last executing test programs: 12.883292144s ago: executing program 3 (id=405): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000580), 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f00000005c0)={'syz1\x00', {}, 0xffffffff, [0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47b07c7d, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4000], [0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000], [0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x45, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x5d988399, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000]}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) 12.821396534s ago: executing program 3 (id=408): r0 = creat(0x0, 0xd931d3864d39ddd8) write$binfmt_elf32(r0, 0x0, 0x69) bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004b74ffec850000006d000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x5, 0x2, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='virtio_transport_alloc_pkt\x00'}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000c00)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r2, &(0x7f0000000700)={&(0x7f0000000400), 0xc, &(0x7f0000000540)={&(0x7f0000000680)={0x14, 0x0, 0x8, 0x70bd2b, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x44000}, 0xc0a5) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000006}}, &(0x7f0000000080)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', r3, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) gettid() pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r5, 0x0, 0xb) splice(r6, 0x0, r7, 0x0, 0xf3a, 0x0) write$binfmt_misc(r7, &(0x7f0000000980), 0xfdef) splice(r4, 0x0, r7, 0x0, 0x80, 0x7) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) 9.102771451s ago: executing program 3 (id=444): syz_usb_connect$uac1(0x0, 0xa5, 0x0, 0x0) 7.022761034s ago: executing program 0 (id=451): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="dc00000000010104000000000000000002000000240002801400018008000100e000000108000200e00000010c000280050001000000000008000480040003800800084000000000080008400000000734000f"], 0xdc}}, 0x0) 6.941622024s ago: executing program 1 (id=453): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) clock_adjtime(0x0, &(0x7f0000000480)={0xfffffffeffffffff, 0x2, 0x8, 0xfffffffffffffffc, 0x100000000, 0x7, 0x4, 0x8000000000000001, 0x135a6674, 0x1, 0x0, 0x80000001, 0x10001, 0x2, 0x2, 0xa, 0x12, 0xb68, 0x9, 0x7, 0xfffffffffffffffa, 0x2, 0x6, 0x2, 0x3, 0x7f}) 6.916240854s ago: executing program 0 (id=454): r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000280), &(0x7f0000000300)=0xc) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x8031, 0xffffffffffffffff, 0xffffb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r5, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x0, 0x3}, 0x10) r6 = socket$inet(0x2, 0x801, 0x0) bind$inet(r6, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) 6.878634643s ago: executing program 1 (id=455): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10) r1 = socket$key(0xf, 0x3, 0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x400, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB="0000000000000000000000000000a7ae3bea4a90", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r7}, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000840)={'batadv0\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000880)={r5, r10, 0x25, 0x2f68031b9666a3e0, @val=@perf_event={0x8}}, 0x18) sendmsg$WG_CMD_SET_DEVICE(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r9, @ANYBLOB="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"], 0x1c8}}, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='mm_page_alloc\x00', r11}, 0x10) r12 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents64(r12, &(0x7f0000002f40)=""/4098, 0x1002) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x1b3a, 0x4) syz_open_dev$usbmon(&(0x7f00000000c0), 0x3, 0x2400) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x22000406, &(0x7f0000000640)={[{@sysvgroups}, {@orlov}, {@data_err_abort}, {@init_itable}, {@dioread_nolock}, {@grpjquota, 0x2e}, {@oldalloc}, {@errors_continue}, {@jqfmt_vfsv1}, {@grpid}], [], 0x2c}, 0x0, 0x4da, &(0x7f0000000140)="$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") recvmmsg(r0, &(0x7f0000005940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=""/23, 0x17}, 0xe}], 0x1, 0x2100, 0x0) 6.877913703s ago: executing program 3 (id=456): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000a80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "00ed6a", 0xb, 0x2c, 0x0, @remote, @local, {[], {{0x1100, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 6.213384051s ago: executing program 3 (id=457): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000780), 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000940)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@noquota}, {@abort}, {@noload}, {@nodiscard}]}, 0x64, 0x50a, &(0x7f0000000200)="$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") 5.308168328s ago: executing program 0 (id=463): r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x3, 0xfd, 0x0, 0x4}, {0x6, 0x24, 0x1a, 0x7ff, 0x8}}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0x4}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x3}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, &(0x7f0000001280)={0x20, 0x80, 0x1c, {0x8, 0x870, 0xab8, 0xfffc, 0x4, 0x8000, 0x0, 0xff, 0x1, 0x0, 0x400, 0xfb}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000100)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 4.954029447s ago: executing program 1 (id=464): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="dc00000000010104000000000000000002000000240002801400018008000100e000000108000200e00000010c000280050001000000000008000480040003800800084000000000080008400000000734000f"], 0xdc}}, 0x0) 4.904314157s ago: executing program 1 (id=465): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=@framed={{}, [@printk={@llx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x2d}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c0002800500010000000000080003"], 0x48}}, 0x0) keyctl$invalidate(0x15, 0x0) keyctl$chown(0x4, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000540)={[{@test_dummy_encryption}]}, 0x1, 0x236, &(0x7f0000000300)="$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") bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000440)='kmem_cache_free\x00'}, 0x10) open(&(0x7f0000000340)='./bus\x00', 0x64842, 0x0) open(0x0, 0x14927e, 0x0) socket(0x400000000010, 0x3, 0x0) 3.545549102s ago: executing program 4 (id=468): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000580), 0x802, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x487, &(0x7f0000000100), 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wg0\x00'}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) r6 = socket(0x28, 0x803, 0x1) sendto(r6, &(0x7f0000000740), 0x0, 0x0, 0x0, 0x0) recvmmsg(r6, &(0x7f00000037c0)=[{{0x0, 0x0, &(0x7f0000000380)}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) write$uinput_user_dev(r0, &(0x7f00000005c0)={'syz1\x00', {}, 0xffffffff, [0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47b07c7d, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4000], [0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000], [0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x45, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x5d988399, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000]}, 0x45c) r7 = dup(r0) ioctl$UI_DEV_CREATE(r7, 0x5501) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 2.221311828s ago: executing program 1 (id=469): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) r3 = socket(0x1e, 0x4, 0x0) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) close_range(r0, 0xffffffffffffffff, 0x0) 1.571606166s ago: executing program 4 (id=471): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, 0x0, 0x0) 1.533562295s ago: executing program 4 (id=472): r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback, 0x580d5476}, 0x1c) sendmsg$inet(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000380)="98", 0x1}], 0x1}, 0x8001) sendto(r0, &(0x7f0000000640)="a80e9c09f5ff75e705", 0xffffffffffffffae, 0x20000800, 0x0, 0x0) recvfrom$inet6(r0, &(0x7f00000003c0)=""/74, 0xfffffffffffffc43, 0x400000, 0x0, 0x0) 1.479001235s ago: executing program 4 (id=473): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76389e147583ddd0569ba56a5cfd", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r1 = openat$incfs(r0, &(0x7f0000000080)='.pending_reads\x00', 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xc0386723, 0x20000000) 1.478461595s ago: executing program 2 (id=474): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) mkdir(0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000280)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r3 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r3, &(0x7f0000000040)={0x2, 0x2, @local}, 0x10) accept(r2, 0x0, 0x0) 1.426455195s ago: executing program 1 (id=475): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x4d) fstat(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$incfs(&(0x7f0000000080)='./file1\x00', &(0x7f0000000200)='./file1\x00', &(0x7f00000002c0), 0x8000, &(0x7f0000000540)={[{@readahead={'readahead', 0x3d, 0xfffffffffffffff8}}, {@readahead={'readahead', 0x3d, 0x8000000000000001}}, {@no_bf_cache={'no_bf_cache', 0x3d, 0x1}}, {@rlog_pages={'rlog_pages', 0x3d, 0x10}}, {@no_bf_cache={'no_bf_cache', 0x3d, 0x1}}, {@no_bf_readahead={'no_bf_readahead', 0x3d, 0x1}}, {@no_bf_cache}, {@rlog_pages={'rlog_pages', 0x3d, 0xce8}}, {@read_timeout_ms={'read_timeout_ms', 0x3d, 0x1}}, {@read_timeout_ms={'read_timeout_ms', 0x3d, 0x8}}], [{@audit}, {@permit_directio}, {@euid_eq={'euid', 0x3d, r1}}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@subj_user={'subj_user', 0x3d, '\x00'}}]}) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000d40)={[{@test_dummy_encryption}]}, 0x1, 0x246, &(0x7f0000000ac0)="$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") r2 = open(&(0x7f0000000300)='./file1\x00', 0x14927e, 0x0) fallocate(r2, 0x0, 0x0, 0x1001f0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r3, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x107842, 0x42) sendfile(r4, r4, 0x0, 0x80000000) listen(r0, 0x0) setsockopt(r0, 0x0, 0x7, &(0x7f0000000180)="ff702b80993189729d0c70", 0xb) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r5, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000180)}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe00}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) getxattr(0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_usb_connect$uac1(0x0, 0xa2, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000000000206b1d01014000010203010902900003010000000904000000010100000a240100000002010211240600000500000000000000000000000b2407000000002e387cf009040100000102000009040101010102000009050109000000008007250100000000090402000001020000090402010101020000072401000003000e2402030e000000f5138d22419e0905820940"], 0x0) 1.426208515s ago: executing program 4 (id=476): r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r0, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000440)={0xa, 