last executing test programs: 52.483642686s ago: executing program 32 (id=96): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x256c, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001440)={0x24, 0x0, 0x0, &(0x7f00000013c0)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x0, "741cb976"}]}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001840)={0x24, 0x0, &(0x7f0000001740)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, &(0x7f00000002c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 37.072204199s ago: executing program 5 (id=358): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1532, 0x11d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) syz_usb_control_io$hid(r0, &(0x7f0000000440)={0x24, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x22, 0x7, {[@global=@item_012={0x1, 0x1, 0x9, 'D'}, @main=@item_4={0x3, 0x0, 0xb, "2ad2e8ae"}]}}, 0x0}, 0x0) 36.736482321s ago: executing program 33 (id=365): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x5000, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0xfd, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001640)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xec) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220f"], 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x0}, 0x0) 35.07066307s ago: executing program 5 (id=377): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000118110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014002000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r1}, 0x10) r2 = getpid() r3 = getpgrp(0x0) kcmp$KCMP_EPOLL_TFD(r2, r3, 0x5, 0xffffffffffffffff, 0x0) 35.06448805s ago: executing program 5 (id=378): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000dc0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xfc5, 0xb080, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x3}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001800)={&(0x7f0000000580)='kfree\x00', r2}, 0x9) syz_usb_control_io(r0, &(0x7f0000000740)={0x2c, &(0x7f0000000000)={0x0, 0x30, 0x3, {0x3, 0x21, 'L'}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 33.122434081s ago: executing program 5 (id=391): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000059c0)='./bus\x00', 0x1400e, &(0x7f0000005a00), 0x1, 0x42f, &(0x7f0000000940)="$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") open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000500)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, "ef359f413bb9388c3c955fae6dddfbd1ce5d29c2ee5e5c9d000ff8ee09e737ff0edf110f80007639c2eb4b78c66ee677df701905b9aafab4afaaf755a3f6a004", "cba3d62578038259ca171ce1a311ef97e4298d1e14ef01060017e92996005303f56f0000000000000000000000000000000400", "d300e6d6ae9ef30bea2a004000", [0xffffffffffffffff]}) lsetxattr$security_ima(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000100), &(0x7f0000000140)=@sha1={0x1, "2753c819c91ebe9706b50525b88b1f5ebbecc5b3"}, 0x1001, 0x1) 32.992640981s ago: executing program 5 (id=393): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000380)=0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) poll(&(0x7f0000000400)=[{r0, 0x40}, {r0, 0x2000}], 0x2, 0x3) 32.747762192s ago: executing program 5 (id=394): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r1}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) 32.747530622s ago: executing program 34 (id=394): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r1}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) 31.845478008s ago: executing program 7 (id=395): r0 = syz_usb_connect$uac1(0x0, 0xad, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9b, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x4}, [@extension_unit={0x9, 0x24, 0x8, 0x0, 0x0, 0x0, 'LX'}, @mixer_unit={0x6, 0x24, 0x4, 0x0, 0x0, 'R'}, @selector_unit={0x7, 0x24, 0x5, 0x0, 0x0, "53f1"}, @selector_unit={0xb, 0x24, 0x5, 0x0, 0x0, "133b9bda531c"}, @selector_unit={0x9, 0x24, 0x5, 0x0, 0x5, "96efc359"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x7f, 0x2, 0x0, 0x1, '\v~', "8e"}, @as_header={0x7}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x81}}}}}}}]}}, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000001100)={0x14, 0x0, &(0x7f0000001040)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io(r0, &(0x7f00000021c0)={0x2c, 0x0, &(0x7f0000002080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x827}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 29.140612432s ago: executing program 7 (id=475): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000059c0)='./bus\x00', 0x1400e, &(0x7f0000005a00), 0x1, 0x42f, &(0x7f0000000940)="$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") open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000500)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, "ef359f413bb9388c3c955fae6dddfbd1ce5d29c2ee5e5c9d000ff8ee09e737ff0edf110f80007639c2eb4b78c66ee677df701905b9aafab4afaaf755a3f6a004", "cba3d62578038259ca171ce1a311ef97e4298d1e14ef01060017e92996005303f56f0000000000000000000000000000000400", "d300e6d6ae9ef30bea2a004000", [0xffffffffffffffff]}) lsetxattr$security_ima(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000100), &(0x7f0000000140)=@sha1={0x1, "2753c819c91ebe9706b50525b88b1f5ebbecc5b3"}, 0x1001, 0x1) 29.023025952s ago: executing program 7 (id=479): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 28.767765124s ago: executing program 7 (id=488): bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)={0xffffffff}) close_range(r1, 0xffffffffffffffff, 0x0) 28.756157564s ago: executing program 35 (id=488): bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)={0xffffffff}) close_range(r1, 0xffffffffffffffff, 0x0) 23.223645234s ago: executing program 1 (id=623): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0xfffffffa) ppoll(&(0x7f0000000180)=[{r0, 0x10}], 0x1, 0x0, 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, "00769a1c95595915303d60ffdeffff000400"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCFLSH(r1, 0x540b, 0x2) 22.400648279s ago: executing program 1 (id=626): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='kfree\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100), 0x1, 0x500, &(0x7f0000000500)="$eJzs3U9sI1cZAPBvJn/sTdMmhR4AFbqUwoJWayfeNqp6oZwqhCoheuSwDYkTRbHjKHZKE/aQPXJHohInOHHmgMQBqSfuSBzgxqUckAqsQA0SByOP7V3njzfWbmzvxr+fNJo38+L53tvRvGd91s4LYGJdj4ijiJiNiPcjYqFzPuls8XZ7a/3dZ/fvrh3fv7uWRLP53j+TrL51Lno+0/Jc55r5iPjBOxE/Sk4F/VNE/eBwe7VSKe91ThUb1d1i/eDw1lZ1dbO8Wd4plVaWV5bevP1G6dL6+kr1N59ei4jf/+7Ln/zx6Fs/aTVrvlPX24/L1O76zIM4LdMR8b1hBBuDqU5/Zh/nw4/1IS5TGhGfi4hXs+d/Iaayu3nSydv07RG2DgAYhmZzIZoLvccAwFWXZjmwJC10cgHzkaaFQjuH91LMpZVavXFzo7a/s97OlS3GTLqxVSkvdXKFizGTbGxNl5ezcve4Ui6dOr4dES9GxM9y17Ljwlqtsj7OLz4AMMGeOzX//yfXnv8BgCsu/7CYG2c7AIDRyY+7AQDAyJn/AWDymP8BYPKY/wFg8pj/AWDymP8BYKJ8/913W1vzuPP+6/UPDva3ax/cWi/XtwvV/bXCWm1vt7BZq21m7+ypXnS9Sq22u/x67H9YbJTrjWL94PBOtba/07iTvdf7TnlmJL0CAB7lxVc+/ksSEUdvXcu26Hnf/4Vz9cvDbh0wTOm4GwCMzdS4GwCMzdnVvoBJIR8P9CzRe6/ndP5M4bSPBrp8at1QePrc+OIT5P+BZ5r8P0yux8v/+y4PV4H8P0yuZjOx5j8ATBg5fiC5oL739/+lZs/BYL//AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwJU0n21JWuisBT4faVooRDwfEYsxk2xsVcpLEfFCRPw5N5NrHS9HhHWDAOBZlv496az/dWPhtfnTtbO5/+ayfUT8+Bfv/fzD1UZjbzliNvnXg/ONjzrnS+NoPwBwke483Z3Huz67f3etu42yPZ9+p724aCvucWdr10zHdLbPZ7mGuX8nneO21veVqUuIf3QvIr5wXv+TLDey2Fn59HT8VuznRxo/PRE/zera+9a/xecvoS0waT5ujT9vn/f8pXE925///OezEerJdce/4zPjX/pg/JvqM/5dHzTG63/47pmTzYV23b2IL01HHHcv3jP+dOMnfeK/NmD8v778lVf71TV/GXEjzut/ciJWsVHdLdYPDm9tVVc3y5vlnVJpZXll6c3bb5SKWY662M1Un/WPt26+0C9+q/9zfeLnL+j/1wfs/6/+9/4Pv/qI+N/82vn3/6VHxG/Nid8YMP7q3G/z/epa8df79P+i+39zwPif/O1wfcA/BQBGoH5wuL1aqZT3hl1Ihx8iKyQRRyPoTruQ+/VP3xlVrCEW4ulohsLTVBj3yAQM28OHftwtAQAAAAAAAAAAAAAA+hnFfycadx8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4uv4fAAD//5iA1Hs=") mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 22.348452909s ago: executing program 1 (id=627): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2cf6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x101800, 0x81) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000600)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, &(0x7f0000000280)={0x0, 0x21, 0x7, {0x7, 0x0, "3d7da32915"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x1, 0x3, "5f68dd"}, 0x0}) 20.15188909s ago: executing program 1 (id=634): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x2, &(0x7f0000000100)={[{@noblock_validity}, {@dioread_nolock}, {@errors_remount}, {@minixdf}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [{@appraise_type}], 0x2c}, 0x84, 0x463, &(0x7f0000000b00)="$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") mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) chdir(&(0x7f0000000180)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fchown(r0, 0x0, 0xee01) 20.073541661s ago: executing program 1 (id=637): setgroups(0x0, 0x0) getgroups(0x1, &(0x7f0000000080)=[0xee00]) setregid(0x0, r0) setgroups(0x1, &(0x7f0000000000)=[r0]) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/fscaps', 0x0, 0x106) fchmod(r1, 0x0) 19.911897022s ago: executing program 1 (id=644): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x48, 0x14, 0x509, 0x0, 0x25dfdbfd, {0x2, 0x1f, 0x0, 0xcb, r2}, [@IFA_ADDRESS={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x41}}, @IFA_LOCAL={0x8, 0x2, @broadcast}, @IFA_RT_PRIORITY={0x8, 0x9, 0x6}, @IFA_RT_PRIORITY={0x8, 0x9, 0x10000009}, @IFA_ADDRESS={0x8, 0x1, @private=0x4a010102}, @IFA_RT_PRIORITY={0x8, 0x9, 0x103}]}, 0x48}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x70}}, 0x0) 19.911155082s ago: executing program 36 (id=644): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x48, 0x14, 0x509, 0x0, 0x25dfdbfd, {0x2, 0x1f, 0x0, 0xcb, r2}, [@IFA_ADDRESS={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x41}}, @IFA_LOCAL={0x8, 0x2, @broadcast}, @IFA_RT_PRIORITY={0x8, 0x9, 0x6}, @IFA_RT_PRIORITY={0x8, 0x9, 0x10000009}, @IFA_ADDRESS={0x8, 0x1, @private=0x4a010102}, @IFA_RT_PRIORITY={0x8, 0x9, 0x103}]}, 0x48}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x70}}, 0x0) 16.185744852s ago: executing program 9 (id=754): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file2\x00', 0x20404, &(0x7f0000000ec0)=ANY=[@ANYRESOCT=0x0], 0x1, 0x1235, &(0x7f0000001dc0)="$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") r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CONNECT(r0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x10001, &(0x7f00000000c0)={[{@errors_remount}, {@noload}, {@norecovery}, {@noquota}, {@noblock_validity}, {@data_err_ignore}, {@nojournal_checksum}, {@acl}, {@usrquota}], [], 0x3d}, 0x64, 0x51c, &(0x7f0000000200)="$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") r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x3f, 0x40, 0x42, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000001a40), 0x1003, r1}, 0x38) 15.791688914s ago: executing program 9 (id=760): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x6, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000900)='percpu_alloc_percpu\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) 15.765990484s ago: executing program 9 (id=761): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000003c0)='./bus\x00', 0x8, &(0x7f0000000480)=ANY=[], 0x1, 0x5505, &(0x7f0000002480)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000280)=0x10000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) renameat2(r0, &(0x7f0000000240)='./bus\x00', r0, &(0x7f00000001c0)='./file0\x00', 0x0) 15.399491836s ago: executing program 9 (id=763): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x101444c, &(0x7f0000000500)={[], [{@fowner_lt}, {@subj_role={'subj_role', 0x3d, '\xb7,[\xff'}}, {@audit}]}, 0x0, 0x4ac, &(0x7f0000000c40)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x2081c80, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000008080)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x160) 15.232409347s ago: executing program 9 (id=767): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000540)=ANY=[@ANYBLOB="0100"]) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000000040)={0x3b, 0x0, [{0xc0010140}]}) 15.127934088s ago: executing program 9 (id=769): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = eventfd2(0xfffffffe, 0x0) r1 = dup(r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x17, 0x0, 0xc6e, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) read$FUSE(r1, &(0x7f0000002080)={0x2020}, 0x2020) 15.118614788s ago: executing program 37 (id=769): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = eventfd2(0xfffffffe, 0x0) r1 = dup(r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x17, 0x0, 0xc6e, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) read$FUSE(r1, &(0x7f0000002080)={0x2020}, 0x2020) 5.191971921s ago: executing program 3 (id=896): syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x1, 0x54f4, &(0x7f0000005600)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r2, 0x0) ioctl$FITRIM(r0, 0xc0185879, 0x0) 4.832878783s ago: executing program 3 (id=900): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000a40)=[{{&(0x7f0000000080)={0xa, 0x4005, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}, 0x1c, 0x0}}], 0x1, 0xc0c0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000000)={0x13, 0x4}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000000000008102"]) 4.607914354s ago: executing program 3 (id=904): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, &(0x7f0000000100), 0xc06620, 0x4) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, &(0x7f00000000c0), 0xc06620, 0x4) ioctl$UFFDIO_COPY(r0, 0x8010aa02, &(0x7f0000000180)={&(0x7f0000cdf000/0x4000)=nil, &(0x7f000095e000/0x3000)=nil, 0x4000, 0x2}) 3.969547048s ago: executing program 2 (id=919): openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 3.794673979s ago: executing program 3 (id=920): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) r2 = timerfd_create(0x0, 0x0) timerfd_settime(r2, 0x3, &(0x7f0000000440)={{0x0, 0x989680}}, 0x0) 3.739900859s ago: executing program 3 (id=921): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) mlockall(0x1) r0 = io_uring_setup(0xadc, &(0x7f0000000200)={0x0, 0x0, 0x2, 0x0, 0x257}) io_uring_enter(r0, 0x2000000, 0x2, 0x7, &(0x7f0000000000)={[0x100000]}, 0x8) mremap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) 3.125699333s ago: executing program 2 (id=923): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 3.112154103s ago: executing program 2 (id=924): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000100)=""/59, 0x3b) getdents(r0, 0x0, 0x66) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) 3.079996153s ago: executing program 2 (id=925): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000002c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, &(0x7f00000003c0), 0x2, 0x47d, &(0x7f0000001300)="$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") setrlimit(0x1, &(0x7f0000000200)={0x2, 0xffff}) mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r1 = openat$incfs(r0, &(0x7f0000000180)='.pending_reads\x00', 0x0, 0x0) ioctl$INCFS_IOC_CREATE_FILE(r1, 0xc058671e, &(0x7f0000000480)={{'\x00', 0x1}, {0x4}, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0, 0x0, 0x0}) 2.991759603s ago: executing program 6 (id=928): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000140)={[{@errors_remount}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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") rename(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0)='./file0/file0\x00') mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000380)='./file0\x00') open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 2.915785574s ago: executing program 2 (id=930): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='bridge0\x00', 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000000)=0x5, 0x4) sendto$inet(r0, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) sendto$inet(r0, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x21261d2) 2.839066334s ago: executing program 3 (id=933): r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000090000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000000905810300020000000904010000020d000009040101e921ea9500090582020002000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000001280)={0x20, 0x80, 0x1c, {0x0, 0x9, 0x0, 0x1, 0x880, 0x3, 0x0, 0x1000, 0x800, 0x0, 0x3, 0x3}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 2.756217474s ago: executing program 6 (id=935): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r0, r1, 0x2, 0x2, 0x0, @void, @value}, 0x10) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000440)={@cgroup=r2, 0x2, 0x1, 0x0, &(0x7f0000000180)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) 2.755998144s ago: executing program 0 (id=936): fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x5) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x4, 0x7fdf, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfe}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = dup2(r1, r0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r2}, 0x10) alarm(0x7fffffff) 2.687889905s ago: executing program 2 (id=937): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x3e, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "69dcaf20127e9a854529f45826cb35be51682e30944313e2ca73845d177d601880221daeccfda56b75cfe2bad94f000066b2ddab614fec2236da7d88ea07c9ee"}, 0x48, 0xfffffffffffffffe) keyctl$search(0xa, r2, &(0x7f0000000180)='asymmetric\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0) 2.663671875s ago: executing program 38 (id=937): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x3e, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "69dcaf20127e9a854529f45826cb35be51682e30944313e2ca73845d177d601880221daeccfda56b75cfe2bad94f000066b2ddab614fec2236da7d88ea07c9ee"}, 0x48, 0xfffffffffffffffe) keyctl$search(0xa, r2, &(0x7f0000000180)='asymmetric\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0) 2.657414105s ago: executing program 6 (id=939): r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000140)=ANY=[@ANYBLOB="12015001020000082505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000080905810340000000000904010000020d00000904010102230d0000090582020002000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000240)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x1000, 0x40, 0x3, 0x0, 0xfffc, 0x0, 0x800, 0x20, 0x2, 0x7}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 2.656866555s ago: executing program 0 (id=948): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f00000003c0)={&(0x7f0000000180), 