last executing test programs: 53.405842584s ago: executing program 32 (id=149): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='mm_page_alloc\x00', r0}, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20181, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000001200)=[@text64={0x40, 0x0}], 0x1, 0x48, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 40.322467241s ago: executing program 1 (id=471): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000200)='fdb_delete\x00', r1}, 0x18) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) 40.286841732s ago: executing program 1 (id=472): mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) 40.271520332s ago: executing program 1 (id=473): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = dup2(r0, r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000bc0)={{r2}, &(0x7f0000000680), &(0x7f0000000640)}, 0x20) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x4, [{0x11}, {0x0, 0x100000000000000}]}, 0x68) 40.237290043s ago: executing program 1 (id=475): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 40.201201883s ago: executing program 1 (id=477): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffffffff}, [@printk={@ld}, @call={0x85, 0x0, 0x0, 0x7d}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r2}, 0x10) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r1}, 0x57) 40.119724515s ago: executing program 1 (id=480): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000380)={[{@delalloc}, {@data_err_abort}, {@noload}, {@dioread_lock}, {@data_err_ignore}, {@resgid}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x562, &(0x7f0000000440)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xfecc) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x105042, 0x1db) r2 = open(&(0x7f0000000040)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f00000003c0)={0x8, 0x3, 0x3}) writev(r1, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x64000}], 0x1) 40.069878365s ago: executing program 33 (id=480): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000380)={[{@delalloc}, {@data_err_abort}, {@noload}, {@dioread_lock}, {@data_err_ignore}, {@resgid}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x562, &(0x7f0000000440)="$eJzs3d9rW+UbAPDnpO1+f7/rYAwVkcIuHMyla+uPCV7MS9HhQG+8miE9K6PpMpp0rHXgduFuvJEheOFAvNd7L4f/gH/FQIdDRvHGm8hJT7quSdasy9rMfD5w2vfNe5L3PDnnefOenIQEMLQmsj+FiJcj4psk4nBEJHnbaOSNE2vrrT68Xs6WJBqNT/5KsvX2R0S59Vit+x3MKy9FxK9fRZwstPdbW16ZL1Uq6WJe3xsLVyZryyunLi2U5tK59PL0zMyZt2am333n7b7E2fhy7f/Hdz848/Xx1e9+vn/kdhJn41DensXVh25ubKxMxET+nIzF2U0rTvWhs0GS7PYGsC0jeZ6PRTYGHI6RPOuB/77sZbEBDKlE/sOQas0DWuf2fToPfmE8eH/tBKg9/tG190ZiX/Pc6MBq8tiZUXa+O96H/rM+fvnjzu1sif69DwGwpRs3I+L06Gj7+Jfk49/2ne5hnc19GP9g59zN5j9vdJr/FNbnP9Fh/nOwQ+5ux9b5X7jfh266yuZ/73Wc/65ftBofyWv/a875xpKLlyppNrb9PyJOxNjerP6k6zlnVu81urVtnP9lS9Z/ay6Yb8f90b2P32e2VC89S8wbPbgZ8UrH+W+yvv+TDvs/ez7O99jHsfTOa93ato7/+Wr8GPF6x/3/6IpWVpqsd70+Odk8HiZbR0W7v28d+61b/7sdf7b/Dzw5/vFk4/Xa2tP38cO+f9K8uG9z22PxR+/H/57k02Z5T37btVK9vjgVsSf5qP326Uf3bdVb62fxnzj+5PGv0/G/PyI+7zH+W0d/erVb2yDs/9mn2v9PX7j34Rffd+u/t/HvzWbpRH5LL+Nfrxv4LM8dAAAAAAAADJpCRByKpFBcLxcKxeLa5zuOxoFCpVqrn7xYXbo8G83vyo7HWKF1pfvwhs9DTOWfh23VpzfVZyLiSER8O7K/WS+Wq5XZ3Q4eAAAAAAAAAAAAAAAAAAAABsTBLt//z/w+0rb6Z3/u/CYCz5Of/IbhtWX+9+OXnoCB5PUfhpf8h+El/2F4yX8YXvIfhpf8h+El/2F4yX8AAAAAAAAAAAAAAAAAAAAAAAAAAADoq/PnzmVLY/Xh9XJWn726vDRfvXpqNq3NFxeWysVydfFKca5anaukxXJ1YavHq1SrV6amY+naZD2t1SdryysXFqpLl+sXLi2U5tIL6diORAUAAAAAAAAAAAAAAAAAAAAvltryynypUkkXFRS2VRgdjM1Q6HNht0cmAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHjk3wAAAP//cHo1gQ==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xfecc) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x105042, 0x1db) r2 = open(&(0x7f0000000040)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f00000003c0)={0x8, 0x3, 0x3}) writev(r1, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x64000}], 0x1) 37.716872233s ago: executing program 0 (id=502): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x1808014, &(0x7f0000000600)=ANY=[@ANYBLOB="66617374626f6f742c71756f7461002018bbdecde39739fcd1df176dde746ec834120600000000003b048000000000000072462abc30ef5b65c70f73ecea54b5e5bec5aca9836c319f653557e79a002208ceae6dda659bd5ba0f4ce5c2080002223dc60000000000000044cd0a1e36868736000000f6a55493b4b81d5b9fa9b40fe4d76afc3a989c6d60044e89eb96e44d01a1174e3797ffa86870b82939f41ffa0f3d726f085663c29cbdc4c766a7eb77cc369c71e57fafab52f325ca91e684160191acf5ae7469c82ab4145b595b987d75912afdcc1c061835294cc0c618aba204f8adaa20c80108d356cd887ba217c8f569e6d0caf75052a77056b06e7068c40f807d9e539f8f5b64a8ee0725aa8d00000000007cb6ac0d90ea79b8027cf75964dd86c2ed2b5e75779677a28c76b848dd03dab190b5f02ec52830f3ff01eaae1c3df076000000000000000000000000000083a48a6b926c668b9ba42490175018ea3619f9d80a0b894e212178e1a19909d764666264fa29e2c055fd7f8e67c2acfb75f0a8d41692f4542a575ee42ed94a0014fba44985cca9df12fe93bfaccf0122a6e7e593613ac011170182f99766e86fb125cc6799c43aa4dc708dc4a00a6decad26f0378072a571da000000aec3dfbae348b5b494f6fddb9f56142a47a40ef81690a7eca421bd0ad198afa58ce69d61c29deaa93c0efea0f1415e90fd0400bad5f796374bb196e60e537b8ffca80a5ec3c5c063aab2c87a7824c4fbfab7264185e1b2e59012acbf3732abe75b848de8ec4aaba2e3c8cd14dd9bf9499952815b9fb34057a585a9c18a11f3d496825b3fcb0c8aa89e079fd78997da864b302139b2b10597100846b55f7d0b050b7b0ef7e9c897c50b53404acdd701425323201b33465fddec69c37cb13fd441a830af5ea73f4ac82d7926eb0db1141003d148473077a76c3bee7e37dc799abb47bd67cde7958c50fb2d15c9cc196e4bff1d00"/716], 0x5, 0x558b, &(0x7f00000079c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x141842, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x7ffff000) rename(&(0x7f00000001c0)='./bus\x00', &(0x7f00000000c0)='./file0\x00') 36.916917445s ago: executing program 0 (id=510): r0 = socket$packet(0x11, 0x3, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000000180)=[{0x6, 0x8, 0x0, 0xf77}]}, 0x10) close(r0) 36.770729498s ago: executing program 0 (id=514): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r2, 0x400448ca, 0x0) bind$bt_hci(r2, &(0x7f0000000380)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5090}, 0x0) 36.738475568s ago: executing program 0 (id=517): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x200000, &(0x7f0000000180)={[{@nombcache}, {@nobarrier}, {@nodiscard}, {@orlov}, {@discard}, {@lazytime}, {@noload}, {@usrquota}, {@noauto_da_alloc}]}, 0xfe, 0x558, &(0x7f0000000c00)="$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") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0/../file0'}}]}) chdir(&(0x7f0000000140)='./bus\x00') symlink(&(0x7f00000005c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f00000002c0)='.\x02\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000200)=""/58, 0x3a) 36.61847509s ago: executing program 0 (id=518): syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000740)='./file0\x00', 0x10040, &(0x7f0000000a00)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@nouid32}, {@noblock_validity}, {@data_err_abort}]}, 0xf9, 0x278, &(0x7f0000000440)="$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") creat(&(0x7f0000000180)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x185502, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2000002, 0x28011, r0, 0x0) syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000000)='./file0\x00', 0x101c08a, &(0x7f0000000440)=ANY=[@ANYBLOB='shortname=mixed,iocharset=iso8859-=winnt,uni_xlate=1,uni_xlate=1,nonumtail=0,utf8=0,errors=continue,utf8=1,check=strict,iocharset=cp855,utf8=0,iocharset=koi8-u,codepage=857,utf8=0,rodir,shortname=win95,\x00'], 0x6, 0x2d4, &(0x7f0000002a80)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) 36.179086197s ago: executing program 0 (id=524): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r1, 0x2000009) sendfile(r0, r1, 0x0, 0x7ffff004) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700) 36.092773068s ago: executing program 34 (id=524): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r1, 0x2000009) sendfile(r0, r1, 0x0, 0x7ffff004) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700) 12.62386536s ago: executing program 5 (id=949): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='io_uring_create\x00', r1}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='io_uring_create\x00', r2}, 0x18) io_uring_setup(0x1de0, &(0x7f00000000c0)={0x0, 0x45d6, 0x0, 0x0, 0x0, 0x0, r2}) 12.253938056s ago: executing program 5 (id=956): io_uring_setup(0x1b91, &(0x7f0000000000)={0x0, 0xf8b6, 0x1, 0x0, 0x69}) close(0x3) r0 = socket(0x11, 0xa, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000040)=0x7, 0x4) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)={0xe017be01}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000240)) 12.210179806s ago: executing program 5 (id=957): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000180)=@broute={'broute\x00', 0x20, 0x2, 0x0, [0x3, 0x9, 0x10000000000002, 0x10, 0xe73c, 0x6], 0x0, 0x0, 0x0}, 0x38c) write$binfmt_script(r1, &(0x7f00000000c0), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000080)={@link_local, @random="86082b9827c1", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb3e02", 0x30, 0x3a, 0x0, @private2, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "974367", 0x0, 0x11, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local}}}}}}}, 0x0) ioctl$PTP_PEROUT_REQUEST2(r0, 0x40383d0c, &(0x7f00000000c0)) 12.178142707s ago: executing program 5 (id=958): syz_mount_image$ext4(&(0x7f0000000180)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x10, &(0x7f0000000140)={[{@norecovery}]}, 0xee, 0x485, &(0x7f0000002900)="$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") chdir(&(0x7f0000004340)='./file0\x00') creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)=ANY=[], 0xfd14) creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) 12.00754973s ago: executing program 5 (id=964): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x2, 0x5, 0x1, 0x0, 0xffffffffffffffff, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) mremap(&(0x7f00000ad000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f00000ae000/0x1000)=nil) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x201000, 0x1000}, 0x20) 11.847805432s ago: executing program 5 (id=965): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace(0x8, r2) waitid(0x2, 0x0, 0x0, 0x4, 0x0) 11.847721842s ago: executing program 35 (id=965): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace(0x8, r2) waitid(0x2, 0x0, 0x0, 0x4, 0x0) 11.254695972s ago: executing program 6 (id=974): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xf101}) close(r2) 11.066574865s ago: executing program 6 (id=975): r0 = fsopen(&(0x7f0000000100)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x1) fchdir(r1) r2 = open(&(0x7f00000000c0)='.\x00', 0x50080, 0x0) getdents(r2, &(0x7f0000001fc0)=""/184, 0x20002078) getdents64(r2, 0x0, 0x0) 11.028443906s ago: executing program 6 (id=976): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001400b59500000000000000000a000000", @ANYRES32=r3, @ANYBLOB="14000200fe8000000000000000000000000000aa080009003f0c00"], 0x48}}, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) 10.937753567s ago: executing program 6 (id=979): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000500), 0xff, 0x485, &(0x7f0000001040)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000640)='./file0\x00', 0x0, 0x2901090, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) pivot_root(&(0x7f0000000340)='.\x00', &(0x7f0000000180)='./file0/../file0/../file0\x00') 10.691921541s ago: executing program 6 (id=985): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0xf97, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r2, 0x400, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='leases_conflict\x00', r1}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) 10.543717653s ago: executing program 6 (id=987): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a80)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="01"], 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000c80), r1) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000b00), r1) sendmsg$NLBL_CALIPSO_C_ADD(r1, 0x0, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, r2, 0x403, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48c1}, 0x4000000) 10.483323054s ago: executing program 36 (id=987): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a80)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="01"], 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000c80), r1) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000b00), r1) sendmsg$NLBL_CALIPSO_C_ADD(r1, 0x0, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, r2, 0x403, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48c1}, 0x4000000) 9.240303654s ago: executing program 2 (id=1018): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmsg(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)=""/57, 0x39}], 0x1}, 0x40002000) setsockopt$TIPC_SRC_DROPPABLE(r1, 0x10f, 0x80, &(0x7f0000000080)=0x7, 0x4) 9.079467696s ago: executing program 2 (id=1023): syz_mount_image$fuse(0x0, &(0x7f0000000580)='./file0\x00', 0x0, 0x0, 0x8, 0x0, 0x0) open(&(0x7f00000002c0)='./file0/file0\x00', 0x141840, 0x0) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000440)=@framed={{}, [@printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) open(&(0x7f0000000200)='./file0/file0\x00', 0x0, 0x0) 8.936943029s ago: executing program 2 (id=1026): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000010000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x64, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x46, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x3000046, &(0x7f0000000cc0)={[{@delalloc}, {@noquota}, {@barrier_val={'barrier', 0x3d, 0x404}}, {@data_err_abort}, {@dioread_nolock}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x6522}}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r2 = open(&(0x7f0000000140)='./file1\x00', 0x141242, 0x40) fallocate(r2, 0x8, 0x40000, 0x10000) 8.671795753s ago: executing program 2 (id=1033): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000400)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) 8.539252085s ago: executing program 2 (id=1037): bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0xd, 0x12b0, 0x7fff, 0x25, 0x20, 0xffffffffffffffff, 0xfffffffe, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x4, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000800)={{0x1}, &(0x7f0000000780), 0x0}, 0x20) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="09000000170000000800000040"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001600)={r0, &(0x7f0000000580), &(0x7f0000001580)=""/92}, 0x20) 8.419700337s ago: executing program 2 (id=1041): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x2c, r3, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x10) 8.376821887s ago: executing program 37 (id=1041): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x2c, r3, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x10) 3.76138937s ago: executing program 8 (id=1177): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 2.751506836s ago: executing program 8 (id=1206): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x123102, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = eventfd(0xff7ffff7) r3 = eventfd(0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000280)={r2, 0x2, 0x2, r3}) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f00000003c0)={r2, 0x1, 0x0, r2}) 2.655659898s ago: executing program 8 (id=1207): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth1_to_team\x00', 0x0}) bind$packet(r2, &(0x7f0000000040)={0x11, 0x1c, r3, 0x1, 0x1, 0x6, @broadcast}, 0x14) bind$packet(r2, &(0x7f00000000c0)={0x11, 0x6, r3, 0x1, 0x5, 0x6, @broadcast}, 0x6f) 2.655188308s ago: executing program 8 (id=1208): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x50, &(0x7f0000001540)={[{@usrquota}, {}, {@commit}, {@mblk_io_submit}, {@barrier_val={'barrier', 0x3d, 0xfff}}]}, 0x1, 0x3eb, &(0x7f0000000880)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) open_tree(0xffffffffffffff9c, 0x0, 0x89801) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x6000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800006, 0x11, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) 2.50776122s ago: executing program 8 (id=1214): r0 = syz_usb_connect$cdc_ncm(0x2, 0x76, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x64, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0xa2}, {0xd, 0x24, 0xf, 0x1, 0xfffffff9, 0xfffd, 0x8}, {0x6, 0x24, 0x1a, 0x0, 0x8}, [@mbim_extended={0x8, 0x24, 0x1c, 0x80, 0x1, 0x3}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x0, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x0, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0xb, 0x7, 0x4}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000580)={0x44, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x80, 0x1c, {0x5, 0x1, 0x0, 0xa80, 0x5, 0x7, 0x4, 0x6, 0x80, 0x707f, 0x6, 0x8}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(0xffffffffffffffff, 0x4008af24, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000200)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 1.830406701s ago: executing program 3 (id=1234): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x3b, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.735396883s ago: executing program 7 (id=1236): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='page_pool_release\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r0}, &(0x7f0000000400), &(0x7f00000004c0)}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0xf, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1.734662343s ago: executing program 7 (id=1237): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0b000000ff000000020000000900000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r2}, &(0x7f0000000280), &(0x7f00000002c0)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000380)={r2, 0x0, &(0x7f0000000340)=""/55}, 0x20) 1.718364043s ago: executing program 7 (id=1238): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f00000002c0)=ANY=[], 0x8) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f00000064c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002d40)}, 0xc6}], 0x1, 0x2b, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000040)=0x7, 0x4) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x1, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 1.683830613s ago: executing program 3 (id=1239): syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000740)='./file0\x00', 0x10040, &(0x7f0000000200)={[{@journal_dev}, {@nouid32}]}, 0xfe, 0x268, &(0x7f0000000780)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20) syz_mount_image$fuse(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0xa04254, &(0x7f0000000080)=ANY=[], 