last executing test programs: 55.526787025s ago: executing program 4 (id=83): r0 = socket(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000300)={0x28, 0x0, 0x0, @my=0x0}, 0x10) connect$vsock_stream(r0, &(0x7f0000000340)={0x28, 0x0, 0x0, @local}, 0x10) recvmmsg$unix(r0, &(0x7f0000000100)=[{{0x0, 0x40000, 0x0, 0x0, 0x0, 0xf0ff7f, 0x100000}, 0x8000000}, {{0x0, 0x8, &(0x7f0000000600)=[{0x0, 0x10}], 0x1}}], 0x3ffffffffffffd2, 0x0, 0x0) connect$vsock_stream(r0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0) 52.865060368s ago: executing program 4 (id=98): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = memfd_create(&(0x7f00000000c0)='v\xa6\xf5lj6,r\xaf\xe8\x10/\xecg\xed\xe3h\x80\xb8!y6w\xda\xdd\xb9\nR\xe8@\x99\xb9\x8a\x0fZ\t\x90\x8bp\x10\x84\x86t\x8a\xba\xc6\xfb\xd2\f\xef&\xad\xa8M\xe8\b\xb0#\xac)\x81\x1e\x8a\f\x11D\x90\xf5\xbb\x1c\xac\xc7\xad\xdc\\\x11\x95\xf8\xe6\xa7\xc3\xbc\x18+\x92\x92N\a\xa7\x7fN\x9bL\xf8\xebQs\x02\xf9\xadi\x8f\x0f\xff\x02n\x9d\x85\xea\x1a*\x1bC\xd8\x1c\xe8\x9bYS', 0x0) write(r0, &(0x7f0000002140)='i', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$802154_dgram(r1, &(0x7f0000000000)={0x24, @short={0x2, 0x1, 0xaaa3}}, 0x14) 52.790584388s ago: executing program 4 (id=100): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020701200000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) readv(r1, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0x940}], 0x1) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) 52.617927739s ago: executing program 4 (id=101): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000280)={[{@nogrpid}, {@jqfmt_vfsv0}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@debug}, {@nombcache}, {@quota}, {@nolazytime}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") open(&(0x7f00000003c0)='./bus\x00', 0x143142, 0x1a0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000500)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5c9d000ff8ee09e737ff0edf110ff4117639c2eb4b78c66ee677df701905b9aafab4afaaf755a3f6a004", "cba3d625780820d1cbf7db71038259ca171ce1a311ef97e4298d1e14ef01060000e9009600fdff00000000000000000000000000000000000400", "d300e6d6ae9ef30bea2a004000"}) lchown(&(0x7f0000000340)='./file1\x00', 0xee00, 0xffffffffffffffff) 52.036481712s ago: executing program 4 (id=102): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./bus\x00', 0x400e, &(0x7f0000000280)={[{@i_version}, {@nobh}, {@data_err_ignore}, {@nolazytime}, {@test_dummy_encryption}, {@acl}]}, 0x1, 0x42f, &(0x7f0000000940)="$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") syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000140)='./bus\x00', 0x1a404ac, &(0x7f0000000600)=ANY=[@ANYBLOB="ba618c14e6c7e698de3fb8b765b993fa49575985fb77bf8cbe11f3e10fe145c3161212e5b9a65501d007df1337c25665e8404c1dc11c53041207bea7fd891761869c2d7d6a7a06c71bfcfe33d41cab42b82ecd0a1fd7f713b1fc70fee63b712bbefbb0a96138503f0163651b0512fa7aa1c1df2df969aa400e0f1901ad03d5cb2eaa2e2fd9500641a214a4ff49e005d1eeb61c2893e933bb23f2568bb02382c787f0c6642de45d21683e0bcf71115878d6e9a489bf815b4133e3d156bdd935a75e", @ANYRES32=0x0, @ANYRES64, @ANYRESHEX, @ANYRESDEC=0x0, @ANYRESOCT, @ANYRESDEC, @ANYRES64], 0xfe, 0x0, &(0x7f0000000000)) chdir(&(0x7f00000003c0)='./bus\x00') r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) rename(&(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f00000000c0)='./file0\x00') 51.437437404s ago: executing program 4 (id=104): socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x4, 0x0, 0x0, 0x1000, &(0x7f0000004000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, 0x0}], 0x1, 0x10, 0x0, 0x0) 51.165946826s ago: executing program 32 (id=104): socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x4, 0x0, 0x0, 0x1000, &(0x7f0000004000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, 0x0}], 0x1, 0x10, 0x0, 0x0) 34.275913556s ago: executing program 1 (id=210): r0 = memfd_create(&(0x7f0000000300)='\xc0\x87:*\x18\xc1k\xa7\x87[\xa0o8\xaaK\xa5\xd3\v\x86\xca<\x7f\xfd6\x8d}\xd8\xf2G\xb8\xeae)\x90\x86\xe3\x96\b\xe0\xfa\xb1\xd8N\xb2W\xcb\x8d}3lm8\xa57\xc9\x00HOA\xc8\x80kR\xfc\xcb%u3\xec\xde%\x00]\xd8\xebD\x82S\x17?\xd6As\xc2\xb1\x9aF\xe2\xba[\xc7%\x88 \xeeQR\x9f\x81\x8b\xdc\xc7\xdc\xdem\xbe\x7f2\x11)W\x9c\x82\x91\x17\xd8\xda@4\x9f\xc5*T\x1e^\xf7o\xff\xff\xff\xffwI\x02\xf3\xe3\x8d.\xd1=\xcf\xbf\x81\xb5\x8d%K\x1d\xe7_\xde\x87\xdd\xc1\xf0\x91\x1a!\x9c\xd3\v\xc9\x95d\xe3*\xa9\xfa\x99\x9d\xb8\x89\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00+$\xedX\xb7KV\x90\xc3D\x82`\xea\x16\xc6\xce\x83\xab\x05\x19-\xf3\x8c\x9a\x15\x9c\xf5\xb4O\x17@d\x81+\xf6\xe6\xff\xed\r\xd2\xb3\xaa\x9b\x7fC\'\xa2\xf6\x12\xa1\x15Punfo\x7f\x92G\x0e.\xce\xd8h\xb9p2\xccC\xbaH\xc4\xdc\xe2\xa1%)\x85\xc7O]\'9\x92\xad\xfbJ\x02\x1d\x91-\xc99\t&\xbdq\x06`T\xc8\x92\xaf\xad\x06\xdd\xaf\x84\xf4\"\x13\xcf\xe5\x93D\xad~F\xe5\x19\xaa\xaa\xb2\xb1\x03m\x82+\x06\x1bF^\xd3n\xc4F\xc1\xc08\x94\xe6\xe5\x1f\xa7\xf6\xcaA\x90T\xf1\x1b\xe6\xb9\xe7\xff\xc5H\x04\x8d\xca\xad\x17UlY\x9a}\r4\xac\x93\xac\v2\xc6\xf9\xbe\xfeI\x8b\xd4/`\xab\x1e\xcf\x7f\b\x94 2.{\xc1\xbe\x9bth~\xcb\xb9E\x10W\xed\xed51[\xc5\xeb\xb1ux\x94', 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000006000000000084e27fa40000000f000000c5000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r1}, 0x10) r2 = syz_io_uring_setup(0x1b73, &(0x7f0000007640)={0x0, 0x201, 0x1000}, &(0x7f0000000a40), &(0x7f0000007700)) fallocate(r0, 0x0, 0x0, 0x8020007) io_uring_register$IORING_REGISTER_EVENTFD(r2, 0x4, 0x0, 0x1) 32.314399616s ago: executing program 1 (id=224): r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x2400a800, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) close_range(r0, 0xffffffffffffffff, 0x0) 32.168913287s ago: executing program 1 (id=226): r0 = syz_open_dev$loop(&(0x7f0000000100), 0xd, 0x26281) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) pwritev(r1, 0x0, 0x0, 0xffffffff, 0x9) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) r2 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r0) 32.065007387s ago: executing program 1 (id=228): syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000001540)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[], 0x1, 0x14fe, &(0x7f0000002ac0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x800000, 0x0) chdir(&(0x7f0000000040)='./file0\x00') rename(&(0x7f0000000040)='./file1\x00', &(0x7f0000000000)='./file0/file0\x00') 31.794472618s ago: executing program 1 (id=233): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2b, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000040)=0x7, 0x4) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000480)=@mangle={'mangle\x00', 0x44, 0x6, 0x3a8, 0x2b0, 0x210, 0x2b0, 0x2b0, 0x98, 0x380, 0x380, 0x380, 0x380, 0x380, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@ip={@loopback, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x408) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 31.592739739s ago: executing program 1 (id=236): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000180)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000600)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff326, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfff]}, 0x45c) 31.31651411s ago: executing program 33 (id=236): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000180)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000600)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff326, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfff]}, 0x45c) 31.312484411s ago: executing program 0 (id=239): munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000) r0 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0) munmap(&(0x7f0000ff2000/0x3000)=nil, 0x3000) munmap(&(0x7f0000e86000/0x2000)=nil, 0x2000) r1 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) mmap$KVM_VCPU(&(0x7f0000ff3000/0x1000)=nil, r1, 0xf, 0x32, 0xffffffffffffffff, 0x0) 31.217941521s ago: executing program 0 (id=241): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='rss_stat\x00', r1}, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 31.012037382s ago: executing program 0 (id=244): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000500), 0xff, 0x485, &(0x7f0000001040)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x42, 0x0) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)="df", 0xff00}], 0x1, 0x7ffffe, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f0000000140)='2', 0x1, 0x8080c61) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000080)={0x17c04, r1, 0x5, 0x100100002}) 30.477792205s ago: executing program 0 (id=247): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f00000004c0)={[{@resuid}, {@init_itable}, {@stripe}, {@noblock_validity}]}, 0x3, 0x453, &(0x7f0000001f80)="$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") mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000080)=""/43, 0x2b) getdents(r0, 0xfffffffffffffffd, 0xbb) 30.189855676s ago: executing program 0 (id=252): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f00000027c0)=[{{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000000540)="6795", 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="7f", 0x1}], 0x1, &(0x7f0000000680)=ANY=[], 0x68}}], 0x2, 0xf000000) 30.003613927s ago: executing program 0 (id=253): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, 0x0) 29.753115578s ago: executing program 34 (id=253): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, 0x0) 26.082602446s ago: executing program 5 (id=286): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {}, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86, 0x0, 0x0, 0x0, 0x0, 0x1966cd75, 0x6], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x641, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff122]}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) io_uring_register$IORING_REGISTER_PBUF_RING(0xffffffffffffffff, 0x16, &(0x7f0000000380)={&(0x7f0000001000)}, 0x1) syz_io_uring_setup(0x36c1, &(0x7f0000000340)={0x0, 0x0, 0x10100}, &(0x7f0000000140), &(0x7f0000000100)) write$input_event(r0, &(0x7f0000000000)={{0x77359400}}, 0xfe4f) 25.962764326s ago: executing program 5 (id=288): madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x17) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x5ac}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffb000/0x3000)=nil, 0x3000}, 0x3}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x17) 25.785454317s ago: executing program 5 (id=292): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'pim6reg1\x00', 0x2}) socketpair$unix(0x1, 0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x18) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) 25.401939759s ago: executing program 5 (id=296): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000b80)={[{@nombcache}, {@abort}, {@dioread_lock}, {@norecovery}, {@discard}, {@lazytime}, {@noload}, {@usrquota}, {@noauto_da_alloc}]}, 0xfe, 0x558, &(0x7f0000000c00)="$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") mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) fdatasync(r0) 24.980141601s ago: executing program 5 (id=305): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x10) syz_read_part_table(0x1053, &(0x7f0000000000)="$eJzsz8GJwkAYBeCXkJ2QKjZ73iKsIhZgIwbvNmIttuN5JCSHWICI8H2HGd4b5oc/fNaccR9rn1xTttRmyE9yuo//jzRr17XL2bx8SpfksGtKUo45Z6710tfym357+Gun5RrWGdPtjZsBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwNd4BgAA///aLQyW") 24.728730771s ago: executing program 7 (id=308): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @loopback}, 0x4}}, 0x2e) syz_emit_ethernet(0x4c, &(0x7f0000000140)={@link_local, @random="ece65fbcee55", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x16, 0x11, 0x0, @remote, @local, {[], {0x0, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}, "30b00afe4e70"}}}}}}}, 0x0) recvmmsg(r1, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/12, 0x13}], 0x1}}], 0x71e, 0x142, 0x0) 24.643446302s ago: executing program 7 (id=310): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x40fff, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='sched_switch\x00', r1}, 0x10) r2 = syz_open_dev$usbfs(&(0x7f0000000040), 0x76, 0x141201) ioctl$USBDEVFS_REAPURB(r2, 0x4008550c, 0x0) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000080)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000), 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 24.567440842s ago: executing program 5 (id=311): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0xfffff11a, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) fcntl$lock(r2, 0x26, &(0x7f0000000000)) 24.459720573s ago: executing program 35 (id=311): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0xfffff11a, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) fcntl$lock(r2, 0x26, &(0x7f0000000000)) 24.453044503s ago: executing program 7 (id=313): syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x42, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 24.326649454s ago: executing program 7 (id=316): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000b80)={[{@nombcache}, {@abort}, {@dioread_lock}, {@norecovery}, {@discard}, {@lazytime}, {@noload}, {@usrquota}, {@noauto_da_alloc}]}, 0xfe, 0x558, &(0x7f0000000c00)="$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") mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) fdatasync(r0) 24.125558935s ago: executing program 7 (id=318): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/\x00\x00\x00\x00\x00et/\x00\x00v4\x00\x00s/\x92ync__\x85e\xf44\x8cm\xa0\x8dN\xd4\xa2\x88\x00\xd1l,'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000700)='.\x00', 0x0, 0x0) getdents(r1, &(0x7f00000000c0)=""/47, 0x2f) getdents64(r1, &(0x7f0000000040)=""/56, 0x38) 23.611603187s ago: executing program 7 (id=319): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) syz_emit_ethernet(0x44, &(0x7f0000000280)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x36, 0x67, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x0, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x0, 0x811}]}}, {'~?'}}}}}}, 0x0) 23.465350878s ago: executing program 36 (id=319): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) syz_emit_ethernet(0x44, &(0x7f0000000280)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x36, 0x67, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x0, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x0, 0x811}]}}, {'~?'}}}}}}, 0x0) 9.744742243s ago: executing program 3 (id=486): r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="0d01000009000008250592d20700006a3b010902241700fa0074980904e4ff11070103000905010200ffe0000009058202"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000200)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_connect(0x0, 0x4f, &(0x7f0000000d00)=ANY=[@ANYBLOB="12010102fcfc9008b8"], 0x0) 6.24201294s ago: executing program 3 (id=513): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="1201000000000040341a020800000000000109022400010000000009040000020300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x0, "d32052f2"}]}}, 0x0}, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGFEATURE(r1, 0xc040480c, &(0x7f0000000b80)={0x0, "80e21d3f6c946c4b77ca1ec78558619c83df381ea2e6acaaedabfbe5f9695fd2d5e3b1577598bb5b0f3bc3bccd35091df07c0d5633c59fc830306b2e5454126f"}) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="2001b60000"], 0x0}) 3.475853143s ago: executing program 2 (id=556): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000004200)=ANY=[@ANYBLOB="12010000e2793b10d10501200010010203010902120001000000000904"], 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='kfree\x00', r1}, 0x10) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000840)={0x44, &(0x7f0000000440)={0x40, 0x16, 0x2, "9340"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.930757796s ago: executing program 3 (id=568): creat(&(0x7f0000000040)='./file0\x00', 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) fcntl$lock(r0, 0x7, &(0x7f0000000200)={0x0, 0x1, 0x1}) 2.856006265s ago: executing program 3 (id=570): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000000)={&(0x7f00000001c0)={0x14, 0x24, 0x9, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x3, 0x261, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r2, &(0x7f0000000240), &(0x7f0000000080)=@udp}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r2, &(0x7f0000000000), 0x0}, 0x20) 2.835650676s ago: executing program 8 (id=571): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000044700000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000940)) 2.809245816s ago: executing program 3 (id=573): r0 = memfd_create(&(0x7f00000004c0)='\x00\xac=\x9d\xd2\xdb\x1a\'\xf8\n\xedcJ\x8e\x84\xd4N\x00\x9b\x1f\t\xbd\x11+\x86T\x16\xa3\xb3\xae0\x9f9?\xefo\xa4k\x012>\xa1\x9c\x86x\x1c\x9f\x84\x195\xde\x97_\t~\xf3Y\x12\"p^\x00\x02\xb4\xfdHA\xce\x9a\xde\xe4\xb6\xbcK#^\x00}2\xc6:|R\x04\xc2\xb8I\xa3\xb9\xe2\xa2\xebw^I\x0f7i$\xf1\xd4\x9b\xc7\xb2\xbeD`\x8f\xc3\x96\xbc#4\x17\xf5\xb3\xc9\xb2\x94\xa8_f!\xdf\x90}\xba\xa3\x01\xe2\xcf\xb7\"S\a\x04ry\x00#4\x87m\xf7\xe3\xf5\xa7\xda\xb9\xcbU\xbe\x06]\xa9\xb6R~\xc9l}\xb7I\xfeH\xb3\x15\x8c\x06d\xf8c\xc0{\v\xd2\x9d\x8e\\\xae>\xf6quc9\xe0\xbf\xdd\xdc\x99\xf4\\\xd0\x96:\xfb\x8c\x12o\xcc-\x13\x14\xbev\xae\x80Zp\x95c]\x98\x8c\x01\x8fo\xafjN\xcb\x98\xdf\xd3[V\xbd[\xb9\x10v\xee\xdc\xc8G\xd0\xdc9\xccO\xf74\x84o\x99\xe9\x14\x00\x00dU\x00\x00\x00\b\xfb\xb5Z\xb0-\xc8\xdb\x88f\xf4W\xeb\x06\xc2\xd1\xb6\xd1%\xca\x8f\x013|\x8ez\x1eo\x18\xb6#@P&[\xad\xda\nmU\x823\\&P\xdc\xbcS\x80\xc1dJ!LH\xaa\a\x82\xf3\xde\x96\x85\xc5\xdd\xa8\x92\xc7\xcb\x91\xf2[Y\x06\x8a\x9fN\x10\xb9\xf4\xecq\xce\xd2\x17\x88\xae\xcc7r\xd7\xeaz\xcevR\xcau\r\xf1\t\xc2$k\xdf\x8f\xe2\xbe\xfe\x14AN\xf8\xc6\xa8`Fs[6kYH+\xa5\xdcxUY30x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r2, 0x0) ioctl$FITRIM(r0, 0xc0185879, 0x0) 1.299674073s ago: executing program 2 (id=592): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = io_uring_setup(0xad5, &(0x7f0000000100)) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) close(r0) 1.251028683s ago: executing program 6 (id=593): mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f00000005c0)='.