0x10, &(0x7f0000000380)=[{&(0x7f0000000480)="c3e972bd85a6d84136d6dd55048d3593a74f338ce6772ab9a6f64041c2f6fbbecdc08ebcd3192b6a53662dae7c8e9c665e80a5d0925f728dcac30c29793992e588952653d414cb8ccdabc38767fee819ec5af0c5ee936880fe8549b4ed347779cab4ffd4e0b62c53a1c01db28f2b3f91c34211c9353bc1dece61511917c2245fd66cb8dffeacb4d46d627c97b498bf1ff6b313bfbc9765457c831771d5eec7997ec242e4505f01c1bb3e069b2e630f42a2be86598a61", 0x64}, {&(0x7f0000000300)='V', 0x1}, {&(0x7f0000001600)="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", 0x1000}, {&(0x7f0000000340)="b768eb20304f2fdc5a9694a4867840d93170ca1a86406f", 0xfffffec0}], 0x4, 0x0, 0x0, 0x8010}, 0x0) sendmmsg(r1, &(0x7f0000003b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0) r2 = dup2(r1, r0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmmsg$unix(r2, &(0x7f0000002f00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 2.617418775s ago: executing program 6 (id=940): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r1}, 0x10) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4}, 0x1c) listen(r0, 0x5) syz_emit_ethernet(0x36, &(0x7f0000000e00)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) 2.556810355s ago: executing program 0 (id=941): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0xfff) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000000)=0x2, 0x4) syz_emit_ethernet(0x4a, &(0x7f00000007c0)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 2.504747236s ago: executing program 0 (id=942): syz_usb_connect(0x0, 0x81, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000a7420040ab0501030001010203010902240001000000000904000002aad45c0009058e02000000000009050a06"], 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000008c0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000e868495fb58d00b6ad1f50ad32d6ad25dfd73a015e0ca6a0f68a7d007dc6751dfb265a0e3ccae669e173a64bc1cfd514600650a58f145ff1205fc9ddaa275e687d452d64e7cc957d77578f4c25235138d5521f9453559c35da860e8efbc64e57cbb7aee976f2b54421eed73d5661cfeecf9c66c54c3b3ffe1b4ce25d7c983cd44c05bd0a48dfe3e26e7a23129d6606ed28a69989d552af6d9a9df2c3af36e0360070011bbecc2f4a3799af2551ce935b0f327cb3f011a7d06602e2fd5234712596b696418f163d1a1a83109753f54b21cd027edd68149ee99eebc6f7d6dd4aed4af7588c8e1b44ccb19e810879b81a7000000e7ffffff00000000d7900a820b63278f4e9a217b98ef7042ad2a928903000000cbe43a1ed25268816b00000000000009d27d753a30a147b24a48435bd8a568669596e9e0867958e1dd7a0defb6670c06054002238260000000000040587c1ed797aa21a38e1e389f640a0b8b0000000000a835ad0f61ba739cd0c31b05c00fba8a4aee676d7caa2e53b91a68ff2e60da7b01a2e5785a238afa4aba70c08b0d71b6f72d6a8d87fb08533d97ad96d3943c4cc8306dac433a5cdf78b04963d679d5a5d07e618a1ef9057fec00f9e93021f5a8d30e716de8cde9c6000000000c3b64d10f0939b42b33ab2a8717096c58bb3bb1d457d8bb96870f5a7e2ba31fd69bb80235ca57eaa9a40b76b8fc81ffa604aaafb76a980e72b408f686b185736693089213b4e140f8f38e5589663115f13889deb646122a5dc5a9e5ba4d37749a36b880110e2bf524b79bc91105f1d3f7d0de694e9417d68694f17ba5e27ea1cec518b93fadcfe0deb70ae9be3273ff73c34f5695080a35bfa5c69e3b533e1b939c81b3beda037b7191cb0000000000000000000010e5d683b8938db5c305cf7e6e62a6890ba9e1f4ee64f8202b59de5036569febfaa95f4633db108b2f786333ec7bacc927f4a1785165b5d2444b4c022bb5cff472e6a0c8ee9d6d8df83b704669147b732ac508c9b9f0ca0a1ce45319d43d4643eb285835daf2065b57bebd61ad6671296c27253a5f9688d57c91ccd40ffe2dbc5dd1613a2e6f5b363cc8d205ce6eb3c3c6ded7dd3dfdb39008d8997213f68cdc971c1d6fdacb7729a5560880a77525e9cfb94ef1735dfe74e6b948697f7e3580436b532a82e315d56b17a5dba98436282c91f5d0fc4ec525933381e84d625b41c71de6befdceb5f929ae199c2a1220413e97b41209c6a626d304f8849c4799fd28bb65c9282b8da7188b389518d46b46e0db497b51fe6d22fe6750bee32e9788dbcd079a322897fc005953066abc60356984918a586213"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) 1.321791922s ago: executing program 6 (id=940): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r1}, 0x10) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4}, 0x1c) listen(r0, 0x5) syz_emit_ethernet(0x36, &(0x7f0000000e00)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) 975.893514ms ago: executing program 4 (id=958): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x112, 0x4) ioctl$SIOCGSTAMP(r0, 0x8906, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 975.716954ms ago: executing program 4 (id=959): prlimit64(0x0, 0xa, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)=ANY=[@ANYBLOB="4000000010001fff000000000000f4f309000000", @ANYRES32=0x0, @ANYBLOB="81ff06ff00000000180012800e0001007769726567756172640000000381028008000a0061"], 0x40}}, 0x0) 779.728745ms ago: executing program 4 (id=960): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000fc0f00000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000600)='sys_enter\x00', r1}, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x80000008, 0x0) 700.103316ms ago: executing program 0 (id=961): r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={@mcast1, @mcast2, @mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x320}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newlink={0x24, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfeffff7f}, [@IFLA_VFINFO_LIST={0x4}]}, 0x24}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x6, 0x6, 0x8, 0x1, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x3, 0x7, @void, @value, @void, @value}, 0x48) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r1, 0x890b, &(0x7f0000000000)={0xffffc0fe, 'vlan0\x00'}) 563.030526ms ago: executing program 4 (id=962): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x1d64, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=@base={0x18, 0x4, 0x41, 0x0, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4003, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 511.842497ms ago: executing program 0 (id=963): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r2, &(0x7f0000002a00)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f00000000c0)=""/43, 0x2b}}, 0x120) write$UHID_DESTROY(r2, &(0x7f0000000080), 0x4) 460.818347ms ago: executing program 4 (id=964): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000840)={[{@noblock_validity}, {@jqfmt_vfsv1}, {@lazytime}, {@mblk_io_submit}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@usrjquota}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x1, 0x588, &(0x7f00000022c0)="$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") chdir(&(0x7f00000000c0)='./file0\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x401c5820, &(0x7f0000000d40)=@v1={0x8, @aes256, 0x0, @desc4}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000600)={0xa}) 404.189117ms ago: executing program 8 (id=965): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000070000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000300)='qdisc_dequeue\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/2566], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000100)="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", 0x0, 0x8, 0x60000000}, 0x1e) 389.033597ms ago: executing program 6 (id=940): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r1}, 0x10) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4}, 0x1c) listen(r0, 0x5) syz_emit_ethernet(0x36, &(0x7f0000000e00)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) 235.647178ms ago: executing program 8 (id=966): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r0, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 219.022548ms ago: executing program 4 (id=967): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b000111000000090400000195699b0009058b", @ANYRES32], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x83000000}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000ac0)={0x84, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 193.633838ms ago: executing program 8 (id=968): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@userxattr}, {@index_off}]}) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r0, &(0x7f0000003480)={0x2020}, 0x2020) 114.723359ms ago: executing program 8 (id=969): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2, 0x0, 0xfffffffd}}, 0x2e) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000340)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x2, 0x2, 0x2, 0x3, {0xa, 0x4e23, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7}}}, 0x3a) ioctl$PPPIOCGL2TPSTATS(r2, 0x80047453, &(0x7f0000005280)) 82.092369ms ago: executing program 8 (id=970): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x4, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = open(&(0x7f0000000480)='.\x00', 0x0, 0x0) fsetxattr$security_selinux(r2, &(0x7f0000000040), &(0x7f0000000180)='system_u:object_r:crond_initrc_exec_t:s0\x00', 0x29, 0x2) 0s ago: executing program 8 (id=971): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='mm_page_alloc\x00', r1}, 0x10) r2 = syz_open_dev$usbmon(&(0x7f0000000900), 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r2, 0x9204, 0xdd218) kernel console output (not intermixed with test programs): 1284] Zero length message leads to an empty skb [ 48.826191][ T296] wacom 0003:056A:0019.0013: hidraw1: USB HID v0.00 Device [HID 056a:0019] on usb-dummy_hcd.2-1/input0 [ 48.837850][ T296] input: Wacom Bamboo1 Medium Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:056A:0019.0013/input/input24 [ 48.840468][ T24] usb-storage 1-1:1.0: USB Mass Storage device detected [ 48.869758][ T24] usb-storage 1-1:1.0: Quirks match for vid 04e6 pid 0007: 1 [ 48.878241][ T24] scsi host1: usb-storage 1-1:1.0 [ 48.889550][ T296] usb 6-1: USB disconnect, device number 8 [ 49.010002][ T1288] loop6: detected capacity change from 0 to 40427 [ 49.018368][ T1288] F2FS-fs (loop6): Insane cp_payload (553648128 >= 504) [ 49.019811][ T6] usb 3-1: USB disconnect, device number 9 [ 49.025473][ T1288] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 49.041199][ T1288] F2FS-fs (loop6): invalid crc value [ 49.047651][ T1288] F2FS-fs (loop6): Found nat_bits in checkpoint [ 49.074235][ T19] usb 1-1: USB disconnect, device number 9 [ 49.098869][ T1288] F2FS-fs (loop6): Start checkpoint disabled! [ 49.105912][ T1288] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 49.112991][ T1288] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 49.125127][ T1288] syz.6.375: attempt to access beyond end of device [ 49.125127][ T1288] loop6: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 49.154982][ T332] kworker/u4:5: attempt to access beyond end of device [ 49.154982][ T332] loop6: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 49.169969][ T334] usb 2-1: 2:1: cannot get freq at ep 0x82 [ 49.203158][ T334] usb 2-1: USB disconnect, device number 9 [ 49.519996][ T538] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 49.566978][ T1303] loop2: detected capacity change from 0 to 512 [ 49.573720][ T1303] EXT4-fs: Ignoring removed nobh option [ 49.581388][ T1303] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13 [ 49.590876][ T1303] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #13: comm syz.2.380: attempt to clear invalid blocks 2 len 1 [ 49.604090][ T1303] EXT4-fs (loop2): Remounting filesystem read-only [ 49.612480][ T1303] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 49.627366][ T1303] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.380: invalid indirect mapped block 1819239214 (level 0) [ 49.641446][ T1303] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.380: invalid indirect mapped block 1819239214 (level 1) [ 49.655692][ T1303] EXT4-fs (loop2): 1 truncate cleaned up [ 49.661680][ T1303] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 49.719986][ T6] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 49.805940][ T290] EXT4-fs (loop2): unmounting filesystem. [ 49.920080][ T538] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 49.931471][ T538] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 49.940476][ T538] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 49.948964][ T538] usb 7-1: config 0 descriptor?? [ 49.960312][ T28] audit: type=1400 audit(1732041115.516:290): avc: denied { relabelfrom } for pid=1325 comm="syz.1.389" name="" dev="pipefs" ino=19354 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 50.100044][ T295] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 50.120259][ T6] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 50.131043][ T6] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 50.140649][ T6] usb 6-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 50.149437][ T6] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 50.158359][ T6] usb 6-1: config 0 descriptor?? [ 50.159956][ T24] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 50.260064][ T19] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 50.460065][ T295] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 50.460788][ T538] keytouch 0003:0926:3333.0014: fixing up Keytouch IEC report descriptor [ 50.473250][ T295] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 50.481067][ T538] input: HID 0926:3333 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:0926:3333.0014/input/input27 [ 50.496743][ T295] usb 3-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00 [ 50.508980][ T295] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 50.517870][ T295] usb 3-1: config 0 descriptor?? [ 50.530083][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 50.541009][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 50.550766][ T24] usb 1-1: New USB device found, idVendor=1532, idProduct=011d, bcdDevice= 0.00 [ 50.559568][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 50.569556][ T24] usb 1-1: config 0 descriptor?? [ 50.585596][ T538] keytouch 0003:0926:3333.0014: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.6-1/input0 [ 50.641389][ T6] hid-led 0003:0FC5:B080.0015: item fetching failed at offset 0/3 [ 50.649253][ T6] hid-led: probe of 0003:0FC5:B080.0015 failed with error -22 [ 50.660034][ T19] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 50.670864][ T19] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 50.680465][ T19] usb 2-1: New USB device found, idVendor=056a, idProduct=0019, bcdDevice= 0.00 [ 50.689329][ T19] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 50.698168][ T19] usb 2-1: config 0 descriptor?? [ 50.843367][ T6] usb 6-1: USB disconnect, device number 9 [ 50.897297][ T538] usb 7-1: USB disconnect, device number 2 [ 51.001095][ T295] itetech 0003:258A:6A88.0016: item fetching failed at offset 0/5 [ 51.009139][ T295] itetech: probe of 0003:258A:6A88.0016 failed with error -22 [ 51.051917][ T24] hid-rmi 0003:1532:011D.0017: hidraw0: USB HID v0.00 Device [HID 1532:011d] on usb-dummy_hcd.0-1/input0 [ 51.171552][ T19] wacom 0003:056A:0019.0018: Unknown device_type for 'HID 056a:0019'. Assuming pen. [ 51.181586][ T19] wacom 0003:056A:0019.0018: hidraw1: USB HID v0.00 Device [HID 056a:0019] on usb-dummy_hcd.1-1/input0 [ 51.193327][ T19] input: Wacom Bamboo1 Medium Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:056A:0019.0018/input/input28 [ 51.213840][ T24] usb 3-1: USB disconnect, device number 10 [ 51.270470][ T295] usb 1-1: USB disconnect, device number 10 [ 51.363258][ T1332] loop5: detected capacity change from 0 to 512 [ 51.370559][ T1332] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 51.381205][ T538] usb 2-1: USB disconnect, device number 10 [ 51.389701][ T1332] EXT4-fs (loop5): 1 truncate cleaned up [ 51.395524][ T1332] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 51.470784][ T1332] loop5: detected capacity change from 512 to 64 [ 51.485924][ T595] EXT4-fs warning (device loop5): ext4_empty_dir:3164: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 51.499449][ T595] EXT4-fs warning (device loop5): ext4_empty_dir:3164: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 51.513208][ T595] EXT4-fs warning (device loop5): ext4_empty_dir:3164: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 51.526804][ T595] EXT4-fs warning (device loop5): ext4_empty_dir:3164: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 51.540507][ T595] EXT4-fs warning (device loop5): ext4_empty_dir:3164: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 51.553953][ T595] EXT4-fs warning (device loop5): ext4_empty_dir:3164: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 51.568008][ T595] EXT4-fs warning (device loop5): ext4_empty_dir:3164: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 51.581584][ T595] EXT4-fs warning (device loop5): ext4_empty_dir:3164: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 51.595025][ T595] EXT4-fs warning (device loop5): ext4_empty_dir:3164: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 51.608644][ T595] EXT4-fs warning (device loop5): ext4_empty_dir:3164: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 51.682699][ T595] EXT4-fs (loop5): unmounting filesystem. [ 51.689965][ T24] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 51.782602][ T28] audit: type=1400 audit(1732041117.336:291): avc: denied { read } for pid=1341 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 51.804538][ T28] audit: type=1400 audit(1732041117.336:292): avc: denied { open } for pid=1341 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 51.839222][ T1341] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.846399][ T1341] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.854276][ T1341] device bridge_slave_0 entered promiscuous mode [ 51.863865][ T1341] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.870771][ T1341] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.878048][ T1341] device bridge_slave_1 entered promiscuous mode [ 51.930712][ T1348] loop1: detected capacity change from 0 to 512 [ 51.937455][ T1348] EXT4-fs: Ignoring removed nobh option [ 51.943095][ T24] usb 7-1: Using ep0 maxpacket: 16 [ 51.951085][ T1348] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13 [ 51.961880][ T1348] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #13: comm syz.1.397: attempt to clear invalid blocks 2 len 1 [ 51.974712][ T1348] EXT4-fs (loop1): Remounting filesystem read-only [ 51.981331][ T1348] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 51.991781][ T1341] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.995770][ T1348] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.397: invalid indirect mapped block 1819239214 (level 0) [ 52.002304][ T1341] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.002427][ T1341] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.002444][ T1341] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.010220][ T295] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 52.016714][ T1348] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.397: invalid indirect mapped block 1819239214 (level 1) [ 52.058891][ T1348] EXT4-fs (loop1): 1 truncate cleaned up [ 52.060153][ T24] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 