last executing test programs: 26.769698257s ago: executing program 32 (id=144): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed7f0000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(r1, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f00000002c0)={0x2c, r2, 0x903, 0x0, 0x0, {}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}]}]}, 0x2c}}, 0x0) 26.726581087s ago: executing program 33 (id=145): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x1, 0x7, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 26.689596817s ago: executing program 6 (id=146): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_enter\x00', r0}, 0x10) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) fsync(r1) 26.665737137s ago: executing program 34 (id=146): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_enter\x00', r0}, 0x10) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) fsync(r1) 26.606167027s ago: executing program 7 (id=147): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000070"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r0}, 0x10) setgid(0xee01) 26.586103738s ago: executing program 35 (id=147): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000070"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r0}, 0x10) setgid(0xee01) 26.549898948s ago: executing program 8 (id=148): write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000000000000004b84ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv6_newrule={0x24, 0x20, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e22, 0xffff}}]}, 0x24}}, 0x0) 26.519105598s ago: executing program 36 (id=148): write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000000000000004b84ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv6_newrule={0x24, 0x20, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e22, 0xffff}}]}, 0x24}}, 0x0) 26.451088488s ago: executing program 37 (id=149): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='sys_enter\x00', r0}, 0x18) getrlimit(0xf, 0x0) eventfd(0x0) 26.394924639s ago: executing program 38 (id=152): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x4, &(0x7f0000000280)=0x0) dup3(r1, r0, 0x0) io_submit(r2, 0x1, &(0x7f0000000080)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) write(r0, 0x0, 0x0) 26.331697509s ago: executing program 39 (id=151): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x28, r2, 0x301, 0x0, 0x0, {{0x32}, {@void, @val={0xc}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}]]}, 0x28}}, 0x0) 26.280225079s ago: executing program 40 (id=161): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x802) ioctl$EVIOCGBITSW(r1, 0x40044590, &(0x7f0000000300)=""/240) ioctl$EVIOCGRAB(r1, 0x40044590, 0x0) 26.237905199s ago: executing program 6 (id=153): r0 = openat$binfmt_register(0xffffff9c, &(0x7f0000000180), 0x1, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) write$binfmt_register(r0, &(0x7f00000001c0)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x7fffffff, 0x3a, '/_', 0x3a, '\\xAK-^{', 0x3a, './file0'}, 0x30) syz_open_dev$tty1(0xc, 0x4, 0x3) 26.23656978s ago: executing program 41 (id=153): r0 = openat$binfmt_register(0xffffff9c, &(0x7f0000000180), 0x1, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) write$binfmt_register(r0, &(0x7f00000001c0)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x7fffffff, 0x3a, '/_', 0x3a, '\\xAK-^{', 0x3a, './file0'}, 0x30) syz_open_dev$tty1(0xc, 0x4, 0x3) 26.216675319s ago: executing program 7 (id=154): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000980)='sys_enter\x00', r1}, 0x10) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/udp\x00') fchown(r2, 0x0, 0xee01) 26.16838609s ago: executing program 42 (id=154): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000980)='sys_enter\x00', r1}, 0x10) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/udp\x00') fchown(r2, 0x0, 0xee01) 26.16671227s ago: executing program 8 (id=155): sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="021380ee02"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0xffffffffa0018000, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0x60}}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmmsg(r0, &(0x7f0000000180), 0x32bc45944b084a6, 0x0) 26.13660833s ago: executing program 43 (id=155): sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="021380ee02"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0xffffffffa0018000, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0x60}}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmmsg(r0, &(0x7f0000000180), 0x32bc45944b084a6, 0x0) 13.799042396s ago: executing program 0 (id=448): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000202300800000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x93, &(0x7f00000003c0)=""/147, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) close(r1) 13.759629366s ago: executing program 0 (id=449): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}}, 0x20) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') preadv(r1, &(0x7f0000000200)=[{&(0x7f0000000100)=""/57, 0x39}], 0x1, 0x0, 0x0) 13.752968046s ago: executing program 0 (id=450): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}}], {0x14}}, 0x3c}}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r1, 0x400452c8, &(0x7f0000000100)) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c9, &(0x7f0000000100)) 13.745612986s ago: executing program 0 (id=451): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000004c0)='ext4_unlink_enter\x00', r0}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f00000002c0)={[{@init_itable}, {@resuid}, {@stripe}]}, 0x3, 0x445, &(0x7f0000000b00)="$eJzs28+PE1UcAPDvTLeLCLgr4g9+qKto3PhjlwVUDh7UaOIBExM96HGzuxCksIZdEyFEwRg8GWPi3Xj0X/CkF2M8mXjVuyEhhgvgqWbaGbYtbdktLUX6+SQD78282fe+nXnte/PaAEbWVPZPErE1Iv6MiIl6trnAVP2/q5fPLly7fHYhiWr13X+SWrkrl88uFEWL87bkmek0Iv0iid1t6l05feb4fKWydCrPz66e+Gh25fSZF46dmD+6dHTp5P5Dhw4emHv5pf0v9iXOrE1Xdn26vGfnWx988/bhr5rib4mjT6a6HXy6Wu1zdcO1rSGdjA2xIWxIKSKyy1Wu9f+JKMXaxZuINz8fauOAgapWq9UtnQ+fqwJ3sSSa87o8jIrigz6b/xZb6yDg1cENP4bu0mv1CVAW99V8qx8ZizQvU26Z3/bTVES8f+7f77ItBvMcAgCgyU/Z+Of5duO/NB5qKHdfvjY0GRH3R8T2iHggInZExIMRtbIPR8QjG6y/dZHkxvFPerGnwNYpG/+9kq9tNY//itFfTJby3LZa/OXkyLHK0r78NZmO8qYsP9eljp/f+OPrTscax3/ZltVfjAXzdlwc29R8zuL86vytxNzo0vmIXWPt4k+urwQkEbEzInb1WMexZ3/Y0+nYzePvog/rTNXvI56pX/9z0RJ/Iem+Pjl7T1SW9s0Wd8WNfvv9wjud6r+l+Psgu/73tr3/r8c/mTSu165svI4Lf33ZcU7T6/0/nrxXS4/n+z6ZX109NRcxnhyuN7px//61c4t8UT6Lf3pv+/6/PdZeid0Rkd3Ej0bEYxHxeN72JyLiyYjY2yX+X19/6sPe4x+sLP7FDV3/tcR4tO5pnygd/+XHpkonb4j/Wvfrf7CWms73rOf9bz3t6u1uBgAAgP+fNCK2RpLOXE+n6cxM/fvyOyLSyvLK6nNHlj8+uVj/jcBklNPiSddEw/PQuXxaX8+fj4j6VwuK4wfy58bfljbX8jMLy5XFYQcPI25Lh/6f+bs07NYBA+f3WjC69H8YXfo/jC79H0ZXm/6/eRjtAG6/dp//nw2hHcDt19L/LfvBCDH/h9Gl/8Po0v9hJK1sjpv/SL5rovhLPZ5+1yaifEc0Y2CJSO+IZkgMKDHc9yUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIB++S8AAP///fHg0g==") syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) 13.647470396s ago: executing program 0 (id=452): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000005c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4b4, 0x7b1, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f00000015c0)={0x2c, &(0x7f0000000b00)=ANY=[@ANYBLOB="4022820000008223cd001a"], 0x0, 0x0, 0x0, 0x0}, 0x0) 13.426050938s ago: executing program 0 (id=453): r0 = open(&(0x7f0000000080)='./file0\x00', 0x800c0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) fstat(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r2) fsetxattr$security_selinux(r0, &(0x7f00000007c0), 0x0, 0x0, 0x0) 13.425954708s ago: executing program 44 (id=453): r0 = open(&(0x7f0000000080)='./file0\x00', 0x800c0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) fstat(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r2) fsetxattr$security_selinux(r0, &(0x7f00000007c0), 0x0, 0x0, 0x0) 7.609514459s ago: executing program 2 (id=539): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x9e, 0x17, 0x36, 0x10, 0x17ef, 0x721e, 0xde06, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6}}]}}]}}, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000680)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="000004000000f82700e0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 5.725833349s ago: executing program 2 (id=575): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000ac0)='./bus\x00', 0x0, &(0x7f0000020000)=ANY=[@ANYBLOB="6c617a7974696d652c6e6f696e6c696e655f78617474722c6c617a7974696d652c6e6f626172726965722c6163746976655f6c6f67733d342c757365725f78617474722c6d6f64653d6c66732c616c6c6f635f6d6f64653d64656661756c742c00be9ee044c45511e65887f6fac9eba6d787c3684a836f23dbf8ad3dd5931c08b4d8bde7e8acbbf3bf3326f2faa5952a332ad2ced40c98a2affa2dad4d623f9ff3ffa81e45095548ab6200f069d0f63d20fd71d3043b0dd5c4cf9785f3f531abc19bc1548f5e0b33006bd1049ca45bd8500d67a5aa6e1c23d900000000007867738729e703bb122283fb2fae9813a0cfefcdf3dc96eb384dbb4268c50943198a96d9b1af9c91506b30922be8537f54e65cf60c6b6a5798955796aea325770d6ccc93a95fad93b2c7bad114fcbc55036a301c23b07073c71555791db8919235022bb0ee4294211ab9b43f3fbedecd223722d937aa22b31e2e9c97e5ea94e4ab83d4e5811c7556813c334aec856af0a0c12b3c93ba5aa906bde2268a0c6cbbb13f496d87c608604eb02b2c031d5ae40c75", @ANYRES64], 0x1, 0x5511, &(0x7f0000015b80)="$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") openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fadvise64(r0, 0x0, 0x3, 0x4) 5.608119299s ago: executing program 2 (id=576): futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(0x0, 0xd, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="5c0000001000010400"/20, @ANYBLOB="48cd2b6478f2ff7b2dbdf8c7840c13e8521e98f5fc7a71bcc8a00f2f6ff2ff4bc97a6a7cd2225ca33377bd5f75969fb3b4c90319cddf3b2eaddba39f178eeb43a40eea58ef1a784efb2024a6249b312bd69c1de3445820b91ec6283470f1f4b96389e5feec042a8f42d2bb7895effdbcf054ed2e31eb0bfbe4c8a724b17d4d671e4c6aa8b58e02567e7420927ec4da75ad001a0dc211ddd0c7cdf403e9500b720c3332a25f36e1328603c28f6ee619ed1ed01ddb1ea877faec96b2f5b6504ab68299434fe3bd38c13bb142b6e3dcebdc4fbc3913360844aff885ea2c2678c3beb7a88093654d172ee90bf97d7ce6e0da2d44c491b92d2c4edbb5"], 0x5c}}, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) 4.703144614s ago: executing program 2 (id=589): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000000c0)='./file0\x00', 0x2218400, &(0x7f0000000180)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c757466383d302c757365667265652c646973636172642c757466383d312c756e695f786c6174653d302c73686f72746e616d653d77696e39352c756e695f786c6174653d302c756e695f786c6174653d302c0008442895b66131b4e4d54b2ba6ae54da0e13047e9f62fbb85ccc774b3ec4c81a1a985232d16d0d934460e920a59172e764c68194b9d9d0be76c595bac1fc5a0a8256a7b77e071e9bdd6100f9ae"], 0xfd, 0x274, &(0x7f0000000500)="$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") creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f00000005c0)='./bus\x00', 0x147842, 0x0) preadv2(r0, &(0x7f0000000040)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0xe) 4.682337264s ago: executing program 2 (id=590): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x10) process_mrelease(0xffffffffffffffff, 0x0) 4.320274526s ago: executing program 2 (id=594): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000200)='cpuset.mems\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000080)='cpuacct.usage_all\x00', 0x275a, 0x0) sendfile(r1, r2, 0x0, 0x7ffff000) 4.301533596s ago: executing program 45 (id=594): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000200)='cpuset.mems\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000080)='cpuacct.usage_all\x00', 0x275a, 0x0) sendfile(r1, r2, 0x0, 0x7ffff000) 3.70099564s ago: executing program 1 (id=613): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000440)={[{@quota}, {@oldalloc}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@block_validity}, {@nomblk_io_submit}]}, 0x3, 0x434, &(0x7f0000000940)="$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") r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000200)='.\x00', 0x10000a0) symlinkat(&(0x7f00000001c0)='./file7\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file6\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000b80)='./file6\x00', 0xffffffffffffff9c, &(0x7f0000000bc0)='./file3\x00', 0x0) 3.6409658s ago: executing program 1 (id=616): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) faccessat(0xffffffffffffffff, 0x0, 0xc) 3.57712148s ago: executing program 1 (id=618): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10) 3.57694884s ago: executing program 1 (id=619): socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000005c0)='./file1\x00', 0x1018ed8, &(0x7f0000000180)={[{@sysvgroups}, {@noload}, {@nobh}, {@noload}, {@journal_dev={'journal_dev', 0x3d, 0x4}}, {@norecovery}, {@errors_continue}, {@quota}]}, 0x6, 0x644, &(0x7f00000006c0)="$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") r0 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009b23fd406d04c1088dee000000010902240001000000000904000000ff0100000724", @ANYRES16=r0], 0x0) 3.048649743s ago: executing program 9 (id=630): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x2010c15, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) fchmod(r0, 0x0) 2.960150934s ago: executing program 9 (id=631): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000000000084c05e60c00000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000005c0)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="000090"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f00000008c0)=ANY=[@ANYBLOB="001745"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.961767529s ago: executing program 1 (id=655): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1e7d, 0x2c2e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="0000070000000700182168b4"], 0x0, 0x0, 0x0, 0x0}, 0x0) 905.838025ms ago: executing program 9 (id=698): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000440)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$eJzs3c9vVFsdAPDvnXZoKQMFZaFGBRFFQ5j+ABqCC2GjMYTESFy5gNoOTdMZpum0SCuLsnRvIokr/RPcuTBh5cKdO925wYUJKnkv9CVvMS/3zqUd2g7te7Qd6Hw+ye2955xhvufMcM6Ze2B6AuhZZyNiNSKORMS9iBjO85P8iButI33cq5ePp9ZePp5Kotm8878kK0/zou3PpI7lzzkYET/7ccQvk61xG8src5PVamUhT48s1uZHGssrl2YLec74xNjE6LXLV8f3rK1nan968aPZWz//y5+/8fzvq9//dVqt0m+OZ2Xt7dhLraYXo9SW1x8Rt/YjWJf0539/+PCkve1LEXEu6//D0Ze9mwDAYdZsDkdzuD0NABx26f1/KZJCOV8LKEWhUC631vBOx1ChWm8sXhyuLz2YjmwN62QUC/dnq5XRfK3wZBSTND2WXW+kxzelL0fEqYj47cDRLF2eqlenu/nBBwB62LFN8//HA635HwA45Aa7XQEA4MCZ/wGg95j/AaD3fI7537cDAeCQcP8PAL3H/A8AvWfH+f/JwdQDADgQP719Oz2aa/nvv55+uLz0g9LDS9OVxly5tjRVnqovzJdn6vWZaqU81Wzu9HzVen1+7Mp6srG8crdWX3qweHe2NjlTuVsp7nN7AICdnTrz7J9JRKxeP5od0baXg7kaDrdCtysAdE1ftysAdI3v80Dv2sU9vmUAOOS22aL3DR3/i9BTm7/Ch+rCV63/Q6+y/g+964ut//9wz+sBHDzr/9C7ms3Env8A0GOs8QPv9O//AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0KNK2ZEUytle4Kvpz0K5HHE8Ik5GMbk/W62MRsSJiPjHQHEgTY91u9IAwDsq/CfJ9/+6MHy+tLn0SPLJQHaOiF/9/s7vHk0uLi6Mpfn/X89ffJrnjx/pRgMAgHY3tma15un83HYj/+rl46nXx0FW8cXN1uaiady1/GiV9Ed/dh6MYkQMfZTk6Zb080rfHsRffRIRX9lo/6O2CKVsDaS18+nm+Gns4/sQf+P13xy/8Eb8QlaWnovZa/HlPagL9JpnN1vjZN730i6W979CnM3O2/f/wWyEenevx7+1LeNfYX3869sSP8n6/Nn19Ntr8uLKX3+yJbM53Cp7EvG1/u3iJ+vxkw7j7/ldtvFfX//muU5lzT9EXIjt47fUsmF2ZLE2P9JYXrk0W5ucqcxUHoyPT4xNjF67fHV8JFujbv3823Yx/nv94olO8dP2D3WIP7hD+7+zy/b/8dN7v/jWW+J/79vbv/+n3xI/nRO/u8v4k0M3Om7fncaf7tD+nd7/i7uM//zfK9O7fCgAcAAayytzk9VqZWGHi/Sz5k6PcfFhXsRqxHtQDRfv1UW3RyZgv210+m7XBAAAAAAAAAAAAAAA6KSxvDI3EPv7daJutxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDD67MAAAD//w/PzvM=") mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000280)='./bus/file0\x00', 0x0) renameat2(r0, &(0x7f00000001c0)='./bus/file0\x00', r0, &(0x7f0000000140)='./file0\x00', 0x0) 881.342045ms ago: executing program 9 (id=701): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000001000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0x100000000}, 0x18) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) ioctl$KDFONTOP_GET(r2, 0x4b4b, &(0x7f0000000400)={0x1, 0x0, 0x0, 0x0, 0x4b, 0x0}) 837.478725ms ago: executing program 9 (id=704): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x10) personality(0x0) 837.289005ms ago: executing program 9 (id=705): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc70e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x101, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) syz_usb_control_io$hid(r0, &(0x7f0000000c80)={0x24, 0x0, 0x0, &(0x7f0000000c00)={0x0, 0x22, 0x7, {[@global=@item_012={0x1, 0x1, 0x7, 'j'}, @main=@item_4={0x3, 0x0, 0xa, "27c41fc3"}]}}, 0x0}, 0x0) 809.985485ms ago: executing program 4 (id=706): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0xdc0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 798.937115ms ago: executing program 4 (id=707): open$dir(&(0x7f0000000180)='./file0\x00', 0x7e, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000000000000000000008500000050000000850000000800000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000180)='proc\x00', 0x0, 0x0) 749.808116ms ago: executing program 4 (id=708): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffff7f850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='percpu_create_chunk\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 749.504355ms ago: executing program 4 (id=709): syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000500)='./file0\x00', 0x21000e, &(0x7f0000000080), 0x1, 0x4f4, &(0x7f0000000540)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0185879, &(0x7f0000000080)={@desc={0x1, 0x0, @desc4}}) 475.366407ms ago: executing program 4 (id=719): r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000007d00000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, 0x0, 0x0) 465.722817ms ago: executing program 4 (id=721): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000008640)=[{0x0}], 0x1, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0}) write(r0, &(0x7f0000000000)="fa", 0xfffffdef) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 401.565767ms ago: executing program 5 (id=725): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) pipe(&(0x7f0000000100)) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x4}, @IFLA_VLAN_INGRESS_QOS={0x4}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x4c}}, 0x0) 388.009797ms ago: executing program 5 (id=726): r0 = syz_open_dev$usbfs(&(0x7f0000000c40), 0x310decfa, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0xc1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r1, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0x80045510, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0}) 362.687618ms ago: executing program 5 (id=727): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000480)='cgroup.threads\x00', 0x2, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendfile(r2, r1, 0x0, 0x2) 297.736598ms ago: executing program 5 (id=728): ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, &(0x7f0000001340)={{0x0, 0x0, 0x80}, "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", "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"}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000283d0020850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001100)={&(0x7f0000001500)='mm_page_alloc\x00', r0}, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x800448d4, &(0x7f0000000080)={0x0, 0x200, "00fa00"}) 297.528808ms ago: executing program 5 (id=729): write$cgroup_int(0xffffffffffffffff, &(0x7f0000000280)=0x4e6e5e0e, 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000280)=ANY=[@ANYBLOB='N-N:N/'], 0x6a) 293.263028ms ago: executing program 5 (id=731): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000001900), 0x0, 0x0) read$hidraw(r1, 0x0, 0x49) 177.503418ms ago: executing program 3 (id=734): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x42) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) getrlimit(0x2, &(0x7f00000002c0)) 172.370988ms ago: executing program 3 (id=735): r0 = creat(0x0, 0x0) r1 = openat$sysfs(0xffffff9c, &(0x7f0000000200)='/sys/kernel/notes', 0x0, 0x0) preadv(r1, &(0x7f0000000180)=[{&(0x7f00000012c0)=""/112, 0x70}], 0x1, 0x0, 0x0) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000840)=0xffffffffffffffff, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x1d, &(0x7f00000006c0)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @exit, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}, @cb_func={0x18, 0x0, 0x4, 0x0, 0x2}, @jmp={0x5, 0x0, 0x7, 0x7, 0x3, 0x0, 0x8}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfa}}, @call={0x85, 0x0, 0x0, 0xbb}, @cb_func={0x18, 0x2, 0x4, 0x0, 0x6}], &(0x7f00000005c0)='syzkaller\x00', 0x7, 0x44, &(0x7f00000007c0)=""/68, 0x40f00, 0x40, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000008c0)=[0xffffffffffffffff], &(0x7f0000000900)=[{0x4, 0x5, 0x8, 0xa}, {0x0, 0x3, 0x5, 0xb}], 0x10, 0x10000, @void, @value}, 0x90) 163.272838ms ago: executing program 3 (id=736): socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet(0x2, 0x800, 0x80000000) syz_emit_ethernet(0xfdef, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000000000100bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065060400010000000404000001000000b7050000220000006a0a00fe00000000850000000b000000b7000000592000009500000000000000a3028cb5af6c8f5d76781dcb7729f01726a067818b990b13bfddb7e78270010720596bb3b4d821d976f5843061cc2e3afbae82d7932d192321fa3b3042f100"/187], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0xa002a0, 0x10, 0x18, &(0x7f0000000000)="5ae02efc441a80536af0d1d905c723fa", &(0x7f0000000040)=""/24, 0x6414}, 0x28) 81.904239ms ago: executing program 3 (id=737): r0 = openat$tun(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000002280)={'pim6reg0\x00', 0x2102}) r1 = openat$tun(0xffffff9c, &(0x7f0000000040), 0x182, 0x0) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000002280)={'pim6reg0\x00', 0x2102}) 78.468569ms ago: executing program 1 (id=738): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="82000000000000009c000040"]) 8.764989ms ago: executing program 3 (id=739): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='oom_score_adj_update\x00', r0}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000280)='0', 0x1}], 0x1) 0s ago: executing program 3 (id=740): syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x810, &(0x7f00000018c0)=ANY=[], 0xfd, 0x1501, &(0x7f00000002c0)="$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") r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000380)={'wg1\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2300000c0000000000000c0000000c00018008000100", @ANYRES32=r2, @ANYBLOB="0c00038008000380"], 0x2c}}, 0x0) 0s ago: executing program 3 (id=743): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000004000000000000000000190095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r0, r2}, 0x10) syz_emit_ethernet(0x66, &(0x7f0000001580)={@multicast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "711e8f", 0x30, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @dev}, {[], @time_exceed={0x9, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "bede78", 0x0, 0x0, 0x0, @dev, @loopback}}}}}}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.149' (ED25519) to the list of known hosts. [ 20.030193][ T28] audit: type=1400 audit(1731700572.788:66): avc: denied { mounton } for pid=281 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 20.031213][ T281] cgroup: Unknown subsys name 'net' [ 20.052997][ T28] audit: type=1400 audit(1731700572.788:67): avc: denied { mount } for pid=281 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 20.079887][ T28] audit: type=1400 audit(1731700572.818:68): avc: denied { unmount } for pid=281 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 20.080083][ T281] cgroup: Unknown subsys name 'devices' [ 20.218498][ T281] cgroup: Unknown subsys name 'hugetlb' [ 20.223892][ T281] cgroup: Unknown subsys name 'rlimit' [ 20.323264][ T28] audit: type=1400 audit(1731700573.078:69): avc: denied { setattr } for pid=281 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 20.346246][ T28] audit: type=1400 audit(1731700573.078:70): avc: denied { mounton } for pid=281 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 20.370992][ T28] audit: type=1400 audit(1731700573.078:71): avc: denied { mount } for pid=281 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 20.373253][ T284] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 20.402918][ T28] audit: type=1400 audit(1731700573.158:72): avc: denied { relabelto } for pid=284 comm="mkswap" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.422972][ T281] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 20.428261][ T28] audit: type=1400 audit(1731700573.158:73): avc: denied { write } for pid=284 comm="mkswap" path="/root/swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.462520][ T28] audit: type=1400 audit(1731700573.158:74): avc: denied { read } for pid=281 comm="syz-executor" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.487806][ T28] audit: type=1400 audit(1731700573.158:75): avc: denied { open } for pid=281 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.922430][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.929333][ T291] bridge0: port 1(bridge_slave_0) entered disabled state [ 20.936708][ T291] device bridge_slave_0 entered promiscuous mode [ 20.944474][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.951399][ T291] bridge0: port 2(bridge_slave_1) entered disabled state [ 20.958810][ T291] device bridge_slave_1 entered promiscuous mode [ 21.095444][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.102374][ T292] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.109591][ T292] device bridge_slave_0 entered promiscuous mode [ 21.118500][ T297] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.125338][ T297] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.132650][ T297] device bridge_slave_0 entered promiscuous mode [ 21.142623][ T297] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.149866][ T297] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.157082][ T297] device bridge_slave_1 entered promiscuous mode [ 21.163506][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.170404][ T292] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.177503][ T292] device bridge_slave_1 entered promiscuous mode [ 21.190727][ T299] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.197630][ T299] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.204809][ T299] device bridge_slave_0 entered promiscuous mode [ 21.219553][ T299] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.226401][ T299] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.233625][ T299] device bridge_slave_1 entered promiscuous mode [ 21.277592][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.284432][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.291663][ T293] device bridge_slave_0 entered promiscuous mode [ 21.298329][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.305160][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.312573][ T293] device bridge_slave_1 entered promiscuous mode [ 21.333589][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.340450][ T291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.347573][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.354313][ T291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.484140][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.491531][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.499876][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 21.507154][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 21.536241][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 21.544240][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.551081][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.558350][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 21.566269][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.573123][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.598231][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 21.612800][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 21.636846][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 21.644765][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 21.652815][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 21.661285][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.668126][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.675367][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 21.683369][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.690208][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.715757][ T291] device veth0_vlan entered promiscuous mode [ 21.721833][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 21.730255][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 21.738357][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 21.745550][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 21.752958][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 21.760794][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 21.768618][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 21.797508][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 21.805534][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.812379][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.819647][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 21.827933][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.834762][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.842216][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 21.861033][ T291] device veth1_macvtap entered promiscuous mode [ 21.869633][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 21.878173][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 21.885348][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 21.893436][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 21.901389][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 21.909560][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.916392][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.923659][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 21.932159][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.939006][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.947934][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 21.967785][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 21.975653][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 21.983574][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 21.991622][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 21.999962][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 22.008233][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 22.016275][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 22.024483][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 22.032663][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 22.040823][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 22.054199][ T297] device veth0_vlan entered promiscuous mode [ 22.066240][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 22.073770][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 22.081081][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 22.089512][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 22.097472][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 22.105500][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 22.113799][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.120655][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.127989][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 22.136190][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 22.144561][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 22.151900][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 22.160151][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 22.173762][ T292] device veth0_vlan entered promiscuous mode [ 22.184432][ T297] device veth1_macvtap entered promiscuous mode [ 22.192779][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 22.201007][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 22.209500][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.216319][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.223852][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 22.231730][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 22.239718][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 22.247827][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 22.255695][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 22.263324][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 22.270637][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 22.293230][ T299] device veth0_vlan entered promiscuous mode [ 22.303556][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 22.313629][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 22.321766][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 22.329925][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 22.339443][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 22.347535][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 22.355433][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 22.363745][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 22.371973][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 22.380189][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 22.388571][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 22.396736][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 22.404782][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 22.412902][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 22.420949][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 22.428384][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 22.439338][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 22.447314][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 22.466713][ T292] device veth1_macvtap entered promiscuous mode [ 22.479945][ T299] device veth1_macvtap entered promiscuous mode [ 22.489076][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 22.497693][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 22.505250][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 22.513952][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 22.525184][ T293] device veth0_vlan entered promiscuous mode [ 22.546450][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 22.554518][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 22.563025][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 22.563396][ T320] loop2: detected capacity change from 0 to 1024 [ 22.572096][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 22.585956][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 22.594644][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 22.606326][ T320] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 22.609526][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 22.625605][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 22.633919][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 22.642243][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 22.652906][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 22.660302][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 22.660525][ T320] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 22.685408][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 22.694057][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 22.705478][ T293] device veth1_macvtap entered promiscuous mode [ 22.768112][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 22.784319][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 22.796963][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 22.833834][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 22.844870][ T297] EXT4-fs (loop2): unmounting filesystem. [ 22.857825][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 