-1: 0:2 : does not exist [ 109.779942][ T341] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 109.813047][ T341] usb 3-1: USB disconnect, device number 7 [ 109.856045][ T6] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 109.869021][ T5758] loop1: detected capacity change from 0 to 1024 [ 109.872461][ T6] hid-generic 0000:0000:0000.0017: hidraw0: HID v0.00 Device [syz1] on syz0 [ 109.902812][ T402] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 109.924408][ T5761] fido_id[5761]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 109.950291][ T5769] netlink: 'syz.1.2156': attribute type 12 has an invalid length. [ 110.258115][ T5797] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2169'. [ 110.303416][ T5802] SELinux: Context system_u:object_r:login_exec_t:s0 is not valid (left unmapped). [ 110.303415][ T28] audit: type=1400 audit(624.259:1323): avc: denied { relabelfrom } for pid=5801 comm="syz.2.2171" name="TCPv6" dev="sockfs" ino=36289 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 110.337278][ T28] audit: type=1400 audit(624.289:1324): avc: denied { relabelto } for pid=5801 comm="syz.2.2171" name="TCPv6" dev="sockfs" ino=36289 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=tcp_socket permissive=1 trawcon="system_u:object_r:login_exec_t:s0" [ 110.452303][ T5813] syz.9.2176[5813] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 110.452381][ T5813] syz.9.2176[5813] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 110.565314][ T5809] loop1: detected capacity change from 0 to 40427 [ 110.592084][ T5809] F2FS-fs (loop1): Invalid SB checksum offset: 0 [ 110.608651][ T5809] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 110.627978][ T5809] F2FS-fs (loop1): invalid crc value [ 110.645347][ T5809] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 110.684541][ T5809] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 110.685626][ T28] audit: type=1400 audit(624.639:1325): avc: denied { ioctl } for pid=5831 comm="syz.9.2184" path="/dev/binderfs/binder0" dev="binder" ino=16 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 110.692755][ T5809] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 110.753066][ T28] audit: type=1400 audit(624.639:1326): avc: denied { set_context_mgr } for pid=5831 comm="syz.9.2184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 110.754500][ T5835] loop9: detected capacity change from 0 to 128 [ 110.782157][ T285] syz-executor: attempt to access beyond end of device [ 110.782157][ T285] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 110.832980][ T5837] loop9: detected capacity change from 0 to 512 [ 110.848248][ T5837] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 110.875483][ T5837] EXT4-fs (loop9): 1 truncate cleaned up [ 110.881163][ T5837] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 110.912072][ T38] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 110.926163][ T2885] EXT4-fs (loop9): unmounting filesystem. [ 110.947936][ T28] audit: type=1400 audit(624.899:1327): avc: denied { read } for pid=5843 comm="syz.1.2189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 111.065888][ T5860] tmpfs: Unknown parameter 'nolazytime' [ 111.112465][ T5846] loop9: detected capacity change from 0 to 40427 [ 111.113077][ T38] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 111.129569][ T5846] F2FS-fs (loop9): invalid crc value [ 111.139081][ T38] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1 [ 111.149975][ T38] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 111.163038][ T38] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.99 [ 111.163772][ T5846] F2FS-fs (loop9): Found nat_bits in checkpoint [ 111.172474][ T38] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.202644][ T5825] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 111.211376][ T38] usb 3-1: invalid MIDI in EP 0 [ 111.220811][ T5846] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e4 [ 111.230157][ T38] snd-usb-audio: probe of 3-1:27.0 failed with error -22 [ 111.253540][ T5872] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2200'. [ 111.261336][ T5846] syz.9.2188: attempt to access beyond end of device [ 111.261336][ T5846] loop9: rw=2049, sector=53248, nr_sectors = 96 limit=40427 [ 111.267106][ T1060] udevd[1060]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 111.280388][ T5846] syz.9.2188: attempt to access beyond end of device [ 111.280388][ T5846] loop9: rw=2049, sector=53344, nr_sectors = 40 limit=40427 [ 111.292351][ T341] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 111.306600][ T5846] syz.9.2188: attempt to access beyond end of device [ 111.306600][ T5846] loop9: rw=2049, sector=53248, nr_sectors = 88 limit=40427 [ 111.377719][ T2885] syz-executor: attempt to access beyond end of device [ 111.377719][ T2885] loop9: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 111.459103][ T317] usb 3-1: USB disconnect, device number 8 [ 111.493481][ T341] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 111.505273][ T341] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 111.515672][ T341] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 111.528909][ T341] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 111.538252][ T341] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.549709][ T341] usb 2-1: config 0 descriptor?? [ 111.674260][ T5901] loop9: detected capacity change from 0 to 4096 [ 111.686071][ T5901] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 111.712657][ T5901] EXT4-fs (loop9): re-mounted. Quota mode: writeback. [ 111.729384][ T2885] EXT4-fs (loop9): unmounting filesystem. [ 111.964599][ T341] plantronics 0003:047F:FFFF.0018: unknown main item tag 0xd [ 111.973550][ T341] plantronics 0003:047F:FFFF.0018: No inputs registered, leaving [ 111.984755][ T341] plantronics 0003:047F:FFFF.0018: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 112.047543][ T5919] loop9: detected capacity change from 0 to 8192 [ 112.086455][ T341] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 112.096894][ T5923] loop9: detected capacity change from 0 to 1024 [ 112.103998][ T341] hid-generic 0000:0000:0000.0019: hidraw1: HID v0.00 Device [syz1] on syz0 [ 112.154031][ T3355] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 112.283115][ T341] usb 2-1: USB disconnect, device number 11 [ 112.393273][ T5949] netlink: 'syz.2.2233': attribute type 4 has an invalid length. [ 112.625163][ T5969] loop5: detected capacity change from 0 to 8192 [ 112.684460][ T5971] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5971 comm=syz.3.2254 [ 113.236496][ T6021] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2266'. [ 113.342329][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 113.342345][ T28] audit: type=1400 audit(627.299:1331): avc: denied { remount } for pid=6022 comm="syz.9.2267" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 113.382552][ T6023] overlayfs: upper fs does not support tmpfile. [ 113.406739][ T6025] loop1: detected capacity change from 0 to 512 [ 113.416172][ T28] audit: type=1400 audit(627.339:1332): avc: denied { mounton } for pid=6022 comm="syz.9.2267" path="/257/bus/file0" dev="bpf" ino=37925 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1 [ 113.480433][ T6025] EXT4-fs (loop1): 1 orphan inode deleted [ 113.487479][ T28] audit: type=1400 audit(627.369:1333): avc: denied { unmount } for pid=2885 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 113.492165][ T5075] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 113.562145][ T6025] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 113.575776][ T6033] tmpfs: Unknown parameter 'nolazytime' [ 113.580695][ T5075] EXT4-fs error (device loop1): ext4_release_dquot:6837: comm kworker/u4:194: Failed to release dquot type 1 [ 113.602736][ T285] EXT4-fs (loop1): unmounting filesystem. [ 113.628158][ T6035] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 113.668324][ T6035] device veth1_macvtap entered promiscuous mode [ 113.696739][ T5082] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 113.712642][ T5082] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 113.734877][ T5082] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 113.762666][ T5082] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 113.771060][ T5082] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 113.789529][ T5082] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 113.805493][ T5082] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 113.822903][ T5082] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 113.842493][ T5082] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 113.884502][ T6054] loop7: detected capacity change from 0 to 16384 [ 113.931559][ T6063] netlink: 72 bytes leftover after parsing attributes in process `syz.5.2286'. [ 113.986227][ T6067] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 113.995565][ T6067] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 113.997173][ T6060] loop2: detected capacity change from 0 to 8192 [ 114.004789][ T6067] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 114.004817][ T6067] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 114.004833][ T6067] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 114.038634][ T6067] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 114.047920][ T6067] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 114.057087][ T6067] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 114.066180][ T6067] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 114.075345][ T6067] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 114.087308][ T6054] I/O error, dev loop7, sector 2576 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 2 [ 114.451092][ T6111] loop9: detected capacity change from 0 to 4096 [ 114.480081][ T6111] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 114.588484][ T2885] EXT4-fs (loop9): unmounting filesystem. [ 114.623337][ T6128] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2315'. [ 114.645965][ T6099] loop1: detected capacity change from 0 to 40427 [ 114.660819][ T6099] F2FS-fs (loop1): invalid crc value [ 114.714048][ T6099] F2FS-fs (loop1): Found nat_bits in checkpoint [ 114.734528][ T6141] loop2: detected capacity change from 0 to 256 [ 114.757421][ T6141] FAT-fs (loop2): bogus number of FAT sectors [ 114.775223][ T6141] FAT-fs (loop2): Can't find a valid FAT filesystem [ 114.807217][ T6144] incfs: Options parsing error. -22 [ 114.812898][ T6099] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 114.813829][ T6144] incfs: mount failed -22 [ 114.930361][ T285] syz-executor: attempt to access beyond end of device [ 114.930361][ T285] loop1: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 115.038531][ T6158] netlink: 5 bytes leftover after parsing attributes in process `syz.3.2327'. [ 115.172620][ T6161] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2328'. [ 115.308867][ T6175] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2334'. [ 115.532777][ T6200] netlink: 88 bytes leftover after parsing attributes in process `syz.1.2344'. [ 115.543556][ T6200] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2344'. [ 115.591365][ T28] audit: type=1400 audit(629.539:1334): avc: denied { read } for pid=6203 comm="syz.1.2347" name="loop-control" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 115.641361][ T28] audit: type=1400 audit(629.569:1335): avc: denied { open } for pid=6203 comm="syz.1.2347" path="/dev/loop-control" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 115.664159][ T6209] loop2: detected capacity change from 0 to 128 [ 115.685089][ T6209] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 115.708774][ T6209] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 115.742030][ T38] usb 6-1: new full-speed USB device number 11 using dummy_hcd [ 115.749825][ T2291] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 115.765111][ T28] audit: type=1400 audit(629.719:1336): avc: denied { ioctl } for pid=6203 comm="syz.1.2347" path="/dev/loop-control" dev="devtmpfs" ino=117 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 115.871385][ T6220] loop2: detected capacity change from 0 to 256 [ 115.903830][ T6220] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 115.923109][ T38] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 115.952040][ T38] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 115.997370][ T28] audit: type=1400 audit(629.949:1337): avc: denied { execute_no_trans } for pid=6219 comm="syz.2.2353" path="/214/file1/file0" dev="loop2" ino=1048684 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 116.033089][ T38] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 116.059477][ T38] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.067924][ T38] usb 6-1: Product: syz [ 116.072410][ T38] usb 6-1: Manufacturer: syz [ 116.077467][ T38] usb 6-1: SerialNumber: syz [ 116.119142][ T6241] loop9: detected capacity change from 0 to 512 [ 116.134672][ T6241] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 116.179561][ T2885] EXT4-fs (loop9): unmounting filesystem. [ 116.223974][ T6253] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2366'. [ 116.233422][ T6253] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2366'. [ 116.290249][ T38] usb 6-1: 0:2 : does not exist [ 116.297757][ T38] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 116.316074][ T38] usb 6-1: USB disconnect, device number 11 [ 116.412164][ T341] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 116.592093][ T341] usb 3-1: Using ep0 maxpacket: 32 [ 116.599292][ T341] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 116.608197][ T341] usb 3-1: config 0 has no interface number 0 [ 116.616761][ T341] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 116.626634][ T341] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.635139][ T341] usb 3-1: Product: syz [ 116.639672][ T341] usb 3-1: Manufacturer: syz [ 116.644776][ T341] usb 3-1: SerialNumber: syz [ 116.650308][ T341] usb 3-1: config 0 descriptor?? [ 116.656154][ T341] smsc95xx v2.0.0 [ 116.737094][ T6272] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2376'. [ 116.742589][ T6274] loop1: detected capacity change from 0 to 512 [ 116.770038][ T6274] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 116.824253][ T285] EXT4-fs (loop1): unmounting filesystem. [ 116.867002][ T6292] loop1: detected capacity change from 0 to 256 [ 116.892126][ T6292] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011a39, chksum : 0xd7c18d7b, utbl_chksum : 0xe619d30d) [ 116.937395][ T28] audit: type=1400 audit(630.889:1338): avc: denied { rename } for pid=6291 comm="syz.1.2383" name="file0" dev="loop1" ino=1048686 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 116.961542][ T28] audit: type=1400 audit(630.889:1339): avc: denied { mounton } for pid=6291 comm="syz.1.2383" path="/450/file2/file1" dev="loop1" ino=1048686 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 116.988757][ T6294] exFAT-fs (loop1): error, invalid size(size(21) > aligned(9223372036854777344) [ 116.988757][ T6294] [ 117.000381][ T6294] exFAT-fs (loop1): Filesystem has been set read-only [ 117.058119][ T341] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 117.069088][ T341] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 117.312086][ T6] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 117.473502][ T6315] loop9: detected capacity change from 0 to 40427 [ 117.486429][ T6315] F2FS-fs (loop9): invalid crc value [ 117.502137][ T6315] F2FS-fs (loop9): Found nat_bits in checkpoint [ 117.504841][ T6] usb 6-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 117.526566][ T6] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.535800][ T6] usb 6-1: config 0 descriptor?? [ 117.546330][ T6315] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e4 [ 117.573908][ T6207] kworker/u4:321: attempt to access beyond end of device [ 117.573908][ T6207] loop9: rw=2049, sector=40960, nr_sectors = 32 limit=40427 [ 117.588463][ T6315] VFS:Filesystem freeze failed [ 117.681506][ T341] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000104: -71 [ 117.693363][ T341] smsc95xx: probe of 3-1:0.67 failed with error -71 [ 117.707669][ T341] usb 3-1: USB disconnect, device number 9 [ 117.893075][ T6336] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 118.124777][ T6347] loop1: detected capacity change from 0 to 40427 [ 118.141492][ T6347] F2FS-fs (loop1): heap/no_heap options were deprecated [ 118.158909][ T6347] F2FS-fs (loop1): fault_injection options not supported [ 118.172173][ T6347] F2FS-fs (loop1): fault_type options not supported [ 118.180048][ T6347] F2FS-fs (loop1): invalid crc value [ 118.223290][ T6347] F2FS-fs (loop1): Found nat_bits in checkpoint [ 118.312243][ T6347] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 118.373149][ T6347] syz.1.2407: attempt to access beyond end of device [ 118.373149][ T6347] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 118.411581][ T285] syz-executor: attempt to access beyond end of device [ 118.411581][ T285] loop1: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 118.732923][ T28] audit: type=1400 audit(632.689:1340): avc: denied { shutdown } for pid=6377 comm="syz.3.2419" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 118.754750][ T6] usb 6-1: Cannot set autoneg [ 118.759531][ T6] MOSCHIP usb-ethernet driver: probe of 6-1:0.0 failed with error -71 [ 118.779424][ T6] usb 6-1: USB disconnect, device number 12 [ 118.906617][ T6374] loop2: detected capacity change from 0 to 40427 [ 118.923989][ T6374] F2FS-fs (loop2): fault_injection options not supported [ 118.925981][ T6385] capability: warning: `syz.3.2422' uses 32-bit capabilities (legacy support in use) [ 118.939888][ T6374] F2FS-fs (loop2): invalid crc value [ 118.975871][ T6374] F2FS-fs (loop2): Found nat_bits in checkpoint [ 119.038753][ T6374] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 119.133404][ T3275] syz-executor: attempt to access beyond end of device [ 119.133404][ T3275] loop2: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 119.292084][ T6] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 119.320135][ T28] audit: type=1400 audit(633.269:1341): avc: denied { module_load } for pid=6417 comm="syz.2.2432" path=2F6D656D66643A2D42D54E49C56A9A707070F00884A26D202864656C6574656429 dev="tmpfs" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1 [ 119.351465][ T6418] Invalid ELF header len 8 [ 119.502285][ T6] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 119.522049][ T6] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 119.543713][ T6] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 119.554613][ T6] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 119.565187][ T288] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 119.574899][ T6] usb 2-1: SerialNumber: syz [ 119.580903][ T6423] loop2: detected capacity change from 0 to 512 [ 119.636770][ T6423] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 119.645137][ T28] audit: type=1400 audit(633.589:1342): avc: denied { append } for pid=6435 comm="syz.5.2441" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 119.725157][ T3275] EXT4-fs (loop2): unmounting filesystem. [ 119.780712][ T6448] incfs: Options parsing error. -22 [ 119.787521][ T288] usb 10-1: Using ep0 maxpacket: 32 [ 119.800484][ T6] usb 2-1: 0:2 : does not exist [ 119.807431][ T288] usb 10-1: config index 0 descriptor too short (expected 29220, got 36) [ 119.819582][ T288] usb 10-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 119.830082][ T6448] incfs: mount failed -22 [ 119.832183][ T6] usb 2-1: USB disconnect, device number 12 [ 119.845694][ T288] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 119.860599][ T288] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 119.872614][ T288] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 119.883734][ T288] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 119.897913][ T288] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 119.939175][ T288] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 119.959841][ T288] usb 10-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 119.980102][ T288] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.003647][ T288] usb 10-1: config 0 descriptor?? [ 120.073245][ T3355] udevd[3355]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 120.111827][ T6464] 9pnet: p9_errstr2errno: server reported unknown error 1844674 [ 120.206309][ T28] audit: type=1400 audit(634.159:1343): avc: denied { bind } for pid=6471 comm="syz.5.2458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 120.234360][ T288] usblp 10-1:0.0: usblp0: USB Bidirectional printer dev 6 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 120.355749][ T6479] loop1: detected capacity change from 0 to 256 [ 120.376908][ T6479] exfat: Deprecated parameter 'utf8' [ 120.405480][ T6479] exfat: Deprecated parameter 'namecase' [ 120.447069][ T6479] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xb5f96684, utbl_chksum : 0xe619d30d) [ 120.466978][ T334] usb 10-1: USB disconnect, device number 6 [ 120.477187][ T334] usblp0: removed [ 120.635732][ T6505] loop1: detected capacity change from 0 to 1024 [ 120.651128][ T6505] EXT4-fs: Ignoring removed i_version option [ 120.669244][ T6505] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 120.699189][ T6505] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 120.742671][ T6505] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:3841: comm syz.1.2474: Allocating blocks 497-513 which overlap fs metadata [ 120.742995][ T28] audit: type=1400 audit(634.699:1344): avc: denied { read } for pid=6511 comm="syz.2.2476" name="msr" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 120.772018][ T28] audit: type=1400 audit(634.699:1345): avc: denied { open } for pid=6511 comm="syz.2.2476" path="/dev/cpu/0/msr" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 120.808168][ T6504] EXT4-fs (loop1): pa ffff888132d1f2a0: logic 1, phys. 321, len 12 [ 120.816262][ T6504] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:4881: group 0, free 1, pa_free 2 [ 120.841544][ T285] EXT4-fs (loop1): unmounting filesystem. [ 121.262992][ T6558] loop9: detected capacity change from 0 to 8192 [ 121.275514][ T6558] loop9: p2 p3 p4[EZD] [ 121.280951][ T6558] loop9: p3 start 360447 is beyond EOD, truncated [ 121.287621][ T6558] loop9: p4 size 262912 extends beyond EOD, truncated [ 121.322529][ T1060] udevd[1060]: inotify_add_watch(7, /dev/loop9p4, 10) failed: No such file or directory [ 121.323257][ T3355] udevd[3355]: inotify_add_watch(7, /dev/loop9p2, 10) failed: No such file or directory [ 121.369562][ T6569] -: renamed from syzkaller0 [ 121.418415][ T6571] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2502'. [ 121.528825][ T28] audit: type=1400 audit(635.479:1346): avc: denied { read write } for pid=2885 comm="syz-executor" name="loop9" dev="devtmpfs" ino=127 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 121.597173][ T28] audit: type=1400 audit(635.479:1347): avc: denied { read write } for pid=500 comm="syz-executor" name="loop5" dev="devtmpfs" ino=123 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 121.621129][ T28] audit: type=1400 audit(635.479:1348): avc: denied { open } for pid=2885 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=127 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 121.680490][ T6591] input: syz1 as /devices/virtual/input/input21 [ 121.687205][ T28] audit: type=1400 audit(635.479:1349): avc: denied { ioctl } for pid=2885 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=127 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 121.735438][ T6593] virtiofs: Unknown parameter 'always 1 V3 [ 121.735438][ T6593] 010000E0 1 0:00000000 0 [ 121.735438][ T6593] 20 wg2 : 1 V3 [ 121.735438][ T6593] 010000E0 1 0:00000000 0 [ 121.735438][ T6593] 21 veth0_to_bridge: 1 V3 [ 121.735438][ T6593] 010000E0 1 0:00000000 0 [ 121.735438][ T6593] 22 bridge_slave_0: 1 V3 [ 121.735438][ T6593] 010000E0 1 0:00000000 0 [ 121.735438][ T6593] 23 veth1_to_bridge: 1 V3 [ 121.735438][ T6593] 010000E0 1 0:00000000 0 [ 121.735438][ T6593] 24 bridge_slave_1: 1 V3 [ 121.735438][ T6593] 010000E0 1 0:00000000 0 [ 121.735438][ T6593] 25 veth0_to_bond: 1 V3 [ 121.735438][ T6593] 010000E0 1 0:00000000 0 [ 121.735438][ T6593] 27 veth1_to_bond: 1 V3 [ 121.735438][ T6593] 010000E0 1 0:00000000 0 [ 121.735438][ T6593] 29 veth0_to_team: 1 V3 [ 121.735438][ T6593] 010000E0 1 0:00000000 0 [ 121.736094][ T6593] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2511'. [ 121.885586][ T6599] loop1: detected capacity change from 0 to 2048 [ 121.908319][ T6599] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 121.955719][ T285] EXT4-fs (loop1): unmounting filesystem. [ 122.305312][ T6666] 9pnet: p9_errstr2errno: server reported unknown error pA [ 122.333447][ T6668] loop1: detected capacity change from 0 to 128 [ 122.384522][ T6675] syz.3.2547[6675] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 122.384629][ T6675] syz.3.2547[6675] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 122.429918][ T6641] loop9: detected capacity change from 0 to 32768 [ 122.504709][ T6641] loop9: p1 p3 < > [ 122.572083][ T334] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 122.577412][ T1060] udevd[1060]: inotify_add_watch(7, /dev/loop9p3, 10) failed: No such file or directory [ 122.592417][ T3355] udevd[3355]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 122.686988][ T6704] I/O error, dev loop19, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 122.696491][ T6704] FAT-fs (loop19): unable to read boot sector [ 122.762619][ T334] usb 6-1: Using ep0 maxpacket: 32 [ 122.778789][ T334] usb 6-1: New USB device found, idVendor=056a, idProduct=0026, bcdDevice= 0.00 [ 122.792728][ T334] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.814060][ T334] usb 6-1: config 0 descriptor?? [ 122.822472][ T6711] netlink: 8 bytes leftover after parsing attributes in process `'. [ 122.844608][ T6713] loop1: detected capacity change from 0 to 512 [ 122.882864][ T6713] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.2563: inode #1: comm syz.1.2563: iget: illegal inode # [ 122.898220][ T6713] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.2563: error while reading EA inode 1 err=-117 [ 122.912965][ T6713] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.2563: inode #1: comm syz.1.2563: iget: illegal inode # [ 122.935117][ T6713] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.2563: error while reading EA inode 1 err=-117 [ 122.948327][ T6713] EXT4-fs (loop1): 1 orphan inode deleted [ 122.954653][ T6713] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 122.988051][ T285] EXT4-fs (loop1): unmounting filesystem. [ 123.017180][ T6731] loop1: detected capacity change from 0 to 256 [ 123.035902][ T6731] FAT-fs (loop1): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 123.060722][ T6736] cgroup: fork rejected by pids controller in /syz9 [ 123.226107][ T334] wacom 0003:056A:0026.001A: unknown main item tag 0x0 [ 123.233270][ T334] wacom 0003:056A:0026.001A: unknown main item tag 0x0 [ 123.252441][ T334] wacom 0003:056A:0026.001A: unknown main item tag 0x0 [ 123.261145][ T334] wacom 0003:056A:0026.001A: Unknown device_type for 'HID 056a:0026'. Assuming pen. [ 123.272336][ T334] wacom 0003:056A:0026.001A: hidraw0: USB HID v0.08 Device [HID 056a:0026] on usb-dummy_hcd.5-1/input0 [ 123.295499][ T334] input: Wacom Intuos5 touch S Pen as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:056A:0026.001A/input/input22 [ 123.406559][ T6779] TCP: TCP_TX_DELAY enabled [ 123.427655][ T334] usb 6-1: USB disconnect, device number 13 [ 123.507827][ T6773] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.515767][ T6773] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.519209][ T6793] overlayfs: failed to clone upperpath [ 123.523779][ T6773] device bridge_slave_0 entered promiscuous mode [ 123.538081][ T6773] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.545844][ T6773] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.553518][ T6773] device bridge_slave_1 entered promiscuous mode [ 123.633351][ T6773] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.640416][ T6773] bridge0: port 2(bridge_slave_1) entered forwarding state [ 123.647747][ T6773] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.654792][ T6773] bridge0: port 1(bridge_slave_0) entered forwarding state [ 123.685983][ T999] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 