0x5, 0x31f, &(0x7f0000000100)="$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") setxattr$trusted_overlay_origin(&(0x7f0000000040)='./file0\x00', &(0x7f0000000380), &(0x7f0000000100), 0x30, 0x0) mount$overlay(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000400), 0x0, &(0x7f0000000300)={[{@workdir={'workdir', 0x3d, './bus'}}, {@index_on}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}]}) 1.616379735s ago: executing program 3 (id=1240): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = eventfd(0x0) r3 = eventfd(0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000000)={r3, 0x8, 0x0, r3}) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000080)={r3, 0x1, 0x2, r2}) 1.534265266s ago: executing program 3 (id=1241): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000000)={0x1}) ioctl$KVM_GET_PIT(r2, 0xae71, &(0x7f00000003c0)) 1.419666888s ago: executing program 3 (id=1242): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000080)={0x34, r3, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x800) 1.419442848s ago: executing program 3 (id=1243): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) rt_sigaction(0xd, 0x0, 0x0, 0x0, 0x0) syz_clone(0x1080000, 0x0, 0xfffffe81, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f00000002c0)=ANY=[@ANYBLOB="000927000000270e22880732fada"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGVERSION(r1, 0x80044801, &(0x7f0000000980)) 1.319062789s ago: executing program 9 (id=1244): r0 = socket$netlink(0x10, 0x3, 0x0) setrlimit(0xf, &(0x7f0000000000)={0x0, 0x3}) timer_create(0x3, 0x0, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000040)={0x411, 0xe00000}, 0x0) unshare(0x40000000) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='('], 0x28}}, 0x0) 1.26005912s ago: executing program 9 (id=1245): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffdfe}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000340)='sched_kthread_stop_ret\x00', r1}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e0001007769726567756172640000000400028008000a00b8"], 0x40}}, 0x0) 1.099315763s ago: executing program 9 (id=1246): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xa, 0x4, 0x8, 0x10, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x19, 0x4, 0x4, 0x9, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xd, &(0x7f0000000040)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) 1.072657533s ago: executing program 9 (id=1247): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="05000000010000008e000000c9e7000001"], 0x50) bpf$MAP_DELETE_BATCH(0x18, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xe30a, r2}, 0x38) 1.008262114s ago: executing program 9 (id=1248): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x5, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x101e, 0x0, 0x0, 0x0, 0x5}, [@call={0x85, 0x0, 0x0, 0x7b}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000007, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 1.007907324s ago: executing program 9 (id=1249): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r0}, 0x10) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_connect$cdc_ecm(0x3, 0x0, 0x0, &(0x7f00000021c0)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, &(0x7f00000013c0)=ANY=[@ANYBLOB="40223a0000003a0f5d03aa88ce3434717c2dbcde1872c4a1bee0a1"], 0x0, &(0x7f00000014c0)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, 0x0, 0x0}, 0x0) 868.366036ms ago: executing program 7 (id=1253): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000500), 0xff, 0x485, &(0x7f0000001040)="$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") r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000340)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) io_setup(0x7d, &(0x7f0000000600)=0x0) io_submit(r2, 0x2, &(0x7f0000001d00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)="96", 0xffffff20, 0x0, 0x0, 0x0, r1}, &(0x7f0000000740)={0x0, 0x0, 0x41, 0x3, 0x0, r0, 0x0, 0x0, 0xffffffffffffffff}]) 659.65249ms ago: executing program 4 (id=1255): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x8, &(0x7f00000005c0)={[{@orlov}, {}]}, 0x4, 0x4f3, &(0x7f00000012c0)="$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") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x810408, 0x0, 0x0, 0x0, &(0x7f00000007c0)) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x4) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) 640.58397ms ago: executing program 4 (id=1256): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000005, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r2}, 0x10) io_setup(0x3, &(0x7f0000000340)) 544.986522ms ago: executing program 4 (id=1257): r0 = syz_open_dev$usbmon(&(0x7f0000000900), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000002c0)='mm_page_alloc\x00', r2}, 0x10) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0xdd218) 475.580013ms ago: executing program 7 (id=1258): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000850000000800000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000240)={'wg1\x00', 0x0}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)={0x20, r2, 0x1, 0x0, 0x0, {0x10}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x20}}, 0x0) 468.123543ms ago: executing program 4 (id=1259): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x0, 0x20000000000000f4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x98, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) setresuid(0xee00, 0x0, 0x0) prlimit64(0x0, 0xd, &(0x7f00000000c0)={0x200000000005, 0x8000000000200003}, 0x0) setpriority(0x2, 0x0, 0xffffffffffffffcd) 299.991325ms ago: executing program 4 (id=1260): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000001000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b70300000000ffff850000000400000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030086dd601b8b97004d88c19edace00000000000000002100000002ff02000000000000000000000000000104004e20"], 0x0) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaa79ff030486dd601b8b97004d88c19e9ace00000000000000002100000002ff02000000000000000000000000000104004e200008b0"], 0x0) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f00000005c0)) 235.846856ms ago: executing program 4 (id=1261): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1801000000000000000000000000000085000000050000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008008000b703000000009c8c850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x1, 0x800001, 0x0, 0x0, 0x0) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) mlock2(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x0) 235.174966ms ago: executing program 7 (id=1262): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001400010000000000000000000a000000", @ANYRES32, @ANYBLOB="140001000000010800"], 0x34}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) 0s ago: executing program 8 (id=1263): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000380)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r2, 0x1, 0x6, @multicast}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000001c0)={r4, 0x1, 0x6, @local}, 0x10) kernel console output (not intermixed with test programs): FE.0007: unknown main item tag 0x0 [ 44.511909][ T316] usb 6-1: SerialNumber: syz [ 44.518455][ T24] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 44.527033][ T24] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 44.536470][ T24] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 44.551186][ T24] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 44.556614][ T1448] loop2: detected capacity change from 0 to 1024 [ 44.564385][ T24] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 44.571999][ T1448] EXT4-fs (loop2): required journal recovery suppressed and not mounted read-only [ 44.580485][ T24] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 44.600884][ T24] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 44.613820][ T24] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 44.623433][ T24] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 44.632112][ T24] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 44.644916][ T24] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 44.653641][ T24] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 44.662052][ T24] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 44.670864][ T24] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 44.679784][ T24] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 44.688141][ T24] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 44.697214][ T24] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 44.707066][ T24] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 44.715098][ T24] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 44.724052][ T24] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 44.732054][ T24] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 44.742642][ T316] usb 6-1: 0:2 : does not exist [ 44.748438][ T24] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 44.759408][ T316] usb 6-1: USB disconnect, device number 2 [ 44.765514][ T24] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 44.775029][ T24] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 44.784233][ T24] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 44.792716][ T24] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 44.802403][ T24] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 44.812342][ T24] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 44.822905][ T24] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 44.831762][ T24] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 44.840444][ T24] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 44.850728][ T24] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 44.858902][ T24] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 44.867443][ T24] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 44.877669][ T24] hid-generic 0000:007F:FFFFFFFE.0007: hidraw0: HID v0.00 Device [syz1] on syz0 [ 44.945215][ T511] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 44.977260][ T320] udevd[320]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 45.126143][ T1456] loop0: detected capacity change from 0 to 40427 [ 45.133074][ T1456] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 45.141409][ T1456] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 45.150415][ T1456] F2FS-fs (loop0): invalid crc value [ 45.157709][ T1456] F2FS-fs (loop0): Found nat_bits in checkpoint [ 45.209494][ T1456] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 45.217516][ T1456] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 45.267810][ T316] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 45.468125][ T316] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 45.487035][ T316] usb 3-1: config 1 has no interface number 0 [ 45.494617][ T316] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 45.518033][ T316] usb 3-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 45.535848][ T316] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 49151, setting to 1024 [ 45.547759][ T316] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 45.568683][ T316] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 45.585644][ T1456] syz.0.478: attempt to access beyond end of device [ 45.585644][ T1456] loop0: rw=2049, sector=40424, nr_sectors = 8 limit=40427 [ 45.601054][ T316] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 45.618454][ T316] usb 3-1: Product: syz [ 45.627097][ T316] usb 3-1: Manufacturer: syz [ 45.639437][ T316] usb 3-1: SerialNumber: syz [ 45.713626][ T1483] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.721850][ T1483] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.737542][ T1483] device bridge_slave_0 entered promiscuous mode [ 45.745025][ T1483] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.753278][ T1483] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.761770][ T1483] device bridge_slave_1 entered promiscuous mode [ 45.778404][ T328] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 45.796049][ T328] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 45.859157][ T1448] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 45.931539][ T8] device veth0_vlan left promiscuous mode [ 46.049174][ T1502] tipc: Started in network mode [ 46.054071][ T1502] tipc: Node identity ffffffff, cluster identity 4711 [ 46.061165][ T1502] tipc: Node number set to 4294967295 [ 46.069912][ T28] kauditd_printk_skb: 41 callbacks suppressed [ 46.069929][ T28] audit: type=1400 audit(1744677450.585:8821): avc: denied { read } for pid=1501 comm="syz.0.483" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 46.083467][ T1483] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.102032][ T1483] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.109236][ T1483] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.116316][ T1483] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.147686][ T708] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 46.155668][ T708] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.165709][ T708] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.167193][ T775] Bluetooth: hci0: command 0x1003 tx timeout [ 46.174354][ T388] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 46.207708][ T708] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 46.216753][ T708] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.223784][ T708] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.226985][ T39] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 46.232361][ T708] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 46.246526][ T708] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.253804][ T708] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.271871][ T708] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 46.290145][ T708] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 46.304742][ T708] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 46.322139][ T1483] device veth0_vlan entered promiscuous mode [ 46.337764][ T1483] device veth1_macvtap entered promiscuous mode [ 46.351593][ T708] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 46.362989][ T708] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 46.372209][ T708] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 46.380766][ T708] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 46.394152][ T708] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 46.402639][ T708] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 46.413711][ T708] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 46.416980][ T39] usb 6-1: Using ep0 maxpacket: 16 [ 46.422718][ T708] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 46.431122][ T39] usb 6-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 46.444741][ T39] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 46.453114][ T39] usb 6-1: Product: syz [ 46.457372][ T39] usb 6-1: Manufacturer: syz [ 46.461853][ T39] usb 6-1: SerialNumber: syz [ 46.469565][ T39] usb 6-1: config 0 descriptor?? [ 46.476594][ T39] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected [ 46.487041][ T39] usb 6-1: Detected FT232H [ 46.503934][ T28] audit: type=1400 audit(1744677451.015:8822): avc: denied { relabelfrom } for pid=1510 comm="syz.6.481" name="" dev="pipefs" ino=21347 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 46.528787][ T1448] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 46.537876][ T316] cdc_ncm 3-1:1.1: bind() failure [ 46.666966][ T329] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 46.678566][ T39] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 46.749325][ T6] usb 3-1: USB disconnect, device number 3 [ 46.753462][ T1518] loop6: detected capacity change from 0 to 1024 [ 46.763601][ T1518] EXT4-fs: Ignoring removed nomblk_io_submit option [ 46.772506][ T1518] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 46.789018][ T1518] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 46.801620][ T28] audit: type=1400 audit(1744677451.315:8823): avc: denied { write } for pid=1517 comm="syz.6.493" name="file1" dev="loop6" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 46.847318][ T329] usb 5-1: Using ep0 maxpacket: 16 [ 46.852684][ T1483] EXT4-fs (loop6): unmounting filesystem. [ 46.859946][ T329] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 46.873027][ T329] usb 5-1: config 0 has no interface number 0 [ 46.887845][ T329] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 46.916199][ T329] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 46.927013][ T329] usb 5-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 46.937331][ T329] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 46.953898][ T329] usb 5-1: config 0 descriptor?? [ 47.088788][ T39] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 47.097478][ T1524] loop6: detected capacity change from 0 to 40427 [ 47.107815][ T1524] F2FS-fs (loop6): invalid crc value [ 47.129971][ T1524] F2FS-fs (loop6): Found nat_bits in checkpoint [ 47.176139][ T1524] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4 [ 47.221489][ T1524] syz.6.494: attempt to access beyond end of device [ 47.221489][ T1524] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 47.314311][ T316] usb 6-1: USB disconnect, device number 3 [ 47.329992][ T316] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 47.345726][ T316] ftdi_sio 6-1:0.0: device disconnected [ 47.379035][ T1537] serio: Serial port ptm0 [ 47.574426][ T329] uclogic 0003:28BD:0071.0008: pen parameters not found [ 47.581999][ T329] uclogic 0003:28BD:0071.0008: interface is invalid, ignoring [ 47.698328][ T6] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 47.778302][ T329] usb 5-1: USB disconnect, device number 4 [ 47.886920][ T6] usb 7-1: Using ep0 maxpacket: 16 [ 47.899491][ T6] usb 7-1: config 0 interface 0 has no altsetting 0 [ 47.908762][ T6] usb 7-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 47.921653][ T6] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 47.933452][ T6] usb 7-1: config 0 descriptor?? [ 48.010049][ T1547] loop0: detected capacity change from 0 to 40427 [ 48.019440][ T1547] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 48.028317][ T1547] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 48.038742][ T1547] F2FS-fs (loop0): invalid crc value [ 48.048531][ T1547] F2FS-fs (loop0): Found nat_bits in checkpoint [ 48.093440][ T1547] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 48.100798][ T1547] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 48.143439][ T6] usbhid 7-1:0.0: can't add hid device: -71 [ 48.150029][ T6] usbhid: probe of 7-1:0.0 failed with error -71 [ 48.159674][ T6] usb 7-1: USB disconnect, device number 2 [ 48.556682][ T1547] syz.0.502: attempt