22.907327][ T340] loop2: detected capacity change from 0 to 512 [ 22.942163][ T340] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 22.968153][ T340] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038 (0x7fffffff) [ 22.995008][ T346] x_tables: ip_tables: REDIRECT target: used from hooks INPUT, but only usable from PREROUTING/OUTPUT [ 23.015143][ T340] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 23.046595][ T314] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 23.082996][ T340] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 15 with max blocks 1 with error 28 [ 23.135068][ T340] EXT4-fs (loop2): This should not happen!! Data will be lost [ 23.135068][ T340] [ 23.146314][ T351] syz.0.12 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 23.168517][ T340] EXT4-fs (loop2): Total free blocks count 0 [ 23.199354][ T340] EXT4-fs (loop2): Free/Dirty block details [ 23.216636][ T340] EXT4-fs (loop2): free_blocks=39626 [ 23.232709][ T340] EXT4-fs (loop2): dirty_blocks=2 [ 23.244083][ T340] EXT4-fs (loop2): Block reservation details [ 23.258849][ T340] EXT4-fs (loop2): i_reserved_data_blocks=2 [ 23.283573][ T318] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 32768 with max blocks 1 with error 28 [ 23.365236][ T366] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 23.416602][ T314] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 23.438279][ T314] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 23.453601][ T314] usb 2-1: New USB device found, idVendor=09da, idProduct=022b, bcdDevice= 0.00 [ 23.469023][ T314] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 23.494946][ T314] usb 2-1: config 0 descriptor?? [ 23.515903][ T383] loop0: detected capacity change from 0 to 2048 [ 23.565544][ T316] loop4: detected capacity change from 0 to 131072 [ 23.584754][ T383] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 23.585112][ T316] F2FS-fs (loop4): invalid crc value [ 23.596458][ T383] ext4 filesystem being mounted at /12/file0 supports timestamps until 2038 (0x7fffffff) [ 23.612180][ T394] device veth0 entered promiscuous mode [ 23.618477][ T383] fs-verity: sha512 using implementation "sha512-avx2" [ 23.620590][ T393] device veth0 left promiscuous mode [ 23.637001][ T316] F2FS-fs (loop4): Found nat_bits in checkpoint [ 23.646167][ T293] EXT4-fs (loop0): unmounting filesystem. [ 23.671572][ T383] syz.0.26 (383) used greatest stack depth: 20616 bytes left [ 23.694231][ T316] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 23.713030][ T405] xt_hashlimit: size too large, truncated to 1048576 [ 23.966612][ T60] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 23.986546][ T294] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 24.009895][ T314] a4tech 0003:09DA:022B.0001: unbalanced collection at end of report description [ 24.022965][ T314] a4tech 0003:09DA:022B.0001: parse failed [ 24.028801][ T314] a4tech: probe of 0003:09DA:022B.0001 failed with error -22 [ 24.065988][ T423] loop3: detected capacity change from 0 to 512 [ 24.073536][ T423] ======================================================= [ 24.073536][ T423] WARNING: The mand mount option has been deprecated and [ 24.073536][ T423] and is ignored by this kernel. Remove the mand [ 24.073536][ T423] option from the mount to silence this warning. [ 24.073536][ T423] ======================================================= [ 24.108760][ T423] ext2: Unknown parameter 'euid>00000000000000000000' [ 24.166069][ T430] netlink: 12 bytes leftover after parsing attributes in process `syz.3.43'. [ 24.174992][ T430] device bridge_slave_1 left promiscuous mode [ 24.181971][ T430] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.189960][ T430] device bridge_slave_0 left promiscuous mode [ 24.200346][ T430] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.228539][ T24] usb 2-1: USB disconnect, device number 2 [ 24.236816][ T60] usb 3-1: Using ep0 maxpacket: 16 [ 24.333097][ T433] loop4: detected capacity change from 0 to 40427 [ 24.341166][ T433] F2FS-fs (loop4): fault_injection options not supported [ 24.349022][ T433] F2FS-fs (loop4): invalid crc value [ 24.355174][ T433] F2FS-fs (loop4): Found nat_bits in checkpoint [ 24.356774][ T294] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 24.372619][ T294] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 24.386614][ T60] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 24.400953][ T294] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 24.409153][ T60] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 24.410733][ T294] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 24.424149][ T60] usb 3-1: New USB device found, idVendor=17ef, idProduct=60a3, bcdDevice= 0.00 [ 24.429067][ T442] loop3: detected capacity change from 0 to 128 [ 24.436987][ T60] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 24.443616][ T294] usb 1-1: config 0 descriptor?? [ 24.450436][ T433] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 24.471378][ T60] usb 3-1: config 0 descriptor?? [ 24.488773][ T291] syz-executor: attempt to access beyond end of device [ 24.488773][ T291] loop4: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 24.564766][ T313] kernel write not supported for file /vcsa1 (pid: 313 comm: kworker/0:3) [ 24.665064][ T458] loop4: detected capacity change from 0 to 1024 [ 24.671630][ T458] EXT4-fs: Ignoring removed nomblk_io_submit option [ 24.689730][ T458] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 24.704047][ T458] process 'syz.4.54' launched './file0/file0' with NULL argv: empty string added [ 24.724527][ T291] EXT4-fs (loop4): unmounting filesystem. [ 24.783794][ T469] netlink: 'syz.1.58': attribute type 4 has an invalid length. [ 24.800627][ T471] syz.4.59[471] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 24.800697][ T471] syz.4.59[471] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 24.833146][ T456] loop3: detected capacity change from 0 to 40427 [ 24.854298][ T477] loop4: detected capacity change from 0 to 256 [ 24.861169][ T456] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 24.869148][ T456] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 24.881821][ T477] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 24.896771][ T456] F2FS-fs (loop3): Found nat_bits in checkpoint [ 24.903477][ T485] loop1: detected capacity change from 0 to 512 [ 24.916805][ T485] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 24.926050][ T485] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 24.927575][ T294] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 24.935503][ T485] EXT4-fs (loop1): warning: checktime reached, running e2fsck is recommended [ 24.950371][ T485] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 24.966901][ T60] hid (null): report_id 0 is invalid [ 24.973084][ T60] lenovo 0003:17EF:60A3.0003: report_id 0 is invalid [ 24.974149][ T294] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 24.987095][ T60] lenovo 0003:17EF:60A3.0003: item 0 1 1 8 parsing failed [ 24.994498][ T60] lenovo 0003:17EF:60A3.0003: hid_parse failed [ 25.000925][ T60] lenovo: probe of 0003:17EF:60A3.0003 failed with error -22 [ 25.001143][ T485] System zones: 0-2, 18-18, 34-34 [ 25.018414][ T456] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 25.025423][ T485] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1086: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 25.025585][ T294] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 25.040038][ T456] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 25.056697][ T485] EXT4-fs (loop1): 1 truncate cleaned up [ 25.062255][ T485] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 25.078169][ T28] kauditd_printk_skb: 97 callbacks suppressed [ 25.078182][ T28] audit: type=1400 audit(1731700577.620:173): avc: denied { append } for pid=492 comm="syz.4.67" name="001" dev="devtmpfs" ino=181 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 25.090360][ T294] plantronics 0003:047F:FFFF.0002: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 25.113888][ T28] audit: type=1400 audit(1731700577.650:174): avc: denied { setattr } for pid=455 comm="syz.3.53" path="/21/bus" dev="loop3" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 25.134601][ T485] EXT4-fs warning (device loop1): verify_group_input:151: Cannot add at group 1986356271 (only 1 groups) [ 25.142409][ T456] syz.3.53: attempt to access beyond end of device [ 25.142409][ T456] loop3: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 25.165401][ T28] audit: type=1400 audit(1731700577.690:175): avc: denied { append } for pid=455 comm="syz.3.53" path="/21/bus/memory.events" dev="loop3" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 25.188855][ T292] EXT4-fs (loop1): unmounting filesystem. [ 25.194690][ T60] usb 3-1: USB disconnect, device number 2 [ 25.237148][ T498] block device autoloading is deprecated and will be removed. [ 25.251308][ T500] Illegal XDP return value 4294966772 on prog (id 33) dev syz_tun, expect packet loss! [ 25.278959][ T294] usb 1-1: USB disconnect, device number 2 [ 25.287445][ T28] audit: type=1400 audit(1731700577.830:176): avc: denied { validate_trans } for pid=501 comm="syz.4.72" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 25.318487][ T28] audit: type=1326 audit(1731700577.830:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=503 comm="syz.1.73" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f998d37e719 code=0x0 [ 25.342875][ T28] audit: type=1400 audit(1731700577.880:178): avc: denied { write } for pid=505 comm="syz.4.74" name="001" dev="devtmpfs" ino=181 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 25.386291][ T510] netlink: 'syz.4.76': attribute type 15 has an invalid length. [ 25.393851][ T510] netlink: 8 bytes leftover after parsing attributes in process `syz.4.76'. [ 25.418875][ T28] audit: type=1400 audit(1731700577.960:179): avc: denied { execute } for pid=511 comm="syz.4.77" path="/21/cpu.stat" dev="tmpfs" ino=126 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 25.545933][ T514] loop3: detected capacity change from 0 to 40427 [ 25.547635][ T520] loop4: detected capacity change from 0 to 256 [ 25.558732][ T28] audit: type=1400 audit(1731700578.100:180): avc: denied { append } for pid=85 comm="syslogd" name="messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 25.580744][ T514] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 25.583431][ T28] audit: type=1400 audit(1731700578.100:181): avc: denied { open } for pid=85 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 25.588506][ T514] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 25.611382][ T28] audit: type=1400 audit(1731700578.100:182): avc: denied { getattr } for pid=85 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 25.627110][ T520] FAT-fs (loop4): Directory bread(block 64) failed [ 25.641514][ T514] F2FS-fs (loop3): invalid crc value [ 25.647192][ T520] FAT-fs (loop4): Directory bread(block 65) failed [ 25.647241][ T520] FAT-fs (loop4): Directory bread(block 66) failed [ 25.653773][ T514] F2FS-fs (loop3): Found nat_bits in checkpoint [ 25.658648][ T520] FAT-fs (loop4): Directory bread(block 67) failed [ 25.677397][ T520] FAT-fs (loop4): Directory bread(block 68) failed [ 25.683695][ T520] FAT-fs (loop4): Directory bread(block 69) failed [ 25.690262][ T520] FAT-fs (loop4): Directory bread(block 70) failed [ 25.696608][ T520] FAT-fs (loop4): Directory bread(block 71) failed [ 25.698042][ T514] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 25.702939][ T520] FAT-fs (loop4): Directory bread(block 72) failed [ 25.710721][ T514] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 25.716754][ T520] FAT-fs (loop4): Directory bread(block 73) failed [ 25.773092][ T8] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 25.782592][ T8] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 25.791590][ T530] device ip_vti0 entered promiscuous mode [ 25.797531][ T530] device vlan2 entered promiscuous mode [ 25.815056][ T382] kworker/u4:5: attempt to access beyond end of device [ 25.815056][ T382] loop4: rw=1, sector=1224, nr_sectors = 12 limit=256 [ 25.948636][ T552] loop0: detected capacity change from 0 to 256 [ 25.955106][ T552] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 25.968459][ T552] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 26.035417][ T560] loop4: detected capacity change from 0 to 128 [ 26.048062][ T560] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 26.058413][ T560] ext4 filesystem being mounted at /27/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 26.104063][ T291] EXT4-fs (loop4): unmounting filesystem. [ 26.118323][ T566] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 26.128237][ T566] SELinux: failed to load policy [ 26.153960][ T572] loop4: detected capacity change from 0 to 512 [ 26.161869][ T572] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 26.182641][ T572] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 26.190035][ T568] netlink: 'syz.0.99': attribute type 4 has an invalid length. [ 26.192646][ T431] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 26.224057][ T572] EXT4-fs (loop4): 1 orphan inode deleted [ 26.230037][ T572] EXT4-fs (loop4): 1 truncate cleaned up [ 26.235680][ T572] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 26.265368][ T572] EXT4-fs error (device loop4): ext4_search_dir:1549: inode #12: block 7: comm syz.4.101: bad entry in directory: directory entry overrun - offset=0, inode=13, rec_len=784, size=56 fake=0 [ 26.286560][ T585] syz.0.107[585] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 26.286631][ T585] syz.0.107[585] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 26.297987][ T572] EXT4-fs (loop4): Remounting filesystem read-only [ 26.317459][ T585] hub 9-0:1.0: USB hub found [ 26.322102][ T585] hub 9-0:1.0: 1 port detected [ 26.325425][ T572] EXT4-fs error (device loop4): ext4_inlinedir_to_tree:1432: inode #12: block 7: comm syz.4.101: path /29/bus/file0: bad entry in directory: directory entry overrun - offset=788, inode=13, rec_len=784, size=60 fake=0 [ 26.358066][ T291] EXT4-fs (loop4): unmounting filesystem. [ 26.361369][ T10] tipc: Subscription rejected, illegal request [ 26.382493][ T592] netlink: 24 bytes leftover after parsing attributes in process `syz.4.110'. [ 26.397175][ T598] xt_hashlimit: size too large, truncated to 1048576 [ 26.589500][ T600] loop4: detected capacity change from 0 to 40427 [ 26.601772][ T600] F2FS-fs (loop4): invalid crc value [ 26.618099][ T600] F2FS-fs (loop4): Found nat_bits in checkpoint [ 26.620527][ T614] loop1: detected capacity change from 0 to 512 [ 26.631621][ T431] usb 3-1: Using ep0 maxpacket: 16 [ 26.659377][ T600] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 26.678204][ T614] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 26.687360][ T614] ext4 filesystem being mounted at /17/file0 supports timestamps until 2038 (0x7fffffff) [ 26.705028][ T292] EXT4-fs (loop1): unmounting filesystem. [ 26.717640][ T600] syz.4.114: attempt to access beyond end of device [ 26.717640][ T600] loop4: rw=34817, sector=77824, nr_sectors = 2048 limit=40427 [ 26.745098][ T291] syz-executor: attempt to access beyond end of device [ 26.745098][ T291] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 26.768210][ T431] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 26.786698][ T431] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 26.806623][ T431] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 26.836682][ T431] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 26.845544][ T431] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 26.866616][ T542] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 26.887484][ T431] cdc_acm 3-1:1.0: Control and data interfaces are not separated! [ 26.901881][ T634] mmap: syz.1.126 (634) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 26.943543][ T641] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 26.960774][ T643] kvm [642]: vcpu0, guest rIP: 0xfff0 unimplemented HWCR wrmsr: 0xb9200080000 [ 27.049422][ T647] syz.1.131[647] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 27.056691][ T647] syz.1.131[647] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 27.096989][ T431] cdc_acm 3-1:1.0: ttyACM0: USB ACM device [ 27.114887][ T431] usb 3-1: USB disconnect, device number 3 [ 27.116592][ T294] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 27.166720][ T663] af_packet: tpacket_rcv: packet too big, clamped from 62 to 4294967286. macoff=82 [ 27.168945][ T664] loop1: detected capacity change from 0 to 256 [ 27.190606][ T664] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 27.211868][ T664] exFAT-fs (loop1): hint_cluster is invalid (1) [ 27.219269][ T664] syz.1.139: attempt to access beyond end of device [ 27.219269][ T664] loop1: rw=2049, sector=34359738488, nr_sectors = 8 limit=256 [ 27.233990][ T664] exFAT-fs (loop1): error, invalid access to exfat cache (entry 0x00000000) [ 27.242531][ T664] exFAT-fs (loop1): Filesystem has been set read-only [ 27.249204][ T664] exFAT-fs (loop1): error, failed to bmap (inode : ffff8881187bee30 iblock : 9, err : -5) [ 27.259044][ T664] syz.1.139: attempt to access beyond end of device [ 27.259044][ T664] loop1: rw=2049, sector=34359738495, nr_sectors = 1 limit=256 [ 27.273043][ T664] Buffer I/O error on dev loop1, logical block 34359738495, lost async page write [ 27.366735][ T294] usb 4-1: Using ep0 maxpacket: 16 [ 27.486551][ T60] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 27.486574][ T294] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 27.502085][ T294] usb 4-1: config 0 has no interface number 0 [ 27.508047][ T294] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 27.517782][ T294] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 27.527899][ T294] usb 4-1: config 0 interface 41 has no altsetting 0 [ 27.686652][ T294] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 27.695520][ T294] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 27.723639][ T294] usb 4-1: Product: syz [ 27.727899][ T294] usb 4-1: Manufacturer: syz [ 27.732348][ T294] usb 4-1: SerialNumber: syz [ 27.745687][ T294] usb 4-1: config 0 descriptor?? [ 27.771080][ T628] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 27.789528][ T628] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 28.027871][ T628] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 28.045083][ T628] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 28.096637][ T60] usb 1-1: New USB device found, idVendor=0b95, idProduct=772b, bcdDevice=a2.4c [ 28.105797][ T60] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 28.113718][ T60] usb 1-1: Product: syz [ 28.121242][ T60] usb 1-1: Manufacturer: syz [ 28.125667][ T60] usb 1-1: SerialNumber: syz [ 28.131180][ T60] usb 1-1: config 0 descriptor?? [ 28.151577][ T694] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.158486][ T694] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.165644][ T694] device bridge_slave_0 entered promiscuous mode [ 28.173957][ T694] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.181032][ T694] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.188395][ T694] device bridge_slave_1 entered promiscuous mode [ 28.199349][ T378] device bridge_slave_1 left promiscuous mode [ 28.205266][ T378] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.212525][ T378] device bridge_slave_0 left promiscuous mode [ 28.218548][ T378] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.225988][ T378] device veth1_macvtap left promiscuous mode [ 28.231853][ T378] device veth0_vlan left promiscuous mode [ 28.325990][ T699] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.333092][ T699] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.340538][ T699] device bridge_slave_0 entered promiscuous mode [ 28.357641][ T699] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.364487][ T699] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.372071][ T699] device bridge_slave_1 entered promiscuous mode [ 28.386725][ T726] loop4: detected capacity change from 0 to 512 [ 28.393839][ T726] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 28.408757][ T726] EXT4-fs error (device loop4): ext4_orphan_get:1396: inode #17: comm syz.4.169: iget: bad i_size value: -6917529027641081756 [ 28.422926][ T726] EXT4-fs error (device loop4): ext4_orphan_get:1401: comm syz.4.169: couldn't read orphan inode 17 (err -117) [ 28.434796][ T726] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 28.454711][ T726] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.169: bg 0: block 65: padding at end of block bitmap is not set [ 28.469067][ T726] EXT4-fs error (device loop4): ext4_acquire_dquot:6787: comm syz.4.169: Failed to acquire dquot type 0 [ 28.486671][ T291] EXT4-fs (loop4): unmounting filesystem. [ 28.492238][ T726] syz.4.169 (726) used greatest stack depth: 19528 bytes left [ 28.506632][ T294] Error reading MAC address [ 28.511632][ T382] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 28.519019][ T382] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 28.526240][ T382] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 28.534334][ T628] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 28.534364][ T628] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 28.549089][ T382] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 28.557144][ T382] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.563963][ T382] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.571253][ T382] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 28.580126][ T382] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 28.588249][ T382] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.592615][ T736] netlink: 'syz.4.172': attribute type 1 has an invalid length. [ 28.595094][ T382] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.595460][ T382] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 28.648003][ T382] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 28.655817][ T382] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 28.665856][ T382] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 28.688449][ T382] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 28.706344][ T694] device veth0_vlan entered promiscuous mode [ 28.713051][ T382] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 28.721250][ T382] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 28.729416][ T382] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 28.753192][ T694] device veth1_macvtap entered promiscuous mode [ 28.760712][ T382] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 28.769645][ T382] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 28.776976][ T382] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 28.784152][ T382] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 28.792503][ T382] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 28.792973][ T294] sr9700 4-1:0.41 (unnamed net_device) (uninitialized): Error reading MAC address [ 28.800775][ T382] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.811748][ T294] usb 4-1: USB disconnect, device number 2 [ 28.816379][ T382] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.829246][ T382] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 28.837369][ T382] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 28.845472][ T382] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.852314][ T382] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.859615][ T382] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 28.875892][ T382] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 28.884471][ T382] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 28.893493][ T382] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 28.903042][ T382] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 28.919464][ T378] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 28.927620][ T378] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 28.942142][ T752] loop4: detected capacity change from 0 to 256 [ 28.946115][ T699] device veth0_vlan entered promiscuous mode [ 28.950966][ T752] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x72684843, utbl_chksum : 0xe619d30d) [ 28.968949][ T378] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 28.982036][ T378] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 28.990816][ T378] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 28.998440][ T378] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 29.013156][ T378] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 29.021261][ T756] tipc: Started in network mode [ 29.025941][ T756] tipc: Node identity 2dff, cluster identity 4711 [ 29.032316][ T756] tipc: Enabling of bearer rejected, failed to enable media [ 29.041617][ T699] device veth1_macvtap entered promiscuous mode [ 29.053163][ T378] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 29.065059][ T378] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 29.076555][ T60] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 29.092041][ T60] asix 1-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 29.106955][ T60] asix: probe of 1-1:0.0 failed with error -71 [ 29.113628][ T60] usb 1-1: USB disconnect, device number 3 [ 29.178417][ T767] loop9: detected capacity change from 0 to 256 [ 29.229879][ T777] input: syz0 as /devices/virtual/input/input4 [ 29.256543][ T314] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 29.369285][ T804] Invalid ELF header magic: != ELF [ 29.418839][ T814] loop3: detected capacity change from 0 to 256 [ 29.547086][ T832] SELinux: failed to load policy [ 29.646734][ T314] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 29.658312][ T314] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 29.670536][ T314] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 29.683327][ T314] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 29.698830][ T845] loop0: detected capacity change from 0 to 256 [ 29.704756][ T314] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 29.714445][ T314] usb 5-1: config 0 descriptor?? [ 29.716132][ T845] exfat: Deprecated parameter 'utf8' [ 29.724524][ T845] exfat: Deprecated parameter 'utf8' [ 29.727796][ T849] loop3: detected capacity change from 0 to 512 [ 29.729900][ T845] exfat: Deprecated parameter 'utf8' [ 29.743301][ T845] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 29.751953][ T836] loop9: detected capacity change from 0 to 40427 [ 29.762298][ T836] F2FS-fs (loop9): Invalid log_blocksize (268), supports only 12 [ 29.771237][ T849] EXT4-fs (loop3): orphan cleanup on readonly fs [ 29.772262][ T836] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 29.778222][ T849] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.223: bg 0: block 248: padding at end of block bitmap is not set [ 29.790177][ T836] F2FS-fs (loop9): invalid crc value [ 29.800523][ T849] EXT4-fs error (device loop3): ext4_acquire_dquot:6787: comm syz.3.223: Failed to acquire dquot type 1 [ 29.806148][ T836] F2FS-fs (loop9): Found nat_bits in checkpoint [ 29.828587][ T855] netlink: 4 bytes leftover after parsing attributes in process `syz.0.224'. [ 29.837510][ T849] EXT4-fs (loop3): 1 truncate cleaned up [ 29.846222][ T849] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 29.868372][ T836] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0 [ 29.873447][ T849] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 29.875299][ T836] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 29.886928][ T849] EXT4-fs (loop3): re-mounted. Quota mode: writeback. [ 29.910919][ T849] syz.3.223 (849) used greatest stack depth: 19432 bytes left [ 29.919215][ T299] EXT4-fs (loop3): unmounting filesystem. [ 30.009121][ T875] loop9: detected capacity change from 0 to 1024 [ 30.018204][ T875] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 30.034064][ T694] EXT4-fs (loop9): unmounting filesystem. [ 30.105176][ T896] loop3: detected capacity change from 0 to 256 [ 30.125399][ T896] FAT-fs (loop3): Directory bread(block 64) failed [ 30.131856][ T896] FAT-fs (loop3): Directory bread(block 65) failed [ 30.139094][ T896] FAT-fs (loop3): Directory bread(block 66) failed [ 30.145513][ T896] FAT-fs (loop3): Directory bread(block 67) failed [ 30.151986][ T896] FAT-fs (loop3): Directory bread(block 68) failed [ 30.158520][ T896] FAT-fs (loop3): Directory bread(block 69) failed [ 30.165071][ T896] FAT-fs (loop3): Directory bread(block 70) failed [ 30.172644][ T896] FAT-fs (loop3): Directory bread(block 71) failed [ 30.179318][ T896] FAT-fs (loop3): Directory bread(block 72) failed [ 30.186169][ T896] FAT-fs (loop3): Directory bread(block 73) failed [ 30.207542][ T314] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 30.210955][ T896] syz.3.241: attempt to access beyond end of device [ 30.210955][ T896] loop3: rw=2049, sector=1224, nr_sectors = 4 limit=256 [ 30.216135][ T314] plantronics 0003:047F:FFFF.0004: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 30.256284][ T28] kauditd_printk_skb: 67 callbacks suppressed [ 30.256294][ T28] audit: type=1400 audit(1731700582.790:246): avc: denied { connect } for pid=906 comm="syz.3.246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 30.288706][ T909] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 30.309763][ T915] netlink: 'syz.0.250': attribute type 4 has an invalid length. [ 30.399236][ T28] audit: type=1400 audit(1731700582.940:247): avc: denied { name_bind } for pid=928 comm="syz.2.257" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 30.487879][ T431] usb 5-1: USB disconnect, device number 2 [ 30.596585][ T313] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 30.646624][ T60] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 30.856601][ T313] usb 4-1: Using ep0 maxpacket: 32 [ 30.896905][ T60] usb 1-1: Using ep0 maxpacket: 8 [ 30.996565][ T28] audit: type=1400 audit(1731700583.530:248): avc: denied { lock } for pid=936 comm="syz.4.260" path="socket:[17987]" dev="sockfs" ino=17987 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 31.020086][ T313] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 31.030876][ T938] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 31.031141][ T313] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 31.064184][ T28] audit: type=1326 audit(1731700583.600:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=942 comm="syz.9.262" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc73b17e719 code=0x0 [ 31.086664][ T60] usb 1-1: config 0 interface 0 altsetting 252 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 31.097526][ T60] usb 1-1: config 0 interface 0 altsetting 252 endpoint 0x81 has invalid wMaxPacketSize 0 [ 31.107414][ T60] usb 1-1: config 0 interface 0 altsetting 252 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 31.120273][ T60] usb 1-1: config 0 interface 0 has no altsetting 0 [ 31.126746][ T60] usb 1-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 31.135599][ T60] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 31.143843][ T60] usb 1-1: config 0 descriptor?? [ 31.196636][ T313] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 31.206153][ T313] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 31.214317][ T313] usb 4-1: Product: syz [ 31.218411][ T313] usb 4-1: Manufacturer: syz [ 31.257011][ T313] hub 4-1:4.0: USB hub found [ 31.526853][ T313] hub 4-1:4.0: config failed, hub has too many ports! (err -19) [ 31.536598][ T314] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 31.627836][ T60] hid-steam 0003:28DE:1102.0005: hidraw0: USB HID v0.00 Device [HID 28de:1102] on usb-dummy_hcd.0-1/input0 [ 31.776602][ T314] usb 3-1: Using ep0 maxpacket: 16 [ 31.829906][ T313] usb 1-1: USB disconnect, device number 4 [ 31.856716][ T60] usb 4-1: USB disconnect, device number 3 [ 31.896596][ T314] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 31.907573][ T314] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 31.917925][ T314] usb 3-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 31.926875][ T314] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 31.936924][ T28] audit: type=1400 audit(1731700584.480:250): avc: denied { bind } for pid=955 comm="syz.9.267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 31.941425][ T314] usb 3-1: config 0 descriptor?? [ 31.961913][ T28] audit: type=1400 audit(1731700584.480:251): avc: denied { node_bind } for pid=955 comm="syz.9.267" saddr=fe88::a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 32.248718][ T28] audit: type=1400 audit(1731700584.790:252): avc: denied { bind } for pid=966 comm="syz.3.272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 32.267825][ T28] audit: type=1400 audit(1731700584.790:253): avc: denied { setopt } for pid=966 comm="syz.3.272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 32.287006][ T60] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 32.296431][ T969] loop3: detected capacity change from 0 to 2048 [ 32.307913][ T969] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 32.316232][ T969] ext4 filesystem being mounted at /48/file0 supports timestamps until 2038 (0x7fffffff) [ 32.332914][ T299] EXT4-fs (loop3): unmounting filesystem. [ 32.349664][ T28] audit: type=1400 audit(1731700584.890:254): avc: denied { ioctl } for pid=973 comm="syz.3.274" path="socket:[19449]" dev="sockfs" ino=19449 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 32.355351][ T10] Bluetooth: hci0: Frame reassembly failed (-84) [ 32.427171][ T314] hid-multitouch 0003:1FD2:6007.0006: unknown main item tag 0x1 [ 32.434957][ T314] hid-multitouch 0003:1FD2:6007.0006: unknown main item tag 0x0 [ 32.443207][ T314] hid-multitouch 0003:1FD2:6007.0006: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.2-1/input0 [ 32.471036][ T986] loop0: detected capacity change from 0 to 256 [ 32.479800][ T986] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011bf5, chksum : 0xcea91b8a, utbl_chksum : 0xe619d30d) [ 32.491813][ T986] exFAT-fs (loop0): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 32.521541][ T988] input: syz0 as /devices/virtual/input/input5 [ 32.549480][ T993] loop0: detected capacity change from 0 to 2048 [ 32.568041][ T993] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 32.576315][ T993] ext4 filesystem being mounted at /56/file0 supports timestamps until 2038 (0x7fffffff) [ 32.593249][ T293] EXT4-fs (loop0): unmounting filesystem. [ 32.612290][ T28] audit: type=1400 audit(1731700585.150:255): avc: denied { mounton } for pid=998 comm="syz.0.284" path="/58/file0" dev="tmpfs" ino=317 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 32.666919][ T313] usb 3-1: USB disconnect, device number 4 [ 32.676600][ T60] usb 10-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 32.687647][ T60] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 32.698509][ T60] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 32.708358][ T60] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 32.750221][ T1011] random: crng reseeded on system resumption [ 32.769622][ T1011] Restarting kernel threads ... done. [ 32.796680][ T60] usb 10-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 32.805690][ T60] usb 10-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 32.813679][ T60] usb 10-1: Manufacturer: syz [ 32.818522][ T60] usb 10-1: config 0 descriptor?? [ 32.926577][ T314] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 33.287219][ T314] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 33.297990][ T314] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 33.307437][ T60] appleir 0003:05AC:8243.0007: unknown main item tag 0x0 [ 33.307612][ T60] appleir 0003:05AC:8243.0007: No inputs registered, leaving [ 33.314420][ T314] usb 1-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 33.322737][ T60] appleir 0003:05AC:8243.0007: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.9-1/input0 [ 33.330623][ T314] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.350800][ T314] usb 1-1: config 0 descriptor?? [ 33.597086][ T434] usb 10-1: USB disconnect, device number 2 [ 33.827299][ T314] hid-steam 0003:28DE:1142.0008: unknown main item tag 0x0 [ 33.834574][ T314] hid-steam 0003:28DE:1142.0008: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.0-1/input0 [ 33.845876][ T314] hid-steam 0003:28DE:1142.0009: unknown main item tag 0x0 [ 33.853608][ T314] hid-steam 0003:28DE:1142.0009: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.0-1/input0 [ 33.927268][ T314] hid-steam 0003:28DE:1142.0008: Steam wireless receiver connected [ 34.044296][ T314] usb 1-1: USB disconnect, device number 5 [ 34.050838][ T314] hid-steam 0003:28DE:1142.0008: Steam wireless receiver disconnected [ 34.406621][ T1014] Bluetooth: hci0: command 0x1003 tx timeout [ 34.406942][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 34.425488][ T1068] loop2: detected capacity change from 0 to 16 [ 34.432145][ T1068] erofs: (device loop2): erofs_fc_fill_super: rootino(nid 36) is not a directory(i_mode 125300) [ 34.502527][ T1080] incfs: Options parsing error. -22 [ 34.507602][ T1080] incfs: mount failed -22 [ 34.556607][ T314] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 34.633730][ T1106] Zero length message leads to an empty skb [ 34.646281][ T1108] netlink: 'syz.0.335': attribute type 4 has an invalid length. [ 34.697637][ T1112] KVM: debugfs: duplicate directory 1112-4 [ 34.736594][ T60] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 34.782486][ T1116] loop0: detected capacity change from 0 to 512 [ 34.798455][ T1116] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 34.807392][ T1116] ext4 filesystem being mounted at /74/file1 supports timestamps until 2038 (0x7fffffff) [ 34.817203][ T45] Bluetooth: hci1: command 0x1003 tx timeout [ 34.817400][ T978] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 34.823115][ T314] usb 10-1: Using ep0 maxpacket: 16 [ 34.844212][ T293] EXT4-fs (loop0): unmounting filesystem. [ 34.852488][ T1121] loop4: detected capacity change from 0 to 2048 [ 34.862514][ T1123] capability: warning: `syz.0.340' uses deprecated v2 capabilities in a way that may be insecure [ 34.891214][ T1125] IPv6: syztnl0: Disabled Multicast RS [ 34.970960][ T1142] user requested TSC rate below hardware speed [ 35.006620][ T314] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 35.018269][ T314] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 35.030087][ T314] usb 10-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 35.039212][ T314] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 35.048294][ T314] usb 10-1: config 0 descriptor?? [ 35.096677][ T60] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 35.107763][ T60] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 35.117396][ T60] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 35.130534][ T60] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 35.139401][ T60] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 35.147962][ T60] usb 4-1: config 0 descriptor?? [ 35.336656][ T294] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 35.356596][ T434] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 35.384860][ T1167] netlink: 8 bytes leftover after parsing attributes in process `syz.2.361'. [ 35.428656][ T28] kauditd_printk_skb: 23 callbacks suppressed [ 35.428670][ T28] audit: type=1400 audit(1731700587.970:279): avc: denied { accept } for pid=1176 comm="syz.2.366" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 35.479970][ T28] audit: type=1400 audit(1731700588.020:280): avc: denied { setopt } for pid=1176 comm="syz.2.366" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 35.517359][ T314] hid-multitouch 0003:1FD2:6007.000A: unknown main item tag 0x0 [ 35.524860][ T314] hid-multitouch 0003:1FD2:6007.000A: unknown main item tag 0x0 [ 35.532532][ T314] hid-multitouch 0003:1FD2:6007.000A: unbalanced collection at end of report description [ 35.542318][ T314] hid-multitouch: probe of 0003:1FD2:6007.000A failed with error -22 [ 35.627079][ T60] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 35.634457][ T60] plantronics 0003:047F:FFFF.000B: No inputs registered, leaving [ 35.642756][ T60] plantronics 0003:047F:FFFF.000B: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 35.706605][ T294] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 35.717294][ T294] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 35.726796][ T434] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 35.738036][ T434] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 35.738269][ T60] usb 10-1: USB disconnect, device number 3 [ 35.747625][ T434] usb 5-1: New USB device found, idVendor=04b4, idProduct=07b1, bcdDevice= 0.00 [ 35.762351][ T434] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 35.770577][ T434] usb 5-1: config 0 descriptor?? [ 35.896580][ T294] usb 1-1: New USB device found, idVendor=1b5c, idProduct=0105, bcdDevice= 1.f1 [ 35.905445][ T294] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 35.907336][ T313] usb 4-1: USB disconnect, device number 4 [ 35.913369][ T294] usb 1-1: Product: syz [ 35.922986][ T294] usb 1-1: Manufacturer: syz [ 35.927446][ T294] usb 1-1: SerialNumber: syz [ 35.932319][ T294] usb 1-1: config 0 descriptor?? [ 35.976957][ T294] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 35.984470][ T294] usb 1-1: Detected SIO [ 35.988491][ T294] ftdi_sio ttyUSB0: Overriding wMaxPacketSize on endpoint 4 [ 35.995556][ T294] ftdi_sio ttyUSB0: Overriding wMaxPacketSize on endpoint 7 [ 36.003051][ T294] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 36.184672][ T28] audit: type=1400 audit(1731700588.720:281): avc: denied { getopt } for pid=1158 comm="syz.0.357" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 36.204354][ T313] usb 1-1: USB disconnect, device number 6 [ 36.210565][ T313] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 36.225178][ T313] ftdi_sio 1-1:0.0: device disconnected [ 36.237195][ T434] cypress 0003:04B4:07B1.000C: unknown main item tag 0x6 [ 36.244154][ T434] cypress 0003:04B4:07B1.000C: item fetching failed at offset 4/5 [ 36.251867][ T434] cypress 0003:04B4:07B1.000C: parse failed [ 36.257658][ T434] cypress: probe of 0003:04B4:07B1.000C failed with error -22 [ 36.270071][ T28] audit: type=1400 audit(1731700588.810:282): avc: denied { setopt } for pid=1180 comm="syz.2.367" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 36.289922][ T28] audit: type=1400 audit(1731700588.840:283): avc: denied { ioctl } for pid=1180 comm="syz.2.367" path="socket:[19946]" dev="sockfs" ino=19946 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 36.314570][ T28] audit: type=1400 audit(1731700588.840:284): avc: denied { write } for pid=1180 comm="syz.2.367" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 36.340688][ T28] audit: type=1400 audit(1731700588.860:285): avc: denied { read } for pid=1180 comm="syz.2.367" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 36.359822][ T28] audit: type=1400 audit(1731700588.890:286): avc: denied { setopt } for pid=1186 comm="syz.2.370" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 36.381133][ T28] audit: type=1400 audit(1731700588.930:287): avc: denied { map } for pid=1188 comm="syz.2.371" path="socket:[19971]" dev="sockfs" ino=19971 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 36.404264][ T28] audit: type=1400 audit(1731700588.930:288): avc: denied { read } for pid=1188 comm="syz.2.371" path="socket:[19971]" dev="sockfs" ino=19971 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 36.447060][ T434] usb 5-1: USB disconnect, device number 3 [ 36.725702][ T1208] loop0: detected capacity change from 0 to 2048 [ 36.748352][ T1208] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 36.758096][ T1217] loop3: detected capacity change from 0 to 512 [ 36.764442][ T1217] SELinux: security_context_str_to_sid (unconfined_u,errors=continue) failed with errno=-22 [ 36.765347][ T293] EXT4-fs (loop0): unmounting filesystem. [ 36.780122][ T314] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 37.026533][ T314] usb 10-1: Using ep0 maxpacket: 16 [ 37.146584][ T314] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 37.166532][ T314] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 37.190138][ T314] usb 10-1: New USB device found, idVendor=0458, idProduct=5015, bcdDevice= 0.00 [ 37.282628][ T314] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 37.306279][ T314] usb 10-1: config 0 descriptor?? [ 37.315801][ T1245] loop2: detected capacity change from 0 to 16 [ 37.329844][ T1245] erofs: (device loop2): mounted with root inode @ nid 36. [ 39.036469][ C0] sched: RT throttling activated [ 39.110792][ T1258] loop3: detected capacity change from 0 to 256 [ 39.119864][ T1258] exfat: Deprecated parameter 'namecase' [ 39.125522][ T1258] exfat: Deprecated parameter 'namecase' [ 39.131067][ T1258] exfat: Deprecated parameter 'utf8' [ 39.136668][ T1258] exfat: Deprecated parameter 'namecase' [ 39.144745][ T1258] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011f41, chksum : 0xf6e84b2e, utbl_chksum : 0xe619d30d) [ 39.186562][ T294] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 39.346645][ T314] usbhid 10-1:0.0: can't add hid device: -71 [ 39.352727][ T314] usbhid: probe of 10-1:0.0 failed with error -71 [ 39.359636][ T314] usb 10-1: USB disconnect, device number 4 [ 39.426550][ T294] usb 5-1: Using ep0 maxpacket: 32 [ 39.496533][ T60] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 39.546683][ T294] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 39.557615][ T294] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 39.567214][ T294] usb 5-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 39.576049][ T294] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 39.584202][ T294] usb 5-1: config 0 descriptor?? [ 39.799834][ T1295] loop2: detected capacity change from 0 to 40427 [ 39.807158][ T1295] F2FS-fs (loop2): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 39.814745][ T1295] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 39.823650][ T1295] F2FS-fs (loop2): invalid crc value [ 39.832479][ T1295] F2FS-fs (loop2): Found nat_bits in checkpoint [ 39.872385][ T1295] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 39.879382][ T1295] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 39.886892][ T60] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 39.898044][ T60] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 39.907776][ T60] usb 4-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 39.916670][ T60] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 39.933036][ T60] usb 4-1: config 0 descriptor?? [ 39.938442][ T699] syz-executor: attempt to access beyond end of device [ 39.938442][ T699] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 40.018470][ T1326] input: syz1 as /devices/virtual/input/input6 [ 40.067234][ T294] greenasia 0003:0E8F:0012.000D: item fetching failed at offset 0/3 [ 40.075199][ T294] greenasia 0003:0E8F:0012.000D: parse failed [ 40.081162][ T294] greenasia: probe of 0003:0E8F:0012.000D failed with error -22 [ 40.115888][ T1341] loop0: detected capacity change from 0 to 2048 [ 40.116636][ T1343] loop2: detected capacity change from 0 to 128 [ 40.129680][ T1343] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 40.138197][ T1341] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 40.138879][ T1343] ext4 filesystem being mounted at /76/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 40.146731][ T1341] ext4 filesystem being mounted at /101/file0 supports timestamps until 2038 (0x7fffffff) [ 40.201232][ T293] EXT4-fs (loop0): unmounting filesystem. [ 40.219965][ T1351] loop0: detected capacity change from 0 to 256 [ 40.287019][ T294] usb 5-1: USB disconnect, device number 4 [ 40.409966][ T1369] loop0: detected capacity change from 0 to 512 [ 40.416422][ T1369] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 40.427342][ T60] petalynx 0003:18B1:0037.000E: collection stack underflow [ 40.427603][ T1369] EXT4-fs (loop0): 1 truncate cleaned up [ 40.434465][ T60] petalynx 0003:18B1:0037.000E: item 0 1 0 12 parsing failed [ 40.440273][ T1369] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 40.447895][ T60] petalynx 0003:18B1:0037.000E: parse failed [ 40.461394][ T60] petalynx: probe of 0003:18B1:0037.000E failed with error -22 [ 40.466095][ T28] kauditd_printk_skb: 66 callbacks suppressed [ 40.466107][ T28] audit: type=1400 audit(1731700593.000:355): avc: denied { create } for pid=1368 comm="syz.0.451" name="file2" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 40.495135][ T28] audit: type=1400 audit(1731700593.020:356): avc: denied { mounton } for pid=1368 comm="syz.0.451" path="/112/bus/file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 40.518331][ T28] audit: type=1400 audit(1731700593.020:357): avc: denied { setattr } for pid=1368 comm="syz.0.451" name="work" dev="loop0" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 40.539822][ T28] audit: type=1400 audit(1731700593.020:358): avc: denied { write } for pid=1368 comm="syz.0.451" name="work" dev="loop0" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 40.561081][ T28] audit: type=1400 audit(1731700593.020:359): avc: denied { add_name } for pid=1368 comm="syz.0.451" name="#3" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 40.580826][ T28] audit: type=1400 audit(1731700593.020:360): avc: denied { remove_name } for pid=1368 comm="syz.0.451" name="#3" dev="loop0" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 40.602399][ T28] audit: type=1400 audit(1731700593.020:361): avc: denied { unlink } for pid=1368 comm="syz.0.451" name="#3" dev="loop0" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 40.624128][ T28] audit: type=1400 audit(1731700593.020:362): avc: denied { unlink } for pid=1368 comm="syz.0.451" name="#4" dev="loop0" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 40.657724][ T294] usb 4-1: USB disconnect, device number 5 [ 40.687929][ T293] EXT4-fs (loop0): unmounting filesystem. [ 40.708138][ T699] EXT4-fs (loop2): unmounting filesystem. [ 40.727727][ T28] audit: type=1400 audit(1731700593.270:363): avc: denied { read write } for pid=1372 comm="syz.2.463" name="raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 40.750977][ T28] audit: type=1400 audit(1731700593.270:364): avc: denied { open } for pid=1372 comm="syz.2.463" path="/dev/raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 40.804312][ T1374] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.811377][ T1374] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.818234][ T1379] loop4: detected capacity change from 0 to 1024 [ 40.818678][ T1374] device bridge_slave_0 entered promiscuous mode [ 40.824938][ T1379] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 40.831445][ T1374] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.848022][ T1379] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 40.848712][ T1374] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.864495][ T1374] device bridge_slave_1 entered promiscuous mode [ 40.888613][ T291] EXT4-fs (loop4): unmounting filesystem. [ 40.930305][ T1374] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.937161][ T1374] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.944234][ T1374] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.951050][ T1374] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.981964][ T382] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 40.991477][ T382] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.000599][ T382] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.007629][ T60] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 41.021461][ T1391] loop9: detected capacity change from 0 to 1024 [ 41.029957][ T382] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 41.031113][ T1391] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 41.042343][ T382] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.053344][ T382] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.064318][ T382] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 41.072840][ T694] EXT4-fs (loop9): unmounting filesystem. [ 41.073386][ T382] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.085242][ T382] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.101371][ T382] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 41.109115][ T382] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 41.120515][ T382] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 41.132443][ T382] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 41.140197][ T382] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 41.147733][ T382] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 41.155947][ T1374] device veth0_vlan entered promiscuous mode [ 41.161977][ T1400] SELinux: Context :yz1 is not valid (left unmapped). [ 41.175685][ T382] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 41.184806][ T1374] device veth1_macvtap entered promiscuous mode [ 41.195584][ T382] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 41.205374][ T382] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 41.224429][ T1406] loop4: detected capacity change from 0 to 512 [ 41.231336][ T1406] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 41.248079][ T1406] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 41.257193][ T1406] ext4 filesystem being mounted at /86/file1 supports timestamps until 2038 (0x7fffffff) [ 41.271936][ T291] EXT4-fs (loop4): unmounting filesystem. [ 41.310007][ T1416] loop1: detected capacity change from 0 to 1024 [ 41.317094][ T1416] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 41.347910][ T1416] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 41.366631][ T434] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 41.374706][ T1374] EXT4-fs (loop1): unmounting filesystem. [ 41.406747][ T60] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 41.418307][ T60] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 41.431211][ T60] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 41.440158][ T60] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 41.449834][ T60] usb 3-1: config 0 descriptor?? [ 43.077315][ T60] plantronics 0003:047F:FFFF.000F: No inputs registered, leaving [ 43.085636][ T60] plantronics 0003:047F:FFFF.000F: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 43.098198][ T10] device bridge_slave_1 left promiscuous mode [ 43.104141][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.112458][ T10] device bridge_slave_0 left promiscuous mode [ 43.118813][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.128223][ T10] device veth1_macvtap left promiscuous mode [ 43.138072][ T10] device veth0_vlan left promiscuous mode [ 43.276605][ T434] usb 10-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 255, changing to 11 [ 43.290126][ T434] usb 10-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 59391, setting to 1024 [ 43.301450][ T434] usb 10-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 43.310651][ T434] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 43.335875][ T1454] loop3: detected capacity change from 0 to 1024 [ 43.336808][ T1453] netlink: 64 bytes leftover after parsing attributes in process `syz.4.482'. [ 43.342761][ T1454] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 43.351020][ T1398] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 43.372209][ T1454] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 43.386946][ T60] usb 3-1: USB disconnect, device number 5 [ 43.400398][ T299] EXT4-fs (loop3): unmounting filesystem. [ 43.476621][ T313] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 43.646532][ T715] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 43.716606][ T19] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 43.816623][ T434] aiptek 10-1:17.0: Aiptek using 400 ms programming speed [ 43.823932][ T434] input: Aiptek as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:17.0/input/input8 [ 43.834426][ T434] usb 10-1: USB disconnect, device number 5 [ 43.876627][ T313] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 43.887380][ T313] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 43.896897][ T313] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 43.905745][ T313] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 43.913550][ T715] usb 5-1: Using ep0 maxpacket: 16 [ 43.919204][ T313] usb 2-1: config 0 descriptor?? [ 44.046628][ T715] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 47, changing to 9 [ 44.057512][ T715] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 58219, setting to 1024 [ 44.068453][ T715] usb 5-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 44.077265][ T715] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 44.085914][ T715] usb 5-1: config 0 descriptor?? [ 44.106637][ T19] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 44.117264][ T19] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 44.128376][ T19] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 44.137934][ T19] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 44.150700][ T19] usb 4-1: New USB device found, idVendor=044f, idProduct=b653, bcdDevice= 0.00 [ 44.159622][ T19] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 44.167988][ T19] usb 4-1: config 0 descriptor?? [ 44.246569][ T60] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 44.387096][ T313] keytouch 0003:0926:3333.0010: fixing up Keytouch IEC report descriptor [ 44.396216][ T313] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0010/input/input9 [ 44.477823][ T313] keytouch 0003:0926:3333.0010: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 44.496535][ T60] usb 3-1: Using ep0 maxpacket: 32 [ 44.517617][ T1491] loop9: detected capacity change from 0 to 1024 [ 44.524208][ T1491] EXT4-fs: Ignoring removed nomblk_io_submit option [ 44.537040][ T1460] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.537911][ T1491] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a003c018, mo2=0002] [ 44.553206][ T1491] System zones: 0-1, 3-12 [ 44.553285][ T1460] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.558092][ T1491] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 44.574303][ T715] hid (null): report_id 3323596431 is invalid [ 44.580260][ T715] hid (null): unknown global tag 0xe [ 44.581958][ T1491] EXT4-fs error (device loop9): ext4_find_dest_de:2113: inode #2: block 16: comm syz.9.499: bad entry in directory: rec_len is smaller than minimal - offset=60, inode=21519, rec_len=0, size=1024 fake=0 [ 44.585469][ T715] hid (null): unknown global tag 0xe [ 44.611938][ T715] hid (null): unknown global tag 0xe [ 44.618269][ T715] hid-generic 0003:0158:0100.0011: unknown main item tag 0x1 [ 44.625497][ T715] hid-generic 0003:0158:0100.0011: unexpected long global item [ 44.626186][ T694] EXT4-fs (loop9): unmounting filesystem. [ 44.633663][ T715] hid-generic: probe of 0003:0158:0100.0011 failed with error -22 [ 44.648001][ T715] usb 2-1: USB disconnect, device number 3 [ 44.656652][ T60] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 44.657490][ T19] thrustmaster 0003:044F:B653.0012: item fetching failed at offset 5/7 [ 44.673892][ T60] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 44.682801][ T60] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 44.683170][ T60] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 44.683193][ T60] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 44.683215][ T60] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 44.726231][ T19] thrustmaster 0003:044F:B653.0012: parse failed [ 44.732602][ T19] thrustmaster: probe of 0003:044F:B653.0012 failed with error -22 [ 44.741114][ T60] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 44.744431][ T1500] syz.9.502[1500] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 44.750007][ T60] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 44.750071][ T1500] syz.9.502[1500] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 44.761607][ T60] usb 3-1: config 0 descriptor?? [ 44.792579][ T434] usb 5-1: USB disconnect, device number 5 [ 44.858393][ T313] usb 4-1: USB disconnect, device number 6 [ 44.955027][ T1507] loop9: detected capacity change from 0 to 40427 [ 44.961686][ T1507] F2FS-fs (loop9): Invalid log_blocksize (268), supports only 12 [ 44.969242][ T1507] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 44.979654][ T1507] F2FS-fs (loop9): Found nat_bits in checkpoint [ 45.003534][ T1507] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0 [ 45.010484][ T1507] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 45.047249][ T60] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 6 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 45.250930][ T60] usb 3-1: USB disconnect, device number 6 [ 45.257109][ T60] usblp0: removed [ 45.366929][ T434] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 45.616539][ T313] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 45.646631][ T294] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 45.726561][ T434] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 45.737391][ T434] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 45.746984][ T434] usb 10-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 45.755911][ T434] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 45.764398][ T434] usb 10-1: config 0 descriptor?? [ 45.886530][ T313] usb 2-1: Using ep0 maxpacket: 16 [ 45.960959][ T1555] loop2: detected capacity change from 0 to 256 [ 45.967288][ T1555] exfat: Deprecated parameter 'namecase' [ 45.975521][ T1555] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 45.988067][ T28] kauditd_printk_skb: 87 callbacks suppressed [ 45.988080][ T28] audit: type=1400 audit(1731700598.530:452): avc: denied { mount } for pid=1554 comm="syz.2.525" name="/" dev="loop2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 46.016033][ T294] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 46.016294][ T28] audit: type=1400 audit(1731700598.530:453): avc: denied { write } for pid=1554 comm="syz.2.525" name="/" dev="loop2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 46.027249][ T294] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 46.048191][ T313] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 46.059189][ T294] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 46.070634][ T28] audit: type=1400 audit(1731700598.530:454): avc: denied { add_name } for pid=1554 comm="syz.2.525" name="memory.events" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 46.099315][ T294] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 46.112168][ T28] audit: type=1400 audit(1731700598.530:455): avc: denied { associate } for pid=1554 comm="syz.2.525" name="memory.events" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 46.134372][ T28] audit: type=1400 audit(1731700598.530:456): avc: denied { read append open } for pid=1554 comm="syz.2.525" path="/86/file0/memory.events" dev="loop2" ino=1048625 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 46.159274][ T28] audit: type=1400 audit(1731700598.530:457): avc: denied { unmount } for pid=699 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 46.176561][ T294] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 46.179467][ T28] audit: type=1400 audit(1731700598.650:458): avc: denied { wake_alarm } for pid=1557 comm="syz.2.526" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 46.188186][ T294] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 46.216716][ T294] usb 4-1: Manufacturer: syz [ 46.221711][ T294] usb 4-1: config 0 descriptor?? [ 46.227684][ T434] lg-g15 0003:046D:C222.0013: unknown main item tag 0x0 [ 46.235092][ T434] lg-g15 0003:046D:C222.0013: hidraw0: USB HID v0.00 Device [HID 046d:c222] on usb-dummy_hcd.9-1/input0 [ 46.257343][ T28] audit: type=1400 audit(1731700598.790:459): avc: denied { create } for pid=1562 comm="syz.4.529" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 46.278726][ T313] usb 2-1: New USB device found, idVendor=045e, idProduct=0721, bcdDevice=90.c4 [ 46.287717][ T313] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 46.291440][ T28] audit: type=1400 audit(1731700598.800:460): avc: denied { ioctl } for pid=1562 comm="syz.4.529" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=22038 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 46.295781][ T313] usb 2-1: Product: syz [ 46.325460][ T313] usb 2-1: Manufacturer: syz [ 46.329936][ T28] audit: type=1400 audit(1731700598.870:461): avc: denied { create } for pid=1565 comm="syz.2.530" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 46.330095][ T313] usb 2-1: SerialNumber: syz [ 46.353883][ T313] usb 2-1: config 0 descriptor?? [ 46.427854][ T434] usb 10-1: USB disconnect, device number 6 [ 46.483512][ T1581] loop2: detected capacity change from 0 to 128 [ 46.707048][ T294] appleir 0003:05AC:8243.0014: unknown main item tag 0x0 [ 46.714091][ T294] appleir 0003:05AC:8243.0014: No inputs registered, leaving [ 46.722255][ T294] appleir 0003:05AC:8243.0014: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 46.796531][ T314] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 46.846591][ T313] usb 2-1: Found UVC 0.00 device syz (045e:0721) [ 46.852830][ T313] usb 2-1: No valid video chain found. [ 46.859983][ T313] usb 2-1: USB disconnect, device number 4 [ 46.942903][ T1590] loop9: detected capacity change from 0 to 128 [ 46.950491][ T1590] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 46.959027][ T1590] ext4 filesystem being mounted at /68/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 46.987195][ T294] usb 4-1: USB disconnect, device number 7 [ 46.991375][ T1590] EXT4-fs (loop9): re-mounted. Quota mode: none. [ 47.006290][ T694] EXT4-fs (loop9): unmounting filesystem. [ 47.036817][ T314] usb 3-1: Using ep0 maxpacket: 16 [ 47.065462][ T1599] loop9: detected capacity change from 0 to 512 [ 47.073507][ T1599] EXT4-fs error (device loop9): ext4_orphan_get:1396: inode #15: comm syz.9.544: casefold flag without casefold feature [ 47.086423][ T1599] EXT4-fs error (device loop9): ext4_orphan_get:1401: comm syz.9.544: couldn't read orphan inode 15 (err -117) [ 47.099017][ T1599] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 47.113363][ T694] EXT4-fs (loop9): unmounting filesystem. [ 47.194536][ T1616] loop9: detected capacity change from 0 to 2048 [ 47.208703][ T1616] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 47.224994][ T694] EXT4-fs (loop9): unmounting filesystem. [ 47.246929][ T1622] loop9: detected capacity change from 0 to 2048 [ 47.257713][ T1622] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 47.268108][ T1622] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 47.283028][ T1622] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 3 with error 28 [ 47.295445][ T1622] EXT4-fs (loop9): This should not happen!! Data will be lost [ 47.295445][ T1622] [ 47.305001][ T1622] EXT4-fs (loop9): Total free blocks count 0 [ 47.310923][ T1622] EXT4-fs (loop9): Free/Dirty block details [ 47.316680][ T314] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 47.316684][ T1622] EXT4-fs (loop9): free_blocks=2415919104 [ 47.316703][ T1622] EXT4-fs (loop9): dirty_blocks=16 [ 47.316713][ T1622] EXT4-fs (loop9): Block reservation details [ 47.325659][ T314] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 47.337667][ T1622] EXT4-fs (loop9): i_reserved_data_blocks=1 [ 47.342149][ T314] usb 3-1: Product: syz [ 47.360252][ T314] usb 3-1: Manufacturer: syz [ 47.360655][ T8] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 47.364933][ T314] usb 3-1: SerialNumber: syz [ 47.383409][ T314] r8152-cfgselector 3-1: config 0 descriptor?? [ 47.412229][ T1627] loop1: detected capacity change from 0 to 8192 [ 47.426595][ T313] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 47.622568][ T1651] netlink: 'syz.9.565': attribute type 12 has an invalid length. [ 47.630546][ T1651] netlink: 'syz.9.565': attribute type 29 has an invalid length. [ 47.638184][ T1651] netlink: 148 bytes leftover after parsing attributes in process `syz.9.565'. [ 47.647090][ T1651] netlink: 39 bytes leftover after parsing attributes in process `syz.9.565'. [ 47.684025][ T1663] loop9: detected capacity change from 0 to 512 [ 47.690955][ T1663] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 47.702462][ T1663] EXT4-fs (loop9): 1 truncate cleaned up [ 47.707987][ T1663] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 47.723131][ T694] EXT4-fs (loop9): unmounting filesystem. [ 47.806621][ T313] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 47.817379][ T313] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 47.826887][ T313] usb 5-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 47.835720][ T313] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 47.844005][ T313] usb 5-1: config 0 descriptor?? [ 47.866662][ T314] r8152-cfgselector 3-1: Unknown version 0x0000 [ 47.872867][ T314] r8152-cfgselector 3-1: bad CDC descriptors [ 47.896645][ T314] r8152-cfgselector 3-1: Unknown version 0x0000 [ 47.904508][ T314] r8152-cfgselector 3-1: USB disconnect, device number 7 [ 48.006695][ T715] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 48.317393][ T313] lg-g15 0003:046D:C222.0015: unknown main item tag 0x0 [ 48.324199][ T313] lg-g15 0003:046D:C222.0015: unknown main item tag 0x0 [ 48.331059][ T313] lg-g15 0003:046D:C222.0015: unknown main item tag 0x0 [ 48.337844][ T313] lg-g15 0003:046D:C222.0015: unknown main item tag 0x0 [ 48.345408][ T313] lg-g15 0003:046D:C222.0015: hidraw0: USB HID v0.00 Device [HID 046d:c222] on usb-dummy_hcd.4-1/input0 [ 48.436584][ T715] usb 10-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 26 [ 48.446567][ T314] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 48.486312][ T1673] loop2: detected capacity change from 0 to 40427 [ 48.493740][ T1673] F2FS-fs (loop2): invalid crc value [ 48.500544][ T1673] F2FS-fs (loop2): Found nat_bits in checkpoint [ 48.517982][ T313] usb 5-1: USB disconnect, device number 6 [ 48.528156][ T1673] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 48.541840][ T699] syz-executor: attempt to access beyond end of device [ 48.541840][ T699] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 48.566642][ T715] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 48.575759][ T715] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 48.583780][ T715] usb 10-1: SerialNumber: syz [ 48.661512][ T1681] netlink: 60 bytes leftover after parsing attributes in process `syz.2.576'. [ 48.816622][ T314] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 48.827418][ T314] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 48.837000][ T314] usb 2-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 48.845823][ T314] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 48.854135][ T314] usb 2-1: config 0 descriptor?? [ 49.031564][ T1683] netlink: 20 bytes leftover after parsing attributes in process `syz.4.577'. [ 49.081213][ T1696] raw_sendmsg: syz.4.583 forgot to set AF_INET. Fix it! [ 49.102938][ T1700] loop4: detected capacity change from 0 to 512 [ 49.109460][ T1700] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 49.121318][ T1700] EXT4-fs (loop4): 1 truncate cleaned up [ 49.127083][ T1700] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 49.143493][ T291] EXT4-fs (loop4): unmounting filesystem. [ 49.161282][ T1706] loop4: detected capacity change from 0 to 512 [ 49.168786][ T1706] EXT4-fs (loop4): Test dummy encryption mode enabled [ 49.175423][ T1706] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 49.186902][ T1706] EXT4-fs (loop4): 1 truncate cleaned up [ 49.192715][ T1706] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 49.202939][ T1706] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 49.212174][ T1706] ------------[ cut here ]------------ [ 49.217478][ T1706] WARNING: CPU: 0 PID: 1706 at fs/crypto/fname.c:573 