123.694441][ T999] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.701742][ T999] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.713741][ T5104] device vlan2 left promiscuous mode [ 123.726838][ T5104] bridge0: port 3(vlan2) entered disabled state [ 123.734836][ T5104] device bridge_slave_1 left promiscuous mode [ 123.740993][ T5104] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.750256][ T5104] device bridge_slave_0 left promiscuous mode [ 123.756536][ T5104] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.764962][ T5104] device veth0_vlan left promiscuous mode [ 123.827378][ T999] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 123.838224][ T999] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.847993][ T999] bridge0: port 1(bridge_slave_0) entered forwarding state [ 123.856947][ T999] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 123.865368][ T999] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.873557][ T999] bridge0: port 2(bridge_slave_1) entered forwarding state [ 123.887579][ T999] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 123.898023][ T999] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 123.917295][ T999] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 123.931496][ T999] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 123.940741][ T999] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 123.951232][ T999] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 123.961006][ T6773] device veth0_vlan entered promiscuous mode [ 123.976057][ T28] kauditd_printk_skb: 92 callbacks suppressed [ 123.976073][ T28] audit: type=1400 audit(637.929:1442): avc: denied { read } for pid=6817 comm="syz.5.2605" name="msr" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 123.976255][ T999] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 123.987878][ T28] audit: type=1400 audit(637.939:1443): avc: denied { open } for pid=6817 comm="syz.5.2605" path="/dev/cpu/0/msr" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 124.007306][ T6773] device veth1_macvtap entered promiscuous mode [ 124.059694][ T999] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 124.088858][ T999] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 124.105766][ T28] audit: type=1400 audit(638.059:1444): avc: denied { mounton } for pid=6773 comm="syz-executor" path="/root/syzkaller.5r5Psh/syz-tmp" dev="sda1" ino=2059 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 124.207259][ T28] audit: type=1400 audit(638.079:1445): avc: denied { mount } for pid=6773 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 124.225908][ T6837] loop1: detected capacity change from 0 to 512 [ 124.238393][ T6837] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 124.280598][ T28] audit: type=1400 audit(638.079:1446): avc: denied { mounton } for pid=6773 comm="syz-executor" path="/root/syzkaller.5r5Psh/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 124.283778][ T6837] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 124.322524][ T28] audit: type=1400 audit(638.089:1447): avc: denied { mounton } for pid=6773 comm="syz-executor" path="/root/syzkaller.5r5Psh/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=40482 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 124.327269][ T6837] System zones: 1-12 [ 124.375227][ T28] audit: type=1400 audit(638.089:1448): avc: denied { mounton } for pid=6773 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=570 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 124.375268][ T6837] EXT4-fs (loop1): 1 truncate cleaned up [ 124.404514][ T6837] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 124.421419][ T28] audit: type=1400 audit(638.089:1449): avc: denied { mount } for pid=6773 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 124.447618][ T28] audit: type=1400 audit(638.089:1450): avc: denied { mounton } for pid=6773 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 124.472745][ T28] audit: type=1400 audit(638.089:1451): avc: denied { mount } for pid=6773 comm="syz-executor" name="/" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 124.549501][ T285] EXT4-fs (loop1): unmounting filesystem. [ 124.687919][ T6881] 9pnet: p9_errstr2errno: server reported unknown error @pA;KZ44/@qkp [ 124.687919][ T6881] C<+ [ 125.065061][ T6913] loop2: detected capacity change from 0 to 40427 [ 125.073514][ T6913] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 125.081625][ T6913] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 125.092870][ T6913] F2FS-fs (loop2): Found nat_bits in checkpoint [ 125.114087][ T6913] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 125.121315][ T6913] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 125.239481][ T6941] syz.3.2655[6941] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 125.239529][ T6941] syz.3.2655[6941] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 125.300851][ T317] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 125.515943][ T317] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 125.527112][ T317] usb 10-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 125.539046][ T317] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 125.548340][ T317] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.556594][ T317] usb 10-1: Product: syz [ 125.560922][ T317] usb 10-1: Manufacturer: syz [ 125.565659][ T317] usb 10-1: SerialNumber: syz [ 125.571808][ T317] cdc_mbim 10-1:1.0: skipping garbage [ 125.756456][ T6972] loop1: detected capacity change from 0 to 2048 [ 125.772580][ T6972] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 125.786566][ T6929] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 125.798006][ T285] EXT4-fs (loop1): unmounting filesystem. [ 125.860962][ T6983] loop1: detected capacity change from 0 to 256 [ 125.875191][ T6983] exfat: Deprecated parameter 'utf8' [ 125.880659][ T6983] exfat: Unknown parameter 'gi' [ 125.910089][ T334] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 125.921523][ T334] hid-generic 0000:0000:0000.001B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 125.939889][ T1060] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 126.325667][ T7002] loop2: detected capacity change from 0 to 1024 [ 126.341816][ T7002] EXT4-fs: Ignoring removed orlov option [ 126.348710][ T334] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 126.359047][ T7002] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 126.391152][ T3275] EXT4-fs (loop2): unmounting filesystem. [ 126.440430][ T6929] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 126.450785][ T317] cdc_mbim 10-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 126.458618][ T317] cdc_mbim 10-1:1.0: setting rx_max = 2048 [ 126.542336][ T334] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 126.546245][ T7014] loop2: detected capacity change from 0 to 2048 [ 126.558456][ T334] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 126.577621][ T7014] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 126.586397][ T334] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 126.595540][ T334] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 126.603653][ T334] usb 6-1: SerialNumber: syz [ 126.627030][ T3275] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 126.642426][ T3275] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 126.655099][ T3275] EXT4-fs (loop2): unmounting filesystem. [ 126.672680][ T7021] loop2: detected capacity change from 0 to 512 [ 126.679135][ T317] cdc_mbim 10-1:1.0: setting tx_max = 184 [ 126.686857][ T7021] ext4: Unknown parameter 'fsname' [ 126.694023][ T7021] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2688'. [ 126.695120][ T317] cdc_mbim 10-1:1.0: cdc-wdm0: USB WDM device [ 126.725084][ T317] cdc_mbim 10-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.9-1, CDC MBIM, 4a:51:da:ee:e8:d8 [ 126.831270][ T334] usb 6-1: 0:2 : does not exist [ 126.838017][ T334] usb 6-1: USB disconnect, device number 14 [ 126.908820][ T317] usb 10-1: USB disconnect, device number 7 [ 126.915777][ T317] cdc_mbim 10-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.9-1, CDC MBIM [ 127.016854][ T7045] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2697'. [ 127.026265][ T7045] netlink: 43 bytes leftover after parsing attributes in process `syz.1.2697'. [ 127.035393][ T7045] netlink: 'syz.1.2697': attribute type 6 has an invalid length. [ 127.043146][ T7045] netlink: 'syz.1.2697': attribute type 5 has an invalid length. [ 127.051184][ T7045] netlink: 43 bytes leftover after parsing attributes in process `syz.1.2697'. [ 127.141320][ T7049] SELinux: failed to load policy [ 127.157096][ T7059] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2704'. [ 127.183041][ T7061] xt_CT: You must specify a L4 protocol and not use inversions on it [ 127.216091][ T7068] netem: change failed [ 127.278214][ T7080] overlayfs: failed to clone upperpath [ 127.305280][ T7085] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2716'. [ 127.345064][ T7094] loop1: detected capacity change from 0 to 128 [ 127.363612][ T7094] FAT-fs (loop1): error, invalid FAT chain (i_pos 548, last_block 8) [ 127.371941][ T7094] FAT-fs (loop1): Filesystem has been set read-only [ 127.378750][ T7094] FAT-fs (loop1): error, corrupted file size (i_pos 548, 522) [ 127.404876][ T7102] loop1: detected capacity change from 0 to 1024 [ 127.411772][ T7102] EXT4-fs: Ignoring removed bh option [ 127.430222][ T7102] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 127.461187][ T7102] EXT4-fs error (device loop1): ext4_find_dest_de:2115: inode #12: block 7: comm syz.1.2724: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 127.486637][ T7102] EXT4-fs (loop1): Remounting filesystem read-only [ 127.533698][ T285] EXT4-fs error (device loop1): ext4_read_inline_dir:1593: inode #12: block 7: comm syz-executor: path /503/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 127.557457][ T285] EXT4-fs (loop1): Remounting filesystem read-only [ 127.565823][ T285] EXT4-fs error (device loop1): ext4_read_inline_dir:1593: inode #12: block 7: comm syz-executor: path /503/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 127.612880][ T7118] serio: Serial port ptm0 [ 127.617638][ T285] EXT4-fs (loop1): Remounting filesystem read-only [ 127.624582][ T285] EXT4-fs error (device loop1): empty_inline_dir:1877: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 127.663950][ T285] EXT4-fs (loop1): Remounting filesystem read-only [ 127.671891][ T285] EXT4-fs warning (device loop1): empty_inline_dir:1884: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 127.706491][ T285] EXT4-fs error (device loop1): ext4_read_inline_dir:1593: inode #12: block 7: comm syz-executor: path /503/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 127.729704][ T285] EXT4-fs (loop1): Remounting filesystem read-only [ 127.736378][ T285] EXT4-fs error (device loop1): ext4_read_inline_dir:1593: inode #12: block 7: comm syz-executor: path /503/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 127.768945][ T285] EXT4-fs (loop1): Remounting filesystem read-only [ 127.775163][ T102] udevd[102]: worker [3355] terminated by signal 33 (Unknown signal 33) [ 127.785677][ T285] EXT4-fs error (device loop1): empty_inline_dir:1877: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 127.806752][ T285] EXT4-fs (loop1): Remounting filesystem read-only [ 127.807782][ T102] udevd[102]: worker [3355] failed while handling '/devices/virtual/block/loop2' [ 127.813760][ T285] EXT4-fs warning (device loop1): empty_inline_dir:1884: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 127.837494][ T285] EXT4-fs error (device loop1): ext4_read_inline_dir:1593: inode #12: block 7: comm syz-executor: path /503/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 127.860186][ T285] EXT4-fs (loop1): Remounting filesystem read-only [ 127.866853][ T285] EXT4-fs error (device loop1): ext4_read_inline_dir:1593: inode #12: block 7: comm syz-executor: path /503/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 127.919580][ T285] EXT4-fs (loop1): Remounting filesystem read-only [ 127.929267][ T285] EXT4-fs error (device loop1): empty_inline_dir:1877: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 128.547312][ T285] EXT4-fs warning (device loop1): empty_inline_dir:1884: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 128.559858][ T7147] loop5: detected capacity change from 0 to 512 [ 128.562999][ T285] EXT4-fs warning (device loop1): empty_inline_dir:1884: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 128.584503][ T285] EXT4-fs warning (device loop1): empty_inline_dir:1884: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 128.599321][ T285] EXT4-fs warning (device loop1): empty_inline_dir:1884: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 128.615584][ T285] EXT4-fs warning (device loop1): empty_inline_dir:1884: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 128.633150][ T7147] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 128.644148][ T285] EXT4-fs warning (device loop1): empty_inline_dir:1884: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 128.676871][ T285] EXT4-fs warning (device loop1): empty_inline_dir:1884: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 128.692548][ T285] EXT4-fs warning (device loop1): empty_inline_dir:1884: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 128.709167][ T7147] EXT4-fs (loop5): 1 truncate cleaned up [ 128.719844][ T7147] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 128.770384][ T7160] loop2: detected capacity change from 0 to 128 [ 128.783573][ T7160] EXT4-fs: Ignoring removed nobh option [ 128.799443][ T7160] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 128.856778][ T7160] EXT4-fs (loop2): shut down requested (2) [ 128.895152][ T7167] overlayfs: failed to clone upperpath [ 128.933918][ T3275] EXT4-fs (loop2): unmounting filesystem. [ 128.989911][ T500] EXT4-fs (loop5): unmounting filesystem. [ 129.025601][ T7178] netlink: 104 bytes leftover after parsing attributes in process `syz.5.2757'. [ 129.123079][ T7173] loop2: detected capacity change from 0 to 40427 [ 129.133577][ T7173] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 129.146101][ T7173] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 129.202414][ T7173] F2FS-fs (loop2): Found nat_bits in checkpoint [ 129.240874][ T7208] bridge0: port 3(syz_tun) entered blocking state [ 129.256480][ T7208] bridge0: port 3(syz_tun) entered disabled state [ 129.263203][ T7173] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 129.274337][ T7208] device syz_tun entered promiscuous mode [ 129.277755][ T7173] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 129.284810][ T7208] bridge0: port 3(syz_tun) entered blocking state [ 129.294000][ T7208] bridge0: port 3(syz_tun) entered forwarding state [ 129.347318][ T28] kauditd_printk_skb: 80 callbacks suppressed [ 129.347336][ T28] audit: type=1400 audit(642.989:1532): avc: denied { create } for pid=7172 comm="syz.2.2753" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=blk_file permissive=1 [ 129.484431][ T7216] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.491502][ T7216] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.499275][ T7216] device bridge_slave_0 entered promiscuous mode [ 129.506776][ T7216] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.514145][ T7216] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.521903][ T7216] device bridge_slave_1 entered promiscuous mode [ 129.536781][ T7225] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2769'. [ 129.596588][ T28] audit: type=1400 audit(643.213:1533): avc: denied { remount } for pid=7232 comm="syz.9.2775" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 129.684521][ T7235] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 129.717903][ T5104] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 129.730384][ T5104] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 129.740871][ T7257] block device autoloading is deprecated and will be removed. [ 129.741340][ T5104] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 129.760727][ T5104] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 129.769051][ T5104] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 129.777715][ T5104] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 129.786465][ T5104] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 129.795993][ T5104] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 129.840781][ T28] audit: type=1400 audit(643.447:1534): avc: denied { sqpoll } for pid=7264 comm="syz.5.2788" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 129.849856][ T6205] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 129.883143][ T28] audit: type=1326 audit(643.485:1535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7269 comm="syz.3.2791" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f43c098e9a9 code=0x0 [ 129.901412][ T7272] loop5: detected capacity change from 0 to 512 [ 129.906603][ T6205] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 129.921293][ T6205] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.928369][ T6205] bridge0: port 1(bridge_slave_0) entered forwarding state [ 129.937199][ T7272] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 129.937272][ T6205] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 129.956462][ T6205] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.963563][ T6205] bridge0: port 2(bridge_slave_1) entered forwarding state [ 129.974075][ T6205] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 129.982169][ T7272] EXT4-fs (loop5): 1 truncate cleaned up [ 129.988898][ T7272] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 129.988916][ T6205] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 130.003661][ T6205] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 130.021111][ T7216] device veth0_vlan entered promiscuous mode [ 130.030952][ T28] audit: type=1400 audit(643.625:1536): avc: denied { create } for pid=7271 comm="syz.5.2790" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 130.038908][ T6205] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 130.082091][ T500] EXT4-fs (loop5): unmounting filesystem. [ 130.085974][ T6205] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 130.104526][ T28] audit: type=1400 audit(643.625:1537): avc: denied { create } for pid=7271 comm="syz.5.2790" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=fifo_file permissive=1 [ 130.149009][ T6205] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 130.157866][ T6205] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 130.173851][ T7216] device veth1_macvtap entered promiscuous mode [ 130.181841][ T6205] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 130.194539][ T6205] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 130.203959][ T6205] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 130.227834][ T6205] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 130.238825][ T6205] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 130.249286][ T7282] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2795'. [ 130.271675][ T7294] loop2: detected capacity change from 0 to 512 [ 130.295546][ T7294] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 130.355395][ T3275] EXT4-fs (loop2): unmounting filesystem. [ 130.380282][ T7304] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2804'. [ 130.710377][ T19] usb 6-1: new full-speed USB device number 15 using dummy_hcd [ 130.721537][ T28] audit: type=1400 audit(644.270:1538): avc: denied { create } for pid=7330 comm="syz.0.2815" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 130.903867][ T19] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 130.919282][ T19] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 130.930141][ T19] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.938519][ T19] usb 6-1: Product: syz [ 130.942730][ T28] audit: type=1326 audit(644.476:1539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7350 comm="syz.3.2824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43c098e9a9 code=0x7ffc0000 [ 130.966021][ T19] usb 6-1: Manufacturer: syz [ 130.970738][ T19] usb 6-1: SerialNumber: syz [ 130.977969][ T28] audit: type=1326 audit(644.476:1540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7350 comm="syz.3.2824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f43c098e9a9 code=0x7ffc0000 [ 131.001097][ T7313] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 131.002931][ T28] audit: type=1326 audit(644.476:1541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7350 comm="syz.3.2824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f43c098e9e3 code=0x7ffc0000 [ 131.068291][ T7359] loop9: detected capacity change from 0 to 1024 [ 131.093419][ T7359] EXT4-fs error (device loop9): ext4_map_blocks:745: inode #3: block 1: comm syz.9.2826: lblock 1 mapped to illegal pblock 1 (length 1) [ 131.109566][ T7359] EXT4-fs error (device loop9): ext4_acquire_dquot:6801: comm syz.9.2826: Failed to acquire dquot type 0 [ 131.124949][ T7359] EXT4-fs error (device loop9): ext4_free_blocks:6210: comm syz.9.2826: Freeing blocks not in datazone - block = 0, count = 4096 [ 131.135283][ T7368] input: syz0 as /devices/virtual/input/input26 [ 131.140397][ T7359] EXT4-fs error (device loop9): ext4_read_inode_bitmap:140: comm syz.9.2826: Invalid inode bitmap blk 0 in block_group 0 [ 131.163227][ T6205] EXT4-fs error (device loop9): ext4_map_blocks:635: inode #3: block 1: comm kworker/u4:319: lblock 1 mapped to illegal pblock 1 (length 1) [ 131.163507][ T7359] EXT4-fs error (device loop9) in ext4_free_inode:362: Corrupt filesystem [ 131.186643][ T7359] EXT4-fs (loop9): 1 orphan inode deleted [ 131.192567][ T7359] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 131.201666][ T6205] EXT4-fs error (device loop9): ext4_release_dquot:6837: comm kworker/u4:319: Failed to release dquot type 0 [ 131.217866][ T7371] loop2: detected capacity change from 0 to 512 [ 131.234542][ T7371] EXT4-fs: Ignoring removed nomblk_io_submit option [ 131.245818][ T7359] EXT4-fs (loop9): unmounting filesystem. [ 131.271200][ T7371] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 131.308028][ T7371] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 131.315024][ T7382] input: syz0 as /devices/virtual/input/input27 [ 131.366269][ T3275] EXT4-fs (loop2): unmounting filesystem. [ 131.378440][ T7388] loop9: detected capacity change from 0 to 512 [ 131.420615][ T7390] loop2: detected capacity change from 0 to 512 [ 131.432995][ T7390] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 131.443872][ T7388] EXT4-fs error (device loop9): ext4_ext_check_inode:520: inode #3: comm syz.9.2838: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 131.471198][ T7388] EXT4-fs error (device loop9): ext4_quota_enable:7012: comm syz.9.2838: Bad quota inode: 3, type: 0 [ 131.482794][ T7390] EXT4-fs (loop2): failed to initialize system zone (-117) [ 131.490264][ T7390] EXT4-fs (loop2): mount failed [ 131.496152][ T7388] EXT4-fs warning (device loop9): ext4_enable_quotas:7053: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 131.514105][ T7388] EXT4-fs (loop9): mount failed [ 131.631346][ T7404] SELinux: failed to load policy [ 131.941184][ T7448] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 132.089752][ T19] cdc_ncm 6-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 132.099639][ T19] cdc_ncm 6-1:1.0: setting tx_max = 88 [ 132.118330][ T19] cdc_ncm 6-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.5-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 132.153963][ T7454] loop9: detected capacity change from 0 to 40427 [ 132.169461][ T7454] F2FS-fs (loop9): fault_injection options not supported [ 132.185544][ T7454] F2FS-fs (loop9): invalid crc value [ 132.195982][ T7454] F2FS-fs (loop9): Found nat_bits in checkpoint [ 132.230087][ T7454] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 132.256785][ T7454] syz.9.2868: attempt to access beyond end of device [ 132.256785][ T7454] loop9: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 132.278123][ T6773] syz-executor: attempt to access beyond end of device [ 132.278123][ T6773] loop9: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 132.303255][ T19] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 132.313477][ T334] usb 6-1: USB disconnect, device number 15 [ 132.321476][ T334] cdc_ncm 6-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.5-1, CDC NCM (NO ZLP) [ 132.427468][ T7476] overlayfs: failed to clone lowerpath [ 132.507533][ T19] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 132.518662][ T19] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 132.528892][ T19] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 132.542332][ T19] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 132.551432][ T19] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.560290][ T19] usb 3-1: config 0 descriptor?? [ 132.903045][ T7517] __nla_validate_parse: 1 callbacks suppressed [ 132.903060][ T7517] netlink: 96 bytes leftover after parsing attributes in process `syz.5.2894'. [ 132.935697][ T7520] netlink: 96 bytes leftover after parsing attributes in process `syz.5.2895'. [ 132.995732][ T19] plantronics 0003:047F:FFFF.001C: unknown main item tag 0xd [ 133.005501][ T19] plantronics 0003:047F:FFFF.001C: No inputs registered, leaving [ 133.016681][ T19] plantronics 0003:047F:FFFF.001C: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 133.094844][ T7524] loop5: detected capacity change from 0 to 32768 [ 133.138806][ T7524] loop5: p1 p3 < > [ 133.200954][ T1060] udevd[1060]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 133.200956][ T402] udevd[402]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 133.298457][ T19] usb 3-1: USB disconnect, device number 10 [ 133.798826][ T7566] x_tables: duplicate underflow at hook 1 [ 133.980695][ T7581] loop2: detected capacity change from 0 to 128 [ 133.997952][ T7581] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 134.014715][ T3275] EXT4-fs (loop2): unmounting filesystem. [ 134.213359][ T7589] loop2: detected capacity change from 0 to 40427 [ 134.223487][ T7589] F2FS-fs (loop2): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 134.231380][ T7589] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 134.249654][ T7589] F2FS-fs (loop2): invalid crc value [ 134.264906][ T7589] F2FS-fs (loop2): Found nat_bits in checkpoint [ 134.278454][ T7593] loop5: detected capacity change from 0 to 512 [ 134.298487][ T7593] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 134.300914][ T7589] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 134.314565][ T7589] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 134.322134][ T7593] EXT4-fs (loop5): re-mounted. Quota mode: none. [ 134.338305][ T7589] syz.2.2924: attempt to access beyond end of device [ 134.338305][ T7589] loop2: rw=2051, sector=65536, nr_sectors = 65536 limit=40427 [ 134.353353][ T7589] F2FS-fs (loop2): Issue discard(8192, 8192, 8192) failed, ret: -5 [ 134.381062][ T500] EXT4-fs (loop5): unmounting filesystem. [ 134.446386][ T7603] Invalid ELF header magic: != ELF [ 134.494587][ T7609] loop2: detected capacity change from 0 to 16 [ 134.516748][ T7609] erofs: (device loop2): z_erofs_parse_cfgs: algorithm 1 isn't enabled on this kernel [ 134.574752][ T7597] loop5: detected capacity change from 0 to 40427 [ 134.586757][ T7597] F2FS-fs (loop5): Found nat_bits in checkpoint [ 134.617086][ T7597] F2FS-fs (loop5): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 134.630334][ T7597] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 134.654722][ T500] syz-executor: attempt to access beyond end of device [ 134.654722][ T500] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 134.734512][ T7628] overlayfs: workdir and upperdir must reside under the same mount [ 134.986673][ T334] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 135.061520][ T317] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 135.178988][ T334] usb 3-1: Using ep0 maxpacket: 16 [ 135.185507][ T334] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 135.193631][ T334] usb 3-1: config 0 has no interface number 0 [ 135.200068][ T334] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 135.211439][ T334] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 135.222413][ T334] usb 3-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 135.231687][ T334] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.240637][ T334] usb 3-1: config 0 descriptor?? [ 135.255187][ T317] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 135.267207][ T317] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 135.278670][ T317] usb 10-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 135.288307][ T317] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.297051][ T317] usb 10-1: config 0 descriptor?? [ 135.471648][ T7659] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2952'. [ 135.893650][ T334] uclogic 0003:28BD:0071.001D: pen parameters not found [ 135.920381][ T334] uclogic 0003:28BD:0071.001D: interface is invalid, ignoring [ 135.948404][ T317] usb 10-1: string descriptor 0 read error: -22 [ 135.972400][ T7692] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 135.988626][ T7692] SELinux: failed to load policy [ 136.012641][ T7696] loop5: detected capacity change from 0 to 512 [ 136.027071][ T7702] 9pnet_fd: Insufficient options for proto=fd [ 136.048156][ T7696] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 136.057354][ T7696] ext4 filesystem being mounted at /553/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 136.079098][ T7696] SELinux: Context system_u:object_r:devicekit_power_exec_t:s0 is not valid (left unmapped). [ 136.091272][ T28] kauditd_printk_skb: 34 callbacks suppressed [ 136.091287][ T28] audit: type=1400 audit(2000000000.261:1573): avc: denied { relabelto } for pid=7695 comm="syz.5.2969" name="file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:devicekit_power_exec_t:s0" [ 136.121627][ T334] usb 3-1: USB disconnect, device number 11 [ 136.149153][ T500] EXT4-fs (loop5): unmounting filesystem. [ 136.207464][ T7715] netlink: 96 bytes leftover after parsing attributes in process `syz.5.2977'. [ 136.335756][ T7727] netlink: 'syz.3.2983': attribute type 12 has an invalid length. [ 136.347180][ T7727] netlink: 'syz.3.2983': attribute type 29 has an invalid length. [ 136.356099][ T7727] netlink: 148 bytes leftover after parsing attributes in process `syz.3.2983'. [ 136.366611][ T7727] netlink: 51 bytes leftover after parsing attributes in process `syz.3.2983'. [ 136.377353][ T317] uclogic 0003:256C:006D.001E: failed retrieving string descriptor #100: -71 [ 136.388441][ T317] uclogic 0003:256C:006D.001E: failed retrieving pen parameters: -71 [ 136.396583][ T317] uclogic 0003:256C:006D.001E: failed probing pen v1 parameters: -71 [ 136.404701][ T7721] loop5: detected capacity change from 0 to 40427 [ 136.412604][ T317] uclogic 0003:256C:006D.001E: failed probing parameters: -71 [ 136.413293][ T7721] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 136.428834][ T317] uclogic: probe of 0003:256C:006D.001E failed with error -71 [ 136.432189][ T7721] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 136.440951][ T317] usb 10-1: USB disconnect, device number 8 [ 136.455081][ T7721] F2FS-fs (loop5): invalid crc value [ 136.472785][ T7721] F2FS-fs (loop5): Found nat_bits in checkpoint [ 136.508235][ T7721] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 136.516782][ T7721] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 136.563615][ T7721] syz.5.2979: attempt to access beyond end of device [ 136.563615][ T7721] loop5: rw=2049, sector=77824, nr_sectors = 184 limit=40427 [ 136.585237][ T7721] syz.5.2979: attempt to access beyond end of device [ 136.585237][ T7721] loop5: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 136.609999][ T5103] F2FS-fs (loop5): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 136.619731][ T5103] F2FS-fs (loop5): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 136.663644][ T28] audit: type=1400 audit(2000000000.785:1574): avc: denied { mounton } for pid=7737 comm="syz.3.2987" path="/778/file0" dev="tmpfs" ino=4087 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 136.715254][ T28] audit: type=1400 audit(2000000000.841:1575): avc: denied { append } for pid=7741 comm="syz.2.2989" name="rtc0" dev="devtmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 136.837306][ T7753] overlayfs: failed to clone upperpath [ 137.001105][ T7774] syz.5.3004[7774] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 137.001185][ T7774] syz.5.3004[7774] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 137.029369][ T7774] syz.5.3004[7774] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 137.049956][ T7774] syz.5.3004[7774] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 137.112068][ T28] audit: type=1400 audit(2000000001.206:1576): avc: denied { bind } for pid=7783 comm="syz.9.3009" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 137.304151][ T28] audit: type=1400 audit(2000000001.384:1577): avc: denied { create } for pid=7803 comm="syz.5.3017" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 137.374434][ T28] audit: type=1400 audit(2000000001.459:1578): avc: denied { validate_trans } for pid=7808 comm="syz.2.3019" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 137.459540][ T28] audit: type=1400 audit(2000000001.534:1579): avc: denied { execute } for pid=7822 comm="syz.3.3026" name="file0" dev="tmpfs" ino=4143 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 137.481976][ T19] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 137.484612][ T28] audit: type=1400 audit(2000000001.534:1580): avc: denied { execute_no_trans } for pid=7822 comm="syz.3.3026" path="/788/file0" dev="tmpfs" ino=4143 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 137.681668][ T19] usb 10-1: New USB device found, idVendor=04b4, idProduct=6830, bcdDevice=86.cf [ 137.694689][ T19] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.711299][ T19] ums-cypress 10-1:1.0: USB Mass Storage device detected [ 137.928805][ T19] usb 10-1: USB disconnect, device number 9 [ 138.123448][ T28] audit: type=1400 audit(2000000002.160:1581): avc: denied { listen } for pid=7863 comm="syz.2.3044" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 138.178243][ T28] audit: type=1400 audit(2000000002.207:1582): avc: denied { accept } for pid=7863 comm="syz.2.3044" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 138.225869][ T45] Bluetooth: hci0: command 0x1003 tx timeout [ 138.232039][ T2674] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 138.454828][ T7895] overlayfs: failed to clone upperpath [ 138.474296][ T7881] loop2: detected capacity change from 0 to 40427 [ 138.487294][ T7881] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 138.501310][ T7881] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 138.554675][ T7881] F2FS-fs (loop2): Found nat_bits in checkpoint [ 138.618233][ T7881] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 138.627538][ T7881] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 138.866244][ T7881] F2FS-fs (loop2): Start checkpoint disabled! [ 139.065055][ T7922] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.072458][ T7922] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.081593][ T7922] device bridge_slave_0 entered promiscuous mode [ 139.088887][ T7922] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.097124][ T7922] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.104866][ T7922] device bridge_slave_1 entered promiscuous mode [ 139.186083][ T7922] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.193792][ T7922] bridge0: port 2(bridge_slave_1) entered forwarding state [ 139.201093][ T7922] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.208135][ T7922] bridge0: port 1(bridge_slave_0) entered forwarding state [ 139.235227][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 139.243864][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.251637][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.268661][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 139.278209][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.285402][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 139.293560][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 139.302245][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.309433][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 139.329730][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 139.338607][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 139.355725][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 139.365533][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 139.380887][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 139.389270][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 139.399027][ T7922] device veth0_vlan entered promiscuous mode [ 139.454547][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 139.476061][ T7922] device veth1_macvtap entered promiscuous mode [ 139.512245][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 139.537308][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 139.605378][ T5104] device bridge_slave_1 left promiscuous mode [ 139.611576][ T5104] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.659921][ T5104] device bridge_slave_0 left promiscuous mode [ 139.670864][ T5104] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.701839][ T5104] device dummy0 left promiscuous mode [ 139.708762][ T5104] device veth1_macvtap left promiscuous mode [ 139.715360][ T5104] device veth0_vlan left promiscuous mode [ 140.944730][ T8034] loop2: detected capacity change from 0 to 1024 [ 140.968945][ T8034] EXT4-fs: Ignoring removed oldalloc option [ 140.994717][ T8034] EXT4-fs: Ignoring removed bh option [ 141.006233][ T8034] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 141.031709][ T7971] loop4: detected capacity change from 0 to 131072 [ 141.042110][ T7971] F2FS-fs (loop4): Wrong CP boundary, start(512) end(1536) blocks(0) [ 141.050752][ T7971] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 141.059794][ T7971] F2FS-fs (loop4): invalid crc value [ 141.070895][ T8034] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 141.101596][ T7971] F2FS-fs (loop4): Found nat_bits in checkpoint [ 141.115331][ T3275] EXT4-fs (loop2): unmounting filesystem. [ 141.124028][ T8046] netlink: 76 bytes leftover after parsing attributes in process `syz.9.3116'. [ 141.154428][ T7971] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 141.170319][ T7971] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 141.635024][ T8082] netlink: 96 bytes leftover after parsing attributes in process `syz.3.3131'. [ 141.646855][ T19] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 141.841209][ T19] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 141.860677][ T19] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 141.889650][ T19] usb 10-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 141.919250][ T19] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 141.929951][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 141.929968][ T28] audit: type=1400 audit(2000000005.715:1585): avc: denied { mount } for pid=8112 comm="syz.4.3145" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 141.942029][ T19] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.013674][ T19] usb 10-1: Product: syz [ 142.021297][ T28] audit: type=1400 audit(2000000005.752:1586): avc: denied { mounton } for pid=8112 comm="syz.4.3145" path="/9/file0" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 142.022592][ T19] usb 10-1: Manufacturer: syz [ 142.072550][ T8117] loop4: detected capacity change from 0 to 4096 [ 142.085373][ T28] audit: type=1400 audit(2000000005.780:1587): avc: denied { unmount } for pid=7922 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 142.127082][ T8117] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 142.149325][ T19] usb 10-1: SerialNumber: syz [ 142.187537][ T19] hub 10-1:1.0: bad descriptor, ignoring hub [ 142.214874][ T19] hub: probe of 10-1:1.0 failed with error -5 [ 142.305165][ T8122] IPv6: sit2: Disabled Multicast RS [ 142.378126][ T28] audit: type=1400 audit(2000000006.136:1588): avc: denied { mounton } for pid=8127 comm="syz.0.3152" path="/63/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 142.403198][ T19] usblp 10-1:1.0: usblp0: USB Unidirectional printer dev 10 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 142.437256][ T28] audit: type=1400 audit(2000000006.173:1589): avc: denied { read } for pid=8127 comm="syz.0.3152" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 142.479093][ T28] audit: type=1400 audit(2000000006.173:1590): avc: denied { open } for pid=8127 comm="syz.0.3152" path="/63/file0" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 142.520010][ T28] audit: type=1400 audit(2000000006.173:1591): avc: denied { unmount } for pid=7216 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 142.553899][ T8065] loop2: detected capacity change from 0 to 262144 [ 142.567928][ T8065] F2FS-fs (loop2): invalid crc value [ 142.588052][ T8065] F2FS-fs (loop2): Found nat_bits in checkpoint [ 142.633973][ T8065] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 142.699972][ T28] audit: type=1400 audit(2000000006.435:1592): avc: denied { read write } for pid=8069 comm="syz.9.3127" name="lp0" dev="devtmpfs" ino=1670 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 142.728274][ T28] audit: type=1400 audit(2000000006.454:1593): avc: denied { open } for pid=8069 comm="syz.9.3127" path="/dev/usb/lp0" dev="devtmpfs" ino=1670 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 142.790228][ T8152] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 142.811072][ T8152] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 142.822901][ T334] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 142.845336][ T19] usb 10-1: USB disconnect, device number 10 [ 142.945935][ T7922] EXT4-fs (loop4): unmounting filesystem. [ 143.027021][ T334] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 143.051977][ T334] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 143.071681][ T8069] usblp0: removed [ 143.073612][ T334] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 143.111410][ T334] usb 1-1: New USB device found, idVendor=056a, idProduct=0047, bcdDevice= 0.00 [ 143.133912][ T334] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.162422][ T334] usb 1-1: config 0 descriptor?? [ 143.231986][ T8158] loop2: detected capacity change from 0 to 1024 [ 143.239476][ T28] audit: type=1400 