to access beyond end of device [ 48.556682][ T1547] loop0: rw=2049, sector=40424, nr_sectors = 8 limit=40427 [ 48.606993][ T708] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 48.617286][ T708] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 48.796892][ T306] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 48.802400][ T1586] loop0: detected capacity change from 0 to 1024 [ 48.812734][ T1586] EXT4-fs: Ignoring removed orlov option [ 48.838148][ T1586] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 48.853727][ T28] audit: type=1400 audit(1744677453.365:8824): avc: denied { unlink } for pid=1585 comm="syz.0.517" name="#f" dev="loop0" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 48.877876][ T28] audit: type=1400 audit(1744677453.375:8825): avc: denied { write } for pid=1585 comm="syz.0.517" name="/" dev="overlay" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 48.882378][ T296] EXT4-fs error (device loop0): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size [ 48.906471][ T28] audit: type=1400 audit(1744677453.375:8826): avc: denied { add_name } for pid=1585 comm="syz.0.517" name=2E02 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 48.940241][ T28] audit: type=1400 audit(1744677453.375:8827): avc: denied { create } for pid=1585 comm="syz.0.517" name=2E02 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 48.961099][ T28] audit: type=1400 audit(1744677453.395:8828): avc: denied { unlink } for pid=296 comm="syz-executor" name=2E02 dev="loop0" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 48.966749][ T296] EXT4-fs error (device loop0): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size [ 49.000645][ T1593] loop6: detected capacity change from 0 to 128 [ 49.009086][ T296] EXT4-fs error (device loop0): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size [ 49.022827][ T296] EXT4-fs error (device loop0): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size [ 49.031700][ T1596] loop2: detected capacity change from 0 to 1024 [ 49.033735][ T296] EXT4-fs error (device loop0): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size [ 49.040692][ T1593] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 49.053236][ T296] EXT4-fs error (device loop0): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size [ 49.059986][ T306] usb 5-1: Using ep0 maxpacket: 16 [ 49.076533][ T296] EXT4-fs error (device loop0): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size [ 49.078055][ T306] usb 5-1: config 0 has an invalid interface number: 17 but max is 0 [ 49.100134][ T296] EXT4-fs error (device loop0): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size [ 49.113340][ T1593] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.113396][ T1596] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 49.124333][ T296] EXT4-fs error (device loop0): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size [ 49.146220][ T296] EXT4-fs error (device loop0): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size [ 49.149668][ T306] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 49.168323][ T306] usb 5-1: config 0 has no interface number 0 [ 49.174580][ T28] audit: type=1400 audit(1744677453.685:8829): avc: denied { map } for pid=1592 comm="syz.6.520" path="/8/file1/memory.events" dev="loop6" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 49.198875][ T1483] EXT4-fs (loop6): unmounting filesystem. [ 49.202771][ T306] usb 5-1: New USB device found, idVendor=0408, idProduct=4034, bcdDevice=dd.cd [ 49.214292][ T1596] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 49.214977][ T306] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 49.222822][ T1596] ext4 filesystem being mounted at /101/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.230823][ T306] usb 5-1: Product: syz [ 49.249805][ T306] usb 5-1: Manufacturer: syz [ 49.254663][ T306] usb 5-1: SerialNumber: syz [ 49.264038][ T1596] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 49.266851][ T306] usb 5-1: config 0 descriptor?? [ 49.280839][ T1596] EXT4-fs (loop2): Remounting filesystem read-only [ 49.304918][ T297] EXT4-fs (loop2): unmounting filesystem. [ 49.313331][ T8] tipc: Left network mode [ 49.316206][ T296] EXT4-fs (loop0): unmounting filesystem. [ 49.500918][ T306] usb 5-1: Found UVC 0.00 device syz (0408:4034) [ 49.508526][ T306] usb 5-1: No valid video chain found. [ 49.605837][ T1627] loop2: detected capacity change from 0 to 128 [ 49.633005][ T28] audit: type=1400 audit(1744677454.145:8830): avc: denied { remount } for pid=1626 comm="syz.2.535" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 49.667973][ T1627] incfs: Can't find or create .index dir in ./bus [ 49.676192][ T1627] incfs: mount failed -22 [ 49.745388][ T316] usb 5-1: USB disconnect, device number 5 [ 49.773596][ T1623] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.784266][ T1623] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.792604][ T1623] device bridge_slave_0 entered promiscuous mode [ 49.805121][ T1623] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.812434][ T1623] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.820481][ T1623] device bridge_slave_1 entered promiscuous mode [ 49.844648][ T1642] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 49.853657][ T1642] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 49.901980][ T708] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 49.912366][ T708] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 49.921324][ T708] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 49.929724][ T708] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 49.938024][ T708] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 49.946157][ T708] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 49.954537][ T708] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 49.963009][ T708] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 50.028024][ T8] device bridge_slave_1 left promiscuous mode [ 50.046502][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.054511][ T8] device bridge_slave_0 left promiscuous mode [ 50.061772][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.071127][ T8] device veth1_macvtap left promiscuous mode [ 50.077098][ T8] device veth0_vlan left promiscuous mode [ 50.209750][ T1663] loop6: detected capacity change from 0 to 1024 [ 50.229427][ T1663] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 50.254114][ T1663] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:3841: comm syz.6.548: Allocating blocks 497-513 which overlap fs metadata [ 50.272773][ T1663] EXT4-fs (loop6): pa ffff888117ddee70: logic 256, phys. 385, len 8 [ 50.281212][ T1663] EXT4-fs error (device loop6): ext4_mb_release_inode_pa:4881: group 0, free 0, pa_free 1 [ 50.334051][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 50.343072][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 50.360170][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 50.371656][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 50.385855][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.393068][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.400642][ T316] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 50.409029][ T1671] loop4: detected capacity change from 0 to 512 [ 50.413051][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 50.431497][ T1483] EXT4-fs (loop6): unmounting filesystem. [ 50.439493][ T328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 50.448120][ T328] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.460339][ T328] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.467403][ T328] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.491752][ T1671] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 50.495103][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 50.509933][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 50.519428][ T1671] ext4 filesystem being mounted at /115/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 50.537800][ T708] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 50.550509][ T708] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 50.568059][ T708] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 50.577481][ T708] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 50.589284][ T316] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 50.610431][ T1623] device veth0_vlan entered promiscuous mode [ 50.619281][ T708] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 50.625741][ T298] EXT4-fs (loop4): unmounting filesystem. [ 50.628339][ T708] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 50.646845][ T1623] device veth1_macvtap entered promiscuous mode [ 50.648026][ T316] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 50.655428][ T708] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 50.671164][ T1684] syz.5.554 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 50.671283][ T708] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 50.691535][ T316] usb 3-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 50.695770][ T708] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 50.709331][ T708] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 50.715169][ T316] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 50.734832][ T635] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 50.744311][ T316] usb 3-1: config 0 descriptor?? [ 50.750020][ T635] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 50.774610][ T635] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 50.785057][ T635] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 50.800706][ T1693] loop5: detected capacity change from 0 to 256 [ 50.813869][ T1693] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x99a53fd9, utbl_chksum : 0xe619d30d) [ 50.890608][ T1695] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 50.891461][ T1701] input: syz1 as /devices/virtual/input/input6 [ 51.089870][ T1716] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 51.153193][ T316] lg-g15 0003:046D:C222.0009: unknown main item tag 0x0 [ 51.160941][ T316] lg-g15 0003:046D:C222.0009: unknown main item tag 0x0 [ 51.169022][ T316] lg-g15 0003:046D:C222.0009: unknown main item tag 0x0 [ 51.176939][ T316] lg-g15 0003:046D:C222.0009: unknown main item tag 0x0 [ 51.184400][ T316] lg-g15 0003:046D:C222.0009: unknown main item tag 0x0 [ 51.192582][ T316] lg-g15 0003:046D:C222.0009: unknown main item tag 0x0 [ 51.201784][ T316] lg-g15 0003:046D:C222.0009: hidraw0: USB HID v0.00 Device [HID 046d:c222] on usb-dummy_hcd.2-1/input0 [ 51.265284][ T1734] loop4: detected capacity change from 0 to 512 [ 51.280497][ T1734] EXT4-fs: Ignoring removed mblk_io_submit option [ 51.290837][ T1734] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 51.350955][ T298] EXT4-fs (loop4): unmounting filesystem. [ 51.373450][ T316] usb 3-1: USB disconnect, device number 4 [ 51.383936][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 51.383953][ T28] audit: type=1400 audit(1744677455.905:8837): avc: denied { append } for pid=1740 comm="syz.5.581" name="001" dev="devtmpfs" ino=160 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 51.398303][ T1174] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 51.426017][ T1743] loop4: detected capacity change from 0 to 256 [ 51.439214][ T28] audit: type=1400 audit(1744677455.955:8838): avc: denied { write } for pid=1740 comm="syz.5.581" name="001" dev="devtmpfs" ino=160 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 51.453764][ T1743] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 51.475215][ T1743] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 51.486684][ T1743] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 51.617805][ T1174] usb 7-1: Using ep0 maxpacket: 8 [ 51.628123][ T1174] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 51.651774][ T1174] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 51.667713][ T1174] usb 7-1: New USB device found, idVendor=056a, idProduct=00ef, bcdDevice= 0.00 [ 51.684971][ T1174] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 51.695057][ T1760] devpts: called with bogus options [ 51.699914][ T1174] usb 7-1: config 0 descriptor?? [ 52.046998][ T306] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 52.111925][ T1174] wacom 0003:056A:00EF.000A: hidraw0: USB HID v0.00 Device [HID 056a:00ef] on usb-dummy_hcd.6-1/input0 [ 52.147985][ T1778] loop2: detected capacity change from 0 to 256 [ 52.161993][ T1778] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 52.173832][ T1778] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 52.185353][ T1778] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 52.206944][ T19] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 52.226087][ T28] audit: type=1400 audit(1744677456.735:8839): avc: denied { remove_name } for pid=1777 comm="syz.2.596" name="file0" dev="loop2" ino=1048621 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 52.250592][ T28] audit: type=1400 audit(1744677456.735:8840): avc: denied { rename } for pid=1777 comm="syz.2.596" name="file0" dev="loop2" ino=1048621 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 52.274870][ T306] usb 5-1: config 0 interface 0 has no altsetting 0 [ 52.281769][ T306] usb 5-1: New USB device found, idVendor=17ef, idProduct=6067, bcdDevice= 0.00 [ 52.291431][ T306] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.320591][ T316] usb 7-1: USB disconnect, device number 3 [ 52.321705][ T306] usb 5-1: config 0 descriptor?? [ 52.409043][ T19] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 52.419989][ T19] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 52.429933][ T19] usb 8-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 52.439326][ T19] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.452284][ T19] usb 8-1: config 0 descriptor?? [ 52.547837][ T1767] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.560713][ T1767] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.584060][ T1767] input: syz0 as /devices/virtual/input/input10 [ 52.606359][ T306] usbhid 5-1:0.0: can't add hid device: -71 [ 52.612786][ T306] usbhid: probe of 5-1:0.0 failed with error -71 [ 52.624123][ T306] usb 5-1: USB disconnect, device number 6 [ 52.861870][ T19] hid-steam 0003:28DE:1142.000B: collection stack underflow [ 52.869328][ T19] hid-steam 0003:28DE:1142.000B: item 0 2 0 12 parsing failed [ 52.876748][ T19] hid-steam 0003:28DE:1142.000B: steam_probe:parse of hid interface failed [ 52.885575][ T19] hid-steam: probe of 0003:28DE:1142.000B failed with error -22 [ 53.056526][ T1803] loop2: detected capacity change from 0 to 512 [ 53.067381][ T1509] usb 8-1: USB disconnect, device number 2 [ 53.080571][ T1803] EXT4-fs (loop2): 1 orphan inode deleted [ 53.086255][ T1803] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 53.095516][ T1803] ext4 filesystem being mounted at /124/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.107233][ T8] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 53.119376][ T8] EXT4-fs error (device loop2): ext4_release_dquot:6805: comm kworker/u4:0: Failed to release dquot type 1 [ 53.132267][ T936] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 53.140411][ T1803] EXT4-fs error (device loop2): ext4_do_update_inode:5226: inode #16: comm syz.2.606: corrupted inode contents [ 53.153195][ T1803] EXT4-fs error (device loop2): ext4_dirty_inode:6091: inode #16: comm syz.2.606: mark_inode_dirty error [ 53.165052][ T1803] EXT4-fs error (device loop2): ext4_do_update_inode:5226: inode #16: comm syz.2.606: corrupted inode contents [ 53.177083][ T1803] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2954: inode #16: comm syz.2.606: mark_inode_dirty error [ 53.191317][ T1808] EXT4-fs warning (device loop2): ext4_resize_begin:84: There are errors in the filesystem, so online resizing is not allowed [ 53.205706][ T1803] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2957: inode #16: comm syz.2.606: mark inode dirty (error -117) [ 53.220224][ T1803] EXT4-fs warning (device loop2): ext4_evict_inode:299: xattr delete (err -117) [ 53.241233][ T297] EXT4-fs (loop2): unmounting filesystem. [ 53.294848][ T1807] loop4: detected capacity change from 0 to 40427 [ 53.305271][ T1807] F2FS-fs (loop4): fault_injection options not supported [ 53.328001][ T936] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 53.338111][ T936] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 53.349255][ T936] usb 7-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 53.363427][ T1807] F2FS-fs (loop4): invalid crc value [ 53.370042][ T1807] F2FS-fs (loop4): Found nat_bits in checkpoint [ 53.382046][ T936] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 53.394458][ T936] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 53.406778][ T936] usb 7-1: Product: syz [ 53.410828][ T936] usb 7-1: Manufacturer: syz [ 53.415309][ T936] usb 7-1: SerialNumber: syz [ 53.426540][ T1807] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 53.840407][ T1791] loop6: detected capacity change from 0 to 128 [ 53.848767][ T1829] fuse: root generation should be zero [ 53.853419][ T1833] netlink: 4 bytes leftover after parsing attributes in process `syz.4.616'. [ 53.870747][ T936] cdc_ncm 7-1:1.0: bind() failure [ 53.894761][ T936] usbhid: probe of 7-1:1.1 failed with error -71 [ 53.924738][ T936] usb 7-1: USB disconnect, device number 4 [ 54.060686][ T1842] netlink: 'syz.5.620': attribute type 4 has an invalid length. [ 54.125316][ T1848] overlayfs: missing 'lowerdir' [ 54.181380][ T1847] netlink: 24 bytes leftover after parsing attributes in process `syz.5.623'. [ 54.237192][ T1856] overlayfs: missing 'lowerdir' [ 54.273557][ T1860] loop5: detected capacity change from 0 to 128 [ 54.475202][ T28] audit: type=1400 audit(1744677458.985:8841): avc: denied { create } for pid=1875 comm="syz.7.635" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 54.490870][ T1876] loop7: detected capacity change from 0 to 128 [ 54.549916][ T1876] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 54.582912][ T1876] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 54.605932][ T28] audit: type=1400 audit(1744677459.115:8842): avc: denied { getopt } for pid=1875 comm="syz.7.635" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 54.746421][ T1893] netlink: 96 bytes leftover after parsing attributes in process `syz.4.643'. [ 54.867938][ T28] audit: type=1400 audit(1744677459.385:8843): avc: denied { wake_alarm } for pid=1905 comm="syz.4.648" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 54.925011][ T1886] loop5: detected capacity change from 0 to 512 [ 54.937015][ T306] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 54.949766][ T1908] netlink: 4 bytes leftover after parsing attributes in process `syz.4.649'. [ 54.959527][ T1886] EXT4-fs error (device