last executing test programs: 1m57.893581068s ago: executing program 32 (id=335): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'macsec0\x00', 0x0}) unshare(0x62040200) r2 = gettid() sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000005f00)=ANY=[@ANYBLOB="2800000010000100"/20, @ANYRES32=r1, @ANYBLOB="6d3082610000000008001300", @ANYRES32=r2], 0x28}}, 0x0) 1m51.631249236s ago: executing program 33 (id=481): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r0}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) 1m35.49916264s ago: executing program 5 (id=746): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)=0x0) timer_settime(r1, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2}) 1m35.41786526s ago: executing program 5 (id=747): syz_mount_image$ext4(&(0x7f0000000640)='ext4\x00', &(0x7f0000000200)='./file2\x00', 0x200000, &(0x7f0000000000)={[{@dioread_lock}, {@noquota}, {@errors_remount}, {@noblock_validity}]}, 0xfc, 0x564, &(0x7f00000008c0)="$eJzs3c9rHFUcAPDvbJI2/aFJoRT1IIEerNRumsQfFTzUo2ixoPe6JNNQsumW7KY0sWB7sBcvUgQRC6J37x6L/4B/RUELRUrQg5eV2cym22Y32aSbJu1+PjDJezOzee+7M9+XNzu7bAB9ayz7UYh4NSK+TSJGWrYNRr5xbHW/lYfXp7MliXr9s7+TSPJ1zf2T/PehvPJKRPz+dcTJwvp2q0vLc6VyOV3I6+O1+Svj1aXlU5fmS7PpbHp5cmrqzDtTk++/927PYn3z/L8/fHr3ozPfHF/5/tf7R24ncTYO59ta43gKN1orYzGWPydDcfaJHSd60Nhekux2B9iWgTzPhyIbA0ZiIM/6tuojz7JrwA77KktroE8l8h/6VHMe0Ly279F18HPjwYerF0Dr4x9cfW0khhvXRgdXkseujLLr3dEetJ+18dtfd25nS/TudQiATd24GRGnBwfXj39JPv5t3+ku9nmyDeMfPDt3s/nPW+3mP4W1+U+0mf8capO727F5/hfu96CZjrL53wdt579rN61GB/LaS40531By8VI5zca2lyPiRAztz+ob3M/5orByr95pY+v8L1uy9ptzwbwf9wf3P/6YmVKt9FRBt3hwM+K1tvPfZO34J22Of/Z8nO+yjWPpndc7bds8/p1V/znijbbH/9EdrWTj+5PjjfNhvHlWrPfPrWN/dGp/t+PPjv/BjeMfTVrv11a33sZPw/+lnbZt9/zfl3zeKO/L110r1WoLExH7kk/Wr5989Nhmvbl/Fv+J4xuPf+3O/wNZYncZ/62jt1p3Hd5a/Dsri39mS8d/64V7H3/5Y6f2uzv+bzdKJ/I13Yx/3XbwaZ47AAAAAAAA2GsKEXE4kkJxrVwoFIur7+84GgcL5Uq1dvJiZfHyTDQ+KzsaQ4Xmne6RlvdDTOTvh23WJ5+oT0XEkYj4buBAo16crpRndjt4AAAAAAAAAAAAAAAAAAAA2CMORQy3+/x/5s+B3e4dsOM2+Mpv4AXXOf/zLb34pidgT/L/H/qX/If+Jf+hf8l/6F/yH/qX/If+Jf+hf20l/385t4MdAQAAAAAAAAAAAAAAAAAAAAAAAAAAgBfD+XPnsqW+8vD6dFafubq0OFe5emomrc4V5xeni9OVhSvF2UpltpwWpyvzm/29cqVyZWIyFq+N19Jqbby6tHxhvrJ4uXbh0nxpNr2QDj2TqAAAAAAAAAAAAAAAAAAAAOD5Ul1aniuVy+mCgsK2CoN7oxsKPS7s9sgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAI/8HwAA///F1Dry") open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x7ffff000) 1m35.312352481s ago: executing program 5 (id=748): r0 = syz_usb_connect$uac1(0x0, 0xad, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029b0003010000000904000000010100000a2401000000020102092408000000004c58062404000052072405000053f10b24050000133b9bda531c092405fc0596efc359090401000001020000090401010101020000090501090000000000072501000600000904020000010200000904020101010200000b2402017f0200018b7e8e07240100000000090582091000000000072501f5"], 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000001100)={0x14, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0003040000000403"]}, 0x0) syz_usb_control_io(r0, &(0x7f00000021c0)={0x2c, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0003040000000003"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 1m34.284826809s ago: executing program 6 (id=756): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x0, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r0], 0x4c}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m34.257133239s ago: executing program 6 (id=757): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002080)={0xffffffffffffffff}) close(r0) io_setup(0x7, &(0x7f0000000280)=0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100"]) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000540)={0x4c5, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000040), 0x28}]) 1m34.12502975s ago: executing program 6 (id=758): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) mount(&(0x7f00000001c0)=@filename='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000001200)='vfat\x00', 0x0, 0x0) 1m34.06403953s ago: executing program 6 (id=761): syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000640)='./file1\x00', 0x4800, &(0x7f0000000240)=ANY=[], 0xfd, 0x11ff, &(0x7f0000000f00)="$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") mount$bind(&(0x7f0000000200)='./file0\x00', &(0x7f0000000680)='./file0/../file0/../file0/../file0\x00', 0x0, 0x1333404, 0x0) chroot(&(0x7f00000001c0)='./file0\x00') r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='./file0/../file0/../file0/../file0\x00') 1m33.926444251s ago: executing program 6 (id=764): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_emit_ethernet(0x9d, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0064f48d783b818cd9218c5f1574d47f480086dd6018000029c43a00fe8000000000000068b4000000000000fe80000000000000000000000000003880009078"], 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x8, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r1}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000004c0)={r3, &(0x7f00000002c0), &(0x7f0000000300)=@tcp6=r0, 0x1}, 0x20) shutdown(r1, 0x0) 1m33.813267892s ago: executing program 6 (id=768): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r2, 0x4068aea3, &(0x7f0000000500)={0xc0, 0x0, 0x4000}) ioctl$KVM_RESET_DIRTY_RINGS(r2, 0xaec7) 1m33.785327162s ago: executing program 34 (id=768): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r2, 0x4068aea3, &(0x7f0000000500)={0xc0, 0x0, 0x4000}) ioctl$KVM_RESET_DIRTY_RINGS(r2, 0xaec7) 1m32.932042259s ago: executing program 5 (id=785): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x9}, 0x1c) listen(r0, 0x3) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000100)=0x400, 0x4) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "2a8435", 0x14, 0x6, 0xff, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x4, 0x5, 0xc2}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '@\x00', 0x14, 0x6, 0x1, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x7, 0x0, 0x0, 0xf}}}}}}}, 0x0) 1m32.890570539s ago: executing program 5 (id=778): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x100}}, {@minixdf}, {@nombcache}, {@oldalloc}]}, 0x1, 0x500, &(0x7f0000000ac0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x103c42, 0x10) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) sendfile(r1, r0, 0x0, 0x7ffff000) 1m32.510494632s ago: executing program 5 (id=784): symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@redirect_dir_nofollow}]}) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00') read$FUSE(r0, &(0x7f0000002140)={0x2020}, 0x2100) 1m17.474247577s ago: executing program 35 (id=784): symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@redirect_dir_nofollow}]}) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00') read$FUSE(r0, &(0x7f0000002140)={0x2020}, 0x2100) 1m13.778287696s ago: executing program 4 (id=1123): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='kfree\x00', r0}, 0x18) openat2(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0700000000000000000005000000180001801400020073797a5f74756e0000000000000000000800038004000380080005"], 0x3c}}, 0x0) 1m13.755548836s ago: executing program 4 (id=1125): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r0, @ANYBLOB="050008"], 0x1c}}, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x14) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="410000000000000001000603000014000300060a0004090300f006e8ffffffffffff070007003a3a090914"], 0x44}, 0x1, 0x1000000}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r2, @ANYBLOB="020000000000800080001200080001007674693674000200"], 0xa0}}, 0x0) 1m13.664459746s ago: executing program 4 (id=1128): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001e00)={{r0}, &(0x7f0000001d80), &(0x7f0000001dc0)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r1}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 1m13.652844377s ago: executing program 4 (id=1130): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x10, &(0x7f0000000600), 0x1, 0x582, &(0x7f0000009ec0)="$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") r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) write$binfmt_register(r0, &(0x7f0000000000)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x7, 0x3a, 'M', 0x3a, 'M', 0x3a, './file2', 0x3a, [0x46]}, 0x2a) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a4a438, &(0x7f0000000f80)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) 1m13.526144547s ago: executing program 4 (id=1133): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000280)='%pS \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) getpriority(0x2, 0x0) 1m13.436721358s ago: executing program 4 (id=1135): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10) 1m13.400090688s ago: executing program 36 (id=1135): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10) 54.984149609s ago: executing program 8 (id=1632): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180200002343ffff0000000000000000850000004100000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x4e) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r1, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x103e, &(0x7f0000000a80)=ANY=[], 0x0) 54.966152089s ago: executing program 8 (id=1633): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x16, 0x0, 0x8400, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000380)={r2, 0x0, 0x20000000}, 0x20) bpf$MAP_DELETE_ELEM(0x15, &(0x7f0000000400)={r2, 0x0, 0x20000000}, 0x20) 54.949822599s ago: executing program 8 (id=1634): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) readahead(0xffffffffffffffff, 0x4, 0x81) 54.93324523s ago: executing program 8 (id=1635): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000100)={[{@grpid}, {@grpquota}]}, 0x4, 0x4fa, &(0x7f0000002140)="$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") r0 = creat(&(0x7f0000000040)='./bus\x00', 0xc8) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x985640, 0x0) r1 = open(&(0x7f00000003c0)='./bus\x00', 0x84902, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x11, r1, 0x0) write$FUSE_ATTR(r0, &(0x7f0000000440)={0x78, 0xfffffffffffffff5, 0x0, {0x0, 0x0, 0x0, {0xffffffffff7ffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0xc000}}}, 0x78) 54.86563378s ago: executing program 8 (id=1636): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 54.744415931s ago: executing program 8 (id=1637): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4016, &(0x7f0000000780), 0x1, 0x43c, &(0x7f0000000280)="$eJzs28tvG0UYAPBv7SR9k1CVR9MCgYKIeCRNWkoPXEAgcQAJCQ7lGJK0CnUb1ASJVhEEhMoRVeKOOCLxF3CCCwJOSFzhjipVKJcWTkZr7ya2Y7tJ6tSh/v2kbWd2x5n5vDv2zI43gJ41kv6TROyPiD8iYrCarS8wUv3v1srS9D8rS9NJlMtv/51Uyt1cWZrOi+av25dn+iIKnydxpEm9C5evnJ8qlWYvZfnxxQsfjC9cvvL83IWpc7PnZi9Onj598sTEi6cmX+hInGlcN4c/nj96+PV3r705febae798l+TxN8TRISPtDj5VLne4uu46UJNO+rrYEDalWO2m0V/p/4NRjLWTNxivfdbVxgHbqlwulx9sfXi5DNzDkuh2C4DuyL/o0/lvvt2loceOcOPl6gQojftWtlWP9EUhK9PfML/tpJGIOLP879fpFttzHwIAoM4P6fjnuWbjv0LU3he6L1tDGYqI+yPiYESciohDEfFARKXsQxHx8Cbrb1wkWT/+KVzfUmAblI7/XsrWturHf/noL4aKWe5AJf7+5OxcafZ49p6MRv+uND/Rpo4fX/39y1bHasd/6ZbWn48Fs3Zc79tV/5qZqcWpO4m51o1PI4b7msWfrK4EJBFxOCKGt1jH3DPfHm117Pbxt9GBdabyNxFPV8//cjTEn0var0+O747S7PHx/KpY79ffrr7Vqv47ir8D0vO/t+n1vxr/UFK7Xruw+Tqu/vlFyznNVq//geSdun0fTS0uXpqIGEjeqDa6dv9kQ7nJtfJp/KPHsvgH6vv/wVh7J45ERHoRPxIRj0bEY1nbH4+IJyLiWJv4f37lyfe3Fv/uNn+1M9L4ZzZ1/tcSA9G4p3mieP6n7+sqHdpo/JGd/5OV1Gi2ZyOffxtp19auZgAAAPj/KUTE/kgKY6vpQmFsrPob/kOxt1CaX1h89uz8hxdnqs8IDEV/Ib/TNVhzP3Qim9bn+cmG/InsvvFXxT2V/Nj0fGmm28FDj9vXov+n/ip2u3XAtvO8FvQu/R96l/4PvUv/h55U+ZVfk/6/pwttAbqg2ff/J11oB3D3NfR/y37QQ8z/oXfp/9C79H/oSQt74vYPyUtIrEtEYUc04x5MxI5oRrc/mQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADrjvwAAAP//qSDljg==") mkdir(&(0x7f0000000080)='./bus\x00', 0x3) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000100)=@v1={0x0, @adiantum, 0x0, @desc1}) chdir(&(0x7f0000000300)='./bus\x00') quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f00000000c0)=@sr0, 0x0, &(0x7f00000008c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 54.683116871s ago: executing program 37 (id=1637): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4016, &(0x7f0000000780), 0x1, 0x43c, &(0x7f0000000280)="$eJzs28tvG0UYAPBv7SR9k1CVR9MCgYKIeCRNWkoPXEAgcQAJCQ7lGJK0CnUb1ASJVhEEhMoRVeKOOCLxF3CCCwJOSFzhjipVKJcWTkZr7ya2Y7tJ6tSh/v2kbWd2x5n5vDv2zI43gJ41kv6TROyPiD8iYrCarS8wUv3v1srS9D8rS9NJlMtv/51Uyt1cWZrOi+av25dn+iIKnydxpEm9C5evnJ8qlWYvZfnxxQsfjC9cvvL83IWpc7PnZi9Onj598sTEi6cmX+hInGlcN4c/nj96+PV3r705febae798l+TxN8TRISPtDj5VLne4uu46UJNO+rrYEDalWO2m0V/p/4NRjLWTNxivfdbVxgHbqlwulx9sfXi5DNzDkuh2C4DuyL/o0/lvvt2loceOcOPl6gQojftWtlWP9EUhK9PfML/tpJGIOLP879fpFttzHwIAoM4P6fjnuWbjv0LU3he6L1tDGYqI+yPiYESciohDEfFARKXsQxHx8Cbrb1wkWT/+KVzfUmAblI7/XsrWturHf/noL4aKWe5AJf7+5OxcafZ49p6MRv+uND/Rpo4fX/39y1bHasd/6ZbWn48Fs3Zc79tV/5qZqcWpO4m51o1PI4b7msWfrK4EJBFxOCKGt1jH3DPfHm117Pbxt9GBdabyNxFPV8//cjTEn0var0+O747S7PHx/KpY79ffrr7Vqv47ir8D0vO/t+n1vxr/UFK7Xruw+Tqu/vlFyznNVq//geSdun0fTS0uXpqIGEjeqDa6dv9kQ7nJtfJp/KPHsvgH6vv/wVh7J45ERHoRPxIRj0bEY1nbH4+IJyLiWJv4f37lyfe3Fv/uNn+1M9L4ZzZ1/tcSA9G4p3mieP6n7+sqHdpo/JGd/5OV1Gi2ZyOffxtp19auZgAAAPj/KUTE/kgKY6vpQmFsrPob/kOxt1CaX1h89uz8hxdnqs8IDEV/Ib/TNVhzP3Qim9bn+cmG/InsvvFXxT2V/Nj0fGmm28FDj9vXov+n/ip2u3XAtvO8FvQu/R96l/4PvUv/h55U+ZVfk/6/pwttAbqg2ff/J11oB3D3NfR/y37QQ8z/oXfp/9C79H/oSQt74vYPyUtIrEtEYUc04x5MxI5oRrc/mQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADrjvwAAAP//qSDljg==") mkdir(&(0x7f0000000080)='./bus\x00', 0x3) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000100)=@v1={0x0, @adiantum, 0x0, @desc1}) chdir(&(0x7f0000000300)='./bus\x00') quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f00000000c0)=@sr0, 0x0, &(0x7f00000008c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 38.650406824s ago: executing program 9 (id=1989): r0 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) pipe(&(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$can_bcm(0x1d, 0x2, 0x2) splice(r3, 0x0, r2, 0x0, 0x7, 0xe) 37.78913125s ago: executing program 9 (id=2018): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 37.729099061s ago: executing program 9 (id=2019): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) io_setup(0x2e, &(0x7f0000000200)=0x0) io_submit(r1, 0xfdef, &(0x7f0000000380)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000140)='^', 0x1, 0x4}]) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="14", 0x1}], 0x1) 37.618619202s ago: executing program 9 (id=2021): syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000000)='./file0\x00', 0x4800, &(0x7f00000000c0)=ANY=[@ANYRESDEC, @ANYRES64, @ANYRESHEX, @ANYRES64, @ANYRES32, @ANYRESOCT=0x0, @ANYRES32], 0xfd, 0x1211, &(0x7f0000002100)="$eJzs3E9rHGUcB/Bf161JU/NHrdX2oA948bQ0OXgSJEgKkgWlNkIrCFMz0WXH3ZBZglvE6smrr8OzN8F3kHfhLRePPYgjmUlst2zVgskW+/kcdn7M83x5nocdFmaZZw7f+eHL/k7Z2clG0Tp3Llq7Eel+ihStOPH6ZnO8dXtzvdvduJHS9fWbq2+nlJbe+OWTr+ci4uLHPy39PBcHK58e/rb268HlgyuHf9z8olemXpkGw1HK0p3hcJTdKfK03Sv7nZQ+LPKszFNvUOZ7E+07xXB3d5yywfbiwu5eXpYpG4xTPx+n0TCN9sYp+zzrDVKn00mLC8Fjnf/nLls/3q+qKqKqzsfzUVVVdSEW4mK8EIuxFN9GxIvxUrwcl+KVuByvxmtxpe51FtMHAAAAAAAAAAAAAAAAAACAZ8ff7f9fjhX7/wEAAAAAAAAAAAAAAAAAAOAMfHTr9uZ6t7txI6X5iOL7/a39rebYtK/vRC+KyONaLMfvUe/+bzT19fe7G9dSbSW+K+4d5+/tbz3X5I8+jvKr9esEjvPtuu0kv9rk02R+LhYeHn8tluPS9PHXpubn4603T/Lzx6v9LIZRxHY99oP8N6spvfdB95H81bofAAAA/B900l+m3r93Oo9rb/JP8P/AI/fX7bjanu3aiSjHd/tZq8j3yvHRF14Xd/vZ/ElRKP5FMTd5pnVKY7Vi5iv9z4v2Q1fd0zCf0yy+ejqmMb24EJNnZv3LxFl4cBnMeiYAAAAAAAAAAAA8iVN+rrAdU54se3c2SwUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/mQHjgUAAAAAhPlbp9GxAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwFABAAD//yU9xBU=") mount$bind(&(0x7f0000000200)='./file0\x00', &(0x7f0000000680)='./file0/../file0/../file0/../file0\x00', 0x0, 0x1333404, 0x0) chroot(&(0x7f00000001c0)='./file0\x00') r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='./file0/../file0/../file0/../file0\x00') 37.515577943s ago: executing program 9 (id=2026): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r3}, 0x10) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000008c0)={0x18, r1, 0x309, 0x0, 0x0, {}, [@HEADER={0x4}]}, 0x18}}, 0x0) 37.451564593s ago: executing program 9 (id=2027): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x29) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000005000000850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r2}, 0x10) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000100)='./file0\x00', 0x1000, 0x0, 0xfa, 0x0, &(0x7f0000000000)) fchmodat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) 37.370133784s ago: executing program 38 (id=2027): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x29) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000005000000850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r2}, 0x10) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000100)='./file0\x00', 0x1000, 0x0, 0xfa, 0x0, &(0x7f0000000000)) fchmodat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) 2.807878498s ago: executing program 0 (id=2889): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000440)={0xfff3, [0x8080, 0x6a4e], 0x9856}, 0x10) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x0) 2.617148509s ago: executing program 2 (id=2897): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000801, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='tmpfs\x00', 0x0, &(0x7f0000000240)='nolazytime') 2.616446779s ago: executing program 2 (id=2899): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000cc0)=ANY=[@ANYBLOB="09000000070000000300000048"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{r0}, &(0x7f0000000500), &(0x7f00000006c0)}, 0x20) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) mount$tmpfs(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000180), 0x8004, &(0x7f0000000480)={[{@inode32}]}) 2.57965834s ago: executing program 2 (id=2902): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./file0\x00', 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"/320], 0x1, 0x5505, &(0x7f0000002480)="$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") r0 = open(&(0x7f00000001c0)='./bus\x00', 0x14927e, 0x0) fallocate(r0, 0x0, 0x0, 0x8800000) r1 = open(&(0x7f0000000100)='./bus\x00', 0x143142, 0xe0) read(r1, &(0x7f0000000040)=""/69, 