\x00', &(0x7f0000000140), 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) 1.163114604s ago: executing program 2 (id=596): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000140)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f00000003c0)=@x86={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.015109925s ago: executing program 2 (id=598): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='module_request\x00', r1}, 0x10) socketpair(0x6, 0x1, 0x0, &(0x7f0000000040)) 917.877565ms ago: executing program 2 (id=599): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000180)='./bus\x00', 0x8, &(0x7f0000000240)={[{@nodiscard}, {@nocheckpoint_merge}, {@alloc_mode_def}, {@six_active_logs}, {@six_active_logs}, {@fault_injection={'fault_injection', 0x3d, 0x4ee}}, {@acl}, {@noacl}, {@compress_cache}, {@alloc_mode_def}, {@noextent_cache}, {@compress_cache}, {@fault_type={'fault_type', 0x3d, 0x4}}]}, 0x1, 0x5505, &(0x7f0000002480)="$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") r0 = open(&(0x7f00000001c0)='./bus\x00', 0x14d27e, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000140)={'#! ', './bus'}, 0x9) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000040)="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") 916.187425ms ago: executing program 9 (id=600): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x1, 0x0, 0x0, {}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "a5976ac6acd41ff8"}}, 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000c00)={0x1, 0x0, 0x0, {}, {0x77359400}, {0x0, 0x0, 0x0, 0x1}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "18f19185e9e9e293"}}, 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="02000000220900000000000000", @ANYRES64, @ANYRES64=0x2710, @ANYRESDEC], 0x80}}, 0x0) 860.672625ms ago: executing program 9 (id=601): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) 785.151155ms ago: executing program 9 (id=602): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks}, {@minixdf}]}, 0x1, 0x4ff, &(0x7f0000000ac0)="$eJzs3c9vG1kdAPCvndhx0uwmu+wBEOwuuwsFVXUSdzda7QGWEwK0EmKPIHVD4kZR7DiKndKEHtIzVyQqcYIjfwDnnrhzQXDjUg5I/IhADRIHoxlPUje1m6hJ7Cj+fKTRvDdv6u97Tee9+pvEL4CR9XZE7EVEMSI+i4iZ7HouO+LjzpHc92T//vLB/v3lXLTbn/4zl7Yn16LrzySuZa9ZiogffifiJ7nn4zZ3dteXarXqVlafa9U355o7uzfX6kur1dXqRqWyuLA4/+GtDyrnNta36sWs9OXHf9j7xs+Sbk1nV7rHcZ46Qy8cxUmMR8T3LyLYEIxl4ykOuyO8lHxEvB4R76TP/0yMpV9NAOAqa7dnoj3TXQcArrp8mgPL5ctZLmA68vlyuZPDeyOm8rVGs3XjTmN7Y6WTK5uNQv7OWq06n+UKZ6OQS+oLaflpvXKsfisiXouIX0xMpvXycqO2Msz/+ADACLt2bP3/z0Rn/QcArrjSsDsAAAyc9R8ARo/1HwBGj/UfAEZPZ/2fHHY3AIAB8v4fAEaP9R8ARsoPPvkkOdoH2edfr9zd2V5v3L25Um2ul+vby+XlxtZmebXRWE0/s6d+0uvVGo3Nhfdj+97sNzebrbnmzu7temN7o3U7/Vzv29VCetfeAEYGAPTz2luP/pxLVuSPJtMjuvZyKAy1Z8BFyw+7A8DQjA27A8DQ2O0LRtcZ3uNLD8AV0WOL3meUev2CULvdbl9cl4ALdv0L8v8wqrry/34KGEaM/D+MLvl/GF3tdu60e/7HaW8EAC43OX6gz/f/X8/Ov82+OfDjleN3PLzIXgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDldrj/bznbC3w68vlyOeKViJiNQu7OWq06HxGvRsSfJgoTSX1hyH0GAM4q/7dctv/X9Zn3pp9pevPaUbEYET/91ae/vLfUam39MaKY+9fE4fXWw+x6ZfC9BwBOdrhOJ+dHXW/kn+zfXz48Btmfv387Ikqd+Af7xTg4ij8e4+m5FIWImPp3Lqt35LpyF2ex9yAiPt9r/LmYTnMgnZ1Pj8dPYr8y0Pj5Z+Ln07bOOfm7+Nw59AVGzaNk/vm41/OXj7fTc+/nv5TOUGeXzX/JSy0fpHPg0/iH899Yn/nv1DHe//13O6XJ59seRHxxPOIw9kHX/HMYP9cn/nunjP+XL735Tr+29q8jrkfv+N2x5lr1zbnmzu7NtfrSanW1ulGpLC4szn9464PKXJqjnuu/Gvzjoxuv9mtLxj/VJ37phPF/9ZTj/83/PvvRV14Q/+vv9oqfjzdeED9ZE792yvhLU78r9WtL4q/0Gf9JX/8bLw77vWJWePzX3ee2DQcAhqe5s7u+VKtVtxQULn8h+Sd7CbrRs/CtQcUqRu+mn7/beaaPNbXbLxWr34xxHlk34DI4eugj4r/D7gwAAAAAAAAAAAAAANDTIH5jadhjBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Or6fwAAAP//sUPPoQ==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x107042, 0x0) io_uring_enter(r0, 0x65f3, 0x0, 0x0, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x187842, 0x147) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000240)={0x3920e, r0, 0x4, 0x0, 0x0, 0x2000003}) 710.310236ms ago: executing program 9 (id=603): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x4, 0x1ff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r2}, 0x10) sync_file_range(r0, 0x0, 0x0, 0x3) 650.659206ms ago: executing program 9 (id=604): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='system.posix_acl_access\x00', &(0x7f00000002c0)={{}, {}, [], {}, [{0x8, 0x5}]}, 0x2c, 0x0) chmod(&(0x7f0000000180)='./file0\x00', 0x23f) chdir(&(0x7f00000001c0)='./file0\x00') setuid(0xee01) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x103) 614.919306ms ago: executing program 9 (id=605): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$UHID_CREATE(r1, &(0x7f0000002a00)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f00000000c0)=""/43, 0x2b}}, 0x120) readv(r1, &(0x7f0000000580)=[{&(0x7f0000000700)=""/163, 0xa3}, {&(0x7f0000000240)=""/89, 0x59}], 0x2) 408.690248ms ago: executing program 8 (id=606): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x880ff, 0x0) fcntl$setlease(r1, 0x400, 0x0) r2 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setlease(r2, 0x400, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 328.067398ms ago: executing program 8 (id=607): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454da, &(0x7f00000001c0)={'bond_slave_0\x00'}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg\x00', 0x1}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454da, &(0x7f0000000140)={'bond0\x00', 0xa000}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'nicvf0\x00', 0x1432}) 194.231168ms ago: executing program 6 (id=608): socket$packet(0x11, 0x4000000000002, 0x300) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000180)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e25, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) write(r0, &(0x7f0000000200)="89ba41c97928dec7cec15a160d3dba257872aed129d4b5247c9834550448a4f46c37425b873ec95db3d757e8b2333a64d9abf416fd83f942661c47bcdf71f7d07ba2b2f051829a7f66952e57962614db0d03474a4a4bce636ea8d2b882b2b49ef18e76edbec7302a96e41f206d930eda2769c56e6d5e3d541ce9a21c3ce5cb5f", 0x1fc0) 163.913409ms ago: executing program 2 (id=609): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000380)='sys_enter\x00', r1}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) utime(&(0x7f0000000000)='./file0\x00', 0x0) 81.878599ms ago: executing program 8 (id=610): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x381, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5032}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[], 0x14}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) io_setup(0xbf, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f00000001c0)=[&(0x7f00000000c0)={0x20000000, 0x0, 0x7, 0x8, 0x0, r0, &(0x7f0000000080)='\x00\x00', 0x2}]) 81.382589ms ago: executing program 6 (id=611): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) syslog(0x3, 0xfffffffffffffffc, 0x61) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001780), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_EEE_SET(r2, &(0x7f0000002580)={0x0, 0x0, &(0x7f0000002540)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001c00000018000180140002007665746831"], 0x2c}}, 0x0) 0s ago: executing program 6 (id=612): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000ac0)=@newqdisc={0x50, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x20, 0x2, {{}, [@TCA_NETEM_DELAY_DIST={0x4}]}}}]}, 0x50}}, 0x20050052) kernel console output (not intermixed with test programs): info_get: Bad swap file entry 7800000000000001 [ 50.776622][ T611] _swap_info_get: Bad swap file entry 7800000000000001 [ 50.783280][ T611] _swap_info_get: Bad swap file entry 7800000000000001 [ 50.790050][ T611] _swap_info_get: Bad swap file entry 7800000000000001 [ 50.796781][ T611] _swap_info_get: Bad swap file entry 7800000000000001 [ 50.803451][ T611] _swap_info_get: Bad swap file entry 7800000000000001 [ 50.810086][ T611] _swap_info_get: Bad swap file entry 7800000000000001 [ 50.816823][ T611] _swap_info_get: Bad swap file entry 7800000000000001 [ 50.823517][ T611] _swap_info_get: Bad swap file entry 7800000000000001 [ 50.830420][ T611] _swap_info_get: Bad swap file entry 7800000000000001 [ 50.837146][ T611] _swap_info_get: Bad swap file entry 7800000000000001 [ 50.843903][ T611] _swap_info_get: Bad swap file entry 7800000000000001 [ 50.850821][ T611] _swap_info_get: Bad swap file entry 7800000000000001 [ 50.857541][ T611] _swap_info_get: Bad swap file entry 7800000000000001 [ 50.864208][ T611] _swap_info_get: Bad swap file entry 7800000000000001 [ 50.870863][ T611] _swap_info_get: Bad swap file entry 7800000000000001 [ 50.877672][ T611] _swap_info_get: Bad swap file entry 7800000000000001 [ 50.884348][ T611] _swap_info_get: Bad swap file entry 7800000000000001 [ 50.891565][ T611] _swap_info_get: Bad swap file entry 7800000000000001 [ 50.898304][ T611] _swap_info_get: Bad swap file entry 7800000000000001 [ 50.905060][ T611] _swap_info_get: Bad swap file entry 7800000000000001 [ 50.911716][ T611] _swap_info_get: Bad swap file entry 7800000000000001 [ 50.918661][ T611] _swap_info_get: Bad swap file entry 7800000000000001 [ 50.925332][ T611] _swap_info_get: Bad swap file entry 7800000000000001 [ 50.931990][ T611] _swap_info_get: Bad swap file entry 7800000000000001 [ 50.938721][ T611] _swap_info_get: Bad swap file entry 7800000000000001 [ 50.945411][ T611] _swap_info_get: Bad swap file entry 7800000000000001 [ 50.952041][ T611] _swap_info_get: Bad swap file entry 7800000000000001 [ 50.959078][ T611] _swap_info_get: Bad swap file entry 7800000000000001 [ 50.965849][ T611] _swap_info_get: Bad swap file entry 7800000000000001 [ 50.972935][ T611] _swap_info_get: Bad swap file entry 7800000000000001 [ 50.979687][ T611] _swap_info_get: Bad swap file entry 7800000000000001 [ 50.986337][ T611] _swap_info_get: Bad swap file entry 7800000000000001 [ 50.992988][ T611] _swap_info_get: Bad swap file entry 7800000000000001 [ 50.999716][ T611] _swap_info_get: Bad swap file entry 7800000000000001 [ 51.006380][ T611] _swap_info_get: Bad swap file entry 7800000000000001 [ 51.013034][ T611] _swap_info_get: Bad swap file entry 7800000000000001 [ 51.019773][ T611] _swap_info_get: Bad swap file entry 7800000000000001 [ 51.026439][ T611] _swap_info_get: Bad swap file entry 7800000000000001 [ 51.033080][ T611] _swap_info_get: Bad swap file entry 7800000000000001 [ 51.039763][ T611] _swap_info_get: Bad swap file entry 7800000000000001 [ 51.046688][ T611] _swap_info_get: Bad swap file entry 7800000000000001 [ 51.053460][ T611] _swap_info_get: Bad swap file entry 7800000000000001 [ 51.060100][ T611] _swap_info_get: Bad swap file entry 7800000000000001 [ 51.067359][ T611] _swap_info_get: Bad swap file entry 7800000000000001 [ 51.074146][ T611] _swap_info_get: Bad swap file entry 7800000000000001 [ 51.080863][ T611] _swap_info_get: Bad swap file entry 7800000000000001 [ 51.087609][ T611] _swap_info_get: Bad swap file entry 7800000000000001 [ 51.094634][ T611] _swap_info_get: Bad swap file entry 7800000000000001 [ 51.101495][ T611] _swap_info_get: Bad swap file entry 7800000000000001 [ 51.108243][ T611] _swap_info_get: Bad swap file entry 7800000000000001 [ 51.114998][ T611] _swap_info_get: Bad swap file entry 7800000000000001 [ 51.121648][ T611] _swap_info_get: Bad swap file entry 7800000000000001 [ 51.128497][ T611] _swap_info_get: Bad swap file entry 7800000000000001 [ 51.135171][ T611] _swap_info_get: Bad swap file entry 7800000000000001 [ 51.141815][ T611] _swap_info_get: Bad swap file entry 7800000000000001 [ 51.148679][ T611] _swap_info_get: Bad swap file entry 7800000000000001 [ 51.155424][ T611] _swap_info_get: Bad swap file entry 7800000000000001 [ 51.162012][ T479] udevd[479]: inotify_add_watch(7, /dev/loop2p18, 10) failed: No such file or directory [ 51.162072][ T611] _swap_info_get: Bad swap file entry 7800000000000001 [ 51.176020][ T627] udevd[627]: inotify_add_watch(7, /dev/loop2p19, 10) failed: No such file or directory [ 51.178707][ T611] _swap_info_get: Bad swap file entry 7800000000000001 [ 51.192146][ T626] udevd[626]: inotify_add_watch(7, /dev/loop2p20, 10) failed: No such file or directory [ 51.195048][ T611] _swap_info_get: Bad swap file entry 7800000000000001 [ 51.208421][ T323] udevd[323]: inotify_add_watch(7, /dev/loop2p21, 10) failed: No such file or directory [ 51.211318][ T611] _swap_info_get: Bad swap file entry 7800000000000001 [ 51.227757][ T611] _swap_info_get: Bad swap file entry 7800000000000001 [ 51.234522][ T611] _swap_info_get: Bad swap file entry 7800000000000001 [ 51.238207][ T357] udevd[357]: inotify_add_watch(7, /dev/loop2p22, 10) failed: No such file or directory [ 51.241174][ T611] _swap_info_get: Bad swap file entry 7800000000000001 [ 51.257462][ T611] _swap_info_get: Bad swap file entry 7800000000000001 [ 51.260470][ T388] udevd[388]: inotify_add_watch(7, /dev/loop2p23, 10) failed: No such file or directory [ 51.264153][ T611] _swap_info_get: Bad swap file entry 7800000000000001 [ 51.264193][ T611] _swap_info_get: Bad swap file entry 7800000000000001 [ 51.264226][ T611] _swap_info_get: Bad swap file entry 7800000000000001 [ 51.264261][ T611] _swap_info_get: Bad swap file entry 7800000000000001 [ 51.264294][ T611] _swap_info_get: Bad swap file entry 7800000000000001 [ 51.282016][ T625] udevd[625]: inotify_add_watch(7, /dev/loop2p24, 10) failed: No such file or directory [ 51.288229][ T611] _swap_info_get: Bad swap file entry 7800000000000001 [ 51.288273][ T611] _swap_info_get: Bad swap file entry 7800000000000001 [ 51.298535][ T319] udevd[319]: inotify_add_watch(7, /dev/loop2p25, 10) failed: No such file or directory [ 51.301523][ T611] _swap_info_get: Bad swap file entry 7800000000000001 [ 51.311812][ T628] udevd[628]: inotify_add_watch(7, /dev/loop2p26, 10) failed: No such file or directory [ 51.317817][ T611] _swap_info_get: Bad swap file entry 7800000000000001 [ 51.328171][ T630] udevd[630]: inotify_add_watch(7, /dev/loop2p27, 10) failed: No such file or directory [ 51.331227][ T611] _swap_info_get: Bad swap file entry 7800000000000001 [ 51.381170][ T611] _swap_info_get: Bad swap file entry 7800000000000001 [ 51.387916][ T611] _swap_info_get: Bad swap file entry 7800000000000001 [ 51.394691][ T611] _swap_info_get: Bad swap file entry 7800000000000001 [ 51.401570][ T611] _swap_info_get: Bad swap file entry 7800000000000001 [ 51.408400][ T611] _swap_info_get: Bad swap file entry 7800000000000001 [ 51.415370][ T611] _swap_info_get: Bad swap file entry 7800000000000001 [ 51.421993][ T611] _swap_info_get: Bad swap file entry 7800000000000001 [ 51.428724][ T611] _swap_info_get: Bad swap file entry 7800000000000001 [ 51.435610][ T611] _swap_info_get: Bad swap file entry 7800000000000001 [ 51.442253][ T611] _swap_info_get: Bad swap file entry 7800000000000001 [ 51.449664][ T611] _swap_info_get: Bad swap file entry 7800000000000001 [ 51.457051][ T611] _swap_info_get: Bad swap file entry 7800000000000001 [ 51.464244][ T611] _swap_info_get: Bad swap file entry 7800000000000001 [ 51.471310][ T611] _swap_info_get: Bad swap file entry 7800000000000001 [ 51.478477][ T611] _swap_info_get: Bad swap file entry 7800000000000001 [ 51.485499][ T611] _swap_info_get: Bad swap file entry 7800000000000001 [ 51.492238][ T611] _swap_info_get: Bad swap file entry 7800000000000001 [ 51.499153][ T611] _swap_info_get: Bad swap file entry 7800000000000001 [ 51.505816][ T611] _swap_info_get: Bad swap file entry 7800000000000001 [ 51.512463][ T611] _swap_info_get: Bad swap file entry 7800000000000001 [ 51.519188][ T611] _swap_info_get: Bad swap file entry 7800000000000001 [ 51.525856][ T611] _swap_info_get: Bad swap file entry 7800000000000001 [ 51.532510][ T611] _swap_info_get: Bad swap file entry 7800000000000001 [ 51.539237][ T611] _swap_info_get: Bad swap file entry 7800000000000001 [ 51.545902][ T611] _swap_info_get: Bad swap file entry 7800000000000001 [ 51.552646][ T611] _swap_info_get: Bad swap file entry 7800000000000001 [ 51.559397][ T611] _swap_info_get: Bad swap file entry 7800000000000001 [ 51.566052][ T611] _swap_info_get: Bad swap file entry 7800000000000001 [ 51.572903][ T611] _swap_info_get: Bad swap file entry 7800000000000001 [ 51.579604][ T611] _swap_info_get: Bad swap file entry 7800000000000001 [ 51.586274][ T611] _swap_info_get: Bad swap file entry 7800000000000001 [ 51.593233][ T611] _swap_info_get: Bad swap file entry 7800000000000001 [ 51.600018][ T611] _swap_info_get: Bad swap file entry 7800000000000001 [ 51.606745][ T611] _swap_info_get: Bad swap file entry 7800000000000001 [ 51.613425][ T611] _swap_info_get: Bad swap file entry 7800000000000001 [ 51.620066][ T611] _swap_info_get: Bad swap file entry 7800000000000001 [ 51.703274][ T633] netlink: 4 bytes leftover after parsing attributes in process `syz.2.112'. [ 51.769590][ T633] device wireguard0 entered promiscuous mode [ 51.879867][ T8] device bridge_slave_1 left promiscuous mode [ 51.882386][ T10] kworker/u4:1: attempt to access beyond end of device [ 51.882386][ T10] loop1: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 51.899727][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.961656][ T8] device bridge_slave_0 left promiscuous mode [ 52.008091][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.064523][ T8] device veth1_macvtap left promiscuous mode [ 52.070628][ T8] device veth0_vlan left promiscuous mode [ 52.695490][ T655] ------------[ cut here ]------------ [ 52.700867][ T655] WARNING: CPU: 1 PID: 655 at mm/page_alloc.c:5704 __alloc_pages+0x3e7/0x610 [ 52.709876][ T655] Modules linked in: [ 52.713806][ T655] CPU: 1 PID: 655 Comm: syz.1.118 Not tainted 6.1.112-syzkaller-00026-g51bee181735e #0 [ 52.723458][ T655] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 52.733424][ T655] RIP: 0010:__alloc_pages+0x3e7/0x610 [ 52.738696][ T655] Code: 00 48 8d 5c 24 60 0f 85 9f 00 00 00 89 d1 81 e1 7f ff ff ff a9 00 00 04 00 0f 44 ca 89 ca e9 90 00 00 00 c6 05 8e 7c d7 05 01 <0f> 0b e9 eb fc ff ff 43 0f b6 44 35 00 84 c0 8b 54 24 0c 0f 85 b8 [ 52.758243][ T655] RSP: 0018:ffffc90000a8f9e0 EFLAGS: 00010246 [ 52.764233][ T655] RAX: 0000000000000000 RBX: ffffc90000a8fa40 RCX: 0000000000000000 [ 52.772010][ T655] RDX: 0000000000040d40 RSI: 0000000000000000 RDI: ffffc90000a8fa68 [ 52.779914][ T655] RBP: ffffc90000a8faf0 R08: dffffc0000000000 R09: ffffc90000a8fa40 [ 52.787784][ T655] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000034 [ 52.795621][ T655] R13: 1ffff92000151f44 R14: 0000000000040d40 R15: 1ffff92000151f40 [ 52.803410][ T655] FS: 00007fdc638c66c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 52.812148][ T655] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 52.818694][ T655] CR2: 0000001b2e31aff8 CR3: 0000000117488000 CR4: 00000000003506a0 [ 52.826577][ T655] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 52.834397][ T655] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 52.842445][ T655] Call Trace: [ 52.845686][ T655] [ 52.848477][ T655] ? show_regs+0x58/0x60 [ 52.852551][ T655] ? __warn+0x160/0x3d0 [ 52.856931][ T655] ? __alloc_pages+0x3e7/0x610 [ 52.861639][ T655] ? report_bug+0x4d5/0x7d0 [ 52.866138][ T655] ? __alloc_pages+0x3e7/0x610 [ 52.871004][ T655] ? handle_bug+0x41/0x70 [ 52.875212][ T655] ? exc_invalid_op+0x1b/0x50 [ 52.879977][ T655] ? asm_exc_invalid_op+0x1b/0x20 [ 52.887979][ T655] ? __alloc_pages+0x3e7/0x610 [ 52.892648][ T655] ? prep_new_page+0x110/0x110 [ 52.898404][ T655] ? __x64_compat_sys_ioctl+0x90/0x90 [ 52.908057][ T655] __kmalloc_large_node+0x9e/0x1b0 [ 52.913407][ T19] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 52.914339][ T655] ? pending_reads_dispatch_ioctl+0xe3d/0x26d0 [ 52.929683][ T655] __kmalloc+0xef/0x1e0 [ 52.933997][ T655] ? __kasan_check_write+0x14/0x20 [ 52.938916][ T655] pending_reads_dispatch_ioctl+0xe3d/0x26d0 [ 52.944793][ T655] ? ioctl_has_perm+0x3f0/0x560 [ 52.949537][ T655] ? pending_reads_poll+0x190/0x190 [ 52.954606][ T655] ? has_cap_mac_admin+0x3c0/0x3c0 [ 52.959717][ T655] ? do_futex+0x501/0x9a0 [ 52.963938][ T655] ? selinux_file_ioctl+0x3cc/0x540 [ 52.969014][ T655] ? __ia32_sys_get_robust_list+0x90/0x90 [ 52.974721][ T655] ? selinux_file_alloc_security+0x120/0x120 [ 52.980576][ T655] ? __se_sys_mount+0x367/0x3b0 [ 52.985431][ T655] ? __fget_files+0x2cb/0x330 [ 52.990014][ T655] ? security_file_ioctl+0x84/0xb0 [ 52.995070][ T655] ? pending_reads_poll+0x190/0x190 [ 53.000084][ T655] __se_sys_ioctl+0x114/0x190 [ 53.004637][ T655] __x64_sys_ioctl+0x7b/0x90 [ 53.009115][ T655] x64_sys_call+0x98/0x9a0 [ 53.013406][ T655] do_syscall_64+0x3b/0xb0 [ 53.017634][ T655] ? clear_bhb_loop+0x55/0xb0 [ 53.022138][ T655] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 53.027923][ T655] RIP: 0033:0x7fdc62b7e819 [ 53.032114][ T655] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 53.051633][ T655] RSP: 002b:00007fdc638c6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 53.059992][ T655] RAX: ffffffffffffffda RBX: 00007fdc62d35fa0 RCX: 00007fdc62b7e819 [ 53.067801][ T655] RDX: 0000000020000000 RSI: 0000000040106726 RDI: 0000000000000004 [ 53.075709][ T655] RBP: 00007fdc62bf175e R08: 0000000000000000 R09: 0000000000000000 [ 53.083797][ T655] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 53.091651][ T655] R13: 0000000000000000 R14: 00007fdc62d35fa0 R15: 00007ffddc6d0018 [ 53.099851][ T655] [ 53.102767][ T655] ---[ end trace 0000000000000000 ]--- [ 53.113303][ T298] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 53.176179][ T616] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.214575][ T616] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.233528][ T616] device bridge_slave_0 entered promiscuous mode [ 53.239048][ T665] loop0: detected capacity change from 0 to 2048 [ 53.241610][ T616] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.260801][ T616] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.269977][ T616] device bridge_slave_1 entered promiscuous mode [ 53.293437][ T19] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 53.298020][ T665] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 53.313251][ T19] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 53.333267][ T19] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.353247][ T298] usb 3-1: Using ep0 maxpacket: 32 [ 53.368923][ T19] usb 4-1: config 0 descriptor?? [ 53.457466][ T28] kauditd_printk_skb: 14 callbacks suppressed [ 53.457514][ T28] audit: type=1400 audit(1732156142.540:203): avc: denied { setattr } for pid=664 comm="syz.0.121" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 53.473445][ T298] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 53.527894][ T298] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 53.548014][ T298] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 53.567460][ T298] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.584427][ T28] audit: type=1400 audit(1732156142.670:204): avc: denied { create } for pid=616 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 53.596245][ T298] usb 3-1: config 0 descriptor?? [ 53.625390][ T616] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.632346][ T616] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.639573][ T616] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.646583][ T616] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.653242][ T28] audit: type=1400 audit(1732156142.670:205): avc: denied { write } for pid=616 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 53.673472][ T657] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 53.684504][ T297] EXT4-fs (loop0): unmounting filesystem. [ 53.694959][ T298] hub 3-1:0.0: USB hub found [ 53.702052][ T28] audit: type=1400 audit(1732156142.670:206): avc: denied { read } for pid=616 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 53.747470][ T356] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.764044][ T356] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.784675][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.792834][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.809264][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 53.818205][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.828762][ T356] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.835684][ T356] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.844773][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 53.853731][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.862087][ T356] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.867671][ T663] loop1: detected capacity change from 0 to 40427 [ 53.869022][ T356] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.885076][ T28] audit: type=1400 audit(1732156142.970:207): avc: denied { setopt } for pid=652 comm="syz.3.117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 53.900354][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 53.913357][ T19] keytouch 0003:0926:3333.0009: fixing up Keytouch IEC report descriptor [ 53.920888][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.942133][ T663] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 53.948045][ T19] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0009/input/input12 [ 53.956808][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 53.962178][ T657] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 53.972641][ T663] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 53.984377][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 53.992962][ T657] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.010026][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 54.018894][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 54.040428][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 54.048334][ T376] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 54.059833][ T663] F2FS-fs (loop1): Found nat_bits in checkpoint [ 54.059949][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 54.083291][ T298] hub 3-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 54.094672][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 54.102278][ T19] keytouch 0003:0926:3333.0009: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 54.123925][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 54.137089][ T616] device veth0_vlan entered promiscuous mode [ 54.182869][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 54.193465][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 54.205331][ T663] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 54.206301][ T616] device veth1_macvtap entered promiscuous mode [ 54.212260][ T663] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 54.242080][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 54.250692][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 54.259932][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 54.280668][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 54.289954][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 54.316863][ T28] audit: type=1400 audit(1732156143.400:208): avc: denied { mount } for pid=616 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 54.335702][ T60] usb 4-1: USB disconnect, device number 6 [ 54.348576][ T28] audit: type=1400 audit(1732156143.430:209): avc: denied { mounton } for pid=616 comm="syz-executor" path="/dev/binderfs" dev="devtmpfs" ino=522 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 54.377822][ T298] usbhid 3-1:0.0: can't add hid device: -71 [ 54.384670][ T298] usbhid: probe of 3-1:0.0 failed with error -71 [ 54.423331][ T376] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 54.436443][ T298] usb 3-1: USB disconnect, device number 4 [ 54.445619][ T376] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 54.456190][ T376] usb 1-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00 [ 54.465953][ T376] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.476167][ T376] usb 1-1: config 0 descriptor?? [ 54.683256][ T19] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 54.802945][ T685] loop1: detected capacity change from 0 to 1024 [ 54.810312][ T685] ext4: Unknown parameter 'smackfstransmute' [ 54.824554][ T479] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 54.833961][ T28] audit: type=1400 audit(1732156143.910:210): avc: denied { remount } for pid=684 comm="syz.1.125" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 54.873789][ T28] audit: type=1400 audit(1732156143.960:211): avc: denied { unmount } for pid=293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 54.920037][ T28] audit: type=1400 audit(1732156143.990:212): avc: denied { map } for pid=686 comm="syz.1.126" path="socket:[17680]" dev="sockfs" ino=17680 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 54.923827][ T19] usb 6-1: Using ep0 maxpacket: 16 [ 54.965657][ T376] elo 0003:04E7:0030.000A: unknown main item tag 0x0 [ 54.972349][ T376] elo 0003:04E7:0030.000A: unknown main item tag 0x4 [ 54.991332][ T376] elo 0003:04E7:0030.000A: item fetching failed at offset 3/7 [ 55.019337][ T376] elo 0003:04E7:0030.000A: parse failed [ 55.025108][ T376] elo: probe of 0003:04E7:0030.000A failed with error -22 [ 55.104534][ T19] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 55.116711][ T19] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 55.126180][ T19] usb 6-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 55.135182][ T19] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.195012][ T44] usb 1-1: USB disconnect, device number 6 [ 55.203521][ T19] ums-sddr09 6-1:1.0: USB Mass Storage device detected [ 55.483281][ T672] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 55.561908][ T19] usb 6-1: USB disconnect, device number 2 [ 55.727029][ T672] usb 4-1: Using ep0 maxpacket: 32 [ 55.775648][ T721] loop0: detected capacity change from 0 to 4096 [ 55.791731][ T721] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 55.858501][ T672] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 55.876942][ T672] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 55.905156][ T672] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 55.919444][ T672] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 55.929315][ T672] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 55.933271][ T60] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 55.939523][ T672] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 55.959388][ T672] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 55.969709][ T672] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.986641][ T672] usb 4-1: config 0 descriptor?? [ 56.011842][ T297] EXT4-fs (loop0): unmounting filesystem. [ 56.173438][ T383] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 56.193515][ T60] usb 2-1: Using ep0 maxpacket: 16 [ 56.254960][ T672] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 7 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 56.269046][ T672] usb 4-1: USB disconnect, device number 7 [ 56.276968][ T672] usblp0: removed [ 56.323382][ T60] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 56.334982][ T60] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 56.344729][ T60] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 56.354366][ T60] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 576 [ 56.364136][ T60] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 56.403312][ T44] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 56.463337][ T60] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 56.472370][ T60] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 56.480529][ T60] usb 2-1: SerialNumber: syz [ 56.503565][ T719] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 56.523324][ T24] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 56.532373][ T60] cdc_acm 2-1:1.0: Control and data interfaces are not separated! [ 56.541029][ T60] cdc_acm: probe of 2-1:1.0 failed with error -12 [ 56.547467][ T383] usb 3-1: New USB device found, idVendor=077b, idProduct=2226, bcdDevice=ca.8b [ 56.559149][ T383] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 56.569713][ T383] usb 3-1: config 0 descriptor?? [ 56.730201][ T19] usb 2-1: USB disconnect, device number 4 [ 56.763631][ T44] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 56.774614][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 56.779721][ T44] usb 6-1: too many endpoints for config 1 interface 1 altsetting 1: 233, using maximum allowed: 30 [ 56.790859][ T44] usb 6-1: config 1 interface 1 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 233 [ 56.833303][ T672] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 56.903365][ T24] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 56.963430][ T44] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 56.972821][ T44] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 56.980896][ T44] usb 6-1: Product: syz [ 56.984980][ T44] usb 6-1: Manufacturer: syz [ 56.989440][ T44] usb 6-1: SerialNumber: syz [ 56.994087][ T24] usb 1-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 57.003011][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 57.011820][ T24] usb 1-1: SerialNumber: syz [ 57.018487][ T24] usb 1-1: config 0 descriptor?? [ 57.054072][ T44] hub 6-1:1.0: bad descriptor, ignoring hub [ 57.060467][ T44] hub: probe of 6-1:1.0 failed with error -5 [ 57.067737][ T24] usb 1-1: Found UVC 0.00 device (05ac:8501) [ 57.075086][ T24] uvcvideo 1-1:0.0: Entity type for entity Output 255 was not initialized! [ 57.083984][ T24] usb 1-1: Failed to create links for entity 255 [ 57.090199][ T24] usb 1-1: Failed to register entities (-22). [ 57.193336][ T672] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 57.201675][ T672] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 57.210179][ T672] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 57.219182][ T672] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 57.228822][ T672] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 57.240411][ T672] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 57.253500][ T672] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 57.265869][ T672] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 57.271585][ T60] usb 1-1: USB disconnect, device number 7 [ 57.281529][ T672] usb 4-1: config 0 descriptor?? [ 57.303355][ T700] raw-gadget.4 gadget.3: fail, usb_ep_enable returned -22 [ 57.545010][ T672] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 8 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 57.573326][ T376] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 57.763238][ C1] usblp0: nonzero read bulk status received: -71 [ 57.769789][ T700] usblp0: error -71 reading from printer [ 57.794273][ T60] usb 4-1: USB disconnect, device number 8 [ 57.805156][ T60] usblp0: removed [ 57.813327][ T376] usb 2-1: Using ep0 maxpacket: 32 [ 57.870451][ T745] loop0: detected capacity change from 0 to 512 [ 57.877378][ T745] EXT4-fs: Ignoring removed oldalloc option [ 57.885966][ T745] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 57.899206][ T745] EXT4-fs (loop0): 1 truncate cleaned up [ 57.903470][ T383] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 57.905655][ T745] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 57.915372][ T383] asix 3-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 57.933420][ T376] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 57.949640][ T383] asix: probe of 3-1:0.0 failed with error -71 [ 57.953260][ T376] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 57.969419][ T383] usb 3-1: USB disconnect, device number 5 [ 57.973299][ T376] usb 2-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 58.003241][ T376] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.019852][ T376] usb 2-1: config 0 descriptor?? [ 58.030009][ T297] EXT4-fs (loop0): unmounting filesystem. [ 58.173382][ T44] cdc_ncm 6-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 58.180037][ T44] cdc_ncm 6-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 58.188081][ T44] cdc_ncm 6-1:1.0: setting rx_max = 2048 [ 58.217706][ T754] loop0: detected capacity change from 0 to 8192 [ 58.226193][ T754] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 58.390897][ T44] cdc_ncm 6-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.5-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 58.433676][ T44] usb 6-1: USB disconnect, device number 3 [ 58.440031][ T44] cdc_ncm 6-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.5-1, CDC NCM (NO ZLP) [ 58.585709][ T376] greenasia 0003:0E8F:0012.000B: item fetching failed at offset 