fscrypt_fname_siphash+0xbf/0xf0 [ 49.226807][ T1706] Modules linked in: [ 49.230449][ T1706] CPU: 0 PID: 1706 Comm: syz.4.587 Not tainted 6.1.112-syzkaller-00016-g55c3fa9885b5 #0 [ 49.240031][ T1706] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 49.249914][ T1706] RIP: 0010:fscrypt_fname_siphash+0xbf/0xf0 [ 49.255620][ T1706] Code: b6 04 28 84 c0 75 3a 41 8b 34 24 49 83 c6 48 4c 89 ff 4c 89 f2 e8 01 17 3a 03 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 21 32 9a ff <0f> 0b eb a8 89 d9 80 e1 07 38 c1 7c 8a 48 89 df e8 6c 9b e1 ff eb [ 49.275105][ T1706] RSP: 0018:ffffc900011cf3c8 EFLAGS: 00010287 [ 49.280983][ T1706] RAX: ffffffff81db71ef RBX: 0000000000000000 RCX: 0000000000040000 [ 49.288886][ T1706] RDX: ffffc90001cff000 RSI: 0000000000000087 RDI: 0000000000000088 [ 49.296698][ T1706] RBP: ffffc900011cf3f0 R08: ffffffff81db7192 R09: ffffffff81f128c8 [ 49.304421][ T1706] R10: 0000000000000007 R11: ffff88811a905100 R12: ffffc900011cf520 [ 49.312235][ T1706] R13: dffffc0000000000 R14: ffff888100692bb8 R15: ffff8881006d23b8 [ 49.320041][ T1706] FS: 00007fb93cf346c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 49.328822][ T1706] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 49.335221][ T1706] CR2: 0000000000000000 CR3: 0000000118083000 CR4: 00000000003506b0 [ 49.343057][ T1706] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 49.350881][ T1706] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 49.358670][ T1706] Call Trace: [ 49.361900][ T1706] [ 49.364675][ T1706] ? show_regs+0x58/0x60 [ 49.367467][ T314] samsung 0003:0419:0600.0016: report_id 4010416497 is invalid [ 49.369000][ T1706] ? __warn+0x160/0x3d0 [ 49.376676][ T314] samsung 0003:0419:0600.0016: item 0 4 1 8 parsing failed [ 49.380310][ T1706] ? fscrypt_fname_siphash+0xbf/0xf0 [ 49.387719][ T314] samsung 0003:0419:0600.0016: parse failed [ 49.392430][ T1706] ? report_bug+0x4d5/0x7d0 [ 49.392460][ T1706] ? fscrypt_fname_siphash+0xbf/0xf0 [ 49.398492][ T314] samsung: probe of 0003:0419:0600.0016 failed with error -22 [ 49.402499][ T1706] ? handle_bug+0x41/0x70 [ 49.402523][ T1706] ? exc_invalid_op+0x1b/0x50 [ 49.423598][ T1706] ? asm_exc_invalid_op+0x1b/0x20 [ 49.428470][ T1706] ? __ext4fs_dirhash+0x328/0x1630 [ 49.433487][ T1706] ? fscrypt_fname_siphash+0x62/0xf0 [ 49.438719][ T1706] ? fscrypt_fname_siphash+0xbf/0xf0 [ 49.443816][ T1706] ? fscrypt_fname_siphash+0xbf/0xf0 [ 49.448967][ T1706] ? fscrypt_fname_siphash+0xbf/0xf0 [ 49.452899][ T1713] loop2: detected capacity change from 0 to 128 [ 49.454054][ T1706] __ext4fs_dirhash+0xe8e/0x1630 [ 49.464917][ T1706] ? ext4fs_dirhash+0x320/0x320 [ 49.468083][ T699] FAT-fs (loop2): error, invalid access to FAT (entry 0xffff0000) [ 49.469618][ T1706] ext4fs_dirhash+0x1b8/0x320 [ 49.477383][ T434] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 49.481857][ T1706] ? ext4_sync_file+0xa50/0xa50 [ 49.481885][ T1706] htree_dirblock_to_tree+0x723/0x10d0 [ 49.489384][ T699] FAT-fs (loop2): Filesystem has been set read-only [ 49.493832][ T1706] ? ext4_htree_fill_tree+0x13e0/0x13e0 [ 49.500048][ T699] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 49.505546][ T1706] ? kasan_set_track+0x4b/0x70 [ 49.505572][ T1706] ? kasan_save_alloc_info+0x1f/0x30 [ 49.505587][ T1706] ? ext4_readdir+0x200a/0x3930 [ 49.505606][ T1706] ? iterate_dir+0x265/0x600 [ 49.505625][ T1706] ? __se_sys_getdents64+0x1c1/0x460 [ 49.505645][ T1706] ? __x64_sys_getdents64+0x7b/0x90 [ 49.505666][ T1706] ? x64_sys_call+0x5ae/0x9a0 [ 49.505683][ T1706] ? do_syscall_64+0x3b/0xb0 [ 49.505703][ T1706] ext4_htree_fill_tree+0x73d/0x13e0 [ 49.505725][ T1706] ? ext4_handle_dirty_dirblock+0x6e0/0x6e0 [ 49.511575][ T699] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 49.518460][ T1706] ? kasan_save_alloc_info+0x1f/0x30 [ 49.518482][ T1706] ? __kasan_kmalloc+0x9c/0xb0 [ 49.584320][ T1706] ext4_readdir+0x2f4b/0x3930 [ 49.588850][ T1706] ? schedule+0xda/0x180 [ 49.592907][ T1706] ? down_read_killable+0x1206/0x1ff0 [ 49.593218][ T314] usb 2-1: USB disconnect, device number 5 [ 49.598144][ T1706] ? futex_wait_setup+0x330/0x330 [ 49.608657][ T1706] ? ext4_dir_llseek+0x540/0x540 [ 49.613386][ T1706] ? down_read_interruptible+0x1ed0/0x1ed0 [ 49.619052][ T1706] ? debug_smp_processor_id+0x17/0x20 [ 49.624236][ T1706] ? kasan_quarantine_put+0x34/0x1a0 [ 49.629373][ T1706] ? avc_policy_seqno+0x1b/0x70 [ 49.634049][ T1706] ? security_file_permission+0x86/0xb0 [ 49.639445][ T1706] iterate_dir+0x265/0x600 [ 49.643679][ T1706] ? ext4_dir_llseek+0x540/0x540 [ 49.648469][ T1706] __se_sys_getdents64+0x1c1/0x460 [ 49.653400][ T1706] ? __x64_sys_getdents64+0x90/0x90 [ 49.658455][ T1706] ? filldir+0x670/0x670 [ 49.662514][ T1706] ? fpregs_restore_userregs+0x130/0x290 [ 49.667997][ T1706] __x64_sys_getdents64+0x7b/0x90 [ 49.672851][ T1706] x64_sys_call+0x5ae/0x9a0 [ 49.677206][ T1706] do_syscall_64+0x3b/0xb0 [ 49.681433][ T1706] ? clear_bhb_loop+0x55/0xb0 [ 49.685947][ T1706] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 49.691693][ T1706] RIP: 0033:0x7fb93c17e719 [ 49.695928][ T1706] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 49.715399][ T1706] RSP: 002b:00007fb93cf34038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 49.723640][ T1706] RAX: ffffffffffffffda RBX: 00007fb93c335f80 RCX: 00007fb93c17e719 [ 49.731442][ T1706] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 49.739253][ T1706] RBP: 00007fb93c1f175e R08: 0000000000000000 R09: 0000000000000000 [ 49.746515][ T434] usb 4-1: Using ep0 maxpacket: 8 [ 49.747154][ T1706] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 49.759825][ T1706] R13: 0000000000000000 R14: 00007fb93c335f80 R15: 00007ffc4f5c45d8 [ 49.767640][ T1706] [ 49.770531][ T1706] ---[ end trace 0000000000000000 ]--- [ 49.782470][ T291] EXT4-fs (loop4): unmounting filesystem. [ 49.788123][ T715] cdc_ether: probe of 10-1:1.0 failed with error -71 [ 49.795057][ T715] usb 10-1: USB disconnect, device number 7 [ 49.886649][ T434] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 49.902963][ T434] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 49.914897][ T434] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 49.924043][ T434] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 49.933373][ T434] usb 4-1: config 0 descriptor?? [ 49.947181][ T1722] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.954099][ T1722] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.961487][ T1722] device bridge_slave_0 entered promiscuous mode [ 49.968448][ T1722] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.975309][ T1722] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.982772][ T1722] device bridge_slave_1 entered promiscuous mode [ 49.999368][ T1735] netlink: 8 bytes leftover after parsing attributes in process `syz.4.600'. [ 50.054074][ T1737] loop4: detected capacity change from 0 to 8192 [ 50.056758][ T1722] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.067112][ T1722] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.074166][ T1722] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.080991][ T1722] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.105925][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 50.113893][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.121453][ T1742] loop4: detected capacity change from 0 to 512 [ 50.127736][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.128081][ T1742] EXT4-fs: Ignoring removed i_version option [ 50.141788][ T1742] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 50.153117][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 50.161145][ T1742] EXT4-fs (loop4): 1 truncate cleaned up [ 50.161202][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.166763][ T1742] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 50.173445][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.190850][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.199927][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.206780][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.214031][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 50.215327][ T291] EXT4-fs (loop4): unmounting filesystem. [ 50.232446][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 50.246961][ T1747] loop4: detected capacity change from 0 to 256 [ 50.248275][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 50.261737][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 50.270024][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 50.277437][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 50.285122][ T1722] device veth0_vlan entered promiscuous mode [ 50.321035][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 50.332702][ T1722] device veth1_macvtap entered promiscuous mode [ 50.353105][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 50.367807][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 50.414642][ T1767] loop1: detected capacity change from 0 to 512 [ 50.421757][ T1767] EXT4-fs: Ignoring removed oldalloc option [ 50.428427][ T434] kone 0003:1E7D:2CED.0017: collection stack underflow [ 50.435281][ T1767] EXT4-fs: Ignoring removed nomblk_io_submit option [ 50.441764][ T434] kone 0003:1E7D:2CED.0017: item 0 1 0 12 parsing failed [ 50.449266][ T434] kone 0003:1E7D:2CED.0017: parse failed [ 50.454811][ T434] kone: probe of 0003:1E7D:2CED.0017 failed with error -22 [ 50.461874][ T1767] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 50.474574][ T1767] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2808: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 50.487490][ T1767] EXT4-fs (loop1): 1 truncate cleaned up [ 50.493128][ T1767] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 50.509447][ T1374] EXT4-fs (loop1): unmounting filesystem. [ 50.547209][ T1780] loop1: detected capacity change from 0 to 1024 [ 50.547326][ T382] device bridge_slave_1 left promiscuous mode [ 50.553618][ T1780] EXT4-fs: Ignoring removed nobh option [ 50.565228][ T382] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.574814][ T1780] EXT4-fs error (device loop1): ext4_ext_check_inode:520: inode #11: comm syz.1.619: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 50.593697][ T1780] EXT4-fs error (device loop1): ext4_orphan_get:1401: comm syz.1.619: couldn't read orphan inode 11 (err -117) [ 50.593715][ T382] device bridge_slave_0 left promiscuous mode [ 50.593784][ T1780] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 50.611954][ T382] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.627896][ T382] device veth1_macvtap left promiscuous mode [ 50.633797][ T382] device veth0_vlan left promiscuous mode [ 50.633998][ T294] usb 4-1: USB disconnect, device number 8 [ 50.723934][ T1776] loop9: detected capacity change from 0 to 40427 [ 50.731109][ T1776] F2FS-fs (loop9): invalid crc value [ 50.738086][ T1776] F2FS-fs (loop9): Found nat_bits in checkpoint [ 50.762312][ T1776] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e4 [ 50.772702][ T1776] syz.9.617: attempt to access beyond end of device [ 50.772702][ T1776] loop9: rw=2049, sector=53248, nr_sectors = 8 limit=40427 [ 50.790943][ T694] syz-executor: attempt to access beyond end of device [ 50.790943][ T694] loop9: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 50.896596][ T434] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 51.022488][ T1803] loop9: detected capacity change from 0 to 512 [ 51.030385][ T1803] EXT4-fs error (device loop9): ext4_xattr_inode_iget:400: comm syz.9.628: Parent and EA inode have the same ino 15 [ 51.042943][ T1803] EXT4-fs (loop9): 1 orphan inode deleted [ 51.048966][ T1803] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 51.058495][ T28] kauditd_printk_skb: 58 callbacks suppressed [ 51.058509][ T28] audit: type=1400 audit(1731700603.600:520): avc: denied { setattr } for pid=1802 comm="syz.9.628" path="/102/file1" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 51.087731][ T694] EXT4-fs (loop9): unmounting filesystem. [ 51.104533][ T28] audit: type=1400 audit(1731700603.640:521): avc: denied { mount } for pid=1808 comm="syz.9.630" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 51.131804][ T28] audit: type=1400 audit(1731700603.670:522): avc: denied { unmount } for pid=694 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 51.166641][ T28] audit: type=1326 audit(1731700603.710:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1816 comm="syz.4.634" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb93c17e719 code=0x0 [ 51.196176][ T28] audit: type=1400 audit(1731700603.730:524): avc: denied { block_suspend } for pid=1818 comm="syz.3.635" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 51.313627][ T28] audit: type=1400 audit(1731700603.850:525): avc: denied { create } for pid=1821 comm="syz.3.636" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 51.332970][ T28] audit: type=1400 audit(1731700603.850:526): avc: denied { write } for pid=1821 comm="syz.3.636" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 51.356591][ T434] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 51.367999][ T434] usb 2-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 51.376969][ T434] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 51.385678][ T434] usb 2-1: config 0 descriptor?? [ 51.396555][ T715] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 51.453237][ T28] audit: type=1400 audit(1731700603.990:527): avc: denied { read } for pid=1827 comm="syz.3.638" name="loop-control" dev="devtmpfs" ino=113 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 51.477290][ T28] audit: type=1400 audit(1731700603.990:528): avc: denied { open } for pid=1827 comm="syz.3.638" path="/dev/loop-control" dev="devtmpfs" ino=113 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 51.501747][ T28] audit: type=1400 audit(1731700604.020:529): avc: denied { ioctl } for pid=1827 comm="syz.3.638" path="/dev/loop-control" dev="devtmpfs" ino=113 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 51.577053][ T1836] netlink: 8 bytes leftover after parsing attributes in process `syz.3.642'. [ 51.627496][ T314] usb 2-1: USB disconnect, device number 6 [ 51.636535][ T715] usb 10-1: Using ep0 maxpacket: 8 [ 51.756621][ T715] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 51.767490][ T715] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 51.777172][ T715] usb 10-1: New USB device found, idVendor=054c, idProduct=0ce6, bcdDevice= 0.00 [ 51.786091][ T715] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 51.794528][ T715] usb 10-1: config 0 descriptor?? [ 51.926760][ T1702] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 10: padding at end of block bitmap is not set [ 51.976593][ T60] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 52.004775][ T1849] random: crng reseeded on system resumption [ 52.067387][ T1857] loop4: detected capacity change from 0 to 2048 [ 52.078395][ T1857] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 52.098200][ T291] EXT4-fs (loop4): unmounting filesystem. [ 52.144146][ T1374] EXT4-fs (loop1): unmounting filesystem. [ 52.192669][ T1869] loop4: detected capacity change from 0 to 128 [ 52.203608][ T8] FAT-fs (loop4): error, invalid FAT chain (i_pos 548, last_block 8) [ 52.211609][ T8] FAT-fs (loop4): Filesystem has been set read-only [ 52.218095][ T8] FAT-fs (loop4): error, corrupted file size (i_pos 548, 522) [ 52.277403][ T715] playstation 0003:054C:0CE6.0018: unknown main item tag 0x0 [ 52.284741][ T715] playstation 0003:054C:0CE6.0018: unknown main item tag 0x0 [ 52.292011][ T715] playstation 0003:054C:0CE6.0018: unknown main item tag 0x0 [ 52.299235][ T715] playstation 0003:054C:0CE6.0018: unknown main item tag 0x0 [ 52.306437][ T715] playstation 0003:054C:0CE6.0018: unknown main item tag 0x0 [ 52.313641][ T715] playstation 0003:054C:0CE6.0018: unknown main item tag 0x0 [ 52.320924][ T715] playstation 0003:054C:0CE6.0018: unknown main item tag 0x0 [ 52.329004][ T715] playstation 0003:054C:0CE6.0018: hidraw0: USB HID v0.00 Device [HID 054c:0ce6] on usb-dummy_hcd.9-1/input0 [ 52.340551][ T60] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 52.351429][ T60] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 52.360963][ T60] usb 4-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.00 [ 52.369808][ T60] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.379843][ T60] usb 4-1: config 0 descriptor?? [ 52.436553][ T294] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 52.450506][ T1881] SELinux: failed to load policy [ 52.496609][ T715] playstation 0003:054C:0CE6.0018: Invalid reportID received, expected 9 got 0 [ 52.505477][ T715] playstation 0003:054C:0CE6.0018: Failed to retrieve DualSense pairing info: -22 [ 52.514553][ T715] playstation 0003:054C:0CE6.0018: Failed to get MAC address from DualSense [ 52.523081][ T715] playstation 0003:054C:0CE6.0018: Failed to create dualsense. [ 52.531086][ T715] playstation: probe of 0003:054C:0CE6.0018 failed with error -22 [ 52.686515][ T294] usb 2-1: Using ep0 maxpacket: 32 [ 52.698756][ T715] usb 10-1: USB disconnect, device number 8 [ 52.799786][ T1923] loop4: detected capacity change from 0 to 128 [ 52.816972][ T1925] SELinux: Context system_u:object_r:public_content_rw_t:s0 is not valid (left unmapped). [ 52.826586][ T294] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 52.839284][ T294] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 52.848917][ T294] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 52.857769][ T294] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.860618][ T1927] loop4: detected capacity change from 0 to 512 [ 52.866663][ T294] usb 2-1: config 0 descriptor?? [ 52.874194][ T1927] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 52.884779][ T1927] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 52.885473][ T60] dragonrise 0003:0079:0011.0019: unknown global tag 0xd [ 52.896739][ T1927] EXT4-fs (loop4): 1 truncate cleaned up [ 52.900082][ T60] dragonrise 0003:0079:0011.0019: item 0 0 1 