last executing test programs: 51.750268215s ago: executing program 4 (id=195): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0x5, 0x8, 0x8}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r1, &(0x7f0000000240), &(0x7f00000000c0)=@udp6=r0}, 0x20) recvfrom$inet6(r0, &(0x7f0000000240)=""/117, 0x75, 0x20040, 0x0, 0x0) 51.737059876s ago: executing program 4 (id=196): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x80, &(0x7f0000000100)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x1, 0x61, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e24, 0x4e20, 0x4d, 0x0, @wg=@initiation={0x1, 0x1, "65a252e7cb7a5918c004a9971a46afced2c32642b1ec9fe34818d8ccd82041b7", "c930713c550e74ee13c2638ac75b2a9666efd31a34fce4498df8105d8bd8ed283a220c3a9becd8a70d3607ea8270d351", "ae12e16b560f2f8ac4ca3e745ce285f12f6e8719e7f1e7f286a68f76", {"980aa8fb8f80d69f1fb587086447e93e", "55e824bb69e833bd36300b088233545a"}}}}}}}, 0x0) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, &(0x7f0000001180)=[{0x0}, {0x0}, {&(0x7f0000002080)=""/4096, 0x1000}], 0x3}, 0x803}], 0x1, 0x20, 0x0) 51.494721744s ago: executing program 32 (id=202): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000200)={@empty}, 0x14) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x4e20, 0x2, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f00000000c0), 0x4) 51.383016088s ago: executing program 1 (id=207): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000180)=ANY=[], 0x1a0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000000)=0x28, 0x4) sendmmsg$inet6(r0, &(0x7f0000001380)=[{{&(0x7f0000000140)={0xa, 0x4e21, 0x8, @dev={0xfe, 0x80, '\x00', 0x2c}}, 0x1c, 0x0}}], 0x1, 0x2400c804) 51.31979733s ago: executing program 1 (id=208): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt$sock_int(r0, 0x1, 0x1, &(0x7f0000000180)=0x101, 0x4) 50.956945112s ago: executing program 1 (id=210): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x13c, 0x19, 0x1, 0x0, 0x0, {{@in=@private, @in=@dev={0xac, 0x14, 0x14, 0x1c}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, [@tmpl={0x84, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast}, {{@in6=@remote, 0x0, 0x3c}, 0x0, @in6=@dev}]}]}, 0x13c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="640100004a00010200000000000000000a"], 0x164}}, 0x0) 50.878888545s ago: executing program 4 (id=211): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={@map=r1, 0xd, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 50.832341927s ago: executing program 4 (id=212): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000180)={[{@init_itable}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000000}}, {@nodiscard}]}, 0x3, 0x466, &(0x7f0000000800)="$eJzs27tvHMUfAPDvrl/xL/lhE8IjD8AQEBYPO054pKCACCSKICFBQWvZThRyiVFsJBJFkCAUKkRDjyj5F6igQYgKiRZ6FClCaZJQHdq7XfvecS5nn5P7fKT1zezOeuZ7u3M3u3MbwMCayv4kEbsi4s+ImKhm6wtMVV9uXr+4cOv6xYUkyuX3/0kq5W5cv7hQFC3225lnptOI9Msk9reod+X8hdPzpdLSuTw/u3rm49mV8xdeOnVm/uTSyaWzh48effnI3GuvHn6lJ3Fmbbqx77PlA3vfSYbfPf51ti4t4m+Io0emOm18tlzucXX99f+adDLcx4ZwR4YiIjtcI5X+PxFDsX7wJuLtL/raOGBTlcvl8s72my+VgftYEvV5XR4GRfFFn13/FkvjIOCNzRt+9N21N6sXQFncN/OlumU40hivpEYarm97aSoiPrz073fZEptzHwIAoM5P2fjnxVbjvzQeqSn3QD43NBkRD0bE7oh4KCL2RMTDEZWyj0bEY3n58Q3W3zhJ0jz+Sa92HdwGZOO/1/O5rfrxX1oUmRyq5MYqY8DJGElOnCotHcrfk+kYGcvycx3q+PmtP75pt612/JctWf3FWDBvx9Xhsfp9FudX5+8m5lrXLkfsG24Vf7I2E5BExN6I2NdlHaee/+FAu223j7+DHswzlb+PeK56/C9FQ/yFpPP85OyOKC0dmi3Oima//X7lvXb131X8PZAd//+1PP/X4p9MaudrV+68jit/fdX2mqbb8380+aCSHs3XfTq/unpuLmI0OV5tdO36w+v7FvmifBb/9MHW/X93rL8T+yMiO4kfj4gnIuLJvO1PRcTTEXGwQ/y/Hnvmo+7j31xZ/It3dPzXE6PRuKZ1Yuj0Lz/WVTrZFP+tDsd/LTWdvzZ//g01xbWRdnV3NgMAAMC9J7u63hVJOrOWTtOZmerv5fdEpKXlldUXTix/cnax+ozAZERa3OmaqLkfOpdf1lfzlyOi+tOCYvuR/L7xt0PjlfzMwnJpsd/Bw4Db2ab/Z/5uvq0G3G88rwWDS/+HwXW7/v/5FrUD2Hrdf/8f2+jvPIFtqkX/169hIIy1/P435ofB0ND/TfvBAGno/zv61Q5g63V//2+0p+0Atp75fxhIK+Nx+4fkOyaK/9Tl7vdtIka2RTM2LRHptmjGtk2M3OP9on+fSQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAL30XwAAAP//cBbcWg==") mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000140), 0x8, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 50.684229571s ago: executing program 4 (id=213): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001800db8d0000000000000000020020000000000680080000"], 0x1c}}, 0x200e4840) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@ipv4_newroute={0x1c, 0x18, 0x35f32a6dfa748ddd, 0x70bd28, 0x0, {0x2, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x6}}, 0x1c}}, 0x0) 50.683962212s ago: executing program 1 (id=214): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f00000002c0)=ANY=[@ANYBLOB='umask=0000000000000010,discard,gid=', @ANYRESHEX=0xee00, @ANYBLOB=',allow_utime=00000000000000000000201,iocharset=cp863,errors=continue,dmask=00000000000000000000777,umask=00000000000000000000007,utf8,dmask=00000000000000000000005,\x00'], 0x1, 0x1534, &(0x7f0000002d00)="$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") mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000005c0), 0x2010800, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x2e) getdents64(r0, &(0x7f0000000ac0)=""/143, 0x8f) 50.566623486s ago: executing program 1 (id=215): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, r0, &(0x7f000001f000/0x18000)=nil, 0x0, 0x0, 0x41, 0x0, 0x0) ioctl$KVM_REINJECT_CONTROL(r1, 0xae71, &(0x7f0000000100)={0x81}) 50.385073822s ago: executing program 4 (id=216): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0xe}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x38, 0x2c, 0xf3f, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xb, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x7, 0xe}}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) 50.287248015s ago: executing program 33 (id=216): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0xe}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x38, 0x2c, 0xf3f, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xb, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x7, 0xe}}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) 50.269397726s ago: executing program 1 (id=218): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r0, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r1, 0xffffffffffffffff, 0x0) 50.259342777s ago: executing program 34 (id=218): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r0, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r1, 0xffffffffffffffff, 0x0) 22.077986208s ago: executing program 2 (id=907): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x9, @none, 0x3, 0x2}, 0xe) listen(r0, 0x81) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 22.057610139s ago: executing program 2 (id=910): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x4, 0x107) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000640)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f0000000100)=r0) 21.999601371s ago: executing program 2 (id=912): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x109200, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffff3) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) lseek(r0, 0x3, 0x2) 21.989449171s ago: executing program 2 (id=914): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x4000009d, 0x0, 0x80}]}) 21.872399605s ago: executing program 2 (id=922): sendmsg$netlink(0xffffffffffffffff, &(0x7f0000007900)={0x0, 0x0, &(0x7f0000007840)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="1000"], 0x10}], 0x1, 0x0, 0x0, 0x40040}, 0x800) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0xfffff00c}, {0x6}]}, 0x10) sendmmsg$inet(r0, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) 21.826290627s ago: executing program 2 (id=924): ptrace(0x10, 0x1) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x6, 0x0, 0x0, 0x0, 0x8000000009917, 0x400000000000fffd}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x0, 0xffffffffffffffff}, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x0, 0x0, 0x1}, 0x0) 19.41099244s ago: executing program 0 (id=977): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001640)={{r0, 0xffffffffffffffff}, &(0x7f00000015c0), &(0x7f0000001600)='%pB \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r1, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0x11, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000000000000000000008500000013000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000000000085000000a500000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) 19.371921881s ago: executing program 0 (id=978): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 19.221929257s ago: executing program 0 (id=980): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'erspan0\x00', 0x0}) socket$packet(0x11, 0x3, 0x300) sendto$packet(r0, &(0x7f00000002c0)="05030500d3fc030000004788800509101128", 0x100f, 0x4, &(0x7f0000000140)={0x11, 0x88a8, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 19.221491877s ago: executing program 0 (id=981): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x3000490, &(0x7f00000002c0), 0x45, 0x7b1, &(0x7f0000000c80)="$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") mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000005c0), 0x2010800, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c) r1 = openat$incfs(r0, &(0x7f00000001c0)='.pending_reads\x00', 0x0, 0x130) ioctl$TIOCL_GETKMSGREDIRECT(r1, 0x40046721, &(0x7f0000000000)) 19.028280354s ago: executing program 0 (id=985): prlimit64(0x0, 0xe, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x19, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) write$cgroup_devices(r1, 0x0, 0x9) 18.484172732s ago: executing program 0 (id=992): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xa, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3}}, 0x0, 0xe, 0xfffffffffffffef0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x20000, {0xa, 0x40, 0x22, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @remote}]}, 0x2c}}, 0x0) 18.484074002s ago: executing program 35 (id=992): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xa, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3}}, 0x0, 0xe, 0xfffffffffffffef0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x20000, {0xa, 0x40, 0x22, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @remote}]}, 0x2c}}, 0x0) 15.94370627s ago: executing program 8 (id=1025): unlink(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x895}, 0x0) 15.780148665s ago: executing program 8 (id=1029): unshare(0x2020600) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000500)={0x20000009}) poll(&(0x7f0000000380)=[{r1, 0x1108}], 0x1, 0x3) 15.745183127s ago: executing program 8 (id=1030): r0 = creat(&(0x7f0000000040)='./bus\x00', 0x19e) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x147c7c, 0x0) io_setup(0x2, &(0x7f0000000a00)=0x0) io_submit(r2, 0x1, &(0x7f0000000a40)=[&(0x7f00000001c0)={0x0, 0x0, 0x22, 0x8, 0x3, r1, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, r1}]) 15.64965308s ago: executing program 8 (id=1031): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000280)={[{@nogrpid}, {@jqfmt_vfsv0}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@debug}, {@nombcache}, {@quota}, {@nolazytime}]}, 0x3, 0x42f, &(0x7f0000000940)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV") mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x11010, 0x0) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x14a0, &(0x7f0000000700)=ANY=[], 0x1, 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) creat(&(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x9) 15.482967036s ago: executing program 8 (id=1033): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000100)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 14.903920996s ago: executing program 8 (id=1041): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f0000000580)="17", 0xfdef, 0x10008095, 0x0, 0x0) 14.815227549s ago: executing program 36 (id=1041): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f0000000580)="17", 0xfdef, 0x10008095, 0x0, 0x0) 6.818374504s ago: executing program 37 (id=924): ptrace(0x10, 0x1) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x6, 0x0, 0x0, 0x0, 0x8000000009917, 0x400000000000fffd}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x0, 0xffffffffffffffff}, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x0, 0x0, 0x1}, 0x0) 2.746020325s ago: executing program 6 (id=1287): r0 = memfd_create(&(0x7f0000000000)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\', 0x0) pwrite64(r0, &(0x7f0000000080)='/', 0x1, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000180)='./file0/file0\x00', 0x3c9c9b, 0x0, 0x0, 0x0, &(0x7f0000000180)) 2.60422171s ago: executing program 6 (id=1288): bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000), 0xc) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000040), 0xc) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1018e58, &(0x7f0000000080)={[{@nodioread_nolock}, {@noblock_validity}, {@data_err_ignore}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@commit={'commit', 0x3d, 0x21d}}, {@stripe={'stripe', 0x3d, 0x4}}, {@noauto_da_alloc}]}, 0x6, 0x61f, &(0x7f0000000b00)="$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") syz_usb_connect(0x0, 0x64, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000002ffa9400819151300000102030109025200010000000009040000042513bf000a2401000000020102052404"], 0x0) 2.189183824s ago: executing program 5 (id=1297): syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x2000, 0x8900}, [@IFLA_MASTER={0x8, 0x3, r2}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}]}, 0x44}, 0x1, 0xd, 0x0, 0x480c5}, 0x20000000) 2.075925118s ago: executing program 5 (id=1298): mkdirat(0xffffffffffffff9c, 0x0, 0x0) chdir(0x0) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x20, 0x10012, r0, 0x0) prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000000140)="22d2c9", 0x3) 2.075765388s ago: executing program 5 (id=1299): unshare(0x60000600) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r0, &(0x7f0000000000)={&(0x7f00000001c0)={0xa, 0x4e20, 0x80000, @dev={0xfe, 0x80, '\x00', 0x20}}, 0x1c, 0x0}, 0x40440c0) 2.052733359s ago: executing program 5 (id=1300): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'pimreg\x00', 0x5005}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010024bd7000fc0ddf2500000000", @ANYRES32=0x0, @ANYBLOB="1b0b04000300000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) write$tun(r0, &(0x7f00000003c0)={@void, @val={0x3, 0x0, 0x8, 0x6ed, 0x19, 0xc}, @ipv4=@tcp={{0x5, 0x4, 0x1, 0x1, 0xfc1, 0x67, 0x0, 0x4a, 0x6, 0x0, @empty, @multicast1}, {{0x4e23, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x20, 0xece5, 0x0, 0x0, {[@mptcp=@ack={0x1e, 0x4, 0x40}]}}, {"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"}}}}, 0xfcb) 1.896737484s ago: executing program 5 (id=1305): r0 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000100)='cgroup.max.descendants\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000080)=0xfffffffd, 0x12) 1.828163706s ago: executing program 9 (id=1306): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(0x0, r0) syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x42, &(0x7f00000000c0)=ANY=[@ANYBLOB="6673796e635f6d6f64653d706f7369782c6e6f696e6c696e655f646174612c6469736361726400aa19fd46b492dc6cf59d696e6c696e655f64656e7472792c00"], 0x1, 0x54f3, &(0x7f000000ab40)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwritev2(r1, &(0x7f0000000180)=[{&(0x7f0000001380)="fb323b508e22f2", 0x7}], 0x1, 0x2002, 0x2, 0x1a) 1.816786817s ago: executing program 5 (id=1307): r0 = syz_usb_connect$printer(0x3, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002000000102105a8b140000102030109021b000101000000090400ff020701010009050102"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000000c0)={0xffffff04, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1, 0x4}}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) ioctl$BTRFS_IOC_LOGICAL_INO(r1, 0xc0389424, 0x0) 1.592624525s ago: executing program 9 (id=1310): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x100002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000140)={0x1, 0x0, [{0x1, 0xc, 0x4, 0xfffffff7, 0x4be1}]}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000100)={0x1, 0x0, [{0x7e6, 0x0, 0xfffffffffffffffa}]}) 1.322685254s ago: executing program 9 (id=1316): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'team_slave_0\x00', &(0x7f0000002fc0)=@ethtool_stats}) 1.116199041s ago: executing program 3 (id=1318): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xfd, 0x7fff0000}]}) r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="0002020100000008ff"], 0x18) connect$inet6(r0, &(0x7f0000000140)={0xa, 0xdffd, 0x7, @remote, 0x4}, 0x1c) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)="88", 0xfdef}], 0x1) 1.092565342s ago: executing program 6 (id=1319): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000), 0x20000328) setsockopt$inet_tcp_int(r0, 0x6, 0x12, &(0x7f0000000180)=0x93f00000, 0x4) 993.097676ms ago: executing program 9 (id=1321): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) fstat(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r2, 0x0) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000100)=0x1, 0x4) 992.936266ms ago: executing program 3 (id=1322): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000b40), 0x800001, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000000c0)={0x0, 0x0, @pic={0x77, 0x40, 0x4e, 0xc4, 0xc7, 0xf7, 0x3, 0x3, 0x3, 0x6, 0x6, 0x2, 0x0, 0x7f, 0x72, 0x9}}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000400)={0x1, 0x0, @pic={0x9, 0x7f, 0x9, 0x8, 0x77, 0x7, 0x4, 0x86, 0xf8, 0xde, 0x5, 0xf, 0x10, 0x40, 0x4, 0x4}}) 977.387206ms ago: executing program 9 (id=1323): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x4, 0x8, 0x8}, 0x50) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x15, 0x0, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b006d9bcf8b50b5ca03642770", 0x0, 0x81ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) 843.945371ms ago: executing program 3 (id=1326): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 814.742042ms ago: executing program 9 (id=1327): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002208000000a20100c3"], 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x80800) pselect6(0x40, &(0x7f0000000100)={0x0, 0x1000000000000, 0x0, 0x0, 0x7ff, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x0, 0x0, 0x4000000, 