0/3 [ 58.602653][ T765] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 58.604925][ T376] greenasia 0003:0E8F:0012.000B: parse failed [ 58.634290][ T376] greenasia: probe of 0003:0E8F:0012.000B failed with error -22 [ 58.727905][ T775] loop0: detected capacity change from 0 to 512 [ 58.770346][ T775] EXT4-fs: Ignoring removed orlov option [ 58.781554][ T775] EXT4-fs: Ignoring removed nobh option [ 58.801216][ T775] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 58.844807][ T775] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 58.857359][ T775] ext4 filesystem being mounted at /33/file1 supports timestamps until 2038 (0x7fffffff) [ 58.877641][ T376] usb 2-1: USB disconnect, device number 5 [ 58.896558][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 58.896589][ T28] audit: type=1400 audit(1732156147.980:223): avc: denied { setattr } for pid=774 comm="syz.0.157" path="/33/file1" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 59.013705][ T297] EXT4-fs (loop0): unmounting filesystem. [ 59.443269][ T44] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 59.656002][ T792] loop3: detected capacity change from 0 to 40427 [ 59.679020][ T792] F2FS-fs (loop3): heap/no_heap options were deprecated [ 59.694397][ T792] F2FS-fs (loop3): invalid crc value [ 59.702053][ T792] F2FS-fs (loop3): Found nat_bits in checkpoint [ 59.713401][ T44] usb 6-1: Using ep0 maxpacket: 32 [ 59.713406][ T19] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 59.806717][ T792] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 59.863352][ T44] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 59.883220][ T44] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 59.902530][ T44] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 59.905380][ T792] syz.3.160: attempt to access beyond end of device [ 59.905380][ T792] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 59.911748][ T44] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.934781][ T44] usb 6-1: config 0 descriptor?? [ 59.953349][ T19] usb 2-1: Using ep0 maxpacket: 16 [ 59.967826][ T296] syz-executor: attempt to access beyond end of device [ 59.967826][ T296] loop3: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 59.985053][ T44] hub 6-1:0.0: USB hub found [ 60.073410][ T19] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 60.093271][ T19] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 60.108346][ T19] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 60.127889][ T19] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.156163][ T19] usb 2-1: config 0 descriptor?? [ 60.203361][ T44] hub 6-1:0.0: 1 port detected [ 60.436423][ T836] syz.3.171 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 60.518658][ T28] audit: type=1400 audit(1732156405.601:224): avc: denied { block_suspend } for pid=841 comm="syz.3.173" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 60.623293][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 60.627229][ T767] Bluetooth: hci0: command 0x1003 tx timeout [ 60.693569][ T19] usbhid 2-1:0.0: can't add hid device: -71 [ 60.699512][ T19] usbhid: probe of 2-1:0.0 failed with error -71 [ 60.707481][ T19] usb 2-1: USB disconnect, device number 6 [ 60.843368][ T383] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 60.943405][ T44] hub 6-1:0.0: activate --> -90 [ 61.151289][ T857] loop1: detected capacity change from 0 to 512 [ 61.164885][ T857] EXT4-fs error (device loop1): ext4_get_branch:178: inode #13: block 2: comm syz.1.179: invalid block [ 61.177328][ T857] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.179: invalid indirect mapped block 10 (level 1) [ 61.191258][ T857] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.179: invalid indirect mapped block 8 (level 1) [ 61.205182][ T857] EXT4-fs (loop1): 1 truncate cleaned up [ 61.210836][ T857] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 61.253308][ T383] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 61.264239][ T383] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 61.274361][ T383] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 61.287479][ T383] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 61.296902][ T383] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.303396][ T19] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 61.306890][ T383] usb 4-1: config 0 descriptor?? [ 61.352742][ T860] Illegal XDP return value 1189030974 on prog (id 82) dev N/A, expect packet loss! [ 61.366246][ T389] usb 6-1: USB disconnect, device number 4 [ 61.623279][ T44] usb 6-1-port1: config error [ 61.672346][ T293] EXT4-fs (loop1): unmounting filesystem. [ 61.679095][ T19] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 61.690021][ T19] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 61.710815][ T19] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 61.724058][ T19] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 61.733102][ T19] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.767821][ T19] usb 3-1: config 0 descriptor?? [ 61.795820][ T383] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x2 [ 61.823600][ T383] plantronics 0003:047F:FFFF.000C: No inputs registered, leaving [ 61.851510][ T383] plantronics 0003:047F:FFFF.000C: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 62.266344][ T19] plantronics 0003:047F:FFFF.000D: unknown main item tag 0xd [ 62.277668][ T19] plantronics 0003:047F:FFFF.000D: No inputs registered, leaving [ 62.298925][ T19] plantronics 0003:047F:FFFF.000D: hiddev97,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 62.504150][ T28] audit: type=1400 audit(1732156407.591:225): avc: denied { write } for pid=854 comm="syz.2.178" name="hiddev0" dev="devtmpfs" ino=957 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 63.253233][ T19] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 63.623376][ T19] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 63.638069][ T19] usb 6-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 63.733521][ T19] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 63.754468][ T19] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 63.783438][ T19] usb 6-1: SerialNumber: syz [ 63.869905][ T28] audit: type=1400 audit(1732156408.951:226): avc: denied { name_bind } for pid=937 comm="syz.0.208" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 63.892999][ T938] raw_sendmsg: syz.3.206 forgot to set AF_INET. Fix it! [ 64.010740][ T931] syz.1.205 (931) used greatest stack depth: 20176 bytes left [ 64.044475][ T383] usb 4-1: USB disconnect, device number 9 [ 64.089714][ T28] audit: type=1400 audit(1732156409.171:227): avc: denied { map } for pid=944 comm="syz.1.210" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=18113 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 64.115815][ T28] audit: type=1400 audit(1732156409.201:228): avc: denied { read write } for pid=944 comm="syz.1.210" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=18113 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 64.198033][ T19] usb 6-1: USB disconnect, device number 5 [ 64.280756][ T298] usb 3-1: USB disconnect, device number 6 [ 64.361839][ T28] audit: type=1400 audit(1732156409.441:229): avc: denied { create } for pid=951 comm="syz.2.213" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 64.413330][ T28] audit: type=1400 audit(1732156409.441:230): avc: denied { bind } for pid=951 comm="syz.2.213" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 64.442237][ T954] loop0: detected capacity change from 0 to 16 [ 64.473756][ T954] erofs: Unknown parameter 'ÿ0xffffffffffffffff' [ 64.495339][ T479] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 64.783416][ T672] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 64.913271][ T383] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 65.071963][ T672] usb 1-1: Using ep0 maxpacket: 8 [ 65.193374][ T672] usb 1-1: config 135 has an invalid interface number: 230 but max is 0 [ 65.211954][ T672] usb 1-1: config 135 has an invalid descriptor of length 131, skipping remainder of the config [ 65.232477][ T672] usb 1-1: config 135 has no interface number 0 [ 65.252749][ T672] usb 1-1: too many endpoints for config 135 interface 230 altsetting 126: 53, using maximum allowed: 30 [ 65.283250][ T672] usb 1-1: config 135 interface 230 altsetting 126 has 0 endpoint descriptors, different from the interface descriptor's value: 53 [ 65.307253][ T672] usb 1-1: config 135 interface 230 has no altsetting 0 [ 65.333341][ T383] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 65.353214][ T383] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 65.363635][ T383] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.383339][ T383] usb 3-1: config 0 descriptor?? [ 65.473660][ T672] usb 1-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 65.493309][ T672] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.511733][ T672] usb 1-1: Product: syz [ 65.516250][ T672] usb 1-1: Manufacturer: syz [ 65.520928][ T672] usb 1-1: SerialNumber: syz [ 65.789257][ T972] loop3: detected capacity change from 0 to 40427 [ 65.806545][ T972] F2FS-fs (loop3): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 65.814465][ T972] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 65.824475][ T972] F2FS-fs (loop3): invalid crc value [ 65.833310][ T672] usb 1-1: Found UVC 0.00 device syz (18ec:3288) [ 65.839573][ T672] usb 1-1: No valid video chain found. [ 65.854963][ T383] keytouch 0003:0926:3333.000E: fixing up Keytouch IEC report descriptor [ 65.863606][ T972] F2FS-fs (loop3): Found nat_bits in checkpoint [ 65.873441][ T672] usb 1-1: USB disconnect, device number 8 [ 65.913521][ T383] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.000E/input/input13 [ 66.019557][ T28] audit: type=1400 audit(1732156411.101:231): avc: denied { read } for pid=88 comm="acpid" name="event3" dev="devtmpfs" ino=978 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 66.042292][ T383] keytouch 0003:0926:3333.000E: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 66.074016][ T28] audit: type=1400 audit(1732156411.101:232): avc: denied { open } for pid=88 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=978 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 66.122912][ T972] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 66.149963][ T972] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 66.152215][ T28] audit: type=1400 audit(1732156411.101:233): avc: denied { ioctl } for pid=88 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=978 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 66.212382][ T28] audit: type=1400 audit(1732156411.241:234): avc: denied { mount } for pid=971 comm="syz.3.222" name="/" dev="loop3" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 66.266257][ T383] usb 3-1: USB disconnect, device number 7 [ 66.294440][ T28] audit: type=1400 audit(1732156411.371:235): avc: denied { create } for pid=971 comm="syz.3.222" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 66.337951][ T8] kworker/u4:0: attempt to access beyond end of device [ 66.337951][ T8] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 66.347340][ T28] audit: type=1400 audit(1732156411.421:236): avc: denied { write } for pid=971 comm="syz.3.222" name="file0" dev="loop3" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 66.374918][ T989] loop1: detected capacity change from 0 to 256 [ 66.389507][ T989] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 66.456112][ T989] incfs: ino conflict with backing FS 1 [ 66.465672][ T995] loop0: detected capacity change from 0 to 512 [ 66.484400][ T995] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 66.504342][ T995] EXT4-fs (loop0): invalid journal inode [ 66.517257][ T995] EXT4-fs (loop0): can't get journal size [ 66.546494][ T995] EXT4-fs (loop0): 1 truncate cleaned up [ 66.552033][ T995] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 66.562506][ T972] F2FS-fs (loop3): background flush thread has stopped [ 66.569347][ T972] F2FS-fs (loop3): background ckpt thread has stopped [ 66.581629][ T972] F2FS-fs (loop3): background gc thread has stopped [ 66.776576][ T297] EXT4-fs (loop0): unmounting filesystem. [ 67.144629][ T8] device bridge_slave_1 left promiscuous mode [ 67.151756][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.211449][ T8] device bridge_slave_0 left promiscuous mode [ 67.227928][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.228448][ T1021] loop3: detected capacity change from 0 to 2048 [ 67.274162][ T8] device veth1_macvtap left promiscuous mode [ 67.327483][ T1021] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 67.353599][ T1021] ext4 filesystem being mounted at /36/file0 supports timestamps until 2038 (0x7fffffff) [ 67.393693][ T1030] loop0: detected capacity change from 0 to 512 [ 67.422725][ T1029] netlink: 32 bytes leftover after parsing attributes in process `syz.2.243'. [ 67.460575][ T1021] EXT4-fs (loop3): re-mounted. Quota mode: none. [ 67.535336][ T296] EXT4-fs (loop3): unmounting filesystem. [ 67.542537][ T1030] EXT4-fs error (device loop0): ext4_orphan_get:1396: inode #15: comm syz.0.244: casefold flag without casefold feature [ 67.607788][ T1030] EXT4-fs error (device loop0): ext4_orphan_get:1401: comm syz.0.244: couldn't read orphan inode 15 (err -117) [ 67.670829][ T1030] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 67.711257][ T1006] loop5: detected capacity change from 0 to 40427 [ 67.723899][ T1006] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 67.731697][ T1006] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 67.773708][ T1006] F2FS-fs (loop5): invalid crc value [ 67.809902][ T1006] F2FS-fs (loop5): Found nat_bits in checkpoint [ 67.830411][ T297] EXT4-fs (loop0): unmounting filesystem. [ 67.837103][ T1037] netlink: 8 bytes leftover after parsing attributes in process `syz.3.245'. [ 67.910274][ T1043] loop0: detected capacity change from 0 to 512 [ 67.960797][ T1043] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 67.995896][ T1043] EXT4-fs (loop0): 1 truncate cleaned up [ 68.003620][ T1043] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 68.100727][ T1006] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 68.134862][ T1006] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 68.146864][ T297] EXT4-fs (loop0): unmounting filesystem. [ 68.263993][ T1032] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.271173][ T1032] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.334557][ T1032] device bridge_slave_0 entered promiscuous mode [ 68.344249][ T1032] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.351573][ T1032] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.402530][ T1032] device bridge_slave_1 entered promiscuous mode [ 68.465265][ T10] F2FS-fs (loop5): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 68.475519][ T10] F2FS-fs (loop5): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 68.856324][ T1053] loop3: detected capacity change from 0 to 40427 [ 68.881949][ T1053] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 68.903234][ T1053] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 68.933519][ T1053] F2FS-fs (loop3): invalid crc value [ 68.980077][ T1053] F2FS-fs (loop3): Found nat_bits in checkpoint [ 69.055073][ T8] device bridge_slave_1 left promiscuous mode [ 69.061129][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.103750][ T8] device bridge_slave_0 left promiscuous mode [ 69.110054][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.143335][ T8] device veth1_macvtap left promiscuous mode [ 69.149358][ T8] device veth0_vlan left promiscuous mode [ 69.260012][ T1072] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 69.278222][ T1053] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 69.288229][ T1053] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 69.501893][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.515597][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.548750][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.557529][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.566327][ T356] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.573258][ T356] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.582562][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.612443][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.624258][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.659067][ T356] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.666054][ T356] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.739551][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.750208][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.787953][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.804447][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.901493][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 69.915654][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.933861][ T1091] device veth1_macvtap left promiscuous mode [ 69.940190][ T1091] device macsec0 entered promiscuous mode [ 69.950774][ T1092] loop2: detected capacity change from 0 to 16 [ 69.988227][ T1092] erofs: (device loop2): erofs_read_inode: unsupported chunk format 7fff of nid 36 [ 70.038675][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.048183][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.058693][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.069899][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.087300][ T1069] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.110998][ T1069] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.130477][ T1069] device bridge_slave_0 entered promiscuous mode [ 70.151271][ T1032] device veth0_vlan entered promiscuous mode [ 70.162954][ T1069] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.171438][ T1069] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.181889][ T1069] device bridge_slave_1 entered promiscuous mode [ 70.215385][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 70.225441][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.237307][ T1032] device veth1_macvtap entered promiscuous mode [ 70.298533][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 