0x4e22, 0x55, @local, 0x7f}, 0x1c, 0x0, 0x0, &(0x7f00000007c0)=[@hopopts_2292={{0x18, 0x29, 0x36, {0x8}}}], 0x18}}], 0x2, 0x800) 1.425897105s ago: executing program 2 (id=477): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{}, &(0x7f0000000500), &(0x7f00000006c0)}, 0x20) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{}, {}, {0x3}, {}, {}, {}, {0x6}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0) 1.416389015s ago: executing program 4 (id=478): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000002000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000240)=0x13) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) setsockopt$sock_int(r4, 0x1, 0x12, &(0x7f0000000040)=0x80020001, 0x4) sendto$inet6(r4, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f00000000c0)="4435c61bc9a1f1ed51c7b06188c682bd59fde0261c9bc2b1f66724ea0287fb6effd2c318abfa442135afa8ca2b68dacbb4a1aa65f9c177dc50967e99edcce6e8900d450fcd9980371cd431b9c1ad0766a9cb142c1ac79715905c856c9e549753967a92c7024ac039", 0xffffffffffffff1d, 0x850, 0x0, 0x0) syz_usb_connect(0x3, 0x36, &(0x7f00000003c0)={{0x12, 0x1, 0x310, 0x34, 0x36, 0x6a, 0x20, 0x1e2d, 0x5b, 0x7914, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x11, 0xce, 0x20, 0xee, [{{0x9, 0x4, 0xb, 0x80, 0x2, 0x2, 0x6, 0x0, 0x81, [], [{{0x9, 0x5, 0x8f, 0x2, 0x200, 0xa4, 0x4, 0x5}}, {{0x9, 0x5, 0xa, 0x5, 0x8, 0xfe, 0xd, 0xe}}]}}]}}]}}, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0}) 1.280308284s ago: executing program 2 (id=479): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x34, r1, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}]}]}, 0x34}}, 0x0) 1.234843895s ago: executing program 2 (id=480): r0 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x31, 0x0, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) r1 = socket(0x10, 0x803, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002280)=@newtfilter={0x48, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xe, 0x7}, {}, {0x7}}, [@filter_kind_options=@f_u32={{0x8}, {0x1c, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0x10, 0x8, 0x0, 0x97d7, 0x9, 0x1, 0xc, 0x5}}, @TCA_U32_ACT={0x4}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) 879.341893ms ago: executing program 2 (id=481): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x5, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x5a, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r1}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 806.987673ms ago: executing program 2 (id=482): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000580), 0x802, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x487, &(0x7f0000000100), 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wg0\x00'}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) r6 = socket(0x28, 0x803, 0x1) sendto(r6, &(0x7f0000000740), 0x0, 0x0, 0x0, 0x0) recvmmsg(r6, &(0x7f00000037c0)=[{{0x0, 0x0, &(0x7f0000000380)}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) write$uinput_user_dev(r0, &(0x7f00000005c0)={'syz1\x00', {}, 0xffffffff, [0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47b07c7d, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4000], [0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000], [0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x45, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x5d988399, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000]}, 0x45c) r7 = dup(r0) ioctl$UI_DEV_CREATE(r7, 0x5501) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='netlink_extack\x00', 0xffffffffffffffff, 0x0, 0x9}, 0x18) 278.199541ms ago: executing program 0 (id=483): r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback, 0x580d5476}, 0x1c) sendmsg$inet(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000380)="98", 0x1}], 0x1}, 0x8001) sendto(r0, &(0x7f0000000640)="a80e9c09f5ff75e705", 0xffffffffffffffae, 0x20000800, 0x0, 0x0) recvfrom$inet6(r0, &(0x7f00000003c0)=""/74, 0xfffffffffffffc43, 0x400000, 0x0, 0x0) 136.672271ms ago: executing program 0 (id=484): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f00000003c0), 0x0) 135.297411ms ago: executing program 3 (id=485): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x141141, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000440)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x9d, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @private}, {0x2001, 0x880b, 0x8}}}}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0) write$cgroup_subtree(r0, &(0x7f0000000440)=ANY=[], 0xfdef) 0s ago: executing program 0 (id=486): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) close(0xffffffffffffffff) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYRES16, @ANYRESHEX, @ANYRESDEC], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0xf502, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r4}, 0x0, &(0x7f00000002c0)}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r6, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r7, {0x2, 0xfffc, @dev={0xac, 0x14, 0x14, 0x24}}, 0x4}}, 0x26) kernel console output (not intermixed with test programs): changing to 7 [ 34.115135][ T316] usb 1-1: config 17 interface 11 has no altsetting 0 [ 34.131087][ T316] usb 1-1: New USB device found, idVendor=1e2d, idProduct=005b, bcdDevice=79.14 [ 34.155429][ T316] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 34.172580][ T316] usb 1-1: Product: syz [ 34.180959][ T316] usb 1-1: Manufacturer: syz [ 34.195985][ T316] usb 1-1: SerialNumber: syz [ 34.422681][ T315] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 34.446768][ T443] loop2: detected capacity change from 0 to 256 [ 34.485092][ T443] syz.2.40[443] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 34.485207][ T443] syz.2.40[443] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 34.614900][ T315] usb 5-1: Using ep0 maxpacket: 32 [ 34.644489][ T315] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 34.675306][ T315] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 34.699862][ T315] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 34.715808][ T315] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 34.733445][ T315] usb 5-1: config 0 descriptor?? [ 34.743319][ T315] hub 5-1:0.0: USB hub found [ 34.847478][ T455] tipc: Started in network mode [ 34.852588][ T455] tipc: Node identity 7, cluster identity 4711 [ 34.860125][ T455] tipc: Node number set to 7 [ 34.865177][ T455] tipc: Cannot configure node identity twice [ 34.945308][ T315] hub 5-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 35.147004][ T315] usbhid 5-1:0.0: can't add hid device: -71 [ 35.153000][ T315] usbhid: probe of 5-1:0.0 failed with error -71 [ 35.205200][ T315] usb 5-1: USB disconnect, device number 2 [ 35.348052][ T467] syz.3.49[467] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 35.358912][ T467] syz.3.49[467] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 35.388687][ T469] loop2: detected capacity change from 0 to 256 [ 35.475205][ T316] usb 1-1: bad CDC descriptors [ 35.491635][ T316] usb 1-1: USB disconnect, device number 2 [ 35.507164][ T473] loop3: detected capacity change from 0 to 256 [ 35.566321][ T473] FAT-fs (loop3): Directory bread(block 64) failed [ 35.583040][ T473] FAT-fs (loop3): Directory bread(block 65) failed [ 35.594125][ T473] FAT-fs (loop3): Directory bread(block 66) failed [ 35.602816][ T473] FAT-fs (loop3): Directory bread(block 67) failed [ 35.614018][ T473] FAT-fs (loop3): Directory bread(block 68) failed [ 35.624327][ T473] FAT-fs (loop3): Directory bread(block 69) failed [ 35.649999][ T473] FAT-fs (loop3): Directory bread(block 70) failed [ 35.697089][ T473] FAT-fs (loop3): Directory bread(block 71) failed [ 35.719166][ T473] FAT-fs (loop3): Directory bread(block 72) failed [ 35.727451][ T473] FAT-fs (loop3): Directory bread(block 73) failed [ 36.145632][ T484] loop4: detected capacity change from 0 to 1024 [ 36.203088][ T484] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 36.216276][ T484] EXT4-fs (loop4): orphan cleanup on readonly fs [ 36.223512][ T484] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5887: Corrupt filesystem [ 36.238645][ T484] EXT4-fs (loop4): Remounting filesystem read-only [ 36.246226][ T484] EXT4-fs error (device loop4): ext4_dirty_inode:6091: inode #3: comm syz.4.55: mark_inode_dirty error [ 36.259518][ T484] EXT4-fs (loop4): Remounting filesystem read-only [ 36.268603][ T484] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:477: comm syz.4.55: Invalid block bitmap block 3 in block_group 0 [ 36.614341][ T488] loop1: detected capacity change from 0 to 8192 [ 36.675442][ T484] EXT4-fs (loop4): Remounting filesystem read-only [ 36.700046][ T484] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5887: Corrupt filesystem [ 36.711902][ T491] loop2: detected capacity change from 0 to 512 [ 36.728328][ T484] EXT4-fs (loop4): Remounting filesystem read-only [ 36.739622][ T484] EXT4-fs error (device loop4): ext4_dirty_inode:6091: inode #3: comm syz.4.55: mark_inode_dirty error [ 36.758218][ T488] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000e1b1) [ 36.769028][ T491] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 36.769624][ T488] FAT-fs (loop1): Filesystem has been set read-only [ 36.786639][ T484] EXT4-fs (loop4): Remounting filesystem read-only [ 36.795145][ T491] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 36.812483][ T484] EXT4-fs error (device loop4): ext4_map_blocks:634: inode #3: block 1: comm syz.4.55: lblock 6 mapped to illegal pblock 1 (length 1) [ 36.834787][ T491] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2809: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 36.853642][ T491] EXT4-fs (loop2): 1 truncate cleaned up [ 36.862141][ T491] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 36.889059][ T484] EXT4-fs (loop4): Remounting filesystem read-only [ 36.898983][ T484] EXT4-fs error (device loop4): ext4_map_blocks:634: inode #3: block 48: comm syz.4.55: lblock 0 mapped to illegal pblock 48 (length 1) [ 36.917773][ T484] EXT4-fs (loop4): Remounting filesystem read-only [ 36.925013][ T484] EXT4-fs error (device loop4): ext4_acquire_dquot:6788: comm syz.4.55: Failed to acquire dquot type 0 [ 36.940653][ T484] EXT4-fs (loop4): Remounting filesystem read-only [ 36.963090][ T484] EXT4-fs error (device loop4): ext4_map_blocks:634: inode #3: block 49: comm syz.4.55: lblock 1 mapped to illegal pblock 49 (length 1) [ 36.986826][ T484] EXT4-fs (loop4): Remounting filesystem read-only [ 37.000155][ T484] EXT4-fs error (device loop4): ext4_acquire_dquot:6788: comm syz.4.55: Failed to acquire dquot type 0 [ 37.056864][ T484] EXT4-fs (loop4): Remounting filesystem read-only [ 37.069256][ T295] EXT4-fs (loop2): unmounting filesystem. [ 37.102255][ T484] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5887: Corrupt filesystem [ 37.143989][ T484] EXT4-fs (loop4): Remounting filesystem read-only [ 37.152430][ T484] EXT4-fs error (device loop4): ext4_evict_inode:279: inode #15: comm syz.4.55: mark_inode_dirty error [ 37.217248][ T484] EXT4-fs (loop4): Remounting filesystem read-only [ 37.229916][ T484] EXT4-fs warning (device loop4): ext4_evict_inode:282: couldn't mark inode dirty (err -117) [ 37.243336][ T484] EXT4-fs (loop4): 1 orphan inode deleted [ 37.250022][ T484] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 37.471179][ T484] syz.4.55 (484) used greatest stack depth: 19656 bytes left [ 37.595001][ T316] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 37.765321][ T291] EXT4-fs (loop4): unmounting filesystem. [ 37.844976][ T316] usb 2-1: Using ep0 maxpacket: 32 [ 37.867549][ T316] usb 2-1: unable to get BOS descriptor or descriptor too short [ 37.877783][ T526] loop0: detected capacity change from 0 to 256 [ 37.885973][ T316] usb 2-1: config 17 has an invalid interface number: 11 but max is 0 [ 37.905200][ T316] usb 2-1: config 17 has no interface number 0 [ 37.912320][ T316] usb 2-1: config 17 interface 11 altsetting 128 endpoint 0xA has an invalid bInterval 254, changing to 7 [ 37.926202][ T526] FAT-fs (loop0): Directory bread(block 64) failed [ 37.933510][ T316] usb 2-1: config 17 interface 11 has no altsetting 0 [ 37.947557][ T526] FAT-fs (loop0): Directory bread(block 65) failed [ 37.956466][ T526] FAT-fs (loop0): Directory bread(block 66) failed [ 37.965491][ T316] usb 2-1: New USB device found, idVendor=1e2d, idProduct=005b, bcdDevice=79.14 [ 37.976969][ T526] FAT-fs (loop0): Directory bread(block 67) failed [ 37.984941][ T526] FAT-fs (loop0): Directory bread(block 68) failed [ 37.994741][ T316] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 37.999015][ T526] FAT-fs (loop0): Directory bread(block 69) failed [ 38.008503][ T316] usb 2-1: Product: syz [ 38.021680][ T526] FAT-fs (loop0): Directory bread(block 70) failed [ 38.029294][ T526] FAT-fs (loop0): Directory bread(block 71) failed [ 38.036353][ T526] FAT-fs (loop0): Directory bread(block 72) failed [ 38.043902][ T526] FAT-fs (loop0): Directory bread(block 73) failed [ 38.054886][ T315] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 38.231024][ T316] usb 2-1: Manufacturer: syz [ 38.238386][ T316] usb 2-1: SerialNumber: syz [ 38.297046][ T315] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 38.310708][ T315] usb 3-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 38.315436][ T536] loop3: detected capacity change from 0 to 8192 [ 38.321605][ T315] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 38.353010][ T315] usb 3-1: config 0 descriptor?? [ 38.360703][ T28] kauditd_printk_skb: 74 callbacks suppressed [ 38.360719][ T28] audit: type=1326 audit(1737568747.191:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=535 comm="syz.3.71" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59e1585d29 code=0x7ffc0000 [ 38.402463][ T28] audit: type=1326 audit(1737568747.191:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=535 comm="syz.3.71" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59e1585d29 code=0x7ffc0000 [ 38.437313][ T28] audit: type=1326 audit(1737568747.201:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=535 comm="syz.3.71" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f59e1585d29 code=0x7ffc0000 [ 38.440958][ T536] FAT-fs (loop3): error, invalid access to FAT (entry 0x0000e1b1) [ 38.467785][ T28] audit: type=1326 audit(1737568747.201:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=535 comm="syz.3.71" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59e1585d29 code=0x7ffc0000 [ 38.479936][ T536] FAT-fs (loop3): Filesystem has been set read-only [ 38.509472][ T28] audit: type=1326 audit(1737568747.201:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=535 comm="syz.3.71" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f59e1585d29 code=0x7ffc0000 [ 38.557541][ T28] audit: type=1326 audit(1737568747.201:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=535 comm="syz.3.71" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59e1585d29 code=0x7ffc0000 [ 38.593613][ T28] audit: type=1326 audit(1737568747.201:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=535 comm="syz.3.71" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f59e1585d29 code=0x7ffc0000 [ 38.631410][ T28] audit: type=1326 audit(1737568747.201:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=535 comm="syz.3.71" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59e1585d29 code=0x7ffc0000 [ 38.664031][ T28] audit: type=1326 audit(1737568747.201:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=535 comm="syz.3.71" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f59e1585d29 code=0x7ffc0000 [ 38.696889][ T28] audit: type=1326 audit(1737568747.201:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=535 comm="syz.3.71" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59e1585d29 code=0x7ffc0000 [ 38.721206][ T540] loop3: detected capacity change from 0 to 512 [ 38.768396][ T540] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 38.783258][ T540] EXT4-fs (loop3): 1 truncate cleaned up [ 38.791107][ T540] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 38.858037][ T315] lg-g15 0003:046D:C222.0001: unknown main item tag 0x0 [ 38.867099][ T315] lg-g15 0003:046D:C222.0001: unknown main item tag 0x0 [ 38.876476][ T315] lg-g15 0003:046D:C222.0001: unknown main item tag 0x0 [ 38.885396][ T315] lg-g15 0003:046D:C222.0001: item fetching failed at offset 4/7 [ 38.895065][ T315] lg-g15: probe of 0003:046D:C222.0001 failed with error -22 [ 38.952353][ T294] EXT4-fs (loop3): unmounting filesystem. [ 39.012824][ T550] loop0: detected capacity change from 0 to 1024 [ 39.049863][ T550] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 39.063135][ T550] EXT4-fs (loop0): orphan cleanup on readonly fs [ 39.083631][ T550] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5887: Corrupt filesystem [ 39.094597][ T550] EXT4-fs (loop0): Remounting filesystem read-only [ 39.102969][ T550] EXT4-fs error (device loop0): ext4_dirty_inode:6091: inode #3: comm syz.0.78: mark_inode_dirty error [ 39.121557][ T550] EXT4-fs (loop0): Remounting filesystem read-only [ 39.130744][ T550] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:477: comm syz.0.78: Invalid block bitmap block 3 in block_group 0 [ 39.155287][ T370] usb 3-1: USB disconnect, device number 2 [ 39.163114][ T550] EXT4-fs (loop0): Remounting filesystem read-only [ 39.180471][ T550] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5887: Corrupt filesystem [ 39.198321][ T550] EXT4-fs (loop0): Remounting filesystem read-only [ 39.213300][ T550] EXT4-fs error (device loop0): ext4_dirty_inode:6091: inode #3: comm syz.0.78: mark_inode_dirty error [ 39.241465][ T550] EXT4-fs (loop0): Remounting filesystem read-only [ 39.327454][ T550] EXT4-fs error (device loop0): ext4_map_blocks:634: inode #3: block 1: comm syz.0.78: lblock 6 mapped to illegal pblock 1 (length 1) [ 39.349109][ T550] EXT4-fs (loop0): Remounting filesystem read-only [ 39.359347][ T550] EXT4-fs error (device loop0): ext4_map_blocks:634: inode #3: block 48: comm syz.0.78: lblock 0 mapped to illegal pblock 48 (length 1) [ 39.380138][ T550] EXT4-fs (loop0): Remounting filesystem read-only [ 39.393048][ T550] EXT4-fs error (device loop0): ext4_acquire_dquot:6788: comm syz.0.78: Failed to acquire dquot type 0 [ 39.412975][ T550] EXT4-fs (loop0): Remounting filesystem read-only [ 39.423588][ T550] EXT4-fs error (device loop0): ext4_map_blocks:634: inode #3: block 49: comm syz.0.78: lblock 1 mapped to illegal pblock 49 (length 1) [ 39.445286][ T550] EXT4-fs (loop0): Remounting filesystem read-only [ 39.453945][ T550] EXT4-fs error (device loop0): ext4_acquire_dquot:6788: comm syz.0.78: Failed to acquire dquot type 0 [ 39.477113][ T550] EXT4-fs (loop0): Remounting filesystem read-only [ 39.494301][ T550] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5887: Corrupt filesystem [ 39.520673][ T550] EXT4-fs (loop0): Remounting filesystem read-only [ 39.533532][ T550] EXT4-fs error (device loop0): ext4_evict_inode:279: inode #15: comm syz.0.78: mark_inode_dirty error [ 39.546592][ T550] EXT4-fs (loop0): Remounting filesystem read-only [ 39.560525][ T550] EXT4-fs warning (device loop0): ext4_evict_inode:282: couldn't mark inode dirty (err -117) [ 39.586546][ T550] EXT4-fs (loop0): 1 orphan inode deleted [ 39.597509][ T550] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 39.630501][ T293] EXT4-fs (loop0): unmounting filesystem. [ 39.822727][ T571] loop2: detected capacity change from 0 to 8192 [ 39.943704][ T575] FAT-fs (loop2): error, invalid access to FAT (entry 0x0000e1b1) [ 39.946272][ T574] loop3: detected capacity change from 0 to 256 [ 40.004021][ T574] FAT-fs (loop3): Directory bread(block 64) failed [ 40.016481][ T574] FAT-fs (loop3): Directory bread(block 65) failed [ 40.021617][ T575] FAT-fs (loop2): Filesystem has been set read-only [ 40.033297][ T574] FAT-fs (loop3): Directory bread(block 66) failed [ 40.063419][ T574] FAT-fs (loop3): Directory bread(block 67) failed [ 40.077595][ T574] FAT-fs (loop3): Directory bread(block 68) failed [ 40.150069][ T574] FAT-fs (loop3): Directory bread(block 69) failed [ 40.158257][ T574] FAT-fs (loop3): Directory bread(block 70) failed [ 40.165664][ T574] FAT-fs (loop3): Directory bread(block 71) failed [ 40.186166][ T574] FAT-fs (loop3): Directory bread(block 72) failed [ 40.202580][ T574] FAT-fs (loop3): Directory bread(block 73) failed [ 40.202983][ T316] usb 2-1: bad CDC descriptors [ 40.362740][ T316] usb 2-1: USB disconnect, device number 2 [ 40.380362][ T590] loop1: detected capacity change from 0 to 512 [ 40.466120][ T590] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 40.562455][ T590] EXT4-fs (loop1): 1 truncate cleaned up [ 40.645029][ T590] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 40.874568][ T595] device syzkaller0 entered promiscuous mode [ 40.982628][ T292] EXT4-fs (loop1): unmounting filesystem. [ 41.032947][ T599] loop3: detected capacity change from 0 to 1024 [ 41.048704][ T605] loop1: detected capacity change from 0 to 128 [ 41.070786][ T605] EXT4-fs (loop1): Test dummy encryption mode enabled [ 41.087042][ T599] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 41.096781][ T605] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 41.107059][ T599] EXT4-fs (loop3): orphan cleanup on readonly fs [ 41.115585][ T599] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5887: Corrupt filesystem [ 41.126514][ T605] ext4 filesystem being mounted at /15/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 41.141826][ T599] EXT4-fs (loop3): Remounting filesystem read-only [ 41.159008][ T599] EXT4-fs error (device loop3): ext4_dirty_inode:6091: inode #3: comm syz.3.93: mark_inode_dirty error [ 41.162370][ T605] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 41.175421][ T599] EXT4-fs (loop3): Remounting filesystem read-only [ 41.199533][ T599] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:477: comm syz.3.93: Invalid block bitmap block 3 in block_group 0 [ 41.215605][ T599] EXT4-fs (loop3): Remounting filesystem read-only [ 41.222475][ T599] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5887: Corrupt filesystem [ 41.280203][ T615] loop0: detected capacity change from 0 to 512 [ 41.289624][ T615] EXT4-fs: Ignoring removed i_version option [ 41.297782][ T615] EXT4-fs: Ignoring removed mblk_io_submit option [ 41.314015][ T599] EXT4-fs (loop3): Remounting filesystem read-only [ 41.322492][ T599] EXT4-fs error (device loop3): ext4_dirty_inode:6091: inode #3: comm syz.3.93: mark_inode_dirty error [ 41.327639][ T615] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 41.347394][ T599] EXT4-fs (loop3): Remounting filesystem read-only [ 41.349599][ T615] EXT4-fs (loop0): 1 truncate cleaned up [ 41.360992][ T615] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 41.364080][ T599] EXT4-fs error (device loop3): ext4_map_blocks:634: inode #3: block 1: comm syz.3.93: lblock 6 mapped to illegal pblock 1 (length 1) [ 41.888324][ T599] EXT4-fs (loop3): Remounting filesystem read-only [ 41.925126][ T316] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 41.935689][ T599] EXT4-fs error (device loop3): ext4_map_blocks:634: inode #3: block 48: comm syz.3.93: lblock 0 mapped to illegal pblock 48 (length 1) [ 42.009428][ T599] EXT4-fs (loop3): Remounting filesystem read-only [ 42.018596][ T599] EXT4-fs error (device loop3): ext4_acquire_dquot:6788: comm syz.3.93: Failed to acquire dquot type 0 [ 42.040483][ T599] EXT4-fs (loop3): Remounting filesystem read-only [ 42.246609][ T599] EXT4-fs error (device loop3): ext4_map_blocks:634: inode #3: block 49: comm syz.3.93: lblock 1 mapped to illegal pblock 49 (length 1) [ 42.284472][ T293] EXT4-fs (loop0): unmounting filesystem. [ 42.298774][ T599] EXT4-fs (loop3): Remounting filesystem read-only [ 42.344776][ T624] loop4: detected capacity change from 0 to 8192 [ 42.386488][ T599] EXT4-fs error (device loop3): ext4_acquire_dquot:6788: comm syz.3.93: Failed to acquire dquot type 0 [ 42.407662][ T599] EXT4-fs (loop3): Remounting filesystem read-only [ 42.415311][ T316] usb 2-1: Using ep0 maxpacket: 32 [ 42.433477][ T316] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 42.447411][ T316] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 42.458377][ T624] FAT-fs (loop4): error, invalid access to FAT (entry 0x0000e1b1) [ 42.463164][ T599] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5887: Corrupt filesystem [ 42.489868][ T316] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 42.505632][ T316] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 42.554426][ T316] usb 2-1: config 1 interface 1 has no altsetting 0 [ 42.570076][ T624] FAT-fs (loop4): Filesystem has been set read-only [ 42.585564][ T316] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 42.636636][ T599] EXT4-fs (loop3): Remounting filesystem read-only [ 42.667015][ T316] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 42.691795][ T599] EXT4-fs error (device loop3): ext4_evict_inode:279: inode #15: comm syz.3.93: mark_inode_dirty error [ 42.778435][ T316] usb 2-1: Product: syz [ 42.798224][ T599] EXT4-fs (loop3): Remounting filesystem read-only [ 42.806881][ T599] EXT4-fs warning (device loop3): ext4_evict_inode:282: couldn't mark inode dirty (err -117) [ 42.821889][ T316] usb 2-1: Manufacturer: syz [ 42.824017][ T599] EXT4-fs (loop3): 1 orphan inode deleted [ 42.836358][ T599] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 42.852386][ T316] usb 2-1: SerialNumber: syz [ 42.891115][ T638] loop4: detected capacity change from 0 to 256 [ 42.904078][ T294] EXT4-fs (loop3): unmounting filesystem. [ 42.919167][ T638] FAT-fs (loop4): Directory bread(block 64) failed [ 42.928542][ T638] FAT-fs (loop4): Directory bread(block 65) failed [ 42.943528][ T638] FAT-fs (loop4): Directory bread(block 66) failed [ 42.957958][ T638] FAT-fs (loop4): Directory bread(block 67) failed [ 42.965733][ T638] FAT-fs (loop4): Directory bread(block 68) failed [ 42.973569][ T638] FAT-fs (loop4): Directory bread(block 69) failed [ 42.982938][ T638] FAT-fs (loop4): Directory bread(block 70) failed [ 42.999690][ T638] FAT-fs (loop4): Directory bread(block 71) failed [ 43.007759][ T638] FAT-fs (loop4): Directory bread(block 72) failed [ 43.031545][ T638] FAT-fs (loop4): Directory bread(block 73) failed [ 43.061066][ T297] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 43.068885][ T645] loop0: detected capacity change from 0 to 512 [ 43.102899][ T645] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 43.122996][ T645] EXT4-fs (loop0): 1 truncate cleaned up [ 43.131530][ T645] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 43.166095][ T316] usb 2-1: 2:1 : no or invalid class specific endpoint descriptor [ 43.176115][ T316] usb 2-1: 2:1 : no or invalid class specific endpoint descriptor [ 43.199229][ T316] usb 2-1: USB disconnect, device number 3 [ 43.223875][ T293] EXT4-fs (loop0): unmounting filesystem. [ 43.265053][ T297] usb 3-1: Using ep0 maxpacket: 32 [ 43.339579][ T297] usb 3-1: unable to get BOS descriptor or descriptor too short [ 43.452070][ T297] usb 3-1: config 17 has an invalid interface number: 11 but max is 0 [ 43.549193][ T297] usb 3-1: config 17 has no interface number 0 [ 43.558061][ T297] usb 3-1: config 17 interface 11 altsetting 128 endpoint 0xA has an invalid bInterval 254, changing to 7 [ 43.575157][ T297] usb 3-1: config 17 interface 11 has no altsetting 0 [ 43.587224][ T297] usb 3-1: New USB device found, idVendor=1e2d, idProduct=005b, bcdDevice=79.14 [ 43.603526][ T297] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 43.618271][ T297] usb 3-1: Product: syz [ 43.622738][ T297] usb 3-1: Manufacturer: syz [ 43.630549][ T297] usb 3-1: SerialNumber: syz [ 43.686429][ T652] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 43.933926][ T292] EXT4-fs (loop1): unmounting filesystem. [ 44.234371][ T28] kauditd_printk_skb: 169 callbacks suppressed [ 44.234406][ T28] audit: type=1326 audit(1737568753.061:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=664 comm="syz.1.112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc891185d29 code=0x7ffc0000 [ 44.735008][ T28] audit: type=1326 audit(1737568753.081:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=664 comm="syz.1.112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc891185d29 code=0x7ffc0000 [ 44.764502][ T28] audit: type=1326 audit(1737568753.111:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=664 comm="syz.1.112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc891185d29 code=0x7ffc0000 [ 44.793098][ T28] audit: type=1326 audit(1737568753.111:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=664 comm="syz.1.112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc891185d29 code=0x7ffc0000 [ 44.823158][ T28] audit: type=1326 audit(1737568753.111:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=664 comm="syz.1.112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7fc891185d29 code=0x7ffc0000 [ 44.872887][ T28] audit: type=1326 audit(1737568753.111:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=664 comm="syz.1.112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc891185d29 code=0x7ffc0000 [ 44.889382][ T673] loop4: detected capacity change from 0 to 128 [ 44.916275][ T28] audit: type=1326 audit(1737568753.111:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=664 comm="syz.1.112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc891185d29 code=0x7ffc0000 [ 44.950254][ T28] audit: type=1326 audit(1737568753.111:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=664 comm="syz.1.112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc891185d29 code=0x7ffc0000 [ 44.977523][ T673] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 44.994316][ T28] audit: type=1326 audit(1737568753.351:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=664 comm="syz.1.112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc891185d29 code=0x7ffc0000 [ 44.996763][ T673] ext4 filesystem being mounted at /26/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 45.039809][ T28] audit: type=1326 audit(1737568753.361:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=664 comm="syz.1.112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc891185d29 code=0x7ffc0000 [ 45.092858][ T678] loop3: detected capacity change from 0 to 1024 [ 45.142681][ T686] loop1: detected capacity change from 0 to 256 [ 45.149743][ T678] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 45.182304][ T686] FAT-fs (loop1): Directory bread(block 64) failed [ 45.210533][ T678] EXT4-fs (loop3): orphan cleanup on readonly fs [ 45.640666][ T678] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5887: Corrupt filesystem [ 45.667239][ T686] FAT-fs (loop1): Directory bread(block 65) failed [ 45.681903][ T678] EXT4-fs (loop3): Remounting filesystem read-only [ 45.688759][ T686] FAT-fs (loop1): Directory bread(block 66) failed [ 45.699975][ T678] EXT4-fs error (device loop3): ext4_dirty_inode:6091: inode #3: comm syz.3.115: mark_inode_dirty error [ 45.715753][ T686] FAT-fs (loop1): Directory bread(block 67) failed [ 45.723015][ T686] FAT-fs (loop1): Directory bread(block 68) failed [ 45.731609][ T678] EXT4-fs (loop3): Remounting filesystem read-only [ 45.740063][ T686] FAT-fs (loop1): Directory bread(block 69) failed [ 45.749642][ T678] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:477: comm syz.3.115: Invalid block bitmap block 3 in block_group 0 [ 45.774202][ T686] FAT-fs (loop1): Directory bread(block 70) failed [ 45.783275][ T686] FAT-fs (loop1): Directory bread(block 71) failed [ 45.791964][ T678] EXT4-fs (loop3): Remounting filesystem read-only [ 45.845521][ T686] FAT-fs (loop1): Directory bread(block 72) failed [ 45.852877][ T678] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5887: Corrupt filesystem [ 45.865717][ T686] FAT-fs (loop1): Directory bread(block 73) failed [ 45.875891][ T678] EXT4-fs (loop3): Remounting filesystem read-only [ 45.882950][ T678] EXT4-fs error (device loop3): ext4_dirty_inode:6091: inode #3: comm syz.3.115: mark_inode_dirty error [ 45.928237][ T297] usb 3-1: bad CDC descriptors [ 45.945908][ T297] usb 3-1: USB disconnect, device number 3 [ 46.121453][ T694] loop0: detected capacity change from 0 to 512 [ 46.132905][ T678] EXT4-fs (loop3): Remounting filesystem read-only [ 46.617203][ T678] EXT4-fs error (device loop3): ext4_map_blocks:634: inode #3: block 1: comm syz.3.115: lblock 6 mapped to illegal pblock 1 (length 1) [ 46.748675][ T694] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 46.780042][ T678] EXT4-fs (loop3): Remounting filesystem read-only [ 46.789361][ T678] EXT4-fs error (device loop3): ext4_map_blocks:634: inode #3: block 48: comm syz.3.115: lblock 0 mapped to illegal pblock 48 (length 1) [ 46.809152][ T694] EXT4-fs (loop0): 1 truncate cleaned up [ 46.818115][ T694] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 46.830531][ T678] EXT4-fs (loop3): Remounting filesystem read-only [ 46.872183][ T678] EXT4-fs error (device loop3): ext4_acquire_dquot:6788: comm syz.3.115: Failed to acquire dquot type 0 [ 46.891365][ T678] EXT4-fs (loop3): Remounting filesystem read-only [ 46.901483][ T678] EXT4-fs error (device loop3): ext4_map_blocks:634: inode #3: block 49: comm syz.3.115: lblock 1 mapped to illegal pblock 49 (length 1) [ 46.934931][ T678] EXT4-fs (loop3): Remounting filesystem read-only [ 46.942293][ T678] EXT4-fs error (device loop3): ext4_acquire_dquot:6788: comm syz.3.115: Failed to acquire dquot type 0 [ 46.962556][ T291] EXT4-fs (loop4): unmounting filesystem. [ 46.978492][ T678] EXT4-fs (loop3): Remounting filesystem read-only [ 46.999094][ T678] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5887: Corrupt filesystem [ 47.022028][ T704] syz.2.123[704] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 47.022120][ T704] syz.2.123[704] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 47.030691][ T678] EXT4-fs (loop3): Remounting filesystem read-only [ 47.075972][ T293] EXT4-fs (loop0): unmounting filesystem. [ 47.094985][ T678] EXT4-fs error (device loop3): ext4_evict_inode:279: inode #15: comm syz.3.115: mark_inode_dirty error [ 47.122385][ T678] EXT4-fs (loop3): Remounting filesystem read-only [ 47.139238][ T678] EXT4-fs warning (device loop3): ext4_evict_inode:282: couldn't mark inode dirty (err -117) [ 47.150729][ T678] EXT4-fs (loop3): 1 orphan inode deleted [ 47.157660][ T678] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 47.208996][ T294] EXT4-fs (loop3): unmounting filesystem. [ 48.540397][ T701] loop1: detected capacity change from 0 to 40427 [ 48.606653][ T701] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 48.646304][ T701] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 48.667025][ T701] F2FS-fs (loop1): invalid crc value [ 48.687626][ T701] F2FS-fs (loop1): Found nat_bits in checkpoint [ 48.747610][ T701] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 48.760317][ T701] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 48.823680][ T631] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 48.840065][ T631] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 49.155133][ T697] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 49.381506][ T744] loop1: detected capacity change from 0 to 256 [ 49.395418][ T697] usb 3-1: Using ep0 maxpacket: 32 [ 49.418201][ T697] usb 3-1: unable to get BOS descriptor or descriptor too short [ 49.427090][ T744] FAT-fs (loop1): Directory bread(block 64) failed [ 49.438257][ T744] FAT-fs (loop1): Directory bread(block 65) failed [ 49.447057][ T697] usb 3-1: config 17 has an invalid interface number: 11 but max is 0 [ 49.457996][ T744] FAT-fs (loop1): Directory bread(block 66) failed [ 49.466975][ T744] FAT-fs (loop1): Directory bread(block 67) failed [ 49.478148][ T697] usb 3-1: config 17 has no interface number 0 [ 49.727398][ T744] FAT-fs (loop1): Directory bread(block 68) failed [ 49.734588][ T697] usb 3-1: config 17 interface 11 altsetting 128 endpoint 0xA has an invalid bInterval 254, changing to 7 [ 49.751367][ T744] FAT-fs (loop1): Directory bread(block 69) failed [ 49.756526][ T746] loop0: detected capacity change from 0 to 512 [ 49.758401][ T697] usb 3-1: config 17 interface 11 has no altsetting 0 [ 49.781191][ T744] FAT-fs (loop1): Directory bread(block 70) failed [ 49.786377][ T746] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 49.788623][ T744] FAT-fs (loop1): Directory bread(block 71) failed [ 49.804892][ T697] usb 3-1: New USB device found, idVendor=1e2d, idProduct=005b, bcdDevice=79.14 [ 49.813868][ T744] FAT-fs (loop1): Directory bread(block 72) failed [ 49.823946][ T697] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 49.833915][ T744] FAT-fs (loop1): Directory bread(block 73) failed [ 49.845048][ T697] usb 3-1: Product: syz [ 49.865693][ T697] usb 3-1: Manufacturer: syz [ 49.871492][ T697] usb 3-1: SerialNumber: syz [ 49.880888][ T746] EXT4-fs (loop0): 1 truncate cleaned up [ 49.889020][ T746] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 49.959106][ T293] EXT4-fs (loop0): unmounting filesystem. [ 50.017395][ T28] kauditd_printk_skb: 57 callbacks suppressed [ 50.017407][ T28] audit: type=1326 audit(1737568758.851:496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=755 comm="syz.0.137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd357d85d29 code=0x7ffc0000 [ 50.910431][ T28] audit: type=1326 audit(1737568758.861:497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=755 comm="syz.0.137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd357d85d29 code=0x7ffc0000 [ 50.956332][ T28] audit: type=1326 audit(1737568758.861:498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=755 comm="syz.0.137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd357d85d29 code=0x7ffc0000 [ 50.988228][ T756] loop0: detected capacity change from 0 to 1024 [ 50.999647][ T28] audit: type=1326 audit(1737568758.861:499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=755 comm="syz.0.137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd357d85d29 code=0x7ffc0000 [ 51.025065][ T756] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 51.026976][ T28] audit: type=1326 audit(1737568758.861:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=755 comm="syz.0.137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd357d85d29 code=0x7ffc0000 [ 51.061812][ T28] audit: type=1326 audit(1737568758.861:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=755 comm="syz.0.137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd357d85d29 code=0x7ffc0000 [ 51.093155][ T756] EXT4-fs (loop0): orphan cleanup on readonly fs [ 51.107958][ T28] audit: type=1326 audit(1737568758.861:502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=755 comm="syz.0.137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd357d85d29 code=0x7ffc0000 [ 51.161929][ T28] audit: type=1326 audit(1737568759.741:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=755 comm="syz.0.137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd357d85d29 code=0x7ffc0000 [ 51.193287][ T28] audit: type=1326 audit(1737568759.741:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=755 comm="syz.0.137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd357d85d29 code=0x7ffc0000 [ 51.310196][ T28] audit: type=1326 audit(1737568759.781:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=755 comm="syz.0.137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fd357d85d29 code=0x7ffc0000 [ 51.351784][ T756] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5887: Corrupt filesystem [ 51.836645][ T756] EXT4-fs (loop0): Remounting filesystem read-only [ 51.996788][ T756] EXT4-fs error (device loop0): ext4_dirty_inode:6091: inode #3: comm syz.0.137: mark_inode_dirty error [ 52.019174][ T756] EXT4-fs (loop0): Remounting filesystem read-only [ 52.093152][ T697] usb 3-1: bad CDC descriptors [ 52.129690][ T756] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:477: comm syz.0.137: Invalid block bitmap block 3 in block_group 0 [ 52.149913][ T697] usb 3-1: USB disconnect, device number 4 [ 52.175771][ T756] EXT4-fs (loop0): Remounting filesystem read-only [ 52.192250][ T756] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5887: Corrupt filesystem [ 52.220980][ T756] EXT4-fs (loop0): Remounting filesystem read-only [ 52.229818][ T756] EXT4-fs error (device loop0): ext4_dirty_inode:6091: inode #3: comm syz.0.137: mark_inode_dirty error [ 52.249369][ T784] loop4: detected capacity change from 0 to 512 [ 52.266264][ T756] EXT4-fs (loop0): Remounting filesystem read-only [ 52.280003][ T784] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 52.300758][ T756] EXT4-fs error (device loop0): ext4_map_blocks:634: inode #3: block 1: comm syz.0.137: lblock 6 mapped to illegal pblock 1 (length 1) [ 52.326218][ T756] EXT4-fs (loop0): Remounting filesystem read-only [ 52.335793][ T756] EXT4-fs error (device loop0): ext4_map_blocks:634: inode #3: block 48: comm syz.0.137: lblock 0 mapped to illegal pblock 48 (length 1) [ 52.347904][ T784] EXT4-fs (loop4): 1 truncate cleaned up [ 52.358772][ T784] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 52.702599][ T756] EXT4-fs (loop0): Remounting filesystem read-only [ 52.789080][ T756] EXT4-fs error (device loop0): ext4_acquire_dquot:6788: comm syz.0.137: Failed to acquire dquot type 0 [ 52.906286][ T756] EXT4-fs (loop0): Remounting filesystem read-only [ 53.208013][ T794] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 53.223689][ T756] EXT4-fs error (device loop0): ext4_map_blocks:634: inode #3: block 49: comm syz.0.137: lblock 1 mapped to illegal pblock 49 (length 1) [ 53.249772][ T797] loop2: detected capacity change from 0 to 256 [ 53.311463][ T756] EXT4-fs (loop0): Remounting filesystem read-only [ 53.323410][ T797] FAT-fs (loop2): Directory bread(block 64) failed [ 53.339717][ T291] EXT4-fs (loop4): unmounting filesystem. [ 53.358787][ T756] EXT4-fs error (device loop0): ext4_acquire_dquot:6788: comm syz.0.137: Failed to acquire dquot type 0 [ 53.382107][ T797] FAT-fs (loop2): Directory bread(block 65) failed [ 53.403020][ T797] FAT-fs (loop2): Directory bread(block 66) failed [ 53.423206][ T756] EXT4-fs (loop0): Remounting filesystem read-only [ 53.431928][ T797] FAT-fs (loop2): Directory bread(block 67) failed [ 53.450122][ T756] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5887: Corrupt filesystem [ 53.472782][ T797] FAT-fs (loop2): Directory bread(block 68) failed [ 53.585111][ T797] FAT-fs (loop2): Directory bread(block 69) failed [ 53.592156][ T797] FAT-fs (loop2): Directory bread(block 70) failed [ 53.599617][ T756] EXT4-fs (loop0): Remounting filesystem read-only [ 53.607102][ T756] EXT4-fs error (device loop0): ext4_evict_inode:279: inode #15: comm syz.0.137: mark_inode_dirty error [ 53.622553][ T797] FAT-fs (loop2): Directory bread(block 71) failed [ 53.633236][ T797] FAT-fs (loop2): Directory bread(block 72) failed [ 53.962789][ T756] EXT4-fs (loop0): Remounting filesystem read-only [ 54.025648][ T797] FAT-fs (loop2): Directory bread(block 73) failed [ 54.041065][ T756] EXT4-fs warning (device loop0): ext4_evict_inode:282: couldn't mark inode dirty (err -117) [ 54.108678][ T807] loop1: detected capacity change from 0 to 8192 [ 54.116934][ T756] EXT4-fs (loop0): 1 orphan inode deleted [ 54.124518][ T756] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 54.161718][ T293] EXT4-fs (loop0): unmounting filesystem. [ 54.176356][ T807] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000e1b1) [ 54.185995][ T807] FAT-fs (loop1): Filesystem has been set read-only [ 54.402152][ T697] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 54.635684][ T697] usb 4-1: Using ep0 maxpacket: 32 [ 54.683673][ T697] usb 4-1: unable to get BOS descriptor or descriptor too short [ 54.833827][ T697] usb 4-1: config 17 has an invalid interface number: 11 but max is 0 [ 54.842652][ T697] usb 4-1: config 17 has no interface number 0 [ 54.849780][ T697] usb 4-1: config 17 interface 11 altsetting 128 endpoint 0xA has an invalid bInterval 254, changing to 7 [ 54.862417][ T697] usb 4-1: config 17 interface 11 has no altsetting 0 [ 54.872457][ T697] usb 4-1: New USB device found, idVendor=1e2d, idProduct=005b, bcdDevice=79.14 [ 54.883095][ T697] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 56.302827][ T697] usb 4-1: Product: syz [ 56.370641][ T28] kauditd_printk_skb: 62 callbacks suppressed [ 56.370659][ T28] audit: type=1400 audit(1737568764.921:562): avc: denied { map } for pid=825 comm="syz.2.161" path="/dev/ashmem" dev="devtmpfs" ino=265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 56.421014][ T840] loop0: detected capacity change from 0 to 512 [ 56.429419][ T697] usb 4-1: Manufacturer: syz [ 56.439543][ T697] usb 4-1: SerialNumber: syz [ 56.459657][ T840] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 56.484270][ T28] audit: type=1326 audit(1737568765.271:563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=841 