13 parsing failed [ 52.905251][ T1927] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 52.912783][ T60] dragonrise 0003:0079:0011.0019: parse failed [ 52.924843][ T1927] EXT4-fs (loop4): re-mounted. Quota mode: writeback. [ 52.927277][ T60] dragonrise: probe of 0003:0079:0011.0019 failed with error -22 [ 52.946767][ T291] EXT4-fs (loop4): unmounting filesystem. [ 53.085590][ T39] usb 4-1: USB disconnect, device number 9 [ 53.112942][ T1951] syz.4.692[1951] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 53.113000][ T1951] syz.4.692[1951] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 53.207465][ T1965] loop9: detected capacity change from 0 to 512 [ 53.228209][ T1965] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 53.237128][ T1965] ext4 filesystem being mounted at /106/file0 supports timestamps until 2038 (0x7fffffff) [ 53.251063][ T1965] EXT4-fs error (device loop9): ext4_empty_dir:3137: inode #12: comm syz.9.698: Directory hole found for htree leaf block 0 [ 53.269057][ T694] EXT4-fs (loop9): unmounting filesystem. [ 53.275563][ T1973] loop4: detected capacity change from 0 to 256 [ 53.357356][ T294] lua 0003:1E7D:2C2E.001A: global environment stack underflow [ 53.364674][ T294] lua 0003:1E7D:2C2E.001A: item 0 0 1 11 parsing failed [ 53.371720][ T294] lua 0003:1E7D:2C2E.001A: parse failed [ 53.377117][ T294] lua: probe of 0003:1E7D:2C2E.001A failed with error -22 [ 53.400945][ T1990] loop4: detected capacity change from 0 to 512 [ 53.412893][ T1990] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 53.421501][ T1990] EXT4-fs (loop4): warning: checktime reached, running e2fsck is recommended [ 53.431254][ T1990] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm syz.4.709: bg 0: block 18: invalid block bitmap [ 53.443609][ T1990] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6172: Corrupt filesystem [ 53.452565][ T1990] EXT4-fs (loop4): 1 truncate cleaned up [ 53.459577][ T1990] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 53.468051][ T1990] ext2 filesystem being mounted at /191/file0 supports timestamps until 2038 (0x7fffffff) [ 53.560188][ T60] usb 2-1: USB disconnect, device number 7 [ 53.586505][ T39] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 53.618937][ T2008] loop3: detected capacity change from 0 to 512 [ 53.630354][ T291] EXT4-fs (loop4): unmounting filesystem. [ 53.635993][ T2008] EXT4-fs (loop3): can't mount with data=, fs mounted w/o journal [ 53.636072][ T2012] loop5: detected capacity change from 0 to 256 [ 53.652243][ T2012] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x99a53fd9, utbl_chksum : 0xe619d30d) [ 53.667886][ T2012] exFAT-fs (loop5): hint_cluster is invalid (17) [ 53.674690][ T2012] exFAT-fs (loop5): error, invalid access to FAT (entry 0xffffffff) [ 53.685495][ T2012] exFAT-fs (loop5): Filesystem has been set read-only [ 53.722337][ T2024] device vlan2 entered promiscuous mode [ 53.937021][ T2043] loop3: detected capacity change from 0 to 256 [ 53.945760][ T2043] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104b5, chksum : 0x6646eacc, utbl_chksum : 0xe619d30d) [ 53.996565][ T39] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 54.012868][ T39] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 54.026551][ T39] usb 10-1: New USB device found, idVendor=046d, idProduct=c70e, bcdDevice= 0.00 [ 54.035667][ T39] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.046318][ T39] usb 10-1: config 0 descriptor?? [ 54.156000][ T2059] loop3: detected capacity change from 0 to 256 [ 54.164729][ T2059] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 54.218457][ T2066] ================================================================== [ 54.226346][ T2066] BUG: KASAN: use-after-free in dev_map_enqueue+0x40/0x340 [ 54.233370][ T2066] Read of size 8 at addr ffff888112402e80 by task syz.3.743/2066 [ 54.240923][ T2066] [ 54.243093][ T2066] CPU: 1 PID: 2066 Comm: syz.3.743 Tainted: G W 6.1.112-syzkaller-00016-g55c3fa9885b5 #0 [ 54.254115][ T2066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 54.264011][ T2066] Call Trace: [ 54.267132][ T2066] [ 54.269912][ T2066] dump_stack_lvl+0x151/0x1b7 [ 54.274427][ T2066] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 54.279718][ T2066] ? _printk+0xd1/0x111 [ 54.283711][ T2066] ? __virt_addr_valid+0x242/0x2f0 [ 54.288666][ T2066] print_report+0x158/0x4e0 [ 54.293000][ T2066] ? __virt_addr_valid+0x242/0x2f0 [ 54.297956][ T2066] ? kasan_complete_mode_report_info+0x90/0x1b0 [ 54.304032][ T2066] ? dev_map_enqueue+0x40/0x340 [ 54.308708][ T2066] kasan_report+0x13c/0x170 [ 54.313052][ T2066] ? dev_map_enqueue+0x40/0x340 [ 54.317745][ T2066] __asan_report_load8_noabort+0x14/0x20 [ 54.323204][ T2066] dev_map_enqueue+0x40/0x340 [ 54.327716][ T2066] xdp_do_redirect+0x5ed/0xc60 [ 54.332321][ T2066] tun_xdp_act+0xdb/0xc00 [ 54.336485][ T2066] ? avc_denied+0x1b0/0x1b0 [ 54.340822][ T2066] ? tun_flow_update+0x560/0x560 [ 54.345595][ T2066] ? copy_page_from_iter+0x23b/0x2b0 [ 54.350717][ T2066] tun_get_user+0xb35/0x3a90 [ 54.355146][ T2066] ? tun_get_user+0x7e6/0x3a90 [ 54.359743][ T2066] ? tun_do_read+0x2000/0x2000 [ 54.364344][ T2066] ? ref_tracker_alloc+0x31d/0x450 [ 54.369291][ T2066] ? file_has_perm+0x508/0x6c0 [ 54.373892][ T2066] ? futex_wait_setup+0x330/0x330 [ 54.378792][ T2066] ? tun_get+0xe9/0x120 [ 54.382743][ T2066] tun_chr_write_iter+0x129/0x210 [ 54.387606][ T2066] vfs_write+0xaf6/0xed0 [ 54.391687][ T2066] ? file_end_write+0x1c0/0x1c0 [ 54.396369][ T2066] ? do_futex+0x55a/0x9a0 [ 54.400537][ T2066] ? __fget_files+0x2cb/0x330 [ 54.405056][ T2066] ? __fdget_pos+0x204/0x390 [ 54.409479][ T2066] ? ksys_write+0x77/0x2c0 [ 54.413731][ T2066] ksys_write+0x199/0x2c0 [ 54.418003][ T2066] ? __this_cpu_preempt_check+0x13/0x20 [ 54.423382][ T2066] ? xfd_validate_state+0x6f/0x170 [ 54.428332][ T2066] ? __ia32_sys_read+0x90/0x90 [ 54.432929][ T2066] ? fpregs_restore_userregs+0x130/0x290 [ 54.438397][ T2066] __x64_sys_write+0x7b/0x90 [ 54.442827][ T2066] x64_sys_call+0x2f/0x9a0 [ 54.447072][ T2066] do_syscall_64+0x3b/0xb0 [ 54.451326][ T2066] ? clear_bhb_loop+0x55/0xb0 [ 54.455842][ T2066] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 54.461678][ T2066] RIP: 0033:0x7fcbbff7d1ff [ 54.466029][ T2066] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 1c 8e 02 00 48 [ 54.485547][ T2066] RSP: 002b:00007fcbc0d68000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 54.493791][ T2066] RAX: ffffffffffffffda RBX: 00007fcbc0135f80 RCX: 00007fcbbff7d1ff [ 54.501599][ T2066] RDX: 0000000000000066 RSI: 0000000020001580 RDI: 00000000000000c8 [ 54.509418][ T2066] RBP: 00007fcbbfff175e R08: 0000000000000000 R09: 0000000000000000 [ 54.517223][ T2066] R10: 0000000000000066 R11: 0000000000000293 R12: 0000000000000000 [ 54.525037][ T2066] R13: 0000000000000000 R14: 00007fcbc0135f80 R15: 00007ffcd2b00cb8 [ 54.532859][ T2066] [ 54.535712][ T2066] [ 54.537878][ T2066] Allocated by task 1272: [ 54.542045][ T2066] kasan_set_track+0x4b/0x70 [ 54.546474][ T2066] kasan_save_alloc_info+0x1f/0x30 [ 54.551418][ T2066] __kasan_kmalloc+0x9c/0xb0 [ 54.555844][ T2066] __kmalloc_node+0xb4/0x1e0 [ 54.560272][ T2066] bpf_map_kmalloc_node+0xd0/0x2c0 [ 54.565221][ T2066] __dev_map_alloc_node+0x5c/0x4e0 [ 54.570192][ T2066] dev_map_update_elem+0x20e/0x3f0 [ 54.575118][ T2066] bpf_map_update_value+0x23a/0x410 [ 54.580148][ T2066] map_update_elem+0x500/0x680 [ 54.584746][ T2066] __sys_bpf+0x460/0x7f0 [ 54.588830][ T2066] __x64_sys_bpf+0x7c/0x90 [ 54.593081][ T2066] x64_sys_call+0x87f/0x9a0 [ 54.597420][ T2066] do_syscall_64+0x3b/0xb0 [ 54.601674][ T2066] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 54.607405][ T2066] [ 54.609572][ T2066] Freed by task 10: [ 54.613218][ T2066] kasan_set_track+0x4b/0x70 [ 54.617643][ T2066] kasan_save_free_info+0x2b/0x40 [ 54.622502][ T2066] ____kasan_slab_free+0x131/0x180 [ 54.627456][ T2066] __kasan_slab_free+0x11/0x20 [ 54.632052][ T2066] __kmem_cache_free+0x218/0x3b0 [ 54.636827][ T2066] kfree+0x7a/0xf0 [ 54.640385][ T2066] dev_map_free+0x596/0x6c0 [ 54.644724][ T2066] bpf_map_free_deferred+0xf7/0x1b0 [ 54.649758][ T2066] process_one_work+0x73d/0xcb0 [ 54.654444][ T2066] worker_thread+0xa60/0x1260 [ 54.658959][ T2066] kthread+0x26d/0x300 [ 54.662863][ T2066] ret_from_fork+0x1f/0x30 [ 54.667118][ T2066] [ 54.669288][ T2066] Last potentially related work creation: [ 54.674846][ T2066] kasan_save_stack+0x3b/0x60 [ 54.679357][ T2066] __kasan_record_aux_stack+0xb4/0xc0 [ 54.684562][ T2066] kasan_record_aux_stack_noalloc+0xb/0x10 [ 54.690210][ T2066] kvfree_call_rcu+0x9f/0x800 [ 54.694717][ T2066] kernfs_unlink_open_file+0x327/0x3d0 [ 54.700011][ T2066] kernfs_fop_release+0x253/0x310 [ 54.704877][ T2066] __fput+0x1e5/0x870 [ 54.708694][ T2066] ____fput+0x15/0x20 [ 54.712510][ T2066] task_work_run+0x24d/0x2e0 [ 54.716936][ T2066] exit_to_user_mode_loop+0x94/0xa0 [ 54.721971][ T2066] exit_to_user_mode_prepare+0x5a/0xa0 [ 54.727274][ T2066] syscall_exit_to_user_mode+0x26/0x130 [ 54.732647][ T2066] do_syscall_64+0x47/0xb0 [ 54.736898][ T2066] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 54.742628][ T2066] [ 54.744797][ T2066] The buggy address belongs to the object at ffff888112402e80 [ 54.744797][ T2066] which belongs to the cache kmalloc-96 of size 96 [ 54.758512][ T2066] The buggy address is located 0 bytes inside of [ 54.758512][ T2066] 96-byte region [ffff888112402e80, ffff888112402ee0) [ 54.771357][ T2066] [ 54.773526][ T2066] The buggy address belongs to the physical page: [ 54.779780][ T2066] page:ffffea0004490080 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888112402000 pfn:0x112402 [ 54.791146][ T2066] flags: 0x4000000000000200(slab|zone=1) [ 54.796623][ T2066] raw: 4000000000000200 ffffea0004591148 ffffea0004ba8a08 ffff888100042900 [ 54.805041][ T2066] raw: ffff888112402000 000000000020001a 00000001ffffffff 0000000000000000 [ 54.813456][ T2066] page dumped because: kasan: bad access detected [ 54.819713][ T2066] page_owner tracks the page as allocated [ 54.825261][ T2066] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY), pid 104, tgid 104 (udevadm), ts 4229035436, free_ts 4229010175 [ 54.842624][ T2066] post_alloc_hook+0x213/0x220 [ 54.847218][ T2066] prep_new_page+0x1b/0x110 [ 54.851556][ T2066] get_page_from_freelist+0x2980/0x2a10 [ 54.856939][ T2066] __alloc_pages+0x234/0x610 [ 54.861364][ T2066] alloc_slab_page+0x6c/0xf0 [ 54.865790][ T2066] new_slab+0x90/0x3e0 [ 54.869696][ T2066] ___slab_alloc+0x6f9/0xb80 [ 54.874124][ T2066] __slab_alloc+0x5d/0xa0 [ 54.878290][ T2066] __kmem_cache_alloc_node+0x1af/0x250 [ 54.883584][ T2066] kmalloc_trace+0x2a/0xa0 [ 54.887839][ T2066] kernfs_fop_open+0x70e/0xb10 [ 54.892440][ T2066] do_dentry_open+0x891/0x1250 [ 54.897036][ T2066] vfs_open+0x73/0x80 [ 54.900856][ T2066] path_openat+0x2532/0x2d60 [ 54.905283][ T2066] do_filp_open+0x230/0x480 [ 54.909623][ T2066] do_sys_openat2+0x151/0x870 [ 54.914136][ T2066] page last free stack trace: [ 54.918650][ T2066] free_unref_page_prepare+0x83d/0x850 [ 54.923942][ T2066] free_unref_page+0xb2/0x5c0 [ 54.928457][ T2066] __free_pages+0x61/0xf0 [ 54.932622][ T2066] free_pages+0x7c/0x90 [ 54.936620][ T2066] selinux_genfs_get_sid+0x24d/0x2a0 [ 54.941736][ T2066] inode_doinit_with_dentry+0x8d2/0x1070 [ 54.947205][ T2066] selinux_d_instantiate+0x27/0x40 [ 54.952152][ T2066] security_d_instantiate+0x9f/0x100 [ 54.957274][ T2066] d_splice_alias+0x6d/0x390 [ 54.961698][ T2066] kernfs_iop_lookup+0x29e/0x2f0 [ 54.966477][ T2066] path_openat+0x10fd/0x2d60 [ 54.970899][ T2066] do_filp_open+0x230/0x480 [ 54.975242][ T2066] do_sys_openat2+0x151/0x870 [ 54.979753][ T2066] __x64_sys_openat+0x243/0x290 [ 54.984442][ T2066] x64_sys_call+0x6bf/0x9a0 [ 54.988782][ T2066] do_syscall_64+0x3b/0xb0 [ 54.993033][ T2066] [ 54.995203][ T2066] Memory state around the buggy address: [ 55.000674][ T2066] ffff888112402d80: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 55.008577][ T2066] ffff888112402e00: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 55.016471][ T2066] >ffff888112402e80: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 55.024366][ T2066] ^ [ 55.028275][ T2066] ffff888112402f00: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 55.036173][ T2066] ffff888112402f80: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 55.044069][ T2066] ================================================================== [ 55.052069][ T2066] Disabling lock debugging due to kernel taint [ 55.058038][ T2066] general protection fault, probably for non-canonical address 0xdffffc0000000044: 0000 [#1] PREEMPT SMP KASAN [ 55.069499][ T2066] KASAN: null-ptr-deref in range [0x0000000000000220-0x0000000000000227] [ 55.077746][ T2066] CPU: 1 PID: 2066 Comm: syz.3.743 Tainted: G B W 6.1.112-syzkaller-00016-g55c3fa9885b5 #0 [ 55.088766][ T2066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 55.098664][ T2066] RIP: 0010:dev_map_enqueue+0x91/0x340 [ 55.103957][ T2066] Code: d0 00 00 00 4c 89 e8 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 ef e8 4f 65 25 00 bb 20 02 00 00 49 03 5d 00 48 89 d8 48 c1 e8 03 <42> 80 3c 20 00 74 08 48 89 df e8 30 65 25 00 48 83 3b 00 0f 84 eb [ 55.123405][ T2066] RSP: 0018:ffffc90000be77a0 EFLAGS: 00010206 [ 55.129303][ T2066] RAX: 0000000000000044 RBX: 0000000000000220 RCX: ffffffff8197a881 [ 55.137128][ T2066] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffff88812f7e4950 [ 55.144927][ T2066] RBP: ffffc90000be77e0 R08: ffffffff8144a2c3 R09: fffffbfff0f6e0fd [ 55.152735][ T2066] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 55.160546][ T2066] R13: ffff88812f7e4950 R14: ffff88812f7e4880 R15: ffff888119fc0000 [ 55.168361][ T2066] FS: 00007fcbc0d686c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 55.177126][ T2066] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 55.183546][ T2066] CR2: 00007fb0c0484000 CR3: 0000000115923000 CR4: 00000000003526a0 [ 55.191361][ T2066] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 55.199171][ T2066] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 55.206982][ T2066] Call Trace: [ 55.210108][ T2066] [ 55.212889][ T2066] ? __die_body+0x62/0xb0 [ 55.217051][ T2066] ? die_addr+0x9f/0xd0 [ 55.221043][ T2066] ? exc_general_protection+0x317/0x4c0 [ 55.226432][ T2066] ? asm_exc_general_protection+0x27/0x30 [ 55.232154][ T2066] ? add_taint+0x93/0xe0 [ 55.236235][ T2066] ? dev_map_enqueue+0x81/0x340 [ 55.240920][ T2066] ? dev_map_enqueue+0x91/0x340 [ 55.245620][ T2066] xdp_do_redirect+0x5ed/0xc60 [ 55.250220][ T2066] tun_xdp_act+0xdb/0xc00 [ 55.254386][ T2066] ? avc_denied+0x1b0/0x1b0 [ 55.258711][ T2066] ? tun_flow_update+0x560/0x560 [ 55.263490][ T2066] ? copy_page_from_iter+0x23b/0x2b0 [ 55.268609][ T2066] tun_get_user+0xb35/0x3a90 [ 55.273035][ T2066] ? tun_get_user+0x7e6/0x3a90 [ 55.277636][ T2066] ? tun_do_read+0x2000/0x2000 [ 55.282234][ T2066] ? ref_tracker_alloc+0x31d/0x450 [ 55.287183][ T2066] ? file_has_perm+0x508/0x6c0 [ 55.291784][ T2066] ? futex_wait_setup+0x330/0x330 [ 55.296642][ T2066] ? tun_get+0xe9/0x120 [ 55.300634][ T2066] tun_chr_write_iter+0x129/0x210 [ 55.305495][ T2066] vfs_write+0xaf6/0xed0 [ 55.309578][ T2066] ? file_end_write+0x1c0/0x1c0 [ 55.314275][ T2066] ? do_futex+0x55a/0x9a0 [ 55.318432][ T2066] ? __fget_files+0x2cb/0x330 [ 55.322952][ T2066] ? __fdget_pos+0x204/0x390 [ 55.327366][ T2066] ? ksys_write+0x77/0x2c0 [ 55.331623][ T2066] ksys_write+0x199/0x2c0 [ 55.335788][ T2066] ? __this_cpu_preempt_check+0x13/0x20 [ 55.341170][ T2066] ? xfd_validate_state+0x6f/0x170 [ 55.346121][ T2066] ? __ia32_sys_read+0x90/0x90 [ 55.350716][ T2066] ? fpregs_restore_userregs+0x130/0x290 [ 55.356184][ T2066] __x64_sys_write+0x7b/0x90 [ 55.360611][ T2066] x64_sys_call+0x2f/0x9a0 [ 55.364861][ T2066] do_syscall_64+0x3b/0xb0 [ 55.369116][ T2066] ? clear_bhb_loop+0x55/0xb0 [ 55.373630][ T2066] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 55.379358][ T2066] RIP: 0033:0x7fcbbff7d1ff [ 55.383611][ T2066] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 1c 8e 02 00 48 [ 55.403061][ T2066] RSP: 002b:00007fcbc0d68000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 55.411299][ T2066] RAX: ffffffffffffffda RBX: 00007fcbc0135f80 RCX: 00007fcbbff7d1ff [ 55.419109][ T2066] RDX: 0000000000000066 RSI: 0000000020001580 RDI: 00000000000000c8 [ 55.426922][ T2066] RBP: 00007fcbbfff175e R08: 0000000000000000 R09: 0000000000000000 [ 55.434733][ T2066] R10: 0000000000000066 R11: 0000000000000293 R12: 0000000000000000 [ 55.442545][ T2066] R13: 0000000000000000 R14: 00007fcbc0135f80 R15: 00007ffcd2b00cb8 [ 55.450362][ T2066] [ 55.453220][ T2066] Modules linked in: [ 55.456988][ T2066] ---[ end trace 0000000000000000 ]--- [ 55.462256][ T2066] RIP: 0010:dev_map_enqueue+0x91/0x340 [ 55.467567][ T2066] Code: d0 00 00 00 4c 89 e8 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 ef e8 4f 65 25 00 bb 20 02 00 00 49 03 5d 00 48 89 d8 48 c1 e8 03 <42> 80 3c 20 00 74 08 48 89 df e8 30 65 25 00 48 83 3b 00 0f 84 eb [ 55.487008][ T2066] RSP: 0018:ffffc90000be77a0 EFLAGS: 00010206 [ 55.492889][ T2066] RAX: 0000000000000044 RBX: 0000000000000220 RCX: ffffffff8197a881 [ 55.500728][ T2066] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffff88812f7e4950 [ 55.508536][ T2066] RBP: ffffc90000be77e0 R08: ffffffff8144a2c3 R09: fffffbfff0f6e0fd [ 55.516322][ T2066] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 55.524160][ T2066] R13: ffff88812f7e4950 R14: ffff88812f7e4880 R15: ffff888119fc0000 [ 55.531970][ T2066] FS: 00007fcbc0d686c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 55.540734][ T2066] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 55.547151][ T2066] CR2: 00007fb0c0484000 CR3: 0000000115923000 CR4: 00000000003526a0 [ 55.554962][ T2066] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 55.562783][ T2066] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 55.570593][ T2066] Kernel panic - not syncing: Fatal exception in interrupt [ 55.577833][ T2066] Kernel Offset: disabled [ 55.581954][ T2066] Rebooting in 86400 seconds..