70.308094][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.318747][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.334068][ T1107] xt_hashlimit: size too large, truncated to 1048576 [ 70.348759][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.358935][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.461430][ T28] kauditd_printk_skb: 24 callbacks suppressed [ 70.461488][ T28] audit: type=1400 audit(1732156415.541:261): avc: denied { bind } for pid=1109 comm="syz.2.271" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 70.631663][ T1069] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.638632][ T1069] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.645950][ T1069] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.652850][ T1069] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.729784][ T356] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.741558][ T356] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.753121][ T1117] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 70.753281][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.762630][ T28] audit: type=1400 audit(1732156415.831:262): avc: denied { load_policy } for pid=1116 comm="syz.6.273" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 70.780363][ T1117] SELinux: failed to load policy [ 70.792228][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.811581][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.820275][ T356] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.827214][ T356] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.847313][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.864376][ T356] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.871347][ T356] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.879250][ T389] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 70.918896][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.937566][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.999181][ T1119] loop6: detected capacity change from 0 to 128 [ 71.007605][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.026007][ T1119] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 71.038950][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.081218][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.093194][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.102884][ T1119] syz.6.274: attempt to access beyond end of device [ 71.102884][ T1119] loop6: rw=3, sector=6950, nr_sectors = 2 limit=128 [ 71.121988][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.132872][ T1119] syz.6.274: attempt to access beyond end of device [ 71.132872][ T1119] loop6: rw=2051, sector=6952, nr_sectors = 942 limit=128 [ 71.150924][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.172910][ T1069] device veth0_vlan entered promiscuous mode [ 71.178995][ T389] usb 3-1: Using ep0 maxpacket: 8 [ 71.225543][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.236183][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.249003][ T1069] device veth1_macvtap entered promiscuous mode [ 71.263464][ T769] Bluetooth: hci0: command 0x1003 tx timeout [ 71.269440][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 71.289212][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 71.298001][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.311582][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.320302][ T389] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 71.342570][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.351228][ T389] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 71.361989][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.365501][ T1122] loop6: detected capacity change from 0 to 128 [ 71.370382][ T389] usb 3-1: New USB device found, idVendor=05ac, idProduct=0240, bcdDevice= 0.00 [ 71.386338][ T389] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.396777][ T389] usb 3-1: config 0 descriptor?? [ 71.476133][ T1122] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 71.481407][ T1124] loop5: detected capacity change from 0 to 1024 [ 71.494287][ T1124] EXT4-fs: Ignoring removed mblk_io_submit option [ 71.510689][ T1122] ext4 filesystem being mounted at /3/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 71.510949][ T1124] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 71.562024][ T1124] EXT4-fs (loop5): orphan cleanup on readonly fs [ 71.571338][ T1124] EXT4-fs error (device loop5): __ext4_get_inode_loc:4508: comm syz.5.276: Invalid inode table block 0 in block_group 0 [ 71.588529][ T1124] EXT4-fs (loop5): Remounting filesystem read-only [ 71.595243][ T1124] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5884: Corrupt filesystem [ 71.605868][ T1124] EXT4-fs error (device loop5): ext4_quota_write:7182: inode #3: comm syz.5.276: mark_inode_dirty error [ 71.614193][ T1122] syz.6.275 (pid 1122) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 71.627987][ T1124] Quota error (device loop5): write_blk: dquota write failed [ 71.637599][ T1124] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 71.638184][ T28] audit: type=1400 audit(1732156416.721:263): avc: denied { create } for pid=1114 comm="syz.2.272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 71.648252][ T1124] EXT4-fs error (device loop5): ext4_acquire_dquot:6787: comm syz.5.276: Failed to acquire dquot type 0 [ 71.679731][ T1124] EXT4-fs (loop5): 1 truncate cleaned up [ 71.693340][ T1124] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 71.737048][ T28] audit: type=1400 audit(1732156416.781:264): avc: denied { ioctl } for pid=1114 comm="syz.2.272" path="socket:[20691]" dev="sockfs" ino=20691 ioctlcmd=0x48c8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 71.794457][ T28] audit: type=1400 audit(1732156416.881:265): avc: denied { mounton } for pid=1132 comm="syz.3.278" path="/proc/103/task" dev="proc" ino=19720 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 71.823611][ T389] usbhid 3-1:0.0: can't add hid device: -71 [ 71.829735][ T389] usbhid: probe of 3-1:0.0 failed with error -71 [ 71.839097][ T1032] EXT4-fs (loop6): unmounting filesystem. [ 71.868962][ T389] usb 3-1: USB disconnect, device number 8 [ 71.893696][ T28] audit: type=1400 audit(1732156416.981:266): avc: denied { create } for pid=1137 comm="syz.6.280" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 71.930298][ T616] EXT4-fs (loop5): unmounting filesystem. [ 71.951725][ T28] audit: type=1400 audit(1732156417.011:267): avc: denied { write } for pid=1137 comm="syz.6.280" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 72.010186][ T1142] loop5: detected capacity change from 0 to 256 [ 72.043467][ T1142] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 72.089078][ T28] audit: type=1400 audit(1732156417.171:268): avc: denied { setattr } for pid=1141 comm="syz.5.281" name="file0" dev="loop5" ino=1048629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 72.243668][ T1154] input: syz0 as /devices/virtual/input/input14 [ 72.636770][ T1170] loop6: detected capacity change from 0 to 1024 [ 72.651049][ T1168] device pim6reg1 entered promiscuous mode [ 72.670968][ T1170] EXT4-fs: Ignoring removed orlov option [ 72.690636][ T1170] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 72.776190][ T1170] EXT4-fs (loop6): Test dummy encryption mode enabled [ 72.815368][ T1170] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 72.942293][ T1032] EXT4-fs (loop6): unmounting filesystem. [ 73.031084][ T1183] loop5: detected capacity change from 0 to 1024 [ 73.126294][ T1183] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 73.334667][ T616] EXT4-fs error (device loop5): ext4_empty_dir:3134: inode #11: comm syz-executor: invalid size [ 73.365892][ T298] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 73.378212][ T616] EXT4-fs error (device loop5): ext4_empty_dir:3134: inode #11: comm syz-executor: invalid size [ 73.392709][ T616] EXT4-fs error (device loop5): ext4_empty_dir:3134: inode #11: comm syz-executor: invalid size [ 73.393767][ T616] EXT4-fs error (device loop5): ext4_empty_dir:3134: inode #11: comm syz-executor: invalid size [ 73.414756][ T298] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 73.425797][ T298] hid-generic 0000:0000:0000.000F: hidraw0: HID v0.00 Device [syz0] on syz0 [ 73.437973][ T616] EXT4-fs error (device loop5): ext4_empty_dir:3134: inode #11: comm syz-executor: invalid size [ 73.449235][ T616] EXT4-fs error (device loop5): ext4_empty_dir:3134: inode #11: comm syz-executor: invalid size [ 73.452739][ T616] EXT4-fs error (device loop5): ext4_empty_dir:3134: inode #11: comm syz-executor: invalid size [ 73.463706][ T616] EXT4-fs error (device loop5): ext4_empty_dir:3134: inode #11: comm syz-executor: invalid size [ 73.464699][ T616] EXT4-fs error (device loop5): ext4_empty_dir:3134: inode #11: comm syz-executor: invalid size [ 73.475692][ T616] EXT4-fs error (device loop5): ext4_empty_dir:3134: inode #11: comm syz-executor: invalid size [ 73.674765][ T616] EXT4-fs (loop5): unmounting filesystem. [ 73.943586][ T298] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 74.062674][ T1222] loop7: detected capacity change from 0 to 1024 [ 74.106982][ T1222] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 74.183237][ T298] usb 7-1: Using ep0 maxpacket: 16 [ 74.188889][ T1069] EXT4-fs error (device loop7): ext4_empty_dir:3134: inode #11: comm syz-executor: invalid size [ 74.200611][ T1069] EXT4-fs error (device loop7): ext4_empty_dir:3134: inode #11: comm syz-executor: invalid size [ 74.211974][ T1069] EXT4-fs error (device loop7): ext4_empty_dir:3134: inode #11: comm syz-executor: invalid size [ 74.227535][ T1069] EXT4-fs error (device loop7): ext4_empty_dir:3134: inode #11: comm syz-executor: invalid size [ 74.238704][ T10] device bridge_slave_1 left promiscuous mode [ 74.238846][ T1069] EXT4-fs error (device loop7): ext4_empty_dir:3134: inode #11: comm syz-executor: invalid size [ 74.244953][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.256677][ T1069] EXT4-fs error (device loop7): ext4_empty_dir:3134: inode #11: comm syz-executor: invalid size [ 74.273080][ T10] device bridge_slave_0 left promiscuous mode [ 74.273424][ T1069] EXT4-fs error (device loop7): ext4_empty_dir:3134: inode #11: comm syz-executor: invalid size [ 74.280775][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.291181][ T1069] EXT4-fs error (device loop7): ext4_empty_dir:3134: inode #11: comm syz-executor: invalid size [ 74.308426][ T1069] EXT4-fs error (device loop7): ext4_empty_dir:3134: inode #11: comm syz-executor: invalid size [ 74.319253][ T10] device veth1_macvtap left promiscuous mode [ 74.319583][ T1069] EXT4-fs error (device loop7): ext4_empty_dir:3134: inode #11: comm syz-executor: invalid size [ 74.325351][ T10] device veth0_vlan left promiscuous mode [ 74.335616][ T24] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 74.473580][ T298] usb 7-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 74.482935][ T298] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.491292][ T298] usb 7-1: Product: syz [ 74.495694][ T298] usb 7-1: Manufacturer: syz [ 74.500248][ T298] usb 7-1: SerialNumber: syz [ 74.506706][ T298] r8152-cfgselector 7-1: config 0 descriptor?? [ 74.579783][ T1227] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.587865][ T1227] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.596237][ T1227] device bridge_slave_0 entered promiscuous mode [ 74.604375][ T1227] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.611369][ T1227] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.619839][ T1227] device bridge_slave_1 entered promiscuous mode [ 74.630830][ T1069] EXT4-fs (loop7): unmounting filesystem. [ 74.723462][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 74.734859][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 74.747239][ T24] usb 4-1: New USB device found, idVendor=056a, idProduct=0019, bcdDevice= 0.00 [ 74.756239][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.781785][ T24] usb 4-1: config 0 descriptor?? [ 74.965869][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 74.974179][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 74.986016][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 74.994734][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 75.003553][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.010615][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.026886][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 75.035357][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 75.048595][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 75.057304][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.063402][ T298] r8152-cfgselector 7-1: Unknown version 0x0000 [ 75.064224][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.072098][ T298] r8152-cfgselector 7-1: USB disconnect, device number 2 [ 75.098252][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 75.112380][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 75.121023][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 75.246773][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 75.262849][ T1233] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.270399][ T1233] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.282651][ T24] wacom 0003:056A:0019.0010: Unknown device_type for 'HID 056a:0019'. Assuming pen. [ 75.286374][ T1233] device bridge_slave_0 entered promiscuous mode [ 75.296300][ T24] wacom 0003:056A:0019.0010: hidraw0: USB HID v0.00 Device [HID 056a:0019] on usb-dummy_hcd.3-1/input0 [ 75.308648][ T1233] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.317045][ T1233] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.325212][ T1233] device bridge_slave_1 entered promiscuous mode [ 75.326155][ T24] input: Wacom Bamboo1 Medium Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:056A:0019.0010/input/input15 [ 75.366918][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 75.377734][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 75.386864][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 75.407297][ T1227] device veth0_vlan entered promiscuous mode [ 75.424144][ T767] Bluetooth: hci0: command 0x1003 tx timeout [ 75.433258][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 75.517211][ T1227] device veth1_macvtap entered promiscuous mode [ 75.530200][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.571155][ T383] usb 4-1: USB disconnect, device number 10 [ 75.582724][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.592017][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.619878][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.630098][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.753315][ T24] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 75.847660][ T1245] loop8: detected capacity change from 0 to 2048 [ 75.914373][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 75.922226][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 75.941185][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 75.950434][ T1245] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 75.959888][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 75.983999][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.990938][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.003806][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 76.027714][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 76.039051][ T1227] EXT4-fs (loop8): unmounting filesystem. [ 76.046732][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 76.065257][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 76.074435][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.081345][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.119696][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 76.133538][ T24] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 76.138303][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 76.143805][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.196009][ T24] usb 3-1: config 0 descriptor?? [ 76.201877][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 76.222126][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 76.296367][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 76.314028][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 76.333381][ T356] device bridge_slave_1 left promiscuous mode [ 76.339436][ T356] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.360628][ T356] device bridge_slave_0 left promiscuous mode [ 76.375196][ T356] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.395598][ T356] device veth1_macvtap left promiscuous mode [ 76.401588][ T356] device veth0_vlan left promiscuous mode [ 76.407700][ T28] kauditd_printk_skb: 17 callbacks suppressed [ 76.407731][ T28] audit: type=1400 audit(1732156421.491:286): avc: denied { write } for pid=1256 comm="syz.3.326" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 76.521609][ T1259] syz.3.327[1259] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 76.521783][ T1259] syz.3.327[1259] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 76.815622][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 76.854112][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 76.873903][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 76.888178][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 76.918888][ T1233] device veth0_vlan entered promiscuous mode [ 76.961745][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 76.978193][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 77.007062][ T1233] device veth1_macvtap entered promiscuous mode [ 77.057858][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 77.074636][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 77.085970][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 77.116769][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 77.130726][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 77.158448][ T1270] device pim6reg1 entered promiscuous mode [ 77.234743][ T28] audit: type=1400 audit(1732156422.321:287): avc: denied { mount } for pid=1271 comm="syz.6.333" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 77.272755][ T1272] incfs: ino conflict with backing FS 1 [ 77.286780][ T1272] incfs: Unexpected inode type [ 77.291669][ T28] audit: type=1400 audit(1732156422.351:288): avc: denied { mounton } for pid=1271 comm="syz.6.333" path="/16/file0" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 77.340910][ T28] audit: type=1400 audit(1732156422.361:289): avc: denied { getattr } for pid=1271 comm="syz.6.333" name="/" dev="incremental-fs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 77.354767][ T1274] loop9: detected capacity change from 0 to 8192 [ 77.392882][ T1274] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 77.430140][ T28] audit: type=1400 audit(1732156422.511:290): avc: denied { unmount } for pid=1032 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 77.543443][ T24] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 77.579264][ T24] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 77.603733][ T24] asix: probe of 3-1:0.0 failed with error -71 [ 77.605612][ T1289] loop6: detected capacity change from 0 to 4096 [ 77.625665][ T24] usb 3-1: USB disconnect, device number 9 [ 77.651845][ T1289] EXT4-fs (loop6): Test dummy encryption mode enabled [ 77.673251][ T1289] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 77.706592][ T28] audit: type=1400 audit(1732156422.791:291): avc: denied { watch watch_reads } for pid=1285 comm="syz.6.338" path="/18/file0/file1" dev="loop6" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 77.754233][ T28] audit: type=1400 audit(1732156422.831:292): avc: denied { append } for pid=1295 comm="syz.8.341" name="001" dev="devtmpfs" ino=181 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 77.836611][ T1032] EXT4-fs (loop6): unmounting filesystem. [ 77.899658][ T1301] netlink: 96 bytes leftover after parsing attributes in process `syz.9.344'. [ 77.946914][ T28] audit: type=1400 audit(1732156423.031:293): avc: denied { bind } for pid=1304 comm="syz.9.345" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 77.978424][ T1305] netlink: 16 bytes leftover after parsing attributes in process `syz.9.345'. [ 78.003246][ T28] audit: type=1400 audit(1732156423.061:294): avc: denied { write } for pid=1304 comm="syz.9.345" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 78.027956][ T1303] loop6: detected capacity change from 0 to 8192 [ 78.053778][ T28] audit: type=1400 audit(1732156423.141:295): avc: denied { unlink } for pid=85 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 78.065714][ T1303] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 78.457749][ T1323] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 78.609293][ T1328] Disabled LAPIC found during irq injection [ 78.644898][ T1334] loop3: detected capacity change from 0 to 512 [ 78.667937][ T1334] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 78.725842][ T1334] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 78.740506][ T1334] ext4 filesystem being mounted at /56/file1 supports timestamps until 2038 (0x7fffffff) [ 78.867888][ T296] EXT4-fs (loop3): unmounting filesystem. [ 78.883211][ T24] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 79.152806][ T1338] loop8: detected capacity change from 0 to 40427 [ 79.161075][ T1338] F2FS-fs (loop8): fault_injection options not supported [ 79.171692][ T1338] F2FS-fs (loop8): invalid crc value [ 79.179877][ T1338] F2FS-fs (loop8): Found nat_bits in checkpoint [ 79.273554][ T1355] loop2: detected capacity change from 0 to 1024 [ 79.283654][ T24] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 79.288493][ T1355] EXT4-fs: Ignoring removed nomblk_io_submit option [ 79.318165][ T24] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 79.332543][ T1355] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 79.334142][ T24] usb 10-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 79.394816][ T1338] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 79.438701][ T24] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.451023][ T294] EXT4-fs (loop2): unmounting filesystem. [ 79.469768][ T1364] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 79.475386][ T24] usb 10-1: config 0 descriptor?? [ 79.616084][ T1338] syz.8.358: attempt to access beyond end of device [ 79.616084][ T1338] loop8: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 79.640022][ T1338] syz.8.358: attempt to access beyond end of device [ 79.640022][ T1338] loop8: rw=2049, sector=45104, nr_sectors = 16 limit=40427 [ 79.707570][ T1227] syz-executor: attempt to access beyond end of device [ 79.707570][ T1227] loop8: rw=2049, sector=45120, nr_sectors = 16 limit=40427 [ 79.976729][ T24] hid-thrustmaster 0003:044F:B65D.0011: unknown main item tag 0x0 [ 80.005303][ T24] hid-thrustmaster 0003:044F:B65D.0011: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.9-1/input0 [ 80.030351][ T24] hid-thrustmaster 0003:044F:B65D.0011: Wrong number of endpoints? [ 80.183390][ T24] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 80.211983][ T1395] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1395 comm=syz.6.380 [ 80.225019][ T1395] netlink: 8 bytes leftover after parsing attributes in process `syz.6.380'. [ 80.237812][ T1395] Zero length message leads to an empty skb [ 80.275817][ T389] usb 10-1: USB disconnect, device number 2 [ 80.293208][ C1] hid-thrustmaster 0003:044F:B65D.0011: URB to get model id failed with error -2 [ 80.453370][ T376] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 80.453393][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 80.613458][ T24] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 80.621721][ T24] usb 4-1: config 0 has no interface number 0 [ 80.629661][ T24] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 80.640091][ T24] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 80.650522][ T24] usb 4-1: config 0 interface 41 has no altsetting 0 [ 80.693520][ T376] usb 3-1: Using ep0 maxpacket: 8 [ 80.728091][ T1426] incfs: Backing dir is not set, filesystem can't be mounted. [ 80.735987][ T1426] incfs: mount failed -2 [ 80.801798][ T1430] syz.8.394[1430] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 80.801958][ T1430] syz.8.394[1430] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 80.813729][ T376] usb 3-1: config index 0 descriptor too short (expected 5924, got 36) [ 80.843889][ T376] usb 3-1: config 250 has an invalid interface number: 228 but max is -1 [ 80.852212][ T376] usb 3-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 80.863815][ T24] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 80.877498][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.881882][ T376] usb 3-1: config 250 has no interface number 0 [ 80.892183][ T24] usb 4-1: Product: syz [ 80.900141][ T24] usb 4-1: Manufacturer: syz [ 80.901387][ T376] usb 3-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 80.909162][ T24] usb 4-1: SerialNumber: syz [ 80.931520][ T376] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 80.942707][ T376] usb 3-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 80.944952][ T24] usb 4-1: config 0 descriptor?? [ 80.963019][ T376] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 80.973649][ T376] usb 3-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 80.987774][ T376] usb 3-1: config 250 interface 228 has no altsetting 0 [ 81.003298][ T1384] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 81.016421][ T1384] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 81.113324][ T376] usb 3-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 81.142638][ T376] usb 3-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 81.152742][ T376] usb 3-1: Product: syz [ 81.172506][ T376] usb 3-1: SerialNumber: syz [ 81.206568][ T1443] loop8: detected capacity change from 0 to 1024 [ 81.224519][ T376] hub 3-1:250.228: bad descriptor, ignoring hub [ 81.230660][ T376] hub: probe of 3-1:250.228 failed with error -5 [ 81.244115][ T1443] EXT4-fs: Ignoring removed orlov option [ 81.257241][ T1443] EXT4-fs (loop8): Test dummy encryption mode enabled [ 81.268150][ T1384] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 81.279945][ T1384] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 81.293959][ T1443] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 81.349545][ T1443] fscrypt: AES-256-XTS using blk-crypto-fallback [ 81.444936][ T376] usblp 3-1:250.228: usblp0: USB Bidirectional printer dev 10 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 81.529698][ T1227] EXT4-fs (loop8): unmounting filesystem. [ 81.698899][ T1451] loop9: detected capacity change from 0 to 40427 [ 81.703318][ T28] kauditd_printk_skb: 51 callbacks suppressed [ 81.703363][ T28] audit: type=1400 audit(81.676:347): avc: denied { read write } for pid=1392 comm="syz.2.379" name="lp0" dev="devtmpfs" ino=1049 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 81.756671][ T1451] F2FS-fs (loop9): invalid crc value [ 81.792468][ T1451] F2FS-fs (loop9): Found nat_bits in checkpoint [ 81.816611][ T28] audit: type=1400 audit(81.756:348): avc: denied { open } for pid=1392 comm="syz.2.379" path="/dev/usb/lp0" dev="devtmpfs" ino=1049 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 81.913259][ T1451] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 82.023457][ T24] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 82.070321][ T1459] f2fs_ckpt-7:9: attempt to access beyond end of device [ 82.070321][ T1459] loop9: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 82.233827][ T1393] usb 3-1: reset high-speed USB device number 10 using dummy_hcd [ 82.241545][ T19] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 82.303585][ T24] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 82.321259][ T24] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to power down PHY : -71 [ 82.331410][ T24] CoreChips: probe of 4-1:0.41 failed with error -71 [ 82.350711][ T24] usb 4-1: USB disconnect, device number 11 [ 82.614306][ T19] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 82.641463][ T19] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 82.661910][ T19] usb 9-1: New USB device found, idVendor=1532, idProduct=011d, bcdDevice= 0.00 [ 82.680824][ T19] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.711012][ T19] usb 9-1: config 0 descriptor?? [ 82.874234][ T1393] usb 3-1: failed to restore interface 228 altsetting 255 (error=-71) [ 82.876878][ T1484] netlink: 'syz.9.414': attribute type 4 has an invalid length. [ 82.894071][ T376] usb 3-1: USB disconnect, device number 10 [ 82.902034][ T376] usblp0: removed [ 82.946588][ T1484] netlink: 'syz.9.414': attribute type 4 has an invalid length. [ 82.989927][ T1484] syz.9.414 (1484) used greatest stack depth: 19944 bytes left [ 83.207534][ T19] hid-rmi 0003:1532:011D.0012: hidraw0: USB HID v0.00 Device [HID 1532:011d] on usb-dummy_hcd.8-1/input0 [ 83.274395][ T1491] loop9: detected capacity change from 0 to 40427 [ 83.304055][ T1491] F2FS-fs (loop9): Invalid log_blocksize (268), supports only 12 [ 83.328380][ T1491] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 83.344433][ T1491] F2FS-fs (loop9): Found nat_bits in checkpoint [ 83.390441][ T28] audit: type=1400 audit(83.366:349): avc: denied { ioctl } for pid=1497 comm="syz.6.419" path="socket:[22747]" dev="sockfs" ino=22747 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 83.414518][ T28] audit: type=1400 audit(83.366:350): avc: denied { bind } for pid=1497 comm="syz.6.419" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 83.424129][ T24] usb 9-1: USB disconnect, device number 2 [ 83.436819][ T28] audit: type=1400 audit(83.366:351): avc: denied { read } for pid=1497 comm="syz.6.419" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 83.473218][ T28] audit: type=1400 audit(83.436:352): avc: denied { setopt } for pid=1497 comm="syz.6.419" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 83.516354][ T1491] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0 [ 83.523663][ T1491] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 83.685340][ T1491] syz.9.417: attempt to access beyond end of device [ 83.685340][ T1491] loop9: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 83.733241][ T28] audit: type=1400 audit(83.706:353): avc: denied { read } for pid=1511 comm="syz.6.424" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 83.830483][ T28] audit: type=1400 audit(83.706:354): avc: denied { open } for pid=1511 comm="syz.6.424" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 83.880943][ T1518] loop3: detected capacity change from 0 to 512 [ 83.901355][ T1233] syz-executor: attempt to access beyond end of device [ 83.901355][ T1233] loop9: rw=2051, sector=45096, nr_sectors = 8 limit=40427 [ 83.917516][ T28] audit: type=1400 audit(83.706:355): avc: denied { ioctl } for pid=1511 comm="syz.6.424" path="/dev/binderfs/binder0" dev="binder" ino=4 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 83.942649][ T1233] F2FS-fs (loop9): Issue discard(5637, 5637, 1) failed, ret: -5 [ 83.950159][ T1518] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 83.967921][ T28] audit: type=1400 audit(83.706:356): avc: denied { set_context_mgr } for pid=1511 comm="syz.6.424" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 84.015351][ T1518] EXT4-fs (loop3): 1 truncate cleaned up [ 84.041747][ T1518] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 84.262656][ T296] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2924: inode #18: comm syz-executor: corrupted xattr block 35 [ 84.290857][ T296] EXT4-fs warning (device loop3): ext4_evict_inode:299: xattr delete (err -117) [ 84.316862][ T296] EXT4-fs (loop3): unmounting filesystem. [ 84.603216][ T24] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 84.672242][ T1529] loop8: detected capacity change from 0 to 40427 [ 84.678460][ T1545] netlink: 'syz.9.437': attribute type 4 has an invalid length. [ 84.699101][ T1529] F2FS-fs (loop8): fault_injection options not supported [ 84.707446][ T1529] F2FS-fs (loop8): heap/no_heap options were deprecated [ 84.714935][ T1529] F2FS-fs (loop8): Image doesn't support compression [ 84.723589][ T1529] F2FS-fs (loop8): invalid crc value [ 84.764981][ T1529] F2FS-fs (loop8): Found nat_bits in checkpoint [ 84.784907][ T1549] loop9: detected capacity change from 0 to 512 [ 84.799602][ T1549] EXT4-fs (loop9): mounting ext3 file system using the ext4 subsystem [ 84.809801][ T1549] EXT4-fs (loop9): invalid journal inode [ 84.821686][ T1549] EXT4-fs (loop9): can't get journal size [ 84.830803][ T1549] EXT4-fs (loop9): 1 truncate cleaned up [ 84.836860][ T1549] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 84.881435][ T1529] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 84.949402][ T1233] EXT4-fs (loop9): unmounting filesystem. [ 84.981055][ T1529] syz.8.432: attempt to access beyond end of device [ 84.981055][ T1529] loop8: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 84.995011][ T24] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 85.013747][ T24] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 85.022793][ T24] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 85.243454][ T24] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 85.251626][ T1563] loop9: detected capacity change from 0 to 512 [ 85.272848][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.282255][ T24] usb 3-1: Product: syz [ 85.298291][ T24] usb 3-1: Manufacturer: syz [ 85.302784][ T24] usb 3-1: SerialNumber: syz [ 85.335861][ T1563] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 85.436253][ T1233] EXT4-fs (loop9): unmounting filesystem. [ 85.452916][ T1227] syz-executor: attempt to access beyond end of device [ 85.452916][ T1227] loop8: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 85.516097][ T1571] SELinux: failed to load policy [ 85.583369][ T44] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 85.877066][ T1585] serio: Serial port ptm0 [ 85.974089][ T24] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found [ 85.981115][ T44] usb 4-1: config 1 interface 0 has no altsetting 0 [ 86.000857][ T24] cdc_ncm 3-1:1.0: bind() failure [ 86.010765][ T24] usb 3-1: USB disconnect, device number 11 [ 86.043474][ T383] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 86.086797][ T8] Bluetooth: hci0: Frame reassembly failed (-84) [ 86.173486][ T44] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 86.189130][ T44] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.198048][ T44] usb 4-1: Product: syz [ 86.202099][ T44] usb 4-1: Manufacturer: syz [ 86.206607][ T44] usb 4-1: SerialNumber: syz [ 86.603304][ T383] usb 7-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 86.619160][ T383] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.633204][ T383] usb 7-1: Product: syz [ 86.642719][ T383] usb 7-1: Manufacturer: syz [ 86.653257][ T383] usb 7-1: SerialNumber: syz [ 86.663872][ T383] r8152-cfgselector 7-1: config 0 descriptor?? [ 86.828319][ T1612] loop8: detected capacity change from 0 to 40427 [ 86.839600][ T1622] loop2: detected capacity change from 0 to 8192 [ 86.847184][ T1612] F2FS-fs (loop8): Invalid log_blocksize (268), supports only 12 [ 86.855406][ T1612] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 86.866655][ T1612] F2FS-fs (loop8): invalid crc value [ 86.879118][ T1612] F2FS-fs (loop8): Found nat_bits in checkpoint [ 86.895312][ T44] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 12 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 86.933282][ T383] r8152-cfgselector 7-1: Unknown version 0x0000 [ 86.973579][ T383] r8152-cfgselector 7-1: Unknown version 0x0000 [ 86.979943][ T383] r8152-cfgselector 7-1: bad CDC descriptors [ 87.025624][ T1612] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0 [ 87.032679][ T1612] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 87.043875][ T356] usb 7-1: config 0 descriptor?? [ 87.100637][ T383] usb 4-1: USB disconnect, device number 12 [ 87.108254][ T383] usblp0: removed [ 87.129287][ T8] F2FS-fs (loop8): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 87.139452][ T8] F2FS-fs (loop8): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 