comm="syz.2.166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcafd985d29 code=0x7ffc0000 [ 56.539978][ T844] netlink: 40 bytes leftover after parsing attributes in process `syz.1.167'. [ 56.574190][ T842] loop2: detected capacity change from 0 to 1024 [ 56.588680][ T697] usb 4-1: bad CDC descriptors [ 56.596453][ T849] loop3: detected capacity change from 0 to 512 [ 56.604322][ T28] audit: type=1326 audit(1737568765.271:564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=841 comm="syz.2.166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fcafd985d29 code=0x7ffc0000 [ 56.630671][ T849] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 56.636175][ T697] usb 4-1: USB disconnect, device number 2 [ 56.642795][ T846] loop1: detected capacity change from 0 to 8192 [ 56.648403][ T840] EXT4-fs (loop0): 1 truncate cleaned up [ 56.670686][ T28] audit: type=1326 audit(1737568765.271:565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=841 comm="syz.2.166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcafd985d29 code=0x7ffc0000 [ 56.702944][ T28] audit: type=1326 audit(1737568765.271:566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=841 comm="syz.2.166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcafd985d29 code=0x7ffc0000 [ 56.706682][ T840] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 56.731498][ T842] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 56.743218][ T39] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 56.755820][ T842] EXT4-fs (loop2): orphan cleanup on readonly fs [ 56.776575][ T842] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5887: Corrupt filesystem [ 56.788960][ T842] EXT4-fs (loop2): Remounting filesystem read-only [ 56.794343][ T28] audit: type=1326 audit(1737568765.271:567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=841 comm="syz.2.166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcafd985d29 code=0x7ffc0000 [ 56.796102][ T842] EXT4-fs error (device loop2): ext4_dirty_inode:6091: inode #3: comm syz.2.166: mark_inode_dirty error [ 56.826839][ T846] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000e1b1) [ 56.833016][ T842] EXT4-fs (loop2): Remounting filesystem read-only [ 56.848546][ T846] FAT-fs (loop1): Filesystem has been set read-only [ 56.855591][ T849] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 56.865913][ T842] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:477: comm syz.2.166: Invalid block bitmap block 3 in block_group 0 [ 56.881501][ T28] audit: type=1326 audit(1737568765.271:568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=841 comm="syz.2.166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcafd985d29 code=0x7ffc0000 [ 56.911146][ T28] audit: type=1326 audit(1737568765.281:569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=841 comm="syz.2.166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcafd985d29 code=0x7ffc0000 [ 56.916055][ T849] ext4 filesystem being mounted at /35/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 56.947320][ T293] EXT4-fs (loop0): unmounting filesystem. [ 56.963232][ T842] EXT4-fs (loop2): Remounting filesystem read-only [ 56.972733][ T28] audit: type=1326 audit(1737568765.281:570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=841 comm="syz.2.166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fcafd985d29 code=0x7ffc0000 [ 56.980416][ T842] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5887: Corrupt filesystem [ 57.001272][ T28] audit: type=1326 audit(1737568765.281:571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=841 comm="syz.2.166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fcafd985d63 code=0x7ffc0000 [ 57.011927][ T39] usb 5-1: config 0 has an invalid interface number: 20 but max is 0 [ 57.047493][ T39] usb 5-1: config 0 has no interface number 0 [ 57.064919][ T842] EXT4-fs (loop2): Remounting filesystem read-only [ 57.072714][ T39] usb 5-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 57.085530][ T842] EXT4-fs error (device loop2): ext4_dirty_inode:6091: inode #3: comm syz.2.166: mark_inode_dirty error [ 57.117656][ T858] loop1: detected capacity change from 0 to 256 [ 57.146273][ T858] FAT-fs (loop1): Directory bread(block 64) failed [ 57.153753][ T858] FAT-fs (loop1): Directory bread(block 65) failed [ 57.160827][ T858] FAT-fs (loop1): Directory bread(block 66) failed [ 57.168098][ T39] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 57.169131][ T842] EXT4-fs (loop2): Remounting filesystem read-only [ 57.177621][ T39] usb 5-1: Product: syz [ 57.189224][ T39] usb 5-1: Manufacturer: syz [ 57.195892][ T39] usb 5-1: SerialNumber: syz [ 57.201003][ T858] FAT-fs (loop1): Directory bread(block 67) failed [ 57.212424][ T842] EXT4-fs error (device loop2): ext4_map_blocks:634: inode #3: block 1: comm syz.2.166: lblock 6 mapped to illegal pblock 1 (length 1) [ 57.227757][ T858] FAT-fs (loop1): Directory bread(block 68) failed [ 57.228137][ T39] usb 5-1: config 0 descriptor?? [ 57.235218][ T858] FAT-fs (loop1): Directory bread(block 69) failed [ 57.244568][ T39] usb-storage 5-1:0.20: USB Mass Storage device detected [ 57.248010][ T842] EXT4-fs (loop2): Remounting filesystem read-only [ 57.286545][ T842] EXT4-fs error (device loop2): ext4_map_blocks:634: inode #3: block 48: comm syz.2.166: lblock 0 mapped to illegal pblock 48 (length 1) [ 57.405199][ T858] FAT-fs (loop1): Directory bread(block 70) failed [ 57.426047][ T858] FAT-fs (loop1): Directory bread(block 71) failed [ 57.539905][ T39] usb-storage 5-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 57.550986][ T858] FAT-fs (loop1): Directory bread(block 72) failed [ 57.560622][ T842] EXT4-fs (loop2): Remounting filesystem read-only [ 57.567670][ T858] FAT-fs (loop1): Directory bread(block 73) failed [ 57.576497][ T842] EXT4-fs error (device loop2): ext4_acquire_dquot:6788: comm syz.2.166: Failed to acquire dquot type 0 [ 57.626993][ T294] EXT4-fs (loop3): unmounting filesystem. [ 57.633683][ T842] EXT4-fs (loop2): Remounting filesystem read-only [ 57.641097][ T842] EXT4-fs error (device loop2): ext4_map_blocks:634: inode #3: block 49: comm syz.2.166: lblock 1 mapped to illegal pblock 49 (length 1) [ 57.659199][ T842] EXT4-fs (loop2): Remounting filesystem read-only [ 57.666074][ T842] EXT4-fs error (device loop2): ext4_acquire_dquot:6788: comm syz.2.166: Failed to acquire dquot type 0 [ 57.680458][ T842] EXT4-fs (loop2): Remounting filesystem read-only [ 57.689067][ T842] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5887: Corrupt filesystem [ 57.707587][ T39] usb 5-1: USB disconnect, device number 3 [ 57.722131][ T842] EXT4-fs (loop2): Remounting filesystem read-only [ 57.729908][ T842] EXT4-fs error (device loop2): ext4_evict_inode:279: inode #15: comm syz.2.166: mark_inode_dirty error [ 57.744263][ T842] EXT4-fs (loop2): Remounting filesystem read-only [ 57.752334][ T842] EXT4-fs warning (device loop2): ext4_evict_inode:282: couldn't mark inode dirty (err -117) [ 57.770535][ T842] EXT4-fs (loop2): 1 orphan inode deleted [ 57.785194][ T842] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 58.749767][ T879] loop1: detected capacity change from 0 to 1024 [ 58.822697][ T295] EXT4-fs (loop2): unmounting filesystem. [ 58.850583][ T879] EXT4-fs: Ignoring removed i_version option [ 58.865285][ T879] EXT4-fs (loop1): Test dummy encryption mode enabled [ 58.913511][ T879] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 58.947363][ T889] loop4: detected capacity change from 0 to 512 [ 59.785472][ T889] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 59.817734][ T889] EXT4-fs (loop4): 1 truncate cleaned up [ 59.826347][ T889] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 61.676697][ T900] fscrypt: AES-256-XTS using blk-crypto-fallback [ 61.684004][ T900] fscrypt (loop1): error -12 starting to use blk-crypto [ 61.693904][ T901] fscrypt (loop1): error -12 starting to use blk-crypto [ 61.746877][ T904] loop2: detected capacity change from 0 to 8192 [ 61.755535][ T292] EXT4-fs (loop1): unmounting filesystem. [ 61.755573][ T291] EXT4-fs (loop4): unmounting filesystem. [ 61.771727][ T28] kauditd_printk_skb: 93 callbacks suppressed [ 61.771742][ T28] audit: type=1326 audit(1737568770.601:659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=903 comm="syz.2.181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcafd985d29 code=0x7ffc0000 [ 61.814880][ T697] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 61.819060][ T909] netlink: 88 bytes leftover after parsing attributes in process `syz.1.183'. [ 61.824226][ T28] audit: type=1326 audit(1737568770.611:660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=903 comm="syz.2.181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcafd985d29 code=0x7ffc0000 [ 61.840900][ T909] netlink: 48 bytes leftover after parsing attributes in process `syz.1.183'. [ 61.864397][ T28] audit: type=1400 audit(1737568770.651:661): avc: denied { create } for pid=908 comm="syz.1.183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 61.972905][ T915] loop0: detected capacity change from 0 to 256 [ 61.985844][ T28] audit: type=1400 audit(1737568770.651:662): avc: denied { write } for pid=908 comm="syz.1.183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 61.992582][ T916] FAT-fs (loop2): error, invalid access to FAT (entry 0x0000e1b1) [ 62.011380][ T28] audit: type=1326 audit(1737568770.701:663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=903 comm="syz.2.181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcafd985d29 code=0x7ffc0000 [ 62.069636][ T916] FAT-fs (loop2): Filesystem has been set read-only [ 62.078467][ T28] audit: type=1326 audit(1737568770.701:664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=903 comm="syz.2.181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcafd985d29 code=0x7ffc0000 [ 62.124765][ T28] audit: type=1326 audit(1737568770.701:665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=903 comm="syz.2.181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7fcafd985d29 code=0x7ffc0000 [ 62.172792][ T915] FAT-fs (loop0): Directory bread(block 64) failed [ 62.184258][ T915] FAT-fs (loop0): Directory bread(block 65) failed [ 62.196187][ T915] FAT-fs (loop0): Directory bread(block 66) failed [ 62.204219][ T915] FAT-fs (loop0): Directory bread(block 67) failed [ 62.227440][ T915] FAT-fs (loop0): Directory bread(block 68) failed [ 62.231820][ T28] audit: type=1326 audit(1737568770.711:666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=903 comm="syz.2.181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcafd985d29 code=0x7ffc0000 [ 62.256636][ T915] FAT-fs (loop0): Directory bread(block 69) failed [ 62.263797][ T28] audit: type=1326 audit(1737568770.711:667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=903 comm="syz.2.181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcafd985d29 code=0x7ffc0000 [ 62.278532][ T915] FAT-fs (loop0): Directory bread(block 70) failed [ 62.297903][ T28] audit: type=1326 audit(1737568770.711:668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=903 comm="syz.2.181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcafd985d29 code=0x7ffc0000 [ 62.312575][ T915] FAT-fs (loop0): Directory bread(block 71) failed [ 62.345274][ T915] FAT-fs (loop0): Directory