loop5): ext4_orphan_get:1400: inode #15: comm syz.5.639: casefold flag without casefold feature [ 54.978832][ T1908] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.982410][ T1886] EXT4-fs error (device loop5): ext4_orphan_get:1405: comm syz.5.639: couldn't read orphan inode 15 (err -117) [ 54.999862][ T1908] device bridge_slave_1 left promiscuous mode [ 55.007257][ T1886] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 55.029350][ T1895] loop6: detected capacity change from 0 to 40427 [ 55.031041][ T1908] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.057751][ T1895] F2FS-fs (loop6): Found nat_bits in checkpoint [ 55.078406][ T682] EXT4-fs (loop5): unmounting filesystem. [ 55.134887][ T1895] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 55.146850][ T306] usb 3-1: Using ep0 maxpacket: 32 [ 55.170822][ T306] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 55.194964][ T306] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 55.207406][ T306] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 55.216459][ T28] audit: type=1400 audit(1744677459.725:8844): avc: denied { relabelfrom } for pid=1922 comm="syz.4.652" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 55.236967][ T306] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.244292][ T28] audit: type=1400 audit(1744677459.725:8845): avc: denied { relabelto } for pid=1922 comm="syz.4.652" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 55.266725][ T1483] syz-executor: attempt to access beyond end of device [ 55.266725][ T1483] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 55.271281][ T306] usb 3-1: config 0 descriptor?? [ 55.287462][ T1887] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 55.295333][ T306] hub 3-1:0.0: USB hub found [ 55.333933][ T1509] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x4 [ 55.341815][ T1509] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x2 [ 55.350274][ T1509] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0 [ 55.364743][ T1509] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0 [ 55.377607][ T1509] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0 [ 55.386399][ T1927] loop5: detected capacity change from 0 to 128 [ 55.392861][ T1509] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0 [ 55.401409][ T1509] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0 [ 55.409861][ T1509] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0 [ 55.418227][ T1509] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0 [ 55.426475][ T1509] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0 [ 55.435324][ T1927] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 55.444907][ T1509] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0 [ 55.453338][ T1927] ext4 filesystem being mounted at /95/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.463946][ T1509] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0 [ 55.471819][ T1509] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0 [ 55.488299][ T1509] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0 [ 55.502972][ T306] hub 3-1:0.0: 1 port detected [ 55.503592][ T1509] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0 [ 55.518632][ T1509] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0 [ 55.527936][ T682] EXT4-fs (loop5): unmounting filesystem. [ 55.535219][ T1509] hid-generic 0000:3000000:0000.000C: hidraw0: HID v0.00 Device [sy] on syz0 [ 55.626503][ T1929] loop6: detected capacity change from 0 to 40427 [ 55.652730][ T1929] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 55.666849][ T1929] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 55.718807][ T1929] F2FS-fs (loop6): invalid crc value [ 55.732603][ T1929] F2FS-fs (loop6): Found nat_bits in checkpoint [ 55.809691][ T1929] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 55.816954][ T1929] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 55.868544][ T1951] netlink: 24 bytes leftover after parsing attributes in process `syz.4.663'. [ 55.979822][ T10] F2FS-fs (loop6): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 55.993288][ T1960] loop4: detected capacity change from 0 to 128 [ 56.002765][ T10] F2FS-fs (loop6): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 56.019365][ T1960] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 56.029951][ T1960] ext4 filesystem being mounted at /154/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 56.071788][ T298] EXT4-fs (loop4): unmounting filesystem. [ 56.536950][ T1509] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 56.543520][ T19] usb 3-1: USB disconnect, device number 5 [ 56.716941][ T329] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 56.728166][ T1509] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 56.739297][ T1509] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 56.747150][ T319] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 56.762405][ T1509] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 56.772406][ T1509] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 56.780976][ T1509] usb 5-1: Product: syz [ 56.785339][ T1509] usb 5-1: Manufacturer: syz [ 56.790061][ T1509] usb 5-1: SerialNumber: syz [ 56.875755][ T1980] loop5: detected capacity change from 0 to 40427 [ 56.890346][ T1980] F2FS-fs (loop5): fault_injection options not supported [ 56.900169][ T1980] F2FS-fs (loop5): invalid crc value [ 56.908853][ T1980] F2FS-fs (loop5): Found nat_bits in checkpoint [ 56.918324][ T329] usb 7-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 56.928197][ T329] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 56.937050][ T329] usb 7-1: config 0 descriptor?? [ 56.947148][ T319] usb 8-1: Using ep0 maxpacket: 32 [ 56.953253][ T319] usb 8-1: config 0 has an invalid interface number: 87 but max is 0 [ 56.961629][ T319] usb 8-1: config 0 has no interface number 0 [ 56.967902][ T1980] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 56.968072][ T319] usb 8-1: config 0 interface 87 has no altsetting 0 [ 56.990989][ T319] usb 8-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=6f.30 [ 57.000460][ T319] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 57.002137][ T1509] usb 5-1: 0:2 : does not exist [ 57.010494][ T319] usb 8-1: Product: syz [ 57.017884][ T319] usb 8-1: Manufacturer: syz [ 57.022505][ T319] usb 8-1: SerialNumber: syz [ 57.029319][ T1509] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 57.040499][ T319] usb 8-1: config 0 descriptor?? [ 57.065872][ T1509] usb 5-1: USB disconnect, device number 7 [ 57.140571][ T1988] loop5: detected capacity change from 0 to 512 [ 57.157635][ T1988] EXT4-fs warning (device loop5): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 57.169936][ T1988] EXT4-fs warning (device loop5): dx_probe:881: Enable large directory feature to access it [ 57.180909][ T1988] EXT4-fs warning (device loop5): dx_probe:966: inode #2: comm syz.5.677: Corrupt directory, running e2fsck is recommended [ 57.195650][ T1988] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -117 [ 57.205803][ T1988] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2186: inode #15: comm syz.5.677: corrupted in-inode xattr [ 57.227614][ T1988] EXT4-fs (loop5): Remounting filesystem read-only [ 57.235114][ T1988] EXT4-fs error (device loop5): ext4_orphan_get:1405: comm syz.5.677: couldn't read orphan inode 15 (err -117) [ 57.252556][ T1988] EXT4-fs (loop5): Remounting filesystem read-only [ 57.260067][ T1988] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 57.276603][ T1988] EXT4-fs warning (device loop5): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 57.289499][ T1988] EXT4-fs warning (device loop5): dx_probe:881: Enable large directory feature to access it [ 57.302072][ T1988] EXT4-fs warning (device loop5): dx_probe:966: inode #2: comm syz.5.677: Corrupt directory, running e2fsck is recommended [ 57.328145][ T1988] EXT4-fs warning (device loop5): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 57.344174][ T1988] EXT4-fs warning (device loop5): dx_probe:881: Enable large directory feature to access it [ 57.358764][ T1988] EXT4-fs warning (device loop5): dx_probe:966: inode #2: comm syz.5.677: Corrupt directory, running e2fsck is recommended [ 57.374156][ T1988] EXT4-fs warning (device loop5): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 57.386743][ T1988] EXT4-fs warning (device loop5): dx_probe:881: Enable large directory feature to access it [ 57.397774][ T1988] EXT4-fs warning (device loop5): dx_probe:966: inode #2: comm syz.5.677: Corrupt directory, running e2fsck is recommended [ 57.412231][ T1988] EXT4-fs warning (device loop5): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 57.424108][ T1988] EXT4-fs error (device loop5): ext4_readdir:260: inode #2: block 3: comm syz.5.677: path /100/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 57.444318][ T1988] EXT4-fs (loop5): Remounting filesystem read-only [ 57.451307][ T1988] EXT4-fs error (device loop5): ext4_readdir:260: inode #2: block 8: comm syz.5.677: path /100/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=33261, rec_len=1050, size=1024 fake=0 [ 57.457002][ T316] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 57.473316][ T1988] EXT4-fs (loop5): Remounting filesystem read-only [ 57.500193][ T682] EXT4-fs (loop5): unmounting filesystem. [ 57.659112][ T316] usb 3-1: Using ep0 maxpacket: 32 [ 57.665353][ T316] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 57.672167][ T1998] loop5: detected capacity change from 0 to 2048 [ 57.677391][ T316] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 57.695606][ T316] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 57.707016][ T316] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 57.715662][ T316] usb 3-1: Product: syz [ 57.719994][ T316] usb 3-1: Manufacturer: syz [ 57.726685][ T316] hub 3-1:4.0: USB hub found [ 57.737763][ T1998] loop5: p1 < > p4 [ 57.742537][ T1998] loop5: p4 size 8388608 extends beyond EOD, truncated [ 57.879551][ T2008] loop5: detected capacity change from 0 to 512 [ 57.889534][ T2008] EXT4-fs error (device loop5): ext4_orphan_get:1400: inode #15: comm syz.5.685: casefold flag without casefold feature [ 57.904237][ T2008] EXT4-fs error (device loop5): ext4_orphan_get:1405: comm syz.5.685: couldn't read orphan inode 15 (err -117) [ 57.927074][ T2008] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 57.962138][ T682] EXT4-fs (loop5): unmounting filesystem. [ 57.974286][ T1986] loop2: detected capacity change from 0 to 512 [ 57.981456][ T1986] EXT4-fs: Ignoring removed nomblk_io_submit option [ 57.995943][ T1986] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: inode #2: comm syz.2.678: missing EA_INODE flag [ 58.008992][ T1986] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.678: error while reading EA inode 2 err=-117 [ 58.020062][ T2012] device syzkaller0 entered promiscuous mode [ 58.026050][ T1986] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: inode #2: comm syz.2.678: missing EA_INODE flag [ 58.043711][ T1986] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.678: error while reading EA inode 2 err=-117 [ 58.057178][ T1986] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.678: inode #65536: comm syz.2.678: iget: illegal inode # [ 58.076576][ T1986] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.678: error while reading EA inode 65536 err=-117 [ 58.091387][ T1986] EXT4-fs (loop2): 1 orphan inode deleted [ 58.097110][ T1986] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 58.110281][ T316] hub 3-1:4.0: 15 ports detected [ 58.116155][ T316] hub 3-1:4.0: insufficient power available to use all downstream ports [ 58.183090][ T2016] netlink: 4 bytes leftover after parsing attributes in process `syz.5.688'. [ 58.203967][ T2016] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.215895][ T2016] device bridge_slave_1 left promiscuous mode [ 58.222743][ T2016] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.351472][ T329] usb 7-1: Cannot set autoneg [ 58.360618][ T329] MOSCHIP usb-ethernet driver: probe of 7-1:0.0 failed with error -71 [ 58.370655][ T329] usb 7-1: USB disconnect, device number 5 [ 58.396964][ T316] hub 3-1:4.0: hub_hub_status failed (err = -71) [ 58.403376][ T316] hub 3-1:4.0: config failed, can't get hub status (err -71) [ 58.447696][ T316] usb 3-1: USB disconnect, device number 6 [ 58.492686][ T319] asix 8-1:0.87 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 58.525910][ T319] asix 8-1:0.87 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 58.537142][ T319] asix: probe of 8-1:0.87 failed with error -71 [ 58.545699][ T319] usb 8-1: USB disconnect, device number 3 [ 58.560441][ T2025] netlink: 88 bytes leftover after parsing attributes in process `syz.4.692'. [ 58.574413][ T2025] netlink: 8 bytes leftover after parsing attributes in process `syz.4.692'. [ 58.781925][ T2030] loop5: detected capacity change from 0 to 40427 [ 58.789245][ T2030] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 58.798831][ T2030] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 58.815059][ T2030] F2FS-fs (loop5): invalid crc value [ 58.822160][ T2030] F2FS-fs (loop5): Found nat_bits in checkpoint [ 58.907178][ T2030] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 58.917002][ T2030] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 58.937073][ T297] EXT4-fs (loop2): unmounting filesystem. [ 58.968830][ T28] audit: type=1400 audit(1744677463.485:8846): avc: denied { bpf } for pid=2040 comm="syz.2.697" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 59.011336][ T28] audit: type=1400 audit(1744677463.485:8847): avc: denied { map_create } for pid=2040 comm="syz.2.697" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 59.083733][ T328] F2FS-fs (loop5): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 59.084516][ T28] audit: type=1400 audit(1744677463.485:8848): avc: denied { perfmon } for pid=2040 comm="syz.2.697" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 59.123925][ T328] F2FS-fs (loop5): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 59.152115][ T28] audit: type=1400 audit(1744677463.485:8849): avc: denied { map_read map_write } for pid=2040 comm="syz.2.697" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 59.197140][ T28] audit: type=1400 audit(1744677463.485:8850): avc: denied { prog_load } for pid=2040 comm="syz.2.697" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 59.220183][ T2041] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.227263][ T2041] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.246909][ T28] audit: type=1400 audit(1744677463.485:8851): avc: denied { prog_run } for pid=2040 comm="syz.2.697" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 59.288869][ T28] audit: type=1400 audit(1744677463.515:8852): avc: denied { read write } for pid=1483 comm="syz-executor" name="loop6" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 59.323742][ T2041] device bridge_slave_0 left promiscuous mode [ 59.334496][ T28] audit: type=1400 audit(1744677463.515:8853): avc: denied { open } for pid=1483 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 59.340931][ T2041] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.360055][ T319] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 59.401563][ T28] audit: type=1400 audit(1744677463.515:8854): avc: denied { ioctl } for pid=1483 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=120 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 59.459112][ T28] audit: type=1400 audit(1744677463.525:8855): avc: denied { write } for pid=2029 comm="syz.5.693" name="/" dev="loop5" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 59.501300][ T2041] device bridge_slave_1 left promiscuous mode [ 59.518814][ T2041] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.577987][ T319] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 59.606442][ T319] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 59.636859][ T319] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 59.675701][ T319] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 59.701657][ T319] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.746130][ T319] usb 7-1: config 0 descriptor?? [ 59.777531][ T2068] tipc: Started in network mode [ 59.782739][ T2068] tipc: Node identity ffffffff, cluster identity 4711 [ 59.789914][ T2068] tipc: Node number set to 4294967295 [ 60.140928][ T2095] loop7: detected capacity change from 0 to 1024 [ 60.168873][ T2056] hid-generic 0000:007F:FFFFFFFE.000D: unknown main item tag 0x0 [ 60.177314][ T2095] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 60.177850][ T2056] hid-generic 0000:007F:FFFFFFFE.000D: unknown main item tag 0x0 [ 60.189120][ T319] plantronics 0003:047F:FFFF.000E: unknown main item tag 0xd [ 60.195765][ T2056] hid-generic 0000:007F:FFFFFFFE.000D: unknown main item tag 0x0 [ 60.206461][ T319] plantronics 0003:047F:FFFF.000E: No inputs registered, leaving [ 60.221422][ T2056] hid-generic 0000:007F:FFFFFFFE.000D: unknown main item tag 0x0 [ 60.231047][ T2056] hid-generic 0000:007F:FFFFFFFE.000D: unknown main item tag 0x0 [ 60.231137][ T319] plantronics 0003:047F:FFFF.000E: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 60.240067][ T2056] hid-generic 0000:007F:FFFFFFFE.000D: unknown main item tag 0x0 [ 60.259449][ T2095] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:3841: comm syz.7.715: Allocating blocks 497-513 which overlap fs metadata [ 60.269581][ T2056] hid-generic 0000:007F:FFFFFFFE.000D: unknown main item tag 0x0 [ 60.291687][ T2095] EXT4-fs (loop7): pa ffff888117ddef18: logic 256, phys. 385, len 8 [ 60.300445][ T2095] EXT4-fs error (device loop7): ext4_mb_release_inode_pa:4881: group 0, free 0, pa_free 1 [ 60.313434][ T2056] hid-generic 0000:007F:FFFFFFFE.000D: unknown main item tag 0x0 [ 60.321704][ T2056] hid-generic 0000:007F:FFFFFFFE.000D: unknown main item tag 0x0 [ 60.329453][ T2056] hid-generic 0000:007F:FFFFFFFE.000D: unknown main item tag 0x0 [ 60.337050][ T2056] hid-generic 0000:007F:FFFFFFFE.000D: unknown main item tag 0x0 [ 60.345652][ T2056] hid-generic 0000:007F:FFFFFFFE.000D: unknown main item tag 0x0 [ 60.354155][ T2056] hid-generic 0000:007F:FFFFFFFE.000D: unknown main item tag 0x0 [ 60.359157][ T1623] EXT4-fs (loop7): unmounting filesystem. [ 60.362250][ T2056] hid-generic 0000:007F:FFFFFFFE.000D: unknown main item tag 0x0 [ 60.376405][ T2056] hid-generic 0000:007F:FFFFFFFE.000D: unknown main item tag 0x0 [ 60.384418][ T2056] hid-generic 0000:007F:FFFFFFFE.000D: unknown main item tag 0x0 [ 60.392744][ T2056] hid-generic 0000:007F:FFFFFFFE.000D: unknown main item tag 0x0 [ 60.401204][ T2056] hid-generic 0000:007F:FFFFFFFE.000D: unknown main item tag 0x0 [ 60.408764][ T2056] hid-generic 0000:007F:FFFFFFFE.000D: unknown main item tag 0x0 [ 60.416582][ T2056] hid-generic 0000:007F:FFFFFFFE.000D: unknown