87.250952][ T376] usb 7-1: USB disconnect, device number 3 [ 87.253311][ T356] usb 7-1: can't set config #0, error -71 [ 87.493242][ T24] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 87.634131][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 87.634162][ T28] audit: type=1326 audit(87.616:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1636 comm="syz.3.473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c0d97e819 code=0x7ffc0000 [ 87.663197][ T28] audit: type=1326 audit(87.616:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1636 comm="syz.3.473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c0d97e819 code=0x7ffc0000 [ 87.687100][ T383] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 87.694976][ T28] audit: type=1326 audit(87.616:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1636 comm="syz.3.473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7c0d97e819 code=0x7ffc0000 [ 87.719320][ T28] audit: type=1326 audit(87.616:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1636 comm="syz.3.473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c0d97e819 code=0x7ffc0000 [ 87.742648][ T28] audit: type=1326 audit(87.616:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1636 comm="syz.3.473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c0d97e819 code=0x7ffc0000 [ 87.770116][ T28] audit: type=1326 audit(87.616:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1636 comm="syz.3.473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7c0d97e819 code=0x7ffc0000 [ 87.773716][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 87.798829][ T28] audit: type=1326 audit(87.616:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1636 comm="syz.3.473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c0d97e819 code=0x7ffc0000 [ 87.850256][ T28] audit: type=1326 audit(87.616:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1636 comm="syz.3.473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c0d97e819 code=0x7ffc0000 [ 87.896481][ T28] audit: type=1326 audit(87.616:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1636 comm="syz.3.473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7c0d97e819 code=0x7ffc0000 [ 87.919759][ T28] audit: type=1326 audit(87.666:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1636 comm="syz.3.473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c0d97e819 code=0x7ffc0000 [ 87.952503][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 87.974102][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 87.984079][ T24] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 88.004081][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.021486][ T24] usb 3-1: config 0 descriptor?? [ 88.030184][ T1650] netlink: 12 bytes leftover after parsing attributes in process `syz.6.479'. [ 88.041932][ T1650] netlink: 12 bytes leftover after parsing attributes in process `syz.6.479'. [ 88.083788][ T24] hub 3-1:0.0: USB hub found [ 88.093279][ T383] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 88.111716][ T383] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 88.123528][ T383] usb 9-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00 [ 88.132447][ T383] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.149332][ T383] usb 9-1: config 0 descriptor?? [ 88.154404][ T769] Bluetooth: hci0: command 0x1003 tx timeout [ 88.160293][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 88.293314][ T24] hub 3-1:0.0: 1 port detected [ 88.353228][ T19] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 88.676120][ T383] magicmouse 0003:05AC:0269.0013: item fetching failed at offset 3/7 [ 88.684541][ T383] magicmouse 0003:05AC:0269.0013: magicmouse hid parse failed [ 88.691886][ T383] magicmouse: probe of 0003:05AC:0269.0013 failed with error -22 [ 88.713487][ T19] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 88.724539][ T19] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 88.734316][ T19] usb 7-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 88.743294][ T19] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.752830][ T19] usb 7-1: config 0 descriptor?? [ 88.843258][ T383] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 88.877183][ T24] usb 9-1: USB disconnect, device number 3 [ 89.019867][ T389] usb 3-1: USB disconnect, device number 12 [ 89.026299][ T387] hub 3-1:0.0: hub_ext_port_status failed (err = -71) [ 89.093241][ T383] usb 4-1: Using ep0 maxpacket: 8 [ 89.213316][ T383] usb 4-1: config index 0 descriptor too short (expected 5924, got 36) [ 89.221727][ T383] usb 4-1: config 250 has an invalid interface number: 228 but max is -1 [ 89.230400][ T383] usb 4-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 89.239980][ T383] usb 4-1: config 250 has no interface number 0 [ 89.246195][ T383] usb 4-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 89.257966][ T383] usb 4-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 89.268402][ T383] usb 4-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 89.279078][ T383] usb 4-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 89.289615][ T383] usb 4-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 89.295321][ T19] hid-steam 0003:28DE:1142.0014: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.6-1/input0 [ 89.303632][ T383] usb 4-1: config 250 interface 228 has no altsetting 0 [ 89.443493][ T383] usb 4-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 89.452444][ T383] usb 4-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 89.461185][ T383] usb 4-1: Product: syz [ 89.465262][ T383] usb 4-1: SerialNumber: syz [ 89.524786][ T383] hub 4-1:250.228: bad descriptor, ignoring hub [ 89.535068][ T383] hub: probe of 4-1:250.228 failed with error -5 [ 89.553266][ T19] usb 7-1: USB disconnect, device number 4 [ 89.720150][ T1676] loop2: detected capacity change from 0 to 512 [ 89.729495][ T383] usblp 4-1:250.228: usblp0: USB Bidirectional printer dev 13 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 89.757584][ T1676] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 89.791446][ T1676] EXT4-fs (loop2): 1 truncate cleaned up [ 89.797693][ T1676] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 89.844393][ T294] EXT4-fs (loop2): unmounting filesystem. [ 90.182465][ T19] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 90.197395][ T1689] loop8: detected capacity change from 0 to 1024 [ 90.204640][ T1689] EXT4-fs: Ignoring removed nobh option [ 90.210127][ T1689] EXT4-fs: Ignoring removed orlov option [ 90.226114][ T1689] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 90.264150][ T1227] EXT4-fs (loop8): unmounting filesystem. [ 90.354725][ T1696] 9pnet: p9_errstr2errno: server reported unknown error è½FcÇgåKIeÎÿB$ [ 90.383335][ T672] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 90.435141][ T1698] kvm: pic: non byte read [ 90.543341][ T19] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 90.552226][ T19] usb 3-1: config 1 has no interface number 0 [ 90.558215][ T19] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 90.569119][ T19] usb 3-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 90.733398][ T19] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 90.742419][ T19] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.750305][ T19] usb 3-1: Product: syz [ 90.753877][ T1667] usb 4-1: reset high-speed USB device number 13 using dummy_hcd [ 90.754559][ T672] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 90.771862][ T19] usb 3-1: Manufacturer: syz [ 90.776828][ T19] usb 3-1: SerialNumber: syz [ 90.782074][ T672] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 90.863471][ T672] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 90.878891][ T672] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 90.888269][ T672] usb 7-1: SerialNumber: syz [ 90.896198][ T1704] loop9: detected capacity change from 0 to 1024 [ 90.903732][ T1704] EXT4-fs: Ignoring removed nobh option [ 90.910375][ T1704] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 90.925894][ T1704] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 90.966549][ T1233] EXT4-fs (loop9): unmounting filesystem. [ 91.053369][ T1667] usb 4-1: device firmware changed [ 91.058839][ T376] usb 4-1: USB disconnect, device number 13 [ 91.066716][ T376] usblp0: removed [ 91.175354][ T672] usb 7-1: 0:2 : does not exist [ 91.189658][ T672] usb 7-1: USB disconnect, device number 5 [ 91.213205][ T376] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 91.273339][ T383] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 91.453195][ T376] usb 4-1: Using ep0 maxpacket: 8 [ 91.573293][ T376] usb 4-1: unable to get BOS descriptor or descriptor too short [ 91.581100][ T376] usb 4-1: no configurations [ 91.586427][ T376] usb 4-1: can't read configurations, error -22 [ 91.683559][ T383] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 91.703625][ T383] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 91.705300][ T19] cdc_ncm 3-1:1.1: bind() failure [ 91.718886][ T383] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 91.742199][ T383] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 91.773252][ T383] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.783262][ T383] usb 10-1: config 0 descriptor?? [ 91.981433][ T672] usb 3-1: USB disconnect, device number 13 [ 92.276107][ T383] plantronics 0003:047F:FFFF.0015: No inputs registered, leaving [ 92.287307][ T383] plantronics 0003:047F:FFFF.0015: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0 [ 92.293930][ T19] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 92.453252][ T318] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 92.483219][ T376] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 92.813357][ T318] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 92.824699][ T19] usb 9-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 92.834047][ T318] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 92.843917][ T28] kauditd_printk_skb: 54 callbacks suppressed [ 92.843949][ T28] audit: type=1400 audit(92.816:427): avc: denied { relabelfrom } for pid=1753 comm="syz.2.520" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 92.869073][ T376] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 92.870825][ T28] audit: type=1400 audit(92.816:428): avc: denied { relabelto } for pid=1753 comm="syz.2.520" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 92.880039][ T19] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.880099][ T19] usb 9-1: Product: syz [ 92.880137][ T19] usb 9-1: Manufacturer: syz [ 92.880177][ T19] usb 9-1: SerialNumber: syz [ 92.881128][ T376] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 92.930517][ T19] r8152-cfgselector 9-1: config 0 descriptor?? [ 92.936975][ T318] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 92.946121][ T318] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.954745][ T376] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 92.968111][ T318] usb 7-1: config 0 descriptor?? [ 92.973071][ T376] usb 4-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 92.982061][ T376] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.995845][ T376] usb 4-1: config 0 descriptor?? [ 93.016916][ T28] audit: type=1400 audit(92.996:429): avc: denied { create } for pid=1755 comm="syz.2.521" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 93.037677][ T28] audit: type=1400 audit(92.996:430): avc: denied { bind } for pid=1755 comm="syz.2.521" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 93.056862][ T28] audit: type=1400 audit(92.996:431): avc: denied { write } for pid=1755 comm="syz.2.521" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 93.123791][ T1760] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.132226][ T1760] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.171175][ T28] audit: type=1400 audit(93.146:432): avc: denied { ioctl } for pid=1759 comm="syz.2.523" path="socket:[23650]" dev="sockfs" ino=23650 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 93.212318][ T28] audit: type=1400 audit(93.186:433): avc: denied { setopt } for pid=1761 comm="syz.2.524" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 93.443596][ T19] r8152-cfgselector 9-1: Unknown version 0x0000 [ 93.449974][ T19] r8152-cfgselector 9-1: bad CDC descriptors [ 93.456180][ T1772] netlink: 96 bytes leftover after parsing attributes in process `syz.2.529'. [ 93.462595][ T318] pyra 0003:1E7D:2CF6.0016: hidraw1: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.6-1/input0 [ 93.483306][ T376] acrux 0003:1A34:0802.0017: hidraw2: USB HID v0.00 Device [HID 1a34:0802] on usb-dummy_hcd.3-1/input0 [ 93.495056][ T19] r8152-cfgselector 9-1: Unknown version 0x0000 [ 93.505013][ T19] r8152-cfgselector 9-1: USB disconnect, device number 4 [ 93.514890][ T376] acrux 0003:1A34:0802.0017: no inputs found [ 93.523777][ T376] acrux 0003:1A34:0802.0017: Failed to enable force feedback support, error: -19 [ 93.717497][ T28] audit: type=1400 audit(93.696:434): avc: denied { create } for pid=1776 comm="syz.2.531" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 93.736712][ T28] audit: type=1400 audit(93.696:435): avc: denied { bind } for pid=1776 comm="syz.2.531" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 93.759204][ T28] audit: type=1400 audit(93.696:436): avc: denied { listen } for pid=1776 comm="syz.2.531" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 93.873351][ T318] pyra 0003:1E7D:2CF6.0016: couldn't init struct pyra_device [ 93.880961][ T318] pyra 0003:1E7D:2CF6.0016: couldn't install mouse [ 93.890696][ T318] pyra: probe of 0003:1E7D:2CF6.0016 failed with error -71 [ 93.907530][ T318] usb 7-1: USB disconnect, device number 6 [ 94.246104][ T1809] loop8: detected capacity change from 0 to 512 [ 94.298793][ T1809] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 94.397233][ T1227] EXT4-fs (loop8): unmounting filesystem. [ 94.437710][ T383] usb 10-1: USB disconnect, device number 3 [ 94.557212][ T1825] loop8: detected capacity change from 0 to 256 [ 94.590598][ T1825] exfat: Deprecated parameter 'utf8' [ 94.601135][ T1828] netlink: 20 bytes leftover after parsing attributes in process `syz.6.551'. [ 94.613370][ T1825] exfat: Deprecated parameter 'utf8' [ 94.638036][ T1825] exFAT-fs (loop8): failed to load upcase table (idx : 0x00011ded, chksum : 0x9858084d, utbl_chksum : 0xe619d30d) [ 94.773221][ T672] usb 4-1: reset high-speed USB device number 15 using dummy_hcd [ 94.847728][ T1835] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 94.867733][ T1835] SELinux: failed to load policy [ 95.102201][ T1851] process 'syz.8.562' launched '/dev/fd/-1/./file1' with NULL argv: empty string added [ 95.104686][ T1853] loop6: detected capacity change from 0 to 512 [ 95.133248][ T24] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 95.133624][ T1853] EXT4-fs error (device loop6): ext4_clear_blocks:883: inode #13: comm syz.6.563: attempt to clear invalid blocks 2 len 1 [ 95.174125][ T1853] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 216 vs 220 free clusters [ 95.212631][ T1853] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #13: comm syz.6.563: invalid indirect mapped block 1819239214 (level 0) [ 95.228107][ T1853] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #13: comm syz.6.563: invalid indirect mapped block 1819239214 (level 1) [ 95.243980][ T1853] EXT4-fs (loop6): 1 truncate cleaned up [ 95.249489][ T1853] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 95.347715][ T357] printk: udevd: 228 output lines suppressed due to ratelimiting [ 95.393245][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 95.434968][ T1853] EXT4-fs (loop6): shut down requested (0) [ 95.473601][ T389] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 95.491546][ T1032] EXT4-fs (loop6): unmounting filesystem. [ 95.693330][ T24] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 95.702486][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.716910][ T24] usb 3-1: Product: syz [ 95.720941][ T24] usb 3-1: Manufacturer: syz [ 95.725904][ T389] usb 10-1: Using ep0 maxpacket: 16 [ 95.731213][ T24] usb 3-1: SerialNumber: syz [ 95.737613][ T24] usb 3-1: config 0 descriptor?? [ 95.774637][ T24] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 95.782504][ T24] usb 3-1: Detected FT-X [ 95.845348][ T1892] netlink: 'syz.6.580': attribute type 11 has an invalid length. [ 95.853335][ T389] usb 10-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 95.864298][ T389] usb 10-1: config 0 interface 0 has no altsetting 0 [ 95.870893][ T389] usb 10-1: New USB device found, idVendor=046d, idProduct=c517, bcdDevice= 0.00 [ 95.880206][ T389] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.888506][ T387] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 95.900597][ T389] usb 10-1: config 0 descriptor?? [ 95.902736][ T1894] netlink: 28 bytes leftover after parsing attributes in process `syz.6.581'. [ 95.963786][ T318] usb 4-1: USB disconnect, device number 15 [ 95.993830][ T24] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 96.123222][ T318] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 96.142531][ T1903] netlink: 8 bytes leftover after parsing attributes in process `syz.6.585'. [ 96.210830][ T383] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 96.218272][ T383] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 96.225638][ T383] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 96.232877][ T383] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 96.240739][ T383] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 96.248407][ T383] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 96.256027][ T383] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 96.263366][ T383] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 96.270652][ T383] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 96.277971][ T387] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 96.288765][ T383] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 96.295957][ T387] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 96.305592][ T383] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 96.312838][ T383] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 96.320101][ T387] usb 9-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 96.329230][ T383] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 96.336440][ T387] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.344445][ T383] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 96.351687][ T383] hid-generic 0000:0000:0000.0018: item fetching failed at offset 20/43 [ 96.364048][ T389] logitech-djreceiver 0003:046D:C517.0019: hidraw0: USB HID v0.05 Device [HID 046d:c517] on usb-dummy_hcd.9-1/input0 [ 96.377326][ T383] hid-generic: probe of 0000:0000:0000.0018 failed with error -22 [ 96.386054][ T387] usb 9-1: config 0 descriptor?? [ 96.483402][ T318] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 96.494333][ T318] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 96.503370][ T24] ftdi_sio 3-1:0.0: GPIO initialisation failed: -71 [ 96.512354][ T24] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 96.521606][ T24] usb 3-1: USB disconnect, device number 14 [ 96.528852][ T24] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 96.538310][ T24] ftdi_sio 3-1:0.0: device disconnected [ 96.564446][ T389] usb 10-1: USB disconnect, device number 4 [ 96.663331][ T318] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 96.672458][ T318] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.680843][ T318] usb 4-1: Product: syz [ 96.685269][ T318] usb 4-1: Manufacturer: syz [ 96.689891][ T318] usb 4-1: SerialNumber: syz [ 96.865388][ T387] hid-thrustmaster 0003:044F:B65D.001A: unknown main item tag 0x0 [ 96.879053][ T387] hid-thrustmaster 0003:044F:B65D.001A: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.8-1/input0 [ 96.891555][ T387] hid-thrustmaster 0003:044F:B65D.001A: Wrong number of endpoints? [ 96.891562][ T1917] loop6: detected capacity change from 0 to 40427 [ 96.894190][ T1917] F2FS-fs (loop6): invalid crc value [ 96.914482][ T1917] F2FS-fs (loop6): Found nat_bits in checkpoint [ 96.946320][ T1877] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 97.011412][ T1917] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4 [ 97.150498][ T6] usb 9-1: USB disconnect, device number 5 [ 97.163181][ C1] hid-thrustmaster 0003:044F:B65D.001A: URB to get model id failed with error -2 [ 97.261593][ T1934] loop9: detected capacity change from 0 to 2048 [ 97.277174][ T1934] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 97.291532][ T1934] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 97.311041][ T1934] EXT4-fs (loop9): Delayed block allocation failed for inode 13 at logical offset 65537 with max blocks 1 with error 28 [ 97.323787][ T1934] EXT4-fs (loop9): This should not happen!! Data will be lost [ 97.323787][ T1934] [ 97.333526][ T1934] EXT4-fs (loop9): Total free blocks count 0 [ 97.339542][ T1934] EXT4-fs (loop9): Free/Dirty block details [ 97.345917][ T1934] EXT4-fs (loop9): free_blocks=66060304 [ 97.351446][ T1934] EXT4-fs (loop9): dirty_blocks=16 [ 97.356912][ T1934] EXT4-fs (loop9): Block reservation details [ 97.362909][ T1934] EXT4-fs (loop9): i_reserved_data_blocks=1 [ 97.391621][ T1233] EXT4-fs (loop9): unmounting filesystem. [ 97.540419][ T1949] loop9: detected capacity change from 0 to 512 [ 97.556815][ T1949] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 97.599044][ T1233] EXT4-fs (loop9): unmounting filesystem. [ 97.604964][ T1877] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 97.711922][ T6] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 97.719916][ T6] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 97.727714][ T6] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 97.732560][ T1943] loop2: detected capacity change from 0 to 40427 [ 97.735311][ T6] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 97.743508][ T1943] F2FS-fs (loop2): fault_injection options not supported [ 97.748981][ T6] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 97.755837][ T1943] F2FS-fs (loop2): Image doesn't support compression [ 97.762707][ T6] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 97.769678][ T1943] F2FS-fs (loop2): Image doesn't support compression [ 97.776483][ T6] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 97.783301][ T1943] F2FS-fs (loop2): fault_type options not supported [ 97.790354][ T6] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 97.799040][ T1943] F2FS-fs (loop2): invalid crc value [ 97.804269][ T6] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 97.811743][ T1943] F2FS-fs (loop2): Found nat_bits in checkpoint [ 97.816731][ T6] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 97.829843][ T318] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 97.836368][ T318] cdc_ncm 4-1:1.0: setting tx_max = 184 [ 97.842054][ T6] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 97.849933][ T6] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 97.857687][ T6] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 97.865189][ T6] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 97.883212][ T6] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 97.900818][ T6] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 97.916272][ T6] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 97.924195][ T6] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 97.931726][ T6] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 97.940230][ T6] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 97.948288][ T6] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 97.949012][ T1943] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 97.970173][ T6] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 97.984383][ T6] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 97.997679][ T6] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 98.005593][ T6] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 98.017949][ T6] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 98.022122][ T28] kauditd_printk_skb: 81 callbacks suppressed [ 98.022157][ T28] audit: type=1400 audit(97.996:518): avc: denied { append } for pid=1942 comm="syz.2.599" path="/125/bus/memory.events" dev="loop2" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 98.026457][ T6] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 98.035628][ T28] audit: type=1400 audit(98.006:519): avc: denied { map } for pid=1942 comm="syz.2.599" path="/125/bus/memory.events" dev="loop2" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 98.059667][ T318] cdc_ncm 4-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 98.114772][ T28] audit: type=1400 audit(98.006:520): avc: denied { ioctl } for pid=1942 comm="syz.2.599" path="/125/bus/bus" dev="loop2" ino=10 ioctlcmd=0x9432 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 98.124012][ T6] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 98.148669][ T294] syz-executor: attempt to access beyond end of device [ 98.148669][ T294] loop2: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 98.149302][ T318] usb 4-1: USB disconnect, device number 16 [ 98.169007][ T6] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 98.177021][ T6] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 98.213392][ T318] cdc_ncm 4-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM (NO ZLP) [ 98.232651][ T6] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 98.243626][ T6] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 98.250901][ T6] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 98.283224][ T6] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 98.290724][ T6] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 98.298733][ T6] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 98.306485][ T6] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 98.317208][ T6] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 98.326039][ T6] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 98.333362][ T6] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 98.343224][ T6] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 98.350648][ T6] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 98.359040][ T6] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 98.370286][ T1972] netem: change failed [ 98.370698][ T376] ================================================================== [ 98.382187][ T376] BUG: KASAN: use-after-free in __list_del_entry_valid+0xa6/0x130 [ 98.389821][ T376] Read of size 8 at addr ffff88811be5acf0 by task kworker/0:4/376 [ 98.397637][ T376] [ 98.399817][ T376] CPU: 0 PID: 376 Comm: kworker/0:4 Tainted: G W 6.1.112-syzkaller-00026-g51bee181735e #0 [ 98.410915][ T376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 98.420934][ T376] Workqueue: events release_one_tty [ 98.426043][ T376] Call Trace: [ 98.429177][ T376] [ 98.431961][ T376] dump_stack_lvl+0x151/0x1b7 [ 98.436476][ T376] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 98.441754][ T376] ? _printk+0xd1/0x111 [ 98.445752][ T376] ? __virt_addr_valid+0x242/0x2f0 [ 98.450922][ T376] print_report+0x158/0x4e0 [ 98.455337][ T376] ? __virt_addr_valid+0x242/0x2f0 [ 98.460284][ T376] ? kasan_complete_mode_report_info+0x90/0x1b0 [ 98.466361][ T376] ? __list_del_entry_valid+0xa6/0x130 [ 98.471654][ T376] kasan_report+0x13c/0x170 [ 98.476005][ T376] ? __list_del_entry_valid+0xa6/0x130 [ 98.481306][ T376] __asan_report_load8_noabort+0x14/0x20 [ 98.486755][ T376] __list_del_entry_valid+0xa6/0x130 [ 98.491882][ T376] process_one_work+0x4d7/0xcb0 [ 98.496577][ T376] worker_thread+0xa60/0x1260 [ 98.501114][ T376] kthread+0x26d/0x300 [ 98.504980][ T376] ? worker_clr_flags+0x1a0/0x1a0 [ 98.509844][ T376] ? kthread_blkcg+0xd0/0xd0 [ 98.514273][ T376] ret_from_fork+0x1f/0x30 [ 98.518535][ T376] [ 98.521406][ T376] [ 98.523559][ T376] Allocated by task 318: [ 98.527642][ T376] kasan_set_track+0x4b/0x70 [ 98.532065][ T376] kasan_save_alloc_info+0x1f/0x30 [ 98.537019][ T376] __kasan_kmalloc+0x9c/0xb0 [ 98.541437][ T376] __kmalloc_node+0xb4/0x1e0 [ 98.545874][ T376] kvmalloc_node+0x221/0x640 [ 98.550543][ T376] alloc_netdev_mqs+0x8c/0xf90 [ 98.555194][ T376] alloc_etherdev_mqs+0x36/0x40 [ 98.559881][ T376] usbnet_probe+0x210/0x2850 [ 98.564341][ T376] usb_probe_interface+0x5b6/0xa90 [ 98.569254][ T376] really_probe+0x2b8/0x920 [ 98.573616][ T376] __driver_probe_device+0x1a0/0x310 [ 98.578816][ T376] driver_probe_device+0x54/0x3d0 [ 98.583792][ T376] __device_attach_driver+0x2e3/0x490 [ 98.588977][ T376] bus_for_each_drv+0x183/0x200 [ 98.593655][ T376] __device_attach+0x312/0x510 [ 98.598430][ T376] device_initial_probe+0x1a/0x20 [ 98.603228][ T376] bus_probe_device+0xbe/0x1e0 [ 98.607828][ T376] device_add+0xb60/0xf10 [ 98.611995][ T376] usb_set_configuration+0x190f/0x1e80 [ 98.617288][ T376] usb_generic_driver_probe+0x8b/0x150 [ 98.622670][ T376] usb_probe_device+0x144/0x260 [ 98.627365][ T376] really_probe+0x2b8/0x920 [ 98.631712][ T376] __driver_probe_device+0x1a0/0x310 [ 98.636854][ T376] driver_probe_device+0x54/0x3d0 [ 98.641679][ T376] __device_attach_driver+0x2e3/0x490 [ 98.646901][ T376] bus_for_each_drv+0x183/0x200 [ 98.651589][ T376] __device_attach+0x312/0x510 [ 98.656187][ T376] device_initial_probe+0x1a/0x20 [ 98.661212][ T376] bus_probe_device+0xbe/0x1e0 [ 98.665842][ T376] device_add+0xb60/0xf10 [ 98.670067][ T376] usb_new_device+0xf2f/0x1820 [ 98.674667][ T376] hub_event+0x2db1/0x4830 [ 98.678923][ T376] process_one_work+0x73d/0xcb0 [ 98.683607][ T376] worker_thread+0xa60/0x1260 [ 98.688118][ T376] kthread+0x26d/0x300 [ 98.692030][ T376] ret_from_fork+0x1f/0x30 [ 98.696285][ T376] [ 98.698470][ T376] Freed by task 318: [ 98.702179][ T376] kasan_set_track+0x4b/0x70 [ 98.706621][ T376] kasan_save_free_info+0x2b/0x40 [ 98.711471][ T376] ____kasan_slab_free+0x131/0x180 [ 98.716419][ T376] __kasan_slab_free+0x11/0x20 [ 98.721065][ T376] __kmem_cache_free+0x21d/0x410 [ 98.725789][ T376] kfree+0x7a/0xf0 [ 98.729350][ T376] kvfree+0x35/0x40 [ 98.732993][ T376] netdev_freemem+0x3f/0x60 [ 98.737337][ T376] netdev_release+0x7f/0xb0 [ 98.741699][ T376] device_release+0x95/0x1c0 [ 98.746102][ T376] kobject_put+0x178/0x260 [ 98.750459][ T376] put_device+0x1f/0x30 [ 98.754438][ T376] free_netdev+0x393/0x480 [ 98.758701][ T376] usbnet_disconnect+0x245/0x390 [ 98.763462][ T376] usb_unbind_interface+0x1fa/0x8c0 [ 98.768510][ T376] device_release_driver_internal+0x53e/0x870 [ 98.774404][ T376] device_release_driver+0x19/0x20 [ 98.779347][ T376] bus_remove_device+0x2fa/0x360 [ 98.784118][ T376] device_del+0x663/0xe90 [ 98.788288][ T376] usb_disable_device+0x380/0x720 [ 98.793148][ T376] usb_disconnect+0x32a/0x890 [ 98.797662][ T376] hub_event+0x1ed8/0x4830 [ 98.801915][ T376] process_one_work+0x73d/0xcb0 [ 98.806602][ T376] worker_thread+0xd71/0x1260 [ 98.811120][ T376] kthread+0x26d/0x300 [ 98.815021][ T376] ret_from_fork+0x1f/0x30 [ 98.819276][ T376] [ 98.821450][ T376] Last potentially related work creation: [ 98.827003][ T376] kasan_save_stack+0x3b/0x60 [ 98.831514][ T376] __kasan_record_aux_stack+0xb4/0xc0 [ 98.836719][ T376] kasan_record_aux_stack_noalloc+0xb/0x10 [ 98.842371][ T376] insert_work+0x56/0x310 [ 98.846730][ T376] __queue_work+0x9b6/0xd70 [ 98.851066][ T376] queue_work_on+0x105/0x170 [ 98.855489][ T376] usbnet_link_change+0xeb/0x100 [ 98.860270][ T376] usbnet_probe+0x1e2c/0x2850 [ 98.864773][ T376] usb_probe_interface+0x5b6/0xa90 [ 98.869734][ T376] really_probe+0x2b8/0x920 [ 98.874152][ T376] __driver_probe_device+0x1a0/0x310 [ 98.879272][ T376] driver_probe_device+0x54/0x3d0 [ 98.884168][ T376] __device_attach_driver+0x2e3/0x490 [ 98.889346][ T376] bus_for_each_drv+0x183/0x200 [ 98.894040][ T376] __device_attach+0x312/0x510 [ 98.898630][ T376] device_initial_probe+0x1a/0x20 [ 98.903579][ T376] bus_probe_device+0xbe/0x1e0 [ 98.908174][ T376] device_add+0xb60/0xf10 [ 98.912355][ T376] usb_set_configuration+0x190f/0x1e80 [ 98.917642][ T376] usb_generic_driver_probe+0x8b/0x150 [ 98.922930][ T376] usb_probe_device+0x144/0x260 [ 98.927615][ T376] really_probe+0x2b8/0x920 [ 98.931960][ T376] __driver_probe_device+0x1a0/0x310 [ 98.937079][ T376] driver_probe_device+0x54/0x3d0 [ 98.941944][ T376] __device_attach_driver+0x2e3/0x490 [ 98.947154][ T376] bus_for_each_drv+0x183/0x200 [ 98.951834][ T376] __device_attach+0x312/0x510 [ 98.956436][ T376] device_initial_probe+0x1a/0x20 [ 98.961294][ T376] bus_probe_device+0xbe/0x1e0 [ 98.965901][ T376] device_add+0xb60/0xf10 [ 98.970065][ T376] usb_new_device+0xf2f/0x1820 [ 98.974670][ T376] hub_event+0x2db1/0x4830 [ 98.978914][ T376] process_one_work+0x73d/0xcb0 [ 98.983604][ T376] worker_thread+0xa60/0x1260 [ 98.988119][ T376] kthread+0x26d/0x300 [ 98.992026][ T376] ret_from_fork+0x1f/0x30 [ 98.996283][ T376] [ 98.998462][ T376] The buggy address belongs to the object at ffff88811be5a000 [ 98.998462][ T376] which belongs to the cache kmalloc-4k of size 4096 [ 99.012468][ T376] The buggy address is located 3312 bytes inside of [ 99.012468][ T376] 4096-byte region [ffff88811be5a000, ffff88811be5b000) [ 99.025723][ T376] [ 99.027905][ T376] The buggy address belongs to the physical page: [ 99.034144][ T376] page:ffffea00046f9600 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x11be58 [ 99.044210][ T376] head:ffffea00046f9600 order:3 compound_mapcount:0 compound_pincount:0 [ 99.052370][ T376] flags: 0x4000000000010200(slab|head|zone=1) [ 99.058298][ T376] raw: 4000000000010200 dead000000000100 dead000000000122 ffff888100043380 [ 99.066708][ T376] raw: 0000000000000000 0000000000040004 00000001ffffffff 0000000000000000 [ 99.075546][ T376] page dumped because: kasan: bad access detected [ 99.081809][ T376] page_owner tracks the page as allocated [ 99.087353][ T376] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d2000(__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 44, tgid 44 (kworker/1:1), ts 42134076611, free_ts 41947280965 [ 99.108044][ T376] post_alloc_hook+0x213/0x220 [ 99.112605][ T376] prep_new_page+0x1b/0x110 [ 99.116946][ T376] get_page_from_freelist+0x2980/0x2a10 [ 99.122329][ T376] __alloc_pages+0x234/0x610 [ 99.126849][ T376] alloc_slab_page+0x6c/0xf0 [ 99.131267][ T376] new_slab+0x90/0x3e0 [ 99.135174][ T376] ___slab_alloc+0x6f9/0xb80 [ 99.139601][ T376] __slab_alloc+0x5d/0xa0 [ 99.143767][ T376] __kmem_cache_alloc_node+0x207/0x2a0 [ 99.149064][ T376] kmalloc_trace+0x2a/0xa0 [ 99.153315][ T376] kobject_uevent_env+0x262/0x720 [ 99.158179][ T376] kobject_uevent+0x1f/0x30 [ 99.162517][ T376] device_del+0xcbd/0xe90 [ 99.166683][ T376] device_destroy+0xb1/0x110 [ 99.171110][ T376] usb_deregister_dev+0x8e/0x280 [ 99.175884][ T376] hiddev_disconnect+0x87/0x180 [ 99.180573][ T376] page last free stack trace: [ 99.185110][ T376] free_unref_page_prepare+0x83d/0x850 [ 99.190382][ T376] free_unref_page+0xb2/0x5c0 [ 99.194979][ T376] __free_pages+0x61/0xf0 [ 99.199145][ T376] __free_slab+0xce/0x1a0 [ 99.203313][ T376] __unfreeze_partials+0x165/0x1a0 [ 99.208261][ T376] put_cpu_partial+0xa9/0x100 [ 99.212774][ T376] __slab_free+0x1c8/0x280 [ 99.217060][ T376] ___cache_free+0xc6/0xd0 [ 99.221290][ T376] qlist_free_all+0xc5/0x140 [ 99.225707][ T376] kasan_quarantine_reduce+0x15a/0x180 [ 99.231020][ T376] __kasan_slab_alloc+0x24/0x80 [ 99.235691][ T376] slab_post_alloc_hook+0x53/0x2c0 [ 99.240635][ T376] __kmem_cache_alloc_node+0x193/0x2a0 [ 99.245929][ T376] kmalloc_trace+0x2a/0xa0 [ 99.250262][ T376] usb_create_ep_devs+0x5a/0x250 [ 99.255066][ T376] usb_set_configuration+0x1a2b/0x1e80 [ 99.260362][ T376] [ 99.262533][ T376] Memory state around the buggy address: [ 99.268022][ T376] ffff88811be5ab80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 99.275998][ T376] ffff88811be5ac00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 99.283902][ T376] >ffff88811be5ac80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 99.291895][ T376] ^ [ 99.299462][ T376] ffff88811be5ad00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 99.307355][ T376] ffff88811be5ad80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 99.315247][ T376] ================================================================== [ 99.323231][ T376] Disabling lock debugging due to kernel taint [ 99.341962][ T6] hid-generic 0000:0000:0000.001B: hidraw0: HID v0.00 Device [syz0] on syz0