0x45) write$UHID_INPUT(r1, &(0x7f0000000fc0)={0x8, {"b93037d242cda22c923cd91687ef6a971e18a2d8a80b7667f214496a798894075b839aaec9bd8e78ff9636d7ffc2b031d876596008e4853e6c615ff46a87a39518da73186122a5dc256e13b85c9227da594135f194272465163eb775ffbee3f8a44fcb3fb2beb53fd636f0d4d7826326cc9576c213a249b44ebd2d529b32c38fcd368570f738405a5139e19a0c6337e2ee01c0898251c41846bbb7f950af9ccb95381d9b17699bc2c770e62b7f368ec86c6d44f382194e97d54d45e9ad5428d12222c1af47609856192c0e69327d69b133d7b91df3b51f81d690e8557c7dd06d133df7727e403560b227d1e603e70e44c4c3790949fafa7ba189a05ad51575d851e97fa1a676758606f27c3fd83e63b552c090f45cc3dddc44646c1ade70760c3ee2e700701fd412be1ea95453f9ab9cc405def2bb295377d5ef13818f5442bc2d4fc61741b255ac4d30be5dcca784f51a60287d005ffd2882002cf1eae8e60e0475ecd1ee6180b9362f905dca23574d12ac093d1ea6daa52636501327c6d2563a32e5f797f2ec0d8fad661cc34de4954ab9dcca6cf4fa47f25ae839d21b91abc887939713937339eb8dce9f7016915eb3ad86777155909f3a2ae5d12645d1e74e0d0bdc11e1db97345c183282b53df67ef30e5f8a356774f990d46786bf42fc80dac90f842204182a242e731731812d3e45268e91eec3ba887f694e6b9a5822db8ad66b5648466443d11d63f0a1f2a65c2588f2e53a7e008527f95d3910e99d333eece27c7a18945cb709e6480d4761d4389164a8f1b1c4f9cee41d2f9067e41bc029ac2c3cdca3ef4f3a26d4b3a4375d77e89aa49eabe14620b929248b853d2552326b4aa28b90655b16b3e055800427a74d95dc64c972cd809a0ae65f2bb2d1ad5ad3fbac1ed93c5d0e4fd5d7f7aacc9492eedb1c31596feea2d0a466e2fc6fbdd23ded12d120b5061344cbfaf5eaedfe7827bf37f98a78a302cd5e540f36ae7fec3836279466d62bffbc54896b9e7dc5cf1f7f5a96295462aeb46545440b2c03630597cb8fb8aedb2be1cbbda130fe40644c61483b4ad4e11d7f22b3fd17655be13df72db08b2a6faae884f962c58f207d5984a5e01cb289bacab7197215c81dd5d0537e91982d93902cdaa3c21d75ed5ce0989bfbef24450c8564187b5b9ecbaa10a5de5163eccbb5e8053ed52ba895ca73a727b77e2d90a90f3b498bf620dc198e111924b2d4c26092688840d8feb6468f2f277fd0f4d276f4245761bee60fa7bdb4b077889177d5ed0391fbefb8b09f15fc4f24f3c84fde9da3189325fa92abd4a031c87e892d4c6e77285cfd5d983ad29dea3a5320e1f7fd2db109fa5fdacf67883ff02fb90801cdf1b5a221e2b8bd0ade10cdbb9d263f268226dfa5d062bc67116c6825d6bb7e710149da8ec409cecffa921282139614fefc5c696ab891d777dfd58226d8a2818e95b412b0c4ecd3539288ccebb50f41d12d55e0b1d29bfc8e3b5f3c1578cbbc3d7ff50ff108d67d5f06baf28b2901fa17ec1ca042f73efde0039cb4251353b824b7e645b9a1c5593cfe6898d9e3551920835d61b0b67f0021bbed8cfb4f4af39ab02ef0e81ca9cffec9901aa9d9cd1f9aa251267316eb99c30947bcdc87fdb8be016cb935f7787350ae657470567595057e6b7616b0e15dcc51d9f214420376b351484ff19de22d4f724c120f9f425770f9fc66824f90038575297ba0af3695d852adb531a2ad6fabcc51b2bdb05312e72c1c6873cf3c8bb8b7fce90918ac7514fd7ad1ac3a6350988342c5d814788b22d8e4464a4b9647bbe1cbb2c88826dbdff9f246576831b896aed85ffacadb70e0e2a4eac130b124097a27eea216b4cc955a99f45d77a2bb7be9d1889177277f2182c4003cf56cdc142b9572a16654e2c5d48d4d9e825c8b5e293ee7880730d3dad7b4fdab1582025169aff4c3488d3e9d19e622f0d133d985c79b0a3f840a15aab32344b805f179227d5a29473d6afafa3d646e9b6072cb315f0536e02294831dd77cc75800a189182effc8603b0b5d9a4353971eab7b5404f4095720a4ec12b2fddd3f70cdb6713f6997fee7d1ffd4c0f93ad46538962033acf5f96f72252bba30b46b9c40496a235b43d9433586401679270c20236e528807dbefb259f749192d919fcb3fe537f1c94cc14e0660e6034b35e1a3e28669e4a61c1fd3a98023089002eda631379841d69e081903cba8629584c6cc79edbc031a48e28cc855db4ebb3a3fc4c03309cde851f75f4df599816b5d52c445c33cd6a63d1885387a53df213ef805305ad36a33ab65c02b89be698fea65c197e8d595d9369aaad2895f6cf3fa97f58ccdc214e403b0820a404894a0c3144c8f82517fdd6fe552483781e617dda766da5e53cece132b4934dab83a031d36681d5ade8781c7d9acb6552be1f8a4044d9eac9c10f28005a76a9886c3e0edc55b1a9db53bd08341d8b5f19a77121fadeb50d15a297a68d2816d2be42d26e9ea6214b49a1889d0b430b8ca8bbf81ef3dbc02813ba461faf032b5cfaa9b627c823dae6d35aa3edc5b60905dd1e000b2b73133e60bdf0d21bdcf0a3f5876b546348f53a1e36593885cb86c16b3d47ffdf7950904a673000351fa383e6ad8c88de7792710cb8d10ad2a0bd7d8177165b1a79e5b8d7e1da25905a0ac13594cd168956037e9f1814293a52f9b9b69a10d79ab9672bcf250bdc8d8b05f9e1fb905e7570e984849ace66d9527aa8a62ca58a0ff09b96c977c154f114ba72bfd5674647c2ac365bc7c0db69c337a08b590ee00c84beb20ab4836768a223af4f245c71b95d581773163abfcbf89b27f4339e724a6cb4c93c03296f9cb7e42afebd7dc81ba0e5e1b03b92fb149f415f049bbaaee41ea049dcdc9185230f03c1664ce12180de93757852faeb91a951fc881a778a1ed50f320ad9f423cc32d60651eca1ad517f0c85319b8d406912ff435f9882b21e275d9bdc43ea96dcb913ead2c2cfb8b1e1b045b8cae4ff0b6abf18258976a6858275e5f0294dad1fb306cbedc62a746558924c471243ac22caf21d01cea4fbe0fc698d02ac7204aaca9fa43fdff25d44624832fbf0c989f54a1063aeddbf444ac1742a11531fedecde21c430bce27ab6445ccf5433eba2dd549c6fa0a1f946d6aac8496cff0277276c7bc3971447a54c26033c0b5847ed1205dab9960e63f5e1022a3448c16675b7fcacafa14e3fcfc71364e9e139da27b4c14b6c39602b583e8946cb1ead1cd5afb7ecece2a4cd9e0565e45e3254e90f1fee64567f75c731765ab96d46877afb361852da58c62953efd07eea85b7d228414781efadd30eac8c067c2227d9421a688fe5bd96320711584f72974d64d0e5d9d845bca6cae1b3948219c4000eea83f226c7a9c1dbb14eda50794940a407035318c8e3e9fdc145f78896f30a47e45f89136ef7946d231834e62687b35bd4f7d0319bfae187cfd1d6a50282aa2bf10ea9a8de07112b668dbbdd3280d2e25df28eaa5bb34b57080ce4ac0d24b13e598bfce815d2047dc8729cda19575181283cda1116226da7fbe25ea351c2611724d57817ffcca5266ce976da86aedf07384fd8329542dc56d83fc062aa2e51a28edb3c7f43fb3190b6731adabfa292ef7876a8e7586845f194da22b417ef02b5cc41a1338db37adbe7709ede723c73813736f3c140570df74863b094a9baedbf176ee03572709d1b9b2a4d61f83c5dcad456b9a9eeea4950d0eb3008995f63defa03f4dd99bc0997fc629237f79226faea8c3d44135fc44965c023e992741334d7d346392f2ac09bab12c4f40dd89e87885d727866ce80272f414f828202cb9de2a1b0e42c7ecda14081b396facb5d8f2afc7958c0f38097c1ec0021c332aa208f7da58576397975cb7d5586f85446f4ea7c46ff051790b969b97f06572bf3d395d30779c556025005404496e64dc32a912a1f988b9e9a646aa7aaeaf4a7f1fee5151e0a06c5ffbed19e842d320e524d456c2fd8eef4ad2ae78d2dd3241c9195669fe314aaff7c8d96e10025f023475a92de577bfd13b1eed1d882b902bafdda06ff239070f1954dc70f87157e8ae4b7d6dc302b91abe0c863c9a3943d16d97aa0840e9696d19f16eed6411456cbb45cde19e269241921d0c962cd5b954e1991f61094802e7c25ed9d459092c4282bf55d191ac818ccfddf382729312625b1d0a1f0ed5835fcf097487780c229cf77ac83cc89f6a0d349bf64e503dd6afaca48031d23310282df31e6ac4c897b03d6b133e2867e7950374acbb2f5ec89f29c2b54639fb5e6a984c3c19e9f958e0a77d8db66049374a6ddd221dbe547298079c4293ad2ed9facb9f0e22684ed7bd78a5fe173cf69cd421d07bbc63a9151e33cbbc9425445bae36265ad8467372a75adb9d230b0f94718a7786ff58461f8513a7c201af64738a24a1ed848b31957d1b22619ef31b8e34d487d8d97622143d03d7383135b7416d34c974b8ea45336cff651f1496b670edcc333e1019a6903697180ae7f5d601caef5194168313f8818df50d8e9d1e4e73c736e515dda3a4db1d743643d4e8d48b5e888f97599116d83f086375b9acc427f4dc17278702a118d9e61a0889a23a2aa6b3611f71cfb6f81f5a4c440614690c6cc45020a85defd8e38ae847a1ba59949fbd25d80b703b5288a2488c6ebf67476c0a405112121a859a86a8a8c4a310242481e53e562e002870f94c0a29393e120348becf248481025f819cd870935a346c7d885114d22e598e817381041595d5b9ccc1f1c8abe632e59338cd9ba764f5978acb8b49c6aafcb8bdba64fa381d5d306a4c67323a7b149c0a74b27e9388ee2fc2a0c01b4942fa61d72efb2fc3a68c40e24246951c87fc8655cf1d46e16568b6a6a14f1278a9c5ac4146ef5eb4a83de9dc6f1d41143ea85f2d6500c8a52d67c7a4a7dd87358c52279be2f9468e039297e4c429d19c628470e910a35f2319de1862ca7c39cd6f5d5ea6c7b92f1ce4cd47b34a8ef42b2498923ebb568d08fb2b6b4698aa2ad4a07298395c7af4234728719240976c1dd3966f92c15662f11f3650e192b95d34ae110062c270482fb044bf1bcf357b2cdeadccf12b1e3d39626c0621b28397bb35bf6d73c0c54057295da81839b7afdd71571b43c7ac7c637f2e21f6e6abeb218c8daf72499916d2f1d2d2baa88ae0bb5fb298fb506793d332e9fd3e8db4b50af7f4ba9a22b0a91a68a9beab7e0369316876c51e6c533f8a72ddb39aba88ba08c4e1d82379da2dda53f0df3ca5fa9532febc6d6f42f554d23fccdfd660fa4ed6925acbc0cb581c56d902ef9f7d1d009b728f2a60cc17b188fc385c0b9caf6f040962e98ffda759cf10e6115773e323c9040675698ebc8f31e7d31fdcc9cea2edacb18d9fcc5974db7cc262505b764eceb0bde6ce7d3163c8aea5b0012a992982f6129fd2077a022719141368081abcff4d88f81b6b4c13835957f8213b41053225fd0718353132a745cf3057425be18694184956ba628099ebc81bcef04428eb2ffaf964d0356ce3abec396248f8be05a72614581b0d3d27f61654b7f8feb8e1e4cfabe40579a1d2e63632bb0eb139370c577556739243034fd42746fc93d6988af6f738a07169d55f2ca9758c8334a03aa97411f1158192cfea7baac8eec0402eb77927d33c2e712f6f372c3d9335c9eb2e653f734aeba44409c48f6099674295d467585bfbdb58143c1b9f5232cbf60190b7b8ad4388bf38c68cb3a6865ccc8fb048bb59ed71376ed0af8ffa0ae3e095", 0x1000}}, 0x1006) 2.081082603s ago: executing program 1 (id=2908): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000140)={0xa4, 0x0, 0x1}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000240)=@x86={0x40, 0x1c, 0x6, 0x0, 0x0, 0x1, 0x7, 0x9, 0x7, 0x8, 0x84, 0x3, 0x0, 0xd, 0x10, 0x8, 0xa9, 0xd, 0x6, '\x00', 0x4, 0xfffb}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f00000001c0)=@x86={0x8, 0x5, 0x5, 0x0, 0x402a4558, 0x6, 0x7, 0x11, 0x7f, 0x9, 0x1, 0x2, 0x0, 0x6, 0x6, 0x1, 0x6, 0xf, 0x0, '\x00', 0x1, 0x100000000}) 1.953238494s ago: executing program 1 (id=2909): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x2a, &(0x7f0000000040)=ANY=[@ANYBLOB="020000000000000002000000e0"], 0x190) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000140)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) 1.952950335s ago: executing program 1 (id=2910): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newlink={0x38, 0x10, 0x437, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, 0x40c89}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x38}}, 0x0) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @rand_addr=0x3}}}], 0x20}}], 0x1, 0x4040880) 1.952826555s ago: executing program 1 (id=2911): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000283d0020850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001100)={&(0x7f0000001500)='mm_page_alloc\x00', r0}, 0x10) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000180), 0x10) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, 0x0, &(0x7f0000003000)) sendmsg$can_bcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0500000000bbd10d0bc11fc00000000040000000aef028c89c34dcb05408427474e1cb5e689c593e7a16dd0af4f5be2f038bc9faf7"], 0x80}}, 0x0) 1.948041075s ago: executing program 1 (id=2912): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) unshare(0x22020600) flistxattr(r1, 0x0, 0x0) 1.932569174s ago: executing program 2 (id=2913): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x400) ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0xc0f85403, 0x0) 1.889325615s ago: executing program 1 (id=2914): r0 = syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000000)={{0x12, 0x1, 0x150, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0xa2}, {0xd, 0x24, 0xf, 0x1, 0xfffffff9, 0xfffd, 0x8}, {0x6, 0x24, 0x1a, 0x8, 0x8}}, {{0x9, 0x5, 0x81, 0x3, 0x400}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x10}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x0, 0x7, 0x4}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000080)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x20, 0x80, 0x1c, {0x11, 0x0, 0x4100, 0x9, 0x2, 0x0, 0x7df, 0x80003ff, 0x8, 0x2, 0x4, 0x8000}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000200)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 1.632948677s ago: executing program 2 (id=2917): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x5, &(0x7f0000000040)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x4, 0xad, &(0x7f00000003c0)=""/173, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000010000000b"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000006020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b70300000000ecff850000000400000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="6800000010000fff9de2ae896d6d4fa800000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800e0001006970366772657461700000002c000280140006002001000000000000000000000000000214000700fc00000000000000000000000000000108000a00"], 0x68}}, 0x0) 1.632284127s ago: executing program 3 (id=2918): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b7040000000000008500000057"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r1}, 0x10) syz_io_uring_setup(0x362a, &(0x7f0000000040)={0x0, 0xb0da, 0x2, 0x2, 0x2f7}, &(0x7f0000000140), &(0x7f0000000180)) 1.631910977s ago: executing program 3 (id=2919): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f00000003c0)=""/62}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 1.631543617s ago: executing program 3 (id=2920): pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RGETLOCK(r1, 0x0, 0xffffff6a) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r0, r3, 0xfffffffffffffc01, 0x0) tee(r0, r3, 0x60000000000, 0x0) vmsplice(r2, &(0x7f0000002600)=[{&(0x7f00000002c0)='*', 0x1}], 0x1, 0x8) 1.629960217s ago: executing program 2 (id=2921): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, &(0x7f0000000f80)=ANY=[@ANYBLOB="000504000000ab"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000340)={0x1c, &(0x7f0000000400)={0x40, 0xc, 0x4, 'Rg~p'}, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000f00)={0x34, &(0x7f0000000c40)={0x40, 0x1, 0x53, "fd048002779eaefd3841ce796416de9b53665156924bcff77a5286d0e7dab5c04d44ebb587d796a0e902db203695b4d266a99095a64f4b600d5a0600e23028c1f7cb30331b510591c1069981808757d13d5a04"}, 0x0, &(0x7f0000000d80)={0x0, 0x8, 0x1, 0x8}, 0x0, 0x0, 0x0}) 873.305163ms ago: executing program 7 (id=2923): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r0, 0xffffffffffffffff}, &(0x7f0000000300), &(0x7f00000002c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xd, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r3, 0x0, 0x4, 0x0, 0x0) 809.282183ms ago: executing program 7 (id=2924): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 794.514113ms ago: executing program 3 (id=2925): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x3e4}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000280)={{&(0x7f0000000000/0x3000)=nil, 0x3000}, 0x4}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) utimensat(0xffffffffffffffff, 0x0, &(0x7f0000000580)={{0x0, 0x3ffffffe}, {0x0, 0x3ffffffe}}, 0x0) 735.238504ms ago: executing program 0 (id=2926): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000014c0)=[@text64={0x40, &(0x7f0000001500)="267600410f01b00000000066b88e000f00d066420f3a14ce5736430f0164b107b805000000b9060000000f01c1f30f01330f015b7548b80c000000000000000f23d80f21f835800000000f23f8c44279185abb", 0x53}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 609.246775ms ago: executing program 7 (id=2927): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000600)='sys_enter\x00', r1}, 0x10) epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 609.064985ms ago: executing program 0 (id=2928): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0b00000005000000000400000900000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000008737cc3c5cfb0c7216589f012d5d"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) 608.901645ms ago: executing program 7 (id=2929): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b703000008000040850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='kfree\x00', r1}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newlink={0x4c, 0x10, 0x403, 0x70b528, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0xa1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x4c}, 0x1, 0xba01, 0x0, 0x4004}, 0x810) 608.773825ms ago: executing program 3 (id=2930): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x1) close_range(r1, r1, 0x2) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) 557.153105ms ago: executing program 7 (id=2931): pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r1, 0x407, 0x0) write$FUSE_INIT(r1, &(0x7f0000000340)={0x50, 0x0, 0x0, {0x7, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}}, 0x50) vmsplice(r1, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0) fcntl$setpipe(r1, 0x407, 0x2000000) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, 0x0) 556.925255ms ago: executing program 3 (id=2932): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004", @ANYBLOB], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x2d) bpf$MAP_CREATE(0x1400000000000000, &(0x7f0000000100)=@base={0xf, 0x4, 0x4, 0x10004, 0x0, 0xffffffffffffffff, 0x2000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1200"], 0x48) 520.856906ms ago: executing program 0 (id=2933): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000300)={{r0, 0xffffffffffffffff}, &(0x7f0000000740), &(0x7f0000000180)='%-5lx \x00'}, 0x1e) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000c40)='sys_enter\x00', r2}, 0x10) getcwd(&(0x7f0000000040)=""/19, 0x13) 504.139446ms ago: executing program 0 (id=2934): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000940)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x10001, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r2}, 0x10) write$UHID_CREATE(r0, &(0x7f0000000280)={0x0, {'syz0\x00', 'syz1\x00', 'syz1\x00', &(0x7f0000000240)=""/52, 0x34, 0x8, 0x16e, 0xfffffffe, 0x1, 0x8000}}, 0x120) 391.602356ms ago: executing program 7 (id=2935): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0x9, 0x20000003, 0x1, 0xffffffffffffffff, 0x20, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000800000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) 0s ago: executing program 0 (id=2936): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000300000002"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000500)='hrtimer_start\x00', r1}, 0x10) timer_settime(0x0, 0x1, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) kernel console output (not intermixed with test programs): _t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 101.920953][ T28] audit: type=1400 audit(1741911937.820:7490): avc: denied { listen } for pid=4233 comm="syz.0.1644" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 101.946774][ T4236] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1645'. [ 101.955275][ T28] audit: type=1400 audit(1741911937.820:7491): avc: denied { connect } for pid=4233 comm="syz.0.1644" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 101.956071][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 102.003730][ T4216] device veth1_macvtap entered promiscuous mode [ 102.013840][ T1151] usb 10-1: USB disconnect, device number 3 [ 102.018465][ T4238] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1647'. [ 102.033350][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 102.050254][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 102.080912][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 102.089674][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 102.120351][ T28] audit: type=1400 audit(1741911938.060:7492): avc: denied { mounton } for pid=4216 comm="syz-executor" path="/root/syzkaller.1ISvcS/syz-tmp" dev="sda1" ino=1960 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 102.135712][ T4249] loop7: detected capacity change from 0 to 16 [ 102.146247][ T28] audit: type=1400 audit(1741911938.060:7493): avc: denied { mount } for pid=4216 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 102.173948][ T28] audit: type=1400 audit(1741911938.070:7494): avc: denied { mounton } for pid=4216 comm="syz-executor" path="/root/syzkaller.1ISvcS/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 102.205645][ T4249] erofs: (device loop7): mounted with root inode @ nid 36. [ 102.217473][ T28] audit: type=1400 audit(1741911938.070:7495): avc: denied { mounton } for pid=4216 comm="syz-executor" path="/root/syzkaller.1ISvcS/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=34787 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 102.250129][ T46] erofs: (device loop7): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 102.267992][ T28] audit: type=1400 audit(1741911938.120:7496): avc: denied { mounton } for pid=4216 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=528 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 102.296758][ T28] audit: type=1400 audit(1741911938.120:7497): avc: denied { mounton } for pid=4216 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 102.955061][ T2322] Bluetooth: hci0: Frame reassembly failed (-84) [ 103.025526][ T4335] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1687'. [ 103.034765][ T4335] device bridge_slave_1 left promiscuous mode [ 103.041148][ T4335] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.048968][ T4335] device bridge_slave_0 left promiscuous mode [ 103.055702][ T4335] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.696118][ T4360] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1697'. [ 103.900600][ T1151] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 103.980581][ T315] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 104.082683][ T1151] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 104.093643][ T1151] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 104.103284][ T1151] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 104.116313][ T1151] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 104.125290][ T1151] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.137214][ T1151] usb 1-1: config 0 descriptor?? [ 104.161741][ T315] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 104.173091][ T315] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 104.183414][ T315] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 104.196673][ T315] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 104.205945][ T315] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.218181][ T315] usb 8-1: config 0 descriptor?? [ 104.492660][ T4394] 9pnet: p9_errstr2errno: server reported unknown error ť [ 104.546729][ T1151] plantronics 0003:047F:FFFF.0015: No inputs registered, leaving [ 104.556146][ T1151] plantronics 0003:047F:FFFF.0015: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 104.626810][ T315] plantronics 0003:047F:FFFF.0016: unknown main item tag 0xd [ 104.636026][ T315] plantronics 0003:047F:FFFF.0016: No inputs registered, leaving [ 104.645748][ T315] plantronics 0003:047F:FFFF.0016: hiddev97,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 104.654272][ T4405] loop1: detected capacity change from 0 to 2048 [ 104.689294][ T4405] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 104.712438][ T4216] EXT4-fs (loop1): unmounting filesystem. [ 104.744548][ T4416] netlink: 'syz.1.1720': attribute type 27 has an invalid length. [ 104.772538][ T4416] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.779609][ T4416] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.811868][ T1151] usb 1-1: USB disconnect, device number 15 [ 104.831823][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 104.832072][ T24] usb 8-1: USB disconnect, device number 5 [ 104.875226][ T4419] device veth0_vlan left promiscuous mode [ 104.889016][ T4419] device veth0_vlan entered promiscuous mode [ 104.901903][ T4419] device veth1_macvtap left promiscuous mode [ 104.908527][ T4419] device veth1_macvtap entered promiscuous mode [ 104.917175][ T2322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 104.925990][ T2322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 104.935547][ T2322] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 104.950638][ T2322] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.957560][ T2322] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.965600][ T2322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 104.974342][ T2322] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 104.982982][ T2322] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.989838][ T2322] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.997522][ T2322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 105.006168][ T2322] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 105.016560][ T2322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 105.030383][ T2322] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 105.030728][ T895] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 105.038610][ T45] Bluetooth: hci0: command 0x1003 tx timeout [ 105.052121][ T2322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 105.060179][ T2322] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 105.068541][ T2322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 105.079968][ T2322] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 105.095054][ T2322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 105.103982][ T2322] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 105.112253][ T2322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 105.122005][ T2322] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 105.130414][ T2322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 105.138926][ T2322] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 105.147043][ T2322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 105.155182][ T2322] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 105.163227][ T2322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 105.171182][ T2322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 105.179407][ T2322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 105.187666][ T2322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 105.195635][ T2322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 105.203703][ T2322] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 105.211036][ T2322] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 105.218341][ T2322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 105.226477][ T2322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 105.234525][ T2322] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 105.242073][ T2322] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 105.661728][ T4462] device pim6reg1 entered promiscuous mode [ 105.802043][ T4473] futex_wake_op: syz.7.1745 tries to shift op by -1; fix this program [ 105.983322][ T4483] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1749'. [ 106.005078][ T4483] device bridge_slave_1 left promiscuous mode [ 106.017732][ T4483] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.034838][ T4483] device bridge_slave_0 left promiscuous mode [ 106.044985][ T4483] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.204661][ T4479] loop7: detected capacity change from 0 to 40427 [ 106.230178][ T4479] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12 [ 106.238983][ T4479] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 106.266876][ T4479] F2FS-fs (loop7): Found nat_bits in checkpoint [ 106.317641][ T4479] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 106.317667][ T4479] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 106.394418][ T4479] syz.7.1748: attempt to access beyond end of device [ 106.394418][ T4479] loop7: rw=2049, sector=77824, nr_sectors = 2096 limit=40427 [ 106.421752][ T4479] syz.7.1748: attempt to access beyond end of device [ 106.421752][ T4479] loop7: rw=2049, sector=79920, nr_sectors = 2000 limit=40427 [ 106.429009][ T4479] syz.7.1748: attempt to access beyond end of device [ 106.429009][ T4479] loop7: rw=2049, sector=49152, nr_sectors = 2064 limit=40427 [ 106.443521][ T4479] syz.7.1748: attempt to access beyond end of device [ 106.443521][ T4479] loop7: rw=2049, sector=51216, nr_sectors = 2032 limit=40427 [ 106.502819][ T4479] syz.7.1748: attempt to access beyond end of device [ 106.502819][ T4479] loop7: rw=2049, sector=57344, nr_sectors = 1832 limit=40427 [ 106.701435][ T1241] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 106.840434][ T4531] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1767'. [ 106.890550][ T1241] usb 3-1: Using ep0 maxpacket: 8 [ 106.891848][ T1241] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 106.905854][ T1241] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.906582][ T1241] usb 3-1: config 0 descriptor?? [ 107.108595][ T1241] asix 3-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 107.129034][ T28] kauditd_printk_skb: 30 callbacks suppressed [ 107.129068][ T28] audit: type=1326 audit(1741911943.070:7528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4544 comm="syz.0.1773" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f59b918d169 code=0x0 [ 107.181852][ T28] audit: type=1400 audit(1741911943.130:7529): avc: denied { set_context_mgr } for pid=4544 comm="syz.0.1773" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 107.469580][ T4555] loop9: detected capacity change from 0 to 512 [ 107.489548][ T4555] /dev/loop9: Can't open blockdev [ 107.553909][ T4557] netlink: 'syz.9.1777': attribute type 27 has an invalid length. [ 107.589648][ T4557] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.596950][ T4557] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.687544][ T4558] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 107.717268][ T4558] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.724244][ T4558] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.738267][ T4558] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.745355][ T4558] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.772209][ T4558] device veth0_vlan left promiscuous mode [ 107.778466][ T4558] device veth0_vlan entered promiscuous mode [ 107.792090][ T4558] device veth1_macvtap left promiscuous mode [ 107.818890][ T4558] device veth1_macvtap entered promiscuous mode [ 107.827075][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 107.841272][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 107.857764][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 107.882193][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 107.900752][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 107.910756][ T1241] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 107.922611][ T1241] asix: probe of 3-1:0.0 failed with error -71 [ 107.929250][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 107.941108][ T1241] usb 3-1: USB disconnect, device number 17 [ 107.948372][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 107.957563][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 107.965873][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 107.974528][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 107.983176][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 107.993514][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 108.001963][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 108.005074][ T4568] serio: Serial port ptm0 [ 108.010207][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 108.022053][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 108.030013][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 108.038234][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 108.052139][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 108.060385][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 108.199921][ T28] audit: type=1326 audit(1741911944.140:7530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4580 comm="syz.9.1786" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f20ac38d169 code=0x0 [ 108.303842][ T28] audit: type=1400 audit(1741911944.250:7531): avc: denied { sys_module } for pid=4583 comm="syz.1.1787" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 108.824370][ T4615] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1799'. [ 108.958569][ T4629] loop0: detected capacity change from 0 to 2048 [ 108.997159][ T4629] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a002e018, mo2=0002] [ 109.020662][ T4629] System zones: 0-4 [ 109.025162][ T4629] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 109.037799][ T28] audit: type=1400 audit(1741911944.980:7532): avc: denied { listen } for pid=4644 comm="syz.1.1813" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 109.043824][ T4629] ext4 filesystem being mounted at /376/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 109.082897][ T4647] loop9: detected capacity change from 0 to 256 [ 109.089337][ T4647] exfat: Bad value for 'uid' [ 109.109415][ T28] audit: type=1400 audit(1741911945.010:7533): avc: denied { accept } for pid=4644 comm="syz.1.1813" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 109.131538][ T1244] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 109.149175][ T297] EXT4-fs (loop0): unmounting filesystem. [ 109.164217][ T28] audit: type=1400 audit(1741911945.040:7534): avc: denied { watch } for pid=4628 comm="syz.0.1806" path="/376/file0/file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 109.195150][ T28] audit: type=1400 audit(1741911945.050:7535): avc: denied { ioctl } for pid=4628 comm="syz.0.1806" path="/376/file0/file0/file0" dev="loop0" ino=13 ioctlcmd=0x6685 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 109.229484][ T28] audit: type=1400 audit(1741911945.050:7536): avc: denied { write } for pid=4628 comm="syz.0.1806" name="file0" dev="loop0" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 109.274151][ T28] audit: type=1400 audit(1741911945.220:7537): avc: denied { setopt } for pid=4655 comm="syz.0.1816" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 109.420604][ T6] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 109.541155][ T4674] SELinux: ebitmap: map size 2 does not match my size 64 (high bit was 1216) [ 109.561093][ T4674] SELinux: failed to load policy [ 109.601018][ T6] usb 10-1: Using ep0 maxpacket: 16 [ 109.607807][ T6] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 109.619496][ T6] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 109.630401][ T6] usb 10-1: config 0 interface 0 has no altsetting 0 [ 109.637374][ T6] usb 10-1: New USB device found, idVendor=060b, idProduct=430a, bcdDevice= 0.00 [ 109.646868][ T6] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.659512][ T6] usb 10-1: config 0 descriptor?? [ 109.860601][ T314] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 110.061920][ T314] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 110.079260][ T6] hid (null): global environment stack underflow [ 110.094466][ T314] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 110.107232][ T6] hid-generic 0003:060B:430A.0017: unexpected long global item [ 110.116918][ T314] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 110.130139][ T6] hid-generic: probe of 0003:060B:430A.0017 failed with error -22 [ 110.147447][ T314] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 110.156642][ T314] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.165796][ T314] usb 8-1: config 0 descriptor?? [ 110.317011][ T6] usb 10-1: USB disconnect, device number 4 [ 110.499907][ T4712] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1840'. [ 110.575703][ T314] plantronics 0003:047F:FFFF.0018: No inputs registered, leaving [ 110.591790][ T314] plantronics 0003:047F:FFFF.0018: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 110.605253][ T4719] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1843'. [ 110.892131][ C1] plantronics 0003:047F:FFFF.0018: hid_field_extract() called with n (132) > 32! (syz.2.1842) [ 111.106933][ T1241] usb 8-1: USB disconnect, device number 6 [ 111.143740][ T4743] loop1: detected capacity change from 0 to 1024 [ 111.151089][ T4743] EXT4-fs: Ignoring removed bh option [ 111.161396][ T4743] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c80ce018, mo2=0000] [ 111.171444][ T4743] EXT4-fs error (device loop1): ext4_map_blocks:634: inode #3: block 2: comm syz.1.1849: lblock 2 mapped to illegal pblock 2 (length 1) [ 111.185958][ T4743] EXT4-fs error (device loop1): ext4_map_blocks:634: inode #3: block 48: comm syz.1.1849: lblock 0 mapped to illegal pblock 48 (length 1) [ 111.200842][ T4743] EXT4-fs error (device loop1): ext4_acquire_dquot:6782: comm syz.1.1849: Failed to acquire dquot type 0 [ 111.220863][ T4743] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5887: Corrupt filesystem [ 111.251286][ T4743] EXT4-fs error (device loop1): ext4_evict_inode:279: inode #11: comm syz.1.1849: mark_inode_dirty error [ 111.279052][ T4743] EXT4-fs warning (device loop1): ext4_evict_inode:282: couldn't mark inode dirty (err -117) [ 111.311820][ T4743] EXT4-fs (loop1): 1 orphan inode deleted [ 111.317623][ T4743] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 111.340715][ T10] EXT4-fs error (device loop1): ext4_map_blocks:634: inode #3: block 1: comm kworker/u4:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 111.369235][ T10] EXT4-fs error (device loop1): ext4_release_dquot:6805: comm kworker/u4:1: Failed to release dquot type 0 [ 111.382102][ T4743] EXT4-fs (loop1): unmounting filesystem. [ 111.387832][ T4743] EXT4-fs error (device loop1): __ext4_get_inode_loc:4508: comm syz.1.1849: Invalid inode table block 1 in block_group 0 [ 111.401821][ T4755] netlink: 96 bytes leftover after parsing attributes in process `syz.9.1854'. [ 111.419246][ T4743] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5887: Corrupt filesystem [ 111.439214][ T4743] EXT4-fs error (device loop1): ext4_quota_off:7071: inode #3: comm syz.1.1849: mark_inode_dirty error [ 111.539307][ T4766] overlayfs: failed to resolve './file0': -2 [ 111.665719][ T4783] device bridge_slave_0 entered promiscuous mode [ 111.715681][ T4792] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1874'. [ 112.544990][ T28] kauditd_printk_skb: 15 callbacks suppressed [ 112.545007][ T28] audit: type=1400 audit(1741911948.490:7550): avc: denied { getopt } for pid=4835 comm="syz.1.1893" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 112.941831][ T4866] IPv6: NLM_F_REPLACE set, but no existing node found! [ 113.014343][ T28] audit: type=1400 audit(1741911948.960:7551): avc: denied { bind } for pid=4873 comm="syz.2.1910" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 113.035036][ T28] audit: type=1400 audit(1741911948.980:7552): avc: denied { setopt } for pid=4873 comm="syz.2.1910" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 113.061932][ T10] Bluetooth: hci0: Frame reassembly failed (-84) [ 113.212057][ T4888] netlink: 'syz.9.1917': attribute type 4 has an invalid length. [ 113.226818][ T4888] netlink: 'syz.9.1917': attribute type 4 has an invalid length. [ 113.280858][ T6] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 113.420604][ T1241] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 113.460612][ T6] usb 2-1: Using ep0 maxpacket: 32 [ 113.466751][ T6] usb 2-1: config 0 has an invalid interface number: 136 but max is 0 [ 113.474980][ T6] usb 2-1: config 0 has no interface number 0 [ 113.482557][ T6] usb 2-1: New USB device found, idVendor=1a0a, idProduct=0101, bcdDevice=ee.df [ 113.491553][ T6] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.499316][ T6] usb 2-1: Product: syz [ 113.503338][ T6] usb 2-1: Manufacturer: syz [ 113.507749][ T6] usb 2-1: SerialNumber: syz [ 113.513296][ T6] usb 2-1: config 0 descriptor?? [ 113.519076][ T6] usb_ehset_test: probe of 2-1:0.136 failed with error -32 [ 113.580687][ T314] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 113.603418][ T1241] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 113.612585][ T1241] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.620397][ T1241] usb 1-1: Product: syz [ 113.624632][ T1241] usb 1-1: Manufacturer: syz [ 113.629075][ T1241] usb 1-1: SerialNumber: syz [ 113.721097][ T312] usb 2-1: USB disconnect, device number 4 [ 113.761782][ T314] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 113.772696][ T314] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 113.782396][ T314] usb 10-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 113.791296][ T314] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.800099][ T314] usb 10-1: config 0 descriptor?? [ 114.208816][ T314] playstation 0003:054C:0DF2.0019: unknown main item tag 0x0 [ 114.216147][ T314] playstation 0003:054C:0DF2.0019: unknown main item tag 0x0 [ 114.223472][ T314] playstation 0003:054C:0DF2.0019: unknown main item tag 0x0 [ 114.231081][ T314] playstation 0003:054C:0DF2.0019: unknown main item tag 0x0 [ 114.238479][ T314] playstation 0003:054C:0DF2.0019: unknown main item tag 0x0 [ 114.246665][ T314] playstation 0003:054C:0DF2.0019: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.9-1/input0 [ 114.408610][ T314] playstation 0003:054C:0DF2.0019: Invalid byte count transferred, expected 20 got 0 [ 114.417967][ T314] playstation 0003:054C:0DF2.0019: Failed to retrieve DualSense pairing info: -22 [ 114.426986][ T314] playstation 0003:054C:0DF2.0019: Failed to get MAC address from DualSense [ 114.435736][ T314] playstation 0003:054C:0DF2.0019: Failed to create dualsense. [ 114.444181][ T314] playstation: probe of 0003:054C:0DF2.0019 failed with error -22 [ 114.610282][ T314] usb 10-1: USB disconnect, device number 5 [ 114.641429][ T1241] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 114.849508][ T1241] cdc_ncm 1-1:1.0 eth1: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 114.862048][ T1241] usb 1-1: USB disconnect, device number 16 [ 114.868101][ T1241] cdc_ncm 1-1:1.0 eth1: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM (NO ZLP) [ 115.110669][ T45] Bluetooth: hci0: command 0x1003 tx timeout [ 115.116661][ T895] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 115.123077][ T28] audit: type=1400 audit(1741911951.060:7553): avc: denied { read } for pid=140 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 115.168846][ T4905] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1932'. [ 115.207585][ T4905] loop1: detected capacity change from 0 to 2048 [ 115.540589][ T24] usb 8-1: new full-speed USB device number 7 using dummy_hcd [ 115.741696][ T24] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 115.770556][ T24] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 115.802120][ T24] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 115.821774][ T24] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.829598][ T24] usb 8-1: Product: syz [ 115.853894][ T24] usb 8-1: Manufacturer: syz [ 115.858342][ T24] usb 8-1: SerialNumber: syz [ 115.875842][ T4943] binder: 4942:4943 ioctl c0306201 4000000003c0 returned -14 [ 115.888699][ T4911] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 116.107202][ T4954] netlink: 'syz.2.1944': attribute type 12 has an invalid length. [ 116.286911][ T28] audit: type=1400 audit(1741911952.230:7554): avc: denied { read } for pid=4965 comm="syz.2.1949" name="/" dev="configfs" ino=14629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 116.309474][ T28] audit: type=1400 audit(1741911952.240:7555): avc: denied { open } for pid=4965 comm="syz.2.1949" path="/" dev="configfs" ino=14629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 116.336929][ T28] audit: type=1400 audit(1741911952.280:7556): avc: denied { write } for pid=4967 comm="syz.9.1950" name="loop-control" dev="devtmpfs" ino=113 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 116.423551][ T28] audit: type=1400 audit(1741911952.370:7557): avc: denied { read } for pid=4976 comm="syz.1.1955" path="socket:[38567]" dev="sockfs" ino=38567 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 116.559719][ T4995] syz.9.1962[4995] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 116.559815][ T4995] syz.9.1962[4995] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 116.589531][ T4998] device batadv_slave_1 entered promiscuous mode [ 116.611979][ T4998] device batadv_slave_1 left promiscuous mode [ 116.680033][ T28] audit: type=1400 audit(1741911952.620:7558): avc: denied { module_load } for pid=5003 comm="syz.9.1965" path="/sys/kernel/notes" dev="sysfs" ino=1141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 116.680093][ T5004] Invalid ELF header magic: != ELF [ 116.836272][ T5019] binder: 5018:5019 ioctl 400c620e 400000000580 returned -22 [ 116.883486][ T5024] device vlan2 entered promiscuous mode [ 116.888976][ T5024] device erspan0 entered promiscuous mode [ 116.891559][ T5027] loop9: detected capacity change from 0 to 512 [ 116.901256][ T5027] EXT4-fs: Ignoring removed orlov option [ 116.907068][ T5027] ext4: Unknown parameter 'obj_type' [ 116.912593][ T5024] device erspan0 left promiscuous mode [ 116.919616][ T24] cdc_ncm 8-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 116.926136][ T24] cdc_ncm 8-1:1.0: setting rx_max = 16384 [ 116.969496][ T28] audit: type=1400 audit(1741911952.910:7559): avc: denied { read } for pid=5031 comm="syz.0.1978" name="snapshot" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 117.016835][ T5030] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 117.034781][ T5030] FAT-fs (loop1): unable to read boot sector [ 117.120155][ T24] cdc_ncm 8-1:1.0: setting tx_max = 16384 [ 117.142828][ T24] cdc_ncm 8-1:1.0 eth1: register 'cdc_ncm' at usb-dummy_hcd.7-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 117.164516][ T24] usb 8-1: USB disconnect, device number 7 [ 117.195592][ T24] cdc_ncm 8-1:1.0 eth1: unregister 'cdc_ncm' usb-dummy_hcd.7-1, CDC NCM (NO ZLP) [ 117.207079][ T5056] loop1: detected capacity change from 0 to 256 [ 117.237439][ T5056] exfat: Deprecated parameter 'namecase' [ 117.261073][ T5056] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 117.687554][ T5113] netlink: 'syz.1.2002': attribute type 13 has an invalid length. [ 117.701919][ T5113] gretap0: refused to change device tx_queue_len [ 117.722125][ T5113] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 117.739208][ T5117] loop7: detected capacity change from 0 to 256 [ 117.746308][ T5117] FAT-fs (loop7): Unrecognized mount option "˙˙˙˙˙˙˙˙˙˙˙" or missing value [ 117.806380][ T5122] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2006'. [ 117.823475][ T5124] x_tables: duplicate underflow at hook 4 [ 118.210600][ T1241] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 118.231306][ T308] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 118.239055][ T314] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 118.271157][ T5157] loop9: detected capacity change from 0 to 8192 [ 118.323067][ T1244] I/O error, dev loop9, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 118.391770][ T1241] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 118.402338][ T1241] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 118.415049][ T1241] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 118.424009][ T1241] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.431908][ T1241] usb 3-1: Product: syz [ 118.435896][ T1241] usb 3-1: Manufacturer: syz [ 118.440321][ T1241] usb 3-1: SerialNumber: syz [ 118.440644][ T308] usb 8-1: Using ep0 maxpacket: 16 [ 118.451762][ T308] usb 8-1: config 0 has no interfaces? [ 118.459618][ T314] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 118.480580][ T314] usb 1-1: config 0 has no interfaces? [ 118.485973][ T314] usb 1-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 118.495068][ T314] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.503817][ T308] usb 8-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 118.512744][ T308] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.521514][ T314] usb 1-1: config 0 descriptor?? [ 118.526399][ T308] usb 8-1: Product: syz [ 118.530583][ T308] usb 8-1: Manufacturer: syz [ 118.540293][ T308] usb 8-1: SerialNumber: syz [ 118.549224][ T308] r8152-cfgselector 8-1: config 0 descriptor?? [ 118.660269][ T5168] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.668107][ T5168] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.675987][ T5168] device bridge_slave_0 entered promiscuous mode [ 118.685503][ T5168] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.692640][ T5168] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.700101][ T5168] device bridge_slave_1 entered promiscuous mode [ 118.710989][ T314] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 118.738241][ T1151] usb 1-1: USB disconnect, device number 17 [ 118.786717][ T5168] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.793622][ T5168] bridge0: port 2(bridge_slave_1) entered forwarding state [ 118.800724][ T5168] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.807570][ T5168] bridge0: port 1(bridge_slave_0) entered forwarding state [ 118.835199][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 118.843378][ T321] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.851138][ T321] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.863770][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 118.872048][ T321] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.878897][ T321] bridge0: port 1(bridge_slave_0) entered forwarding state [ 118.887952][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 118.896632][ T321] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.903536][ T321] bridge0: port 2(bridge_slave_1) entered forwarding state [ 118.912737][ T314] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 118.924784][ T314] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 118.934498][ T314] usb 2-1: config 0 interface 0 has no altsetting 0 [ 118.941040][ T314] usb 2-1: New USB device found, idVendor=06a3, idProduct=0621, bcdDevice= 0.00 [ 118.949953][ T314] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.959377][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 118.967911][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 118.972532][ T314] usb 2-1: config 0 descriptor?? [ 118.981219][ T1151] usb 8-1: USB disconnect, device number 8 [ 118.997422][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 119.012582][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 119.020924][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 119.032252][ T5168] device veth0_vlan entered promiscuous mode [ 119.039489][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 119.047383][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 119.062275][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 119.070789][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 119.080453][ T5168] device veth1_macvtap entered promiscuous mode [ 119.087675][ T2322] device bridge_slave_1 left promiscuous mode [ 119.093733][ T2322] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.101706][ T2322] device bridge_slave_0 left promiscuous mode [ 119.107787][ T2322] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.116138][ T2322] device veth1_macvtap left promiscuous mode [ 119.122219][ T2322] device veth0_vlan left promiscuous mode [ 119.247102][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 119.254936][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 119.263244][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 119.284421][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 119.298826][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 119.384245][ T314] saitek 0003:06A3:0621.001A: unbalanced delimiter at end of report description [ 119.396901][ T314] saitek 0003:06A3:0621.001A: parse failed [ 119.419136][ T314] saitek: probe of 0003:06A3:0621.001A failed with error -22 [ 119.481004][ T1241] cdc_ncm 3-1:1.0: bind() failure [ 119.500462][ T1241] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 119.511323][ T1241] cdc_ncm 3-1:1.1: bind() failure [ 119.517533][ T5189] input: syz1 as /devices/virtual/input/input22 [ 119.538066][ T1244] udevd[1244]: setting owner of /dev/input/event3 to uid=0, gid=104 failed: No such file or directory [ 119.586023][ T312] usb 2-1: USB disconnect, device number 5 [ 119.636820][ T5193] xt_hashlimit: size too large, truncated to 1048576 [ 119.684117][ T24] usb 3-1: USB disconnect, device number 18 [ 119.937485][ T28] kauditd_printk_skb: 18 callbacks suppressed [ 119.937500][ T28] audit: type=1400 audit(1741911955.880:7578): avc: denied { append } for pid=5206 comm="syz.7.2042" name="001" dev="devtmpfs" ino=178 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 120.248572][ T5221] netlink: 96 bytes leftover after parsing attributes in process `syz.7.2048'. [ 120.354844][ T5236] syz.0.2056[5236] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 120.354930][ T5236] syz.0.2056[5236] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 120.377342][ T28] audit: type=1400 audit(1741911956.320:7579): avc: denied { connect } for pid=5234 comm="syz.1.2054" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 120.794386][ T308] kernel write not supported for file bpf-prog (pid: 308 comm: kworker/0:2) [ 120.810378][ T5290] loop1: detected capacity change from 0 to 1024 [ 120.859903][ T5290] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 120.871550][ T5290] ext4 filesystem being mounted at /103/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 120.904446][ T5290] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 120.951773][ T4216] EXT4-fs (loop1): unmounting filesystem. [ 121.059784][ T5313] loop1: detected capacity change from 0 to 512 [ 121.068039][ T5313] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 121.119969][ T5315] loop1: detected capacity change from 0 to 256 [ 121.120049][ T5317] loop9: detected capacity change from 0 to 8 [ 121.150217][ T5315] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66cd20, utbl_chksum : 0xe619d30d) [ 121.162935][ T5315] exFAT-fs (loop1): failed to load alloc-bitmap [ 121.169293][ T5315] exFAT-fs (loop1): failed to recognize exfat type [ 121.474402][ T5339] loop7: detected capacity change from 0 to 512 [ 121.489295][ T5339] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 121.741887][ T5349] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 121.770614][ T5349] FAT-fs (loop7): unable to read boot sector [ 121.873055][ T28] audit: type=1400 audit(1741911957.820:7580): avc: denied { append } for pid=5359 comm="syz.7.2108" name="ppp" dev="devtmpfs" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 122.169617][ T28] audit: type=1400 audit(1741911958.110:7581): avc: denied { watch } for pid=5378 comm="syz.0.2117" path="/418/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 122.291317][ T5400] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2124'. [ 122.375698][ T5416] device ip6tnl2 entered promiscuous mode [ 122.480955][ T28] audit: type=1400 audit(1741911958.430:7582): avc: denied { unmount } for pid=297 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 122.506633][ T28] audit: type=1400 audit(1741911958.450:7583): avc: denied { ioctl } for pid=5429 comm="syz.7.2139" path="socket:[41630]" dev="sockfs" ino=41630 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 122.555431][ T28] audit: type=1400 audit(1741911958.500:7584): avc: denied { create } for pid=5432 comm="syz.0.2141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 122.610610][ T1241] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 122.650612][ T6] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 122.712164][ T28] audit: type=1400 audit(1741911958.660:7585): avc: denied { getopt } for pid=5448 comm="syz.0.2148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 122.782824][ T24] kernel write not supported for file bpf-prog (pid: 24 comm: kworker/1:0) [ 122.794414][ T28] audit: type=1400 audit(1741911958.740:7586): avc: denied { watch } for pid=5460 comm="syz.7.2153" path="/289/file0" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 122.796286][ T1241] usb 3-1: Using ep0 maxpacket: 16 [ 122.828566][ T1241] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 122.841788][ T1241] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 122.856605][ T6] usb 4-1: config 0 has an invalid interface number: 120 but max is 0 [ 122.856770][ T1241] usb 3-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 122.866288][ T6] usb 4-1: config 0 has no interface number 0 [ 122.874178][ T1241] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.894996][ T6] usb 4-1: config 0 interface 120 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 122.905170][ T6] usb 4-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 122.908541][ T1241] usb 3-1: config 0 descriptor?? [ 122.914527][ T6] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.927920][ T6] usb 4-1: config 0 descriptor?? [ 122.963424][ T5470] device ip6gretap1 entered promiscuous mode [ 122.994977][ T28] audit: type=1400 audit(1741911958.940:7587): avc: denied { read } for pid=5471 comm="syz.0.2158" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 123.338068][ T5516] kvm: vcpu 2: requested 128 ns lapic timer period limited to 200000 ns [ 123.346530][ T5516] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 123.349394][ T1241] input: HID 05ac:8241 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:05AC:8241.001B/input/input23 [ 123.446146][ T5523] loop7: detected capacity change from 0 to 256 [ 123.454013][ T1241] appleir 0003:05AC:8241.001B: input,hiddev96,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.2-1/input0 [ 123.473505][ T5523] exfat: Deprecated parameter 'namecase' [ 123.526986][ T5523] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 124.049524][ T5556] IPv6: NLM_F_REPLACE set, but no existing node found! [ 124.160198][ T5564] device batadv_slave_1 entered promiscuous mode [ 124.570783][ T6] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 124.751687][ T6] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 124.762498][ T6] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 124.772241][ T6] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 124.784955][ T6] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 124.793785][ T6] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.802476][ T6] usb 8-1: config 0 descriptor?? [ 125.016807][ T5589] bridge0: port 3(vlan2) entered blocking state [ 125.027864][ T5589] bridge0: port 3(vlan2) entered disabled state [ 125.101241][ T5599] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2213'. [ 125.165367][ T5603] loop1: detected capacity change from 0 to 512 [ 125.175583][ T5603] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 125.190743][ T5603] EXT4-fs (loop1): 1 truncate cleaned up [ 125.196277][ T5603] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 125.212116][ T6] plantronics 0003:047F:FFFF.001C: No inputs registered, leaving [ 125.221168][ T6] plantronics 0003:047F:FFFF.001C: hiddev97,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 125.390583][ T1241] usb 3-1: reset high-speed USB device number 19 using dummy_hcd [ 125.398764][ T1241] usb 3-1: device reset changed ep0 maxpacket size! [ 125.405550][ T24] usb 3-1: USB disconnect, device number 19 [ 125.417067][ T1241] usb 8-1: USB disconnect, device number 9 [ 125.438479][ T312] usb 4-1: USB disconnect, device number 7 [ 125.458435][ T5610] syz.3.2218[5610] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 125.458529][ T5610] syz.3.2218[5610] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 125.590597][ T24] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 125.781754][ T24] usb 3-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 125.790697][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.799114][ T24] usb 3-1: config 0 descriptor?? [ 125.991803][ T28] kauditd_printk_skb: 18 callbacks suppressed [ 125.991821][ T28] audit: type=1400 audit(1741911961.940:7606): avc: denied { write } for pid=5645 comm="syz.7.2234" name="bus" dev="tmpfs" ino=1647 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 126.032572][ T28] audit: type=1400 audit(1741911961.940:7607): avc: denied { open } for pid=5645 comm="syz.7.2234" path="/312/bus" dev="tmpfs" ino=1647 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 126.038119][ T5648] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2235'. [ 126.070253][ T28] audit: type=1400 audit(1741911961.940:7608): avc: denied { read } for pid=5645 comm="syz.7.2234" name="bus" dev="tmpfs" ino=1647 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 126.132768][ T5655] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 126.142495][ T28] audit: type=1400 audit(1741911962.090:7609): avc: denied { relabelto } for pid=5654 comm="syz.7.2238" name="313" dev="tmpfs" ino=1648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 126.169459][ T28] audit: type=1400 audit(1741911962.090:7610): avc: denied { associate } for pid=5654 comm="syz.7.2238" name="313" dev="tmpfs" ino=1648 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:fsadm_exec_t:s0" [ 126.217602][ T28] audit: type=1400 audit(1741911962.150:7611): avc: denied { write } for pid=2160 comm="syz-executor" name="313" dev="tmpfs" ino=1648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 126.247832][ T24] hid-generic 0003:04F3:0755.001D: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.2-1/input0 [ 126.281874][ T28] audit: type=1400 audit(1741911962.150:7612): avc: denied { remove_name } for pid=2160 comm="syz-executor" name="binderfs" dev="tmpfs" ino=1652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 126.350608][ T28] audit: type=1400 audit(1741911962.150:7613): avc: denied { rmdir } for pid=2160 comm="syz-executor" name="313" dev="tmpfs" ino=1648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 126.381027][ T4216] EXT4-fs (loop1): unmounting filesystem. [ 126.428742][ T5670] netlink: 'syz.1.2242': attribute type 4 has an invalid length. [ 126.443455][ T5670] netlink: 'syz.1.2242': attribute type 4 has an