audit(2000000006.940:1594): avc: denied { read } for pid=8159 comm="syz.4.3163" name="file0" dev="tmpfs" ino=89 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 143.321059][ T8158] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 143.366731][ T3275] EXT4-fs (loop2): unmounting filesystem. [ 143.607766][ T334] wacom 0003:056A:0047.001F: Unknown device_type for 'HID 056a:0047'. Assuming pen. [ 143.678665][ T334] wacom 0003:056A:0047.001F: hidraw0: USB HID v0.00 Device [HID 056a:0047] on usb-dummy_hcd.0-1/input0 [ 143.717971][ T8185] loop9: detected capacity change from 0 to 512 [ 143.741267][ T334] input: Wacom Intuos2 6x8 Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:056A:0047.001F/input/input29 [ 143.852979][ T334] usb 1-1: USB disconnect, device number 3 [ 144.011863][ T8223] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 144.094594][ T8217] loop9: detected capacity change from 0 to 40427 [ 144.104079][ T8217] F2FS-fs (loop9): invalid crc value [ 144.256009][ T8233] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3194'. [ 144.299665][ T8217] F2FS-fs (loop9): Found nat_bits in checkpoint [ 144.346759][ T8217] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 144.363001][ T8230] f2fs_ckpt-7:9: attempt to access beyond end of device [ 144.363001][ T8230] loop9: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 144.572727][ T334] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 144.582197][ T8269] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 145.148145][ T8288] loop9: detected capacity change from 0 to 40427 [ 145.161856][ T8288] F2FS-fs (loop9): heap/no_heap options were deprecated [ 145.177218][ T8288] F2FS-fs (loop9): invalid crc value [ 145.188225][ T8288] F2FS-fs (loop9): Found nat_bits in checkpoint [ 145.246873][ T8288] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 145.283192][ T8289] f2fs_ckpt-7:9: attempt to access beyond end of device [ 145.283192][ T8289] loop9: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 145.617584][ T8301] loop2: detected capacity change from 0 to 128 [ 145.730644][ T6] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 145.933724][ T6] usb 1-1: Using ep0 maxpacket: 16 [ 145.940493][ T6] usb 1-1: config 0 interface 0 has no altsetting 0 [ 145.965917][ T6] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 145.988329][ T6] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.008431][ T6] usb 1-1: config 0 descriptor?? [ 146.037291][ T8331] bridge0: port 3(vlan2) entered blocking state [ 146.054506][ T8331] bridge0: port 3(vlan2) entered disabled state [ 146.263928][ T8343] loop9: detected capacity change from 0 to 16 [ 146.315800][ T8343] erofs: (device loop9): mounted with root inode @ nid 36. [ 146.328089][ T8345] SELinux: failed to load policy [ 146.395350][ T6773] erofs: (device loop9): erofs_fill_dentries: bogus dirent @ nid 46 [ 146.435917][ T6773] erofs: (device loop9): erofs_readdir: invalid de[0].nameoff 0 @ nid 89 [ 146.448808][ T6] hid (null): bogus close delimiter [ 146.471572][ T6773] erofs: (device loop9): erofs_readdir: invalid de[0].nameoff 0 @ nid 89 [ 146.662579][ T6] usb 1-1: USB disconnect, device number 4 [ 146.949331][ T288] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 147.153544][ T288] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 147.176400][ T288] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 147.213497][ T288] usb 10-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 147.233912][ T288] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.253479][ T288] usb 10-1: config 0 descriptor?? [ 147.633567][ T334] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 147.772075][ T8375] SELinux: failed to load policy [ 147.827094][ T334] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 147.839921][ T334] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 147.856239][ T334] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 147.882410][ T334] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.897710][ T334] usb 3-1: config 0 descriptor?? [ 147.907299][ T334] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 147.908095][ T288] usb 10-1: language id specifier not provided by device, defaulting to English [ 148.030484][ T28] kauditd_printk_skb: 24 callbacks suppressed [ 148.030506][ T28] audit: type=1400 audit(2000000011.425:1619): avc: denied { mounton } for pid=8387 comm="syz.0.3264" path="/80/file0" dev="incremental-fs" ino=436 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 148.062240][ T8388] incfs: iterate_incfs_dir / -22 [ 148.067274][ T8388] incfs: iterate_incfs_dir / -22 [ 148.131594][ T6] usb 3-1: USB disconnect, device number 12 [ 148.339611][ T288] input: HID 256c:006d as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:256C:006D.0021/input/input32 [ 148.371444][ T288] input: HID 256c:006d as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:256C:006D.0021/input/input33 [ 148.402989][ T8400] overlayfs: failed to clone lowerpath [ 148.411560][ T288] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:256C:006D.0021/input/input34 [ 148.438765][ T288] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:256C:006D.0021/input/input35 [ 148.470225][ T288] uclogic 0003:256C:006D.0021: input,hiddev96,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.9-1/input0 [ 148.608723][ T6] usb 10-1: USB disconnect, device number 11 [ 148.827149][ T8424] xt_hashlimit: size too large, truncated to 1048576 [ 148.835715][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 149.083045][ T8433] tipc: Started in network mode [ 149.089117][ T8433] tipc: Node identity 48, cluster identity 117 [ 149.098135][ T8433] tipc: Node number set to 72 [ 149.233570][ T8438] netlink: 'syz.4.3286': attribute type 12 has an invalid length. [ 149.504428][ T288] usb 10-1: new full-speed USB device number 12 using dummy_hcd [ 149.572832][ T8448] 9pnet: p9_errstr2errno: server reported unknown error @΂(0x0000000000000005 [ 149.635405][ T8452] 9pnet_fd: Insufficient options for proto=fd [ 149.740712][ T288] usb 10-1: config 1 has an invalid descriptor of length 116, skipping remainder of the config [ 149.751256][ T288] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 149.763515][ T288] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 149.773206][ T288] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.781987][ T288] usb 10-1: Product: syz [ 149.786785][ T288] usb 10-1: Manufacturer: syz [ 149.791998][ T288] usb 10-1: SerialNumber: syz [ 150.040154][ T288] usb 10-1: 0:2 : does not exist [ 150.049175][ T288] usb 10-1: 5:0: failed to get current value for ch 0 (-22) [ 150.070228][ T8440] loop4: detected capacity change from 0 to 131072 [ 150.080455][ T8440] F2FS-fs (loop4): fault_injection options not supported [ 150.086169][ T288] usb 10-1: USB disconnect, device number 12 [ 150.088099][ T8440] F2FS-fs (loop4): fault_type options not supported [ 150.100423][ T8440] F2FS-fs (loop4): QUOTA feature is enabled, so ignore qf_name [ 150.111680][ T8440] F2FS-fs (loop4): invalid crc value [ 150.115356][ T8465] netlink: 'syz.2.3298': attribute type 13 has an invalid length. [ 150.125082][ T8465] netlink: 'syz.2.3298': attribute type 17 has an invalid length. [ 150.139481][ T8440] F2FS-fs (loop4): Found nat_bits in checkpoint [ 150.169838][ T8440] F2FS-fs (loop4): sanity_check_inode: corrupted inode ino=3, run fsck to fix. [ 150.179333][ T8465] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 150.179437][ T8440] F2FS-fs (loop4): Failed to read root inode [ 150.205710][ T8465] device macsec0 left promiscuous mode [ 150.237312][ T8470] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3300'. [ 150.303488][ T8476] SELinux: failed to load policy [ 150.620974][ T28] audit: type=1400 audit(2000000013.847:1620): avc: denied { mounton } for pid=8495 comm="syz.9.3314" path="/106/file0" dev="configfs" ino=13869 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 150.642276][ T8490] loop4: detected capacity change from 0 to 32768 [ 150.646085][ T8502] netlink: 'syz.0.3315': attribute type 4 has an invalid length. [ 150.669668][ T28] audit: type=1400 audit(2000000013.847:1621): avc: denied { watch } for pid=8495 comm="syz.9.3314" path="/106/file0" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 150.697495][ T28] audit: type=1400 audit(2000000013.894:1622): avc: denied { unmount } for pid=6773 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 150.701187][ T8502] netlink: 'syz.0.3315': attribute type 4 has an invalid length. [ 150.734176][ T8490] loop4: p1 p3 < > [ 150.882954][ T402] udevd[402]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 150.896527][ T1060] udevd[1060]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 150.994358][ T28] audit: type=1400 audit(2000000014.193:1623): avc: denied { bind } for pid=8540 comm="syz.0.3332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 151.021703][ T28] audit: type=1400 audit(2000000014.193:1624): avc: denied { setopt } for pid=8540 comm="syz.0.3332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 151.077630][ T8543] netem: change failed [ 151.141511][ T8528] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3327'. [ 151.162291][ T8528] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3327'. [ 151.171397][ T8528] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3327'. [ 151.193321][ T8528] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3327'. [ 151.214809][ T28] audit: type=1400 audit(2000000014.399:1625): avc: denied { setopt } for pid=8558 comm="syz.0.3340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 151.247066][ T6] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 151.263970][ T8545] loop2: detected capacity change from 0 to 40427 [ 151.280120][ T8545] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 151.288687][ T8545] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 151.318929][ T8545] F2FS-fs (loop2): Found nat_bits in checkpoint [ 151.355780][ T8545] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 151.363334][ T8545] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 151.439424][ T6] usb 5-1: Using ep0 maxpacket: 32 [ 151.446517][ T6] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 151.471228][ T6] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 32 [ 151.493673][ T6] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 151.512234][ T6] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.528400][ T6] usb 5-1: Product: syz [ 151.537528][ T6] usb 5-1: Manufacturer: syz [ 151.551369][ T6] usb 5-1: SerialNumber: syz [ 151.779611][ T8539] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 151.964324][ T28] audit: type=1326 audit(2000000015.101:1626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8547 comm="syz.9.3335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faaf118e9a9 code=0x7fc00000 [ 151.968340][ T317] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 152.011880][ T8613] syz.9.3364[8613] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 152.011983][ T8613] syz.9.3364[8613] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 152.209195][ T317] usb 3-1: Using ep0 maxpacket: 16 [ 152.240177][ T317] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 152.251708][ T28] audit: type=1326 audit(2000000015.372:1627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8639 comm="syz.0.3377" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7efc92f8e9a9 code=0x0 [ 152.259933][ T317] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 152.320280][ T317] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 152.343233][ T317] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.364772][ T317] usb 3-1: Product: syz [ 152.369052][ T317] usb 3-1: Manufacturer: syz [ 152.386290][ T317] usb 3-1: SerialNumber: syz [ 152.434396][ T8539] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 152.619931][ T317] usb 3-1: 0:2 : does not exist [ 152.631103][ T317] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 152.652712][ T317] usb 3-1: USB disconnect, device number 13 [ 152.663999][ T6] cdc_ncm 5-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 152.671391][ T6] cdc_ncm 5-1:1.0: dwNtbInMaxSize=8 is too small. Using 2048 [ 152.679242][ T6] cdc_ncm 5-1:1.0: setting rx_max = 2048 [ 152.873031][ T402] udevd[402]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 152.893976][ T6] cdc_ncm 5-1:1.0: setting tx_max = 88 [ 152.915909][ T6] cdc_ncm 5-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.4-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 152.941735][ T6] usb 5-1: USB disconnect, device number 4 [ 152.957443][ T6] cdc_ncm 5-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.4-1, CDC NCM (NO ZLP) [ 152.989555][ T288] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 153.192812][ T288] usb 10-1: Using ep0 maxpacket: 8 [ 153.202695][ T288] usb 10-1: config 0 has no interfaces? [ 153.210885][ T288] usb 10-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ee [ 153.237948][ T288] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.247431][ T288] usb 10-1: Product: syz [ 153.252261][ T288] usb 10-1: Manufacturer: syz [ 153.257828][ T288] usb 10-1: SerialNumber: syz [ 153.266579][ T288] usb 10-1: config 0 descriptor?? [ 153.382647][ T28] audit: type=1400 audit(2000000016.429:1628): avc: denied { map } for pid=8695 comm="syz.0.3401" path="/dev/ashmem" dev="devtmpfs" ino=269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 153.504842][ T288] usb 10-1: USB disconnect, device number 13 [ 153.589938][ T8719] netlink: 'syz.4.3408': attribute type 13 has an invalid length. [ 153.598770][ T8719] netlink: 'syz.4.3408': attribute type 17 has an invalid length. [ 153.634592][ T8719] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 153.670588][ T5104] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 153.680828][ T5104] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 153.691857][ T5104] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 153.703551][ T5104] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 153.715252][ T5104] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 153.726219][ T5104] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 153.735829][ T5104] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 153.750087][ T5104] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 154.186910][ T19] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 154.221034][ T8772] loop9: detected capacity change from 0 to 512 [ 154.228700][ T8772] EXT4-fs: Ignoring removed nobh option [ 154.242442][ T8772] EXT4-fs error (device loop9): ext4_do_update_inode:5256: inode #3: comm syz.9.3434: corrupted inode contents [ 154.254763][ T8772] EXT4-fs error (device loop9): ext4_dirty_inode:6121: inode #3: comm syz.9.3434: mark_inode_dirty error [ 154.267199][ T8772] EXT4-fs error (device loop9): ext4_do_update_inode:5256: inode #3: comm syz.9.3434: corrupted inode contents [ 154.280524][ T8772] EXT4-fs error (device loop9): __ext4_ext_dirty:202: inode #3: comm syz.9.3434: mark_inode_dirty error [ 154.292395][ T8772] Quota error (device loop9): write_blk: dquota write failed [ 154.300252][ T8772] Quota error (device loop9): qtree_write_dquot: Error -117 occurred while creating quota [ 154.311342][ T8772] EXT4-fs error (device loop9): ext4_acquire_dquot:6801: comm syz.9.3434: Failed to acquire dquot type 0 [ 154.324986][ T8772] EXT4-fs error (device loop9): ext4_do_update_inode:5256: inode #16: comm syz.9.3434: corrupted inode contents [ 154.343063][ T8772] EXT4-fs error (device loop9): ext4_dirty_inode:6121: inode #16: comm syz.9.3434: mark_inode_dirty error [ 154.355127][ T8772] EXT4-fs error (device loop9): ext4_do_update_inode:5256: inode #16: comm syz.9.3434: corrupted inode contents [ 154.369569][ T8772] EXT4-fs error (device loop9): __ext4_ext_dirty:202: inode #16: comm syz.9.3434: mark_inode_dirty error [ 154.386928][ T8772] EXT4-fs error (device loop9): ext4_do_update_inode:5256: inode #16: comm syz.9.3434: corrupted inode contents [ 154.402074][ T19] usb 5-1: Using ep0 maxpacket: 32 [ 154.402526][ T8772] EXT4-fs error (device loop9) in ext4_orphan_del:305: Corrupt filesystem [ 154.409910][ T19] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 154.419332][ T8772] EXT4-fs error (device loop9): ext4_do_update_inode:5256: inode #16: comm syz.9.3434: corrupted inode contents [ 154.442389][ T19] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 154.442830][ T8772] EXT4-fs error (device loop9): ext4_truncate:4314: inode #16: comm syz.9.3434: mark_inode_dirty error [ 154.461590][ T19] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 154.466967][ T8772] EXT4-fs error (device loop9) in ext4_process_orphan:347: Corrupt filesystem [ 154.476243][ T19] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.489514][ T8772] EXT4-fs (loop9): 1 truncate cleaned up [ 154.500167][ T8772] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 154.510550][ T8772] ext4 filesystem being mounted at /123/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 154.514133][ T19] usb 5-1: config 0 descriptor?? [ 154.536707][ T6773] EXT4-fs (loop9): unmounting filesystem. [ 154.675577][ T8792] device bridge0 entered promiscuous mode [ 154.799797][ T8811] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3451'. [ 154.808916][ T8811] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3451'. [ 154.818406][ T8811] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3451'. [ 154.977772][ T19] savu 0003:1E7D:2D5A.0022: hiddev96,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.4-1/input0 [ 155.152559][ T8834] loop2: detected capacity change from 0 to 256 [ 155.183460][ T8834] FAT-fs (loop2): bogus number of FAT sectors [ 155.213173][ T8834] FAT-fs (loop2): Can't find a valid FAT filesystem [ 155.312017][ T288] usb 5-1: USB disconnect, device number 5 [ 155.584166][ T8860] netem: change failed [ 155.590862][ T8858] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3473'. [ 155.722581][ T8875] bpf setsockopt: ignoring program buffer with optlen=65520 (max_optlen=4096) [ 155.870728][ T8895] loop4: detected capacity change from 0 to 1024 [ 155.917782][ T8895] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 155.968841][ T7922] EXT4-fs (loop4): unmounting filesystem. [ 155.997581][ T28] audit: type=1400 audit(2000000018.880:1629): avc: denied { getopt } for pid=8901 comm="syz.3.3492" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 156.085677][ T8912] incfs: Options parsing error. -22 [ 156.102536][ T8912] incfs: mount failed -22 [ 156.333047][ T8931] loop4: detected capacity change from 0 to 256 [ 156.340278][ T341] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 156.394687][ T28] audit: type=1400 audit(2000000019.245:1630): avc: denied { unmount } for pid=7922 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 156.538891][ T341] usb 3-1: Using ep0 maxpacket: 32 [ 156.546855][ T341] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 156.555653][ T341] usb 3-1: config 0 has no interface number 0 [ 156.564805][ T341] usb 3-1: config 0 interface 2 has no altsetting 0 [ 156.573812][ T341] usb 3-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 156.583453][ T341] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.591449][ T341] usb 3-1: Product: syz [ 156.595650][ T341] usb 3-1: Manufacturer: syz [ 156.600228][ T341] usb 3-1: SerialNumber: syz [ 156.605759][ T341] usb 3-1: config 0 descriptor?? [ 156.709885][ T334] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 156.830080][ T341] usb 3-1: USB disconnect, device number 14 [ 156.837568][ T8953] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3517'. [ 156.843444][ T402] udevd[402]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 156.902436][ T334] usb 5-1: Using ep0 maxpacket: 32 [ 156.909456][ T334] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 156.918858][ T334] usb 5-1: config 0 has no interface number 0 [ 156.926806][ T334] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 156.935973][ T334] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.944148][ T334] usb 5-1: Product: syz [ 156.948720][ T334] usb 5-1: Manufacturer: syz [ 156.953435][ T334] usb 5-1: SerialNumber: syz [ 156.959468][ T334] usb 5-1: config 0 descriptor?? [ 156.965649][ T334] smsc95xx v2.0.0 [ 157.324841][ T8975] overlayfs: failed to resolve './file0': -2 [ 157.625950][ T9009] block device autoloading is deprecated and will be removed. [ 157.661840][ T9006] kvm [9005]: vcpu2, guest rIP: 0x9133 ignored wrmsr: 0x11e data 0xbe702111 [ 157.669483][ T9013] syz.3.3545[9013] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 157.671142][ T9013] syz.3.3545[9013] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 157.782289][ T9024] netlink: 104 bytes leftover after parsing attributes in process `syz.9.3552'. [ 157.811072][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 157.832949][ T341] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 158.038427][ T9033] loop9: detected capacity change from 0 to 40427 [ 158.047318][ T341] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 158.059782][ T9033] F2FS-fs (loop9): invalid crc value [ 158.064248][ T341] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1088, setting to 64 [ 158.076863][ T9033] F2FS-fs (loop9): Found nat_bits in checkpoint [ 158.099654][ T341] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 158.119826][ T341] usb 1-1: New USB device found, idVendor=1e71, idProduct=2019, bcdDevice= 0.00 [ 158.138507][ T341] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.148894][ T341] usb 1-1: config 0 descriptor?? [ 158.155521][ T9033] F2FS-fs (loop9): Start checkpoint disabled! [ 158.159045][ T9004] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 158.171961][ T9033] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e6 [ 158.259307][ T334] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000030: -71 [ 158.281368][ T334] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 158.301602][ T334] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 158.312815][ T334] smsc95xx: probe of 5-1:0.67 failed with error -71 [ 158.324364][ T334] usb 5-1: USB disconnect, device number 6 [ 158.473702][ T9033] syz.9.3554: attempt to access beyond end of device [ 158.473702][ T9033] loop9: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 158.513825][ T999] kworker/u4:63: attempt to access beyond end of device [ 158.513825][ T999] loop9: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 158.613052][ T9078] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3576'. [ 158.621542][ T341] hid-generic 0003:1E71:2019.0023: hidraw0: USB HID v0.07 Device [HID 1e71:2019] on usb-dummy_hcd.0-1/input0 [ 158.623643][ T9078] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3576'. [ 158.644704][ T9078] netlink: 38 bytes leftover after parsing attributes in process `syz.3.3576'. [ 158.672418][ T9082] xt_bpf: check failed: parse error [ 158.860134][ T19] usb 1-1: USB disconnect, device number 5 [ 159.254358][ T9122] tmpfs: Unknown parameter 'nolazytime' [ 159.279206][ T9124] xt_hashlimit: size too large, truncated to 1048576 [ 159.469786][ T9134] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9134 comm=syz.9.3600 [ 161.029872][ T9146] xt_hashlimit: size too large, truncated to 1048576 [ 161.381779][ T341] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 161.395488][ T28] audit: type=1326 audit(2000000023.931:1631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9174 comm="syz.0.3619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc92f8e9a9 code=0x7ffc0000 [ 161.420828][ T28] audit: type=1326 audit(2000000023.931:1632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9174 comm="syz.0.3619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=26 compat=0 ip=0x7efc92f8e9a9 code=0x7ffc0000 [ 161.445295][ T28] audit: type=1326 audit(2000000023.931:1633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9174 comm="syz.0.3619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc92f8e9a9 code=0x7ffc0000 [ 161.477940][ T28] audit: type=1326 audit(2000000023.950:1634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9174 comm="syz.0.3619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc92f8e9a9 code=0x7ffc0000 [ 161.546560][ T9184] syz.0.3623[9184] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 161.546607][ T9184] syz.0.3623[9184] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 161.578449][ T28] audit: type=1400 audit(2000000024.099:1635): avc: denied { setopt } for pid=9183 comm="syz.0.3623" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 161.640407][ T9191] netlink: 84 bytes leftover after parsing attributes in process `syz.3.3626'. [ 161.653488][ T341] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 161.670532][ T341] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 161.686751][ T341] usb 10-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 161.697995][ T341] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.711839][ T341] usb 10-1: config 0 descriptor?? [ 161.873352][ T28] audit: type=1326 audit(2000000024.371:1636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9217 comm="syz.3.3638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43c098e9a9 code=0x7ffc0000 [ 161.921816][ T28] audit: type=1326 audit(2000000024.380:1637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9217 comm="syz.3.3638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f43c092ab89 code=0x7ffc0000 [ 161.969800][ T28] audit: type=1326 audit(2000000024.380:1638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9217 comm="syz.3.3638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f43c092ab89 code=0x7ffc0000 [ 162.012427][ T28] audit: type=1326 audit(2000000024.380:1639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9217 comm="syz.3.3638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f43c092ab89 code=0x7ffc0000 [ 162.064513][ T28] audit: type=1326 audit(2000000024.380:1640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9217 comm="syz.3.3638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f43c092ab89 code=0x7ffc0000 [ 162.108625][ T334] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 162.171325][ T341] hid-led 0003:0FC5:B080.0024: unknown main item tag 0x0 [ 162.180101][ T9236] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3647'. [ 162.201643][ T9236] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 162.284178][ T9249] xt_hashlimit: size too large, truncated to 1048576 [ 162.311780][ T334] usb 3-1: Using ep0 maxpacket: 32 [ 162.318334][ T334] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 162.337636][ T334] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 32 [ 162.358685][ T334] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 162.374591][ T334] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.389569][ T334] usb 3-1: Product: syz [ 162.398511][ T334] usb 3-1: Manufacturer: syz [ 162.407745][ T334] usb 3-1: SerialNumber: syz [ 162.598179][ T341] hid-led: probe of 0003:0FC5:B080.0024 failed with error -71 [ 162.626594][ T341] usb 10-1: USB disconnect, device number 14 [ 162.634191][ T9211] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 162.931826][ T24] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 163.049413][ C1] hrtimer: interrupt took 69052 ns [ 163.124256][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 163.130674][ T24] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 163.140571][ T24] usb 1-1: config 0 interface 0 has no altsetting 0 [ 163.147254][ T24] usb 1-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 163.156419][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.165428][ T24] usb 1-1: config 0 descriptor?? [ 163.288860][ T9211] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 163.409906][ T9292] loop9: detected capacity change from 0 to 512 [ 163.426405][ T9292] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 163.446832][ T9292] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 163.456079][ T9292] ext4 filesystem being mounted at /169/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 163.499232][ T6773] EXT4-fs (loop9): unmounting filesystem. [ 163.512608][ T334] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 163.522025][ T334] cdc_ncm 3-1:1.0: dwNtbInMaxSize=8 is too small. Using 2048 [ 163.529612][ T334] cdc_ncm 3-1:1.0: setting rx_max = 2048 [ 163.530009][ T9297] netlink: 'syz.9.3673': attribute type 4 has an invalid length. [ 163.554095][ T9297] netlink: 'syz.9.3673': attribute type 4 has an