0x3}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 744.244734ms ago: executing program 3 (id=1330): r0 = socket(0x10, 0x803, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x20000, {0xa, 0x40, 0x22, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x34}}]}, 0x40}}, 0x0) 743.985944ms ago: executing program 3 (id=1331): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='memory=low,background_gc=off,noquota,inline_dentry,data_flush,disable_roll_forward,noinline_xattr,discard,checkpoint=disable,user_xattr,atgc,resuid=', @ANYRESDEC=0x0, @ANYBLOB="2c6a71666d743d76667376312c7573726a71756f74613d2d29242d2e25272a2c2c00a40988e362019a69db5cb2a8b125934e5652c7c1af7aa1b29a3326b2ca0000000000"], 0xff, 0x5512, &(0x7f00000079c0)="$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") connect$inet6(0xffffffffffffffff, 0x0, 0x0) mknod$loop(&(0x7f0000001b80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8, 0x1) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1e0) renameat2(0xffffffffffffff9c, &(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2) 355.280978ms ago: executing program 7 (id=1332): r0 = socket$inet6(0xa, 0x3, 0x7) r1 = socket$inet6(0xa, 0x3, 0x7) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000280)=0x6, 0x4) sendmmsg$inet6(r1, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='$'], 0x28}}], 0x1, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0x10000, 0x0, 0x0) 346.047348ms ago: executing program 3 (id=1333): bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = epoll_create1(0x80000) epoll_pwait2(r0, &(0x7f0000000080)=[{}], 0x1, 0x0, 0x0, 0x0) 239.813952ms ago: executing program 7 (id=1334): r0 = creat(&(0x7f0000000180)='./file0\x00', 0x2) close(r0) socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 239.644862ms ago: executing program 7 (id=1335): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000002c0)=0x1, 0x4) setsockopt(r0, 0x1, 0x10000000000009, &(0x7f0000000100)="0100ddff", 0x507b420f2d51f971) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty, 0x204}, 0x1c) setsockopt(r0, 0x1, 0x9, &(0x7f0000000040), 0x29) 217.600692ms ago: executing program 7 (id=1336): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a0000000600010022"], 0x1c}}, 0x0) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000540), r1) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000e00)=ANY=[@ANYBLOB='d\b\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbd70000000000001"], 0x864}}, 0x0) 165.235524ms ago: executing program 7 (id=1337): syz_mount_image$vfat(&(0x7f0000001800), &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0x1, 0x29d, &(0x7f0000000400)="$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") mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81800) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000d80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1b1a439, &(0x7f0000000800)=ANY=[@ANYRESOCT=r0, @ANYRESDEC, @ANYBLOB="41319d36b19da0f92c34d4161aedb4d9c117bb97d9a14da38deb4d799f7396c16e53eea9b38952392679dc9965aff692fc7a1de3490b4e22f3468c98ec62faff6c802527cda5cb48c5bc97b57252bea2f306513526e3e61d4e206934c90150ba2c325365d34a4866416a647a2022e5485163e3fad30730c80a46b63900f5dfdd845440d244a1e889fb14a29c06fcc85f976afbb0ce220bde0da45028db74413dd6a37b7b63c2b7a26169fc2a44d210bd17af7173aa72d2ad45542299334fe9576104e3e3e7d25997fe6c8bb5fa15b761725a39fedaf8d5533570ba136ac826592163351666324320c93c98c4", @ANYRES8=r0], 0xb, 0x0, &(0x7f0000000000)) renameat2(r0, &(0x7f0000001280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r0, &(0x7f00000013c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 72.523428ms ago: executing program 6 (id=1338): socket$vsock_stream(0x28, 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) unshare(0x60000600) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="2800000014001901000000000000000228"], 0x28}}, 0x0) 72.428057ms ago: executing program 7 (id=1339): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000d00)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r3, 0x0, 0x39000, 0x0) splice(r2, 0x0, r0, 0x0, 0x2, 0x0) write$binfmt_elf64(r1, &(0x7f0000000580)=ANY=[], 0xfffffe66) 172.18µs ago: executing program 6 (id=1340): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$UHID_INPUT(r0, &(0x7f0000010140)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x5, 0x10012, r0, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) getsockopt(r1, 0x111, 0x3, 0x0, &(0x7f0000000080)) 0s ago: executing program 6 (id=1341): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="1e031800dd5c980128854d4a828e000000000033"], 0xffdd) kernel console output (not intermixed with test programs): ice [HID 1b96:0008] on usb-dummy_hcd.6-1/input0 [ 45.770963][ T1295] netlink: 8 bytes leftover after parsing attributes in process `syz.0.418'. [ 45.834921][ T288] zeroplus 0003:0C12:0030.0006: unknown main item tag 0x0 [ 45.845010][ T288] zeroplus 0003:0C12:0030.0006: unknown main item tag 0x0 [ 45.852796][ T304] usb 7-1: USB disconnect, device number 2 [ 45.863580][ T288] zeroplus 0003:0C12:0030.0006: unknown main item tag 0x0 [ 45.894170][ T1305] device dummy0 entered promiscuous mode [ 45.899690][ T288] zeroplus 0003:0C12:0030.0006: unknown main item tag 0x0 [ 45.908185][ T1305] device dummy0 left promiscuous mode [ 45.918091][ T1302] fido_id[1302]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 45.924532][ T288] zeroplus 0003:0C12:0030.0006: unknown main item tag 0x0 [ 45.957559][ T288] zeroplus 0003:0C12:0030.0006: unknown main item tag 0x0 [ 45.965451][ T288] zeroplus 0003:0C12:0030.0006: unknown main item tag 0x0 [ 45.972999][ T288] zeroplus 0003:0C12:0030.0006: unknown main item tag 0x0 [ 45.980413][ T288] zeroplus 0003:0C12:0030.0006: unknown main item tag 0x0 [ 45.988197][ T288] zeroplus 0003:0C12:0030.0006: unknown main item tag 0x0 [ 45.996306][ T288] zeroplus 0003:0C12:0030.0006: unknown main item tag 0x0 [ 46.004060][ T288] zeroplus 0003:0C12:0030.0006: unknown main item tag 0x0 [ 46.013104][ T288] zeroplus 0003:0C12:0030.0006: unknown main item tag 0x0 [ 46.021509][ T288] zeroplus 0003:0C12:0030.0006: unknown main item tag 0x0 [ 46.029500][ T288] zeroplus 0003:0C12:0030.0006: unknown main item tag 0x0 [ 46.043128][ T1291] set_capacity_and_notify: 1 callbacks suppressed [ 46.043145][ T1291] loop2: detected capacity change from 0 to 40427 [ 46.046988][ T288] zeroplus 0003:0C12:0030.0006: unknown main item tag 0x0 [ 46.071848][ T1291] F2FS-fs (loop2): fault_injection options not supported [ 46.087075][ T1291] F2FS-fs (loop2): fault_type options not supported [ 46.101049][ T288] zeroplus 0003:0C12:0030.0006: unknown main item tag 0x0 [ 46.104811][ T1291] F2FS-fs (loop2): Image doesn't support compression [ 46.124755][ T1291] F2FS-fs (loop2): invalid crc value [ 46.125315][ T288] zeroplus 0003:0C12:0030.0006: unknown main item tag 0x0 [ 46.145212][ T1291] F2FS-fs (loop2): Found nat_bits in checkpoint [ 46.154101][ T288] zeroplus 0003:0C12:0030.0006: unknown main item tag 0x0 [ 46.171984][ T288] zeroplus 0003:0C12:0030.0006: unknown main item tag 0x0 [ 46.181106][ T288] zeroplus 0003:0C12:0030.0006: unknown main item tag 0x0 [ 46.191639][ T288] zeroplus 0003:0C12:0030.0006: unknown main item tag 0x0 [ 46.203271][ T288] zeroplus 0003:0C12:0030.0006: unknown main item tag 0x0 [ 46.211455][ T288] zeroplus 0003:0C12:0030.0006: unknown main item tag 0x0 [ 46.219697][ T288] zeroplus 0003:0C12:0030.0006: unknown main item tag 0x0 [ 46.228097][ T288] zeroplus 0003:0C12:0030.0006: unknown main item tag 0x0 [ 46.239166][ T288] zeroplus 0003:0C12:0030.0006: unknown main item tag 0x0 [ 46.253345][ T288] zeroplus 0003:0C12:0030.0006: unknown main item tag 0x0 [ 46.261288][ T288] zeroplus 0003:0C12:0030.0006: unknown main item tag 0x0 [ 46.270125][ T288] zeroplus 0003:0C12:0030.0006: unknown main item tag 0x0 [ 46.279334][ T288] zeroplus 0003:0C12:0030.0006: unknown main item tag 0x0 [ 46.287348][ T288] zeroplus 0003:0C12:0030.0006: unknown main item tag 0x0 [ 46.287958][ T1291] F2FS-fs (loop2): Start checkpoint disabled! [ 46.296755][ T288] zeroplus 0003:0C12:0030.0006: unknown main item tag 0x0 [ 46.312202][ T288] zeroplus 0003:0C12:0030.0006: unknown main item tag 0x0 [ 46.320281][ T288] zeroplus 0003:0C12:0030.0006: unknown main item tag 0x0 [ 46.330610][ T1291] F2FS-fs (loop2): f2fs_disable_checkpoint() finish, err:0 [ 46.338719][ T1291] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 46.346749][ T288] zeroplus 0003:0C12:0030.0006: unknown main item tag 0x0 [ 46.354887][ T1319] loop0: detected capacity change from 0 to 128 [ 46.387579][ T1291] F2FS-fs (loop2): access invalid blkaddr:4043309056 [ 46.395861][ T1291] CPU: 1 PID: 1291 Comm: syz.2.416 Not tainted syzkaller #0 [ 46.403719][ T1291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 46.405250][ T288] zeroplus 0003:0C12:0030.0006: unknown main item tag 0x0 [ 46.414326][ T1291] Call Trace: [ 46.414339][ T1291] [ 46.414347][ T1291] __dump_stack+0x21/0x24 [ 46.432424][ T1291] dump_stack_lvl+0x110/0x170 [ 46.438127][ T1291] ? __cfi_dump_stack_lvl+0x8/0x8 [ 46.443220][ T1291] ? __cfi_f2fs_get_dnode_of_data+0x10/0x10 [ 46.449450][ T1291] dump_stack+0x15/0x24 [ 46.454127][ T1291] __f2fs_is_valid_blkaddr+0xda6/0x1460 [ 46.460225][ T1291] f2fs_is_valid_blkaddr+0x23/0x30 [ 46.464401][ T288] zeroplus 0003:0C12:0030.0006: unknown main item tag 0x0 [ 46.465899][ T1291] f2fs_map_blocks+0xd43/0x3ba0 [ 46.478984][ T1291] ? mempool_alloc_slab+0x1d/0x30 [ 46.483445][ T288] zeroplus 0003:0C12:0030.0006: hidraw0: USB HID v0.0a Device [HID 0c12:0030] on usb-dummy_hcd.5-1/input0 [ 46.484816][ T1291] ? __cfi_f2fs_map_blocks+0x10/0x10 [ 46.498267][ T288] zeroplus 0003:0C12:0030.0006: no inputs found [ 46.503820][ T1291] ? xas_start+0x317/0x3e0 [ 46.514882][ T1291] ? xas_load+0x39e/0x3b0 [ 46.519279][ T1291] ? xa_load+0xad/0xd0 [ 46.523579][ T1291] f2fs_mpage_readpages+0xa6e/0x1bc0 [ 46.529193][ T1291] ? dquot_release_reservation_block+0xa0/0xa0 [ 46.533093][ T288] usb 6-1: USB disconnect, device number 4 [ 46.535482][ T1291] ? __this_cpu_preempt_check+0x13/0x20 [ 46.547678][ T1291] ? memcg_rstat_updated+0x56/0x110 [ 46.553750][ T1291] ? xas_nomem+0x6b/0x1f0 [ 46.558666][ T1291] f2fs_readahead+0xfc/0x240 [ 46.563666][ T1291] ? __cfi_f2fs_readahead+0x10/0x10 [ 46.569689][ T1291] read_pages+0x1c2/0xde0 [ 46.575006][ T1291] ? __cfi___filemap_add_folio+0x10/0x10 [ 46.581227][ T1291] ? page_cache_ra_unbounded+0x850/0x850 [ 46.587257][ T1291] ? folio_add_lru+0x26a/0x480 [ 46.592596][ T1291] ? filemap_add_folio+0x113/0x260 [ 46.598103][ T1291] page_cache_ra_unbounded+0x6fb/0x850 [ 46.603915][ T1291] ? __cfi_page_cache_ra_unbounded+0x10/0x10 [ 46.610648][ T1291] ? __kasan_check_write+0x14/0x20 [ 46.615973][ T1291] ? __switch_to+0x517/0xe60 [ 46.621425][ T1291] page_cache_ra_order+0x3ab/0xf00 [ 46.627677][ T1291] ? _raw_spin_unlock+0x4c/0x70 [ 46.632927][ T1291] ? __switch_to_asm+0x3a/0x60 [ 46.638316][ T1291] ? __cfi_page_cache_ra_order+0x10/0x10 [ 46.644786][ T1291] ? __schedule+0xbae/0x1500 [ 46.649433][ T1291] ondemand_readahead+0x82a/0xdc0 [ 46.654523][ T1291] ? __kasan_check_read+0x11/0x20 [ 46.659604][ T1291] ? page_cache_sync_ra+0x490/0x490 [ 46.664926][ T1291] page_cache_sync_ra+0x41b/0x490 [ 46.670071][ T1291] f2fs_readdir+0x46f/0x990 [ 46.674691][ T1291] ? __cfi_f2fs_readdir+0x10/0x10 [ 46.679744][ T1291] ? down_read_killable+0xbc/0x110 [ 46.685146][ T1291] ? __cfi_down_read_killable+0x10/0x10 [ 46.690983][ T1291] ? fsnotify_perm+0x269/0x5b0 [ 46.696043][ T1291] ? security_file_permission+0x94/0xb0 [ 46.701632][ T1291] iterate_dir+0x271/0x610 [ 46.706502][ T1291] ? __cfi_f2fs_readdir+0x10/0x10 [ 46.711553][ T1291] __se_sys_getdents64+0xf2/0x250 [ 46.716647][ T1291] ? __x64_sys_getdents64+0x90/0x90 [ 46.722049][ T1291] ? xfd_validate_state+0x70/0x150 [ 46.727292][ T1291] ? __cfi_filldir64+0x10/0x10 [ 46.732190][ T1291] ? fpregs_restore_userregs+0x128/0x260 [ 46.737855][ T1291] __x64_sys_getdents64+0x7b/0x90 [ 46.743273][ T1291] x64_sys_call+0x15c/0x9a0 [ 46.748276][ T1291] do_syscall_64+0x4c/0xa0 [ 46.752824][ T1291] ? clear_bhb_loop+0x30/0x80 [ 46.757643][ T1291] ? clear_bhb_loop+0x30/0x80 [ 46.762439][ T1291] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 46.768611][ T1291] RIP: 0033:0x7f13b099c819 [ 46.773156][ T1291] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 46.793661][ T1291] RSP: 002b:00007f13b1857028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 46.802278][ T1291] RAX: ffffffffffffffda RBX: 00007f13b0c15fa0 RCX: 00007f13b099c819 [ 46.810673][ T1291] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 46.818869][ T1291] RBP: 00007f13b0a32c91 R08: 0000000000000000 R09: 0000000000000000 [ 46.827398][ T1291] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 46.836478][ T1291] R13: 00007f13b0c16038 R14: 00007f13b0c15fa0 R15: 00007ffd04f37708 [ 46.846032][ T1291] [ 46.863994][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 46.864011][ T28] audit: type=1400 audit(1775086641.804:319): avc: denied { ioctl } for pid=1320 comm="syz.6.429" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=20592 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 46.886087][ T1291] syz.2.416: attempt to access beyond end of device [ 46.886087][ T1291] loop2: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 46.937504][ T1322] fido_id[1322]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 46.952351][ T1291] syz.2.416: attempt to access beyond end of device [ 46.952351][ T1291] loop2: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 47.062342][ T328] kworker/u4:4: attempt to access beyond end of device [ 47.062342][ T328] loop2: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 47.124327][ T329] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 47.177727][ T1347] loop6: detected capacity change from 0 to 1024 [ 47.192567][ T1347] EXT4-fs: Ignoring removed mblk_io_submit option [ 47.220991][ T1347] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 47.256129][ T1347] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:3850: comm syz.6.442: Allocating blocks 497-513 which overlap fs metadata [ 47.288762][ T1346] EXT4-fs (loop6): pa ffff888116cb6dc8: logic 48, phys. 177, len 21 [ 47.297328][ T1346] EXT4-fs error (device loop6): ext4_mb_release_inode_pa:4890: group 0, free 0, pa_free 1 [ 47.317214][ T812] EXT4-fs (loop6): unmounting filesystem. [ 47.335623][ T329] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 47.350053][ T329] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 47.376328][ T329] usb 8-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 47.397707][ T329] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 47.420144][ T1361] loop0: detected capacity change from 0 to 8192 [ 47.421407][ T1369] loop6: detected capacity change from 0 to 256 [ 47.427111][ T329] usb 8-1: SerialNumber: syz [ 47.463994][ T1371] loop2: detected capacity change from 0 to 128 [ 47.474576][ T1371] EXT4-fs: Ignoring removed nobh option [ 47.511220][ T1371] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 47.522422][ T1374] loop6: detected capacity change from 0 to 128 [ 47.522534][ T1371] ext4 filesystem being mounted at /96/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 47.560567][ T285] EXT4-fs (loop2): unmounting filesystem. [ 47.628282][ T28] audit: type=1400 audit(1775086642.584:320): avc: denied { block_suspend } for pid=1380 comm="syz.0.455" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 47.658352][ T329] usb 8-1: 0:2 : does not exist [ 47.669526][ T329] usb 8-1: USB disconnect, device number 3 [ 47.712527][ T1383] loop0: detected capacity change from 0 to 4096 [ 47.749960][ T1383] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 47.778616][ T1390] loop2: detected capacity change from 0 to 256 [ 47.801784][ T1383] incfs: Unexpected inode type [ 47.825522][ T28] audit: type=1400 audit(1775086642.784:321): avc: denied { bind } for pid=1393 comm="syz.6.461" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 47.862356][ T28] audit: type=1400 audit(1775086642.814:322): avc: denied { rmdir } for pid=283 comm="syz-executor" name="lost+found" dev="loop0" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 47.887606][ T28] audit: type=1400 audit(1775086642.844:323): avc: denied { rmdir } for pid=283 comm="syz-executor" name=".index" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 47.911557][ T354] udevd[354]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 47.928785][ T1398] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.937778][ T1398] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.941248][ T283] EXT4-fs (loop0): unmounting filesystem. [ 47.975411][ T28] audit: type=1400 audit(1775086642.844:324): avc: denied { unlink } for pid=283 comm="syz-executor" name="file1" dev="loop0" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 48.042299][ T1408] loop5: detected capacity change from 0 to 256 [ 48.071118][ T1412] FAT-fs (loop0): Unrecognized mount option "shortjame=wn95" or missing value [ 48.111079][ T1408] FAT-fs (loop5): Directory bread(block 64) failed [ 48.139030][ T1408] FAT-fs (loop5): Directory bread(block 65) failed [ 48.164671][ T1408] FAT-fs (loop5): Directory bread(block 66) failed [ 48.171640][ T1408] FAT-fs (loop5): Directory bread(block 67) failed [ 48.184311][ T1417] SELinux: failed to load policy [ 48.195272][ T1408] FAT-fs (loop5): Directory bread(block 68) failed [ 48.202039][ T1408] FAT-fs (loop5): Directory bread(block 69) failed [ 48.227050][ T1408] FAT-fs (loop5): Directory bread(block 70) failed [ 48.237205][ T1408] FAT-fs (loop5): Directory bread(block 71) failed [ 48.237259][ T1408] FAT-fs (loop5): Directory bread(block 72) failed [ 48.237282][ T1408] FAT-fs (loop5): Directory bread(block 73) failed [ 48.240394][ T1423] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 48.265128][ T1423] EXT4-fs error (device loop7): ext4_orphan_get:1425: comm syz.7.475: bad orphan inode 131083 [ 48.272463][ T1423] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 48.380766][ T1400] F2FS-fs (loop2): invalid crc value [ 48.392110][ T1400] F2FS-fs (loop2): Found nat_bits in checkpoint [ 48.397185][ T1432] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 48.408347][ T1432] ext4 filesystem being mounted at /59/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 48.465008][ T813] EXT4-fs (loop7): unmounting filesystem. [ 48.482155][ T28] audit: type=1400 audit(1775086643.434:325): avc: denied { write } for pid=1437 comm="syz.7.480" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 48.509552][ T1400] F2FS-fs (loop2): Start checkpoint disabled! [ 48.516909][ T1400] F2FS-fs (loop2): f2fs_disable_checkpoint() finish, err:0 [ 48.524438][ T304] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 48.525048][ T1400] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 48.563617][ T812] EXT4-fs (loop6): unmounting filesystem. [ 48.632314][ T328] kworker/u4:4: attempt to access beyond end of device [ 48.632314][ T328] loop2: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 48.715368][ T304] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 48.732380][ T304] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 48.753398][ T304] usb 1-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 48.773595][ T304] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 48.794681][ T304] usb 1-1: config 0 descriptor?? [ 48.906371][ T28] audit: type=1400 audit(1775086643.864:326): avc: denied { connect } for pid=1455 comm="syz.7.488" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 48.935234][ T329] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 49.076657][ T1464] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 49.086727][ T1464] ext4 filesystem being mounted at /103/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 49.121387][ T285] EXT4-fs (loop2): unmounting filesystem. [ 49.128711][ T329] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 49.139344][ T329] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 49.158475][ T329] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 49.170187][ T28] audit: type=1400 audit(1775086644.124:327): avc: denied { ioctl } for pid=1467 comm="syz.2.493" path="/dev/rtc0" dev="devtmpfs" ino=263 ioctlcmd=0x7003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 49.194475][ T329] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 49.206594][ T304] playstation 0003:054C:0DF2.0007: unknown main item tag 0x0 [ 49.224276][ T329] usb 7-1: SerialNumber: syz [ 49.229043][ T304] playstation 0003:054C:0DF2.0007: unknown main item tag 0x0 [ 49.247755][ T304] playstation 0003:054C:0DF2.0007: unknown main item tag 0x0 [ 49.271112][ T304] playstation 0003:054C:0DF2.0007: unknown main item tag 0x0 [ 49.286443][ T304] playstation 0003:054C:0DF2.0007: unknown main item tag 0x0 [ 49.303656][ T304] playstation 0003:054C:0DF2.0007: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.0-1/input0 [ 49.357393][ T1477] Bluetooth: hci0: Frame reassembly failed (-84) [ 49.403997][ T304] playstation 0003:054C:0DF2.0007: Invalid reportID received, expected 9 got 210 [ 49.420604][ T304] playstation 0003:054C:0DF2.0007: Failed to retrieve DualSense pairing info: -22 [ 49.440015][ T304] playstation 0003:054C:0DF2.0007: Failed to get MAC address from DualSense [ 49.447978][ T329] usb 7-1: 0:2 : does not exist [ 49.463230][ T304] playstation 0003:054C:0DF2.0007: Failed to create dualsense. [ 49.468562][ T329] usb 7-1: USB disconnect, device number 3 [ 49.499186][ T304] playstation: probe of 0003:054C:0DF2.0007 failed with error -22 [ 49.553025][ T1475] F2FS-fs (loop2): Invalid SB checksum offset: 0 [ 49.574794][ T1475] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 49.599266][ T1475] F2FS-fs (loop2): invalid crc value [ 49.616268][ T304] usb 1-1: USB disconnect, device number 2 [ 49.632025][ T1475] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 49.668573][ T1475] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 49.676661][ T1475] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 49.685146][ T340] udevd[340]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 50.010174][ T28] audit: type=1400 audit(1775086644.964:328): avc: denied { remount } for pid=1474 comm="syz.2.496" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 50.040797][ T1475] F2FS-fs (loop2): Start checkpoint disabled! [ 50.047723][ T1475] syz.2.496: attempt to access beyond end of device [ 50.047723][ T1475] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 50.071607][ T1475] F2FS-fs (loop2): f2fs_disable_checkpoint() finish, err:-5 [ 50.217583][ T340] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 50.253450][ T1508] netlink: 32 bytes leftover after parsing attributes in process `syz.0.507'. [ 50.332101][ T1514] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 50.348836][ T1514] ext4 filesystem being mounted at /66/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 50.455742][ T812] EXT4-fs (loop6): unmounting filesystem. [ 50.677077][ T288] kernel write not supported for file /264/attr/exec (pid: 288 comm: kworker/0:2) [ 50.680069][ T1532] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 50.724007][ T813] EXT4-fs (loop7): unmounting filesystem. [ 50.733311][ T1543] binder: 1542:1543 ioctl c0306201 200000000640 returned -22 [ 50.753927][ T1547] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=none:owns=io+mem [ 50.794382][ T304] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 50.805292][ T1551] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 50.936952][ T1568] process 'syz.7.532' launched './file1' with NULL argv: empty string added [ 50.984277][ T304] usb 3-1: Using ep0 maxpacket: 16 [ 50.998138][ T304] usb 3-1: unable to get BOS descriptor or descriptor too short [ 51.017180][ T304] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 51.031075][ T304] usb 3-1: can't read configurations, error -71 [ 51.085682][ T1579] set_capacity_and_notify: 11 callbacks suppressed [ 51.085703][ T1579] loop0: detected capacity change from 0 to 128 [ 51.158243][ T1579] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 51.214742][ T1579] ext4 filesystem being mounted at /131/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 51.302052][ T1588] loop7: detected capacity change from 0 to 512 [ 51.362662][ T1588] netlink: 277 bytes leftover after parsing attributes in process `syz.7.541'. [ 51.434297][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 51.466276][ T283] EXT4-fs (loop0): unmounting filesystem. [ 51.749634][ T1613] loop2: detected capacity change from 0 to 512 [ 51.777007][ T1613] EXT4-fs (loop2): Test dummy encryption mode enabled [ 51.792060][ T1615] tap0: tun_chr_ioctl cmd 2147767520 [ 51.799969][ T1613] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 51.823314][ T1613] EXT4-fs (loop2): Errors on filesystem, clearing orphan list. [ 51.840803][ T1613] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 51.915612][ T1613] EXT4-fs (loop2): re-mounted. Quota mode: writeback. [ 51.945404][ T1613] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 51.964143][ T1613] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1111: group 0, block bitmap and bg descriptor inconsistent: 212 vs 220 free clusters [ 51.965351][ T1571] loop6: detected capacity change from 0 to 131072 [ 51.992953][ T1571] F2FS-fs (loop6): Invalid log sectorsize (67108873) [ 52.028437][ T285] EXT4-fs (loop2): unmounting filesystem. [ 52.028783][ T1571] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 52.054326][ T1571] F2FS-fs (loop6): invalid crc value [ 52.084299][ T1571] F2FS-fs (loop6): Found nat_bits in checkpoint [ 52.144829][ T1632] loop2: detected capacity change from 0 to 4096 [ 52.158378][ T1571] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 52.171393][ T1571] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4 [ 52.196209][ T1632] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 52.296373][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 52.296388][ T28] audit: type=1400 audit(1775086647.254:336): avc: denied { append } for pid=1636 comm="syz.7.559" name="loop7" dev="devtmpfs" ino=125 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 52.370199][ T285] EXT4-fs (loop2): unmounting filesystem. [ 52.460295][ T28] audit: type=1400 audit(1775086647.414:337): avc: denied { nlmsg_write } for pid=1648 comm="syz.0.565" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 52.514382][ T28] audit: type=1400 audit(1775086647.444:338): avc: denied { audit_write } for pid=1648 comm="syz.0.565" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 52.552005][ T28] audit: type=1107 audit(1775086647.444:339): pid=1648 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 52.666275][ T28] audit: type=1400 audit(1775086647.624:340): avc: denied { setopt } for pid=1666 comm="syz.2.572" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 52.844460][ T1671] af_packet: tpacket_rcv: packet too big, clamped from 44 to 4294967272. macoff=96 [ 52.959343][ T1677] loop0: detected capacity change from 0 to 128 [ 52.966089][ T1571] F2FS-fs (loop6): Start checkpoint disabled! [ 52.972653][ T1571] F2FS-fs (loop6): f2fs_disable_checkpoint() finish, err:0 [ 53.012127][ T1571] F2FS-fs (loop6): inconsistent node block, nid:8, node_footer[nid:5,ino:5,ofs:0,cpver:1219692001,blkaddr:15361] [ 53.058810][ T28] audit: type=1400 audit(1775086648.014:341): avc: denied { getopt } for pid=1685 comm="syz.2.581" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 53.142485][ T1696] netlink: 72 bytes leftover after parsing attributes in process `syz.0.584'. [ 53.174503][ T1696] netlink: 12 bytes leftover after parsing attributes in process `syz.0.584'. [ 53.194490][ T1696] netlink: 8 bytes leftover after parsing attributes in process `syz.0.584'. [ 53.224263][ T1696] netlink: 8 bytes leftover after parsing attributes in process `syz.0.584'. [ 53.314663][ T28] audit: type=1400 audit(1775086648.264:342): avc: denied { getopt } for pid=1709 comm="syz.2.593" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 53.442133][ T1720] netlink: 20 bytes leftover after parsing attributes in process `syz.0.598'. [ 53.476112][ T28] audit: type=1400 audit(1775086648.434:343): avc: denied { read } for pid=141 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 53.507628][ T1722] can0: slcan on ttyS3. [ 53.540353][ T28] audit: type=1400 audit(1775086648.454:344): avc: denied { search } for pid=141 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 53.594688][ T1722] can0 (unregistered): slcan off ttyS3. [ 53.607701][ T1726] can0: slcan on ttyS3. [ 53.615524][ T28] audit: type=1400 audit(1775086648.454:345): avc: denied { read } for pid=141 comm="dhcpcd" name="n15" dev="tmpfs" ino=4059 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 53.674307][ T1731] user requested TSC rate below hardware speed [ 53.697285][ T1737] netlink: 48 bytes leftover after parsing attributes in process `syz.2.603'. [ 53.744327][ T1721] can0 (unregistered): slcan off ttyS3. [ 53.785764][ T1743] loop2: detected capacity change from 0 to 256 [ 53.846532][ T1743] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x246f1341, utbl_chksum : 0xe619d30d) [ 53.887116][ T1754] netlink: 4 bytes leftover after parsing attributes in process `syz.0.607'. [ 54.189264][ T1770] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 54.221350][ T1770] syzkaller0: linktype set to 780 [ 54.478067][ T1695] loop5: detected capacity change from 0 to 131072 [ 54.499474][ T1695] F2FS-fs (loop5): Test dummy encryption mode enabled [ 54.551421][ T1695] F2FS-fs (loop5): invalid crc value [ 54.601230][ T1695] F2FS-fs (loop5): Found nat_bits in checkpoint [ 54.714306][ T1695] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 54.987324][ T1832] tap0: tun_chr_ioctl cmd 1074025676 [ 55.003356][ T1832] tap0: owner set to 0 [ 55.018280][ T1760] loop0: detected capacity change from 0 to 131072 [ 55.033174][ T1760] F2FS-fs (loop0): Unrecognized mount option "@TAkfOm*x0 ԝӘ*&" or missing value [ 55.404499][ T1859] loop6: detected capacity change from 0 to 1024 [ 55.456644][ T1859] EXT4-fs: Ignoring removed bh option [ 55.499631][ T1859] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 55.512400][ T1859] EXT4-fs (loop6): shut down requested (1) [ 55.521156][ T1859] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop6 ino=12 [ 55.531197][ T1859] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop6 ino=12 [ 55.556433][ T812] EXT4-fs (loop6): unmounting filesystem. [ 55.629455][ T1881] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 55.684009][ T1881] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 55.756823][ T857] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 55.860546][ T1909] bridge0: port 3(syz_tun) entered blocking state [ 55.868449][ T1909] bridge0: port 3(syz_tun) entered disabled state [ 55.876555][ T1909] device syz_tun entered promiscuous mode [ 55.883543][ T1909] bridge0: port 3(syz_tun) entered blocking state [ 55.891335][ T1909] bridge0: port 3(syz_tun) entered forwarding state [ 55.904367][ T24] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 55.971607][ T1905] SELinux: failed to load policy [ 56.083207][ T1939] netlink: 8 bytes leftover after parsing attributes in process `syz.7.684'. [ 56.105787][ T24] usb 6-1: unable to get BOS descriptor or descriptor too short [ 56.117480][ T24] usb 6-1: not running at top speed; connect to a high speed hub [ 56.127583][ T1941] netlink: 'syz.7.685': attribute type 11 has an invalid length. [ 56.136950][ T1941] netlink: 56 bytes leftover after parsing attributes in process `syz.7.685'. [ 56.149581][ T24] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 56.172471][ T24] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 56.195855][ T24] usb 6-1: string descriptor 0 read error: -22 [ 56.206213][ T24] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 56.217018][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 56.250476][ T24] usb 6-1: 0:2 : does not exist [ 57.045017][ T24] usb 6-1: 5:0: cannot get min/max values for control 3 (id 5) [ 57.057499][ T24] usb 6-1: 5:0: failed to get current value for ch 1 (-22) [ 57.072099][ T24] usb 6-1: USB disconnect, device number 5 [ 57.124381][ T304] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 57.242805][ T1981] set_capacity_and_notify: 1 callbacks suppressed [ 57.242826][ T1981] loop7: detected capacity change from 0 to 512 [ 57.274341][ T1981] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 57.282168][ T354] udevd[354]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 57.294508][ T1981] EXT4-fs (loop7): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 57.306269][ T304] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 57.317968][ T1981] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 57.330477][ T1981] EXT4-fs (loop7): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 57.331478][ T304] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 57.352759][ T304] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 57.372965][ T304] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 57.386918][ T1981] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 57.392771][ T304] usb 1-1: SerialNumber: syz [ 57.400321][ T1981] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=8802c198, mo2=0000] [ 57.422553][ T1981] EXT4-fs (loop7): write access unavailable, skipping orphan cleanup [ 57.433377][ T1981] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 57.438862][ T1988] loop6: detected capacity change from 0 to 512 [ 57.463469][ T1981] EXT4-fs error (device loop7): ext4_validate_block_bitmap:438: comm syz.7.702: bg 0: block 34: padding at end of block bitmap is not set [ 57.492909][ T813] EXT4-fs (loop7): unmounting filesystem. [ 57.506571][ T1988] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 57.517238][ T1988] ext4 filesystem being mounted at /97/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.546116][ T1988] EXT4-fs (loop6): shut down requested (2) [ 57.597061][ T812] EXT4-fs (loop6): unmounting filesystem. [ 57.615585][ T304] usb 1-1: 0:2 : does not exist [ 57.631532][ T304] usb 1-1: USB disconnect, device number 3 [ 57.647094][ T354] udevd[354]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 57.693150][ T28] kauditd_printk_skb: 35 callbacks suppressed [ 57.693167][ T28] audit: type=1400 audit(1775086652.644:381): avc: denied { ioctl } for pid=2004 comm="syz.2.710" path="pid:[4026532372]" dev="nsfs" ino=4026532372 ioctlcmd=0xb704 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 57.756308][ T2007] netlink: 12 bytes leftover after parsing attributes in process `syz.2.711'. [ 57.824300][ T19] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 57.884319][ T880] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 58.014684][ T19] usb 8-1: Using ep0 maxpacket: 16 [ 58.024397][ T19] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 58.044747][ T19] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 58.064689][ T19] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 58.077914][ T880] usb 6-1: config 1 has an invalid interface number: 27 but max is 1 [ 58.084353][ T19] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 58.094833][ T880] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 58.104400][ T19] usb 8-1: SerialNumber: syz [ 58.109353][ T880] usb 6-1: config 1 has 3 interfaces, different from the descriptor's value: 2 [ 58.119978][ T880] usb 6-1: config 1 has no interface number 2 [ 58.123460][ T19] usb 8-1: 0:2 : does not exist [ 58.131386][ T880] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 58.159968][ T880] usb 6-1: config 1 interface 27 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 58.170587][ T880] usb 6-1: config 1 interface 27 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 58.184616][ T880] usb 6-1: config 1 interface 27 has no altsetting 0 [ 58.202648][ T880] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 58.226089][ T880] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.234468][ T880] usb 6-1: Product: syz [ 58.254181][ T880] usb 6-1: Manufacturer: syz [ 58.259710][ T880] usb 6-1: SerialNumber: syz [ 58.288078][ T880] usb 6-1: selecting invalid altsetting 1 [ 58.343223][ T2038] netlink: 32 bytes leftover after parsing attributes in process `syz.6.727'. [ 58.513955][ T2009] loop2: detected capacity change from 0 to 131072 [ 58.531545][ T24] usb 8-1: USB disconnect, device number 4 [ 58.573763][ T2009] F2FS-fs (loop2): Found nat_bits in checkpoint [ 58.650736][ T2043] mmap: syz.6.729 (2043) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 58.662876][ T2009] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 58.676591][ T880] cdc_ncm 6-1:1.0: failed GET_NTB_PARAMETERS [ 58.693671][ T880] cdc_ncm 6-1:1.0: bind() failure [ 58.701438][ T880] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 