invalid length. [ 126.446754][ T1151] usb 3-1: USB disconnect, device number 20 [ 126.498383][ T321] Bluetooth: hci0: Frame reassembly failed (-84) [ 126.539198][ T28] audit: type=1400 audit(1741911962.480:7614): avc: denied { write } for pid=5679 comm="syz.1.2248" name="snapshot" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 126.563576][ T5680] random: crng reseeded on system resumption [ 126.626153][ T28] audit: type=1400 audit(1741911962.570:7615): avc: denied { ioctl } for pid=5679 comm="syz.1.2248" path="/dev/snapshot" dev="devtmpfs" ino=91 ioctlcmd=0x3304 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 126.987494][ T5712] device ip6tnl1 entered promiscuous mode [ 126.993261][ T24] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 127.191701][ T24] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 127.202030][ T24] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 127.220660][ T24] usb 8-1: New USB device found, idVendor=89b7, idProduct=4050, bcdDevice= 0.11 [ 127.232366][ T24] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 127.241018][ T24] usb 8-1: SerialNumber: syz [ 127.245834][ T1151] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 127.431714][ T1151] usb 4-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 127.442798][ T1151] usb 4-1: config 0 interface 0 has no altsetting 0 [ 127.449563][ T1151] usb 4-1: New USB device found, idVendor=17ef, idProduct=6085, bcdDevice= 0.00 [ 127.461106][ T1151] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.466692][ T24] usb 8-1: 0:2 : does not exist [ 127.475827][ T1151] usb 4-1: config 0 descriptor?? [ 127.501317][ T24] usb 8-1: USB disconnect, device number 10 [ 127.521178][ T5729] syz.2.2269[5729] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 127.521290][ T5729] syz.2.2269[5729] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 127.535487][ T5729] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2269'. [ 127.592572][ T5731] serio: Serial port ptm1 [ 127.721096][ T1244] udevd[1244]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 127.884941][ T1151] hid-rmi 0003:17EF:6085.001E: item fetching failed at offset 0/3 [ 127.898197][ T1151] hid-rmi 0003:17EF:6085.001E: parse failed [ 127.905047][ T1151] hid-rmi: probe of 0003:17EF:6085.001E failed with error -22 [ 128.018431][ T5739] loop1: detected capacity change from 0 to 40427 [ 128.030789][ T5739] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 128.038626][ T5739] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 128.076330][ T5739] F2FS-fs (loop1): Found nat_bits in checkpoint [ 128.096711][ T1151] usb 4-1: USB disconnect, device number 8 [ 128.113418][ T5763] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2283'. [ 128.143901][ T5765] incfs: iterate_incfs_dir / -22 [ 128.149851][ T5765] incfs: iterate_incfs_dir / -22 [ 128.162038][ T5739] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 128.168912][ T5739] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 128.284678][ T5739] syz.1.2273: attempt to access beyond end of device [ 128.284678][ T5739] loop1: rw=2049, sector=77824, nr_sectors = 2112 limit=40427 [ 128.305055][ T5739] syz.1.2273: attempt to access beyond end of device [ 128.305055][ T5739] loop1: rw=2049, sector=79936, nr_sectors = 1984 limit=40427 [ 128.348210][ T5739] syz.1.2273: attempt to access beyond end of device [ 128.348210][ T5739] loop1: rw=2049, sector=49152, nr_sectors = 2056 limit=40427 [ 128.386999][ T5739] syz.1.2273: attempt to access beyond end of device [ 128.386999][ T5739] loop1: rw=2049, sector=51208, nr_sectors = 2040 limit=40427 [ 128.447087][ T5776] syz.1.2273: attempt to access beyond end of device [ 128.447087][ T5776] loop1: rw=524288, sector=77824, nr_sectors = 256 limit=40427 [ 128.455442][ T5739] syz.1.2273: attempt to access beyond end of device [ 128.455442][ T5739] loop1: rw=2049, sector=57344, nr_sectors = 3824 limit=40427 [ 128.461322][ T5776] syz.1.2273: attempt to access beyond end of device [ 128.461322][ T5776] loop1: rw=0, sector=77824, nr_sectors = 8 limit=40427 [ 128.484317][ T5739] syz.1.2273: attempt to access beyond end of device [ 128.484317][ T5739] loop1: rw=2049, sector=61168, nr_sectors = 1976 limit=40427 [ 128.522929][ T5776] syz.1.2273: attempt to access beyond end of device [ 128.522929][ T5776] loop1: rw=0, sector=77824, nr_sectors = 8 limit=40427 [ 128.543998][ T5776] syz.1.2273: attempt to access beyond end of device [ 128.543998][ T5776] loop1: rw=0, sector=77824, nr_sectors = 8 limit=40427 [ 128.550609][ T390] Bluetooth: hci0: command 0x1003 tx timeout [ 128.563274][ T895] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 128.780599][ T1151] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 128.940671][ T312] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 128.961697][ T1151] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 128.972508][ T1151] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 128.982118][ T1151] usb 3-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 128.991115][ T1151] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.999810][ T1151] usb 3-1: config 0 descriptor?? [ 129.109359][ T5802] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2299'. [ 129.121920][ T312] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 129.133179][ T312] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 129.143158][ T312] usb 4-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 129.152306][ T312] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.161452][ T312] usb 4-1: config 0 descriptor?? [ 129.201707][ T5808] bridge0: port 3(vlan2) entered blocking state [ 129.207957][ T5808] bridge0: port 3(vlan2) entered disabled state [ 129.407565][ T1151] hid-led 0003:0FC5:B080.001F: item fetching failed at offset 0/3 [ 129.415792][ T1151] hid-led: probe of 0003:0FC5:B080.001F failed with error -22 [ 129.450584][ T308] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 129.570378][ T312] playstation 0003:054C:0DF2.0020: unknown main item tag 0x0 [ 129.577681][ T312] playstation 0003:054C:0DF2.0020: unknown main item tag 0x0 [ 129.584869][ T312] playstation 0003:054C:0DF2.0020: unknown main item tag 0x0 [ 129.592233][ T312] playstation 0003:054C:0DF2.0020: unknown main item tag 0x0 [ 129.599465][ T312] playstation 0003:054C:0DF2.0020: unknown main item tag 0x0 [ 129.607377][ T312] playstation 0003:054C:0DF2.0020: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.3-1/input0 [ 129.619050][ T1151] usb 3-1: USB disconnect, device number 21 [ 129.630624][ T308] usb 1-1: Using ep0 maxpacket: 16 [ 129.636833][ T308] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 129.647891][ T308] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 129.657387][ T308] usb 1-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 129.666233][ T308] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.674994][ T308] usb 1-1: config 0 descriptor?? [ 129.771076][ T312] playstation 0003:054C:0DF2.0020: Invalid reportID received, expected 9 got 0 [ 129.779933][ T312] playstation 0003:054C:0DF2.0020: Failed to retrieve DualSense pairing info: -22 [ 129.788968][ T312] playstation 0003:054C:0DF2.0020: Failed to get MAC address from DualSense [ 129.797444][ T312] playstation 0003:054C:0DF2.0020: Failed to create dualsense. [ 129.805614][ T312] playstation: probe of 0003:054C:0DF2.0020 failed with error -22 [ 129.972684][ T1151] usb 4-1: USB disconnect, device number 9 [ 130.083386][ T308] input: HID 05ac:8241 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:05AC:8241.0021/input/input24 [ 130.133575][ T5811] loop7: detected capacity change from 0 to 256 [ 130.140329][ T5814] netlink: 116 bytes leftover after parsing attributes in process `syz.1.2313'. [ 130.163283][ T308] appleir 0003:05AC:8241.0021: input,hiddev96,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.0-1/input0 [ 130.168322][ T5811] exFAT-fs (loop7): failed to load upcase table (idx : 0x0001034b, chksum : 0x6322ccb6, utbl_chksum : 0xe619d30d) [ 130.422922][ T5839] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 130.440718][ T5839] SELinux: failed to load policy [ 130.548033][ T5852] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2322'. [ 130.645509][ T5860] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 130.763277][ T5871] loop7: detected capacity change from 0 to 512 [ 130.779284][ T5871] EXT4-fs: Ignoring removed orlov option [ 130.793643][ T5877] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2334'. [ 130.811366][ T5871] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 130.820646][ T5871] ext4 filesystem being mounted at /334/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 131.110605][ T1151] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 131.290695][ T1151] usb 8-1: Using ep0 maxpacket: 8 [ 131.296834][ T1151] usb 8-1: config 0 has an invalid interface number: 31 but max is 0 [ 131.304904][ T1151] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 131.314977][ T1151] usb 8-1: config 0 has no interface number 0 [ 131.324602][ T1151] usb 8-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 131.333568][ T1151] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.341323][ T1151] usb 8-1: Product: syz [ 131.345298][ T1151] usb 8-1: Manufacturer: syz [ 131.349695][ T1151] usb 8-1: SerialNumber: syz [ 131.355108][ T1151] usb 8-1: config 0 descriptor?? [ 131.360965][ T1151] usb 8-1: Found Unit with invalid ID 0. [ 131.563758][ T1151] usb 8-1: USB disconnect, device number 11 [ 131.711139][ T5896] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2338'. [ 131.780680][ T5907] futex_wake_op: syz.0.2342 tries to shift op by -1; fix this program [ 131.832739][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 131.832760][ T28] audit: type=1400 audit(1741911967.780:7626): avc: denied { validate_trans } for pid=5910 comm="syz.3.2345" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 131.946379][ T28] audit: type=1400 audit(1741911967.890:7627): avc: denied { mounton } for pid=5931 comm="syz.1.2359" path="/170/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 131.946542][ T1241] kernel write not supported for file bpf-prog (pid: 1241 comm: kworker/1:4) [ 132.011567][ T24] usb 1-1: USB disconnect, device number 18 [ 132.054091][ T5944] 9pnet: p9_errstr2errno: server reported unknown error ť@00000000000000000005 [ 132.076867][ T2160] EXT4-fs (loop7): unmounting filesystem. [ 132.134303][ T5959] loop7: detected capacity change from 0 to 2048 [ 132.178833][ T5959] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a002e018, mo2=0002] [ 132.188314][ T5959] System zones: 0-4 [ 132.194287][ T5959] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 132.202795][ T5959] ext4 filesystem being mounted at /335/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 132.229100][ T2160] EXT4-fs (loop7): unmounting filesystem. [ 132.253959][ T5970] block device autoloading is deprecated and will be removed. [ 132.267507][ T5970] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 132.530658][ T6] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 132.711834][ T6] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 132.720720][ T6] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.729058][ T6] usb 1-1: config 0 descriptor?? [ 133.939673][ T6] usb 1-1: Cannot set autoneg [ 133.944298][ T6] MOSCHIP usb-ethernet driver: probe of 1-1:0.0 failed with error -71 [ 133.952991][ T6] usb 1-1: USB disconnect, device number 19 [ 134.486674][ T5997] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2385'. [ 134.673151][ T28] audit: type=1400 audit(1741911970.620:7628): avc: denied { ioctl } for pid=6035 comm="syz.0.2405" path="socket:[44400]" dev="sockfs" ino=44400 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 134.711489][ T28] audit: type=1400 audit(1741911970.620:7629): avc: denied { mount } for pid=6033 comm="syz.1.2406" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 134.736083][ T6041] loop1: detected capacity change from 0 to 256 [ 134.751404][ T28] audit: type=1400 audit(1741911970.640:7630): avc: denied { setopt } for pid=6035 comm="syz.0.2405" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 134.773461][ T28] audit: type=1400 audit(1741911970.640:7631): avc: denied { unmount } for pid=4216 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 134.806374][ T6041] FAT-fs (loop1): Directory bread(block 64) failed [ 134.817293][ T6041] FAT-fs (loop1): Directory bread(block 65) failed [ 134.830311][ T6041] FAT-fs (loop1): Directory bread(block 66) failed [ 134.843520][ T6041] FAT-fs (loop1): Directory bread(block 67) failed [ 134.850866][ T28] audit: type=1400 audit(1741911970.660:7632): avc: denied { connect } for pid=6038 comm="syz.3.2407" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 134.860721][ T6041] FAT-fs (loop1): Directory bread(block 68) failed [ 134.889591][ T6041] FAT-fs (loop1): Directory bread(block 69) failed [ 134.896355][ T6041] FAT-fs (loop1): Directory bread(block 70) failed [ 134.911274][ T6041] FAT-fs (loop1): Directory bread(block 71) failed [ 134.923921][ T6041] FAT-fs (loop1): Directory bread(block 72) failed [ 134.938585][ T6041] FAT-fs (loop1): Directory bread(block 73) failed [ 134.948808][ T6063] device batadv_slave_1 entered promiscuous mode [ 134.955843][ T6062] device batadv_slave_1 left promiscuous mode [ 134.964037][ T28] audit: type=1400 audit(1741911970.910:7633): avc: denied { mount } for pid=6040 comm="syz.1.2408" name="/" dev="loop1" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 135.029339][ T28] audit: type=1400 audit(1741911970.970:7634): avc: denied { unmount } for pid=4216 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 135.369931][ T6099] futex_wake_op: syz.1.2432 tries to shift op by 32; fix this program [ 135.406316][ T6103] input: syz0 as /devices/virtual/input/input25 [ 135.412996][ T6105] af_packet: tpacket_rcv: packet too big, clamped from 1 to 4294967272. macoff=96 [ 135.445562][ T28] audit: type=1400 audit(1741911971.390:7635): avc: denied { read write } for pid=6108 comm="syz.3.2438" name="uhid" dev="devtmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 135.478529][ T24] hid-generic 0008:016E:FFFFFFFE.0022: unknown main item tag 0x0 [ 135.486627][ T24] hid-generic 0008:016E:FFFFFFFE.0022: unknown main item tag 0x0 [ 135.500603][ T24] hid-generic 0008:016E:FFFFFFFE.0022: unknown main item tag 0x0 [ 135.508200][ T24] hid-generic 0008:016E:FFFFFFFE.0022: unknown main item tag 0x0 [ 135.518095][ T24] hid-generic 0008:016E:FFFFFFFE.0022: unknown main item tag 0x0 [ 135.526246][ T24] hid-generic 0008:016E:FFFFFFFE.0022: unknown main item tag 0x0 [ 135.534334][ T24] hid-generic 0008:016E:FFFFFFFE.0022: unknown main item tag 0x0 [ 135.542275][ T24] hid-generic 0008:016E:FFFFFFFE.0022: unknown main item tag 0x0 [ 135.551291][ T24] hid-generic 0008:016E:FFFFFFFE.0022: unknown main item tag 0x0 [ 135.558847][ T24] hid-generic 0008:016E:FFFFFFFE.0022: unknown main item tag 0x0 [ 135.566459][ T24] hid-generic 0008:016E:FFFFFFFE.0022: unknown main item tag 0x0 [ 135.574011][ T24] hid-generic 0008:016E:FFFFFFFE.0022: unknown main item tag 0x0 [ 135.581537][ T24] hid-generic 0008:016E:FFFFFFFE.0022: unknown main item tag 0x0 [ 135.589079][ T24] hid-generic 0008:016E:FFFFFFFE.0022: unknown main item tag 0x0 [ 135.599372][ T24] hid-generic 0008:016E:FFFFFFFE.0022: unknown main item tag 0x0 [ 135.606989][ T24] hid-generic 0008:016E:FFFFFFFE.0022: unknown main item tag 0x0 [ 135.614596][ T24] hid-generic 0008:016E:FFFFFFFE.0022: unknown main item tag 0x0 [ 135.623114][ T24] hid-generic 0008:016E:FFFFFFFE.0022: unknown main item tag 0x0 [ 135.630716][ T24] hid-generic 0008:016E:FFFFFFFE.0022: unknown main item tag 0x0 [ 135.638224][ T24] hid-generic 0008:016E:FFFFFFFE.0022: unknown main item tag 0x0 [ 135.645812][ T24] hid-generic 0008:016E:FFFFFFFE.0022: unknown main item tag 0x0 [ 135.653362][ T24] hid-generic 0008:016E:FFFFFFFE.0022: unknown main item tag 0x0 [ 135.660911][ T24] hid-generic 0008:016E:FFFFFFFE.0022: unknown main item tag 0x0 [ 135.668426][ T24] hid-generic 0008:016E:FFFFFFFE.0022: unknown main item tag 0x0 [ 135.676074][ T24] hid-generic 0008:016E:FFFFFFFE.0022: unknown main item tag 0x0 [ 135.684042][ T24] hid-generic 0008:016E:FFFFFFFE.0022: unknown main item tag 0x0 [ 135.691556][ T24] hid-generic 0008:016E:FFFFFFFE.0022: unknown main item tag 0x0 [ 135.699072][ T24] hid-generic 0008:016E:FFFFFFFE.0022: unknown main item tag 0x0 [ 135.706670][ T24] hid-generic 0008:016E:FFFFFFFE.0022: unknown main item tag 0x0 [ 135.714195][ T24] hid-generic 0008:016E:FFFFFFFE.0022: unknown main item tag 0x0 [ 135.721777][ T24] hid-generic 0008:016E:FFFFFFFE.0022: unknown main item tag 0x0 [ 135.729282][ T24] hid-generic 0008:016E:FFFFFFFE.0022: unknown main item tag 0x0 [ 135.736879][ T24] hid-generic 0008:016E:FFFFFFFE.0022: unknown main item tag 0x0 [ 135.753224][ T24] hid-generic 0008:016E:FFFFFFFE.0022: unknown main item tag 0x0 [ 135.761048][ T24] hid-generic 0008:016E:FFFFFFFE.0022: unknown main item tag 0x0 [ 135.768695][ T24] hid-generic 0008:016E:FFFFFFFE.0022: unknown main item tag 0x0 [ 135.776260][ T24] hid-generic 0008:016E:FFFFFFFE.0022: unknown main item tag 0x0 [ 135.784214][ T24] hid-generic 0008:016E:FFFFFFFE.0022: unknown main item tag 0x0 [ 135.800100][ T24] hid-generic 0008:016E:FFFFFFFE.0022: unknown main item tag 0x0 [ 135.801738][ T314] hid-generic 0000:0000:0000.0023: unknown main item tag 0x1 [ 135.807836][ T24] hid-generic 0008:016E:FFFFFFFE.0022: unknown main item tag 0x0 [ 135.815615][ T314] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 135.823174][ T24] hid-generic 0008:016E:FFFFFFFE.0022: unknown main item tag 0x0 [ 135.830116][ T314] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 135.839153][ T24] hid-generic 0008:016E:FFFFFFFE.0022: unknown main item tag 0x0 [ 135.844968][ T314] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 135.852518][ T24] hid-generic 0008:016E:FFFFFFFE.0022: unknown main item tag 0x0 [ 135.859566][ T314] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 135.867332][ T24] hid-generic 0008:016E:FFFFFFFE.0022: unknown main item tag 0x0 [ 135.874450][ T314] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 135.889040][ T24] hid-generic 0008:016E:FFFFFFFE.0022: unknown main item tag 0x0 [ 135.896949][ T314] hid-generic 0000:0000:0000.0023: unknown main item tag 0x4 [ 135.901815][ T24] hid-generic 0008:016E:FFFFFFFE.0022: unknown main item tag 0x0 [ 135.904300][ T314] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 135.911823][ T24] hid-generic 0008:016E:FFFFFFFE.0022: unknown main item tag 0x0 [ 135.928540][ T314] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 135.933613][ T24] hid-generic 0008:016E:FFFFFFFE.0022: unknown main item tag 0x0 [ 135.945073][ T6123] netlink: 272 bytes leftover after parsing attributes in process `syz.7.2443'. [ 135.946945][ T314] hid-generic 0000:0000:0000.0023: unknown main item tag 0x4 [ 135.954074][ T24] hid-generic 0008:016E:FFFFFFFE.0022: unknown main item tag 0x0 [ 135.961673][ T314] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 135.969113][ T24] hid-generic 0008:016E:FFFFFFFE.0022: unknown main item tag 0x0 [ 135.976729][ T314] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 135.991545][ T314] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 135.998777][ T314] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 136.006056][ T24] hid-generic 0008:016E:FFFFFFFE.0022: unknown main item tag 0x0 [ 136.006084][ T24] hid-generic 0008:016E:FFFFFFFE.0022: unknown main item tag 0x0 [ 136.021740][ T314] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 136.021871][ T24] hid-generic 0008:016E:FFFFFFFE.0022: hidraw0: HID v0.01 Device [syz0] on syz1 [ 