52.064436][ T1348] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 52.102719][ T28] audit: type=1400 audit(1732041117.656:293): avc: denied { mount } for pid=1353 comm="syz.0.399" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 52.128471][ T24] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 52.136462][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 52.148543][ T24] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 52.151195][ T28] audit: type=1400 audit(1732041117.696:294): avc: denied { unmount } for pid=291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 52.163207][ T24] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 0 [ 52.189029][ T332] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.196383][ T375] kernel write not supported for file [eventfd] (pid: 375 comm: kworker/1:4) [ 52.206236][ T332] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.217523][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 52.225965][ T332] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.232878][ T332] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.244990][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 52.253384][ T332] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.260274][ T332] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.276358][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 52.284052][ T24] usb 7-1: New USB device found, idVendor=04e6, idProduct=0007, bcdDevice= 1.75 [ 52.293348][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 52.293831][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=5 [ 52.309655][ T292] EXT4-fs (loop1): unmounting filesystem. [ 52.312610][ T24] usb 7-1: SerialNumber: syz [ 52.324937][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 52.350993][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 52.359227][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 52.367083][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 52.374811][ T24] usb-storage 7-1:1.0: USB Mass Storage device detected [ 52.385460][ T1341] device veth0_vlan entered promiscuous mode [ 52.391447][ T295] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 52.404452][ T24] usb-storage 7-1:1.0: Quirks match for vid 04e6 pid 0007: 1 [ 52.412035][ T295] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 52.421145][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 52.422435][ T295] usb 3-1: New USB device found, idVendor=28bd, idProduct=0074, bcdDevice= 0.00 [ 52.438935][ T24] scsi host1: usb-storage 7-1:1.0 [ 52.439592][ T1341] device veth1_macvtap entered promiscuous mode [ 52.453082][ T295] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.465774][ T295] usb 3-1: config 0 descriptor?? [ 52.480439][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 52.491581][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 52.501948][ T8] device bridge_slave_1 left promiscuous mode [ 52.507944][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.516348][ T8] device bridge_slave_0 left promiscuous mode [ 52.522490][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.530700][ T8] device veth1_macvtap left promiscuous mode [ 52.536519][ T8] device veth0_vlan left promiscuous mode [ 52.591579][ T375] usb 7-1: USB disconnect, device number 3 [ 52.900057][ T24] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 52.951143][ T295] uclogic 0003:28BD:0074.0019: interface is invalid, ignoring [ 53.129354][ T28] audit: type=1400 audit(1732041118.676:295): avc: denied { read } for pid=1380 comm="syz.1.408" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 53.139970][ T24] usb 8-1: Using ep0 maxpacket: 16 [ 53.160918][ T1385] device batadv_slave_1 entered promiscuous mode [ 53.169445][ T375] usb 3-1: USB disconnect, device number 11 [ 53.175118][ T1384] device batadv_slave_1 left promiscuous mode [ 53.190120][ T28] audit: type=1400 audit(1732041118.746:296): avc: denied { read write } for pid=292 comm="syz-executor" name="loop1" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 53.255099][ T1388] loop1: detected capacity change from 0 to 8192 [ 53.280059][ T24] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 53.291158][ T24] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 53.301497][ T24] usb 8-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 53.302330][ T1388] loop1: p1 < > p2 p3 p4 < p5 > [ 53.318796][ T1388] loop1: p3 size 16744448 extends beyond EOD, truncated [ 53.460001][ T295] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 53.470128][ T24] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 53.481687][ T24] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 53.489653][ T24] usb 8-1: Product: syz [ 53.493748][ T24] usb 8-1: Manufacturer: syz [ 53.498171][ T24] usb 8-1: SerialNumber: syz [ 53.577344][ T28] kauditd_printk_skb: 28 callbacks suppressed [ 53.577360][ T28] audit: type=1400 audit(1732041119.126:325): avc: denied { create } for pid=1406 comm="syz.1.421" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 53.603789][ T28] audit: type=1400 audit(1732041119.126:326): avc: denied { ioctl } for pid=1406 comm="syz.1.421" path="socket:[21733]" dev="sockfs" ino=21733 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 53.640775][ T28] audit: type=1400 audit(1732041119.196:327): avc: denied { create } for pid=1408 comm="syz.1.422" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 53.660246][ T28] audit: type=1400 audit(1732041119.196:328): avc: denied { setopt } for pid=1408 comm="syz.1.422" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 53.692009][ T1411] netlink: 76 bytes leftover after parsing attributes in process `syz.1.423'. [ 53.715097][ T1413] loop2: detected capacity change from 0 to 1024 [ 53.722578][ T28] audit: type=1400 audit(1732041119.276:329): avc: denied { mounton } for pid=1412 comm="syz.2.424" path="/75/file1" dev="tmpfs" ino=418 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 53.747067][ T1413] EXT4-fs: Ignoring removed orlov option [ 53.766214][ T1413] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 53.776342][ T28] audit: type=1400 audit(1732041119.326:330): avc: denied { mount } for pid=1412 comm="syz.2.424" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 53.782835][ T1413] EXT4-fs (loop2): re-mounted. Quota mode: writeback. [ 53.799156][ T28] audit: type=1400 audit(1732041119.326:331): avc: denied { remount } for pid=1412 comm="syz.2.424" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 53.832450][ T290] EXT4-fs (loop2): unmounting filesystem. [ 53.839469][ T28] audit: type=1400 audit(1732041119.386:332): avc: denied { unmount } for pid=290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 53.859108][ T295] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 53.870023][ T295] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 53.889955][ T295] usb 7-1: New USB device found, idVendor=056a, idProduct=0019, bcdDevice= 0.00 [ 53.909172][ T295] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.934202][ T295] usb 7-1: config 0 descriptor?? [ 53.970152][ T24] usb 8-1: 2:1 : format type 0 is detected, processed as PCM [ 53.978744][ T28] audit: type=1400 audit(1732041119.526:333): avc: denied { create } for pid=1434 comm="syz.1.433" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 53.980391][ T1436] device lo entered promiscuous mode [ 53.998700][ T28] audit: type=1400 audit(1732041119.526:334): avc: denied { ioctl } for pid=1434 comm="syz.1.433" path="socket:[21785]" dev="sockfs" ino=21785 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 54.013269][ T1434] device lo left promiscuous mode [ 54.028825][ T1437] SELinux: policydb magic number 0xb does not match expected magic number 0xf97cff8c [ 54.043490][ T1437] SELinux: failed to load policy [ 54.171115][ T1457] loop1: detected capacity change from 0 to 128 [ 54.191200][ T1457] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 54.199627][ T1457] ext4 filesystem being mounted at /100/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 54.248747][ T292] EXT4-fs (loop1): unmounting filesystem. [ 54.403086][ T295] wacom 0003:056A:0019.001A: Unknown device_type for 'HID 056a:0019'. Assuming pen. [ 54.428457][ T295] wacom 0003:056A:0019.001A: hidraw0: USB HID v0.00 Device [HID 056a:0019] on usb-dummy_hcd.6-1/input0 [ 54.456641][ T295] input: Wacom Bamboo1 Medium Pen as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:056A:0019.001A/input/input31 [ 54.611444][ T19] usb 7-1: USB disconnect, device number 4 [ 54.839975][ T24] usb 8-1: 2:1: cannot get freq at ep 0x82 [ 54.886016][ T24] usb 8-1: USB disconnect, device number 2 [ 55.142380][ T1518] syz.6.468[1518] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 55.142466][ T1518] syz.6.468[1518] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 55.347341][ T1534] loop7: detected capacity change from 0 to 512 [ 55.365976][ T1534] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 55.381714][ T1534] EXT4-fs (loop7): 1 truncate cleaned up [ 55.387292][ T1534] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 55.440044][ T1534] loop7: detected capacity change from 512 to 64 [ 55.455784][ T1341] EXT4-fs warning (device loop7): ext4_empty_dir:3164: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 55.486085][ T1341] EXT4-fs warning (device loop7): ext4_empty_dir:3164: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 55.492983][ T1548] netlink: 'syz.0.481': attribute type 4 has an invalid length. [ 55.499981][ T1341] EXT4-fs warning (device loop7): ext4_empty_dir:3164: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 55.520974][ T1341] EXT4-fs warning (device loop7): ext4_empty_dir:3164: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 55.534685][ T1341] EXT4-fs warning (device loop7): ext4_empty_dir:3164: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 55.541571][ T1548] netlink: 'syz.0.481': attribute type 4 has an invalid length. [ 55.548325][ T1341] EXT4-fs warning (device loop7): ext4_empty_dir:3164: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 55.569137][ T1341] EXT4-fs warning (device loop7): ext4_empty_dir:3164: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 55.582880][ T1341] EXT4-fs warning (device loop7): ext4_empty_dir:3164: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 55.596751][ T1341] EXT4-fs warning (device loop7): ext4_empty_dir:3164: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 55.611010][ T1341] EXT4-fs warning (device loop7): ext4_empty_dir:3164: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 55.683097][ T1341] EXT4-fs (loop7): unmounting filesystem. [ 55.825415][ T1570] SELinux: failed to load policy [ 55.861889][ T1577] syz.1.495[1577] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 55.861974][ T1577] syz.1.495[1577] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 55.881222][ T1568] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.899502][ T1568] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.907154][ T1568] device bridge_slave_0 entered promiscuous mode [ 55.914479][ T1568] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.921543][ T1568] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.928854][ T1568] device bridge_slave_1 entered promiscuous mode [ 56.094364][ T1568] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.101279][ T1568] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.108369][ T1568] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.115174][ T1568] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.158054][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.166559][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.175035][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.186578][ T1597] loop6: detected capacity change from 0 to 2048 [ 56.208887][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.219496][ T332] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.226394][ T332] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.239334][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.248188][ T1597] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a802c018, mo2=0002] [ 56.248419][ T332] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.259086][ T1605] serio: Serial port ptm0 [ 56.263000][ T332] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.267300][ T1597] System zones: 0-7 [ 56.279107][ T1597] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 56.299527][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.311568][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.327871][ T1258] EXT4-fs (loop6): unmounting filesystem. [ 56.353862][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.372953][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.381551][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 56.389213][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 56.399666][ T1568] device veth0_vlan entered promiscuous mode [ 56.448961][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.463579][ T1568] device veth1_macvtap entered promiscuous mode [ 56.496156][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.515962][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 56.534346][ T8] device bridge_slave_1 left promiscuous mode [ 56.542119][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.549696][ T8] device bridge_slave_0 left promiscuous mode [ 56.557840][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.566559][ T8] device veth1_macvtap left promiscuous mode [ 56.572491][ T8] device veth0_vlan left promiscuous mode [ 56.786509][ T1642] loop8: detected capacity change from 0 to 1024 [ 56.794313][ T1638] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Dropping request. Check SNMP counters. [ 56.837427][ T1642] EXT4-fs: Ignoring removed orlov option [ 56.848725][ T1642] EXT4-fs (loop8): Test dummy encryption mode enabled [ 56.865831][ T1642] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 56.913133][ T1650] overlayfs: missing 'lowerdir' [ 56.948778][ T1642] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 57.019822][ T1568] EXT4-fs (loop8): unmounting filesystem. [ 57.117250][ T1672] device lo entered promiscuous mode [ 57.130809][ T1671] device lo left promiscuous mode [ 57.136102][ T1674] syz.8.532[1674] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 57.136177][ T1674] syz.8.532[1674] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 57.243900][ T1688] loop8: detected capacity change from 0 to 1024 [ 57.312884][ T1691] loop6: detected capacity change from 0 to 1024 [ 57.320744][ T1688] EXT4-fs (loop8): Test dummy encryption mode enabled [ 57.333978][ T1691] EXT4-fs: Ignoring removed orlov option [ 57.372009][ T1691] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 57.373593][ T1688] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 57.403707][ T1704] SELinux: failed to load policy [ 57.432858][ T1691] EXT4-fs (loop6): re-mounted. Quota mode: writeback. [ 57.493216][ T1258] EXT4-fs (loop6): unmounting filesystem. [ 57.502690][ T1709] xt_hashlimit: size too large, truncated to 1048576 [ 57.573697][ T1568] EXT4-fs (loop8): unmounting filesystem. [ 57.643883][ T1686] loop2: detected capacity change from 0 to 40427 [ 57.660801][ T1686] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 57.676702][ T1686] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 57.704879][ T1686] F2FS-fs (loop2): Found nat_bits in checkpoint [ 57.776472][ T1686] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 57.787322][ T1686] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 57.824218][ T1686] syz.2.539: attempt to access beyond end of device [ 57.824218][ T1686] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 57.840001][ T387] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 58.020005][ T24] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 58.079960][ T387] usb 7-1: Using ep0 maxpacket: 16 [ 58.210067][ T387] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 58.224415][ T387] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 58.235335][ T387] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 58.250152][ T387] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 58.259107][ T387] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.268421][ T387] usb 7-1: config 0 descriptor?? [ 58.279982][ T383] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 58.390018][ T24] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 58.400953][ T24] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 58.410551][ T24] usb 9-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 58.419472][ T24] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.428107][ T24] usb 9-1: config 0 descriptor?? [ 58.550021][ T19] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 58.640048][ T383] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 58.649605][ T383] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 58.659962][ T383] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 58.669432][ T383] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 58.761042][ T28] kauditd_printk_skb: 94 callbacks suppressed [ 58.761059][ T28] audit: type=1400 audit(1732041124.316:429): avc: denied { create } for pid=1767 comm="syz.0.572" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 58.791020][ T387] koneplus 0003:1E7D:2E22.001B: unknown main item tag 0x0 [ 58.798470][ T387] koneplus 0003:1E7D:2E22.001B: unknown main item tag 0x0 [ 58.798674][ T28] audit: type=1400 audit(1732041124.346:430): avc: denied { write } for pid=1769 comm="syz.0.573" name="event2" dev="devtmpfs" ino=268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 58.808318][ T387] koneplus 0003:1E7D:2E22.001B: hidraw0: USB HID v0.00 Device [HID 1e7d:2e22] on usb-dummy_hcd.6-1/input0 [ 58.828923][ T28] audit: type=1400 audit(1732041124.346:431): avc: denied { open } for pid=1769 comm="syz.0.573" path="/dev/input/event2" dev="devtmpfs" ino=268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 58.880002][ T383] usb 3-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 58.888644][ T28] audit: type=1400 audit(1732041124.436:432): avc: denied { watch } for pid=1775 comm="syz.0.576" path="/149/file0/bus" dev="proc" ino=4026531855 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 58.888877][ T383] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.920060][ T383] usb 3-1: Product: syz [ 58.924427][ T383] usb 3-1: Manufacturer: syz [ 58.928930][ T383] usb 3-1: SerialNumber: syz [ 58.934889][ T24] wacom 0003:056A:0331.001C: unknown main item tag 0x0 [ 58.942713][ T28] audit: type=1400 audit(1732041124.496:433): avc: denied { unmount } for pid=291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 58.944645][ T24] wacom 0003:056A:0331.001C: unknown main item tag 0x0 [ 58.969312][ T383] usb 3-1: config 0 descriptor?? [ 58.976062][ T24] wacom 0003:056A:0331.001C: unknown main item tag 0x0 [ 58.986698][ T24] wacom 0003:056A:0331.001C: hidraw1: USB HID v0.00 Device [HID 056a:0331] on usb-dummy_hcd.8-1/input0 [ 58.990753][ T1712] syz.6.547[1712] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 58.998642][ T1712] syz.6.547[1712] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 59.010175][ T19] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 59.010820][ T383] ums-isd200 3-1:0.0: USB Mass Storage device detected [ 59.032182][ T19] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 59.052592][ T19] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 59.061807][ T387] koneplus 0003:1E7D:2E22.001B: couldn't init struct koneplus_device [ 59.069832][ T387] koneplus 0003:1E7D:2E22.001B: couldn't install mouse [ 59.076832][ T19] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.085622][ T387] koneplus: probe of 0003:1E7D:2E22.001B failed with error -5 [ 59.094093][ T19] usb 2-1: config 0 descriptor?? [ 59.149431][ T28] audit: type=1400 audit(1732041124.696:434): avc: denied { connect } for pid=1786 comm="syz.0.580" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 59.170232][ T387] usb 9-1: USB disconnect, device number 2 [ 59.260155][ T383] scsi host1: usb-storage 3-1:0.0 [ 59.275914][ T383] usb 3-1: USB disconnect, device number 12 [ 59.290425][ T295] usb 7-1: USB disconnect, device number 5 [ 59.367314][ T28] audit: type=1400 audit(1732041124.916:435): avc: denied { unlink } for pid=1800 comm="syz.0.585" name="#7" dev="tmpfs" ino=865 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 59.367374][ T1801] overlayfs: failed to set xattr on upper [ 59.831631][ T1826] loop2: detected capacity change from 0 to 256 [ 59.895211][ T28] audit: type=1400 audit(1732041125.446:436): avc: denied { mounton } for pid=1834 comm="syz.8.600" path="/proc/32/task" dev="proc" ino=24024 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 60.118631][ T1831] loop6: detected capacity change from 0 to 40427 [ 60.125883][ T538] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 60.134125][ T1831] F2FS-fs (loop6): Invalid log blocks per segment (4278190089) [ 60.141941][ T1831] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 60.160509][ T1831] F2FS-fs (loop6): invalid crc value [ 60.167357][ T1831] F2FS-fs (loop6): Found nat_bits in checkpoint [ 60.201974][ T19] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.001D/input/input37 [ 60.218465][ T1831] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 60.225480][ T1831] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 60.249715][ T19] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.001D/input/input38 [ 60.274649][ T19] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.001D/input/input39 [ 60.280101][ T1831] syz.6.601: attempt to access beyond end of device [ 60.280101][ T1831] loop6: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 60.295871][ T19] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.001D/input/input40 [ 60.335843][ T19] uclogic 0003:256C:006D.001D: input,hiddev96,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.1-1/input0 [ 60.379979][ T538] usb 3-1: Using ep0 maxpacket: 16 [ 60.419960][ T295] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 60.437684][ T24] usb 2-1: USB disconnect, device number 11 [ 60.463078][ T1854] loop6: detected capacity change from 0 to 256 [ 60.476889][ T28] audit: type=1400 audit(1732041126.026:437): avc: denied { mount } for pid=1853 comm="syz.6.607" name="/" dev="loop6" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 60.513137][ T28] audit: type=1400 audit(1732041126.066:438): avc: denied { unmount } for pid=1258 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 60.540108][ T538] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 125, changing to 10 [ 60.553690][ T538] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 10112, setting to 1024 [ 60.560997][ T1856] loop6: detected capacity change from 0 to 128 [ 60.565564][ T538] usb 3-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 60.579642][ T538] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.588212][ T538] usb 3-1: config 0 descriptor?? [ 60.610020][ T1826] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 60.690070][ T295] usb 1-1: Using ep0 maxpacket: 8 [ 60.812047][ T295] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 60.822314][ T295] usb 1-1: config 0 has no interfaces? [ 60.823420][ T1869] loop8: detected capacity change from 0 to 2048 [ 60.827614][ T295] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 60.847528][ T295] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.856127][ T295] usb 1-1: config 0 descriptor?? [ 60.861977][ T1869] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 60.876485][ T1869] syz.8.614[1869] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 60.876563][ T1869] syz.8.614[1869] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 60.896324][ T1568] EXT4-fs (loop8): unmounting filesystem. [ 60.910006][ T19] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 60.944605][ T1876] loop8: detected capacity change from 0 to 256 [ 60.956544][ T1876] exfat: Deprecated parameter 'utf8' [ 60.967164][ T1876] exfat: Deprecated parameter 'namecase' [ 60.975741][ T1876] exFAT-fs (loop8): failed to load upcase table (idx : 0x00011f41, chksum : 0xf6e84b2e, utbl_chksum : 0xe619d30d) [ 61.060863][ T1826] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 61.069421][ T1826] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 61.082182][ T538] hid (null): unknown global tag 0x88 [ 61.087423][ T538] hid (null): invalid report_size 2129441703 [ 61.093896][ T538] hid (null): unknown global tag 0xe [ 61.100299][ T538] hid-generic 0003:0158:0100.001E: unknown main item tag 0x1 [ 61.107647][ T538] hid-generic 0003:0158:0100.001E: unexpected long global item [ 61.119793][ T538] hid-generic: probe of 0003:0158:0100.001E failed with error -22 [ 61.122319][ T295] usb 1-1: USB disconnect, device number 11 [ 61.285219][ T6] usb 3-1: USB disconnect, device number 13 [ 61.300061][ T19] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 61.311153][ T387] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 61.318417][ T19] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 61.328120][ T19] usb 7-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 61.337158][ T19] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.346138][ T19] usb 7-1: config 0 descriptor?? [ 61.560087][ T387] usb 9-1: Using ep0 maxpacket: 16 [ 61.710099][ T387] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 61.719945][ T387] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 61.730048][ T387] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 61.739765][ T387] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 0 [ 61.831589][ T19] hid-steam 0003:28DE:1102.001F: unknown main item tag 0x0 [ 61.838653][ T19] hid-steam 0003:28DE:1102.001F: unknown main item tag 0x0 [ 61.846042][ T387] usb 9-1: New USB device found, idVendor=04e6, idProduct=0007, bcdDevice= 1.75 [ 61.855210][ T387] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=5 [ 61.863071][ T19] hid-steam 0003:28DE:1102.001F: unknown main item tag 0x4 [ 61.870080][ T387] usb 9-1: SerialNumber: syz [ 61.875368][ T19] hid-steam 0003:28DE:1102.001F: hidraw0: USB HID v0.00 Device [HID 28de:1102] on usb-dummy_hcd.6-1/input0 [ 61.900001][ T295] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 61.940569][ T387] usb-storage 9-1:1.0: USB Mass Storage device detected [ 61.948453][ T387] usb-storage 9-1:1.0: Quirks match for vid 04e6 pid 0007: 1 [ 61.956234][ T387] scsi host1: usb-storage 9-1:1.0 [ 62.035041][ T387] usb 7-1: USB disconnect, device number 6 [ 62.070200][ T24] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 62.082101][ T1904] loop1: detected capacity change from 0 to 512 [ 62.092889][ T1904] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 62.102274][ T1904] ext4 filesystem being mounted at /146/file0 supports timestamps until 2038 (0x7fffffff) [ 62.135123][ T292] EXT4-fs (loop1): unmounting filesystem. [ 62.140862][ T295] usb 1-1: Using ep0 maxpacket: 16 [ 62.145526][ T6] usb 9-1: USB disconnect, device number 3 [ 62.260082][ T295] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 62.270834][ T295] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 62.280406][ T295] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 62.319992][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 62.440029][ T383] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 62.447620][ T24] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 62.460318][ T295] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 62.469260][ T295] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.477594][ T295] usb 1-1: Product: syz [ 62.481738][ T295] usb 1-1: Manufacturer: syz [ 62.486154][ T295] usb 1-1: SerialNumber: syz [ 62.630145][ T24] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 62.639473][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.647351][ T24] usb 3-1: Product: syz [ 62.651354][ T24] usb 3-1: Manufacturer: syz [ 62.655681][ T24] usb 3-1: SerialNumber: syz [ 62.800010][ T383] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 62.810903][ T383] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 62.820515][ T383] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 62.829302][ T383] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.837866][ T383] usb 2-1: config 0 descriptor?? [ 62.950001][ T6] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 62.970158][ T295] usb 1-1: 2:1 : format type 0 is detected, processed as PCM [ 63.322520][ T383] pyra 0003:1E7D:2CF6.0020: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.1-1/input0 [ 63.330047][ T6] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 63.343282][ T6] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 63.430059][ T6] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 63.439192][ T6] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 63.446997][ T6] usb 9-1: SerialNumber: syz [ 63.750003][ T383] pyra 0003:1E7D:2CF6.0020: couldn't init struct pyra_device [ 63.757276][ T383] pyra 0003:1E7D:2CF6.0020: couldn't install mouse [ 63.764214][ T383] pyra: probe of 0003:1E7D:2CF6.0020 failed with error -71 [ 63.772255][ T383] usb 2-1: USB disconnect, device number 12 [ 63.800121][ T24] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 63.806378][ T24] cdc_ncm 3-1:1.0: setting tx_max = 52 [ 63.850174][ T295] usb 1-1: 2:1: cannot get freq at ep 0x82 [ 63.871509][ T6] usb 9-1: 0:2 : does not exist [ 63.873097][ T295] usb 1-1: USB disconnect, device number 12 [ 64.011576][ T24] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 64.024022][ T24] usb 3-1: USB disconnect, device number 14 [ 64.027181][ T28] kauditd_printk_skb: 61 callbacks suppressed [ 64.027198][ T28] audit: type=1400 audit(1732041129.576:500): avc: denied { read } for pid=140 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 64.030121][ T24] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM (NO ZLP) [ 64.056444][ T28] audit: type=1400 audit(1732041129.586:501): avc: denied { search } for pid=140 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 64.086743][ T28] audit: type=1400 audit(1732041129.586:502): avc: denied { read } for pid=140 comm="dhcpcd" name="n17" dev="tmpfs" ino=4217 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 64.113329][ T28] audit: type=1400 audit(1732041129.586:503): avc: denied { open } for pid=140 comm="dhcpcd" path="/run/udev/data/n17" dev="tmpfs" ino=4217 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 64.135954][ T383] usb 9-1: USB disconnect, device number 4 [ 64.136368][ T28] audit: type=1400 audit(1732041129.586:504): avc: denied { getattr } for pid=140 comm="dhcpcd" path="/run/udev/data/n17" dev="tmpfs" ino=4217 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 64.165629][ T28] audit: type=1400 audit(1732041129.636:505): avc: denied { read } for pid=1926 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=420 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 64.188753][ T28] audit: type=1400 audit(1732041129.636:506): avc: denied { open } for pid=1926 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=420 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 64.213647][ T28] audit: type=1400 audit(1732041129.636:507): avc: denied { getattr } for pid=1926 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=420 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 64.238806][ T28] audit: type=1400 audit(1732041129.726:508): avc: denied { write } for pid=1925 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=419 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 64.261668][ T28] audit: type=1400 audit(1732041129.726:509): avc: denied { add_name } for pid=1925 comm="dhcpcd-run-hook" name="resolv.conf.usb0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 64.293897][ T1947] loop1: detected capacity change from 0 to 512 [ 64.304969][ T1947] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 64.318283][ T1947] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 64.326908][ T1947] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.634: invalid indirect mapped block 2683928664 (level 1) [ 64.342699][ T1947] EXT4-fs (loop1): Remounting filesystem read-only [ 64.349234][ T1947] EXT4-fs (loop1): 1 truncate cleaned up [ 64.355025][ T1947] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 64.368984][ T1947] EXT4-fs error (device loop1): ext4_find_dest_de:2113: inode #2: block 13: comm syz.1.634: bad entry in directory: rec_len is too small for name_len - offset=92, inode=16, rec_len=16, size=1024 fake=0 [ 64.391059][ T1947] EXT4-fs (loop1): Remounting filesystem read-only [ 64.403877][ T292] EXT4-fs error (device loop1): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=92, inode=16, rec_len=16, size=1024 fake=0 [ 64.430913][ T292] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2186: inode #15: comm syz-executor: corrupted in-inode xattr [ 64.443555][ T292] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2186: inode #15: comm syz-executor: corrupted in-inode xattr [ 64.488004][ T1967] netlink: 48 bytes leftover after parsing attributes in process `syz.0.641'. [ 64.513182][ T292] EXT4-fs (loop1): unmounting filesystem. [ 64.655739][ T1977] loop2: detected capacity change from 0 to 8192 [ 64.662641][ T1982] overlayfs: failed to set xattr on upper [ 64.697004][ T339] I/O error, dev loop2, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 64.729962][ T331] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 64.779297][ T1980] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.786285][ T1980] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.803888][ T1980] device bridge_slave_0 entered promiscuous mode [ 64.808690][ T1977] loop2: detected capacity change from 0 to 512 [ 64.814666][ T1980] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.832411][ T1980] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.844557][ T1977] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 64.853541][ T1980] device bridge_slave_1 entered promiscuous mode [ 64.866368][ T1977] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 64.878613][ T1977] EXT4-fs (loop2): orphan cleanup on readonly fs [ 64.899747][ T1977] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:477: comm syz.2.647: Invalid block bitmap block 0 in block_group 0 [ 64.920520][ T1977] EXT4-fs (loop2): Remounting filesystem read-only [ 64.939519][ T1977] EXT4-fs error (device loop2): ext4_acquire_dquot:6787: comm syz.2.647: Failed to acquire dquot type 1 [ 64.965002][ T2004] netlink: 8 bytes leftover after parsing attributes in process `syz.0.657'. [ 64.982196][ T1977] EXT4-fs (loop2): 1 orphan inode deleted [ 64.992787][ T1977] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 65.044524][ T2008] syz.6.659[2008] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 65.044606][ T2008] syz.6.659[2008] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 65.112678][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.144081][ T290] EXT4-fs (loop2): unmounting filesystem. [ 65.150416][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.159693][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.176467][ T2016] loop2: detected capacity change from 0 to 128 [ 65.178500][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.196245][ T326] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.203238][ T326] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.220635][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.228472][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.241675][ T2016] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 65.248646][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.260777][ T2016] ext4 filesystem being mounted at /113/file1 supports timestamps until 2038 (0x7fffffff) [ 65.268958][ T326] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.277393][ T326] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.321448][ T290] EXT4-fs (loop2): unmounting filesystem. [ 65.360746][ T43] device bridge_slave_1 left promiscuous mode [ 65.366781][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.382194][ T43] device bridge_slave_0 left promiscuous mode [ 65.388169][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.412160][ T43] device veth1_macvtap left promiscuous mode [ 65.418213][ T43] device veth0_vlan left promiscuous mode [ 65.418500][ T2022] SELinux: policydb version 2128088457 does not match my version range 15-33 [ 65.433196][ T2022] SELinux: failed to load policy [ 65.441165][ T2024] Disabled LAPIC found during irq injection [ 65.497750][ T2037] loop8: detected capacity change from 0 to 512 [ 65.521563][ T2037] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 65.532424][ T2037] System zones: 0-2, 18-18, 34-34 [ 65.539772][ T2037] EXT4-fs error (device loop8): ext4_validate_block_bitmap:438: comm syz.8.669: bg 0: block 248: padding at end of block bitmap is not set [ 65.554295][ T2037] EXT4-fs error (device loop8): ext4_acquire_dquot:6787: comm syz.8.669: Failed to acquire dquot type 1 [ 65.566279][ T2037] EXT4-fs (loop8): 1 truncate cleaned up [ 65.573333][ T2037] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 65.591195][ T2037] ext4 filesystem being mounted at /26/file0 supports timestamps until 2038 (0x7fffffff) [ 65.595843][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.614787][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.639258][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.647818][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.648588][ T1568] EXT4-fs (loop8): unmounting filesystem. [ 65.672297][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.682269][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.700764][ T1980] device veth0_vlan entered promiscuous mode [ 65.716041][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.745677][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.746546][ T2056] loop8: detected capacity change from 0 to 512 [ 65.754329][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.768535][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.784435][ T1980] device veth1_macvtap entered promiscuous mode [ 65.810635][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.818833][ T2056] EXT4-fs error (device loop8): ext4_orphan_get:1396: inode #15: comm syz.8.672: casefold flag without casefold feature [ 65.837331][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.848817][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.857194][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.865552][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.874631][ T2056] EXT4-fs error (device loop8): ext4_orphan_get:1401: comm syz.8.672: couldn't read orphan inode 15 (err -117) [ 65.893473][ T2056] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 65.961468][ T2071] loop9: detected capacity change from 0 to 512 [ 65.983085][ T1568] EXT4-fs (loop8): unmounting filesystem. [ 65.996490][ T2071] EXT4-fs error (device loop9): ext4_xattr_inode_iget:404: comm syz.9.682: inode #1: comm syz.9.682: iget: illegal inode # [ 66.015873][ T43] Bluetooth: hci0: Frame reassembly failed (-84) [ 66.015877][ T2071] EXT4-fs error (device loop9): ext4_xattr_inode_iget:409: comm syz.9.682: error while reading EA inode 1 err=-117 [ 66.041100][ T2071] EXT4-fs warning (device loop9): ext4_expand_extra_isize_ea:2808: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 66.054676][ T2071] EXT4-fs error (device loop9): ext4_xattr_inode_iget:404: comm syz.9.682: inode #1: comm syz.9.682: iget: illegal inode # [ 66.067709][ T2071] EXT4-fs error (device loop9): ext4_xattr_inode_iget:409: comm syz.9.682: error while reading EA inode 1 err=-117 [ 66.082095][ T2071] EXT4-fs (loop9): 1 orphan inode deleted [ 66.089684][ T2071] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 66.129225][ T2071] EXT4-fs (loop9): re-mounted. Quota mode: writeback. [ 66.146332][ T1980] EXT4-fs (loop9): unmounting filesystem. [ 66.159528][ T2087] IPv6: NLM_F_REPLACE set, but no existing node found! [ 66.271492][ T2099] loop9: detected capacity change from 0 to 1024 [ 66.278088][ T2099] EXT4-fs: Ignoring removed nomblk_io_submit option [ 66.292006][ T2099] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 66.328256][ T2099] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 66.361965][ T2099] syz.9.694 (pid 2099) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 66.385965][ T1980] EXT4-fs (loop9): unmounting filesystem. [ 66.671383][ T383] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 66.835427][ T2164] loop2: detected capacity change from 0 to 256 [ 66.844776][ T2164] exFAT-fs (loop2): failed to load upcase table (idx : 0x00012153, chksum : 0x555ffa9e, utbl_chksum : 0xe619d30d) [ 66.878876][ T2166] option changes via remount are deprecated (pid=2165 comm=syz.2.725) [ 66.890074][ T6] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 66.917119][ T2170] input: syz0 as /devices/virtual/input/input41 [ 67.030074][ T383] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 67.041199][ T383] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 67.051032][ T383] usb 10-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 67.060066][ T383] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.070586][ T383] usb 10-1: config 0 descriptor?? [ 67.270064][ T6] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 67.281663][ T6] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 67.291583][ T6] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 67.304754][ T6] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 67.313949][ T6] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.326363][ T6] usb 9-1: config 0 descriptor?? [ 67.349990][ T2186] loop6: detected capacity change from 0 to 512 [ 67.362453][ T2186] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 67.371431][ T2186] ext4 filesystem being mounted at /48/file0 supports timestamps until 2038 (0x7fffffff) [ 67.385866][ T2186] EXT4-fs error (device loop6): ext4_do_update_inode:5226: inode #2: comm syz.6.735: corrupted inode contents [ 67.398387][ T2186] EXT4-fs error (device loop6): ext4_dirty_inode:6088: inode #2: comm syz.6.735: mark_inode_dirty error [ 67.410195][ T2186] EXT4-fs error (device loop6): ext4_do_update_inode:5226: inode #2: comm syz.6.735: corrupted inode contents [ 67.422209][ T2186] EXT4-fs error (device loop6): __ext4_ext_dirty:202: inode #2: comm syz.6.735: mark_inode_dirty error [ 67.441412][ T1258] EXT4-fs (loop6): unmounting filesystem. [ 67.491647][ T2193] loop6: detected capacity change from 0 to 16 [ 67.498347][ T2193] erofs: (device loop6): mounted with root inode @ nid 36. [ 67.506971][ T2193] erofs: (device loop6): z_erofs_readahead: readahead error at page 24 @ nid 36 [ 67.516062][ T2193] erofs: (device loop6): z_erofs_readahead: readahead error at page 19 @ nid 36 [ 67.525018][ T2193] erofs: (device loop6): z_erofs_readahead: readahead error at page 18 @ nid 36 [ 67.534105][ T2193] erofs: (device loop6): z_erofs_readahead: readahead error at page 17 @ nid 36 [ 67.543419][ T2193] erofs: (device loop6): z_erofs_readahead: readahead error at page 16 @ nid 36 [ 67.551205][ T383] arvo 0003:1E7D:30D4.0021: item fetching failed at offset 5/7 [ 67.552486][ T2193] erofs: (device loop6): z_erofs_readahead: readahead error at page 12 @ nid 36 [ 67.563052][ T383] arvo 0003:1E7D:30D4.0021: parse failed [ 67.568820][ T2193] syz.6.737: attempt to access beyond end of device [ 67.568820][ T2193] loop6: rw=524288, sector=376, nr_sectors = 16 limit=16 [ 67.574585][ T383] arvo: probe of 0003:1E7D:30D4.0021 failed with error -22 [ 67.587834][ T2193] syz.6.737: attempt to access beyond end of device [ 67.587834][ T2193] loop6: rw=524288, sector=384, nr_sectors = 16 limit=16 [ 67.607881][ T2193] syz.6.737: attempt to access beyond end of device [ 67.607881][ T2193] loop6: rw=524288, sector=8, nr_sectors = 16 limit=16 [ 67.621538][ T2193] syz.6.737: attempt to access beyond end of device [ 67.621538][ T2193] loop6: rw=524288, sector=16, nr_sectors = 16 limit=16 [ 67.635087][ T2193] syz.6.737: attempt to access beyond end of device [ 67.635087][ T2193] loop6: rw=524288, sector=720, nr_sectors = 16 limit=16 [ 67.648727][ T2193] syz.6.737: attempt to access beyond end of device [ 67.648727][ T2193] loop6: rw=524288, sector=728, nr_sectors = 16 limit=16 [ 67.763903][ T383] usb 10-1: USB disconnect, device number 2 [ 67.807699][ T2202] loop6: detected capacity change from 0 to 512 [ 67.817919][ T2202] EXT4-fs error (device loop6): ext4_orphan_get:1396: inode #15: comm syz.6.741: casefold flag without casefold feature [ 67.830803][ T2202] EXT4-fs error (device loop6): ext4_orphan_get:1401: comm syz.6.741: couldn't read orphan inode 15 (err -117) [ 67.843169][ T2202] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 67.861507][ T6] plantronics 0003:047F:FFFF.0022: No inputs registered, leaving [ 67.870664][ T6] plantronics 0003:047F:FFFF.0022: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 67.897363][ T1258] EXT4-fs (loop6): unmounting filesystem. [ 67.907121][ T2208] loop2: detected capacity change from 0 to 512 [ 67.913863][ T2208] EXT4-fs: Ignoring removed i_version option [ 67.921526][ T2208] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 67.935369][ T2208] EXT4-fs (loop2): 1 truncate cleaned up [ 67.941135][ T2208] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 67.972197][ T2215] netlink: 16 bytes leftover after parsing attributes in process `syz.6.746'. [ 67.994405][ T2217] mmap: syz.6.747 (2217) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 68.037201][ T290] EXT4-fs (loop2): unmounting filesystem. [ 68.059829][ T2219] loop2: detected capacity change from 0 to 512 [ 68.086763][ T2219] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.748: inode #1: comm syz.2.748: iget: illegal inode # [ 68.099586][ T1922] Bluetooth: hci0: command 0x1003 tx timeout [ 68.099644][ T331] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 68.112237][ T2219] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.748: error while reading EA inode 1 err=-117 [ 68.129690][ T2219] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.748: inode #1: comm syz.2.748: iget: illegal inode # [ 68.145232][ T2219] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.748: error while reading EA inode 1 err=-117 [ 68.161365][ T2219] EXT4-fs (loop2): 1 orphan inode deleted [ 68.166973][ T2219] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 68.212256][ T2219] EXT4-fs (loop2): re-mounted. Quota mode: writeback. [ 68.226733][ T290] EXT4-fs (loop2): unmounting filesystem. [ 68.332491][ T2236] loop2: detected capacity change from 0 to 512 [ 68.352873][ T2236] EXT4-fs error (device loop2): ext4_orphan_get:1396: inode #15: comm syz.2.755: casefold flag without casefold feature [ 68.370171][ T2236] EXT4-fs error (device loop2): ext4_orphan_get:1401: comm syz.2.755: couldn't read orphan inode 15 (err -117) [ 68.388503][ T2236] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 68.390372][ T2234] loop9: detected capacity change from 0 to 8192 [ 68.432516][ T290] EXT4-fs (loop2): unmounting filesystem. [ 68.450578][ T339] I/O error, dev loop9, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 68.491476][ T2234] loop9: detected capacity change from 0 to 512 [ 68.517284][ T2234] EXT4-fs (loop9): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 68.540598][ T2234] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 68.549541][ T2234] EXT4-fs (loop9): orphan cleanup on readonly fs [ 68.561525][ T2234] EXT4-fs error (device loop9): ext4_read_block_bitmap_nowait:477: comm syz.9.754: Invalid block bitmap block 0 in block_group 0 [ 68.580109][ T2234] EXT4-fs (loop9): Remounting filesystem read-only [ 68.590164][ T2234] EXT4-fs error (device loop9): ext4_acquire_dquot:6787: comm syz.9.754: Failed to acquire dquot type 1 [ 68.606886][ T2234] EXT4-fs (loop9): 1 orphan inode deleted [ 68.619303][ T2234] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 68.671493][ T2234] syz.9.754 (2234) used greatest stack depth: 19816 bytes left [ 68.686088][ T1980] EXT4-fs (loop9): unmounting filesystem. [ 68.879919][ T387] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 68.942846][ T2252] loop9: detected capacity change from 0 to 40427 [ 68.950880][ T2252] F2FS-fs (loop9): invalid crc value [ 68.968094][ T2252] F2FS-fs (loop9): Found nat_bits in checkpoint [ 69.036861][ T2252] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 69.059179][ T2253] f2fs_ckpt-7:9: attempt to access beyond end of device [ 69.059179][ T2253] loop9: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 69.108179][ T28] kauditd_printk_skb: 109 callbacks suppressed [ 69.108196][ T28] audit: type=1400 audit(1732045229.650:613): avc: denied { create } for pid=2259 comm="syz.0.764" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 69.153263][ T28] audit: type=1400 audit(1732045229.690:614): avc: denied { sys_admin } for pid=2259 comm="syz.0.764" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 69.213407][ T2267] loop9: detected capacity change from 0 to 512 [ 69.219803][ T2267] ext4: Unknown parameter 'fowner<00000000000000000000' [ 69.244709][ T28] audit: type=1400 audit(1732045229.790:615): avc: denied { unmount } for pid=1980 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 69.280032][ T387] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 69.295026][ T387] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 69.308796][ T387] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 69.319770][ T387] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 69.510010][ T387] usb 3-1: New USB device found, idVendor=0738, idProduct=a2c5, bcdDevice=1e.ce [ 69.539141][ T387] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.561588][ T387] usb 3-1: Product: syz [ 69.565589][ T387] usb 3-1: Manufacturer: syz [ 69.579946][ T387] usb 3-1: SerialNumber: syz [ 69.603553][ T387] usb 3-1: config 0 descriptor?? [ 69.653190][ T387] xpad 3-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 69.685404][ T387] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input42 [ 69.713344][ T2278] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.728990][ T2276] loop6: detected capacity change from 0 to 40427 [ 69.742657][ T2276] F2FS-fs (loop6): Invalid log blocks per segment (83886089) [ 69.756259][ T2278] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.777945][ T2276] F2FS-fs (loop6): Can't find valid F2FS filesystem in 2th superblock [ 69.795592][ T2278] device bridge_slave_0 entered promiscuous mode [ 69.805197][ T2276] F2FS-fs (loop6): invalid crc value [ 69.817272][ T2278] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.826374][ T2276] F2FS-fs (loop6): Found nat_bits in checkpoint [ 69.832696][ T2278] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.857293][ T387] usb 3-1: USB disconnect, device number 15 [ 69.860848][ T2278] device bridge_slave_1 entered promiscuous mode [ 69.863787][ T387] xpad 3-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 69.946979][ T326] device bridge_slave_1 left promiscuous mode [ 69.953092][ T326] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.966500][ T2276] F2FS-fs (loop6): Try to recover 2th superblock, ret: 0 [ 69.973698][ T2276] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 69.981577][ T326] device bridge_slave_0 left promiscuous mode [ 69.987633][ T326] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.000466][ T6] usb 9-1: USB disconnect, device number 5 [ 70.023837][ T326] device veth1_macvtap left promiscuous mode [ 70.031742][ T1258] syz-executor: attempt to access beyond end of device [ 70.031742][ T1258] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 70.053889][ T326] device veth0_vlan left promiscuous mode [ 70.055109][ T28] audit: type=1400 audit(1732045230.600:616): avc: denied { read write } for pid=2294 comm="syz.8.776" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 70.121025][ T28] audit: type=1400 audit(1732045230.600:617): avc: denied { open } for pid=2294 comm="syz.8.776" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 70.141450][ T538] kernel read not supported for file /vga_arbiter (pid: 538 comm: kworker/0:5) [ 70.331847][ T2305] overlayfs: missing 'lowerdir' [ 70.397949][ T28] audit: type=1400 audit(1732045230.940:618): avc: denied { mounton } for pid=2308 comm="syz.6.782" path="/66/file0" dev="tmpfs" ino=364 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 70.501272][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.508959][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.526838][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.535566][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.549831][ T315] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.553182][ T28] audit: type=1400 audit(1732045231.100:619): avc: denied { read } for pid=2317 comm="syz.8.785" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 70.556784][ T315] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.584924][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.626891][ T2322] loop2: detected capacity change from 0 to 512 [ 70.634581][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.649132][ T315] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.656040][ T315] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.681123][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.689039][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.697161][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.705129][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.713297][ T2322] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 70.714659][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.739996][ T2322] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 70.748124][ T2322] System zones: 0-1, 15-15, 18-18, 34-34 [ 70.761138][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.769275][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.776905][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.784572][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.785077][ T2322] EXT4-fs (loop2): orphan cleanup on readonly fs [ 70.807183][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.821526][ T2322] Quota error (device loop2): v2_read_header: Failed header read: expected=8 got=0 [ 70.831075][ T2278] device veth0_vlan entered promiscuous mode [ 70.844439][ T2322] EXT4-fs warning (device loop2): ext4_enable_quotas:7022: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 70.859039][ T2322] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 70.866200][ T2322] EXT4-fs error (device loop2): ext4_orphan_get:1422: comm syz.2.786: bad orphan inode 16 [ 70.876428][ T2322] ext4_test_bit(bit=15, block=18) = 1 [ 70.878746][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.883429][ T2322] is_bad_inode(inode)=0 [ 70.895809][ T28] audit: type=1400 audit(1732045231.440:620): avc: denied { write } for pid=2332 comm="syz.8.791" name="tcp6" dev="proc" ino=4026532976 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 70.897868][ T2278] device veth1_macvtap entered promiscuous mode [ 70.934382][ T2322] NEXT_ORPHAN(inode)=0 [ 70.938289][ T2322] max_ino=32 [ 70.949927][ T2322] i_nlink=2 [ 70.952918][ T2322] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 70.983530][ T28] audit: type=1400 audit(1732045231.530:621): avc: denied { create } for pid=2334 comm="syz.8.792" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 70.985828][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.013116][ T2322] xt_hashlimit: size too large, truncated to 1048576 [ 71.021249][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.053631][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.074499][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.087794][ T2337] netlink: 'syz.8.793': attribute type 4 has an invalid length. [ 71.523106][ T290] EXT4-fs (loop2): unmounting filesystem. [ 71.582063][ T2356] loop2: detected capacity change from 0 to 256 [ 71.610024][ T334] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 71.841573][ T2370] loop0: detected capacity change from 0 to 128 [ 71.848304][ T2370] FAT-fs (loop0): bogus logical