58.714387][ T880] cdc_ncm 6-1:1.1: bind() failure [ 58.770815][ T2009] F2FS-fs (loop2): lookup inode (7) has corrupted xattr [ 58.773890][ T2051] loop0: detected capacity change from 0 to 40427 [ 58.786249][ T2051] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 58.797721][ T2051] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 58.807249][ T2009] F2FS-fs (loop2): lookup inode (7) has corrupted xattr [ 58.819189][ T2051] F2FS-fs (loop0): invalid crc value [ 58.860706][ T2051] F2FS-fs (loop0): Found nat_bits in checkpoint [ 58.931117][ T2009] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=fff70000, run fsck to fix. [ 58.946322][ T880] usb 6-1: USB disconnect, device number 6 [ 58.952706][ T2009] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=fff70000, run fsck to fix. [ 58.963982][ T2051] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 58.972873][ T2051] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 58.983009][ T2069] loop6: detected capacity change from 0 to 128 [ 59.023661][ T28] audit: type=1400 audit(1775086653.974:382): avc: denied { mount } for pid=2068 comm="syz.6.737" name="/" dev="loop6" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 59.092921][ T28] audit: type=1400 audit(1775086653.984:383): avc: denied { ioctl } for pid=2050 comm="syz.0.733" path="/171/file0/file0" dev="loop0" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 59.134925][ T28] audit: type=1400 audit(1775086653.984:384): avc: denied { rename } for pid=2050 comm="syz.0.733" name="file0" dev="loop0" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 59.187284][ T28] audit: type=1400 audit(1775086654.014:385): avc: denied { rename } for pid=2050 comm="syz.0.733" name="file0" dev="loop0" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 59.254661][ T28] audit: type=1400 audit(1775086654.014:386): avc: denied { unlink } for pid=2050 comm="syz.0.733" name="file1" dev="loop0" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 59.331671][ T28] audit: type=1400 audit(1775086654.034:387): avc: denied { unmount } for pid=812 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 59.388585][ T2062] syz.2.712 (2062) used greatest stack depth: 20288 bytes left [ 59.450218][ T2073] loop7: detected capacity change from 0 to 40427 [ 59.495155][ T2088] tipc: Started in network mode [ 59.508485][ T2088] tipc: Node identity ac1414aa, cluster identity 4711 [ 59.529326][ T2088] tipc: Enabling of bearer rejected, failed to enable media [ 59.621197][ T2100] loop0: detected capacity change from 0 to 512 [ 59.656171][ T28] audit: type=1400 audit(1775086654.614:388): avc: denied { write } for pid=2101 comm="syz.7.754" path="socket:[23467]" dev="sockfs" ino=23467 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 59.694415][ T2100] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 59.728935][ T2100] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 59.753380][ T2100] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 59.770564][ T2100] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 59.782143][ T2100] System zones: 0-2, 18-18, 34-35 [ 59.800333][ T2100] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 60.137889][ T41] Bluetooth: hci0: Frame reassembly failed (-84) [ 60.154341][ T2143] Bluetooth: hci0: Frame reassembly failed (-84) [ 60.197716][ T2153] loop0: detected capacity change from 0 to 1024 [ 60.225004][ T2153] EXT4-fs: Ignoring removed nomblk_io_submit option [ 60.234673][ T2159] loop2: detected capacity change from 0 to 256 [ 60.245033][ T2153] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 60.263893][ T2159] exfat: Unknown parameter 'di*H~vscar' [ 60.272956][ T2159] netlink: 8 bytes leftover after parsing attributes in process `syz.2.779'. [ 60.287363][ T2153] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e841c018, mo2=0003] [ 60.323027][ T2153] System zones: 0-1, 3-36 [ 60.409159][ T28] audit: type=1326 audit(1775086655.364:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2163 comm="syz.7.781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f828b19c819 code=0x7ffc0000 [ 60.464497][ T28] audit: type=1326 audit(1775086655.394:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2163 comm="syz.7.781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f828b19c819 code=0x7ffc0000 [ 60.506647][ T2170] loop2: detected capacity change from 0 to 512 [ 60.513887][ T2156] F2FS-fs (loop5): invalid crc value [ 60.535304][ T2174] netlink: 4 bytes leftover after parsing attributes in process `syz.0.786'. [ 60.545226][ T2156] F2FS-fs (loop5): Found nat_bits in checkpoint [ 60.577840][ T2170] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a802c01c, mo2=0002] [ 60.604374][ T2170] System zones: 0-2, 18-18, 34-35 [ 60.614613][ T2174] netlink: 'syz.0.786': attribute type 1 has an invalid length. [ 60.644509][ T2170] ext4 filesystem being mounted at /163/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 60.725036][ T2156] F2FS-fs (loop5): Start checkpoint disabled! [ 60.747240][ T2179] EXT4-fs: Ignoring removed orlov option [ 60.756901][ T2156] F2FS-fs (loop5): f2fs_disable_checkpoint() finish, err:0 [ 60.780685][ T2156] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 60.792938][ T2179] netlink: 277 bytes leftover after parsing attributes in process `syz.0.787'. [ 60.847213][ T2156] syz.5.778: attempt to access beyond end of device [ 60.847213][ T2156] loop5: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 60.881805][ T2156] syz.5.778: attempt to access beyond end of device [ 60.881805][ T2156] loop5: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 60.912774][ T2191] FAT-fs (loop2): Directory bread(block 64) failed [ 60.937478][ T2191] FAT-fs (loop2): Directory bread(block 65) failed [ 60.948714][ T2156] syz.5.778: attempt to access beyond end of device [ 60.948714][ T2156] loop5: rw=2049, sector=45112, nr_sectors = 8 limit=40427 [ 60.952037][ T2191] FAT-fs (loop2): Directory bread(block 66) failed [ 61.000454][ T2191] FAT-fs (loop2): Directory bread(block 67) failed [ 61.004170][ T2156] syz.5.778: attempt to access beyond end of device [ 61.004170][ T2156] loop5: rw=2049, sector=45120, nr_sectors = 8 limit=40427 [ 61.017045][ T2191] FAT-fs (loop2): Directory bread(block 68) failed [ 61.028619][ T2156] syz.5.778: attempt to access beyond end of device [ 61.028619][ T2156] loop5: rw=2049, sector=45128, nr_sectors = 8 limit=40427 [ 61.051540][ T2199] netlink: 36 bytes leftover after parsing attributes in process `syz.0.795'. [ 61.057744][ T2191] FAT-fs (loop2): Directory bread(block 69) failed [ 61.061338][ T2199] netlink: 12 bytes leftover after parsing attributes in process `syz.0.795'. [ 61.077128][ T2191] FAT-fs (loop2): Directory bread(block 70) failed [ 61.094384][ T2191] FAT-fs (loop2): Directory bread(block 71) failed [ 61.125358][ T2201] FAT-fs (loop0): Directory bread(block 64) failed [ 61.139788][ T2191] FAT-fs (loop2): Directory bread(block 72) failed [ 61.139798][ T2201] FAT-fs (loop0): Directory bread(block 65) failed [ 61.139893][ T2201] FAT-fs (loop0): Directory bread(block 66) failed [ 61.155135][ T10] kworker/u4:1: attempt to access beyond end of device [ 61.155135][ T10] loop5: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 61.166042][ T2201] FAT-fs (loop0): Directory bread(block 67) failed [ 61.184290][ T2191] FAT-fs (loop2): Directory bread(block 73) failed [ 61.192646][ T2201] FAT-fs (loop0): Directory bread(block 68) failed [ 61.201038][ T2201] FAT-fs (loop0): Directory bread(block 69) failed [ 61.209313][ T2201] FAT-fs (loop0): Directory bread(block 70) failed [ 61.216815][ T2201] FAT-fs (loop0): Directory bread(block 71) failed [ 61.224140][ T2201] FAT-fs (loop0): Directory bread(block 72) failed [ 61.231129][ T2201] FAT-fs (loop0): Directory bread(block 73) failed [ 61.267955][ T2201] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 61.290417][ T2191] syz.2.790: attempt to access beyond end of device [ 61.290417][ T2191] loop2: rw=524288, sector=1160, nr_sectors = 4 limit=256 [ 61.334021][ T2191] syz.2.790: attempt to access beyond end of device [ 61.334021][ T2191] loop2: rw=0, sector=1160, nr_sectors = 4 limit=256 [ 61.378414][ T2191] syz.2.790: attempt to access beyond end of device [ 61.378414][ T2191] loop2: rw=0, sector=1160, nr_sectors = 4 limit=256 [ 61.443753][ T2207] syz.0.796: attempt to access beyond end of device [ 61.443753][ T2207] loop0: rw=2049, sector=1224, nr_sectors = 128 limit=256 [ 61.475410][ T2205] EXT4-fs (loop5): Test dummy encryption mode enabled [ 61.503157][ T2205] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 61.513101][ T2205] System zones: 0-5 [ 61.528646][ T2215] tmpfs: Bad value for 'huge' [ 61.539451][ T2212] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 61.574661][ T2205] fs-verity: sha512 using implementation "sha512-avx2" [ 61.716447][ T2224] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3850: comm syz.2.804: Allocating blocks 497-513 which overlap fs metadata [ 61.761927][ T2220] EXT4-fs (loop2): pa ffff888116cb6540: logic 48, phys. 177, len 21 [ 61.770460][ T2220] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:4890: group 0, free 0, pa_free 1 [ 62.124753][ T2242] loop2: p1 p2 p3 p4 [ 62.129498][ T2242] loop2: p1 size 196608 extends beyond EOD, truncated [ 62.137860][ T2242] loop2: p2 size 150994944 extends beyond EOD, truncated [ 62.146021][ T2242] loop2: p3 size 66846464 extends beyond EOD, truncated [ 62.153835][ T2242] loop2: p4 size 479744 extends beyond EOD, truncated [ 62.160774][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 62.164818][ T1479] Bluetooth: hci0: command 0x1003 tx timeout [ 62.273664][ T354] udevd[354]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 62.273694][ T514] udevd[514]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 62.296134][ T516] udevd[516]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 62.308070][ T340] udevd[340]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 62.324312][ T6] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 62.514341][ T6] usb 1-1: Using ep0 maxpacket: 16 [ 62.523438][ T6] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 62.536605][ T6] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 62.547056][ T6] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 62.556997][ T6] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 62.565240][ T6] usb 1-1: SerialNumber: syz [ 62.576172][ T6] usb 1-1: 0:2 : does not exist [ 62.593977][ T2264] netlink: 'syz.5.821': attribute type 2 has an invalid length. [ 62.607834][ T2266] set_capacity_and_notify: 8 callbacks suppressed [ 62.607856][ T2266] loop6: detected capacity change from 0 to 256 [ 62.623118][ T2266] exfat: Deprecated parameter 'utf8' [ 62.628568][ T2266] exfat: Deprecated parameter 'namecase' [ 62.635140][ T2266] exfat: Deprecated parameter 'namecase' [ 62.643588][ T2266] exfat: Deprecated parameter 'utf8' [ 62.655866][ T2268] loop5: detected capacity change from 0 to 256 [ 62.660307][ T2266] exFAT-fs (loop6): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d) [ 62.689693][ T2268] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x246f1341, utbl_chksum : 0xe619d30d) [ 62.726553][ T28] kauditd_printk_skb: 47 callbacks suppressed [ 62.726569][ T28] audit: type=1400 audit(1775086657.684:438): avc: denied { read write open } for pid=2267 comm="syz.5.823" path="/58/file0/file1" dev="loop5" ino=1048648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 62.762296][ T2270] loop6: detected capacity change from 0 to 1024 [ 62.815219][ T28] audit: type=1400 audit(1775086657.684:439): avc: denied { map } for pid=2267 comm="syz.5.823" path="/58/file0/file1" dev="loop5" ino=1048648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 62.829217][ T2277] loop5: detected capacity change from 0 to 256 [ 62.879275][ T2270] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:3850: comm syz.6.824: Allocating blocks 497-513 which overlap fs metadata [ 62.899685][ T2277] FAT-fs (loop5): Directory bread(block 64) failed [ 62.907631][ T2277] FAT-fs (loop5): Directory bread(block 65) failed [ 62.914378][ T2277] FAT-fs (loop5): Directory bread(block 66) failed [ 62.921379][ T2277] FAT-fs (loop5): Directory bread(block 67) failed [ 62.928305][ T2277] FAT-fs (loop5): Directory bread(block 68) failed [ 62.930714][ T2269] EXT4-fs (loop6): pa ffff888116d82540: logic 48, phys. 177, len 21 [ 62.935237][ T2277] FAT-fs (loop5): Directory bread(block 69) failed [ 62.943307][ T2269] EXT4-fs error (device loop6): ext4_mb_release_inode_pa:4890: group 0, free 0, pa_free 1 [ 62.950053][ T2277] FAT-fs (loop5): Directory bread(block 70) failed [ 62.966666][ T2277] FAT-fs (loop5): Directory bread(block 71) failed [ 62.973360][ T2277] FAT-fs (loop5): Directory bread(block 72) failed [ 62.980267][ T2277] FAT-fs (loop5): Directory bread(block 73) failed [ 62.997927][ T6] usb 1-1: USB disconnect, device number 4 [ 63.041973][ T2289] loop5: detected capacity change from 0 to 128 [ 63.138640][ T28] audit: type=1400 audit(1775086658.094:440): avc: denied { unlink } for pid=2296 comm="syz.6.836" name="#5" dev="tmpfs" ino=756 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 63.576132][ T2319] loop2: detected capacity change from 0 to 128 [ 63.700976][ T2313] loop0: detected capacity change from 0 to 40427 [ 63.728973][ T2313] F2FS-fs (loop0): fault_injection options not supported [ 63.737186][ T2313] F2FS-fs (loop0): invalid crc value [ 63.744118][ T2313] F2FS-fs (loop0): Found nat_bits in checkpoint [ 63.787381][ T2313] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 63.873150][ T28] audit: type=1400 audit(1775086658.824:441): avc: denied { unmount } for pid=2336 comm="syz.7.852" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 63.991064][ T2343] loop7: detected capacity change from 0 to 512 [ 64.007974][ T2343] /dev/loop7: Can't open blockdev [ 64.053299][ T2347] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 64.070773][ T354] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 64.212080][ T28] audit: type=1400 audit(1775086659.164:442): avc: denied { map } for pid=2358 comm="syz.0.863" path="/dev/zero" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 64.489470][ T2321] loop5: detected capacity change from 0 to 131072 [ 64.501570][ T2321] F2FS-fs (loop5): Segment count (31) mismatch with total segments from devices (0) [ 64.521594][ T2321] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 64.533451][ T2321] F2FS-fs (loop5): invalid crc value [ 64.585875][ T2321] F2FS-fs (loop5): Found nat_bits in checkpoint [ 64.662179][ T2321] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 64.672635][ T2321] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 64.689651][ T2321] F2FS-fs (loop5): f2fs_fill_dentries: corrupted namelen=24152, run fsck to fix. [ 64.699873][ T2321] F2FS-fs (loop5): checksum invalid, nid = 4, ino_of_node = 4, efdbe231 vs. 15bb5891 [ 64.782156][ T2386] loop6: detected capacity change from 0 to 256 [ 64.885382][ T28] audit: type=1400 audit(1775086659.844:443): avc: denied { map } for pid=2389 comm="syz.6.876" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=179 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 65.053743][ T2397] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:3850: comm syz.5.871: Allocating blocks 497-513 which overlap fs metadata [ 65.086045][ T2403] ext4 filesystem being mounted at /153/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 65.099052][ T2396] EXT4-fs (loop5): pa ffff888116d82dc8: logic 48, phys. 177, len 21 [ 65.108380][ T2396] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:4890: group 0, free 0, pa_free 1 [ 65.258559][ T28] audit: type=1400 audit(1775086660.214:444): avc: denied { getopt } for pid=2420 comm="syz.5.887" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 65.339020][ T28] audit: type=1400 audit(1775086660.294:445): avc: denied { watch_reads } for pid=2428 comm="syz.0.892" path="/203/file1" dev="tmpfs" ino=1080 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 65.355594][ T2427] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001e4a3, chksum : 0xe65d9f0a, utbl_chksum : 0x7319d30d) [ 65.465674][ T28] audit: type=1400 audit(1775086660.424:446): avc: denied { rename } for pid=2424 comm="syz.5.890" name="file0" dev="loop5" ino=1048653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 65.544757][ T28] audit: type=1400 audit(1775086660.424:447): avc: denied { reparent } for pid=2424 comm="syz.5.890" name="file0" dev="loop5" ino=1048653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 65.704038][ T19] kernel write not supported for file /cpu/0/msr (pid: 19 comm: kworker/0:1) [ 65.782333][ T2457] binder: BINDER_SET_CONTEXT_MGR already set [ 65.788454][ T2457] binder: 2456:2457 ioctl 4018620d 200000000140 returned -16 [ 66.224700][ T2509] dvmrp1: tun_chr_ioctl cmd 2148553947 [ 66.439095][ T2522] EXT4-fs: Ignoring removed nomblk_io_submit option [ 66.446228][ T2522] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 66.465774][ T2522] EXT4-fs mount: 17 callbacks suppressed [ 66.465793][ T2522] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 66.476487][ T2524] /dev/loop7: Can't open blockdev [ 66.494399][ T880] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 66.521153][ T782] EXT4-fs (loop5): unmounting filesystem. [ 66.653021][ T2538] netlink: 24 bytes leftover after parsing attributes in process `syz.5.940'. [ 66.695345][ T880] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 66.711640][ T880] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 66.728728][ T880] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 66.744704][ T880] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 66.753940][ T880] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.763637][ T880] usb 1-1: config 0 descriptor?? [ 66.771387][ T2542] netem: change failed [ 67.113189][ T2556] F2FS-fs (loop6): invalid crc value [ 67.135249][ T2556] F2FS-fs (loop6): Found nat_bits in checkpoint [ 67.178522][ T880] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 67.192939][ T2576] netlink: 20 bytes leftover after parsing attributes in process `syz.7.958'. [ 67.196501][ T880] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 67.212644][ T880] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 67.221058][ T2576] netlink: 20 bytes leftover after parsing attributes in process `syz.7.958'. [ 67.227166][ T880] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 67.239072][ T2556] F2FS-fs (loop6): Start checkpoint disabled! [ 67.245578][ T880] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 67.253506][ T880] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 67.261360][ T880] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 67.268865][ T2556] F2FS-fs (loop6): f2fs_disable_checkpoint() finish, err:0 [ 67.282172][ T880] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 67.291718][ T2556] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 67.314480][ T2579] netlink: 24 bytes leftover after parsing attributes in process `syz.7.959'. [ 67.325719][ T880] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 67.333176][ T880] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 67.351797][ T880] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 67.369670][ T880] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 67.383686][ T2556] bio_check_eod: 8 callbacks suppressed [ 67.383707][ T2556] syz.6.949: attempt to access beyond end of device [ 67.383707][ T2556] loop6: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 67.406322][ T2581] /dev/loop7: Can't open blockdev [ 67.413795][ T880] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 67.421672][ T880] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 67.429396][ T880] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 67.437270][ T2556] syz.6.949: attempt to access beyond end of device [ 67.437270][ T2556] loop6: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 67.451179][ T880] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 67.454999][ T2556] syz.6.949: attempt to access beyond end of device [ 67.454999][ T2556] loop6: rw=2049, sector=45112, nr_sectors = 8 limit=40427 [ 67.458690][ T880] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 67.480035][ T880] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 67.488030][ T880] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 67.495730][ T880] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 67.503554][ T880] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 67.511201][ T880] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 67.511951][ T2556] syz.6.949: attempt to access beyond end of device [ 67.511951][ T2556] loop6: rw=2049, sector=45120, nr_sectors = 8 limit=40427 [ 67.518878][ T880] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 67.540687][ T2556] syz.6.949: attempt to access beyond end of device [ 67.540687][ T2556] loop6: rw=2049, sector=45128, nr_sectors = 8 limit=40427 [ 67.555047][ T880] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 67.562650][ T880] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 67.570515][ T2556] syz.6.949: attempt to access beyond end of device [ 67.570515][ T2556] loop6: rw=2049, sector=45136, nr_sectors = 16 limit=40427 [ 67.584539][ T880] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 67.592314][ T880] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 67.600282][ T2556] syz.6.949: attempt to access beyond end of device [ 67.600282][ T2556] loop6: rw=2049, sector=45152, nr_sectors = 8 limit=40427 [ 67.614545][ T2556] syz.6.949: attempt to access beyond end of device [ 67.614545][ T2556] loop6: rw=2049, sector=45160, nr_sectors = 8 limit=40427 [ 67.628517][ T880] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 67.634949][ T2556] syz.6.949: attempt to access beyond end of device [ 67.634949][ T2556] loop6: rw=2049, sector=45168, nr_sectors = 8 limit=40427 [ 67.636059][ T880] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 67.657255][ T880] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 67.664844][ T880] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 67.672513][ T880] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 67.680193][ T880] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 67.680764][ T2556] syz.6.949: attempt to access beyond end of device [ 67.680764][ T2556] loop6: rw=2049, sector=45176, nr_sectors = 8 limit=40427 [ 67.688032][ T880] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 67.724247][ T880] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 67.742029][ T880] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 67.759769][ T880] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 67.774262][ T880] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 67.782049][ T880] plantronics 0003:047F:FFFF.0008: No inputs registered, leaving [ 67.801470][ T340] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 67.811965][ T880] plantronics 0003:047F:FFFF.0008: hiddev96,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 67.825053][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 67.825067][ T28] audit: type=1400 audit(1775086662.784:453): avc: denied { remount } for pid=2580 comm="syz.7.960" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 67.858090][ T880] usb 1-1: USB disconnect, device number 5 [ 67.923621][ T2584] fido_id[2584]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 68.018587][ T28] audit: type=1400 audit(1775086662.974:454): avc: denied { shutdown } for pid=2587 comm="syz.6.961" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 68.062220][ T2593] set_capacity_and_notify: 8 callbacks suppressed [ 68.062238][ T2593] loop6: detected capacity change from 0 to 256 [ 68.116370][ T2593] FAT-fs (loop6): Directory bread(block 64) failed [ 68.129004][ T2569] loop5: detected capacity change from 0 to 131072 [ 68.133699][ T2593] FAT-fs (loop6): Directory bread(block 65) failed [ 68.152193][ T2593] FAT-fs (loop6): Directory bread(block 66) failed [ 68.159198][ T2593] FAT-fs (loop6): Directory bread(block 67) failed [ 68.165904][ T2593] FAT-fs (loop6): Directory bread(block 68) failed [ 68.172660][ T2593] FAT-fs (loop6): Directory bread(block 69) failed [ 68.180303][ T2593] FAT-fs (loop6): Directory bread(block 70) failed [ 68.187386][ T2569] F2FS-fs (loop5): Found nat_bits in checkpoint [ 68.204311][ T2593] FAT-fs (loop6): Directory bread(block 71) failed [ 68.218195][ T2593] FAT-fs (loop6): Directory bread(block 72) failed [ 68.234334][ T2593] FAT-fs (loop6): Directory bread(block 73) failed [ 68.250485][ T2593] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 68.302271][ T2569] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 68.567607][ T2616] loop7: detected capacity change from 0 to 40427 [ 68.715791][ T2628] loop0: detected capacity change from 0 to 2048 [ 68.767621][ T2628] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 68.781455][ T28] audit: type=1400 audit(1775086663.734:455): avc: denied { listen } for pid=2635 comm="syz.5.982" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 68.821827][ T28] audit: type=1400 audit(1775086663.774:456): avc: denied { ioctl } for pid=2627 comm="syz.0.981" path="/221/file0/file0/.pending_reads" dev="incremental-fs" ino=2 ioctlcmd=0x6721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 68.852374][ T283] EXT4-fs error (device loop0): ext4_readdir:263: inode #11: block 34: comm syz-executor: path /221/file0/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1025, size=2048 fake=0 [ 68.874866][ T283] EXT4-fs error (device loop0): ext4_empty_dir:3177: inode #11: block 34: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=4096, inode=0, rec_len=1025, size=2048 fake=0 [ 68.894576][ T283] EXT4-fs error (device loop0): ext4_readdir:263: inode #11: block 34: comm syz-executor: path /221/file0/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1025, size=2048 fake=0 [ 68.917363][ T283] EXT4-fs error (device loop0): ext4_empty_dir:3177: inode #11: block 34: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=4096, inode=0, rec_len=1025, size=2048 fake=0 [ 68.936937][ T283] EXT4-fs error (device loop0): ext4_readdir:263: inode #11: block 34: comm syz-executor: path /221/file0/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1025, size=2048 fake=0 [ 68.974371][ T283] EXT4-fs error (device loop0): ext4_empty_dir:3177: inode #11: block 34: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=4096, inode=0, rec_len=1025, size=2048 fake=0 [ 68.999877][ T283] EXT4-fs error (device loop0): ext4_readdir:263: inode #11: block 34: comm syz-executor: path /221/file0/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1025, size=2048 fake=0 [ 69.021223][ T283] EXT4-fs error (device loop0): ext4_empty_dir:3177: inode #11: block 34: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=4096, inode=0, rec_len=1025, size=2048 fake=0 [ 69.040479][ T283] EXT4-fs error (device loop0): ext4_readdir:263: inode #11: block 34: comm syz-executor: path /221/file0/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1025, size=2048 fake=0 [ 69.062551][ T283] EXT4-fs error (device loop0): ext4_empty_dir:3177: inode #11: block 34: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=4096, inode=0, rec_len=1025, size=2048 fake=0 [ 69.111197][ T28] audit: type=1400 audit(1775086664.064:457): avc: denied { read write } for pid=2644 comm="syz.5.986" name="ppp" dev="devtmpfs" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 69.137770][ T28] audit: type=1400 audit(1775086664.094:458): avc: denied { open } for pid=2644 comm="syz.5.986" path="/dev/ppp" dev="devtmpfs" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 69.165301][ T28] audit: type=1400 audit(1775086664.114:459): avc: denied { ioctl } for pid=2644 comm="syz.5.986" path="/dev/ppp" dev="devtmpfs" ino=158 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 69.217684][ T283] bridge0: port 3(syz_tun) entered disabled state [ 69.226186][ T283] device syz_tun left promiscuous mode [ 69.231958][ T283] bridge0: port 3(syz_tun) entered disabled state [ 69.357279][ T283] EXT4-fs (loop0): unmounting filesystem. [ 69.473329][ T2663] loop6: detected capacity change from 0 to 512 [ 69.488378][ T2663] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 69.499191][ T2663] EXT4-fs error (device loop6): ext4_validate_block_bitmap:429: comm syz.6.994: bg 0: block 5: invalid block bitmap [ 69.512076][ T2663] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6179: Corrupt filesystem [ 69.523956][ T2663] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #11: comm syz.6.994: invalid indirect mapped block 3 (level 2) [ 69.538052][ T2663] EXT4-fs (loop6): 1 orphan inode deleted [ 69.543863][ T2663] EXT4-fs (loop6): 1 truncate cleaned up [ 69.549925][ T2663] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 69.580043][ T812] EXT4-fs (loop6): unmounting filesystem. [ 69.615183][ T2664] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.622511][ T2664] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.637822][ T2664] device bridge_slave_0 entered promiscuous mode [ 69.656704][ T2664] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.666995][ T2664] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.677494][ T2664] device bridge_slave_1 entered promiscuous mode [ 69.700207][ T2669] SELinux: failed to load policy [ 69.782872][ T2664] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.790595][ T2664] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.799020][ T2664] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.807484][ T2664] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.839196][ T857] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.848005][ T857] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.855743][ T857] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.875572][ T10] tipc: Left network mode [ 69.881409][ T857] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.890778][ T857] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.898517][ T857] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.907120][ T857] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.916652][ T857] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.924753][ T857] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.933105][ T857] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.950522][ T857] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.968262][ T857] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.980329][ T2664] device veth0_vlan entered promiscuous mode [ 69.987468][ T857] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.004528][ T857] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.013657][ T857] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.022378][ T6] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 70.030349][ T857] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.039137][ T2664] device veth1_macvtap entered promiscuous mode [ 70.053566][ T857] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.076311][ T857] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.084635][ T28] audit: type=1400 audit(1775086665.034:460): avc: denied { mount } for pid=2664 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 70.173227][ T2687] loop8: detected capacity change from 0 to 512 [ 70.180492][ T2687] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 70.203609][ T2687] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 70.213563][ T2687] ext4 filesystem being mounted at /1/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 70.226768][ T6] usb 8-1: config 1 has an invalid interface number: 27 but max is 1 [ 70.235136][ T6] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 70.246072][ T6] usb 8-1: config 1 has 3 interfaces, different from the descriptor's value: 2 [ 70.258850][ T6] usb 8-1: config 1 has no interface number 2 [ 70.265051][ T6] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 70.276292][ T6] usb 8-1: config 1 interface 27 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 70.286701][ T6] usb 8-1: config 1 interface 27 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 70.301704][ T6] usb 8-1: config 1 interface 27 has no altsetting 0 [ 70.305098][ T2664] EXT4-fs (loop8): unmounting filesystem. [ 70.317195][ T6] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 70.333121][ T6] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.342081][ T6] usb 8-1: Product: syz [ 70.346867][ T6] usb 8-1: Manufacturer: syz [ 70.354823][ T6] usb 8-1: SerialNumber: syz [ 70.362008][ T6] usb 8-1: selecting invalid altsetting 1 [ 70.394371][ T880] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 70.495606][ T10] device bridge_slave_1 left promiscuous mode [ 70.502246][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.510362][ T10] device bridge_slave_0 left promiscuous mode [ 70.517143][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.525937][ T10] device veth1_macvtap left promiscuous mode [ 70.532179][ T10] device veth0_vlan left promiscuous mode [ 70.595369][ T880] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 70.607171][ T2681] loop6: detected capacity change from 0 to 131072 [ 70.615260][ T880] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 255 [ 70.626862][ T2681] F2FS-fs (loop6): Test dummy encryption mode enabled [ 70.635225][ T880] usb 6-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 70.644865][ T2681] F2FS-fs (loop6): invalid crc value [ 70.654331][ T880] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.674256][ T880] usb 6-1: Product: syz [ 70.678505][ T880] usb 6-1: Manufacturer: syz [ 70.683271][ T880] usb 6-1: SerialNumber: syz [ 70.683829][ T2681] F2FS-fs (loop6): Found nat_bits in checkpoint [ 70.714954][ T880] usb 6-1: config 0 descriptor?? [ 70.720451][ T2683] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 70.728308][ T2683] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 70.755029][ T2681] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 70.763949][ T6] cdc_ncm 8-1:1.0: failed GET_NTB_PARAMETERS [ 70.782821][ T6] cdc_ncm 8-1:1.0: bind() failure [ 70.794850][ T6] cdc_ncm 8-1:1.1: CDC Union missing and no IAD found [ 70.802008][ T6] cdc_ncm 8-1:1.1: bind() failure [ 70.814788][ T28] audit: type=1400 audit(1775086665.774:461): avc: denied { link } for pid=2680 comm="syz.6.999" name="file1" dev="loop6" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 70.941217][ T2683] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 70.948630][ T2683] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 71.025231][ T24] usb 8-1: USB disconnect, device number 5 [ 71.201231][ T2705] loop6: detected capacity change from 0 to 8192 [ 71.360750][ T880] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 71.374124][ T28] audit: type=1400 audit(1775086666.324:462): avc: denied { connect } for pid=2719 comm="syz.6.1013" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 71.426729][ T2726] loop6: detected capacity change from 0 to 512 [ 71.437208][ T2726] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 71.453167][ T2726] EXT4-fs (loop6): failed to open journal device unknown-block(0,0) -6 [ 71.476795][ T2726] loop6: detected capacity change from 0 to 2048 [ 71.510995][ T2726] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 71.527388][ T2726] EXT4-fs (loop6): shut down requested (2) [ 71.552937][ T2734] EXT4-fs (loop8): Test dummy encryption mode enabled [ 71.563915][ T812] EXT4-fs (loop6): unmounting filesystem. [ 71.573750][ T2734] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 71.588013][ T2734] ext4 filesystem being mounted at /8/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 71.641135][ T2664] EXT4-fs (loop8): unmounting filesystem. [ 71.771584][ T880] dm9601 6-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 71.783325][ T880] usb 6-1: USB disconnect, device number 7 [ 71.835067][ T288] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 71.848002][ T2752] F2FS-fs (loop8): fault_injection options not supported [ 71.855473][ T2752] F2FS-fs (loop8): Image doesn't support compression [ 71.862320][ T2752] F2FS-fs (loop8): Image doesn't support compression [ 71.869139][ T2752] F2FS-fs (loop8): fault_type options not supported [ 71.881897][ T2752] F2FS-fs (loop8): invalid crc value [ 71.889654][ T2752] F2FS-fs (loop8): Found nat_bits in checkpoint [ 71.923802][ T2752] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 72.024245][ T288] usb 8-1: Using ep0 maxpacket: 16 [ 72.030567][ T288] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 72.062001][ T288] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 72.072447][ T288] usb 8-1: config 0 interface 0 has no altsetting 0 [ 72.079903][ T288] usb 8-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 72.099895][ T288] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.109588][ T288] usb 8-1: config 0 descriptor?? [ 72.275418][ T2771] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 72.303262][ T2771] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 72.321615][ T2774] EXT4-fs (loop5): Test dummy encryption mode enabled [ 72.336534][ T2771] System zones: 1-12 [ 72.342183][ T2771] EXT4-fs (loop8): 1 truncate cleaned up [ 72.350536][ T2774] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 72.360143][ T2771] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 72.371859][ T2774] ext4 filesystem being mounted at /87/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 72.419734][ T2664] EXT4-fs error (device loop8): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /16/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 72.445511][ T782] EXT4-fs (loop5): unmounting filesystem. [ 72.459769][ T2664] EXT4-fs error (device loop8): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 72.481943][ T2664] EXT4-fs error (device loop8): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /16/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 72.513345][ T2664] EXT4-fs error (device loop8): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 72.528711][ T288] hid (null): invalid report_count -1537249567 [ 72.551198][ T288] hid (null): invalid report_count -831082605 [ 72.554107][ T2664] EXT4-fs error (device loop8): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /16/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 72.569054][ T288] hid (null): unknown global tag 0xc [ 72.603897][ T288] hid (null): bogus close delimiter [ 72.608863][ T2664] EXT4-fs error (device loop8): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 72.641701][ T2664] EXT4-fs error (device loop8): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /16/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 72.671964][ T2664] EXT4-fs error (device loop8): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 72.703136][ T2664] EXT4-fs error (device loop8): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /16/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 72.725135][ T2783] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 72.745548][ T880] usb 8-1: USB disconnect, device number 6 [ 72.752018][ T2783] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 72.755343][ T2664] EXT4-fs error (device loop8): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 72.789527][ T2783] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x5817f139, utbl_chksum : 0xe619d30d) [ 72.909813][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 72.909829][ T28] audit: type=1400 audit(1775086667.864:466): avc: denied { watch } for pid=2784 comm="syz.5.1038" path="/92/file0/file0" dev="loop5" ino=1048660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 72.923787][ T2664] EXT4-fs (loop8): unmounting filesystem. [ 72.963240][ T2789] EXT4-fs: Ignoring removed mblk_io_submit option [ 72.970939][ T2789] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 72.980828][ T2789] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e002c118, mo2=0002] [ 72.988937][ T2789] System zones: 1-12 [ 72.993876][ T2789] EXT4-fs error (device loop5): ext4_iget_extra_inode:4758: inode #15: comm syz.5.1040: corrupted in-inode xattr [ 73.010013][ T2789] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.1040: couldn't read orphan inode 15 (err -117) [ 73.025270][ T2789] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 73.070850][ T782] EXT4-fs (loop5): unmounting filesystem. [ 73.105992][ T2795] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 73.124271][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 73.142730][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.160152][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 73.169560][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.178454][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.187772][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.196397][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.206055][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.258732][ T2796] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.266744][ T2796] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.274169][ T2796] device bridge_slave_0 entered promiscuous mode [ 73.282990][ T2796] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.290504][ T2796] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.298643][ T2796] device bridge_slave_1 entered promiscuous mode [ 73.356301][ T2801] set_capacity_and_notify: 7 callbacks suppressed [ 73.356319][ T2801] loop5: detected capacity change from 0 to 8192 [ 73.369934][ T288] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 73.387491][ T28] audit: type=1400 audit(1775086668.344:467): avc: denied { mounton } for pid=2800 comm="syz.5.1045" path="/95/file1/bus" dev="loop5" ino=1048661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=file permissive=1 [ 73.429403][ T2796] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.436793][ T2796] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.444117][ T2796] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.451234][ T2796] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.496605][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.512243][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.522188][ T782] FAT-fs (loop5): error, invalid access to FAT (entry 0x0000e1b1) [ 73.530933][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.541088][ T782] FAT-fs (loop5): Filesystem has been set read-only [ 73.553066][ T2807] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 73.569390][ T288] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 73.588541][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 73.599640][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.608257][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 73.616260][ T288] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 73.616300][ T288] usb 7-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 73.616334][ T288] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.628095][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.653308][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.662650][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.673615][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.676632][ T288] usb 7-1: config 0 descriptor?? [ 73.685736][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.698232][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2: link becomes ready [ 73.706378][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.715162][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.722464][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.730983][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.739894][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.747103][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.770266][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.788801][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.802359][ T28] audit: type=1400 audit(1775086668.754:468): avc: denied { setopt } for pid=2811 comm="syz.5.1050" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 73.830123][ T2796] device veth0_vlan entered promiscuous mode [ 73.848157][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.858142][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.867990][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.876058][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.894109][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.905458][ T2818] tmpfs: Too few inodes for current use [ 73.911842][ T328] device bridge_slave_1 left promiscuous mode [ 73.920079][ T328] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.928297][ T328] device bridge_slave_0 left promiscuous mode [ 73.936368][ T328] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.945600][ T328] device veth1_macvtap left promiscuous mode [ 73.951803][ T328] device veth0_vlan left promiscuous mode [ 74.057650][ T2796] device veth1_macvtap entered promiscuous mode [ 74.067182][ T2814] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 74.089041][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.098191][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.111271][ T288] cp2112 0003:10C4:EA90.000A: unknown main item tag 0x0 [ 74.118899][ T288] cp2112 0003:10C4:EA90.000A: unknown main item tag 0x0 [ 74.126213][ T288] cp2112 0003:10C4:EA90.000A: unknown main item tag 0x0 [ 74.133332][ T288] cp2112 0003:10C4:EA90.000A: unknown main item tag 0x0 [ 74.140468][ T288] cp2112 0003:10C4:EA90.000A: unknown main item tag 0x0 [ 74.147892][ T288] cp2112 0003:10C4:EA90.000A: unknown main item tag 0x0 [ 74.155066][ T288] cp2112 0003:10C4:EA90.000A: unknown main item tag 0x0 [ 74.163055][ T288] cp2112 0003:10C4:EA90.000A: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.6-1/input0 [ 74.175304][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.183643][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.274899][ T28] audit: type=1400 audit(1775086669.234:469): avc: denied { name_bind } for pid=2833 comm="syz.7.1059" src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1 [ 74.311007][ T288] cp2112 0003:10C4:EA90.000A: error requesting version [ 74.321787][ T288] cp2112: probe of 0003:10C4:EA90.000A failed with error -71 [ 74.352706][ T288] usb 7-1: USB disconnect, device number 4 [ 74.383336][ T10] Bluetooth: hci0: Frame reassembly failed (-84) [ 74.392070][ T2844] fido_id[2844]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 74.961790][ T2868] loop6: detected capacity change from 0 to 2048 [ 74.988592][ T2868] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 75.018089][ T812] EXT4-fs (loop6): unmounting filesystem. [ 75.073780][ T2876] binder: 2875:2876 ioctl c018620c 200000000280 returned -1 [ 75.336547][ T2891] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.343892][ T2891] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.354790][ T2891] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 75.375172][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 75.401618][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.408988][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.420084][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 75.430754][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 75.440871][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 75.450486][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 75.470031][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 75.480154][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 75.490936][ T2900] loop5: detected capacity change from 0 to 512 [ 75.498764][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 75.508309][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 75.535561][ T2900] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 75.545971][ T2900] ext4 filesystem being mounted at /106/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 75.637597][ T2914] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1111: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 75.701477][ T2899] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 1216 with max blocks 32 with error 28 [ 75.714642][ T2899] EXT4-fs (loop5): This should not happen!! Data will be lost [ 75.714642][ T2899] [ 75.725932][ T2899] EXT4-fs (loop5): Total free blocks count 0 [ 75.732226][ T2899] EXT4-fs (loop5): Free/Dirty block details [ 75.738823][ T2899] EXT4-fs (loop5): free_blocks=65281 [ 75.744313][ T2899] EXT4-fs (loop5): dirty_blocks=32 [ 75.749820][ T2899] EXT4-fs (loop5): Block reservation details [ 75.756007][ T2899] EXT4-fs (loop5): i_reserved_data_blocks=32 [ 75.771528][ T782] EXT4-fs (loop5): unmounting filesystem. [ 75.780851][ T2920] loop6: detected capacity change from 0 to 8192 [ 75.837913][ T2926] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000000000003.c,i Qכ [ 75.878934][ T2929] loop5: detected capacity change from 0 to 128 [ 75.915269][ T2929] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 75.924629][ T2929] ext4 filesystem being mounted at /109/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 75.988950][ T782] EXT4-fs (loop5): unmounting filesystem. [ 75.991289][ T812] FAT-fs (loop6): error, invalid access to FAT (entry 0x0000e1b1) [ 76.002982][ T812] FAT-fs (loop6): Filesystem has been set read-only [ 76.394262][ T1478] Bluetooth: hci0: command 0x1003 tx timeout [ 76.395511][ T2243] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 76.401750][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 76.452655][ T2951] loop9: detected capacity change from 0 to 2048 [ 76.502413][ T2951] Alternate GPT is invalid, using primary GPT. [ 76.509155][ T2951] loop9: p1 p2 p3 [ 76.519920][ T2955] loop7: detected capacity change from 0 to 8192 [ 76.578964][ T354] I/O error, dev loop7, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 76.711053][ T2964] SELinux: policydb table sizes (8,10551305) do not match mine (8,9) [ 76.727297][ T2949] loop6: detected capacity change from 0 to 40427 [ 76.734391][ T2964] SELinux: failed to load policy [ 76.745221][ T2949] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 76.755277][ T2972] loop7: detected capacity change from 0 to 2048 [ 76.768260][ T2949] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 76.781143][ T2949] F2FS-fs (loop6): invalid crc value [ 76.788313][ T2949] F2FS-fs (loop6): Found nat_bits in checkpoint [ 76.807659][ T2979] loop9: detected capacity change from 0 to 512 [ 76.814157][ T354] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 76.854790][ T2979] EXT4-fs error (device loop9): ext4_xattr_block_get:543: inode #2: comm syz.9.1122: corrupted xattr block 255 [ 76.867599][ T2979] EXT4-fs (loop9): Cannot turn on journaled quota: type 1: error -117 [ 76.876281][ T2979] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 76.885741][ T2979] EXT4-fs error (device loop9): ext4_xattr_block_get:543: inode #2: comm syz.9.1122: corrupted xattr block 255 [ 76.898559][ T2949] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 76.905676][ T2949] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 76.913831][ T2979] SELinux: (dev loop9, type ext4) getxattr errno 117 [ 76.928672][ T2979] EXT4-fs (loop9): unmounting filesystem. [ 76.959116][ T28] audit: type=1400 audit(1775086671.914:470): avc: denied { append } for pid=2948 comm="syz.6.1109" path="/214/file0/file1" dev="loop6" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 76.989069][ T288] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 77.029445][ T2992] IPv6: addrconf: prefix option has invalid lifetime [ 77.058682][ T2979] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 77.068677][ T2979] ext4 filesystem being mounted at /11/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 77.114744][ T2796] EXT4-fs (loop9): unmounting filesystem. [ 77.176263][ T288] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 77.176485][ T3003] netlink: 104 bytes leftover after parsing attributes in process `syz.7.1132'. [ 77.194976][ T288] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 77.222407][ T288] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 9 [ 77.235869][ T288] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.00 [ 77.245269][ T288] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.261135][ T3008] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 77.273430][ T288] usb 6-1: config 0 descriptor?? [ 77.281745][ T2971] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 77.290488][ T28] audit: type=1400 audit(1775086672.244:471): avc: denied { mounton } for pid=3009 comm="syz.7.1135" path="/proc/449/task" dev="proc" ino=28023 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 77.314062][ T3008] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 77.321375][ T2971] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 77.390994][ T28] audit: type=1400 audit(1775086672.344:472): avc: denied { relabelfrom } for pid=3016 comm="syz.9.1138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 77.413437][ T28] audit: type=1400 audit(1775086672.344:473): avc: denied { relabelto } for pid=3016 comm="syz.9.1138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 77.499612][ T3025] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 77.509661][ T28] audit: type=1400 audit(1775086672.464:474): avc: denied { mount } for pid=3031 comm="syz.7.1145" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 77.513316][ T3025] ext4 filesystem being mounted at /15/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 77.573779][ T2796] EXT4-fs (loop9): unmounting filesystem. [ 77.595158][ T3040] EXT4-fs: Ignoring removed oldalloc option [ 77.601717][ T3040] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 77.641969][ T3040] EXT4-fs error (device loop9): ext4_orphan_get:1399: inode #15: comm syz.9.1148: iget: bad i_size value: 38620345925642 [ 77.676882][ T3040] EXT4-fs error (device loop9): ext4_orphan_get:1404: comm syz.9.1148: couldn't read orphan inode 15 (err -117) [ 77.691173][ T3040] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 77.710427][ T3045] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 77.722837][ T3049] sch_tbf: burst 2 is lower than device wg0 mtu (1420) ! [ 77.738940][ T3045] ext4 filesystem being mounted at /221/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 77.751219][ T288] keytouch 0003:0926:3333.000B: fixing up Keytouch IEC report descriptor [ 77.762136][ T288] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.000B/input/input9 [ 77.811808][ T28] audit: type=1400 audit(1775086672.764:475): avc: denied { mount } for pid=3052 comm="syz.7.1153" name="/" dev="ramfs" ino=28969 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 77.841216][ T812] EXT4-fs (loop6): unmounting filesystem. [ 77.875363][ T2796] EXT4-fs (loop9): unmounting filesystem. [ 77.879869][ T288] keytouch 0003:0926:3333.000B: input,hidraw0: USB HID v0.20 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 77.969995][ T3068] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1160'. [ 77.979350][ T28] audit: type=1400 audit(1775086672.934:476): avc: denied { append } for pid=2970 comm="syz.5.1119" name="hidraw0" dev="devtmpfs" ino=1114 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 