136.028949][ T314] hid-generic 0000:0000:0000.0023: unknown main item tag 0x4 [ 136.028974][ T314] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 136.054017][ T314] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 136.063174][ T314] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 136.070557][ T314] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 136.077856][ T314] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 136.085095][ T314] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 136.092533][ T314] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 136.099992][ T314] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 136.107414][ T314] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 136.114942][ T314] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 136.122182][ T314] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 136.129357][ T314] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 136.136609][ T314] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 136.143788][ T314] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 136.150990][ T314] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 136.158167][ T314] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 136.165512][ T314] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 136.172767][ T314] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 136.179930][ T314] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 136.187158][ T314] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 136.194351][ T314] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 136.202088][ T314] hid-generic 0000:0000:0000.0023: hidraw0: HID v0.00 Device [syz0] on syz1 [ 136.214082][ T6125] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2444'. [ 136.281317][ T6134] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2448'. [ 136.339548][ T6140] loop7: detected capacity change from 0 to 4096 [ 136.351499][ T6140] EXT4-fs (loop7): Test dummy encryption mode enabled [ 136.391176][ T6140] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 136.432224][ T2160] EXT4-fs (loop7): unmounting filesystem. [ 136.442737][ T6149] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2455'. [ 136.452042][ T6149] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2455'. [ 136.713442][ T1151] hid-generic 0000:0003:0001.0024: unknown main item tag 0x0 [ 136.720952][ T1151] hid-generic 0000:0003:0001.0024: unknown main item tag 0x0 [ 136.728753][ T1151] hid-generic 0000:0003:0001.0024: hidraw0: HID v0.ff Device [syz0] on syz1 [ 136.755512][ T6167] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2462'. [ 136.937203][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 136.937222][ T28] audit: type=1326 audit(1741911972.880:7642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6184 comm="syz.3.2471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd15118d169 code=0x7ffc0000 [ 136.973993][ T28] audit: type=1326 audit(1741911972.890:7643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6184 comm="syz.3.2471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd15118d169 code=0x7ffc0000 [ 136.997627][ T28] audit: type=1326 audit(1741911972.890:7644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6184 comm="syz.3.2471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd15118d169 code=0x7ffc0000 [ 137.022272][ T28] audit: type=1326 audit(1741911972.890:7645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6184 comm="syz.3.2471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7fd15118d169 code=0x7ffc0000 [ 137.054512][ T28] audit: type=1326 audit(1741911972.890:7646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6184 comm="syz.3.2471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd15118d169 code=0x7ffc0000 [ 137.080261][ T28] audit: type=1326 audit(1741911972.890:7647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6184 comm="syz.3.2471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fd15118d169 code=0x7ffc0000 [ 137.080757][ T1151] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 137.107890][ T28] audit: type=1326 audit(1741911972.890:7648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6184 comm="syz.3.2471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd15118d169 code=0x7ffc0000 [ 137.158211][ T28] audit: type=1326 audit(1741911972.890:7649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6184 comm="syz.3.2471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fd15118d169 code=0x7ffc0000 [ 137.182819][ T28] audit: type=1326 audit(1741911972.920:7650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6184 comm="syz.3.2471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd15118d169 code=0x7ffc0000 [ 137.227666][ T6201] loop0: detected capacity change from 0 to 512 [ 137.236253][ T28] audit: type=1326 audit(1741911972.950:7651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6184 comm="syz.3.2471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd15118d169 code=0x7ffc0000 [ 137.286842][ T6201] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 137.313461][ T6201] ext4 filesystem being mounted at /483/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 137.320550][ T1151] usb 8-1: Using ep0 maxpacket: 16 [ 137.332176][ T1151] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 137.350545][ T1151] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 137.360847][ T1151] usb 8-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 137.369722][ T1151] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.378485][ T1151] usb 8-1: config 0 descriptor?? [ 137.482539][ T297] EXT4-fs (loop0): unmounting filesystem. [ 137.577058][ T6222] loop1: detected capacity change from 0 to 256 [ 137.792666][ T1151] hid-multitouch 0003:1FD2:6007.0025: unknown main item tag 0x0 [ 137.812443][ T1151] hid-multitouch 0003:1FD2:6007.0025: unknown main item tag 0x0 [ 137.820323][ T1151] hid-multitouch 0003:1FD2:6007.0025: unknown main item tag 0x0 [ 137.838364][ T1151] hid-multitouch 0003:1FD2:6007.0025: unknown main item tag 0x0 [ 137.851201][ T1151] hid-multitouch 0003:1FD2:6007.0025: unknown main item tag 0x0 [ 137.861748][ T1151] hid-multitouch 0003:1FD2:6007.0025: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.7-1/input0 [ 137.930647][ T24] usb 1-1: new full-speed USB device number 20 using dummy_hcd [ 137.938168][ T39] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 138.014276][ T6250] sock: sock_set_timeout: `syz.1.2497' (pid 6250) tries to set negative timeout [ 138.023520][ T1151] usb 8-1: USB disconnect, device number 12 [ 138.120569][ T39] usb 4-1: Using ep0 maxpacket: 16 [ 138.126672][ T24] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 138.140580][ T39] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 138.159685][ T24] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 138.168475][ T39] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.177296][ T39] usb 4-1: Product: syz [ 138.181418][ T39] usb 4-1: Manufacturer: syz [ 138.185891][ T39] usb 4-1: SerialNumber: syz [ 138.191389][ T24] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 138.200260][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.212014][ T39] usb 4-1: config 0 descriptor?? [ 138.216890][ T24] usb 1-1: Product: syz [ 138.221053][ T24] usb 1-1: Manufacturer: syz [ 138.226376][ T39] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 138.234458][ T24] usb 1-1: SerialNumber: syz [ 138.239838][ T39] usb 4-1: Detected FT232H [ 138.350547][ T312] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 138.426252][ T39] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 138.453130][ T24] usb 1-1: 0:2 : does not exist [ 138.462822][ T24] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 138.482338][ T24] usb 1-1: USB disconnect, device number 20 [ 138.540630][ T312] usb 2-1: Using ep0 maxpacket: 32 [ 138.546808][ T312] usb 2-1: New USB device found, idVendor=13b1, idProduct=0026, bcdDevice=16.0c [ 138.558741][ T312] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.576079][ T6267] __vm_enough_memory: pid: 6267, comm: syz.2.2515, no enough memory for the allocation [ 138.580682][ T312] usb 2-1: config 0 descriptor?? [ 138.595105][ T312] usb 2-1: bad CDC descriptors [ 138.641781][ T39] ftdi_sio 4-1:0.0: GPIO initialisation failed: -32 [ 138.652210][ T39] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 138.671064][ T39] usb 4-1: USB disconnect, device number 10 [ 138.684521][ T39] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 138.694286][ T391] udevd[391]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 138.695881][ T39] ftdi_sio 4-1:0.0: device disconnected [ 138.797053][ T6] usb 2-1: USB disconnect, device number 6 [ 139.000569][ T24] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 139.163388][ T6284] loop7: detected capacity change from 0 to 40427 [ 139.170227][ T6284] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12 [ 139.178141][ T6284] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 139.188181][ T6284] F2FS-fs (loop7): invalid crc value [ 139.191770][ T24] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 139.204001][ T6291] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2512'. [ 139.204858][ T6284] F2FS-fs (loop7): Found nat_bits in checkpoint [ 139.213285][ T24] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 139.235769][ T24] usb 3-1: config 220 has no interface number 2 [ 139.249012][ T24] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 139.262701][ T24] usb 3-1: config 220 interface 0 has no altsetting 0 [ 139.270546][ T24] usb 3-1: config 220 interface 76 has no altsetting 0 [ 139.279054][ T24] usb 3-1: config 220 interface 1 has no altsetting 0 [ 139.288670][ T24] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 139.295701][ T6284] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 139.298408][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.304736][ T6284] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 139.329091][ T24] usb 3-1: Product: syz [ 139.334477][ T24] usb 3-1: Manufacturer: syz [ 139.339085][ T24] usb 3-1: SerialNumber: syz [ 139.378614][ T6283] bio_check_eod: 4798 callbacks suppressed [ 139.378635][ T6283] syz.7.2521: attempt to access beyond end of device [ 139.378635][ T6283] loop7: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 139.398430][ T6284] syz.7.2521: attempt to access beyond end of device [ 139.398430][ T6284] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 139.428129][ T2322] F2FS-fs (loop7): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 139.437680][ T2322] F2FS-fs (loop7): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 139.463991][ T2322] kworker/u4:7: attempt to access beyond end of device [ 139.463991][ T2322] loop7: rw=1, sector=45104, nr_sectors = 8 limit=40427 [ 139.567292][ T24] usb 3-1: selecting invalid altsetting 0 [ 139.579562][ T24] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 139.593681][ T24] usb 3-1: No valid video chain found. [ 139.617943][ T24] usb 3-1: USB disconnect, device number 22 [ 139.721095][ T6324] futex_wake_op: syz.7.2526 tries to shift op by 32; fix this program [ 139.970346][ T6349] loop1: detected capacity change from 0 to 2048 [ 140.002891][ T6349] Alternate GPT is invalid, using primary GPT. [ 140.009011][ T6349] loop1: p1 p2 p3 [ 140.067058][ T391] udevd[391]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 140.067103][ T1169] udevd[1169]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 140.093278][ T1244] udevd[1244]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 140.210935][ T6] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 140.393353][ T6] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 140.414510][ T6] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 140.436528][ T6] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 140.459203][ T6] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 140.468280][ T6] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.476757][ T6] usb 1-1: config 0 descriptor?? [ 140.660718][ T6401] loop7: detected capacity change from 0 to 1024 [ 140.692470][ T6401] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 140.739027][ T6401] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:3841: comm syz.7.2560: Allocating blocks 497-513 which overlap fs metadata [ 140.791317][ T6401] EXT4-fs (loop7): pa ffff8881161f9e70: logic 256, phys. 385, len 8 [ 140.799179][ T6401] EXT4-fs error (device loop7): ext4_mb_release_inode_pa:4881: group 0, free 0, pa_free 1 [ 140.826066][ T6415] EXT4-fs error (device loop7): mb_free_blocks:1815: group 0, inode 15: block 129:freeing already freed block (bit 8); block bitmap corrupt. [ 140.870200][ T2160] EXT4-fs (loop7): unmounting filesystem. [ 140.884754][ T6] plantronics 0003:047F:FFFF.0026: unknown main item tag 0xd [ 140.903878][ T6] plantronics 0003:047F:FFFF.0026: No inputs registered, leaving [ 140.934860][ T6] plantronics 0003:047F:FFFF.0026: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 140.971001][ T6407] loop1: detected capacity change from 0 to 40427 [ 140.974792][ T6427] loop7: detected capacity change from 0 to 2048 [ 141.008145][ T6407] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 141.021302][ T6407] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 141.041713][ T6407] F2FS-fs (loop1): Found nat_bits in checkpoint [ 141.051833][ T6427] GPT:first_usable_lbas don't match. [ 141.056957][ T6427] GPT:34 != 290 [ 141.062855][ T6427] GPT: Use GNU Parted to correct GPT errors. [ 141.068872][ T6427] loop7: p1 p2 p3 [ 141.128913][ T391] udevd[391]: inotify_add_watch(7, /dev/loop7p2, 10) failed: No such file or directory [ 141.129927][ T1244] udevd[1244]: inotify_add_watch(7, /dev/loop7p1, 10) failed: No such file or directory [ 141.151545][ T24] usb 1-1: USB disconnect, device number 21 [ 141.158180][ T1169] udevd[1169]: inotify_add_watch(7, /dev/loop7p3, 10) failed: No such file or directory [ 141.204092][ T6407] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 141.221086][ T6407] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 141.248555][ T6407] syz.1.2561: attempt to access beyond end of device [ 141.248555][ T6407] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 141.300918][ T4216] syz-executor: attempt to access beyond end of device [ 141.300918][ T4216] loop1: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 141.342907][ T6452] SELinux: failed to load policy [ 141.580432][ T6475] xt_hashlimit: max too large, truncated to 1048576 [ 141.583514][ T39] hid-generic 0000:0004:0000.0027: unknown main item tag 0x0 [ 141.594857][ T39] hid-generic 0000:0004:0000.0027: unknown main item tag 0x0 [ 141.601262][ T6475] xt_bpf: check failed: parse error [ 141.603183][ T39] hid-generic 0000:0004:0000.0027: unknown main item tag 0x0 [ 141.615649][ T39] hid-generic 0000:0004:0000.0027: hidraw0: HID v0.00 Device [syz0] on syz1 [ 141.649434][ T6479] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2591'. [ 141.760660][ T314] usb 3-1: new full-speed USB device number 23 using dummy_hcd [ 141.931833][ T6504] loop1: detected capacity change from 0 to 1024 [ 141.951645][ T314] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 141.970649][ T6508] loop0: detected capacity change from 0 to 256 [ 141.976823][ T314] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 141.991030][ T6504] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 142.043314][ T314] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 142.055412][ T6512] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2605'. [ 142.070538][ T1151] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 142.078074][ T314] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.092701][ T314] usb 3-1: Product: syz [ 142.096715][ T314] usb 3-1: Manufacturer: syz [ 142.112960][ T4216] EXT4-fs (loop1): unmounting filesystem. [ 142.127824][ T314] usb 3-1: SerialNumber: syz [ 142.143602][ T6466] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 142.172159][ T28] kauditd_printk_skb: 36 callbacks suppressed [ 142.172176][ T28] audit: type=1326 audit(1741911978.120:7688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6517 comm="syz.3.2609" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd15118d169 code=0x0 [ 142.260541][ T1151] usb 8-1: Using ep0 maxpacket: 16 [ 142.268238][ T1151] usb 8-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 142.286773][ T1151] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.294956][ T1151] usb 8-1: Product: syz [ 142.298974][ T1151] usb 8-1: Manufacturer: syz [ 142.303599][ T1151] usb 8-1: SerialNumber: syz [ 142.308907][ T1151] r8152-cfgselector 8-1: config 0 descriptor?? [ 142.717487][ T1151] r8152-cfgselector 8-1: Unknown version 0x0000 [ 142.723893][ T1151] r8152-cfgselector 8-1: bad CDC descriptors [ 142.730451][ T1151] r8152-cfgselector 8-1: Unknown version 0x0000 [ 142.742138][ T1151] r8152-cfgselector 8-1: USB disconnect, device number 13 [ 143.184274][ T314] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 143.190574][ T314] cdc_ncm 3-1:1.0: setting rx_max = 16384 [ 143.326913][ T6539] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 143.387996][ T6547] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6547 comm=syz.1.2616 [ 143.400651][ T314] cdc_ncm 3-1:1.0: setting tx_max = 16384 [ 143.409204][ T314] cdc_ncm 3-1:1.0 eth1: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 143.427083][ T28] audit: type=1400 audit(1741911979.370:7689): avc: denied { bind } for pid=6548 comm="syz.1.2618" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 143.453773][ T314] usb 3-1: USB disconnect, device number 23 [ 143.466270][ T314] cdc_ncm 3-1:1.0 eth1: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM (NO ZLP) [ 143.483575][ T6552] serio: Serial port ptm0 [ 143.685742][ T6585] loop0: detected capacity change from 0 to 256 [ 143.708533][ T6585] FAT-fs (loop0): bogus number of FAT sectors [ 143.731011][ T6585] FAT-fs (loop0): Can't find a valid FAT filesystem [ 143.804559][ T6588] SELinux: failed to load policy [ 144.035565][ T6632] ------------[ cut here ]------------ [ 144.040921][ T6632] WARNING: CPU: 0 PID: 6632 at arch/x86/kvm/x86.c:11209 kvm_arch_vcpu_ioctl_run+0x2094/0x2270 [ 144.051148][ T6632] Modules linked in: [ 144.054946][ T6632] CPU: 0 PID: 6632 Comm: syz.1.2645 Tainted: G W 6.1.128-syzkaller-00009-g70d032fba5f4 #0 [ 144.066075][ T6632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 144.076019][ T6632] RIP: 0010:kvm_arch_vcpu_ioctl_run+0x2094/0x2270 [ 144.082323][ T6632] Code: a4 e9 ff ff e8 ad b4 ac 00 e9 9a e9 ff ff 89 f9 80 e1 07 38 c1 0f 8c b0 e9 ff ff e8 96 b4 ac 00 e9 a6 e9 ff ff e8 ac 15 65 00 <0f> 0b e9 6b f9 ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c a7 f8 ff [ 144.101850][ T6632] RSP: 0018:ffffc90001b77bc0 EFLAGS: 00010287 [ 144.107714][ T6632] RAX: ffffffff81107f34 RBX: 0000000000000000 RCX: 0000000000080000 [ 144.115567][ T6632] RDX: ffffc9000d34e000 RSI: 0000000000000040 RDI: 0000000000000041 [ 144.123464][ T6632] RBP: ffffc90001b77cd0 R08: ffffffff8117a776 R09: ffffed1021842511 [ 144.131339][ T6632] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff888129e5e000 [ 144.139118][ T6632] R13: ffff8881353bc980 R14: dffffc0000000000 R15: ffff8881353bca08 [ 144.147003][ T6632] FS: 00007fb4609246c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 144.155937][ T6632] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 144.162437][ T6632] CR2: 000000110c2b796c CR3: 0000000148872000 CR4: 00000000003526b0 [ 144.170214][ T6632] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 00000000ebb466c8 [ 144.178060][ T6632] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 144.185877][ T6632] Call Trace: [ 144.188951][ T6632] [ 144.191760][ T6632] ? show_regs+0x58/0x60 [ 144.195812][ T6632] ? __warn+0x160/0x3d0 [ 144.199815][ T6632] ? kvm_arch_vcpu_ioctl_run+0x2094/0x2270 [ 144.205515][ T6632] ? report_bug+0x4d5/0x7d0 [ 144.209789][ T6632] ? kvm_arch_vcpu_ioctl_run+0x2094/0x2270 [ 144.215471][ T6632] ? handle_bug+0x41/0x70 [ 144.219603][ T6632] ? exc_invalid_op+0x1b/0x50 [ 144.224351][ T6632] ? asm_exc_invalid_op+0x1b/0x20 [ 144.229403][ T6632] ? kvm_lapic_hv_timer_in_use+0x66/0xc0 [ 144.234968][ T6632] ? kvm_arch_vcpu_ioctl_run+0x2094/0x2270 [ 144.240551][ T6632] ? kvm_arch_vcpu_ioctl_run+0x2094/0x2270 [ 144.246285][ T6632] ? memcpy+0x56/0x70 [ 144.250101][ T6632] ? mutex_lock_killable+0xb1/0x1e0 [ 144.255189][ T6632] ? __kvm_request_immediate_exit+0x70/0x70 [ 144.260884][ T6632] kvm_vcpu_ioctl+0x7eb/0xcf0 [ 144.265377][ T6632] ? xa_release+0x40/0x40 [ 144.269538][ T6632] ? selinux_file_ioctl+0x3cc/0x540 [ 144.274613][ T6632] ? __ia32_sys_get_robust_list+0x90/0x90 [ 144.280136][ T6632] ? selinux_file_alloc_security+0x120/0x120 [ 144.285989][ T6632] ? __fget_files+0x2cb/0x330 [ 144.290462][ T6632] ? security_file_ioctl+0x84/0xb0 [ 144.295409][ T6632] ? xa_release+0x40/0x40 [ 144.299674][ T6632] __se_sys_ioctl+0x114/0x190 [ 144.304220][ T6632] __x64_sys_ioctl+0x7b/0x90 [ 144.308607][ T6632] x64_sys_call+0x98/0x9a0 [ 144.313135][ T6632] do_syscall_64+0x3b/0xb0 [ 144.317401][ T6632] ? clear_bhb_loop+0x55/0xb0 [ 144.322298][ T6632] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 144.328223][ T6632] RIP: 0033:0x7fb45fb8d169 [ 144.332526][ T6632] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 144.352045][ T6632] RSP: 002b:00007fb460924038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 144.360271][ T6632] RAX: ffffffffffffffda RBX: 00007fb45fda5fa0 RCX: 00007fb45fb8d169 [ 144.368121][ T6632] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 144.375972][ T6632] RBP: 00007fb45fc0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 144.383746][ T6632] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 144.391622][ T6632] R13: 0000000000000000 R14: 00007fb45fda5fa0 R15: 00007ffc42fe6538 [ 144.399748][ T6632] [ 144.402654][ T6632] ---[ end trace 0000000000000000 ]--- [ 144.433453][ T28] audit: type=1400 audit(1741911980.380:7690): avc: denied { audit_write } for pid=6639 comm="syz.0.2658" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 144.472103][ T28] audit: type=1107 audit(1741911980.400:7691): pid=6639 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 144.586327][ T6655] tmpfs: Unknown parameter 'nolazytime˙˙' [ 144.612060][ T6657] SELinux: Context system_u:object_r:null_device_t:s0 is not valid (left unmapped). [ 144.622069][ T28] audit: type=1400 audit(1741911980.570:7692): avc: denied { relabelto } for pid=6656 comm="syz.2.2655" name="file0" dev="tmpfs" ino=2908 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 trawcon="system_u:object_r:null_device_t:s0" [ 144.650560][ T28] audit: type=1400 audit(1741911980.590:7693): avc: denied { associate } for pid=6656 comm="syz.2.2655" name="file0" dev="tmpfs" ino=2908 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:null_device_t:s0" [ 144.681194][ T6659] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 144.690562][ T28] audit: type=1400 audit(1741911980.600:7694): avc: denied { unlink } for pid=291 comm="syz-executor" name="file0" dev="tmpfs" ino=2908 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 trawcon="system_u:object_r:null_device_t:s0" [ 144.790586][ T1151] usb 1-1: new full-speed USB device number 22 using dummy_hcd [ 144.911174][ T6664] netlink: 'syz.2.2659': attribute type 12 has an invalid length. [ 144.941627][ T6668] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2660'. [ 145.001643][ T1151] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 145.022196][ T1151] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 145.048392][ T1151] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 145.053990][ T6676] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2662'. [ 145.068207][ T1151] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.086183][ T1151] usb 1-1: Product: syz [ 145.094617][ T1151] usb 1-1: Manufacturer: syz [ 145.101133][ T1151] usb 1-1: SerialNumber: syz [ 145.111196][ T6651] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 145.384186][ T6724] futex_wake_op: syz.2.2684 tries to shift op by 32; fix this program [ 145.463160][ T6731] loop1: detected capacity change from 0 to 512 [ 145.498417][ T6731] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 145.511796][ T6731] ext4 filesystem being mounted at /272/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 145.555790][ T6746] SELinux: ebitmap: map size 2592 does not match my size 64 (high bit was 0) [ 145.566215][ T6746] SELinux: failed to load policy [ 145.605256][ T28] audit: type=1400 audit(1741911981.550:7695): avc: denied { ioctl } for pid=6749 comm="syz.2.2692" path="socket:[47541]" dev="sockfs" ino=47541 ioctlcmd=0x89f1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 145.640039][ T4216] EXT4-fs (loop1): unmounting filesystem. [ 146.124252][ T1151] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 146.130714][ T1151] cdc_ncm 1-1:1.0: setting rx_max = 16384 [ 146.210332][ T6782] loop7: detected capacity change from 0 to 512 [ 146.222988][ T6782] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 146.232754][ T6782] ext4 filesystem being mounted at /380/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 146.324653][ T1151] cdc_ncm 1-1:1.0: setting tx_max = 16384 [ 146.332302][ T1151] cdc_ncm 1-1:1.0 eth1: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 146.350799][ T2160] EXT4-fs (loop7): unmounting filesystem. [ 146.351830][ T1151] usb 1-1: USB disconnect, device number 22 [ 146.360085][ T1244] udevd[1244]: failed to send result of seq 12436 to main daemon: Connection refused [ 146.362720][ T1151] cdc_ncm 1-1:1.0 eth1: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM (NO ZLP) [ 146.397178][ T6792] device dummy0 entered promiscuous mode [ 146.404324][ T6792] device dummy0 left promiscuous mode [ 146.470655][ T308] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 146.650192][ T6820] device erspan0 entered promiscuous mode [ 146.660458][ T6820] device erspan0 left promiscuous mode [ 146.661925][ T308] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 146.677469][ T308] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 146.687923][ T308] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 146.697305][ T308] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.706524][ T308] usb 3-1: config 0 descriptor?? [ 146.745381][ T6824] loop1: detected capacity change from 0 to 512 [ 146.752940][ T6824] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 146.761413][ T6824] EXT4-fs (loop1): orphan cleanup on readonly fs [ 146.768275][ T6824] Quota error (device loop1): find_block_dqentry: Quota for id 0 referenced but not present [ 146.778507][ T28] audit: type=1326 audit(1741911982.710:7696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6828 comm="syz.3.2728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd15118d169 code=0x7ffc0000 [ 146.802203][ T6824] EXT4-fs error (device loop1): ext4_acquire_dquot:6782: comm syz.1.2726: Failed to acquire dquot type 1 [ 146.813873][ T6824] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.2726: bg 0: block 40: padding at end of block bitmap is not set [ 146.828279][ T6824] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 146.837436][ T6824] EXT4-fs (loop1): 1 truncate cleaned up [ 146.849117][ T6824] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 146.867336][ T4216] EXT4-fs (loop1): unmounting filesystem. [ 146.986891][ T6845] loop0: detected capacity change from 0 to 512 [ 147.005087][ T6845] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 147.014884][ T6845] ext4 filesystem being mounted at /508/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 147.080562][ T6852] device pim6reg1 entered promiscuous mode [ 147.111124][ T297] EXT4-fs (loop0): unmounting filesystem. [ 147.165298][ T6863] overlayfs: failed to resolve './file0': -2 [ 147.215393][ T6870] input: syz0 as /devices/virtual/input/input28 [ 147.287341][ T6868] loop1: detected capacity change from 0 to 512 [ 147.300872][ T6868] EXT4-fs error (device loop1): ext4_xattr_block_get:546: inode #2: comm syz.1.2741: corrupted xattr block 255 [ 147.312786][ T6868] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 147.321127][ T6868] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 147.321133][ T308] usb 3-1: string descriptor 0 read error: -22 [ 147.321167][ T6868] EXT4-fs error (device loop1): ext4_xattr_block_get:546: inode #2: comm syz.1.2741: corrupted xattr block 255 [ 147.348022][ T6868] SELinux: (dev loop1, type ext4) getxattr errno 117 [ 147.355301][ T6868] EXT4-fs (loop1): unmounting filesystem. [ 147.446298][ T6872] loop0: detected capacity change from 0 to 40427 [ 147.452702][ T39] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 147.461146][ T6872] F2FS-fs (loop0): Invalid log sectors per block(0) log sectorsize(9) [ 147.469140][ T6872] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 147.478810][ T6872] F2FS-fs (loop0): invalid crc value [ 147.489625][ T6872] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 147.538687][ T6872] F2FS-fs (loop0): Start checkpoint disabled! [ 147.546732][ T6872] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 147.555115][ T6872] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 147.651677][ T39] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 147.670544][ T39] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 147.700579][ T39] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 147.709653][ T39] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.722290][ T308] uclogic 0003:256C:006D.0028: failed retrieving string descriptor #100: -71 [ 147.727867][ T39] usb 4-1: Product: syz [ 147.738632][ T308] uclogic 0003:256C:006D.0028: failed retrieving pen parameters: -71 [ 147.738637][ T39] usb 4-1: Manufacturer: syz [ 147.738656][ T39] usb 4-1: SerialNumber: syz [ 147.750534][ T308] uclogic 0003:256C:006D.0028: failed probing pen v1 parameters: -71 [ 147.764764][ T6866] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 147.777868][ T308] uclogic 0003:256C:006D.0028: failed probing parameters: -71 [ 147.790244][ T308] uclogic: probe of 0003:256C:006D.0028 failed with error -71 [ 147.808910][ T308] usb 3-1: USB disconnect, device number 24 [ 147.888885][ T321] kworker/u4:4: attempt to access beyond end of device [ 147.888885][ T321] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 147.929865][ T6904] tmpfs: Unknown parameter 'nolazytime˙˙' [ 147.984395][ T6908] syz.1.2759[6908] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 147.984481][ T6908] syz.1.2759[6908] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 148.041077][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 148.041096][ T28] audit: type=1400 audit(1741911983.990:7700): avc: denied { watch } for pid=6914 comm="syz.0.2761" path="/514/file0" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 148.118859][ T6919] futex_wake_op: syz.0.2765 tries to shift op by -1; fix this program [ 148.487087][ T6958] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 148.488184][ T6900] loop7: detected capacity change from 0 to 131072 [ 148.506305][ T6900] F2FS-fs (loop7): Segment count (31) mismatch with total segments from devices (0) [ 148.526354][ T6900] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 148.535668][ T6900] F2FS-fs (loop7): invalid crc value [ 148.571450][ T6900] F2FS-fs (loop7): Found nat_bits in checkpoint [ 148.627349][ T6900] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 148.634451][ T6900] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e4 [ 148.649785][ T28] audit: type=1400 audit(1741911984.590:7701): avc: denied { execute } for pid=6899 comm="syz.7.2755" path="/389/file0/bus" dev="loop7" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 148.809462][ T39] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 148.817435][ T39] cdc_ncm 4-1:1.0: setting rx_max = 16384 [ 149.010651][ T39] cdc_ncm 4-1:1.0: setting tx_max = 16384 [ 149.026598][ T39] cdc_ncm 4-1:1.0 eth1: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 149.038842][ T6987] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2791'. [ 149.047754][ T6987] device bridge_slave_1 left promiscuous mode [ 149.049663][ T39] usb 4-1: USB disconnect, device number 11 [ 149.054080][ T6987] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.062617][ T39] cdc_ncm 4-1:1.0 eth1: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM (NO ZLP) [ 149.075722][ T6987] device bridge_slave_0 left promiscuous mode [ 149.088200][ T6987] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.090611][ T24] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 149.300584][ T314] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 149.317493][ T24] usb 1-1: config 0 has an invalid interface number: 64 but max is 0 [ 149.325489][ T24] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 149.335613][ T24] usb 1-1: config 0 has no interface number 0 [ 149.343205][ T24] usb 1-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 149.353876][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.355650][ T28] audit: type=1400 audit(1741911985.300:7702): avc: denied { getopt } for pid=7017 comm="syz.2.2808" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 149.362237][ T24] usb 1-1: Product: syz [ 149.387647][ T24] usb 1-1: Manufacturer: syz [ 149.402312][ T24] usb 1-1: SerialNumber: syz [ 149.412904][ T24] usb 1-1: config 0 descriptor?? [ 149.480694][ T314] usb 8-1: Using ep0 maxpacket: 8 [ 149.486848][ T314] usb 8-1: config index 0 descriptor too short (expected 5924, got 36) [ 149.495010][ T314] usb 8-1: config 250 has an invalid interface number: 228 but max is -1 [ 149.503262][ T314] usb 8-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 149.512272][ T314] usb 8-1: config 250 has no interface number 0 [ 149.518302][ T314] usb 8-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 149.529903][ T314] usb 8-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 149.540375][ T314] usb 8-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 149.550874][ T314] usb 8-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 149.561228][ T314] usb 8-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 149.574905][ T314] usb 8-1: config 250 interface 228 has no altsetting 0 [ 149.583229][ T314] usb 8-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 149.592929][ T314] usb 8-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 149.601224][ T314] usb 8-1: Product: syz [ 149.605482][ T314] usb 8-1: SerialNumber: syz [ 149.609947][ T7034] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2812'. [ 149.619310][ T314] hub 8-1:250.228: bad descriptor, ignoring hub [ 149.620194][ T7034] device bridge_slave_1 left promiscuous mode [ 149.628544][ T314] hub: probe of 8-1:250.228 failed with error -5 [ 149.631746][ T24] usb 1-1: Found UVC 0.00 device syz (046d:0823) [ 149.644160][ T7034] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.651298][ T24] usb 1-1: No valid video chain found. [ 149.658421][ T7034] device bridge_slave_0 left promiscuous mode [ 149.664823][ T7034] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.798031][ T28] audit: type=1400 audit(1741911985.740:7703): avc: denied { write } for pid=7041 comm="syz.1.2816" path="socket:[49385]" dev="sockfs" ino=49385 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 149.823399][ T314] usblp 8-1:250.228: usblp0: USB Bidirectional printer dev 14 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 149.845511][ T39] usb 1-1: USB disconnect, device number 23 [ 150.140650][ T315] usb 8-1: USB disconnect, device number 14 [ 150.147101][ T315] usblp0: removed [ 150.160710][ T6] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 150.350556][ T6] usb 2-1: Using ep0 maxpacket: 16 [ 150.359563][ T6] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 150.371820][ T7051] netlink: 148 bytes leftover after parsing attributes in process `syz.3.2819'. [ 150.380778][ T6] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 150.389705][ T7051] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 150.405187][ T6] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.413749][ T6] usb 2-1: config 0 descriptor?? [ 150.490608][ T315] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 150.650587][ T39] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 150.670534][ T315] usb 8-1: Using ep0 maxpacket: 8 [ 150.676493][ T315] usb 8-1: config 0 has no interfaces? [ 150.681910][ T315] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 150.690800][ T315] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.699185][ T315] usb 8-1: config 0 descriptor?? [ 150.820534][ T6] usbhid 2-1:0.0: can't add hid device: -71 [ 150.826350][ T6] usbhid: probe of 2-1:0.0 failed with error -71 [ 150.833393][ T39] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 150.833614][ T6] usb 2-1: USB disconnect, device number 7 [ 150.842499][ T39] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.856015][ T39] usb 1-1: Product: syz [ 150.859988][ T39] usb 1-1: Manufacturer: syz [ 150.864447][ T39] usb 1-1: SerialNumber: syz [ 150.906768][ T315] usb 8-1: USB disconnect, device number 15 [ 151.610622][ T315] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 151.771155][ T28] audit: type=1400 audit(1741911987.720:7704): avc: denied { write } for pid=7106 comm="syz.2.2858" path="socket:[48625]" dev="sockfs" ino=48625 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 151.801866][ T315] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 151.812944][ T315] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 151.826007][ T315] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 151.835354][ T315] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.843470][ T315] usb 2-1: Product: syz [ 151.847656][ T315] usb 2-1: Manufacturer: syz [ 151.852401][ T315] usb 2-1: SerialNumber: syz [ 151.858075][ T7062] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 151.873591][ T39] cdc_ncm 1-1:1.0: failed to get mac address [ 151.980613][ T6] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 152.079956][ T39] cdc_ncm 1-1:1.0: bind() failure [ 152.086470][ T39] cdc_ncm: probe of 1-1:1.1 failed with error -71 [ 152.093474][ T39] cdc_mbim: probe of 1-1:1.1 failed with error -71 [ 152.101641][ T39] usb 1-1: USB disconnect, device number 24 [ 152.129379][ T7127] loop7: detected capacity change from 0 to 2048 [ 152.136565][ T7127] EXT4-fs (loop7): couldn't mount as ext2 due to feature incompatibilities [ 152.170562][ T6] usb 4-1: Using ep0 maxpacket: 8 [ 152.175582][ T7129] device wireguard0 entered promiscuous mode [ 152.176744][ T6] usb 4-1: config index 0 descriptor too short (expected 5924, got 36) [ 152.191183][ T6] usb 4-1: config 250 has an invalid interface number: 228 but max is -1 [ 152.199496][ T6] usb 4-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 152.208687][ T6] usb 4-1: config 250 has no interface number 0 [ 152.215043][ T6] usb 4-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 152.226717][ T6] usb 4-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 152.237530][ T6] usb 4-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 152.247790][ T6] usb 4-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 152.257834][ T6] usb 4-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 152.271582][ T6] usb 4-1: config 250 interface 228 has no altsetting 0 [ 152.279466][ T6] usb 4-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 152.288476][ T6] usb 4-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 