main item tag 0x0 [ 60.424482][ T2056] hid-generic 0000:007F:FFFFFFFE.000D: unknown main item tag 0x0 [ 60.432012][ T2056] hid-generic 0000:007F:FFFFFFFE.000D: unknown main item tag 0x0 [ 60.443924][ T2056] hid-generic 0000:007F:FFFFFFFE.000D: unknown main item tag 0x0 [ 60.452620][ T2056] hid-generic 0000:007F:FFFFFFFE.000D: unknown main item tag 0x0 [ 60.460578][ T2056] hid-generic 0000:007F:FFFFFFFE.000D: unknown main item tag 0x0 [ 60.469208][ T2056] hid-generic 0000:007F:FFFFFFFE.000D: unknown main item tag 0x0 [ 60.476968][ T2056] hid-generic 0000:007F:FFFFFFFE.000D: unknown main item tag 0x0 [ 60.484936][ T2056] hid-generic 0000:007F:FFFFFFFE.000D: unknown main item tag 0x0 [ 60.493791][ T2056] hid-generic 0000:007F:FFFFFFFE.000D: unknown main item tag 0x0 [ 60.502894][ T2056] hid-generic 0000:007F:FFFFFFFE.000D: unknown main item tag 0x0 [ 60.511066][ T2056] hid-generic 0000:007F:FFFFFFFE.000D: unknown main item tag 0x0 [ 60.517949][ T319] usb 7-1: USB disconnect, device number 6 [ 60.518830][ T2056] hid-generic 0000:007F:FFFFFFFE.000D: unknown main item tag 0x0 [ 60.532730][ T2056] hid-generic 0000:007F:FFFFFFFE.000D: unknown main item tag 0x0 [ 60.541849][ T2056] hid-generic 0000:007F:FFFFFFFE.000D: unknown main item tag 0x0 [ 60.549572][ T2056] hid-generic 0000:007F:FFFFFFFE.000D: unknown main item tag 0x0 [ 60.557649][ T2056] hid-generic 0000:007F:FFFFFFFE.000D: unknown main item tag 0x0 [ 60.565255][ T2056] hid-generic 0000:007F:FFFFFFFE.000D: unknown main item tag 0x0 [ 60.573238][ T2056] hid-generic 0000:007F:FFFFFFFE.000D: unknown main item tag 0x0 [ 60.581094][ T2056] hid-generic 0000:007F:FFFFFFFE.000D: unknown main item tag 0x0 [ 60.590116][ T2056] hid-generic 0000:007F:FFFFFFFE.000D: unknown main item tag 0x0 [ 60.597957][ T2056] hid-generic 0000:007F:FFFFFFFE.000D: unknown main item tag 0x0 [ 60.606971][ T2056] hid-generic 0000:007F:FFFFFFFE.000D: unknown main item tag 0x0 [ 60.615495][ T2056] hid-generic 0000:007F:FFFFFFFE.000D: unknown main item tag 0x0 [ 60.625740][ T2056] hid-generic 0000:007F:FFFFFFFE.000D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 60.733009][ T2111] device bridge0 entered promiscuous mode [ 60.767134][ T2052] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 60.900609][ T2107] syz.5.719 (2107) used greatest stack depth: 20040 bytes left [ 60.958225][ T2052] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 60.971516][ T2052] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 60.980820][ T2052] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.001297][ T2052] usb 3-1: config 0 descriptor?? [ 61.070509][ T2131] loop4: detected capacity change from 0 to 512 [ 61.087387][ T2131] EXT4-fs (loop4): external journal device major/minor numbers have changed [ 61.111754][ T2131] block device autoloading is deprecated and will be removed. [ 61.124728][ T2131] EXT4-fs (loop4): external journal has bad superblock [ 61.156105][ T2117] loop7: detected capacity change from 0 to 40427 [ 61.163150][ T2117] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12 [ 61.177782][ T2117] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 61.201124][ T2117] F2FS-fs (loop7): invalid crc value [ 61.222964][ T2141] tipc: Started in network mode [ 61.225789][ T2117] F2FS-fs (loop7): Found nat_bits in checkpoint [ 61.230815][ T2141] tipc: Node identity ffffffff, cluster identity 4711 [ 61.240981][ T2141] tipc: Node number set to 4294967295 [ 61.275944][ T2117] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 61.282888][ T2117] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 61.396862][ T319] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 61.415638][ T2052] keytouch 0003:0926:3333.000F: fixing up Keytouch IEC report descriptor [ 61.431929][ T2052] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.000F/input/input12 [ 61.471078][ T2117] syz.7.732: attempt to access beyond end of device [ 61.471078][ T2117] loop7: rw=2049, sector=40424, nr_sectors = 8 limit=40427 [ 61.509948][ T2052] keytouch 0003:0926:3333.000F: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 61.558487][ T10] F2FS-fs (loop7): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 61.568115][ T10] F2FS-fs (loop7): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 61.586909][ T319] usb 7-1: Using ep0 maxpacket: 16 [ 61.595125][ T319] usb 7-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 61.605041][ T319] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.613132][ T319] usb 7-1: Product: syz [ 61.617261][ T319] usb 7-1: Manufacturer: syz [ 61.621855][ T319] usb 7-1: SerialNumber: syz [ 61.623177][ T2052] usb 3-1: USB disconnect, device number 7 [ 61.628011][ T319] usb 7-1: config 0 descriptor?? [ 61.638955][ T319] ftdi_sio 7-1:0.0: FTDI USB Serial Device converter detected [ 61.654698][ T319] usb 7-1: Detected FT232H [ 61.839445][ T319] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 62.218677][ T2158] hub 4-0:1.0: USB hub found [ 62.223634][ T2158] hub 4-0:1.0: 1 port detected [ 62.248563][ T319] usb 7-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 62.386861][ T2052] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 62.421652][ T2176] netlink: 24 bytes leftover after parsing attributes in process `syz.2.749'. [ 62.453864][ T2056] usb 7-1: USB disconnect, device number 7 [ 62.477826][ T2056] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 62.497196][ T2056] ftdi_sio 7-1:0.0: device disconnected [ 62.521920][ T2182] netlink: 'syz.2.752': attribute type 2 has an invalid length. [ 62.530225][ T2182] netlink: 36 bytes leftover after parsing attributes in process `syz.2.752'. [ 62.590045][ T2052] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 62.602238][ T2052] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 62.612441][ T2052] usb 5-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 62.618163][ T2171] loop7: detected capacity change from 0 to 512 [ 62.622692][ T2052] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.636559][ T2052] usb 5-1: config 0 descriptor?? [ 62.644524][ T2171] EXT4-fs error (device loop7): ext4_orphan_get:1400: inode #15: comm syz.7.744: casefold flag without casefold feature [ 62.660850][ T2171] EXT4-fs error (device loop7): ext4_orphan_get:1405: comm syz.7.744: couldn't read orphan inode 15 (err -117) [ 62.673602][ T2171] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 62.716429][ T1623] EXT4-fs (loop7): unmounting filesystem. [ 63.022643][ T2206] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.030226][ T2206] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.039741][ T319] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 63.046208][ T2052] hid-steam 0003:28DE:1142.0010: collection stack underflow [ 63.054784][ T2052] hid-steam 0003:28DE:1142.0010: item 0 2 0 12 parsing failed [ 63.062650][ T2052] hid-steam 0003:28DE:1142.0010: steam_probe:parse of hid interface failed [ 63.071265][ T2052] hid-steam: probe of 0003:28DE:1142.0010 failed with error -22 [ 63.088260][ T2206] device bridge_slave_0 left promiscuous mode [ 63.094666][ T2206] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.106174][ T2206] device bridge_slave_1 left promiscuous mode [ 63.112360][ T2206] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.213638][ T2208] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 63.223228][ T2208] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 63.232007][ T319] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 63.249644][ T319] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 63.252481][ T2052] usb 5-1: USB disconnect, device number 8 [ 63.270792][ T319] usb 8-1: New USB device found, idVendor=28bd, idProduct=0051, bcdDevice= 0.00 [ 63.280838][ T319] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.289381][ T45] Bluetooth: hci0: command 0x1003 tx timeout [ 63.295326][ T388] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 63.312618][ T319] usb 8-1: config 0 descriptor?? [ 63.387399][ T10] Bluetooth: hci0: Frame reassembly failed (-84) [ 63.726982][ T319] hid-generic 0003:28BD:0051.0011: hidraw0: USB HID v1.01 Device [HID 28bd:0051] on usb-dummy_hcd.7-1/input0 [ 63.857142][ T2052] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 63.928878][ T319] usb 8-1: USB disconnect, device number 4 [ 64.048260][ T2052] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 64.060657][ T2052] usb 6-1: New USB device found, idVendor=056a, idProduct=00f0, bcdDevice= 0.00 [ 64.071382][ T2052] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.085273][ T2052] usb 6-1: config 0 descriptor?? [ 64.214236][ T28] kauditd_printk_skb: 84 callbacks suppressed [ 64.214256][ T28] audit: type=1400 audit(1744677468.725:8940): avc: denied { setopt } for pid=2249 comm="syz.4.781" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 64.447467][ T2256] loop4: detected capacity change from 0 to 40427 [ 64.456566][ T2256] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 64.465275][ T2256] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 64.489592][ T2256] F2FS-fs (loop4): Found nat_bits in checkpoint [ 64.500640][ T2052] wacom 0003:056A:00F0.0012: hidraw0: USB HID v0.00 Device [HID 056a:00f0] on usb-dummy_hcd.5-1/input0 [ 64.548529][ T2256] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 64.556144][ T2256] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 64.705077][ T28] audit: type=1400 audit(1744677469.215:8941): avc: denied { create } for pid=2264 comm="syz.7.796" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 64.729099][ T2052] usb 6-1: USB disconnect, device number 4 [ 64.745760][ T28] audit: type=1400 audit(1744677469.215:8942): avc: denied { bind } for pid=2264 comm="syz.7.796" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 64.767332][ T28] audit: type=1400 audit(1744677469.215:8943): avc: denied { listen } for pid=2264 comm="syz.7.796" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 64.790826][ T28] audit: type=1400 audit(1744677469.215:8944): avc: denied { connect } for pid=2264 comm="syz.7.796" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 64.812739][ T28] audit: type=1400 audit(1744677469.215:8945): avc: denied { shutdown } for pid=2264 comm="syz.7.796" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 64.972602][ T2267] loop4: detected capacity change from 0 to 40427 [ 64.986226][ T2267] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 64.999114][ T2267] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 65.016648][ T2267] F2FS-fs (loop4): invalid crc value [ 65.018407][ T28] audit: type=1400 audit(1744677469.535:8946): avc: denied { write } for pid=2282 comm="syz.2.794" name="uinput" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 65.055422][ T2267] F2FS-fs (loop4): Found nat_bits in checkpoint [ 65.111098][ T2267] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 65.133627][ T2267] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 65.317011][ T2052] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 65.320547][ T2295] loop7: detected capacity change from 0 to 40427 [ 65.337624][ T2295] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12 [ 65.347663][ T2295] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 65.379587][ T2296] syz.4.786: attempt to access beyond end of device [ 65.379587][ T2296] loop4: rw=2049, sector=40424, nr_sectors = 8 limit=40427 [ 65.399540][ T2302] loop5: detected capacity change from 0 to 512 [ 65.416202][ T2295] F2FS-fs (loop7): Found nat_bits in checkpoint [ 65.446899][ T388] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 65.447035][ T775] Bluetooth: hci0: command 0x1003 tx timeout [ 65.494054][ T2302] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 65.506627][ T28] audit: type=1400 audit(1744677470.015:8947): avc: denied { block_suspend } for pid=2309 comm="syz.6.803" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 65.511807][ T2302] ext4 filesystem being mounted at /127/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 65.537040][ T635] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 65.556437][ T635] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 65.570738][ T2052] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 65.592768][ T2052] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 65.593439][ T2295] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 65.617150][ T2295] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 65.621999][ T2052] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 65.649761][ T2052] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 65.651673][ T682] EXT4-fs (loop5): unmounting filesystem. [ 65.658494][ T2052] usb 3-1: SerialNumber: syz [ 65.754023][ T28] audit: type=1400 audit(1744677470.265:8948): avc: denied { bind } for pid=2319 comm="syz.6.808" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 65.820618][ T28] audit: type=1400 audit(1744677470.305:8949): avc: denied { setopt } for pid=2319 comm="syz.6.808" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 65.851858][ T2323] loop5: detected capacity change from 0 to 1024 [ 65.866617][ T2323] EXT4-fs: Ignoring removed i_version option [ 65.874317][ T2323] EXT4-fs (loop5): Test dummy encryption mode enabled [ 65.888589][ T2323] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 65.916226][ T2052] usb 3-1: 0:2 : does not exist [ 65.965219][ T2052] usb 3-1: USB disconnect, device number 8 [ 65.981462][ T2323] fscrypt: AES-256-XTS using blk-crypto-fallback [ 66.117107][ T2344] loop7: detected capacity change from 0 to 512 [ 66.155268][ T2344] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 66.172008][ T2344] ext4 filesystem being mounted at /52/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.184738][ T682] EXT4-fs (loop5): unmounting filesystem. [ 66.202094][ T2344] netlink: 'syz.7.816': attribute type 4 has an invalid length. [ 66.233170][ T2344] netlink: 'syz.7.816': attribute type 4 has an invalid length. [ 66.275669][ T1623] EXT4-fs (loop7): unmounting filesystem. [ 66.382957][ T2360] loop7: detected capacity change from 0 to 2048 [ 66.395022][ T2360] EXT4-fs: Ignoring removed mblk_io_submit option [ 66.412194][ T2360] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 66.468002][ T1623] EXT4-fs (loop7): unmounting filesystem. [ 66.647933][ T2391] netlink: 28 bytes leftover after parsing attributes in process `syz.2.835'. [ 66.966957][ T2052] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 67.011967][ T2420] loop6: detected capacity change from 0 to 256 [ 67.020922][ T2424] netlink: 96 bytes leftover after parsing attributes in process `syz.4.850'. [ 67.042762][ T2420] syz.6.848: attempt to access beyond end of device [ 67.042762][ T2420] loop6: rw=0, sector=256, nr_sectors = 8 limit=256 [ 67.059361][ T2426] loop4: detected capacity change from 0 to 512 [ 67.069371][ T2426] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 67.078429][ T2426] ext4 filesystem being mounted at /203/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.101587][ T298] EXT4-fs (loop4): unmounting filesystem. [ 67.162508][ T2052] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 67.181464][ T2052] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 67.195641][ T2052] usb 8-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 67.204912][ T2052] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 67.208634][ T2440] loop6: detected capacity change from 0 to 8192 [ 67.213251][ T2052] usb 8-1: SerialNumber: syz [ 67.231013][ T2440] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 67.277187][ T19] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 67.444413][ T2052] usb 8-1: 0:2 : does not exist [ 67.451000][ T2052] usb 8-1: USB disconnect, device number 5 [ 67.458283][ T19] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 67.470362][ T19] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 67.482156][ T19] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 67.492590][ T19] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 67.507125][ T19] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 67.516574][ T19] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 67.524931][ T19] usb 3-1: Manufacturer: syz [ 67.530515][ T19] usb 3-1: config 0 descriptor?? [ 67.546920][ T319] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 67.657886][ T320] udevd[320]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 67.677030][ T306] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 67.736885][ T319] usb 5-1: Using ep0 maxpacket: 32 [ 67.743466][ T319] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 67.754643][ T319] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 67.766414][ T319] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 67.775558][ T319] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.776972][ T2056] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 67.784663][ T319] usb 5-1: config 0 descriptor?? [ 67.796040][ T2442] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 67.804291][ T319] hub 5-1:0.0: USB hub found [ 67.858221][ T306] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 67.870966][ T306] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 67.880278][ T306] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.888107][ T306] usb 6-1: Product: syz [ 67.892240][ T306] usb 6-1: Manufacturer: syz [ 67.897044][ T306] usb 6-1: SerialNumber: syz [ 67.943227][ T19] appleir 0003:05AC:8243.0013: unknown main item tag 0x0 [ 67.951308][ T19] appleir 0003:05AC:8243.0013: No inputs registered, leaving [ 67.961733][ T19] appleir 0003:05AC:8243.0013: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 67.967648][ T2056] usb 7-1: Using ep0 maxpacket: 32 [ 67.996552][ T2056] usb 7-1: config 0 has an invalid interface number: 74 but max is 1 [ 68.006910][ T319] hub 5-1:0.0: 1 port detected [ 68.007173][ T2056] usb 7-1: config 0 has no interface number 1 [ 68.019859][ T2056] usb 7-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=8e.fa [ 68.029473][ T2056] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.040175][ T2056] usb 7-1: Product: syz [ 68.044546][ T2056] usb 7-1: Manufacturer: syz [ 68.049172][ T2056] usb 7-1: SerialNumber: syz [ 68.054924][ T2056] usb 7-1: config 0 descriptor?? [ 68.064304][ T2056] snd-usb-audio: probe of 7-1:0.74 failed with error -22 [ 68.080822][ T1216] udevd[1216]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.74/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 68.282568][ T19] usb 7-1: USB disconnect, device number 8 [ 68.908539][ T306] cdc_ncm 6-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 68.914936][ T306] cdc_ncm 6-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 68.933327][ T306] cdc_ncm 6-1:1.0: setting rx_max = 2048 [ 69.035616][ T19] usb 5-1: USB disconnect, device number 9 [ 69.309622][ T306] cdc_ncm 6-1:1.0: setting tx_max = 88 [ 69.323693][ T28] kauditd_printk_skb: 20 callbacks suppressed [ 69.323709][ T28] audit: type=1400 audit(1744677473.835:8970): avc: denied { setopt } for pid=2498 comm="syz.7.879" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 69.326145][ T306] cdc_ncm 6-1:1.0 eth1: register 'cdc_ncm' at usb-dummy_hcd.5-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 69.363010][ T306] usb 6-1: USB disconnect, device number 5 [ 69.369648][ T306] cdc_ncm 6-1:1.0 eth1: unregister 'cdc_ncm' usb-dummy_hcd.5-1, CDC NCM (NO ZLP) [ 69.588798][ T19] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 69.599352][ T28] audit: type=1400 audit(1744677474.115:8971): avc: denied { read } for pid=140 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 69.655310][ T2507] syz.4.883[2507] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 69.655366][ T2507] syz.4.883[2507] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 69.787028][ T19] usb 7-1: Using ep0 maxpacket: 32 [ 69.805970][ T19] usb 7-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 69.817739][ T19] usb 7-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 69.829216][ T19] usb 7-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 69.838866][ T19] usb 7-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 69.847987][ T19] usb 7-1: Product: syz [ 69.852216][ T19] usb 7-1: Manufacturer: syz [ 69.860167][ T19] hub 7-1:4.0: USB hub found [ 70.008966][ T28] audit: type=1400 audit(1744677474.525:8972): avc: denied { mount } for pid=2531 comm="syz.4.893" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 70.077482][ T28] audit: type=1400 audit(1744677474.595:8973): avc: denied { ioctl } for pid=2535 comm="syz.5.895" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=26583 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 70.108887][ T2489] loop6: detected capacity change from 0 to 512 [ 70.119118][ T2489] EXT4-fs: Ignoring removed nomblk_io_submit option [ 70.133788][ T2489] EXT4-fs error (device loop6): ext4_xattr_inode_iget:404: inode #2: comm syz.6.875: missing EA_INODE flag [ 70.136900][ T28] audit: type=1400 audit(1744677474.645:8974): avc: denied { mount } for pid=2537 comm="syz.4.896" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 70.155751][ T2489] EXT4-fs error (device loop6): ext4_xattr_inode_iget:409: comm syz.6.875: error while reading EA inode 2 err=-117 [ 70.181939][ T2489] EXT4-fs error (device loop6): ext4_xattr_inode_iget:404: inode #2: comm syz.6.875: missing EA_INODE flag [ 70.196924][ T2489] EXT4-fs error (device loop6): ext4_xattr_inode_iget:409: comm syz.6.875: error while reading EA inode 2 err=-117 [ 70.217936][ T2489] EXT4-fs error (device loop6): ext4_xattr_inode_iget:404: comm syz.6.875: inode #65536: comm syz.6.875: iget: illegal inode # [ 70.246417][ T2489] EXT4-fs error (device loop6): ext4_xattr_inode_iget:409: comm syz.6.875: error while reading EA inode 65536 err=-117 [ 70.286958][ T2489] EXT4-fs (loop6): 1 orphan inode deleted [ 70.293163][ T2489] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 70.313593][ T19] hub 7-1:4.0: 15 ports detected [ 70.319645][ T19] hub 7-1:4.0: insufficient power available to use all downstream ports [ 70.416606][ T2555] loop2: detected capacity change from 0 to 2048 [ 70.438596][ T2555] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 70.465356][ T2555] EXT4-fs error (device loop2): ext4_ext_precache:627: inode #2: comm syz.2.902: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 70.493721][ T297] EXT4-fs (loop2): unmounting filesystem. [ 70.501927][ T6] usb 3-1: USB disconnect, device number 9 [ 70.582527][ T28] audit: type=1400 audit(1744677475.095:8975): avc: denied { ioctl } for pid=2560 comm="syz.4.904" path="socket:[27691]" dev="sockfs" ino=27691 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 70.614582][ T2561] bridge0: port 2(vlan2) entered blocking state [ 70.626202][ T2561] bridge0: port 2(vlan2) entered disabled state [ 70.674489][ T19] hub 7-1:4.0: hub_hub_status failed (err = -71) [ 70.681243][ T19] hub 7-1:4.0: config failed, can't get hub status (err -71) [ 70.717132][ T19] usb 7-1: USB disconnect, device number 9 [ 70.781628][ T2572] netlink: 8 bytes leftover after parsing attributes in process `syz.4.908'. [ 70.838690][ T2559] loop2: detected capacity change from 0 to 40427 [ 70.872734][ T2559] F2FS-fs (loop2): invalid crc value [ 70.888541][ T2575] device syzkaller0 entered promiscuous mode [ 70.898669][ T2559] F2FS-fs (loop2): Found nat_bits in checkpoint [ 70.996145][ T2559] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 71.103294][ T28] audit: type=1400 audit(1744677475.615:8976): avc: denied { mounton } for pid=2593 comm="syz.4.915" path="/228/file0" dev="tmpfs" ino=1234 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 71.126692][ T2598] loop5: detected capacity change from 0 to 256 [ 71.128589][ T28] audit: type=1400 audit(1744677475.635:8977): avc: denied { getopt } for pid=2597 comm="syz.5.917" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 71.160516][ T2598] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 71.199142][ T28] audit: type=1400 audit(1744677475.715:8978): avc: denied { setattr } for pid=2597 comm="syz.5.917" name="file0" dev="loop5" ino=1048626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 71.232654][ T1483] EXT4-fs (loop6): unmounting filesystem. [ 71.273781][ T2605] netlink: 16 bytes leftover after parsing attributes in process `syz.2.918'. [ 71.366919][ T2306] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 71.371886][ T45] Bluetooth: hci0: command 0x1003 tx timeout [ 71.572699][ T28] audit: type=1400 audit(1744677476.085:8979): avc: denied { mount } for pid=2630 comm="syz.2.931" name="/" dev="configfs" ino=14719 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 71.636862][ T2052] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 71.753397][ T2641] loop2: detected capacity change from 0 to 2048 [ 71.784540][ T2641] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 71.828070][ T2052] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 71.848521][ T297] EXT4-fs (loop2): unmounting filesystem. [ 71.855633][ T2052] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 71.886135][ T2052] usb 7-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 71.899357][ T2052] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.919653][ T2052] usb 7-1: config 0 descriptor?? [ 72.129386][ T2645] loop5: detected capacity change from 0 to 40427 [ 72.146402][ T2645] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 72.166638][ T2645] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 72.185981][ T2645] F2FS-fs (loop5): invalid crc value [ 72.203139][ T2645] F2FS-fs (loop5): Found nat_bits in checkpoint [ 72.297874][ T2645] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 72.305907][ T2645] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 72.358917][ T2667] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 72.378859][ T2667] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 72.403274][ T2667] bridge0: port 3(syz_tun) entered blocking state [ 72.423026][ T2667] bridge0: port 3(syz_tun) entered disabled state [ 72.441275][ T2667] device syz_tun entered promiscuous mode [ 72.457410][ T2667] bridge0: port 3(syz_tun) entered blocking state [ 72.464016][ T2667] bridge0: port 3(syz_tun) entered forwarding state [ 72.544309][ T2671] loop4: detected capacity change from 0 to 128 [ 72.598332][ T1216] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 72.643847][ T2678] xt_hashlimit: size too large, truncated to 1048576 [ 72.704542][ T2682] loop7: detected capacity change from 0 to 16 [ 72.737166][ T2682] erofs: (device loop7): mounted with root inode @ nid 36. [ 72.899099][ T708] F2FS-fs (loop5): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 72.909300][ T708] F2FS-fs (loop5): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 72.945089][ T2052] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:256C:006D.0014/input/input17 [ 72.978469][ T2052] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:256C:006D.0014/input/input18 [ 73.015778][ T2052] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:256C:006D.0014/input/input19 [ 73.052799][ T2052] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:256C:006D.0014/input/input20 [ 73.089840][ T2052] uclogic 0003:256C:006D.0014: input,hiddev96,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.6-1/input0 [ 73.165936][ T2052] usb 7-1: USB disconnect, device number 10 [ 73.362839][ T2705] loop5: detected capacity change from 0 to 512 [ 73.388555][ T2705] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 73.398299][ T2705] EXT4-fs (loop5): invalid journal inode [ 73.403899][ T2705] EXT4-fs (loop5): can't get journal size [ 73.433429][ T2705] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2186: inode #15: comm syz.5.958: corrupted in-inode xattr [ 73.457497][ T2705] EXT4-fs error (device loop5): ext4_orphan_get:1405: comm syz.5.958: couldn't read orphan inode 15 (err -117) [ 73.484548][ T2705] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 73.517931][ T682] EXT4-fs error (device loop5): ext4_map_blocks:634: inode #2: block 13: comm syz-executor: lblock 0 mapped to illegal pblock 13 (length 1) [ 73.535216][ T682] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5887: Corrupt filesystem [ 73.547480][ T682] EXT4-fs error (device loop5): ext4_dirty_inode:6091: inode #2: comm syz-executor: mark_inode_dirty error [ 73.565012][ T682] EXT4-fs (loop5): unmounting filesystem. [ 73.776851][ T6] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 73.813601][ T2726] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.820622][ T2726] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.828317][ T2726] device bridge_slave_0 entered promiscuous mode [ 73.835399][ T2726] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.842754][ T2726] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.850992][ T2726] device bridge_slave_1 entered promiscuous mode [ 73.890041][ T2725] loop6: detected capacity change from 0 to 40427 [ 73.897711][ T2725] F2FS-fs (loop6): fault_injection options not supported [ 73.905789][ T2725] F2FS-fs (loop6): invalid crc value [ 73.913121][ T2725] F2FS-fs (loop6): Found nat_bits in checkpoint [ 73.940187][ T2726] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.947483][ T2726] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.955302][ T2726] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.962308][ T2726] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.968275][ T2725] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 73.994081][ T1683] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 74.003085][ T1683] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.009196][ T6] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 74.020923][ T1683] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.028529][ T6] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 74.029116][ T1483] syz-executor: attempt to access beyond end of device [ 74.029116][ T1483] loop6: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 74.038188][ T6] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 74.038234][ T6] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 74.074292][ T6] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.086106][ T6] usb 5-1: config 0 descriptor?? [ 74.091877][ T1683] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 74.102495][ T1683] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.109399][ T1683] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.123314][ T1683] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 74.138610][ T1683] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.145507][ T1683] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.164940][ T1683] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 74.180864][ T1683] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 74.202615][ T1683] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.216394][ T708] Bluetooth: hci0: Frame reassembly failed (-84) [ 74.230565][ T1683] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.238939][ T1683] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.251718][ T1683] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.260491][ T2726] device veth0_vlan entered promiscuous mode [ 74.274305][ T1683] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.284207][ T2726] device veth1_macvtap entered promiscuous mode [ 74.300358][ T1683] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.314540][ T1683] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.333733][ T28] kauditd_printk_skb: 23 callbacks suppressed [ 74.333749][ T28] audit: type=1400 audit(1744677478.845:9003): avc: denied { mounton } for pid=2726 comm="syz-executor" path="/root/syzkaller.goH9K4/syz-tmp" dev="sda1" ino=1956 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 74.367762][ T28] audit: type=1400 audit(1744677478.845:9004): avc: denied { mounton } for pid=2726 comm="syz-executor" path="/root/syzkaller.goH9K4/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 74.402466][ T28] audit: type=1400 audit(1744677478.845:9005): avc: denied { mounton } for pid=2726 comm="syz-executor" path="/root/syzkaller.goH9K4/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=28800 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 74.431295][ T28] audit: type=1400 audit(1744677478.875:9006): avc: denied { mounton } for pid=2726 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=528 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 74.462433][ T28] audit: type=1400 audit(1744677478.875:9007): avc: denied { mounton } for pid=2726 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 74.509380][ T2751] netlink: 20 bytes leftover after parsing attributes in process `syz.6.976'. [ 74.513897][ T6] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x3 [ 74.529238][ T6] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 74.536916][ T2751] netlink: 20 bytes leftover after parsing attributes in process `syz.6.976'. [ 74.545809][ T2721] 9pnet_fd: p9_fd_create_tcp (2721): problem connecting socket to 127.0.0.1 [ 74.555079][ T6] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 74.562793][ T6] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 74.576670][ T6] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 74.595144][ T6] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 74.603929][ T2755] loop6: detected capacity change from 0 to 512 [ 74.605269][ T6] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 74.634440][ T6] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 74.643074][ T6] plantronics 0003:047F:FFFF.0015: No inputs registered, leaving [ 74.647322][ T2755] EXT4-fs error (device loop6): ext4_orphan_get:1400: inode #15: comm syz.6.979: casefold flag without casefold feature [ 74.664077][ T6] plantronics 0003:047F:FFFF.0015: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 74.689427][ T2755] EXT4-fs error (device loop6): ext4_orphan_get:1405: comm syz.6.979: couldn't read orphan inode 15 (err -117) [ 74.707940][ T2755] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 74.860287][ T2771] loop2: detected capacity change from 0 to 128 [ 74.877309][ T2771] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 74.896650][ T2771] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 74.907335][ T2766] device veth3 entered promiscuous mode [ 74.913620][ T1483] EXT4-fs (loop6): unmounting filesystem. [ 74.987771][ T635] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 75.059323][ T2776] loop8: detected capacity change from 0 to 512 [ 75.088298][ T2776] EXT4-fs: Ignoring removed oldalloc option [ 75.126621][ T2776] EXT4-fs error (device loop8): ext4_xattr_inode_iget:400: comm syz.8.989: Parent and EA inode have the same ino 15 [ 75.159982][ T2776] EXT4-fs (loop8): Remounting filesystem read-only [ 75.166596][ T2776] EXT4-fs error (device loop8): ext4_xattr_inode_iget:400: comm syz.8.989: Parent and EA inode have the same ino 15 [ 75.230467][ T2776] EXT4-fs (loop8): Remounting filesystem read-only [ 75.251400][ T2776] EXT4-fs (loop8): 1 orphan inode deleted [ 75.265895][ T2052] usb 5-1: USB disconnect, device number 10 [ 75.272621][ T2776] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 75.311520][ T2726] EXT4-fs (loop8): unmounting filesystem. [ 75.393366][ T2782] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.409895][ T2782] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.434955][ T2782] device bridge_slave_0 entered promiscuous mode [ 75.466350][ T2782] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.486008][ T2782] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.493635][ T2782] device bridge_slave_1 entered promiscuous mode [ 75.589619][ T2803] loop8: detected capacity change from 0 to 512 [ 75.599575][ T2803] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 75.656166][ T2803] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 75.665128][ T2803] ext4 filesystem being mounted at /10/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 75.717584][ T2726] EXT4-fs (loop8): unmounting filesystem. [ 75.811851][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 75.819967][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 75.831449][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 75.847314][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 75.866503][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.873563][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.883402][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 75.891872][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 75.900185][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.908076][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.931625][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 75.947521][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 75.955957][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 75.965187][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 75.974522][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 76.004920][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 76.018566][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 76.031005][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 76.041239][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 76.063883][ T2782] device veth0_vlan entered promiscuous mode [ 76.077726][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 76.093523][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 76.114482][ T2782] device veth1_macvtap entered promiscuous mode [ 76.125222][ T635] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 76.140046][ T635] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 76.149665][ T635] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 