sector size 65535 [ 71.854794][ T2370] FAT-fs (loop0): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 71.864371][ T2370] FAT-fs (loop0): Can't find a valid FAT filesystem [ 71.930190][ T6] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 71.970056][ T334] usb 7-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 255, changing to 11 [ 71.981803][ T334] usb 7-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 59391, setting to 1024 [ 71.995264][ T334] usb 7-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 72.004422][ T334] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.029996][ T2351] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 72.299980][ T383] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 72.320046][ T6] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 72.330008][ T295] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 72.331349][ T6] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 72.490394][ T334] aiptek 7-1:17.0: Aiptek using 400 ms programming speed [ 72.497894][ T334] input: Aiptek as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:17.0/input/input43 [ 72.508636][ T334] usb 7-1: USB disconnect, device number 7 [ 72.520431][ T6] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 72.529523][ T6] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.537684][ T6] usb 3-1: Product: syz [ 72.540026][ T383] usb 9-1: Using ep0 maxpacket: 32 [ 72.541750][ T6] usb 3-1: Manufacturer: syz [ 72.551070][ T6] usb 3-1: SerialNumber: syz [ 72.660048][ T383] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 72.671230][ T383] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 72.681315][ T383] usb 9-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 72.695444][ T295] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 72.699272][ T2383] loop0: detected capacity change from 0 to 2048 [ 72.706565][ T295] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 72.724462][ T383] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.732670][ T295] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 72.742926][ T383] usb 9-1: config 0 descriptor?? [ 72.747316][ T2383] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 72.748013][ T295] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 72.770046][ T295] usb 4-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 72.779013][ T295] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.789854][ T295] usb 4-1: config 0 descriptor?? [ 72.798591][ T291] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 72.816446][ T291] EXT4-fs (loop0): unmounting filesystem. [ 73.222973][ T383] savu 0003:1E7D:2D5A.0023: hiddev96,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.8-1/input0 [ 73.271081][ T295] logitech-djreceiver 0003:046D:C71F.0024: unknown main item tag 0x0 [ 73.279182][ T295] logitech-djreceiver 0003:046D:C71F.0024: unknown main item tag 0x0 [ 73.287223][ T295] logitech-djreceiver 0003:046D:C71F.0024: item fetching failed at offset 2/5 [ 73.296249][ T295] logitech-djreceiver 0003:046D:C71F.0024: logi_dj_probe: parse failed [ 73.304555][ T295] logitech-djreceiver: probe of 0003:046D:C71F.0024 failed with error -22 [ 73.320112][ T6] cdc_ncm 3-1:1.0: bind() failure [ 73.328962][ T6] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 73.341498][ T6] cdc_ncm 3-1:1.1: bind() failure [ 73.363628][ T6] usb 3-1: USB disconnect, device number 16 [ 73.477717][ T295] usb 4-1: USB disconnect, device number 4 [ 73.490917][ T538] usb 9-1: USB disconnect, device number 6 [ 73.719942][ T6] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 73.969988][ T6] usb 3-1: Using ep0 maxpacket: 32 [ 74.068712][ T2434] loop3: detected capacity change from 0 to 128 [ 74.081845][ T2435] loop6: detected capacity change from 0 to 1024 [ 74.088352][ T2435] EXT4-fs: Ignoring removed nomblk_io_submit option [ 74.095849][ T2435] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 74.100596][ T2434] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 74.106060][ T2435] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e814e01c, mo2=0003] [ 74.112757][ T6] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 74.120878][ T295] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 74.131745][ T6] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 74.139142][ T2435] System zones: [ 74.148319][ T2434] ext4 filesystem being mounted at /6/mnt supports timestamps until 2038 (0x7fffffff) [ 74.148582][ T2435] 0-1 [ 74.156625][ T6] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 74.168184][ T28] kauditd_printk_skb: 12 callbacks suppressed [ 74.168202][ T28] audit: type=1400 audit(1732045234.710:634): avc: denied { create } for pid=2432 comm="syz.3.833" name="file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 74.172563][ T6] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.176823][ T6] usb 3-1: config 0 descriptor?? [ 74.185926][ T2435] , 3-36 [ 74.224644][ T2435] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 74.224685][ T2278] EXT4-fs (loop3): unmounting filesystem. [ 74.246086][ T1258] EXT4-fs (loop6): unmounting filesystem. [ 74.277788][ T2440] loop3: detected capacity change from 0 to 2048 [ 74.310927][ T2440] Alternate GPT is invalid, using primary GPT. [ 74.316950][ T2440] loop3: p1 p2 p3 [ 74.490814][ T295] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 74.502514][ T295] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 74.512752][ T295] usb 1-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 74.521980][ T295] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.533873][ T295] usb 1-1: config 0 descriptor?? [ 74.540084][ T334] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 74.631775][ T2450] loop3: detected capacity change from 0 to 40427 [ 74.638816][ T2450] F2FS-fs (loop3): fault_injection options not supported [ 74.645989][ T2450] F2FS-fs (loop3): Image doesn't support compression [ 74.653255][ T2450] F2FS-fs (loop3): Image doesn't support compression [ 74.659841][ T2450] F2FS-fs (loop3): fault_type options not supported [ 74.667257][ T2450] F2FS-fs (loop3): invalid crc value [ 74.673581][ T2450] F2FS-fs (loop3): Found nat_bits in checkpoint [ 74.708930][ T2450] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 74.720940][ T6] lua 0003:1E7D:2C2E.0025: global environment stack underflow [ 74.731239][ T28] audit: type=1400 audit(1732045235.280:635): avc: denied { map } for pid=2449 comm="syz.3.839" path="/10/bus/memory.events" dev="loop3" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 74.733220][ T6] lua 0003:1E7D:2C2E.0025: item 0 0 1 11 parsing failed [ 74.761009][ T6] lua 0003:1E7D:2C2E.0025: parse failed [ 74.766452][ T6] lua: probe of 0003:1E7D:2C2E.0025 failed with error -22 [ 74.766687][ T2278] syz-executor: attempt to access beyond end of device [ 74.766687][ T2278] loop3: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 74.787500][ T334] usb 7-1: Using ep0 maxpacket: 8 [ 74.882205][ T2454] loop3: detected capacity change from 0 to 1024 [ 74.888775][ T2454] EXT4-fs: Ignoring removed i_version option [ 74.895752][ T2454] EXT4-fs (loop3): Test dummy encryption mode enabled [ 74.909545][ T2454] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 74.918462][ T334] usb 7-1: config 135 has an invalid interface number: 230 but max is 0 [ 74.923727][ T28] audit: type=1400 audit(1732045235.470:636): avc: denied { block_suspend } for pid=2458 comm="syz.8.842" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 74.933483][ T334] usb 7-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 74.983029][ T387] usb 3-1: USB disconnect, device number 17 [ 74.986731][ T2454] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 74.990549][ T28] audit: type=1400 audit(1732045235.520:637): avc: denied { read write } for pid=2460 comm="syz.8.843" name="uhid" dev="devtmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 75.020628][ T28] audit: type=1400 audit(1732045235.520:638): avc: denied { open } for pid=2460 comm="syz.8.843" path="/dev/uhid" dev="devtmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 75.026865][ T334] usb 7-1: config 135 has no interface number 0 [ 75.043959][ T28] audit: type=1400 audit(1732045235.520:639): avc: denied { read } for pid=2460 comm="syz.8.843" name="usbmon0" dev="devtmpfs" ino=155 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 75.058305][ T2464] loop8: detected capacity change from 0 to 256 [ 75.072992][ T28] audit: type=1400 audit(1732045235.520:640): avc: denied { open } for pid=2460 comm="syz.8.843" path="/dev/usbmon0" dev="devtmpfs" ino=155 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 75.102778][ T334] usb 7-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 75.117170][ T2278] EXT4-fs (loop3): unmounting filesystem. [ 75.133768][ T339] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 75.149988][ T295] hid-steam 0003:28DE:1142.0026: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.0-1/input0 [ 75.280090][ T334] usb 7-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 75.289113][ T334] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.296997][ T334] usb 7-1: Product: syz [ 75.300936][ T334] usb 7-1: Manufacturer: syz [ 75.305326][ T334] usb 7-1: SerialNumber: syz [ 75.342282][ T383] usb 1-1: USB disconnect, device number 13 [ 75.350889][ T334] usb 7-1: Found UVC 0.00 device syz (18ec:3288) [ 75.357192][ T334] usb 7-1: No valid video chain found. [ 75.429987][ T375] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 75.553874][ T383] usb 7-1: USB disconnect, device number 8 [ 75.669959][ T375] usb 9-1: Using ep0 maxpacket: 16 [ 75.756800][ T2470] loop2: detected capacity change from 0 to 40427 [ 75.765036][ T2470] F2FS-fs (loop2): invalid crc value [ 75.771873][ T2470] F2FS-fs (loop2): Found nat_bits in checkpoint [ 75.790001][ T375] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 125, changing to 10 [ 75.801279][ T375] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 10112, setting to 1024 [ 75.812620][ T375] usb 9-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 75.815084][ T2470] F2FS-fs (loop2): Start checkpoint disabled! [ 75.821775][ T375] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.828326][ T2470] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 75.839695][ T375] usb 9-1: config 0 descriptor?? [ 75.866738][ T28] audit: type=1400 audit(1732045236.410:641): avc: denied { create } for pid=2473 comm="syz.0.847" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 75.880026][ T2464] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 75.903195][ T28] audit: type=1400 audit(1732045236.430:642): avc: denied { setopt } for pid=2473 comm="syz.0.847" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 75.922859][ T28] audit: type=1400 audit(1732045236.430:643): avc: denied { bind } for pid=2473 comm="syz.0.847" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 75.923082][ T43] kworker/u4:2: attempt to access beyond end of device [ 75.923082][ T43] loop2: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 76.002119][ T2480] netem: change failed [ 76.090611][ T2492] loop0: detected capacity change from 0 to 1024 [ 76.111231][ T2492] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 76.129647][ T291] EXT4-fs (loop0): unmounting filesystem. [ 76.149753][ T2500] loop0: detected capacity change from 0 to 1024 [ 76.172184][ T2500] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 76.183569][ T2500] EXT4-fs error (device loop0): ext4_expand_extra_isize_ea:2738: inode #15: comm syz.0.859: corrupted in-inode xattr [ 76.201852][ T291] EXT4-fs (loop0): unmounting filesystem. [ 76.320506][ T2464] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.328931][ T2464] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.340178][ T538] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 76.342281][ T375] hid (null): unknown global tag 0x88 [ 76.352881][ T375] hid (null): invalid report_size 2129441703 [ 76.358687][ T375] hid (null): unknown global tag 0xe [ 76.364913][ T375] hid-generic 0003:0158:0100.0027: unknown main item tag 0x1 [ 76.369982][ T387] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 76.372189][ T375] hid-generic 0003:0158:0100.0027: unexpected long global item [ 76.387054][ T375] hid-generic: probe of 0003:0158:0100.0027 failed with error -22 [ 76.499997][ T6] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 76.557128][ T19] usb 9-1: USB disconnect, device number 7 [ 76.630007][ T387] usb 7-1: Using ep0 maxpacket: 16 [ 76.684213][ T2509] loop3: detected capacity change from 0 to 512 [ 76.711534][ T2509] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 76.720638][ T2509] ext4 filesystem being mounted at /16/file0 supports timestamps until 2038 (0x7fffffff) [ 76.737781][ T2278] EXT4-fs (loop3): unmounting filesystem. [ 76.743928][ T538] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 76.754990][ T538] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 76.764981][ T538] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 76.778091][ T538] usb 3-1: New USB device found, idVendor=046d, idProduct=c293, bcdDevice= 0.00 [ 76.787164][ T538] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.795201][ T387] usb 7-1: config 0 has an invalid interface number: 2 but max is 0 [ 76.804059][ T538] usb 3-1: config 0 descriptor?? [ 76.808911][ T387] usb 7-1: config 0 has no interface number 0 [ 76.816859][ T387] usb 7-1: config 0 interface 2 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 76.827800][ T387] usb 7-1: config 0 interface 2 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 76.890150][ T6] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 76.900108][ T6] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 76.950008][ T387] usb 7-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice= 0.88 [ 76.958864][ T387] usb 7-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 76.966809][ T387] usb 7-1: Product: syz [ 76.970840][ T387] usb 7-1: SerialNumber: syz [ 76.975751][ T387] usb 7-1: config 0 descriptor?? [ 76.980680][ T6] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 76.989533][ T6] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 76.997459][ T6] usb 1-1: SerialNumber: syz [ 77.079953][ T375] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 77.263434][ T387] snd-usb-audio: probe of 7-1:0.2 failed with error -12 [ 77.276252][ T368] udevd[368]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 77.292902][ T6] usb 1-1: 0:2 : does not exist [ 77.298492][ T538] logitech 0003:046D:C293.0028: item fetching failed at offset 5/7 [ 77.306564][ T538] logitech 0003:046D:C293.0028: parse failed [ 77.312874][ T538] logitech: probe of 0003:046D:C293.0028 failed with error -22 [ 77.330030][ T375] usb 4-1: Using ep0 maxpacket: 32 [ 77.333275][ T6] usb 1-1: USB disconnect, device number 14 [ 77.342907][ T339] udevd[339]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 77.370032][ T19] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 77.450965][ T375] usb 4-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 32, changing to 9 [ 77.465410][ T375] usb 4-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 77.475147][ T375] usb 4-1: config 0 interface 0 has no altsetting 0 [ 77.481709][ T375] usb 4-1: New USB device found, idVendor=056a, idProduct=00c4, bcdDevice= 0.00 [ 77.490709][ T375] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.499802][ T375] usb 4-1: config 0 descriptor?? [ 77.505227][ T387] usb 7-1: USB disconnect, device number 9 [ 77.513970][ T383] usb 3-1: USB disconnect, device number 18 [ 77.759983][ T19] usb 9-1: too many endpoints for config 1 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 77.770969][ T19] usb 9-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 129 [ 77.860086][ T19] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 77.869119][ T19] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 77.877019][ T19] usb 9-1: SerialNumber: syz [ 77.991404][ T375] wacom 0003:056A:00C4.0029: unknown main item tag 0x0 [ 77.998982][ T375] wacom 0003:056A:00C4.0029: hidraw0: USB HID v0.00 Device [HID 056a:00c4] on usb-dummy_hcd.3-1/input0 [ 78.034533][ T2528] netlink: 4 bytes leftover after parsing attributes in process `syz.6.868'. [ 78.037069][ T2527] loop2: detected capacity change from 0 to 1024 [ 78.061501][ T2527] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 78.074392][ T2527] EXT4-fs (loop2): re-mounted. Quota mode: none. [ 78.085587][ T290] EXT4-fs (loop2): unmounting filesystem. [ 78.100676][ T2533] syz.2.870[2533] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 78.100791][ T2533] syz.2.870[2533] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 78.273296][ T2550] loop6: detected capacity change from 0 to 256 [ 78.400922][ T2548] loop2: detected capacity change from 0 to 40427 [ 78.407990][ T2548] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 78.415995][ T2548] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 78.424964][ T2548] F2FS-fs (loop2): invalid crc value [ 78.431752][ T2548] F2FS-fs (loop2): Found nat_bits in checkpoint [ 78.444551][ T2515] wacom 0003:056A:00C4.0029: pid 2515 passed too short report [ 78.452954][ T295] usb 4-1: USB disconnect, device number 5 [ 78.476108][ T2548] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 78.483594][ T2548] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 78.599961][ T6] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 78.624080][ T2562] process 'syz.2.879' launched './file0' with NULL argv: empty string added [ 78.655363][ T2566] loop0: detected capacity change from 0 to 512 [ 78.674373][ T2566] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 78.683667][ T2566] ext4 filesystem being mounted at /225/file0 supports timestamps until 2038 (0x7fffffff) [ 78.687643][ T2569] netlink: 100 bytes leftover after parsing attributes in process `syz.2.882'. [ 78.702663][ T2569] netlink: 20 bytes leftover after parsing attributes in process `syz.2.882'. [ 78.720023][ T291] EXT4-fs (loop0): unmounting filesystem. [ 78.850032][ T19] cdc_ether: probe of 9-1:1.0 failed with error -71 [ 78.856546][ T6] usb 7-1: Using ep0 maxpacket: 16 [ 78.867150][ T19] usb 9-1: USB disconnect, device number 8 [ 78.910331][ T2585] loop2: detected capacity change from 0 to 256 [ 78.922599][ T2585] FAT-fs (loop2): Directory bread(block 64) failed [ 78.928968][ T2585] FAT-fs (loop2): Directory bread(block 65) failed [ 78.935530][ T2585] FAT-fs (loop2): Directory bread(block 66) failed [ 78.941890][ T2585] FAT-fs (loop2): Directory bread(block 67) failed [ 78.948305][ T2585] FAT-fs (loop2): Directory bread(block 68) failed [ 78.954768][ T2585] FAT-fs (loop2): Directory bread(block 69) failed [ 78.961287][ T2585] FAT-fs (loop2): Directory bread(block 70) failed [ 78.967638][ T2585] FAT-fs (loop2): Directory bread(block 71) failed [ 78.976179][ T2585] FAT-fs (loop2): Directory bread(block 72) failed [ 78.982742][ T2585] FAT-fs (loop2): Directory bread(block 73) failed [ 78.990000][ T6] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 125, changing to 10 [ 79.003179][ T6] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 10112, setting to 1024 [ 79.016719][ T2585] syz.2.889: attempt to access beyond end of device [ 79.016719][ T2585] loop2: rw=524288, sector=1736, nr_sectors = 32 limit=256 [ 79.030366][ T6] usb 7-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 79.039381][ T6] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.042325][ T2585] syz.2.889: attempt to access beyond end of device [ 79.042325][ T2585] loop2: rw=0, sector=1736, nr_sectors = 8 limit=256 [ 79.048618][ T6] usb 7-1: config 0 descriptor?? [ 79.079983][ T2550] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 79.130052][ T295] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 79.315445][ T28] kauditd_printk_skb: 15 callbacks suppressed [ 79.315462][ T28] audit: type=1400 audit(1732045239.860:658): avc: denied { write } for pid=2604 comm="syz.8.897" path="socket:[27714]" dev="sockfs" ino=27714 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 79.370305][ T28] audit: type=1400 audit(1732045239.890:659): avc: denied { read } for pid=2604 comm="syz.8.897" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 79.465537][ T2603] loop3: detected capacity change from 0 to 40427 [ 79.473184][ T2603] F2FS-fs (loop3): invalid crc value [ 79.480830][ T2603] F2FS-fs (loop3): Found nat_bits in checkpoint [ 79.490117][ T295] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 79.509983][ T295] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 79.510636][ T2550] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.519654][ T295] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 79.519686][ T295] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.544835][ T2550] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.557772][ T2614] loop8: detected capacity change from 0 to 2048 [ 79.571800][ T295] usb 1-1: config 0 descriptor?? [ 79.572099][ T6] hid (null): unknown global tag 0x88 [ 79.583296][ T6] hid (null): invalid report_size 2129441703 [ 79.587205][ T2603] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 79.589122][ T6] hid (null): unknown global tag 0xe [ 79.590290][ T6] hid-generic 0003:0158:0100.002A: unknown main item tag 0x1 [ 79.608959][ T6] hid-generic 0003:0158:0100.002A: unexpected long global item [ 79.610380][ T2614] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 79.617157][ T6] hid-generic: probe of 0003:0158:0100.002A failed with error -22 [ 79.649857][ T1568] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 79.673738][ T1568] EXT4-fs (loop8): unmounting filesystem. [ 79.788038][ T6] usb 7-1: USB disconnect, device number 10 [ 79.921716][ T2627] loop8: detected capacity change from 0 to 40427 [ 79.929227][ T2627] F2FS-fs (loop8): invalid crc value [ 79.936396][ T2627] F2FS-fs (loop8): Found nat_bits in checkpoint [ 79.978638][ T2627] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e4 [ 80.018373][ T2627] syz.8.903: attempt to access beyond end of device [ 80.018373][ T2627] loop8: rw=2049, sector=77824, nr_sectors = 544 limit=40427 [ 80.049160][ T1568] syz-executor: attempt to access beyond end of device [ 80.049160][ T1568] loop8: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 80.072999][ T2643] input: syz1 as /devices/virtual/input/input47 [ 80.084988][ T1568] syz-executor: attempt to access beyond end of device [ 80.084988][ T1568] loop8: rw=2051, sector=65536, nr_sectors = 12288 limit=40427 [ 80.101077][ T1568] syz-executor: attempt to access beyond end of device [ 80.101077][ T1568] loop8: rw=2051, sector=78368, nr_sectors = 52704 limit=40427 [ 80.115666][ T1568] F2FS-fs (loop8): Issue discard(8192, 8192, 1536) failed, ret: -5 [ 80.115696][ T1568] F2FS-fs (loop8): Issue discard(9796, 9796, 6588) failed, ret: -5 [ 80.139972][ T28] audit: type=1400 audit(1732045240.680:660): avc: denied { accept } for pid=2644 comm="syz.2.910" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 80.152038][ T2647] loop2: detected capacity change from 0 to 512 [ 80.174453][ T2647] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 80.186659][ T2647] EXT4-fs (loop2): 1 truncate cleaned up [ 80.193132][ T2647] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 80.213889][ T290] EXT4-fs (loop2): unmounting filesystem. [ 80.249470][ T6] hid-generic 0000:3000000:0000.002C: unknown main item tag 0x4 [ 80.258019][ T6] hid-generic 0000:3000000:0000.002C: unknown main item tag 0x2 [ 80.265899][ T6] hid-generic 0000:3000000:0000.002C: unknown main item tag 0x3 [ 80.274417][ T6] hid-generic 0000:3000000:0000.002C: hidraw0: HID v0.00 Device [sy] on syz0 [ 80.403566][ T2666] loop2: detected capacity change from 0 to 128 [ 80.412213][ T2666] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 80.420995][ T2666] ext4 filesystem being mounted at /183/file0 supports timestamps until 2038 (0x7fffffff) [ 80.435936][ T28] audit: type=1400 audit(1732045240.980:661): avc: denied { execute } for pid=2665 comm="syz.2.917" path="/183/file0/cpuacct.usage_percpu_user" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 80.461580][ T28] audit: type=1400 audit(1732045240.980:662): avc: denied { getopt } for pid=2665 comm="syz.2.917" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 80.483035][ T290] EXT4-fs (loop2): unmounting filesystem. [ 80.569981][ T6] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 80.839692][ T28] audit: type=1400 audit(1732045241.380:663): avc: denied { sqpoll } for pid=2677 comm="syz.3.921" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 80.910015][ T295] uclogic 0003:256C:006D.002B: failed retrieving string descriptor #100: -71 [ 80.918728][ T295] uclogic 0003:256C:006D.002B: failed retrieving pen parameters: -71 [ 80.926981][ T295] uclogic 0003:256C:006D.002B: failed probing pen v1 parameters: -71 [ 80.935135][ T295] uclogic 0003:256C:006D.002B: failed probing parameters: -71 [ 80.942510][ T295] uclogic: probe of 0003:256C:006D.002B failed with error -71 [ 80.951135][ T295] usb 1-1: USB disconnect, device number 15 [ 80.999971][ T6] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 81.014921][ T6] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 81.119998][ T6] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 81.129051][ T6] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 81.136822][ T6] usb 9-1: SerialNumber: syz [ 81.370513][ T28] audit: type=1400 audit(1732045241.920:664): avc: denied { mount } for pid=2687 comm="syz.2.924" name="/" dev="configfs" ino=12756 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 81.393764][ T28] audit: type=1400 audit(1732045241.920:665): avc: denied { read } for pid=2687 comm="syz.2.924" name="/" dev="configfs" ino=12756 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 81.415750][ T28] audit: type=1400 audit(1732045241.920:666): avc: denied { open } for pid=2687 comm="syz.2.924" path="/187/file0" dev="configfs" ino=12756 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 81.439280][ T6] usb 9-1: 0:2 : does not exist [ 81.444469][ T6] usb 9-1: unit 255 not found! [ 81.449167][ T28] audit: type=1400 audit(1732045241.950:667): avc: denied { unmount } for pid=290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 81.472511][ T2692] loop2: detected capacity change from 0 to 512 [ 81.491676][ T2692] EXT4-fs (loop2): 1 truncate cleaned up [ 81.494558][ T2698] loop6: detected capacity change from 0 to 512 [ 81.497203][ T2692] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 81.532094][ T290] EXT4-fs error (device loop2): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=196608, rec_len=0, size=1024 fake=0 [ 81.560359][ T290] EXT4-fs error (device loop2): ext4_ext_check_inode:520: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid magic - magic e, entries 0, max 15(0), depth 0(0) [ 81.590928][ T2698] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 81.601540][ T290] EXT4-fs error (device loop2): ext4_ext_check_inode:520: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid magic - magic e, entries 0, max 15(0), depth 0(0) [ 81.627020][ T2698] ext4 filesystem being mounted at /86/file0 supports timestamps until 2038 (0x7fffffff) [ 81.658680][ T2698] EXT4-fs error (device loop6): ext4_add_entry:2484: inode #12: comm syz.6.928: Directory hole found for htree leaf block 0 [ 81.678662][ T2698] EXT4-fs (loop6): Remounting filesystem read-only [ 81.692253][ T2710] netlink: 12 bytes leftover after parsing attributes in process `syz.0.934'. [ 81.703697][ T1258] EXT4-fs (loop6): unmounting filesystem. [ 81.704125][ T290] EXT4-fs (loop2): unmounting filesystem. [ 81.715317][ T315] EXT4-fs (loop6): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 81.728597][ T315] EXT4-fs (loop6): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 81.759959][ T6] usb 9-1: 5:0: cannot get min/max values for control 6 (id 5) [ 81.789152][ T6] usb 9-1: USB disconnect, device number 9 [ 81.942870][ T2718] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.950063][ T2718] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.957623][ T2718] device bridge_slave_0 entered promiscuous mode [ 81.963954][ T538] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 81.978624][ T2729] loop8: detected capacity change from 0 to 128 [ 81.987137][ T2729] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 81.999322][ T2718] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.006454][ T2718] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.014322][ T2718] device bridge_slave_1 entered promiscuous mode [ 82.021261][ T2729] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 82.046313][ T8] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 82.128110][ T2730] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.135068][ T2730] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.143539][ T2730] device bridge_slave_0 entered promiscuous mode [ 82.156897][ T2730] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.164107][ T2730] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.171615][ T2730] device bridge_slave_1 entered promiscuous mode [ 82.209996][ T19] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 82.242744][ T326] device bridge_slave_1 left promiscuous mode [ 82.248704][ T326] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.256163][ T326] device bridge_slave_0 left promiscuous mode [ 82.262349][ T326] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.270464][ T326] device veth1_macvtap left promiscuous mode [ 82.276310][ T326] device veth0_vlan left promiscuous mode [ 82.353736][ T2718] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.360624][ T2718] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.367743][ T2718] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.374762][ T2718] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.390050][ T538] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 82.403570][ T538] usb 4-1: too many endpoints for config 1 interface 1 altsetting 1: 233, using maximum allowed: 30 [ 82.410684][ T295] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 82.419681][ T538] usb 4-1: config 1 interface 1 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 233 [ 82.427742][ T2730] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.441525][ T2730] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.448724][ T2730] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.455663][ T2730] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.466719][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 82.474497][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.481846][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.488976][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.496462][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.511886][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 82.520205][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.527134][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.534617][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 82.542796][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.549664][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.565882][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 82.580792][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 82.598793][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 82.605985][ T19] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 82.615697][ T538] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 82.615988][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 82.625053][ T538] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.633688][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.640934][ T19] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 82.647208][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.656770][ T538] usb 4-1: Product: syz [ 82.667841][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 82.668076][ T19] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 82.676188][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.685399][ T538] usb 4-1: Manufacturer: syz [ 82.692000][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.692452][ T295] usb 9-1: Using ep0 maxpacket: 16 [ 82.696531][ T538] usb 4-1: SerialNumber: syz [ 82.713048][ T19] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 82.718957][ T2718] device veth0_vlan entered promiscuous mode [ 82.730899][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 82.739666][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 82.747931][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 82.755471][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 82.763858][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 82.772266][ T538] hub 4-1:1.0: bad descriptor, ignoring hub [ 82.777998][ T538] hub: probe of 4-1:1.0 failed with error -5 [ 82.787913][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 82.796256][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 82.804282][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 82.812860][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 82.820267][ T295] usb 9-1: config 0 has no interfaces? [ 82.828506][ T2730] device veth0_vlan entered promiscuous mode [ 82.840304][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 82.848466][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 82.856779][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 82.864820][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 82.874910][ T2718] device veth1_macvtap entered promiscuous mode [ 82.887193][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 82.894841][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 82.902310][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 82.909566][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 82.918080][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 82.926823][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 82.926935][ T19] usb 1-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 82.935727][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 82.943611][ T19] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.955258][ T2730] device veth1_macvtap entered promiscuous mode [ 82.959909][ T19] usb 1-1: Product: syz [ 82.969654][ T19] usb 1-1: Manufacturer: syz [ 82.974367][ T19] usb 1-1: SerialNumber: syz [ 82.979494][ T19] usb 1-1: config 0 descriptor?? [ 82.984433][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 82.992511][ T295] usb 9-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 82.992745][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 83.001881][ T295] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.009748][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 83.024364][ T295] usb 9-1: Product: syz [ 83.024884][ T19] ums-isd200 1-1:0.0: USB Mass Storage device detected [ 83.028604][ T295] usb 9-1: Manufacturer: syz [ 83.040012][ T295] usb 9-1: SerialNumber: syz [ 83.045933][ T295] r8152-cfgselector 9-1: config 0 descriptor?? [ 83.052325][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 83.060744][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 83.070943][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 83.079209][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 83.147672][ T2749] device pim6reg1 entered promiscuous mode [ 83.270378][ T19] scsi host1: usb-storage 1-1:0.0 [ 83.282516][ T19] usb 1-1: USB disconnect, device number 16 [ 83.295662][ T2751] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.302903][ T2751] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.312567][ T295] r8152-cfgselector 9-1: Unknown version 0x0000 [ 83.321834][ T2751] device bridge_slave_0 entered promiscuous mode [ 83.328987][ T2751] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.346218][ T2751] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.363986][ T2751] device bridge_slave_1 entered promiscuous mode [ 83.448033][ T2771] SELinux: failed to load policy [ 83.477634][ T2751] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.484534][ T2751] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.491632][ T2751] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.498399][ T2751] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.506567][ T2775] netlink: 4 bytes leftover after parsing attributes in process `syz.4.959'. [ 83.518836][ T2775] device wireguard0 entered promiscuous mode [ 83.525808][ T6] r8152-cfgselector 9-1: USB disconnect, device number 10 [ 83.553276][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 83.561075][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.569261][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.581988][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 83.590134][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.597046][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.604608][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 83.613249][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.620149][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.636351][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 83.646465][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 83.662343][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 83.674653][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 83.683296][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 83.691688][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 