152.296670][ T6] usb 4-1: Product: syz [ 152.300684][ T6] usb 4-1: SerialNumber: syz [ 152.306687][ T6] hub 4-1:250.228: bad descriptor, ignoring hub [ 152.312856][ T6] hub: probe of 4-1:250.228 failed with error -5 [ 152.323062][ T7132] syz.7.2857[7132] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 152.323177][ T7132] syz.7.2857[7132] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 152.449672][ T7139] loop7: detected capacity change from 0 to 16384 [ 152.508370][ T6] usblp 4-1:250.228: usblp0: USB Bidirectional printer dev 12 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 152.574980][ T7139] I/O error, dev loop7, sector 5120 op 0x0:(READ) flags 0x80700 phys_seg 16 prio class 2 [ 152.625475][ T28] audit: type=1400 audit(1741911988.570:7705): avc: denied { write } for pid=7148 comm="syz.7.2865" path="socket:[48817]" dev="sockfs" ino=48817 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 152.750097][ T7155] input: syz0 as /devices/virtual/input/input29 [ 152.830868][ T312] usb 4-1: USB disconnect, device number 12 [ 152.840998][ T312] usblp0: removed [ 152.872786][ T315] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 152.882104][ T315] cdc_ncm 2-1:1.0: setting rx_max = 16384 [ 153.007775][ T7189] loop7: detected capacity change from 0 to 4096 [ 153.025042][ T7189] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 153.055265][ T2160] EXT4-fs (loop7): unmounting filesystem. [ 153.072858][ T7207] loop7: detected capacity change from 0 to 256 [ 153.078997][ T315] cdc_ncm 2-1:1.0: setting tx_max = 16384 [ 153.083747][ T7207] exFAT-fs (loop7): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d) [ 153.087646][ T315] cdc_ncm 2-1:1.0 eth1: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 153.101675][ T7207] exFAT-fs (loop7): hint_cluster is invalid (17) [ 153.109444][ T28] audit: type=1400 audit(1741911989.050:7706): avc: denied { write } for pid=7206 comm="syz.7.2891" path="/420/file0/file1" dev="loop7" ino=1048659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 153.154270][ T315] usb 2-1: USB disconnect, device number 8 [ 153.162565][ T315] cdc_ncm 2-1:1.0 eth1: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM (NO ZLP) [ 153.180621][ T314] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 153.211040][ T7220] tmpfs: Unknown parameter 'nolazytime˙˙' [ 153.253034][ T28] audit: type=1400 audit(1741911989.200:7707): avc: denied { mounton } for pid=7223 comm="syz.2.2899" path="/632/file0" dev="tmpfs" ino=3301 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 153.380555][ T314] usb 4-1: Using ep0 maxpacket: 8 [ 153.391249][ T314] usb 4-1: config 0 has no interfaces? [ 153.396551][ T314] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 153.420547][ T314] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.440772][ T314] usb 4-1: config 0 descriptor?? [ 153.611973][ T28] audit: type=1400 audit(1741911989.560:7708): avc: denied { mount } for pid=7232 comm="syz.1.2903" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 153.648465][ T314] usb 4-1: USB disconnect, device number 13 [ 154.125847][ T7258] syz.7.2915 uses obsolete (PF_INET,SOCK_PACKET) [ 154.200610][ T315] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 154.381757][ T315] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 154.392661][ T315] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 154.404936][ T315] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 154.413925][ T315] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.421888][ T315] usb 2-1: Product: syz [ 154.425920][ T315] usb 2-1: Manufacturer: syz [ 154.430251][ T315] usb 2-1: SerialNumber: syz [ 154.435556][ T7256] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 154.520547][ T6] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 154.710626][ T6] usb 3-1: Using ep0 maxpacket: 32 [ 154.716829][ T6] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 154.725178][ T6] usb 3-1: config 0 has no interface number 0 [ 154.731271][ T6] usb 3-1: config 0 interface 184 has no altsetting 0 [ 154.739442][ T6] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 154.748377][ T6] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.756161][ T6] usb 3-1: Product: syz [ 154.760112][ T6] usb 3-1: Manufacturer: syz [ 154.764689][ T6] usb 3-1: SerialNumber: syz [ 154.769788][ T6] usb 3-1: config 0 descriptor?? [ 154.775426][ T6] smsc75xx v1.0.0 [ 155.110530][ T390] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 155.246305][ T7291] bridge0: port 3(vlan2) entered blocking state [ 155.253332][ T7291] bridge0: port 3(vlan2) entered disabled state [ 155.368854][ T39] hid-generic 0008:016E:FFFFFFFE.0029: unknown main item tag 0x0 [ 155.381047][ T39] hid-generic 0008:016E:FFFFFFFE.0029: unknown main item tag 0x0 [ 155.388793][ T39] hid-generic 0008:016E:FFFFFFFE.0029: unknown main item tag 0x0 [ 155.398194][ T39] hid-generic 0008:016E:FFFFFFFE.0029: unknown main item tag 0x0 [ 155.406003][ T39] hid-generic 0008:016E:FFFFFFFE.0029: unknown main item tag 0x0 [ 155.413763][ T39] hid-generic 0008:016E:FFFFFFFE.0029: unknown main item tag 0x0 [ 155.422278][ T39] hid-generic 0008:016E:FFFFFFFE.0029: unknown main item tag 0x0 [ 155.429947][ T39] hid-generic 0008:016E:FFFFFFFE.0029: unknown main item tag 0x0 [ 155.439472][ T39] hid-generic 0008:016E:FFFFFFFE.0029: unknown main item tag 0x0 [ 155.447282][ T39] hid-generic 0008:016E:FFFFFFFE.0029: unknown main item tag 0x0 [ 155.455382][ T315] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 155.461756][ T39] hid-generic 0008:016E:FFFFFFFE.0029: unknown main item tag 0x0 [ 155.469445][ T315] cdc_ncm 2-1:1.0: setting rx_max = 16384 [ 155.476413][ T39] hid-generic 0008:016E:FFFFFFFE.0029: unknown main item tag 0x0 [ 155.486378][ T39] hid-generic 0008:016E:FFFFFFFE.0029: unknown main item tag 0x0 [ 155.495047][ T39] hid-generic 0008:016E:FFFFFFFE.0029: unknown main item tag 0x0 [ 155.503180][ T39] hid-generic 0008:016E:FFFFFFFE.0029: unknown main item tag 0x0 [ 155.511476][ T39] hid-generic 0008:016E:FFFFFFFE.0029: unknown main item tag 0x0 [ 155.519279][ T39] hid-generic 0008:016E:FFFFFFFE.0029: unknown main item tag 0x0 [ 155.526997][ T39] hid-generic 0008:016E:FFFFFFFE.0029: unknown main item tag 0x0 [ 155.534830][ T39] hid-generic 0008:016E:FFFFFFFE.0029: unknown main item tag 0x0 [ 155.542513][ T39] hid-generic 0008:016E:FFFFFFFE.0029: unknown main item tag 0x0 [ 155.550164][ T39] hid-generic 0008:016E:FFFFFFFE.0029: unknown main item tag 0x0 [ 155.557862][ T39] hid-generic 0008:016E:FFFFFFFE.0029: unknown main item tag 0x0 [ 155.565671][ T39] hid-generic 0008:016E:FFFFFFFE.0029: unknown main item tag 0x0 [ 155.573504][ T39] hid-generic 0008:016E:FFFFFFFE.0029: unknown main item tag 0x0 [ 155.581304][ T39] hid-generic 0008:016E:FFFFFFFE.0029: unknown main item tag 0x0 [ 155.588949][ T39] hid-generic 0008:016E:FFFFFFFE.0029: unknown main item tag 0x0 [ 155.596734][ T39] hid-generic 0008:016E:FFFFFFFE.0029: unknown main item tag 0x0 [ 155.604435][ T39] hid-generic 0008:016E:FFFFFFFE.0029: unknown main item tag 0x0 [ 155.612103][ T39] hid-generic 0008:016E:FFFFFFFE.0029: unknown main item tag 0x0 [ 155.619709][ T39] hid-generic 0008:016E:FFFFFFFE.0029: unknown main item tag 0x0 [ 155.627261][ T39] hid-generic 0008:016E:FFFFFFFE.0029: unknown main item tag 0x0 [ 155.634901][ T39] hid-generic 0008:016E:FFFFFFFE.0029: unknown main item tag 0x0 [ 155.642568][ T39] hid-generic 0008:016E:FFFFFFFE.0029: unknown main item tag 0x0 [ 155.650168][ T39] hid-generic 0008:016E:FFFFFFFE.0029: unknown main item tag 0x0 [ 155.658208][ T315] cdc_ncm 2-1:1.0: setting tx_max = 16384 [ 155.664226][ T39] hid-generic 0008:016E:FFFFFFFE.0029: unknown main item tag 0x0 [ 155.674030][ T315] cdc_ncm 2-1:1.0 eth1: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 155.684818][ T39] hid-generic 0008:016E:FFFFFFFE.0029: unknown main item tag 0x0 [ 155.693961][ T315] usb 2-1: USB disconnect, device number 9 [ 155.699854][ T315] cdc_ncm 2-1:1.0 eth1: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM (NO ZLP) [ 155.708884][ T39] hid-generic 0008:016E:FFFFFFFE.0029: unknown main item tag 0x0 [ 155.716454][ T39] hid-generic 0008:016E:FFFFFFFE.0029: unknown main item tag 0x0 [ 155.724115][ T39] hid-generic 0008:016E:FFFFFFFE.0029: unknown main item tag 0x0 [ 155.733220][ T39] hid-generic 0008:016E:FFFFFFFE.0029: unknown main item tag 0x0 [ 155.740836][ T39] hid-generic 0008:016E:FFFFFFFE.0029: unknown main item tag 0x0 [ 155.748365][ T39] hid-generic 0008:016E:FFFFFFFE.0029: unknown main item tag 0x0 [ 155.755943][ T39] hid-generic 0008:016E:FFFFFFFE.0029: unknown main item tag 0x0 [ 155.763507][ T39] hid-generic 0008:016E:FFFFFFFE.0029: unknown main item tag 0x0 [ 155.771150][ T39] hid-generic 0008:016E:FFFFFFFE.0029: unknown main item tag 0x0 [ 155.778734][ T39] hid-generic 0008:016E:FFFFFFFE.0029: unknown main item tag 0x0 [ 155.786322][ T39] hid-generic 0008:016E:FFFFFFFE.0029: unknown main item tag 0x0 [ 155.793900][ T39] hid-generic 0008:016E:FFFFFFFE.0029: unknown main item tag 0x0 [ 155.794189][ T6] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 155.801441][ T39] hid-generic 0008:016E:FFFFFFFE.0029: unknown main item tag 0x0 [ 155.818576][ T39] hid-generic 0008:016E:FFFFFFFE.0029: unknown main item tag 0x0 [ 155.826194][ T39] hid-generic 0008:016E:FFFFFFFE.0029: unknown main item tag 0x0 [ 155.833881][ T39] hid-generic 0008:016E:FFFFFFFE.0029: unknown main item tag 0x0 [ 155.842119][ T39] hid-generic 0008:016E:FFFFFFFE.0029: hidraw0: HID v0.01 Device [syz0] on syz1 [ 155.859190][ T39] ================================================================== [ 155.867096][ T39] BUG: KASAN: use-after-free in __list_del_entry_valid+0xa6/0x130 [ 155.874725][ T39] Read of size 8 at addr ffff888110074cf0 by task kworker/1:1/39 [ 155.882274][ T39] [ 155.884451][ T39] CPU: 1 PID: 39 Comm: kworker/1:1 Tainted: G W 6.1.128-syzkaller-00009-g70d032fba5f4 #0 [ 155.895473][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 155.905568][ T39] Workqueue: 0x0 (events) [ 155.909909][ T39] Call Trace: [ 155.913033][ T39] [ 155.915806][ T39] dump_stack_lvl+0x151/0x1b7 [ 155.920335][ T39] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 155.925629][ T39] ? _printk+0xd1/0x111 [ 155.929710][ T39] ? __virt_addr_valid+0x242/0x2f0 [ 155.934659][ T39] print_report+0x158/0x4e0 [ 155.938995][ T39] ? _raw_spin_lock_irq+0xa5/0x1b0 [ 155.943939][ T39] ? __virt_addr_valid+0x242/0x2f0 [ 155.948901][ T39] ? kasan_complete_mode_report_info+0x90/0x1b0 [ 155.954968][ T39] ? __list_del_entry_valid+0xa6/0x130 [ 155.960259][ T39] kasan_report+0x13c/0x170 [ 155.964605][ T39] ? __list_del_entry_valid+0xa6/0x130 [ 155.969894][ T39] __asan_report_load8_noabort+0x14/0x20 [ 155.975363][ T39] __list_del_entry_valid+0xa6/0x130 [ 155.980488][ T39] worker_thread+0xb1a/0x1260 [ 155.984998][ T39] kthread+0x26d/0x300 [ 155.988905][ T39] ? worker_clr_flags+0x1a0/0x1a0 [ 155.993771][ T39] ? kthread_blkcg+0xd0/0xd0 [ 155.998200][ T39] ret_from_fork+0x1f/0x30 [ 156.002443][ T39] [ 156.005303][ T39] [ 156.007473][ T39] Allocated by task 315: [ 156.011658][ T39] kasan_set_track+0x4b/0x70 [ 156.016081][ T39] kasan_save_alloc_info+0x1f/0x30 [ 156.021030][ T39] __kasan_kmalloc+0x9c/0xb0 [ 156.025453][ T39] __kmalloc_node+0xb4/0x1e0 [ 156.029879][ T39] kvmalloc_node+0x221/0x640 [ 156.034307][ T39] alloc_netdev_mqs+0x8c/0xf90 [ 156.038909][ T39] alloc_etherdev_mqs+0x36/0x40 [ 156.043594][ T39] usbnet_probe+0x213/0x28a0 [ 156.048024][ T39] usb_probe_interface+0x5b6/0xa90 [ 156.052965][ T39] really_probe+0x2b8/0x920 [ 156.057316][ T39] __driver_probe_device+0x1a0/0x310 [ 156.062429][ T39] driver_probe_device+0x54/0x3d0 [ 156.067287][ T39] __device_attach_driver+0x2e3/0x490 [ 156.072492][ T39] bus_for_each_drv+0x183/0x200 [ 156.077309][ T39] __device_attach+0x312/0x510 [ 156.081913][ T39] device_initial_probe+0x1a/0x20 [ 156.086762][ T39] bus_probe_device+0xbe/0x1e0 [ 156.091393][ T39] device_add+0xb60/0xf10 [ 156.095547][ T39] usb_set_configuration+0x190f/0x1e80 [ 156.100823][ T39] usb_generic_driver_probe+0x8b/0x150 [ 156.106124][ T39] usb_probe_device+0x144/0x260 [ 156.110804][ T39] really_probe+0x2b8/0x920 [ 156.115144][ T39] __driver_probe_device+0x1a0/0x310 [ 156.120264][ T39] driver_probe_device+0x54/0x3d0 [ 156.125125][ T39] __device_attach_driver+0x2e3/0x490 [ 156.130332][ T39] bus_for_each_drv+0x183/0x200 [ 156.135143][ T39] __device_attach+0x312/0x510 [ 156.139732][ T39] device_initial_probe+0x1a/0x20 [ 156.144601][ T39] bus_probe_device+0xbe/0x1e0 [ 156.149194][ T39] device_add+0xb60/0xf10 [ 156.153361][ T39] usb_new_device+0xf2f/0x1820 [ 156.157959][ T39] hub_event+0x2db1/0x4830 [ 156.162212][ T39] process_one_work+0x73d/0xcb0 [ 156.166899][ T39] worker_thread+0xa60/0x1260 [ 156.171672][ T39] kthread+0x26d/0x300 [ 156.175580][ T39] ret_from_fork+0x1f/0x30 [ 156.179832][ T39] [ 156.182000][ T39] Freed by task 315: [ 156.185738][ T39] kasan_set_track+0x4b/0x70 [ 156.190160][ T39] kasan_save_free_info+0x2b/0x40 [ 156.195020][ T39] ____kasan_slab_free+0x131/0x180 [ 156.199969][ T39] __kasan_slab_free+0x11/0x20 [ 156.204570][ T39] __kmem_cache_free+0x21d/0x410 [ 156.209339][ T39] kfree+0x7a/0xf0 [ 156.212924][ T39] kvfree+0x35/0x40 [ 156.216544][ T39] netdev_freemem+0x3f/0x60 [ 156.220884][ T39] netdev_release+0x7f/0xb0 [ 156.225225][ T39] device_release+0x95/0x1c0 [ 156.229652][ T39] kobject_put+0x178/0x260 [ 156.233938][ T39] put_device+0x1f/0x30 [ 156.237906][ T39] free_netdev+0x393/0x480 [ 156.242159][ T39] usbnet_disconnect+0x25f/0x3b0 [ 156.246932][ T39] usb_unbind_interface+0x1fa/0x8c0 [ 156.251953][ T39] device_release_driver_internal+0x53e/0x870 [ 156.257856][ T39] device_release_driver+0x19/0x20 [ 156.262826][ T39] bus_remove_device+0x2fa/0x360 [ 156.267579][ T39] device_del+0x663/0xe90 [ 156.271746][ T39] usb_disable_device+0x380/0x720 [ 156.276608][ T39] usb_disconnect+0x32a/0x890 [ 156.281122][ T39] hub_event+0x1ed8/0x4830 [ 156.285374][ T39] process_one_work+0x73d/0xcb0 [ 156.290061][ T39] worker_thread+0xd71/0x1260 [ 156.294585][ T39] kthread+0x26d/0x300 [ 156.298478][ T39] ret_from_fork+0x1f/0x30 [ 156.302972][ T39] [ 156.305135][ T39] Last potentially related work creation: [ 156.310691][ T39] kasan_save_stack+0x3b/0x60 [ 156.315201][ T39] __kasan_record_aux_stack+0xb4/0xc0 [ 156.320411][ T39] kasan_record_aux_stack_noalloc+0xb/0x10 [ 156.326227][ T39] insert_work+0x56/0x310 [ 156.330392][ T39] __queue_work+0x9b6/0xd70 [ 156.334741][ T39] queue_work_on+0x105/0x170 [ 156.339158][ T39] usbnet_link_change+0x182/0x1a0 [ 156.344020][ T39] usbnet_probe+0x1e1e/0x28a0 [ 156.348534][ T39] usb_probe_interface+0x5b6/0xa90 [ 156.353480][ T39] really_probe+0x2b8/0x920 [ 156.357817][ T39] __driver_probe_device+0x1a0/0x310 [ 156.362937][ T39] driver_probe_device+0x54/0x3d0 [ 156.367809][ T39] __device_attach_driver+0x2e3/0x490 [ 156.373013][ T39] bus_for_each_drv+0x183/0x200 [ 156.377741][ T39] __device_attach+0x312/0x510 [ 156.382311][ T39] device_initial_probe+0x1a/0x20 [ 156.387155][ T39] bus_probe_device+0xbe/0x1e0 [ 156.391754][ T39] device_add+0xb60/0xf10 [ 156.395944][ T39] usb_set_configuration+0x190f/0x1e80 [ 156.401216][ T39] usb_generic_driver_probe+0x8b/0x150 [ 156.406632][ T39] usb_probe_device+0x144/0x260 [ 156.411314][ T39] really_probe+0x2b8/0x920 [ 156.415652][ T39] __driver_probe_device+0x1a0/0x310 [ 156.421120][ T39] driver_probe_device+0x54/0x3d0 [ 156.425994][ T39] __device_attach_driver+0x2e3/0x490 [ 156.431182][ T39] bus_for_each_drv+0x183/0x200 [ 156.435869][ T39] __device_attach+0x312/0x510 [ 156.440477][ T39] device_initial_probe+0x1a/0x20 [ 156.445329][ T39] bus_probe_device+0xbe/0x1e0 [ 156.449939][ T39] device_add+0xb60/0xf10 [ 156.454117][ T39] usb_new_device+0xf2f/0x1820 [ 156.458699][ T39] hub_event+0x2db1/0x4830 [ 156.462947][ T39] process_one_work+0x73d/0xcb0 [ 156.467643][ T39] worker_thread+0xa60/0x1260 [ 156.472178][ T39] kthread+0x26d/0x300 [ 156.476185][ T39] ret_from_fork+0x1f/0x30 [ 156.480422][ T39] [ 156.482592][ T39] The buggy address belongs to the object at ffff888110074000 [ 156.482592][ T39] which belongs to the cache kmalloc-4k of size 4096 [ 156.496480][ T39] The buggy address is located 3312 bytes inside of [ 156.496480][ T39] 4096-byte region [ffff888110074000, ffff888110075000) [ 156.509760][ T39] [ 156.511944][ T39] The buggy address belongs to the physical page: [ 156.518207][ T39] page:ffffea0004401c00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x110070 [ 156.528339][ T39] head:ffffea0004401c00 order:3 compound_mapcount:0 compound_pincount:0 [ 156.536716][ T39] flags: 0x4000000000010200(slab|head|zone=1) [ 156.542615][ T39] raw: 4000000000010200 dead000000000100 dead000000000122 ffff888100043380 [ 156.551059][ T39] raw: 0000000000000000 0000000000040004 00000001ffffffff 0000000000000000 [ 156.559611][ T39] page dumped because: kasan: bad access detected [ 156.565872][ T39] page_owner tracks the page as allocated [ 156.572020][ T39] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 291, tgid 291 (syz-executor), ts 24541449255, free_ts 24329769651 [ 156.593025][ T39] post_alloc_hook+0x213/0x220 [ 156.597618][ T39] prep_new_page+0x1b/0x110 [ 156.602306][ T39] get_page_from_freelist+0x3a98/0x3b10 [ 156.607692][ T39] __alloc_pages+0x234/0x610 [ 156.612232][ T39] alloc_slab_page+0x6c/0xf0 [ 156.616650][ T39] new_slab+0x90/0x3e0 [ 156.620730][ T39] ___slab_alloc+0x6f9/0xb80 [ 156.625190][ T39] __slab_alloc+0x5d/0xa0 [ 156.629323][ T39] __kmem_cache_alloc_node+0x207/0x2a0 [ 156.634729][ T39] kmalloc_trace+0x2a/0xa0 [ 156.638976][ T39] kobject_uevent_env+0x262/0x720 [ 156.643841][ T39] kobject_uevent+0x1f/0x30 [ 156.648177][ T39] net_rx_queue_update_kobjects+0x239/0x4a0 [ 156.653907][ T39] netdev_register_kobject+0x231/0x320 [ 156.659200][ T39] register_netdevice+0xe43/0x1490 [ 156.664276][ T39] wg_newlink+0x4e3/0x7d0 [ 156.668448][ T39] page last free stack trace: [ 156.673140][ T39] free_unref_page_prepare+0x9f1/0xa00 [ 156.678445][ T39] free_unref_page+0xb2/0x5c0 [ 156.682954][ T39] __free_pages+0x61/0xf0 [ 156.687130][ T39] __free_slab+0xce/0x1a0 [ 156.691397][ T39] __unfreeze_partials+0x165/0x1a0 [ 156.696465][ T39] put_cpu_partial+0xa9/0x100 [ 156.700975][ T39] __slab_free+0x1c8/0x280 [ 156.705220][ T39] ___cache_free+0xc6/0xd0 [ 156.709474][ T39] qlist_free_all+0xc5/0x140 [ 156.713934][ T39] kasan_quarantine_reduce+0x15a/0x180 [ 156.719195][ T39] __kasan_slab_alloc+0x24/0x80 [ 156.723949][ T39] slab_post_alloc_hook+0x53/0x2c0 [ 156.728829][ T39] kmem_cache_alloc+0x175/0x320 [ 156.733515][ T39] getname_flags+0xba/0x520 [ 156.737859][ T39] getname+0x19/0x20 [ 156.741614][ T39] do_sys_openat2+0xe0/0x870 [ 156.746016][ T39] [ 156.748180][ T39] Memory state around the buggy address: [ 156.753660][ T39] ffff888110074b80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 156.761556][ T39] ffff888110074c00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 156.769592][ T39] >ffff888110074c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 156.777564][ T39] ^ [ 156.785127][ T39] ffff888110074d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 156.793020][ T39] ffff888110074d80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 156.801092][ T39] ================================================================== [ 156.809370][ T39] Disabling lock debugging due to kernel taint [ 156.859752][ T6] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 156.870643][ T6] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 156.880145][ T6] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 156.890775][ T6] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 156.900454][ T6] smsc75xx: probe of 3-1:0.184 failed with error -71 [ 156.908017][ T6] usb 3-1: USB disconnect, device number 25