76.178431][ T635] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 76.197898][ T635] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 76.211582][ T635] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 76.222182][ T635] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.246903][ T45] Bluetooth: hci0: command 0x1003 tx timeout [ 76.248247][ T2306] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 76.314224][ T2850] loop7: detected capacity change from 0 to 4096 [ 76.334183][ T2850] EXT4-fs (loop7): Test dummy encryption mode enabled [ 76.370725][ T2850] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 76.398411][ T2850] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 76.455826][ T28] audit: type=1400 audit(1744677480.965:9008): avc: denied { mounton } for pid=2862 comm="syz.2.1023" path="/198/file0" dev="incremental-fs" ino=1065 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 76.481772][ T306] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 76.539416][ T1623] EXT4-fs (loop7): unmounting filesystem. [ 76.551825][ T28] audit: type=1400 audit(1744677481.005:9009): avc: denied { write } for pid=2862 comm="syz.2.1023" path="/198/file0/file0" dev="incremental-fs" ino=1066 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 76.604654][ T2867] loop2: detected capacity change from 0 to 1024 [ 76.632863][ T2867] EXT4-fs: Ignoring removed nobh option [ 76.653416][ T2867] EXT4-fs: Ignoring removed bh option [ 76.672059][ T2867] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 76.687061][ T306] usb 9-1: Using ep0 maxpacket: 16 [ 76.704912][ T2867] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 76.726706][ T306] usb 9-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 76.730741][ T2883] loop9: detected capacity change from 0 to 2048 [ 76.744351][ T2883] EXT4-fs: Ignoring removed bh option [ 76.765274][ T28] audit: type=1400 audit(1744677481.275:9010): avc: denied { watch watch_reads } for pid=2884 comm="syz.4.1032" path="/249/blkio.bfq.time_recursive" dev="tmpfs" ino=1348 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 76.793248][ T306] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 76.795795][ T2883] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 76.803924][ T306] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 76.829067][ T2883] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 76.835464][ T306] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 76.838813][ T28] audit: type=1400 audit(1744677481.365:9011): avc: denied { relabelto } for pid=2881 comm="syz.9.1031" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 76.862887][ T2883] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 76.890807][ T306] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.891400][ T297] EXT4-fs (loop2): unmounting filesystem. [ 76.899003][ T306] usb 9-1: Product: syz [ 76.910249][ T306] usb 9-1: Manufacturer: syz [ 76.914857][ T306] usb 9-1: SerialNumber: syz [ 76.943072][ T2782] EXT4-fs (loop9): unmounting filesystem. [ 76.951892][ T28] audit: type=1400 audit(1744677481.475:9012): avc: denied { mounton } for pid=2890 comm="syz.2.1033" path="/200/file0" dev="ramfs" ino=29366 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 77.101120][ T2904] loop9: detected capacity change from 0 to 2048 [ 77.148555][ T2904] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 77.211748][ T2782] EXT4-fs (loop9): unmounting filesystem. [ 77.427213][ T306] usb 9-1: 0:2 : does not exist [ 77.498156][ T2910] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.525273][ T2910] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.550233][ T2910] device bridge_slave_0 entered promiscuous mode [ 77.582876][ T2910] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.591059][ T2910] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.600842][ T2910] device bridge_slave_1 entered promiscuous mode [ 77.749470][ T2910] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.757004][ T2931] SELinux: failed to load policy [ 77.757019][ T2910] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.757306][ T2910] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.777387][ T2910] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.832600][ T2937] loop9: detected capacity change from 0 to 512 [ 77.851550][ T2937] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 77.867581][ T2937] EXT4-fs (loop9): 1 truncate cleaned up [ 77.873876][ T2937] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 77.911517][ T328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 77.924698][ T328] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.933259][ T328] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.943854][ T2782] EXT4-fs (loop9): unmounting filesystem. [ 77.963285][ T328] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 77.973760][ T328] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.981139][ T328] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.992298][ T2942] loop9: detected capacity change from 0 to 128 [ 77.999844][ T2942] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 78.015784][ T328] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 78.024967][ T328] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.032263][ T328] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.040243][ T2942] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 78.061049][ T328] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 78.069898][ T328] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 78.095547][ T328] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 78.110733][ T328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 78.123241][ T328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 78.149640][ T2910] device veth0_vlan entered promiscuous mode [ 78.165693][ T2910] device veth1_macvtap entered promiscuous mode [ 78.187004][ T328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 78.199559][ T2949] loop9: detected capacity change from 0 to 128 [ 78.206673][ T328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 78.218857][ T328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 78.238878][ T2949] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 78.245965][ T328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 78.257062][ T328] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 78.260053][ T2949] ext4 filesystem being mounted at /16/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 78.265116][ T328] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 78.285158][ T328] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 78.317317][ T708] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 78.328046][ T708] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 78.337564][ T708] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 78.349977][ T708] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 78.397534][ T2960] loop7: detected capacity change from 0 to 1024 [ 78.418671][ T2960] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 78.500993][ T306] usb 9-1: USB disconnect, device number 2 [ 78.508879][ T1623] EXT4-fs (loop7): unmounting filesystem. [ 78.549158][ T2977] loop7: detected capacity change from 0 to 16 [ 78.556318][ T2977] erofs: (device loop7): mounted with root inode @ nid 36. [ 78.590306][ T2782] EXT4-fs (loop9): unmounting filesystem. [ 78.599998][ T2977] erofs: (device loop7): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 78.610263][ T2977] erofs: (device loop7): z_erofs_lz4_decompress_mem: failed to decompress -29 in[58, 4038] out[1851] [ 78.621758][ T2977] erofs: (device loop7): z_erofs_read_folio: failed to read, err [-117] [ 78.631987][ T2977] erofs: (device loop7): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 78.642386][ T2977] erofs: (device loop7): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 78.652551][ T2977] erofs: (device loop7): z_erofs_readahead: readahead error at page 42 @ nid 36 [ 78.661552][ T2977] erofs: (device loop7): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 78.670968][ T2977] erofs: (device loop7): z_erofs_readahead: readahead error at page 41 @ nid 36 [ 78.680459][ T2977] erofs: (device loop7): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 78.690916][ T2977] erofs: (device loop7): z_erofs_readahead: readahead error at page 40 @ nid 36 [ 78.700678][ T2977] erofs: (device loop7): z_erofs_readahead: readahead error at page 39 @ nid 36 [ 78.711293][ T2977] erofs: (device loop7): z_erofs_readahead: readahead error at page 38 @ nid 36 [ 78.720671][ T2977] erofs: (device loop7): z_erofs_readahead: readahead error at page 36 @ nid 36 [ 78.730375][ T2977] erofs: (device loop7): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 78.739550][ T2977] erofs: (device loop7): z_erofs_readahead: readahead error at page 31 @ nid 36 [ 78.748671][ T2977] erofs: (device loop7): z_erofs_readahead: readahead error at page 25 @ nid 36 [ 78.757837][ T2977] erofs: (device loop7): z_erofs_readahead: readahead error at page 24 @ nid 36 [ 78.767367][ T2977] erofs: (device loop7): z_erofs_readahead: readahead error at page 19 @ nid 36 [ 78.776706][ T2977] syz.7.1070: attempt to access beyond end of device [ 78.776706][ T2977] loop7: rw=524288, sector=784, nr_sectors = 64 limit=16 [ 78.790822][ T2977] syz.7.1070: attempt to access beyond end of device [ 78.790822][ T2977] loop7: rw=524288, sector=13478624080, nr_sectors = 24 limit=16 [ 78.805912][ T2977] syz.7.1070: attempt to access beyond end of device [ 78.805912][ T2977] loop7: rw=524288, sector=13478624032, nr_sectors = 48 limit=16 [ 78.820492][ T2977] erofs: (device loop7): z_erofs_lz4_decompress_mem: failed to decompress -29 in[58, 4038] out[2639] [ 78.831558][ T2977] erofs: (device loop7): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 78.841453][ T2977] erofs: (device loop7): z_erofs_readahead: readahead error at page 47 @ nid 36 [ 78.850551][ T2977] erofs: (device loop7): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 78.860153][ T2977] erofs: (device loop7): z_erofs_readahead: readahead error at page 46 @ nid 36 [ 78.869408][ T2977] erofs: (device loop7): z_erofs_readahead: readahead error at page 45 @ nid 36 [ 78.878630][ T2977] syz.7.1070: attempt to access beyond end of device [ 78.878630][ T2977] loop7: rw=524288, sector=16, nr_sectors = 16 limit=16 [ 78.893153][ T2977] erofs: (device loop7): z_erofs_lz4_decompress_mem: failed to decompress -29 in[58, 4038] out[3537] [ 78.987118][ T2986] loop7: detected capacity change from 0 to 2048 [ 78.993650][ T2986] EXT4-fs: Ignoring removed mblk_io_submit option [ 79.037738][ T2986] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 79.116179][ T3001] tmpfs: Unknown parameter ' ' [ 79.148877][ T1623] EXT4-fs (loop7): unmounting filesystem. [ 79.228462][ T3009] device pim6reg1 entered promiscuous mode [ 79.365104][ T3022] loop3: detected capacity change from 0 to 128 [ 79.486881][ T2053] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 79.575613][ T3027] device veth3 entered promiscuous mode [ 79.617044][ T2054] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 79.631570][ T28] kauditd_printk_skb: 21 callbacks suppressed [ 79.631586][ T28] audit: type=1400 audit(1744677484.145:9034): avc: denied { getopt } for pid=3042 comm="syz.4.1099" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 79.688671][ T2053] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 79.709996][ T2053] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 79.720465][ T2053] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 79.721419][ T3049] loop9: detected capacity change from 0 to 8192 [ 79.734289][ T2053] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 79.754318][ T3049] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 79.759768][ T2053] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.787809][ T2053] usb 8-1: config 0 descriptor?? [ 79.839072][ T28] audit: type=1400 audit(1744677484.355:9035): avc: denied { create } for pid=3058 comm="syz.3.1106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 79.860107][ T2054] usb 9-1: Using ep0 maxpacket: 32 [ 79.869141][ T2054] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 79.901259][ T2054] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 79.902244][ T28] audit: type=1400 audit(1744677484.355:9036): avc: denied { write } for pid=3058 comm="syz.3.1106" path="socket:[29915]" dev="sockfs" ino=29915 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 79.931408][ T2054] usb 9-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 79.950095][ T28] audit: type=1400 audit(1744677484.355:9037): avc: denied { nlmsg_read } for pid=3058 comm="syz.3.1106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 79.971138][ T2054] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.972080][ T2054] usb 9-1: config 0 descriptor?? [ 80.007363][ T2054] hub 9-1:0.0: USB hub found [ 80.033937][ T3075] loop9: detected capacity change from 0 to 1024 [ 80.052878][ T3075] EXT4-fs error (device loop9): ext4_ext_check_inode:520: inode #11: comm syz.9.1114: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 80.072732][ T3075] EXT4-fs error (device loop9): ext4_orphan_get:1405: comm syz.9.1114: couldn't read orphan inode 11 (err -117) [ 80.085158][ T3075] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 80.108585][ T28] audit: type=1400 audit(1744677484.625:9038): avc: denied { create } for pid=3074 comm="syz.9.1114" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 80.151433][ T3075] EXT4-fs error (device loop9): ext4_read_block_bitmap_nowait:477: comm syz.9.1114: Invalid block bitmap block 0 in block_group 0 [ 80.156932][ T3084] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 80.165475][ T3075] Quota error (device loop9): write_blk: dquota write failed [ 80.181112][ T3075] Quota error (device loop9): qtree_write_dquot: Error -117 occurred while creating quota [ 80.191256][ T3075] EXT4-fs error (device loop9): ext4_acquire_dquot:6782: comm syz.9.1114: Failed to acquire dquot type 0 [ 80.199645][ T2053] plantronics 0003:047F:FFFF.0016: No inputs registered, leaving [ 80.210189][ T2054] hub 9-1:0.0: 1 port detected [ 80.216381][ T2053] plantronics 0003:047F:FFFF.0016: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 80.248861][ T2782] EXT4-fs (loop9): unmounting filesystem. [ 80.317831][ T28] audit: type=1400 audit(1744677484.835:9039): avc: denied { connect } for pid=3095 comm="syz.4.1123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 80.338409][ T28] audit: type=1400 audit(1744677484.835:9040): avc: denied { write } for pid=3095 comm="syz.4.1123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 80.376634][ T28] audit: type=1326 audit(1744677484.885:9041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3098 comm="syz.9.1125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30a778d169 code=0x7ffc0000 [ 80.820995][ T2054] hub 9-1:0.0: activate --> -90 [ 80.829528][ T3123] loop3: detected capacity change from 0 to 2048 [ 80.836532][ T3123] EXT4-fs: Ignoring removed bh option [ 80.851426][ T3123] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 80.875807][ T3123] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 80.906163][ T2910] EXT4-fs (loop3): unmounting filesystem. [ 81.021714][ T2054] hub 9-1:0.0: hub_ext_port_status failed (err = -71) [ 81.025363][ T306] usb 9-1: USB disconnect, device number 3 [ 81.132507][ T3148] loop9: detected capacity change from 0 to 2048 [ 81.175060][ T3154] netlink: 'syz.4.1147': attribute type 6 has an invalid length. [ 81.190857][ T320] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 81.292156][ T3170] netlink: 40 bytes leftover after parsing attributes in process `syz.9.1153'. [ 81.302318][ T3170] netlink: 64 bytes leftover after parsing attributes in process `syz.9.1153'. [ 81.331443][ T3171] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 81.418027][ T3184] incfs: Options parsing error. -22 [ 81.423701][ T3184] incfs: mount failed -22 [ 81.753848][ T3210] device veth3 entered promiscuous mode [ 82.327226][ T2052] usb 8-1: USB disconnect, device number 6 [ 82.446175][ T3274] netlink: 204 bytes leftover after parsing attributes in process `syz.9.1191'. [ 82.770087][ T2053] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 82.874426][ T3310] loop8: detected capacity change from 0 to 512 [ 82.881557][ T3310] EXT4-fs: Ignoring removed mblk_io_submit option [ 82.892608][ T3310] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 82.937006][ T3316] input: syz0 as /devices/virtual/input/input21 [ 82.975441][ T2053] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 83.011570][ T2053] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 83.026086][ T2726] EXT4-fs (loop8): unmounting filesystem. [ 83.030370][ T2053] usb 10-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 83.044237][ T2053] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.045916][ T3325] netlink: 'syz.7.1215': attribute type 13 has an invalid length. [ 83.057309][ T2053] usb 10-1: config 0 descriptor?? [ 83.113597][ T3325] bridge0: port 3(syz_tun) entered disabled state [ 83.144344][ T3325] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.151907][ T3325] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.158515][ T3332] 9pnet: p9_errstr2errno: server reported unknown error @hQIte}u [ 83.253690][ T3338] bridge: RTM_NEWNEIGH with invalid ether address [ 83.285251][ T3340] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1220'. [ 83.346892][ T19] usb 9-1: new full-speed USB device number 4 using dummy_hcd [ 83.478142][ T2053] cp2112 0003:10C4:EA90.0017: unknown main item tag 0x0 [ 83.498011][ T2053] cp2112 0003:10C4:EA90.0017: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.9-1/input0 [ 83.537030][ T3360] netlink: 'syz.3.1229': attribute type 4 has an invalid length. [ 83.549562][ T3360] netlink: 'syz.3.1229': attribute type 4 has an invalid length. [ 83.558541][ T19] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 83.577006][ T19] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 83.607234][ T19] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1023, setting to 64 [ 83.642603][ T19] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 83.655333][ T19] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.664196][ T19] usb 9-1: Product: syz [ 83.669173][ T19] usb 9-1: Manufacturer: syz [ 83.678247][ T2053] cp2112 0003:10C4:EA90.0017: error requesting version [ 83.683078][ T19] usb 9-1: SerialNumber: syz [ 83.697796][ T2053] cp2112: probe of 0003:10C4:EA90.0017 failed with error -71 [ 83.718476][ T3328] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 83.720650][ T2053] usb 10-1: USB disconnect, device number 2 [ 83.844837][ T3382] loop3: detected capacity change from 0 to 128 [ 83.854324][ T3382] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 83.863704][ T3382] ext4 filesystem being mounted at /51/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 83.888044][ T3382] overlayfs: upper fs needs to support d_type. [ 83.905592][ T2910] EXT4-fs (loop3): unmounting filesystem. [ 83.933792][ T3328] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 84.241366][ T3398] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3398 comm=syz.9.1244 [ 84.356903][ T306] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 84.544795][ T3328] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 84.558090][ T306] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 84.569230][ T306] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 84.584161][ T306] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 84.597552][ T306] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 84.607101][ T306] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.615913][ T306] usb 4-1: config 0 descriptor?? [ 84.667606][ T3417] loop7: detected capacity change from 0 to 512 [ 84.681351][ T3417] EXT4-fs error (device loop7): ext4_orphan_get:1400: inode #15: comm syz.7.1253: casefold flag without casefold feature [ 84.695004][ T3417] EXT4-fs error (device loop7): ext4_orphan_get:1405: comm syz.7.1253: couldn't read orphan inode 15 (err -117) [ 84.698912][ T708] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 84.709157][ T3417] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 84.753086][ T19] cdc_ncm 9-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 84.761894][ T19] cdc_ncm 9-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 84.771248][ T19] cdc_ncm 9-1:1.0: setting rx_max = 2048 [ 84.786920][ T2053] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 84.962732][ T19] cdc_ncm 9-1:1.0: setting tx_max = 56 [ 84.978057][ T2053] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 84.981464][ T19] cdc_ncm 9-1:1.0 eth1: register 'cdc_ncm' at usb-dummy_hcd.8-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 84.996917][ T2053] usb 10-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 85.017100][ T1623] EXT4-fs (loop7): unmounting filesystem. [ 85.037006][ T2053] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.040120][ T19] usb 9-1: USB disconnect, device number 4 [ 85.048004][ T2053] usb 10-1: config 0 descriptor?? [ 85.055563][ T306] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x3 [ 85.096322][ T28] kauditd_printk_skb: 12 callbacks suppressed [ 85.096339][ T28] audit: type=1400 audit(1744677489.605:9054): avc: denied { search } for pid=140 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 85.100352][ T306] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 85.138043][ T28] audit: type=1400 audit(1744677489.625:9055): avc: denied { read } for pid=140 comm="dhcpcd" name="n16" dev="tmpfs" ino=6868 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 85.161095][ T19] cdc_ncm 9-1:1.0 eth1: unregister 'cdc_ncm' usb-dummy_hcd.8-1, CDC NCM (NO ZLP) [ 85.170228][ T28] audit: type=1400 audit(1744677489.625:9056): avc: denied { open } for pid=140 comm="dhcpcd" path="/run/udev/data/n16" dev="tmpfs" ino=6868 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 85.210549][ T306] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 85.224116][ T28] audit: type=1400 audit(1744677489.625:9057): avc: denied { getattr } for pid=140 comm="dhcpcd" path="/run/udev/data/n16" dev="tmpfs" ino=6868 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 85.248350][ T306] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 85.276728][ T306] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 85.294691][ T3446] netlink: 'syz.7.1262': attribute type 27 has an invalid length. [ 85.304478][ T28] audit: type=1400 audit(1744677489.735:9058): avc: denied { read } for pid=3438 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=423 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 85.312495][ T306] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 85.331335][ T3446] device bridge0 left promiscuous mode [ 85.356189][ T3446] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1262'. [ 85.365920][ T306] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 85.368247][ T28] audit: type=1400 audit(1744677489.735:9059): avc: denied { open } for pid=3438 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=423 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 85.373521][ T306] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 85.442810][ T28] audit: type=1400 audit(1744677489.735:9060): avc: denied { getattr } for pid=3438 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=423 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 85.456468][ T306] plantronics 0003:047F:FFFF.0018: No inputs registered, leaving [ 85.475454][ T3446] bridge0: port 3(syz_tun) entered blocking state [ 85.484439][ T3446] bridge0: port 3(syz_tun) entered forwarding state [ 85.492995][ T2053] keytouch 0003:0926:3333.0019: fixing up Keytouch IEC report descriptor [ 85.508533][ T2053] input: HID 0926:3333 as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:0926:3333.0019/input/input22 [ 85.535786][ T19] ================================================================== [ 85.543688][ T19] BUG: KASAN: use-after-free in __list_del_entry_valid+0xa6/0x130 [ 85.547909][ T3446] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 85.551508][ T19] Read of size 8 at addr ffff88811048ecf0 by task kworker/0:1/19 [ 85.551533][ T19] [ 85.551553][ T19] CPU: 0 PID: 19 Comm: kworker/0:1 Not tainted 6.1.129-syzkaller-00006-gefda22f3484c #0 [ 85.559022][ T28] audit: type=1400 audit(1744677489.775:9061): avc: denied { bind } for pid=3440 comm="syz.4.1260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 85.566393][ T19] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 85.566414][ T19] Workqueue: events_long br_fdb_cleanup [ 85.577296][ T28] audit: type=1400 audit(1744677489.775:9062): avc: denied { name_bind } for pid=3440 comm="syz.4.1260" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 85.578412][ T19] [ 85.578421][ T19] Call Trace: [ 85.578436][ T19] [ 85.604911][ T2053] keytouch 0003:0926:3333.0019: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.9-1/input0 [ 85.608522][ T19] dump_stack_lvl+0x151/0x1b7 [ 85.608566][ T19] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 85.608595][ T19] ? _printk+0xd1/0x111 [ 85.645890][ T28] audit: type=1400 audit(1744677489.775:9063): avc: denied { node_bind } for pid=3440 comm="syz.4.1260" saddr=ff02::1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 85.657241][ T19] ? __virt_addr_valid+0x242/0x2f0 [ 85.657289][ T19] print_report+0x158/0x4e0 [ 85.657319][ T19] ? __this_cpu_preempt_check+0x13/0x20 [ 85.657341][ T19] ? __virt_addr_valid+0x242/0x2f0 [ 85.657369][ T19] ? kasan_complete_mode_report_info+0x90/0x1b0 [ 85.657392][ T19] ? __list_del_entry_valid+0xa6/0x130 [ 85.725003][ T19] kasan_report+0x13c/0x170 [ 85.729342][ T19] ? __list_del_entry_valid+0xa6/0x130 [ 85.734839][ T19] __asan_report_load8_noabort+0x14/0x20 [ 85.740579][ T19] __list_del_entry_valid+0xa6/0x130 [ 85.745777][ T19] process_one_work+0x4d7/0xcb0 [ 85.751108][ T19] worker_thread+0xa60/0x1260 [ 85.755983][ T19] kthread+0x26d/0x300 [ 85.758656][ T2053] usb 10-1: USB disconnect, device number 3 [ 85.760119][ T19] ? worker_clr_flags+0x1a0/0x1a0 [ 85.760161][ T19] ? kthread_blkcg+0xd0/0xd0 [ 85.777451][ T19] ret_from_fork+0x1f/0x30 [ 85.783808][ T19] [ 85.787596][ T19] [ 85.790769][ T19] Allocated by task 19: [ 85.795124][ T19] kasan_set_track+0x4b/0x70 [ 85.800398][ T19] kasan_save_alloc_info+0x1f/0x30 [ 85.805871][ T19] __kasan_kmalloc+0x9c/0xb0 [ 85.810504][ T19] __kmalloc_node+0xb4/0x1e0 [ 85.815522][ T19] kvmalloc_node+0x221/0x640 [ 85.820472][ T19] alloc_netdev_mqs+0x8c/0xf90 [ 85.825468][ T19] alloc_etherdev_mqs+0x36/0x40 [ 85.830777][ T19] usbnet_probe+0x213/0x28a0 [ 85.836726][ T19] usb_probe_interface+0x5b6/0xa90 [ 85.843447][ T19] really_probe+0x2b8/0x920 [ 85.849306][ T19] __driver_probe_device+0x1a0/0x310 [ 85.856145][ T19] driver_probe_device+0x54/0x3d0 [ 85.863638][ T19] __device_attach_driver+0x2e3/0x490 [ 85.871568][ T19] bus_for_each_drv+0x183/0x200 [ 85.878399][ T19] __device_attach+0x312/0x510 [ 85.884246][ T19] device_initial_probe+0x1a/0x20 [ 85.891038][ T19] bus_probe_device+0xbe/0x1e0 [ 85.896967][ T19] device_add+0xb60/0xf10 [ 85.902547][ T19] usb_set_configuration+0x190f/0x1e80 [ 85.909428][ T19] usb_generic_driver_probe+0x8b/0x150 [ 85.916019][ T19] usb_probe_device+0x144/0x260 [ 85.923146][ T19] really_probe+0x2b8/0x920 [ 85.930655][ T19] __driver_probe_device+0x1a0/0x310 [ 85.936346][ T19] driver_probe_device+0x54/0x3d0 [ 85.942848][ T19] __device_attach_driver+0x2e3/0x490 [ 85.948522][ T19] bus_for_each_drv+0x183/0x200 [ 85.953703][ T19] __device_attach+0x312/0x510 [ 85.959397][ T19] device_initial_probe+0x1a/0x20 [ 85.964233][ T19] bus_probe_device+0xbe/0x1e0 [ 85.968989][ T19] device_add+0xb60/0xf10 [ 85.973433][ T19] usb_new_device+0xf2f/0x1820 [ 85.978683][ T19] hub_event+0x2db1/0x4830 [ 85.983242][ T19] process_one_work+0x73d/0xcb0 [ 85.987883][ T19] worker_thread+0xa60/0x1260 [ 85.992699][ T19] kthread+0x26d/0x300 [ 85.996729][ T19] ret_from_fork+0x1f/0x30 [ 86.001578][ T19] [ 86.003785][ T19] Freed by task 19: [ 86.008274][ T19] kasan_set_track+0x4b/0x70 [ 86.012888][ T19] kasan_save_free_info+0x2b/0x40 [ 86.018206][ T19] ____kasan_slab_free+0x131/0x180 [ 86.023483][ T19] __kasan_slab_free+0x11/0x20 [ 86.028160][ T19] __kmem_cache_free+0x21d/0x410 [ 86.032873][ T19] kfree+0x7a/0xf0 [ 86.036707][ T19] kvfree+0x35/0x40 [ 86.040465][ T19] netdev_freemem+0x3f/0x60 [ 86.045078][ T19] netdev_release+0x7f/0xb0 [ 86.049527][ T19] device_release+0x95/0x1c0 [ 86.053952][ T19] kobject_put+0x178/0x260 [ 86.058438][ T19] put_device+0x1f/0x30 [ 86.062552][ T19] free_netdev+0x393/0x480 [ 86.067055][ T19] usbnet_disconnect+0x25f/0x3b0 [ 86.072495][ T19] usb_unbind_interface+0x1fa/0x8c0 [ 86.078071][ T19] device_release_driver_internal+0x53e/0x870 [ 86.084272][ T19] device_release_driver+0x19/0x20 [ 86.089284][ T19] bus_remove_device+0x2fa/0x360 [ 86.094444][ T19] device_del+0x663/0xe90 [ 86.098839][ T19] usb_disable_device+0x380/0x720 [ 86.103758][ T19] usb_disconnect+0x32a/0x890 [ 86.108880][ T19] hub_event+0x1ed8/0x4830 [ 86.113143][ T19] process_one_work+0x73d/0xcb0 [ 86.118208][ T19] worker_thread+0xd71/0x1260 [ 86.122709][ T19] kthread+0x26d/0x300 [ 86.126752][ T19] ret_from_fork+0x1f/0x30 [ 86.131232][ T19] [ 86.133329][ T19] Last potentially related work creation: [ 86.139065][ T19] kasan_save_stack+0x3b/0x60 [ 86.144371][ T19] __kasan_record_aux_stack+0xb4/0xc0 [ 86.149717][ T19] kasan_record_aux_stack_noalloc+0xb/0x10 [ 86.156152][ T19] insert_work+0x56/0x310 [ 86.161773][ T19] __queue_work+0x9b6/0xd70 [ 86.166113][ T19] queue_work_on+0x105/0x170 [ 86.170707][ T19] usbnet_link_change+0x182/0x1a0 [ 86.175841][ T19] usbnet_probe+0x1e1e/0x28a0 [ 86.183755][ T19] usb_probe_interface+0x5b6/0xa90 [ 86.191629][ T19] really_probe+0x2b8/0x920 [ 86.195951][ T19] __driver_probe_device+0x1a0/0x310 [ 86.201629][ T19] driver_probe_device+0x54/0x3d0 [ 86.208640][ T19] __device_attach_driver+0x2e3/0x490 [ 86.214175][ T19] bus_for_each_drv+0x183/0x200 [ 86.218948][ T19] __device_attach+0x312/0x510 [ 86.224147][ T19] device_initial_probe+0x1a/0x20 [ 86.230224][ T19] bus_probe_device+0xbe/0x1e0 [ 86.237063][ T19] device_add+0xb60/0xf10 [ 86.242130][ T19] usb_set_configuration+0x190f/0x1e80 [ 86.247780][ T19] usb_generic_driver_probe+0x8b/0x150 [ 86.254565][ T19] usb_probe_device+0x144/0x260 [ 86.260983][ T19] really_probe+0x2b8/0x920 [ 86.265829][ T19] __driver_probe_device+0x1a0/0x310 [ 86.271566][ T19] driver_probe_device+0x54/0x3d0 [ 86.278887][ T19] __device_attach_driver+0x2e3/0x490 [ 86.285827][ T19] bus_for_each_drv+0x183/0x200 [ 86.291956][ T19] __device_attach+0x312/0x510 [ 86.299842][ T19] device_initial_probe+0x1a/0x20 [ 86.307378][ T19] bus_probe_device+0xbe/0x1e0 [ 86.314133][ T19] device_add+0xb60/0xf10 [ 86.320605][ T19] usb_new_device+0xf2f/0x1820 [ 86.326473][ T19] hub_event+0x2db1/0x4830 [ 86.330811][ T19] process_one_work+0x73d/0xcb0 [ 86.336438][ T19] worker_thread+0xa60/0x1260 [ 86.343798][ T19] kthread+0x26d/0x300 [ 86.347890][ T19] ret_from_fork+0x1f/0x30 [ 86.352821][ T19] [ 86.355123][ T19] The buggy address belongs to the object at ffff88811048e000 [ 86.355123][ T19] which belongs to the cache kmalloc-4k of size 4096 [ 86.370012][ T19] The buggy address is located 3312 bytes inside of [ 86.370012][ T19] 4096-byte region [ffff88811048e000, ffff88811048f000) [ 86.384876][ T19] [ 86.387648][ T19] The buggy address belongs to the physical page: [ 86.394269][ T19] page:ffffea0004412200 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x110488 [ 86.408745][ T19] head:ffffea0004412200 order:3 compound_mapcount:0 compound_pincount:0 [ 86.417571][ T19] flags: 0x4000000000010200(slab|head|zone=1) [ 86.423667][ T19] raw: 4000000000010200 0000000000000000 dead000000000001 ffff888100043380 [ 86.432553][ T19] raw: 0000000000000000 0000000000040004 00000001ffffffff 0000000000000000 [ 86.441435][ T19] page dumped because: kasan: bad access detected [ 86.447822][ T19] page_owner tracks the page as allocated [ 86.453376][ T19] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 298, tgid 298 (syz-executor), ts 25432333139, free_ts 25422902108 [ 86.474721][ T19] post_alloc_hook+0x213/0x220 [ 86.479489][ T19] prep_new_page+0x1b/0x110 [ 86.483899][ T19] get_page_from_freelist+0x3a98/0x3b10 [ 86.489288][ T19] __alloc_pages+0x234/0x610 [ 86.494037][ T19] alloc_slab_page+0x6c/0xf0 [ 86.498867][ T19] new_slab+0x90/0x3e0 [ 86.503721][ T19] ___slab_alloc+0x6f9/0xb80 [ 86.508473][ T19] __slab_alloc+0x5d/0xa0 [ 86.512941][ T19] __kmem_cache_alloc_node+0x207/0x2a0 [ 86.518437][ T19] kmalloc_trace+0x2a/0xa0 [ 86.522747][ T19] kobject_uevent_env+0x262/0x720 [ 86.527818][ T19] kobject_uevent+0x1f/0x30 [ 86.532255][ T19] net_rx_queue_update_kobjects+0x239/0x4a0 [ 86.537980][ T19] netdev_register_kobject+0x231/0x320 [ 86.543821][ T19] register_netdevice+0xe43/0x1490 [ 86.549442][ T19] __ip_tunnel_create+0x322/0x430 [ 86.554366][ T19] page last free stack trace: [ 86.558976][ T19] free_unref_page_prepare+0x9f1/0xa00 [ 86.564807][ T19] free_unref_page+0xb2/0x5c0 [ 86.569434][ T19] __free_pages+0x61/0xf0 [ 86.573568][ T19] __free_slab+0xce/0x1a0 [ 86.578022][ T19] __unfreeze_partials+0x165/0x1a0 [ 86.583179][ T19] put_cpu_partial+0xa9/0x100 [ 86.587928][ T19] __slab_free+0x1c8/0x280 [ 86.592288][ T19] ___cache_free+0xc6/0xd0 [ 86.596878][ T19] qlist_free_all+0xc5/0x140 [ 86.601839][ T19] kasan_quarantine_reduce+0x15a/0x180 [ 86.607232][ T19] __kasan_slab_alloc+0x24/0x80 [ 86.611912][ T19] slab_post_alloc_hook+0x53/0x2c0 [ 86.616858][ T19] __kmem_cache_alloc_node+0x193/0x2a0 [ 86.622176][ T19] __kmalloc+0xa3/0x1e0 [ 86.627828][ T19] __register_sysctl_table+0x9d8/0x1060 [ 86.635665][ T19] register_net_sysctl+0x246/0x260 [ 86.641457][ T19] [ 86.643800][ T19] Memory state around the buggy address: [ 86.649239][ T19] ffff88811048eb80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 86.657250][ T19] ffff88811048ec00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 86.665146][ T19] >ffff88811048ec80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 86.673164][ T19] ^ [ 86.680840][ T19] ffff88811048ed00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 86.688730][ T19] ffff88811048ed80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 86.696760][ T19] ================================================================== [ 86.705326][ T19] Disabling lock debugging due to kernel taint [ 86.773584][ T306] plantronics 0003:047F:FFFF.0018: hiddev96,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 86.872560][ T3446] device veth0_vlan left promiscuous mode [ 86.893494][ T3446] device veth0_vlan entered promiscuous mode [ 86.913328][ T3446] device veth1_macvtap left promiscuous mode [ 86.921210][ T306] usb 4-1: USB disconnect, device number 2 [ 86.931983][ T3446] device veth1_macvtap entered promiscuous mode [ 86.953530][ T635] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 86.961607][ T3446] syz.7.1262 (3446) used greatest stack depth: 19880 bytes left [ 86.988309][ T635] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 86.996678][ T635] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 87.005646][ T635] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 87.013849][ T635] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.020762][ T635] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.028825][ T635] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 87.037541][ T635] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 87.046180][ T635] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.053180][ T635] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.061437][ T635] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 87.072200][ T635] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 87.083740][ T635] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 87.092693][ T635] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 87.101985][ T635] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 87.111747][ T635] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 87.120044][ T635] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 87.130824][ T635] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 87.141664][ T635] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 87.151393][ T635] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 87.161091][ T635] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 87.170677][ T635] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 87.180338][ T635] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 87.189255][ T635] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 87.198462][ T635] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 87.208640][ T635] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 87.218528][ T635] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 87.249519][ T635] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 87.263242][ T635] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 87.273762][ T635] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 87.283616][ T635] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 87.295102][ T635] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 87.303839][ T635] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 87.314240][ T635] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 87.327253][ T635] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 87.340082][ T635] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 87.348615][ T3458] device batadv_slave_1 entered promiscuous mode [ 87.355867][ T3460] device batadv_slave_1 left promiscuous mode