78.004008][ T288] usb 6-1: USB disconnect, device number 8 [ 78.019493][ T3063] fido_id[3063]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 78.314732][ T28] audit: type=1400 audit(1775086673.274:477): avc: denied { mount } for pid=3094 comm="syz.7.1171" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 78.334478][ T6] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 78.362718][ T3100] xt_hashlimit: size too large, truncated to 1048576 [ 78.525313][ T6] usb 7-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 78.540654][ T6] usb 7-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 78.552080][ T6] usb 7-1: config 1 interface 0 has no altsetting 0 [ 78.574850][ T6] usb 7-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 78.584417][ T6] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.598027][ T6] usb 7-1: Product: syz [ 78.602482][ T6] usb 7-1: Manufacturer: syz [ 78.607266][ T6] usb 7-1: SerialNumber: syz [ 78.612855][ T3076] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 78.621276][ T3076] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 78.767353][ T28] audit: type=1400 audit(1775086673.724:478): avc: denied { map } for pid=3126 comm="syz.9.1184" path="/dev/loop9" dev="devtmpfs" ino=127 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 79.305502][ T3133] set_capacity_and_notify: 6 callbacks suppressed [ 79.305522][ T3133] loop9: detected capacity change from 0 to 131072 [ 79.323064][ T3133] F2FS-fs (loop9): Test dummy encryption mode enabled [ 79.330970][ T3133] F2FS-fs (loop9): invalid crc value [ 79.338112][ T3133] F2FS-fs (loop9): Found nat_bits in checkpoint [ 79.381782][ T3133] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 79.500020][ T3139] loop5: detected capacity change from 0 to 512 [ 79.510155][ T3139] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 79.527994][ T3139] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 79.537198][ T3139] ext4 filesystem being mounted at /120/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 79.568509][ T782] EXT4-fs (loop5): unmounting filesystem. [ 79.620908][ T3147] loop7: detected capacity change from 0 to 256 [ 79.633940][ T6] (unnamed net_device) (uninitialized): Assigned a random MAC address: f2:d7:4d:98:21:86 [ 79.652140][ T6] rtl8150 7-1:1.0: eth1: rtl8150 is detected [ 79.669692][ T6] usb 7-1: USB disconnect, device number 5 [ 79.801289][ T3159] serio: Serial port ptm0 [ 79.969360][ T3159] serio: Serial port ptm0 [ 80.048088][ T28] audit: type=1400 audit(1775086675.004:479): avc: denied { remount } for pid=3163 comm="syz.9.1197" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 80.166120][ T3175] loop9: detected capacity change from 0 to 256 [ 80.186219][ T3175] exfat: Deprecated parameter 'namecase' [ 80.192145][ T3175] exfat: Deprecated parameter 'namecase' [ 80.211933][ T3175] exFAT-fs (loop9): Invalid exboot-signature(sector = 2): 0x00000000 [ 80.247434][ T3175] exFAT-fs (loop9): Invalid boot checksum (boot checksum : 0x1119abd0, checksum : 0xc109e303) [ 80.284290][ T3175] exFAT-fs (loop9): invalid boot region [ 80.289946][ T3175] exFAT-fs (loop9): failed to recognize exfat type [ 80.359062][ T3175] loop9: detected capacity change from 0 to 256 [ 80.413601][ T3192] loop6: detected capacity change from 0 to 256 [ 80.428868][ T3192] FAT-fs (loop6): Directory bread(block 64) failed [ 80.428902][ T3192] FAT-fs (loop6): Directory bread(block 65) failed [ 80.428960][ T3192] FAT-fs (loop6): Directory bread(block 66) failed [ 80.428991][ T3192] FAT-fs (loop6): Directory bread(block 67) failed [ 80.429028][ T3192] FAT-fs (loop6): Directory bread(block 68) failed [ 80.429049][ T3192] FAT-fs (loop6): Directory bread(block 69) failed [ 80.429086][ T3192] FAT-fs (loop6): Directory bread(block 70) failed [ 80.429107][ T3192] FAT-fs (loop6): Directory bread(block 71) failed [ 80.429139][ T3192] FAT-fs (loop6): Directory bread(block 72) failed [ 80.429158][ T3192] FAT-fs (loop6): Directory bread(block 73) failed [ 80.494605][ T3162] loop5: detected capacity change from 0 to 131072 [ 80.505100][ T3162] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0xf2f50210) [ 80.505132][ T3162] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 80.505297][ T3162] F2FS-fs (loop5): Test dummy encryption mode enabled [ 80.507939][ T3162] F2FS-fs (loop5): invalid crc value [ 80.535348][ T3162] F2FS-fs (loop5): Found nat_bits in checkpoint [ 80.643592][ T3162] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 80.643622][ T3162] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 80.991258][ T3218] device pim6reg1 entered promiscuous mode [ 81.135434][ T28] audit: type=1326 audit(1775086676.094:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3231 comm="syz.9.1228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f800d59c819 code=0x7ffc0000 [ 81.177133][ T3238] loop7: detected capacity change from 0 to 512 [ 81.184389][ T28] audit: type=1326 audit(1775086676.094:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3231 comm="syz.9.1228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f800d59c819 code=0x7ffc0000 [ 81.234699][ T3238] EXT4-fs: Ignoring removed oldalloc option [ 81.251060][ T28] audit: type=1326 audit(1775086676.124:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3231 comm="syz.9.1228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f800d59c819 code=0x7ffc0000 [ 81.294351][ T3238] /dev/loop7: Can't open blockdev [ 81.314335][ T28] audit: type=1326 audit(1775086676.124:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3231 comm="syz.9.1228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f800d59c819 code=0x7ffc0000 [ 81.341275][ T28] audit: type=1326 audit(1775086676.124:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3231 comm="syz.9.1228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7f800d59c819 code=0x7ffc0000 [ 81.366007][ T28] audit: type=1326 audit(1775086676.124:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3231 comm="syz.9.1228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f800d59c819 code=0x7ffc0000 [ 81.397993][ T6] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 81.415360][ T328] tipc: Left network mode [ 81.460940][ T3252] loop7: detected capacity change from 0 to 128 [ 81.496271][ T3245] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.503603][ T3245] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.511444][ T3245] device bridge_slave_0 entered promiscuous mode [ 81.518267][ T19] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 81.521719][ T3245] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.533501][ T3245] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.541308][ T3245] device bridge_slave_1 entered promiscuous mode [ 81.584281][ T6] usb 6-1: Using ep0 maxpacket: 16 [ 81.590858][ T6] usb 6-1: config 0 has an invalid interface number: 105 but max is 0 [ 81.600620][ T6] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 81.611161][ T6] usb 6-1: config 0 has no interface number 0 [ 81.620901][ T6] usb 6-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 81.628846][ T3245] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.630530][ T6] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.637224][ T3245] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.637501][ T3245] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.645751][ T6] usb 6-1: Product: syz [ 81.652716][ T3245] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.660104][ T6] usb 6-1: Manufacturer: syz [ 81.676081][ T6] usb 6-1: SerialNumber: syz [ 81.683456][ T6] usb 6-1: config 0 descriptor?? [ 81.695987][ T3257] loop7: detected capacity change from 0 to 512 [ 81.704337][ T19] usb 7-1: Using ep0 maxpacket: 32 [ 81.710569][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 81.718621][ T3257] EXT4-fs: Ignoring removed nobh option [ 81.719657][ T19] usb 7-1: config 0 has an invalid interface number: 188 but max is 0 [ 81.733524][ T19] usb 7-1: config 0 has no interface number 0 [ 81.740194][ T310] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.740479][ T19] usb 7-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 81.758616][ T310] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.764544][ T3257] EXT4-fs (loop7): write access unavailable, skipping orphan cleanup [ 81.774391][ T19] usb 7-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 81.775268][ T3257] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 81.783797][ T19] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.800647][ T19] usb 7-1: Product: syz [ 81.805057][ T19] usb 7-1: Manufacturer: syz [ 81.809816][ T19] usb 7-1: SerialNumber: syz [ 81.815613][ T19] usb 7-1: config 0 descriptor?? [ 81.815620][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 81.826870][ T310] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.836598][ T310] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.839292][ T3241] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 81.855828][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 81.866239][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.873648][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.891291][ T6] usb 6-1: Found UVC 0.00 device syz (046d:08f3) [ 81.898093][ T6] usb 6-1: No valid video chain found. [ 81.904844][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 81.913070][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 81.916430][ T6] usb 6-1: USB disconnect, device number 9 [ 81.939820][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 81.953227][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 81.961707][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 81.970384][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 81.982791][ T3245] device veth0_vlan entered promiscuous mode [ 81.996898][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 82.007512][ T3245] device veth1_macvtap entered promiscuous mode [ 82.021325][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 82.032270][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 82.041072][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 82.054822][ T3241] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 82.064480][ T328] device bridge_slave_1 left promiscuous mode [ 82.070770][ T328] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.078707][ T328] device bridge_slave_0 left promiscuous mode [ 82.085189][ T328] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.093640][ T328] device veth1_macvtap left promiscuous mode [ 82.100180][ T328] device veth0_vlan left promiscuous mode [ 82.347489][ T813] EXT4-fs (loop7): unmounting filesystem. [ 82.484315][ T6] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 82.592947][ T3284] EXT4-fs (loop5): Test dummy encryption mode enabled [ 82.602252][ T3284] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 82.611055][ T3284] System zones: 0-5 [ 82.616165][ T3284] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 82.639708][ T782] EXT4-fs (loop5): unmounting filesystem. [ 82.663989][ T19] asix 7-1:0.188 (unnamed net_device) (uninitialized): invalid hw address, using random [ 82.704395][ T6] usb 4-1: Using ep0 maxpacket: 32 [ 82.711082][ T6] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 82.722452][ T6] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 82.732714][ T6] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 82.742081][ T6] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.750968][ T6] usb 4-1: config 0 descriptor?? [ 82.864356][ T19] asix 7-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 82.874765][ T19] asix 7-1:0.188 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 82.889078][ T19] asix: probe of 7-1:0.188 failed with error -71 [ 82.899771][ T19] usb 7-1: USB disconnect, device number 6 [ 82.944367][ T304] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 83.125793][ T304] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 83.137151][ T304] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 83.147925][ T304] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 83.157608][ T304] usb 6-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 83.165869][ T304] usb 6-1: Manufacturer: syz [ 83.171757][ T304] usb 6-1: config 0 descriptor?? [ 83.177060][ T6] savu 0003:1E7D:2D5A.000C: hiddev96,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.3-1/input0 [ 83.527661][ T6] usb 4-1: USB disconnect, device number 2 [ 83.722205][ T28] kauditd_printk_skb: 23 callbacks suppressed [ 83.722222][ T28] audit: type=1400 audit(1775086678.674:509): avc: denied { write } for pid=3324 comm="syz.6.1262" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 83.780129][ T310] Bluetooth: hci0: Frame reassembly failed (-84) [ 83.989098][ T304] input: syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:256C:006D.000D/input/input11 [ 84.001689][ T304] input: syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:256C:006D.000D/input/input12 [ 84.015049][ T304] input: syz Touch Strip as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:256C:006D.000D/input/input13 [ 84.035080][ T304] input: syz Dial as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:256C:006D.000D/input/input14 [ 84.063574][ T304] uclogic 0003:256C:006D.000D: input,hiddev96,hidraw0: USB HID v0.00 Keypad [syz] on usb-dummy_hcd.5-1/input0 [ 84.337386][ T304] usb 6-1: USB disconnect, device number 10 [ 84.360448][ T880] kernel write not supported for file bpf-prog (pid: 880 comm: kworker/1:4) [ 84.393845][ T3347] set_capacity_and_notify: 3 callbacks suppressed [ 84.393864][ T3347] loop3: detected capacity change from 0 to 512 [ 84.656151][ T3337] loop6: detected capacity change from 0 to 131072 [ 84.669159][ T3337] F2FS-fs (loop6): Invalid log sectorsize (67108873) [ 84.676822][ T3337] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 84.694340][ T3337] F2FS-fs (loop6): invalid crc value [ 84.707850][ T3337] F2FS-fs (loop6): Found nat_bits in checkpoint [ 84.750449][ T3351] loop7: detected capacity change from 0 to 40427 [ 84.772551][ T3337] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 84.777614][ T28] audit: type=1400 audit(1775086679.734:510): avc: denied { watch watch_reads } for pid=3366 comm="syz.3.1279" path="/9/file1" dev="tmpfs" ino=73 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 84.795886][ T3337] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4 [ 84.964488][ T3377] loop5: detected capacity change from 0 to 1024 [ 84.994453][ T3377] EXT4-fs: Ignoring removed oldalloc option [ 85.004327][ T3377] EXT4-fs: Ignoring removed bh option [ 85.014744][ T3377] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 85.075592][ T3377] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 85.084485][ T6] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 85.107448][ T28] audit: type=1400 audit(1775086680.064:511): avc: denied { write } for pid=3376 comm="syz.5.1285" name="/" dev="overlay" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 85.136714][ T28] audit: type=1400 audit(1775086680.064:512): avc: denied { setattr } for pid=3376 comm="syz.5.1285" name="/" dev="overlay" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 85.165435][ T3375] loop3: detected capacity change from 0 to 40427 [ 85.175959][ T3375] F2FS-fs (loop3): fault_injection options not supported [ 85.183207][ T3375] F2FS-fs (loop3): Image doesn't support compression [ 85.190173][ T3375] F2FS-fs (loop3): Image doesn't support compression [ 85.197250][ T3375] F2FS-fs (loop3): fault_type options not supported [ 85.205832][ T782] EXT4-fs (loop5): unmounting filesystem. [ 85.209913][ T28] audit: type=1400 audit(1775086680.164:513): avc: denied { execute } for pid=3382 comm="syz.6.1287" path=2F6D656D66643AF365099F9138C07901631F6E7578202864656C6574656429 dev="tmpfs" ino=125 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 85.214875][ T3375] F2FS-fs (loop3): invalid crc value [ 85.260278][ T3375] F2FS-fs (loop3): Found nat_bits in checkpoint [ 85.271652][ T3386] loop6: detected capacity change from 0 to 1024 [ 85.278351][ T6] usb 8-1: Using ep0 maxpacket: 32 [ 85.284752][ T6] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 85.314721][ T6] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 85.324699][ T3386] EXT4-fs (loop6): can't mount with commit=541, fs mounted w/o journal [ 85.344425][ T6] usb 8-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 85.364374][ T6] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.373214][ T3375] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 85.380916][ T6] usb 8-1: config 0 descriptor?? [ 85.405923][ T3245] bio_check_eod: 185 callbacks suppressed [ 85.405939][ T3245] syz-executor: attempt to access beyond end of device [ 85.405939][ T3245] loop3: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 85.441363][ T28] audit: type=1400 audit(1775086680.394:514): avc: denied { mount } for pid=3394 comm="syz.5.1292" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 85.501141][ T28] audit: type=1400 audit(1775086680.454:515): avc: denied { sqpoll } for pid=3398 comm="syz.5.1294" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 85.754287][ T19] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 85.813898][ T6] savu 0003:1E7D:2D5A.000E: hiddev96,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.7-1/input0 [ 85.834404][ T45] Bluetooth: hci0: command 0x1003 tx timeout [ 85.840824][ T2243] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 85.847687][ T3329] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 85.899640][ T3421] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 85.931791][ T3428] loop9: detected capacity change from 0 to 512 [ 85.942118][ T19] usb 7-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 114 [ 85.956566][ T3428] EXT4-fs (loop9): 1 truncate cleaned up [ 85.962447][ T3428] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 85.971389][ T19] usb 7-1: config 0 has an invalid descriptor of length 97, skipping remainder of the config [ 85.981775][ T19] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 86.005394][ T19] usb 7-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 86.022936][ T19] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.031451][ T19] usb 7-1: Product: syz [ 86.036739][ T2796] EXT4-fs (loop9): unmounting filesystem. [ 86.039326][ T19] usb 7-1: Manufacturer: syz [ 86.047449][ T19] usb 7-1: SerialNumber: syz [ 86.053080][ T19] usb 