invalid length. [ 163.624245][ T24] hid-generic 0003:060B:500A.0025: unknown main item tag 0x0 [ 163.634599][ T24] hid-generic 0003:060B:500A.0025: unknown main item tag 0x0 [ 163.643374][ T24] hid-generic 0003:060B:500A.0025: unknown main item tag 0x0 [ 163.650890][ T24] hid-generic 0003:060B:500A.0025: unknown main item tag 0x0 [ 163.658357][ T24] hid-generic 0003:060B:500A.0025: unknown main item tag 0x0 [ 163.667194][ T24] hid-generic 0003:060B:500A.0025: unknown main item tag 0x0 [ 163.674805][ T24] hid-generic 0003:060B:500A.0025: unknown main item tag 0x0 [ 163.682272][ T24] hid-generic 0003:060B:500A.0025: unknown main item tag 0x0 [ 163.689747][ T24] hid-generic 0003:060B:500A.0025: unknown main item tag 0x0 [ 163.697367][ T24] hid-generic 0003:060B:500A.0025: unknown main item tag 0x0 [ 163.704865][ T24] hid-generic 0003:060B:500A.0025: unknown main item tag 0x0 [ 163.717590][ T24] hid-generic 0003:060B:500A.0025: unknown main item tag 0x0 [ 163.725114][ T24] hid-generic 0003:060B:500A.0025: unknown main item tag 0x0 [ 163.732650][ T334] cdc_ncm 3-1:1.0: setting tx_max = 88 [ 163.739253][ T334] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 163.750233][ T24] hid-generic 0003:060B:500A.0025: unknown main item tag 0x0 [ 163.762539][ T24] hid-generic 0003:060B:500A.0025: unknown main item tag 0x0 [ 163.771663][ T334] usb 3-1: USB disconnect, device number 15 [ 163.777674][ T24] hid-generic 0003:060B:500A.0025: unknown main item tag 0x0 [ 163.787078][ T24] hid-generic 0003:060B:500A.0025: unknown main item tag 0x0 [ 163.794522][ T24] hid-generic 0003:060B:500A.0025: unknown main item tag 0x0 [ 163.802220][ T334] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM (NO ZLP) [ 163.813752][ T24] hid-generic 0003:060B:500A.0025: unknown main item tag 0x4 [ 163.821452][ T24] hid-generic 0003:060B:500A.0025: unknown main item tag 0x0 [ 163.830181][ T24] hid-generic 0003:060B:500A.0025: unknown main item tag 0x0 [ 163.837856][ T24] hid-generic 0003:060B:500A.0025: unknown main item tag 0x0 [ 163.845361][ T24] hid-generic 0003:060B:500A.0025: unknown main item tag 0x0 [ 163.859290][ T24] hid-generic 0003:060B:500A.0025: unknown main item tag 0x0 [ 163.867474][ T24] hid-generic 0003:060B:500A.0025: unknown main item tag 0x0 [ 163.875373][ T24] hid-generic 0003:060B:500A.0025: unknown main item tag 0x0 [ 163.883280][ T24] hid-generic 0003:060B:500A.0025: unknown main item tag 0x0 [ 163.890708][ T24] hid-generic 0003:060B:500A.0025: unknown main item tag 0x0 [ 163.899227][ T24] hid-generic 0003:060B:500A.0025: unknown main item tag 0x0 [ 163.906778][ T24] hid-generic 0003:060B:500A.0025: unknown main item tag 0x0 [ 163.915341][ T24] hid-generic 0003:060B:500A.0025: unknown main item tag 0x0 [ 163.924308][ T24] hid-generic 0003:060B:500A.0025: unknown main item tag 0x0 [ 163.932542][ T24] hid-generic 0003:060B:500A.0025: unknown main item tag 0x0 [ 163.940060][ T288] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 163.940435][ T24] hid-generic 0003:060B:500A.0025: unknown main item tag 0x0 [ 163.955357][ T24] hid-generic 0003:060B:500A.0025: unknown main item tag 0x0 [ 163.962935][ T24] hid-generic 0003:060B:500A.0025: unknown main item tag 0x0 [ 163.970440][ T24] hid-generic 0003:060B:500A.0025: unexpected long global item [ 163.980998][ T24] hid-generic: probe of 0003:060B:500A.0025 failed with error -22 [ 163.991665][ T24] usb 1-1: USB disconnect, device number 6 [ 163.999074][ T317] ================================================================== [ 164.007349][ T317] BUG: KASAN: use-after-free in __list_del_entry_valid+0xa6/0x130 [ 164.015269][ T317] Read of size 8 at addr ffff888137320cf0 by task kworker/1:2/317 [ 164.023073][ T317] [ 164.025406][ T317] CPU: 1 PID: 317 Comm: kworker/1:2 Tainted: G W 6.1.145-syzkaller-00016-g80964585855f #0 [ 164.036671][ T317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 164.046723][ T317] Workqueue: rcu_gp process_srcu [ 164.051665][ T317] Call Trace: [ 164.054935][ T317] [ 164.057869][ T317] __dump_stack+0x21/0x24 [ 164.062199][ T317] dump_stack_lvl+0xee/0x150 [ 164.066787][ T317] ? __cfi_dump_stack_lvl+0x8/0x8 [ 164.072265][ T317] ? __list_del_entry_valid+0xa6/0x130 [ 164.077728][ T317] print_address_description+0x71/0x210 [ 164.083283][ T317] print_report+0x4a/0x60 [ 164.087620][ T317] kasan_report+0x122/0x150 [ 164.092130][ T317] ? __list_del_entry_valid+0xa6/0x130 [ 164.097582][ T317] __asan_report_load8_noabort+0x14/0x20 [ 164.103224][ T317] __list_del_entry_valid+0xa6/0x130 [ 164.108517][ T317] process_one_work+0x4b9/0xc40 [ 164.113378][ T317] worker_thread+0xa29/0x11f0 [ 164.118049][ T317] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 164.123518][ T317] kthread+0x281/0x320 [ 164.127581][ T317] ? __cfi_worker_thread+0x10/0x10 [ 164.132694][ T317] ? __cfi_kthread+0x10/0x10 [ 164.137277][ T317] ret_from_fork+0x1f/0x30 [ 164.141691][ T317] [ 164.144700][ T317] [ 164.147371][ T317] Allocated by task 334: [ 164.151769][ T317] kasan_set_track+0x4b/0x70 [ 164.156454][ T317] kasan_save_alloc_info+0x25/0x30 [ 164.161562][ T317] __kasan_kmalloc+0x95/0xb0 [ 164.166166][ T317] __kmalloc_node+0xb2/0x1e0 [ 164.170787][ T317] kvmalloc_node+0x294/0x480 [ 164.175374][ T317] alloc_netdev_mqs+0x8d/0xf90 [ 164.180136][ T317] alloc_etherdev_mqs+0x37/0x40 [ 164.185234][ T317] usbnet_probe+0x20c/0x2780 [ 164.189813][ T317] usb_probe_interface+0x610/0xaf0 [ 164.194924][ T317] really_probe+0x2cb/0x960 [ 164.199432][ T317] __driver_probe_device+0x198/0x280 [ 164.204713][ T317] driver_probe_device+0x54/0x3e0 [ 164.209729][ T317] __device_attach_driver+0x2e9/0x4a0 [ 164.215123][ T317] bus_for_each_drv+0x183/0x210 [ 164.219964][ T317] __device_attach+0x2a2/0x400 [ 164.224715][ T317] device_initial_probe+0x1a/0x20 [ 164.229726][ T317] bus_probe_device+0xc0/0x1f0 [ 164.234471][ T317] device_add+0xb4d/0xef0 [ 164.238788][ T317] usb_set_configuration+0x19c2/0x1f10 [ 164.245943][ T317] usb_generic_driver_probe+0x91/0x150 [ 164.251572][ T317] usb_probe_device+0x159/0x270 [ 164.256413][ T317] really_probe+0x2cb/0x960 [ 164.260900][ T317] __driver_probe_device+0x198/0x280 [ 164.266167][ T317] driver_probe_device+0x54/0x3e0 [ 164.271351][ T317] __device_attach_driver+0x2e9/0x4a0 [ 164.276706][ T317] bus_for_each_drv+0x183/0x210 [ 164.281640][ T317] __device_attach+0x2a2/0x400 [ 164.287067][ T317] device_initial_probe+0x1a/0x20 [ 164.292173][ T317] bus_probe_device+0xc0/0x1f0 [ 164.296969][ T317] device_add+0xb4d/0xef0 [ 164.301282][ T317] usb_new_device+0xa70/0x1520 [ 164.306042][ T317] hub_event+0x2a5d/0x4680 [ 164.310481][ T317] process_one_work+0x71f/0xc40 [ 164.315337][ T317] worker_thread+0xa29/0x11f0 [ 164.319994][ T317] kthread+0x281/0x320 [ 164.324053][ T317] ret_from_fork+0x1f/0x30 [ 164.328565][ T317] [ 164.330879][ T317] Freed by task 334: [ 164.334750][ T317] kasan_set_track+0x4b/0x70 [ 164.339324][ T317] kasan_save_free_info+0x31/0x50 [ 164.344338][ T317] ____kasan_slab_free+0x132/0x180 [ 164.349445][ T317] __kasan_slab_free+0x11/0x20 [ 164.354188][ T317] slab_free_freelist_hook+0xc2/0x190 [ 164.359552][ T317] __kmem_cache_free+0xb7/0x1b0 [ 164.364483][ T317] kfree+0x6f/0xf0 [ 164.368187][ T317] kvfree+0x35/0x40 [ 164.371979][ T317] netdev_freemem+0x3f/0x60 [ 164.376470][ T317] netdev_release+0x7f/0xb0 [ 164.380974][ T317] device_release+0xa4/0x1d0 [ 164.385558][ T317] kobject_put+0x19d/0x280 [ 164.389973][ T317] put_device+0x1f/0x30 [ 164.394123][ T317] free_netdev+0x392/0x490 [ 164.398544][ T317] usbnet_disconnect+0x25a/0x3b0 [ 164.403463][ T317] usb_unbind_interface+0x223/0x8d0 [ 164.408645][ T317] device_release_driver_internal+0x508/0x820 [ 164.414724][ T317] device_release_driver+0x19/0x20 [ 164.419830][ T317] bus_remove_device+0x2ee/0x350 [ 164.424750][ T317] device_del+0x6a4/0xeb0 [ 164.429065][ T317] usb_disable_device+0x3a8/0x750 [ 164.434074][ T317] usb_disconnect+0x31e/0x860 [ 164.438819][ T317] hub_event+0x1bd5/0x4680 [ 164.443315][ T317] process_one_work+0x71f/0xc40 [ 164.448156][ T317] worker_thread+0xd2e/0x11f0 [ 164.452815][ T317] kthread+0x281/0x320 [ 164.456876][ T317] ret_from_fork+0x1f/0x30 [ 164.461292][ T317] [ 164.463598][ T317] Last potentially related work creation: [ 164.469301][ T317] kasan_save_stack+0x3a/0x60 [ 164.473986][ T317] __kasan_record_aux_stack+0xb6/0xc0 [ 164.479366][ T317] kasan_record_aux_stack_noalloc+0xb/0x10 [ 164.485177][ T317] insert_work+0x51/0x300 [ 164.489505][ T317] __queue_work+0x9b1/0xd30 [ 164.493990][ T317] queue_work_on+0xd2/0x140 [ 164.498487][ T317] usbnet_link_change+0x176/0x1a0 [ 164.503527][ T317] usbnet_probe+0x1d55/0x2780 [ 164.508210][ T317] usb_probe_interface+0x610/0xaf0 [ 164.513309][ T317] really_probe+0x2cb/0x960 [ 164.517798][ T317] __driver_probe_device+0x198/0x280 [ 164.523081][ T317] driver_probe_device+0x54/0x3e0 [ 164.528107][ T317] __device_attach_driver+0x2e9/0x4a0 [ 164.533480][ T317] bus_for_each_drv+0x183/0x210 [ 164.538328][ T317] __device_attach+0x2a2/0x400 [ 164.543078][ T317] device_initial_probe+0x1a/0x20 [ 164.548087][ T317] bus_probe_device+0xc0/0x1f0 [ 164.552831][ T317] device_add+0xb4d/0xef0 [ 164.557141][ T317] usb_set_configuration+0x19c2/0x1f10 [ 164.562583][ T317] usb_generic_driver_probe+0x91/0x150 [ 164.568024][ T317] usb_probe_device+0x159/0x270 [ 164.572958][ T317] really_probe+0x2cb/0x960 [ 164.577451][ T317] __driver_probe_device+0x198/0x280 [ 164.582871][ T317] driver_probe_device+0x54/0x3e0 [ 164.587897][ T317] __device_attach_driver+0x2e9/0x4a0 [ 164.593265][ T317] bus_for_each_drv+0x183/0x210 [ 164.598115][ T317] __device_attach+0x2a2/0x400 [ 164.602860][ T317] device_initial_probe+0x1a/0x20 [ 164.608299][ T317] bus_probe_device+0xc0/0x1f0 [ 164.613045][ T317] device_add+0xb4d/0xef0 [ 164.617622][ T317] usb_new_device+0xa70/0x1520 [ 164.622446][ T317] hub_event+0x2a5d/0x4680 [ 164.626861][ T317] process_one_work+0x71f/0xc40 [ 164.631698][ T317] worker_thread+0xa29/0x11f0 [ 164.636356][ T317] kthread+0x281/0x320 [ 164.640407][ T317] ret_from_fork+0x1f/0x30 [ 164.644805][ T317] [ 164.647150][ T317] The buggy address belongs to the object at ffff888137320000 [ 164.647150][ T317] which belongs to the cache kmalloc-4k of size 4096 [ 164.661311][ T317] The buggy address is located 3312 bytes inside of [ 164.661311][ T317] 4096-byte region [ffff888137320000, ffff888137321000) [ 164.674742][ T317] [ 164.677056][ T317] The buggy address belongs to the physical page: [ 164.683458][ T317] page:ffffea0004dcc800 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x137320 [ 164.693678][ T317] head:ffffea0004dcc800 order:3 compound_mapcount:0 compound_pincount:0 [ 164.701996][ T317] flags: 0x4000000000010200(slab|head|zone=1) [ 164.708062][ T317] raw: 4000000000010200 0000000000000000 dead000000000001 ffff888100043380 [ 164.716629][ T317] raw: 0000000000000000 0000000000040004 00000001ffffffff 0000000000000000 [ 164.725198][ T317] page dumped because: kasan: bad access detected [ 164.731599][ T317] page_owner tracks the page as allocated [ 164.737294][ T317] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 1060, tgid 1060 (udevd), ts 153231524338, free_ts 153195542106 [ 164.759682][ T317] post_alloc_hook+0x1f5/0x210 [ 164.764439][ T317] prep_new_page+0x1c/0x110 [ 164.769043][ T317] get_page_from_freelist+0x2c7b/0x2cf0 [ 164.774956][ T317] __alloc_pages+0x19e/0x3a0 [ 164.779547][ T317] alloc_slab_page+0x6e/0xf0 [ 164.784121][ T317] new_slab+0x98/0x3d0 [ 164.788175][ T317] ___slab_alloc+0x6f6/0xb50 [ 164.792768][ T317] __slab_alloc+0x5e/0xa0 [ 164.797205][ T317] __kmem_cache_alloc_node+0x203/0x2c0 [ 164.802661][ T317] kmalloc_trace+0x29/0xb0 [ 164.807420][ T317] uevent_show+0x163/0x350 [ 164.811846][ T317] dev_attr_show+0x64/0xe0 [ 164.816243][ T317] sysfs_kf_seq_show+0x280/0x3a0 [ 164.821185][ T317] kernfs_seq_show+0x12a/0x180 [ 164.825950][ T317] seq_read_iter+0x4c4/0xdd0 [ 164.830523][ T317] kernfs_fop_read_iter+0x147/0x480 [ 164.835735][ T317] page last free stack trace: [ 164.840479][ T317] free_unref_page_prepare+0x742/0x750 [ 164.845953][ T317] free_unref_page+0x8f/0x530 [ 164.850624][ T317] __free_pages+0x67/0x100 [ 164.855021][ T317] __free_slab+0xca/0x1a0 [ 164.859335][ T317] __unfreeze_partials+0x160/0x190 [ 164.864520][ T317] put_cpu_partial+0xa9/0x100 [ 164.869240][ T317] __slab_free+0x1c4/0x280 [ 164.873649][ T317] ___cache_free+0xbf/0xd0 [ 164.878133][ T317] qlist_free_all+0xc6/0x140 [ 164.882717][ T317] kasan_quarantine_reduce+0x14a/0x170 [ 164.888449][ T317] __kasan_slab_alloc+0x24/0x80 [ 164.893728][ T317] slab_post_alloc_hook+0x4f/0x2d0 [ 164.898937][ T317] kmem_cache_alloc+0x16e/0x330 [ 164.903863][ T317] getname_flags+0xb9/0x500 [ 164.908351][ T317] __se_sys_newfstatat+0xdf/0x380 [ 164.913363][ T317] __x64_sys_newfstatat+0x9b/0xb0 [ 164.918420][ T317] [ 164.920734][ T317] Memory state around the buggy address: [ 164.926363][ T317] ffff888137320b80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 164.934463][ T317] ffff888137320c00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 164.942520][ T317] >ffff888137320c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 164.950573][ T317] ^ [ 164.958290][ T317] ffff888137320d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 164.966366][ T317] ffff888137320d80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 164.974420][ T317] ================================================================== [ 164.982556][ T317] Disabling lock debugging due to kernel taint [ 165.091347][ T288] usb 10-1: Using ep0 maxpacket: 16 [ 165.098044][ T288] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 165.109157][ T288] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 165.119254][ T288] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 165.132184][ T288] usb 10-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 165.141309][ T288] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.150220][ T288] usb 10-1: config 0 descriptor?? [ 165.587131][ T288] HID 045e:07da: Invalid code 65791 type 1 [ 165.595057][ T288] input: HID 045e:07da as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:045E:07DA.0026/input/input36 [ 165.607730][ T288] microsoft 0003:045E:07DA.0026: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.9-1/input0 [ 165.812953][ T24] usb 10-1: USB disconnect, device number 15