83.701050][ T326] device bridge_slave_1 left promiscuous mode [ 83.707132][ T326] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.714789][ T326] device bridge_slave_0 left promiscuous mode [ 83.720969][ T326] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.729123][ T326] device veth1_macvtap left promiscuous mode [ 83.735358][ T326] device veth0_vlan left promiscuous mode [ 83.815256][ T2751] device veth0_vlan entered promiscuous mode [ 83.821294][ T538] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 83.827552][ T538] cdc_ncm 4-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 83.831080][ T2751] device veth1_macvtap entered promiscuous mode [ 83.840924][ T538] cdc_ncm 4-1:1.0: setting rx_max = 2048 [ 83.848606][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 83.857591][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 83.866336][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 83.878036][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 83.886474][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 83.901619][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 83.910047][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 83.933237][ T296] hid-generic 0000:0000:0000.002D: unknown main item tag 0x1 [ 83.936571][ T2787] syz.4.962[2787] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 83.941419][ T296] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 83.943893][ T2787] syz.4.962[2787] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 83.952814][ T296] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 83.978076][ T296] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 83.986373][ T296] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 83.993693][ T296] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 84.001024][ T296] hid-generic 0000:0000:0000.002D: unknown main item tag 0x4 [ 84.008394][ T296] hid-generic 0000:0000:0000.002D: unknown main item tag 0x2 [ 84.015850][ T296] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 84.023206][ T296] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 84.030837][ T296] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 84.038340][ T296] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 84.048199][ T2789] loop4: detected capacity change from 0 to 1024 [ 84.052544][ T538] cdc_ncm 4-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 84.061115][ T2789] EXT4-fs: Ignoring removed mblk_io_submit option [ 84.067619][ T296] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 84.078385][ T2789] EXT4-fs: Ignoring removed nomblk_io_submit option [ 84.096802][ T296] hid-generic 0000:0000:0000.002D: unknown main item tag 0x2 [ 84.124499][ T538] usb 4-1: USB disconnect, device number 6 [ 84.132719][ T538] cdc_ncm 4-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM (NO ZLP) [ 84.143090][ T296] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 84.159530][ T296] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 84.175991][ T296] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 84.180469][ T2789] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 84.189473][ T296] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 84.199176][ T296] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 84.206665][ T296] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 84.214704][ T296] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 84.222304][ T296] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 84.231934][ T296] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 84.239329][ T296] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 84.249487][ T296] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 84.258210][ T296] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 84.266431][ T296] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 84.268854][ T2718] EXT4-fs (loop4): unmounting filesystem. [ 84.273963][ T296] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 84.286913][ T296] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 84.294341][ T296] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 84.301923][ T296] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 84.309178][ T296] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 84.320208][ T2805] overlayfs: failed to set xattr on upper [ 84.330101][ T296] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 84.346909][ T296] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 84.361492][ T296] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 84.379384][ T296] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 84.386762][ T28] kauditd_printk_skb: 11 callbacks suppressed [ 84.386778][ T28] audit: type=1400 audit(1732045244.930:675): avc: denied { ioctl } for pid=2809 comm="syz.8.969" path="socket:[29183]" dev="sockfs" ino=29183 ioctlcmd=0x7453 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 84.418485][ T2813] SELinux: Context system_u:object_r:crond_initrc_exec_t:s0 is not valid (left unmapped). [ 84.424103][ T296] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 84.449987][ T28] audit: type=1400 audit(1732045244.980:676): avc: denied { relabelto } for pid=2812 comm="syz.8.970" name="85" dev="tmpfs" ino=495 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_initrc_exec_t:s0" [ 84.477456][ T313] ================================================================== [ 84.485350][ T313] BUG: KASAN: use-after-free in __list_del_entry_valid+0xa6/0x130 [ 84.492989][ T313] Read of size 8 at addr ffff888111534cf0 by task kworker/0:3/313 [ 84.500638][ T313] [ 84.502799][ T313] CPU: 0 PID: 313 Comm: kworker/0:3 Not tainted 6.1.112-syzkaller-00020-g4a105e4e1c7a #0 [ 84.512681][ T313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 84.522783][ T313] Workqueue: events pwq_unbound_release_workfn [ 84.528744][ T313] Call Trace: [ 84.531873][ T313] [ 84.534643][ T313] dump_stack_lvl+0x151/0x1b7 [ 84.539155][ T313] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 84.544619][ T313] ? _printk+0xd1/0x111 [ 84.548614][ T313] ? __virt_addr_valid+0x242/0x2f0 [ 84.553648][ T313] print_report+0x158/0x4e0 [ 84.557992][ T313] ? __virt_addr_valid+0x242/0x2f0 [ 84.563022][ T313] ? kasan_complete_mode_report_info+0x90/0x1b0 [ 84.569103][ T313] ? __list_del_entry_valid+0xa6/0x130 [ 84.574563][ T313] kasan_report+0x13c/0x170 [ 84.578952][ T313] ? __list_del_entry_valid+0xa6/0x130 [ 84.584286][ T313] __asan_report_load8_noabort+0x14/0x20 [ 84.589759][ T313] __list_del_entry_valid+0xa6/0x130 [ 84.594889][ T313] process_one_work+0x4d7/0xcb0 [ 84.599651][ T313] worker_thread+0xa60/0x1260 [ 84.604189][ T313] kthread+0x26d/0x300 [ 84.608167][ T313] ? worker_clr_flags+0x1a0/0x1a0 [ 84.613109][ T313] ? kthread_blkcg+0xd0/0xd0 [ 84.617538][ T313] ret_from_fork+0x1f/0x30 [ 84.621883][ T313] [ 84.624749][ T313] [ 84.626926][ T313] Allocated by task 538: [ 84.630996][ T313] kasan_set_track+0x4b/0x70 [ 84.635425][ T313] kasan_save_alloc_info+0x1f/0x30 [ 84.640448][ T313] __kasan_kmalloc+0x9c/0xb0 [ 84.644876][ T313] __kmalloc_node+0xb4/0x1e0 [ 84.649302][ T313] kvmalloc_node+0x221/0x640 [ 84.653728][ T313] alloc_netdev_mqs+0x8c/0xf90 [ 84.658327][ T313] alloc_etherdev_mqs+0x36/0x40 [ 84.663013][ T313] usbnet_probe+0x210/0x2850 [ 84.667452][ T313] usb_probe_interface+0x5b6/0xa90 [ 84.672394][ T313] really_probe+0x2b8/0x920 [ 84.676729][ T313] __driver_probe_device+0x1a0/0x310 [ 84.681862][ T313] driver_probe_device+0x54/0x3d0 [ 84.686715][ T313] __device_attach_driver+0x2e3/0x490 [ 84.691918][ T313] bus_for_each_drv+0x183/0x200 [ 84.696604][ T313] __device_attach+0x312/0x510 [ 84.701211][ T313] device_initial_probe+0x1a/0x20 [ 84.706082][ T313] bus_probe_device+0xbe/0x1e0 [ 84.710667][ T313] device_add+0xb60/0xf10 [ 84.714832][ T313] usb_set_configuration+0x190f/0x1e80 [ 84.720212][ T313] usb_generic_driver_probe+0x8b/0x150 [ 84.725506][ T313] usb_probe_device+0x144/0x260 [ 84.730201][ T313] really_probe+0x2b8/0x920 [ 84.734539][ T313] __driver_probe_device+0x1a0/0x310 [ 84.739653][ T313] driver_probe_device+0x54/0x3d0 [ 84.744512][ T313] __device_attach_driver+0x2e3/0x490 [ 84.749731][ T313] bus_for_each_drv+0x183/0x200 [ 84.754417][ T313] __device_attach+0x312/0x510 [ 84.759015][ T313] device_initial_probe+0x1a/0x20 [ 84.763877][ T313] bus_probe_device+0xbe/0x1e0 [ 84.768469][ T313] device_add+0xb60/0xf10 [ 84.772777][ T313] usb_new_device+0xf2f/0x1820 [ 84.777371][ T313] hub_event+0x2db1/0x4830 [ 84.781634][ T313] process_one_work+0x73d/0xcb0 [ 84.786313][ T313] worker_thread+0xa60/0x1260 [ 84.790912][ T313] kthread+0x26d/0x300 [ 84.794821][ T313] ret_from_fork+0x1f/0x30 [ 84.799078][ T313] [ 84.801235][ T313] Freed by task 538: [ 84.804992][ T313] kasan_set_track+0x4b/0x70 [ 84.809395][ T313] kasan_save_free_info+0x2b/0x40 [ 84.814263][ T313] ____kasan_slab_free+0x131/0x180 [ 84.819362][ T313] __kasan_slab_free+0x11/0x20 [ 84.823961][ T313] __kmem_cache_free+0x21d/0x410 [ 84.828742][ T313] kfree+0x7a/0xf0 [ 84.832379][ T313] kvfree+0x35/0x40 [ 84.836020][ T313] netdev_freemem+0x3f/0x60 [ 84.840360][ T313] netdev_release+0x7f/0xb0 [ 84.844736][ T313] device_release+0x95/0x1c0 [ 84.849126][ T313] kobject_put+0x178/0x260 [ 84.853393][ T313] put_device+0x1f/0x30 [ 84.857376][ T313] free_netdev+0x393/0x480 [ 84.861815][ T313] usbnet_disconnect+0x245/0x390 [ 84.866587][ T313] usb_unbind_interface+0x1fa/0x8c0 [ 84.871879][ T313] device_release_driver_internal+0x53e/0x870 [ 84.877793][ T313] device_release_driver+0x19/0x20 [ 84.882736][ T313] bus_remove_device+0x2fa/0x360 [ 84.887514][ T313] device_del+0x663/0xe90 [ 84.891677][ T313] usb_disable_device+0x380/0x720 [ 84.896542][ T313] usb_disconnect+0x32a/0x890 [ 84.901162][ T313] hub_event+0x1ed8/0x4830 [ 84.905535][ T313] process_one_work+0x73d/0xcb0 [ 84.910300][ T313] worker_thread+0xd71/0x1260 [ 84.914807][ T313] kthread+0x26d/0x300 [ 84.918711][ T313] ret_from_fork+0x1f/0x30 [ 84.923054][ T313] [ 84.925220][ T313] Last potentially related work creation: [ 84.930865][ T313] kasan_save_stack+0x3b/0x60 [ 84.935505][ T313] __kasan_record_aux_stack+0xb4/0xc0 [ 84.940853][ T313] kasan_record_aux_stack_noalloc+0xb/0x10 [ 84.946496][ T313] insert_work+0x56/0x310 [ 84.950662][ T313] __queue_work+0x9b6/0xd70 [ 84.955002][ T313] queue_work_on+0x105/0x170 [ 84.959419][ T313] usbnet_link_change+0xeb/0x100 [ 84.964193][ T313] usbnet_probe+0x1e2c/0x2850 [ 84.968743][ T313] usb_probe_interface+0x5b6/0xa90 [ 84.973653][ T313] really_probe+0x2b8/0x920 [ 84.978109][ T313] __driver_probe_device+0x1a0/0x310 [ 84.983219][ T313] driver_probe_device+0x54/0x3d0 [ 84.988169][ T313] __device_attach_driver+0x2e3/0x490 [ 84.993375][ T313] bus_for_each_drv+0x183/0x200 [ 84.998061][ T313] __device_attach+0x312/0x510 [ 85.002659][ T313] device_initial_probe+0x1a/0x20 [ 85.007526][ T313] bus_probe_device+0xbe/0x1e0 [ 85.012125][ T313] device_add+0xb60/0xf10 [ 85.016291][ T313] usb_set_configuration+0x190f/0x1e80 [ 85.021578][ T313] usb_generic_driver_probe+0x8b/0x150 [ 85.026963][ T313] usb_probe_device+0x144/0x260 [ 85.031649][ T313] really_probe+0x2b8/0x920 [ 85.036101][ T313] __driver_probe_device+0x1a0/0x310 [ 85.041403][ T313] driver_probe_device+0x54/0x3d0 [ 85.046256][ T313] __device_attach_driver+0x2e3/0x490 [ 85.051471][ T313] bus_for_each_drv+0x183/0x200 [ 85.056508][ T313] __device_attach+0x312/0x510 [ 85.061094][ T313] device_initial_probe+0x1a/0x20 [ 85.065962][ T313] bus_probe_device+0xbe/0x1e0 [ 85.070557][ T313] device_add+0xb60/0xf10 [ 85.074905][ T313] usb_new_device+0xf2f/0x1820 [ 85.079673][ T313] hub_event+0x2db1/0x4830 [ 85.083920][ T313] process_one_work+0x73d/0xcb0 [ 85.088616][ T313] worker_thread+0xa60/0x1260 [ 85.093587][ T313] kthread+0x26d/0x300 [ 85.097484][ T313] ret_from_fork+0x1f/0x30 [ 85.101838][ T313] [ 85.103991][ T313] The buggy address belongs to the object at ffff888111534000 [ 85.103991][ T313] which belongs to the cache kmalloc-4k of size 4096 [ 85.117900][ T313] The buggy address is located 3312 bytes inside of [ 85.117900][ T313] 4096-byte region [ffff888111534000, ffff888111535000) [ 85.131273][ T313] [ 85.133430][ T313] The buggy address belongs to the physical page: [ 85.139729][ T313] page:ffffea0004454c00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x111530 [ 85.150082][ T313] head:ffffea0004454c00 order:3 compound_mapcount:0 compound_pincount:0 [ 85.158232][ T313] flags: 0x4000000000010200(slab|head|zone=1) [ 85.164148][ T313] raw: 4000000000010200 0000000000000000 dead000000000001 ffff888100043380 [ 85.172677][ T313] raw: 0000000000000000 0000000000040004 00000001ffffffff 0000000000000000 [ 85.181075][ T313] page dumped because: kasan: bad access detected [ 85.187376][ T313] page_owner tracks the page as allocated [ 85.192882][ T313] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 292, tgid 292 (syz-executor), ts 22790904808, free_ts 22764704076 [ 85.213973][ T313] post_alloc_hook+0x213/0x220 [ 85.218570][ T313] prep_new_page+0x1b/0x110 [ 85.222909][ T313] get_page_from_freelist+0x2980/0x2a10 [ 85.228289][ T313] __alloc_pages+0x234/0x610 [ 85.232716][ T313] alloc_slab_page+0x6c/0xf0 [ 85.237141][ T313] new_slab+0x90/0x3e0 [ 85.241047][ T313] ___slab_alloc+0x6f9/0xb80 [ 85.245475][ T313] __slab_alloc+0x5d/0xa0 [ 85.249646][ T313] __kmem_cache_alloc_node+0x207/0x2a0 [ 85.254939][ T313] kmalloc_trace+0x2a/0xa0 [ 85.259195][ T313] kobject_uevent_env+0x262/0x720 [ 85.264165][ T313] kobject_uevent+0x1f/0x30 [ 85.268501][ T313] netdev_queue_update_kobjects+0x235/0x4a0 [ 85.274233][ T313] netdev_register_kobject+0x270/0x320 [ 85.279524][ T313] register_netdevice+0xe43/0x1490 [ 85.284472][ T313] veth_newlink+0x7fc/0xc70 [ 85.288816][ T313] page last free stack trace: [ 85.293328][ T313] free_unref_page_prepare+0x83d/0x850 [ 85.298619][ T313] free_unref_page+0xb2/0x5c0 [ 85.303136][ T313] __free_pages+0x61/0xf0 [ 85.307297][ T313] __free_slab+0xce/0x1a0 [ 85.311471][ T313] __unfreeze_partials+0x165/0x1a0 [ 85.316411][ T313] put_cpu_partial+0xa9/0x100 [ 85.320928][ T313] __slab_free+0x1c8/0x280 [ 85.325177][ T313] ___cache_free+0xc6/0xd0 [ 85.329432][ T313] qlist_free_all+0xc5/0x140 [ 85.333881][ T313] kasan_quarantine_reduce+0x15a/0x180 [ 85.339152][ T313] __kasan_slab_alloc+0x24/0x80 [ 85.343852][ T313] slab_post_alloc_hook+0x53/0x2c0 [ 85.348786][ T313] __kmem_cache_alloc_node+0x193/0x2a0 [ 85.354079][ T313] kmalloc_trace+0x2a/0xa0 [ 85.358333][ T313] ref_tracker_alloc+0x138/0x450 [ 85.363106][ T313] netdev_hold+0x92/0xe0 [ 85.367188][ T313] [ 85.369364][ T313] Memory state around the buggy address: [ 85.374840][ T313] ffff888111534b80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 85.382727][ T313] ffff888111534c00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 85.390710][ T313] >ffff888111534c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 85.398696][ T313] ^ [ 85.406245][ T313] ffff888111534d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 85.414143][ T313] ffff888111534d80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 85.422054][ T313] ================================================================== SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 85.429965][ T313] Disabling lock debugging due to kernel taint [ 85.450022][ T296] hid-generic 0000:0000:0000.002D: hidraw0: HID v0.00 Device [syz0] on syz0 [ 85.493463][ T28] audit: type=1400 audit(1732045244.980:677): avc: denied { associate } for pid=2812 comm="syz.8.970" name="85" dev="tmpfs" ino=495 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:crond_initrc_exec_t:s0" [ 85.541291][ T28] audit: type=1400 audit(1732045245.000:678): avc: denied { write } for pid=1568 comm="syz-executor" name="85" dev="tmpfs" ino=495 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_initrc_exec_t:s0" [ 85.625542][ T28] audit: type=1400 audit(1732045245.000:679): avc: denied { remove_name } for pid=1568 comm="syz-executor" name="binderfs" dev="tmpfs" ino=499 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_initrc_exec_t:s0" [ 85.658657][ T28] audit: type=1400 audit(1732045245.000:680): avc: denied { rmdir } for pid=1568 comm="syz-executor" name="85" dev="tmpfs" ino=495 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_initrc_exec_t:s0" [ 85.685143][ T28] audit: type=1400 audit(1732045245.990:681): avc: denied { write } for pid=280 comm="syz-executor" path="pipe:[14599]" dev="pipefs" ino=14599 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 85.960736][ T326] device bridge_slave_1 left promiscuous mode [ 85.966811][ T326] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.974393][ T326] device bridge_slave_0 left promiscuous mode [ 85.980660][ T326] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.988604][ T326] device bridge_slave_1 left promiscuous mode [ 85.994854][ T326] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.003016][ T326] device bridge_slave_0 left promiscuous mode [ 86.009079][ T326] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.017546][ T326] device veth1_macvtap left promiscuous mode [ 86.023514][ T326] device veth0_vlan left promiscuous mode [ 86.029446][ T326] device veth1_macvtap left promiscuous mode [ 86.035667][ T326] device veth0_vlan left promiscuous mode [ 87.121113][ T326] device bridge_slave_1 left promiscuous mode [ 87.127053][ T326] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.134385][ T326] device bridge_slave_0 left promiscuous mode [ 87.140461][ T326] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.148188][ T326] device bridge_slave_1 left promiscuous mode [ 87.154244][ T326] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.161893][ T326] device bridge_slave_0 left promiscuous mode [ 87.167846][ T326] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.175726][ T326] device bridge_slave_1 left promiscuous mode [ 87.181780][ T326] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.189230][ T326] device bridge_slave_0 left promiscuous mode [ 87.195344][ T326] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.203185][ T326] device bridge_slave_1 left promiscuous mode [ 87.209199][ T326] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.216634][ T326] device bridge_slave_0 left promiscuous mode [ 87.222783][ T326] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.231548][ T326] device veth1_macvtap left promiscuous mode [ 87.237400][ T326] device veth0_vlan left promiscuous mode [ 87.243391][ T326] device veth1_macvtap left promiscuous mode [ 87.249232][ T326] device veth0_vlan left promiscuous mode [ 87.255208][ T326] device veth1_macvtap left promiscuous mode [ 87.261158][ T326] device veth0_vlan left promiscuous mode [ 87.267053][ T326] device veth1_macvtap left promiscuous mode [ 87.273310][ T326] device veth0_vlan left promiscuous mode