7-1: config 0 descriptor?? [ 86.059043][ T19] usb-storage 7-1:0.0: USB Mass Storage device detected [ 86.074853][ T19] usb-storage 7-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 86.149965][ T24] usb 8-1: USB disconnect, device number 7 [ 86.222659][ T3437] loop9: detected capacity change from 0 to 40427 [ 86.235706][ T3437] F2FS-fs (loop9): Found nat_bits in checkpoint [ 86.261076][ T19] usb 7-1: USB disconnect, device number 7 [ 86.285634][ T3437] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 86.308321][ T2796] syz-executor: attempt to access beyond end of device [ 86.308321][ T2796] loop9: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 86.341878][ T3449] loop3: detected capacity change from 0 to 256 [ 86.354362][ T304] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 86.428305][ T3455] loop3: detected capacity change from 0 to 512 [ 86.464427][ T3455] EXT4-fs (loop3): 1 truncate cleaned up [ 86.470287][ T3455] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 86.490817][ T3455] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.1314: invalid indirect mapped block 4294901760 (level 0) [ 86.505508][ T3455] EXT4-fs (loop3): Remounting filesystem read-only [ 86.512059][ T3455] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.1314: invalid indirect mapped block 4294967295 (level 1) [ 86.526433][ T3455] EXT4-fs (loop3): Remounting filesystem read-only [ 86.541860][ T3245] EXT4-fs (loop3): unmounting filesystem. [ 86.564345][ T304] usb 6-1: Using ep0 maxpacket: 16 [ 86.585073][ T304] usb 6-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 86.596544][ T3461] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 86.600083][ T304] usb 6-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 86.618302][ T304] usb 6-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 86.624451][ T3461] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 86.632546][ T304] usb 6-1: config 1 interface 0 has no altsetting 0 [ 86.649669][ T3461] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 86.665338][ T304] usb 6-1: New USB device found, idVendor=0521, idProduct=b1a8, bcdDevice= 0.40 [ 86.687291][ T304] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.703884][ T28] audit: type=1400 audit(1775086681.654:516): avc: denied { append } for pid=3460 comm="syz.3.1315" path="/21/bus/memory.events" dev="loop3" ino=1048694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 86.728177][ T304] usb 6-1: Product: syz [ 86.732389][ T304] usb 6-1: Manufacturer: syz [ 86.744242][ T304] usb 6-1: SerialNumber: syz [ 86.886339][ T28] audit: type=1400 audit(1775086681.834:517): avc: denied { setopt } for pid=3473 comm="syz.9.1321" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 86.942422][ T3482] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 86.954087][ T3482] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 87.014575][ T304] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 11 if 0 alt 255 proto 1 vid 0x0521 pid 0xB1A8 [ 87.146455][ T3493] xt_hashlimit: size too large, truncated to 1048576 [ 87.214995][ T880] usb 6-1: USB disconnect, device number 11 [ 87.374278][ T304] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 87.377219][ T3497] F2FS-fs (loop3): invalid crc value [ 87.401227][ T3497] F2FS-fs (loop3): Found nat_bits in checkpoint [ 87.424261][ T3435] usblp0: removed [ 87.428215][ T28] audit: type=1400 audit(1775086682.374:518): avc: denied { ioctl } for pid=3435 comm="syz.5.1307" path=2F6465762F7573622F6C7030202864656C6574656429 dev="devtmpfs" ino=1239 ioctlcmd=0x9424 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 87.486778][ T3497] F2FS-fs (loop3): Start checkpoint disabled! [ 87.500110][ T3497] F2FS-fs (loop3): f2fs_disable_checkpoint() finish, err:0 [ 87.514654][ T3497] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 87.574280][ T304] usb 10-1: Using ep0 maxpacket: 32 [ 87.582123][ T304] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 87.585374][ T857] kworker/u4:6: attempt to access beyond end of device [ 87.585374][ T857] loop3: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 87.603919][ T304] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 87.633609][ T304] usb 10-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 87.651790][ T304] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.690852][ T304] usb 10-1: config 0 descriptor?? [ 87.701382][ T3508] netlink: 2128 bytes leftover after parsing attributes in process `syz.7.1336'. [ 87.795451][ T2738] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 87.914220][ C1] ================================================================== [ 87.922530][ C1] BUG: KASAN: use-after-free in __run_timers+0x340/0x9f0 [ 87.929873][ C1] Write of size 8 at addr ffff88811958ca00 by task swapper/1/0 [ 87.937472][ C1] [ 87.940010][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 [ 87.947215][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 87.957332][ C1] Call Trace: [ 87.960625][ C1] [ 87.963472][ C1] __dump_stack+0x21/0x24 [ 87.967820][ C1] dump_stack_lvl+0x110/0x170 [ 87.972522][ C1] ? __cfi_dump_stack_lvl+0x8/0x8 [ 87.977562][ C1] ? update_rq_clock+0x1c1/0x5c0 [ 87.982622][ C1] ? __run_timers+0x340/0x9f0 [ 87.987578][ C1] print_address_description+0x71/0x200 [ 87.993153][ C1] print_report+0x4a/0x60 [ 87.997503][ C1] kasan_report+0x122/0x150 [ 88.002037][ C1] ? __run_timers+0x340/0x9f0 [ 88.006737][ C1] __asan_report_store8_noabort+0x17/0x20 [ 88.012569][ C1] __run_timers+0x340/0x9f0 [ 88.017090][ C1] ? sched_clock+0x9/0x10 [ 88.021516][ C1] ? sched_clock_cpu+0x6e/0x260 [ 88.026397][ C1] ? calc_index+0x200/0x200 [ 88.030912][ C1] ? kvm_sched_clock_read+0x18/0x40 [ 88.036119][ C1] run_timer_softirq+0x6a/0xf0 [ 88.040904][ C1] handle_softirqs+0x1d7/0x600 [ 88.045758][ C1] ? irqtime_account_irq+0xc4/0x240 [ 88.050984][ C1] __irq_exit_rcu+0x52/0xf0 [ 88.055579][ C1] irq_exit_rcu+0x9/0x10 [ 88.060089][ C1] sysvec_apic_timer_interrupt+0xa9/0xc0 [ 88.065738][ C1] [ 88.068667][ C1] [ 88.071604][ C1] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 88.077594][ C1] RIP: 0010:default_idle+0xf/0x20 [ 88.082660][ C1] Code: 07 d7 b5 fc e9 3d ff ff ff 00 00 90 90 90 90 90 90 90 90 90 90 90 b8 0c 67 40 a5 55 48 89 e5 66 90 0f 00 2d f3 46 65 00 fb f4 <5d> c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 90 90 90 90 90 [ 88.102897][ C1] RSP: 0018:ffffc90000147dd8 EFLAGS: 00000257 [ 88.108990][ C1] RAX: ffff8881f6f00000 RBX: ffff888100335100 RCX: d3ae52f89adcd800 [ 88.117062][ C1] RDX: 0000000000000001 RSI: ffffffff85ca7b00 RDI: ffffffff85ca7ac0 [ 88.125054][ C1] RBP: ffffc90000147dd8 R08: ffff8881f6f348b3 R09: 1ffff1103ede6916 [ 88.133072][ C1] R10: 0000000000000000 R11: ffffffff8500ec00 R12: 0000000000000000 [ 88.141250][ C1] R13: 0000000000000000 R14: ffff888100335100 R15: dffffc0000000000 [ 88.149244][ C1] ? __cfi_default_idle+0x10/0x10 [ 88.154659][ C1] arch_cpu_idle+0x1c/0x20 [ 88.159162][ C1] default_idle_call+0x71/0x1d0 [ 88.164055][ C1] do_idle+0x1a7/0x560 [ 88.168148][ C1] ? idle_inject_timer_fn+0x60/0x60 [ 88.173370][ C1] ? schedule_idle+0x5b/0x90 [ 88.177977][ C1] ? do_idle+0xd/0x560 [ 88.182166][ C1] cpu_startup_entry+0x43/0x60 [ 88.186978][ C1] start_secondary+0x119/0x120 [ 88.191788][ C1] secondary_startup_64_no_verify+0xce/0xdb [ 88.197993][ C1] [ 88.201025][ C1] [ 88.203377][ C1] Allocated by task 3329: [ 88.207711][ C1] kasan_set_track+0x4b/0x70 [ 88.212410][ C1] kasan_save_alloc_info+0x25/0x30 [ 88.217629][ C1] __kasan_kmalloc+0x95/0xb0 [ 88.222323][ C1] __kmalloc+0xb1/0x1e0 [ 88.226492][ C1] hci_alloc_dev_priv+0x27/0x1bd0 [ 88.231613][ C1] hci_uart_tty_ioctl+0x3c8/0xa20 [ 88.236742][ C1] tty_ioctl+0x8ef/0xc60 [ 88.241094][ C1] __se_sys_ioctl+0x12f/0x1b0 [ 88.245819][ C1] __x64_sys_ioctl+0x7b/0x90 [ 88.250540][ C1] x64_sys_call+0x58b/0x9a0 [ 88.255066][ C1] do_syscall_64+0x4c/0xa0 [ 88.259545][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 88.265747][ C1] [ 88.268084][ C1] Freed by task 3329: [ 88.272072][ C1] kasan_set_track+0x4b/0x70 [ 88.276678][ C1] kasan_save_free_info+0x31/0x50 [ 88.281760][ C1] ____kasan_slab_free+0x132/0x180 [ 88.286975][ C1] __kasan_slab_free+0x11/0x20 [ 88.291774][ C1] slab_free_freelist_hook+0xc2/0x190 [ 88.297170][ C1] __kmem_cache_free+0xb7/0x1b0 [ 88.302311][ C1] kfree+0x6f/0xf0 [ 88.306243][ C1] hci_release_dev+0x12a3/0x13b0 [ 88.311196][ C1] bt_host_release+0x82/0x90 [ 88.315800][ C1] device_release+0xa4/0x1d0 [ 88.320425][ C1] kobject_put+0x19d/0x280 [ 88.324876][ C1] put_device+0x1f/0x30 [ 88.329053][ C1] hci_dev_cmd+0x279/0x740 [ 88.333494][ C1] hci_sock_ioctl+0x41e/0x7f0 [ 88.338456][ C1] sock_do_ioctl+0x114/0x330 [ 88.343061][ C1] sock_ioctl+0x4bd/0x710 [ 88.347416][ C1] __se_sys_ioctl+0x12f/0x1b0 [ 88.352170][ C1] __x64_sys_ioctl+0x7b/0x90 [ 88.356801][ C1] x64_sys_call+0x58b/0x9a0 [ 88.361476][ C1] do_syscall_64+0x4c/0xa0 [ 88.366021][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 88.371966][ C1] [ 88.374300][ C1] Last potentially related work creation: [ 88.380025][ C1] kasan_save_stack+0x3a/0x60 [ 88.384851][ C1] __kasan_record_aux_stack+0xb6/0xc0 [ 88.390354][ C1] kasan_record_aux_stack_noalloc+0xb/0x10 [ 88.396183][ C1] insert_work+0x51/0x300 [ 88.400529][ C1] __queue_work+0x9b1/0xd30 [ 88.405137][ C1] queue_work_on+0xde/0x150 [ 88.409658][ C1] __hci_cmd_sync_sk+0xa7f/0xd30 [ 88.414611][ C1] hci_cmd_sync_status+0x53/0x120 [ 88.419652][ C1] hci_dev_cmd+0x35b/0x740 [ 88.424090][ C1] hci_sock_ioctl+0x41e/0x7f0 [ 88.428803][ C1] sock_do_ioctl+0x114/0x330 [ 88.433414][ C1] sock_ioctl+0x4bd/0x710 [ 88.437754][ C1] __se_sys_ioctl+0x12f/0x1b0 [ 88.442449][ C1] __x64_sys_ioctl+0x7b/0x90 [ 88.447078][ C1] x64_sys_call+0x58b/0x9a0 [ 88.451749][ C1] do_syscall_64+0x4c/0xa0 [ 88.456208][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 88.462117][ C1] [ 88.464453][ C1] Second to last potentially related work creation: [ 88.471163][ C1] kasan_save_stack+0x3a/0x60 [ 88.475948][ C1] __kasan_record_aux_stack+0xb6/0xc0 [ 88.481350][ C1] kasan_record_aux_stack_noalloc+0xb/0x10 [ 88.487177][ C1] insert_work+0x51/0x300 [ 88.491514][ C1] __queue_work+0x9b1/0xd30 [ 88.496031][ C1] queue_work_on+0xde/0x150 [ 88.500567][ C1] hci_cmd_timeout+0x191/0x200 [ 88.505363][ C1] process_one_work+0x71f/0xc40 [ 88.510252][ C1] worker_thread+0xa29/0x11e0 [ 88.515037][ C1] kthread+0x281/0x320 [ 88.519128][ C1] ret_from_fork+0x1f/0x30 [ 88.523560][ C1] [ 88.525895][ C1] The buggy address belongs to the object at ffff88811958c000 [ 88.525895][ C1] which belongs to the cache kmalloc-8k of size 8192 [ 88.540226][ C1] The buggy address is located 2560 bytes inside of [ 88.540226][ C1] 8192-byte region [ffff88811958c000, ffff88811958e000) [ 88.553696][ C1] [ 88.556053][ C1] The buggy address belongs to the physical page: [ 88.562475][ C1] page:ffffea0004656200 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x119588 [ 88.572729][ C1] head:ffffea0004656200 order:3 compound_mapcount:0 compound_pincount:0 [ 88.581073][ C1] flags: 0x4000000000010200(slab|head|zone=1) [ 88.587439][ C1] raw: 4000000000010200 ffffea0004633600 dead000000000005 ffff888100043500 [ 88.596130][ C1] raw: 0000000000000000 0000000000020002 00000001ffffffff 0000000000000000 [ 88.604721][ C1] page dumped because: kasan: bad access detected [ 88.611161][ C1] page_owner tracks the page as allocated [ 88.617064][ C1] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 2900, tgid 2899 (syz.5.1088), ts 75530269173, free_ts 75466052222 [ 88.639744][ C1] post_alloc_hook+0x1f5/0x210 [ 88.644623][ C1] prep_new_page+0x1c/0x110 [ 88.649212][ C1] get_page_from_freelist+0x2d12/0x2d80 [ 88.654780][ C1] __alloc_pages+0x1fa/0x610 [ 88.659385][ C1] alloc_slab_page+0x6e/0xf0 [ 88.664072][ C1] new_slab+0x98/0x3d0 [ 88.668188][ C1] ___slab_alloc+0x6bd/0xb20 [ 88.672805][ C1] __slab_alloc+0x5e/0xa0 [ 88.677177][ C1] __kmem_cache_alloc_node+0x203/0x2c0 [ 88.682674][ C1] __kmalloc+0xa1/0x1e0 [ 88.686933][ C1] mb_cache_create+0x187/0x5a0 [ 88.692010][ C1] ext4_xattr_create_cache+0x13/0x20 [ 88.697343][ C1] ext4_fill_super+0x57de/0x7590 [ 88.702492][ C1] get_tree_bdev+0x447/0x690 [ 88.707117][ C1] ext4_get_tree+0x1c/0x20 [ 88.711639][ C1] vfs_get_tree+0x9a/0x270 [ 88.716089][ C1] page last free stack trace: [ 88.720778][ C1] free_unref_page_prepare+0x742/0x750 [ 88.726259][ C1] free_unref_page+0x95/0x540 [ 88.730962][ C1] __free_pages+0x67/0x100 [ 88.735482][ C1] __free_slab+0xca/0x1a0 [ 88.739832][ C1] __unfreeze_partials+0x160/0x190 [ 88.744970][ C1] put_cpu_partial+0xa9/0x100 [ 88.749757][ C1] __slab_free+0x1c4/0x280 [ 88.754198][ C1] ___cache_free+0xbf/0xd0 [ 88.758808][ C1] qlist_free_all+0xc6/0x140 [ 88.763424][ C1] kasan_quarantine_reduce+0x14a/0x170 [ 88.768916][ C1] __kasan_slab_alloc+0x24/0x80 [ 88.773792][ C1] slab_post_alloc_hook+0x4f/0x2d0 [ 88.778922][ C1] kmem_cache_alloc+0x16e/0x330 [ 88.783991][ C1] getname_flags+0xb9/0x500 [ 88.788708][ C1] __se_sys_newfstatat+0x127/0x440 [ 88.794294][ C1] __x64_sys_newfstatat+0x9b/0xb0 [ 88.799477][ C1] [ 88.801870][ C1] Memory state around the buggy address: [ 88.807542][ C1] ffff88811958c900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 88.815717][ C1] ffff88811958c980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 88.823803][ C1] >ffff88811958ca00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 88.831885][ C1] ^ [ 88.835975][ C1] ffff88811958ca80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 88.844045][ C1] ffff88811958cb00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 88.852175][ C1] ================================================================== [ 88.860423][ C1] Disabling lock debugging due to kernel taint [ 88.866636][ C1] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN [ 88.878451][ C1] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 88.887103][ C1] CPU: 1 PID: 0 Comm: swapper/1 Tainted: G B syzkaller #0 [ 88.895610][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 88.905781][ C1] RIP: 0010:__queue_work+0x575/0xd30 [ 88.911356][ C1] Code: 39 2b 0f 84 b9 00 00 00 e8 18 45 29 00 4c 89 ff e8 30 ed b8 03 49 bc 00 00 00 00 00 fc ff df 4c 8b 6d d0 4c 89 e8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ef e8 1c 98 6e 00 49 8b 7d 00 e8 c3 e8 [ 88.931599][ C1] RSP: 0018:ffffc900001b0c70 EFLAGS: 00010046 [ 88.937858][ C1] RAX: 0000000000000000 RBX: 000000007fffffff RCX: ffff888100335100 [ 88.945938][ C1] RDX: 0000000000000100 RSI: 000000007fffffff RDI: 000000007fffffff [ 88.954126][ C1] RBP: ffffc900001b0d08 R08: 0000000000000007 R09: fffffffffffffffb [ 88.962163][ C1] R10: dffffc0000000000 R11: ffffed10232b1939 R12: dffffc0000000000 [ 88.970448][ C1] R13: 0000000000000000 R14: ffff88811958c9c8 R15: 0000000000000008 [ 88.978615][ C1] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 88.987872][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 88.994562][ C1] CR2: 00007f828c084d58 CR3: 00000001272d5000 CR4: 00000000003506a0 [ 89.002789][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 89.010861][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 89.019106][ C1] Call Trace: [ 89.022494][ C1] [ 89.025356][ C1] delayed_work_timer_fn+0x61/0x80 [ 89.030502][ C1] ? __cfi_delayed_work_timer_fn+0x10/0x10 [ 89.036330][ C1] call_timer_fn+0x46/0x2a0 [ 89.040936][ C1] ? __cfi_delayed_work_timer_fn+0x10/0x10 [ 89.046965][ C1] __run_timers+0x689/0x9f0 [ 89.051490][ C1] ? calc_index+0x200/0x200 [ 89.056133][ C1] ? kvm_sched_clock_read+0x18/0x40 [ 89.061380][ C1] run_timer_softirq+0x6a/0xf0 [ 89.066250][ C1] handle_softirqs+0x1d7/0x600 [ 89.071079][ C1] ? irqtime_account_irq+0xc4/0x240 [ 89.076821][ C1] __irq_exit_rcu+0x52/0xf0 [ 89.081531][ C1] irq_exit_rcu+0x9/0x10 [ 89.086238][ C1] sysvec_apic_timer_interrupt+0xa9/0xc0 [ 89.092280][ C1] [ 89.095248][ C1] [ 89.098204][ C1] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 89.104434][ C1] RIP: 0010:default_idle+0xf/0x20 [ 89.109501][ C1] Code: 07 d7 b5 fc e9 3d ff ff ff 00 00 90 90 90 90 90 90 90 90 90 90 90 b8 0c 67 40 a5 55 48 89 e5 66 90 0f 00 2d f3 46 65 00 fb f4 <5d> c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 90 90 90 90 90 [ 89.129141][ C1] RSP: 0018:ffffc90000147dd8 EFLAGS: 00000257 [ 89.135359][ C1] RAX: ffff8881f6f00000 RBX: ffff888100335100 RCX: d3ae52f89adcd800 [ 89.143625][ C1] RDX: 0000000000000001 RSI: ffffffff85ca7b00 RDI: ffffffff85ca7ac0 [ 89.151620][ C1] RBP: ffffc90000147dd8 R08: ffff8881f6f348b3 R09: 1ffff1103ede6916 [ 89.159626][ C1] R10: 0000000000000000 R11: ffffffff8500ec00 R12: 0000000000000000 [ 89.167686][ C1] R13: 0000000000000000 R14: ffff888100335100 R15: dffffc0000000000 [ 89.175679][ C1] ? __cfi_default_idle+0x10/0x10 [ 89.180904][ C1] arch_cpu_idle+0x1c/0x20 [ 89.185332][ C1] default_idle_call+0x71/0x1d0 [ 89.190326][ C1] do_idle+0x1a7/0x560 [ 89.194457][ C1] ? idle_inject_timer_fn+0x60/0x60 [ 89.199879][ C1] ? schedule_idle+0x5b/0x90 [ 89.204622][ C1] ? do_idle+0xd/0x560 [ 89.208991][ C1] cpu_startup_entry+0x43/0x60 [ 89.213902][ C1] start_secondary+0x119/0x120 [ 89.218697][ C1] secondary_startup_64_no_verify+0xce/0xdb [ 89.224821][ C1] [ 89.228061][ C1] Modules linked in: [ 89.231984][ C1] ---[ end trace 0000000000000000 ]--- [ 89.237538][ C1] RIP: 0010:__queue_work+0x575/0xd30 [ 89.242955][ C1] Code: 39 2b 0f 84 b9 00 00 00 e8 18 45 29 00 4c 89 ff e8 30 ed b8 03 49 bc 00 00 00 00 00 fc ff df 4c 8b 6d d0 4c 89 e8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ef e8 1c 98 6e 00 49 8b 7d 00 e8 c3 e8 [ 89.263036][ C1] RSP: 0018:ffffc900001b0c70 EFLAGS: 00010046 [ 89.269773][ C1] RAX: 0000000000000000 RBX: 000000007fffffff RCX: ffff888100335100 [ 89.277872][ C1] RDX: 0000000000000100 RSI: 000000007fffffff RDI: 000000007fffffff [ 89.285883][ C1] RBP: ffffc900001b0d08 R08: 0000000000000007 R09: fffffffffffffffb [ 89.293877][ C1] R10: dffffc0000000000 R11: ffffed10232b1939 R12: dffffc0000000000 [ 89.301964][ C1] R13: 0000000000000000 R14: ffff88811958c9c8 R15: 0000000000000008 [ 89.309967][ C1] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 89.318910][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 89.325598][ C1] CR2: 00007f828c084d58 CR3: 00000001272d5000 CR4: 00000000003506a0 [ 89.333947][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 89.342022][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 89.350101][ C1] Kernel panic - not syncing: Fatal exception in interrupt [ 89.357956][ C1] Kernel Offset: disabled [ 89.362297][ C1] Rebooting in 86400 seconds..