bread(block 72) failed [ 62.352784][ T915] FAT-fs (loop0): Directory bread(block 73) failed [ 63.572360][ T936] hub 2-0:1.0: USB hub found [ 63.579286][ T936] hub 2-0:1.0: 1 port detected [ 63.828814][ T934] loop1: detected capacity change from 0 to 1024 [ 63.839700][ T940] loop0: detected capacity change from 0 to 512 [ 63.898519][ T940] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 63.939862][ T934] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 63.951392][ T940] EXT4-fs (loop0): 1 truncate cleaned up [ 63.957220][ T940] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 63.963767][ T934] EXT4-fs (loop1): orphan cleanup on readonly fs [ 63.996133][ T293] EXT4-fs (loop0): unmounting filesystem. [ 64.008702][ T934] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5887: Corrupt filesystem [ 64.022867][ T934] EXT4-fs (loop1): Remounting filesystem read-only [ 64.030485][ T934] EXT4-fs error (device loop1): ext4_dirty_inode:6091: inode #3: comm syz.1.189: mark_inode_dirty error [ 64.042647][ T934] EXT4-fs (loop1): Remounting filesystem read-only [ 64.050382][ T934] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:477: comm syz.1.189: Invalid block bitmap block 3 in block_group 0 [ 64.100754][ T934] EXT4-fs (loop1): Remounting filesystem read-only [ 64.113461][ T934] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5887: Corrupt filesystem [ 64.244301][ T934] EXT4-fs (loop1): Remounting filesystem read-only [ 64.328429][ T934] EXT4-fs error (device loop1): ext4_dirty_inode:6091: inode #3: comm syz.1.189: mark_inode_dirty error [ 64.399790][ T934] EXT4-fs (loop1): Remounting filesystem read-only [ 64.409844][ T934] EXT4-fs error (device loop1): ext4_map_blocks:634: inode #3: block 1: comm syz.1.189: lblock 6 mapped to illegal pblock 1 (length 1) [ 64.427861][ T934] EXT4-fs (loop1): Remounting filesystem read-only [ 64.438124][ T934] EXT4-fs error (device loop1): ext4_map_blocks:634: inode #3: block 48: comm syz.1.189: lblock 0 mapped to illegal pblock 48 (length 1) [ 64.458864][ T524] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 64.468778][ T934] EXT4-fs (loop1): Remounting filesystem read-only [ 64.480983][ T934] EXT4-fs error (device loop1): ext4_acquire_dquot:6788: comm syz.1.189: Failed to acquire dquot type 0 [ 64.495998][ T934] EXT4-fs (loop1): Remounting filesystem read-only [ 64.503173][ T934] EXT4-fs error (device loop1): ext4_map_blocks:634: inode #3: block 49: comm syz.1.189: lblock 1 mapped to illegal pblock 49 (length 1) [ 64.524040][ T934] EXT4-fs (loop1): Remounting filesystem read-only [ 64.531808][ T934] EXT4-fs error (device loop1): ext4_acquire_dquot:6788: comm syz.1.189: Failed to acquire dquot type 0 [ 64.545534][ T697] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 64.555934][ T934] EXT4-fs (loop1): Remounting filesystem read-only [ 64.562787][ T934] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5887: Corrupt filesystem [ 64.576993][ T934] EXT4-fs (loop1): Remounting filesystem read-only [ 64.584946][ T934] EXT4-fs error (device loop1): ext4_evict_inode:279: inode #15: comm syz.1.189: mark_inode_dirty error [ 64.598742][ T934] EXT4-fs (loop1): Remounting filesystem read-only [ 64.607574][ T934] EXT4-fs warning (device loop1): ext4_evict_inode:282: couldn't mark inode dirty (err -117) [ 64.619868][ T934] EXT4-fs (loop1): 1 orphan inode deleted [ 64.626813][ T934] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 64.655877][ T524] usb 4-1: Using ep0 maxpacket: 32 [ 64.665629][ T524] usb 4-1: unable to get BOS descriptor or descriptor too short [ 64.683673][ T292] EXT4-fs (loop1): unmounting filesystem. [ 64.806454][ T524] usb 4-1: config 17 has an invalid interface number: 11 but max is 0 [ 64.815473][ T524] usb 4-1: config 17 has no interface number 0 [ 64.822803][ T524] usb 4-1: config 17 interface 11 altsetting 128 endpoint 0xA has an invalid bInterval 254, changing to 7 [ 65.871717][ T969] loop1: detected capacity change from 0 to 40427 [ 65.897920][ T969] F2FS-fs (loop1): Image doesn't support compression [ 65.911283][ T969] F2FS-fs (loop1): invalid crc value [ 66.142949][ T969] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 66.291718][ T697] usb 1-1: Using ep0 maxpacket: 16 [ 66.347521][ T524] usb 4-1: config 17 interface 11 has no altsetting 0 [ 66.347897][ T969] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 66.684701][ T981] loop2: detected capacity change from 0 to 256 [ 66.716341][ T981] FAT-fs (loop2): Directory bread(block 64) failed [ 66.724164][ T981] FAT-fs (loop2): Directory bread(block 65) failed [ 66.733738][ T981] FAT-fs (loop2): Directory bread(block 66) failed [ 66.747257][ T981] FAT-fs (loop2): Directory bread(block 67) failed [ 66.758238][ T981] FAT-fs (loop2): Directory bread(block 68) failed [ 66.765919][ T981] FAT-fs (loop2): Directory bread(block 69) failed [ 66.779066][ T981] FAT-fs (loop2): Directory bread(block 70) failed [ 66.786536][ T981] FAT-fs (loop2): Directory bread(block 71) failed [ 66.801203][ T981] FAT-fs (loop2): Directory bread(block 72) failed [ 66.809531][ T981] FAT-fs (loop2): Directory bread(block 73) failed [ 66.841633][ T697] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 66.855288][ T697] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 66.871597][ T697] usb 1-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 66.886226][ T697] usb 1-1: config 0 interface 0 has no altsetting 0 [ 66.895433][ T697] usb 1-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 66.905382][ T697] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.914857][ T524] usb 4-1: New USB device found, idVendor=1e2d, idProduct=005b, bcdDevice=79.14 [ 66.924273][ T524] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.933403][ T697] usb 1-1: config 0 descriptor?? [ 66.939308][ T524] usb 4-1: Product: syz [ 66.943461][ T524] usb 4-1: Manufacturer: syz [ 67.059057][ T524] usb 4-1: SerialNumber: syz [ 67.074285][ T28] kauditd_printk_skb: 90 callbacks suppressed [ 67.074303][ T28] audit: type=1400 audit(1737568775.901:753): avc: denied { write } for pid=983 comm="syz.3.204" name="kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 67.124889][ T524] usb 4-1: can't set config #17, error -71 [ 67.336841][ T697] usbhid 1-1:0.0: can't add hid device: -71 [ 67.348015][ T524] usb 4-1: USB disconnect, device number 3 [ 67.452177][ T697] usbhid: probe of 1-1:0.0 failed with error -71 [ 67.466678][ T993] loop0: detected capacity change from 0 to 256 [ 67.470076][ T697] usb 1-1: USB disconnect, device number 4 [ 67.542586][ T993] netlink: 28 bytes leftover after parsing attributes in process `syz.0.205'. [ 67.595364][ T28] audit: type=1326 audit(1737568776.431:754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1000 comm="syz.2.210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcafd985d29 code=0x7ffc0000 [ 67.691265][ T28] audit: type=1326 audit(1737568776.431:755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1000 comm="syz.2.210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcafd985d29 code=0x7ffc0000 [ 67.691308][ T28] audit: type=1326 audit(1737568776.431:756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1000 comm="syz.2.210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fcafd985d29 code=0x7ffc0000 [ 67.691339][ T28] audit: type=1326 audit(1737568776.431:757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1000 comm="syz.2.210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcafd985d29 code=0x7ffc0000 [ 67.691370][ T28] audit: type=1326 audit(1737568776.431:758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1000 comm="syz.2.210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcafd985d29 code=0x7ffc0000 [ 67.691399][ T28] audit: type=1326 audit(1737568776.441:759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1000 comm="syz.2.210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcafd985d29 code=0x7ffc0000 [ 67.691440][ T28] audit: type=1326 audit(1737568776.441:760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1000 comm="syz.2.210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcafd985d29 code=0x7ffc0000 [ 67.691469][ T28] audit: type=1326 audit(1737568776.441:761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1000 comm="syz.2.210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcafd985d29 code=0x7ffc0000 [ 67.691499][ T28] audit: type=1326 audit(1737568776.441:762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1000 comm="syz.2.210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fcafd985d29 code=0x7ffc0000 [ 67.772532][ T1010] loop4: detected capacity change from 0 to 128 [ 67.852233][ T1010] syz.4.212: attempt to access beyond end of device [ 67.852233][ T1010] loop4: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 68.083839][ T622] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 68.307250][ T622] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 68.395906][ T622] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 68.424637][ T622] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.476310][ T622] usb 2-1: Product: syz [ 68.481010][ T622] usb 2-1: Manufacturer: syz [ 68.487072][ T622] usb 2-1: SerialNumber: syz [ 69.128962][ T1028] tmpfs: Bad value for 'huge' [ 69.315473][ T988] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 69.521171][ T1034] binfmt_misc: register: failed to install interpreter file ./file0 [ 69.537551][ T988] usb 3-1: Using ep0 maxpacket: 32 [ 69.601672][ T988] usb 3-1: unable to get BOS descriptor or descriptor too short [ 69.625394][ T988] usb 3-1: config 17 has an invalid interface number: 11 but max is 0 [ 69.640773][ T1041] loop0: detected capacity change from 0 to 512 [ 69.641153][ T1040] loop4: detected capacity change from 0 to 256 [ 69.648279][ T988] usb 3-1: config 17 has no interface number 0 [ 69.663067][ T988] usb 3-1: config 17 interface 11 altsetting 128 endpoint 0xA has an invalid bInterval 254, changing to 7 [ 69.675839][ T988] usb 3-1: config 17 interface 11 has no altsetting 0 [ 69.690193][ T988] usb 3-1: New USB device found, idVendor=1e2d, idProduct=005b, bcdDevice=79.14 [ 69.702808][ T988] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.706793][ T1040] FAT-fs (loop4): Directory bread(block 64) failed [ 69.722538][ T988] usb 3-1: Product: syz [ 69.722663][ T1040] FAT-fs (loop4): Directory bread(block 65) failed [ 69.734674][ T988] usb 3-1: Manufacturer: syz [ 69.734759][ T1040] FAT-fs (loop4): Directory bread(block 66) failed [ 69.736328][ T1041] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 69.740704][ T1040] FAT-fs (loop4): Directory bread(block 67) failed [ 69.757856][ T1040] FAT-fs (loop4): Directory bread(block 68) failed [ 69.773552][ T1040] FAT-fs (loop4): Directory bread(block 69) failed [ 69.773858][ T1041] ext4 filesystem being mounted at /41/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 69.780539][ T1040] FAT-fs (loop4): Directory bread(block 70) failed [ 69.798305][ T988] usb 3-1: SerialNumber: syz [ 69.800838][ T1040] FAT-fs (loop4): Directory bread(block 71) failed [ 69.815150][ T1040] FAT-fs (loop4): Directory bread(block 72) failed [ 69.831756][ T1040] FAT-fs (loop4): Directory bread(block 73) failed [ 69.864187][ T293] EXT4-fs (loop0): unmounting filesystem. [ 70.017050][ T622] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 70.505264][ T622] cdc_ncm 2-1:1.0 eth1: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 70.537068][ T622] usb 2-1: USB disconnect, device number 4 [ 70.543544][ T622] cdc_ncm 2-1:1.0 eth1: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM (NO ZLP) [ 71.057285][ T1063] loop1: detected capacity change from 0 to 2048 [ 71.080778][ T1063] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 71.632629][ T988] usb 3-1: bad CDC descriptors [ 71.828759][ T988] usb 3-1: USB disconnect, device number 5 [ 71.915241][ T1062] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 71.931007][ T1062] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 16 with error 28 [ 71.945673][ T1062] EXT4-fs (loop1): This should not happen!! Data will be lost [ 71.945673][ T1062] [ 71.957571][ T1062] EXT4-fs (loop1): Total free blocks count 0 [ 71.964202][ T1062] EXT4-fs (loop1): Free/Dirty block details [ 71.973601][ T1062] EXT4-fs (loop1): free_blocks=2415919104 [ 71.980426][ T1062] EXT4-fs (loop1): dirty_blocks=16 [ 71.989010][ T1062] EXT4-fs (loop1): Block reservation details [ 71.996321][ T1062] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 72.049009][ T1078] Zero length message leads to an empty skb [ 72.049861][ T292] EXT4-fs (loop1): unmounting filesystem. [ 72.106653][ T28] kauditd_printk_skb: 79 callbacks suppressed [ 72.106672][ T28] audit: type=1326 audit(1737568780.941:842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1081 comm="syz.0.235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd357d85d29 code=0x7ffc0000 [ 72.117560][ T1086] loop4: detected capacity change from 0 to 512 [ 72.173149][ T1086] EXT4-fs: Ignoring removed bh option [ 72.369077][ T1089] loop2: detected capacity change from 0 to 40427 [ 72.386070][ T1089] F2FS-fs (loop2): Image doesn't support compression [ 72.397148][ T1089] F2FS-fs (loop2): invalid crc value [ 72.639282][ T1086] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 72.668264][ T1097] loop1: detected capacity change from 0 to 128 [ 72.727673][ T1089] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 72.907027][ T1097] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 72.919045][ T1097] ext4 filesystem being mounted at /42/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 72.981495][ T1089] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 73.256600][ T1086] ext4 filesystem being mounted at /48/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 73.319181][ T28] audit: type=1326 audit(1737568780.941:843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1081 comm="syz.0.235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd357d85d29 code=0x7ffc0000 [ 73.445261][ T28] audit: type=1326 audit(1737568781.211:844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1081 comm="syz.0.235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd357d85d29 code=0x7ffc0000 [ 73.482144][ T28] audit: type=1326 audit(1737568781.401:845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1081 comm="syz.0.235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd357d85d29 code=0x7ffc0000 [ 73.943184][ T1107] loop3: detected capacity change from 0 to 256 [ 73.997750][ T28] audit: type=1326 audit(1737568781.401:846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1081 comm="syz.0.235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd357d85d29 code=0x7ffc0000 [ 74.025316][ T28] audit: type=1326 audit(1737568781.411:847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1081 comm="syz.0.235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7fd357d85d29 code=0x7ffc0000 [ 74.026234][ T1107] FAT-fs (loop3): Directory bread(block 64) failed [ 74.060187][ T28] audit: type=1326 audit(1737568781.411:848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1081 comm="syz.0.235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd357d85d29 code=0x7ffc0000 [ 74.120393][ T1107] FAT-fs (loop3): Directory bread(block 65) failed [ 74.157396][ T697] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 74.169897][ T1107] FAT-fs (loop3): Directory bread(block 66) failed [ 74.176731][ T1107] FAT-fs (loop3): Directory bread(block 67) failed [ 74.185211][ T28] audit: type=1326 audit(1737568781.411:849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1081 comm="syz.0.235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=113 compat=0 ip=0x7fd357d85d29 code=0x7ffc0000 [ 74.206179][ T1107] FAT-fs (loop3): Directory bread(block 68) failed [ 74.244926][ T1107] FAT-fs (loop3): Directory bread(block 69) failed [ 74.247841][ T28] audit: type=1326 audit(1737568781.411:850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1081 comm="syz.0.235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd357d85d29 code=0x7ffc0000 [ 74.251967][ T1107] FAT-fs (loop3): Directory bread(block 70) failed [ 74.305288][ T1107] FAT-fs (loop3): Directory bread(block 71) failed [ 74.312206][ T1107] FAT-fs (loop3): Directory bread(block 72) failed [ 74.334935][ T1107] FAT-fs (loop3): Directory bread(block 73) failed [ 74.345168][ T28] audit: type=1400 audit(1737568781.801:851): avc: denied { ioctl } for pid=1083 comm="syz.1.233" path="/42/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/blkio.bfq.io_service_bytes_recursive" dev="loop1" ino=12 ioctlcmd=0x660f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 74.446872][ T697] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 74.464950][ T697] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 74.477785][ T697] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 74.492075][ T697] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 74.520697][ T697] usb 5-1: New USB device found, idVendor=0738, idProduct=a2c5, bcdDevice=1e.ce [ 74.896647][ T697] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.905870][ T697] usb 5-1: Product: syz [ 74.910287][ T697] usb 5-1: Manufacturer: syz [ 74.915992][ T697] usb 5-1: SerialNumber: syz [ 74.922502][ T697] usb 5-1: config 0 descriptor?? [ 74.939372][ T697] xpad 5-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 74.959762][ T697] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input5 [ 75.162536][ T19] usb 5-1: USB disconnect, device number 4 [ 75.171308][ T291] EXT4-fs (loop4): unmounting filesystem. [ 75.177961][ T19] xpad 5-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 75.205063][ T24] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 75.349290][ T1117] loop0: detected capacity change from 0 to 40427 [ 75.368934][ T1117] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 75.391987][ T1117] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 75.426008][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 75.433427][ T24] usb 3-1: unable to get BOS descriptor or descriptor too short [ 75.501229][ T24] usb 3-1: config 17 has an invalid interface number: 11 but max is 0 [ 75.533076][ T1117] F2FS-fs (loop0): invalid crc value [ 75.601334][ T24] usb 3-1: config 17 has no interface number 0 [ 75.619148][ T1117] F2FS-fs (loop0): Found nat_bits in checkpoint [ 75.683309][ T24] usb 3-1: config 17 interface 11 altsetting 128 endpoint 0xA has an invalid bInterval 254, changing to 7 [ 75.755184][ T24] usb 3-1: config 17 interface 11 has no altsetting 0 [ 75.772460][ T24] usb 3-1: New USB device found, idVendor=1e2d, idProduct=005b, bcdDevice=79.14 [ 75.784776][ T1117] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 75.792827][ T1117] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 75.794586][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.836178][ T24] usb 3-1: Product: syz [ 75.845619][ T24] usb 3-1: Manufacturer: syz [ 75.860156][ T24] usb 3-1: SerialNumber: syz [ 76.136116][ T1136] netlink: 88 bytes leftover after parsing attributes in process `syz.4.244'. [ 76.177736][ T292] EXT4-fs (loop1): unmounting filesystem. [ 76.265142][ T1117] F2FS-fs (loop0): Start checkpoint disabled! [ 77.398653][ T24] usb 3-1: bad CDC descriptors [ 77.464666][ T24] usb 3-1: USB disconnect, device number 6 [ 77.661098][ T28] kauditd_printk_skb: 92 callbacks suppressed [ 77.661116][ T28] audit: type=1400 audit(1737568786.491:944): avc: denied { read } for pid=1151 comm="syz.2.249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 77.895757][ T1163] loop0: detected capacity change from 0 to 256 [ 77.932912][ T1157] loop3: detected capacity change from 0 to 40427 [ 77.936718][ T1163] FAT-fs (loop0): Directory bread(block 64) failed [ 77.941940][ T1157] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 77.956353][ T1157] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 78.006108][ T1163] FAT-fs (loop0): Directory bread(block 65) failed [ 78.024408][ T1163] FAT-fs (loop0): Directory bread(block 66) failed [ 78.044223][ T1163] FAT-fs (loop0): Directory bread(block 67) failed [ 78.052724][ T1163] FAT-fs (loop0): Directory bread(block 68) failed [ 78.071295][ T1163] FAT-fs (loop0): Directory bread(block 69) failed [ 78.093979][ T1157] F2FS-fs (loop3): Found nat_bits in checkpoint [ 78.102334][ T1163] FAT-fs (loop0): Directory bread(block 70) failed [ 78.134675][ T1163] FAT-fs (loop0): Directory bread(block 71) failed [ 78.141954][ T1163] FAT-fs (loop0): Directory bread(block 72) failed [ 78.266529][ T1163] FAT-fs (loop0): Directory bread(block 73) failed [ 78.473587][ T1157] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 78.484156][ T1157] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 78.616851][ T1178] netlink: 88 bytes leftover after parsing attributes in process `syz.1.256'. [ 79.276982][ T28] audit: type=1400 audit(1737568788.111:945): avc: denied { unlink } for pid=1183 comm="syz.1.257" name="#3" dev="tmpfs" ino=273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 79.383694][ T1187] loop2: detected capacity change from 0 to 512 [ 79.392305][ T1187] EXT4-fs: Ignoring removed bh option [ 79.400453][ T1189] process 'syz.0.260' launched './file0' with NULL argv: empty string added [ 79.410540][ T28] audit: type=1400 audit(1737568788.241:946): avc: denied { execute } for pid=1188 comm="syz.0.260" name="file0" dev="tmpfs" ino=295 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 79.475855][ T28] audit: type=1400 audit(1737568788.271:947): avc: denied { execute_no_trans } for pid=1188 comm="syz.0.260" path="/52/file0" dev="tmpfs" ino=295 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 79.515742][ T1187] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 79.537487][ T1187] ext4 filesystem being mounted at /53/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 79.564049][ T28] audit: type=1326 audit(1737568788.341:948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1192 comm="syz.0.262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd357d85d29 code=0x7ffc0000 [ 79.615378][ T28] audit: type=1326 audit(1737568788.341:949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1192 comm="syz.0.262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd357d85d29 code=0x7ffc0000 [ 79.664903][ T28] audit: type=1326 audit(1737568788.341:950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1192 comm="syz.0.262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd357d85d29 code=0x7ffc0000 [ 79.765529][ T28] audit: type=1326 audit(1737568788.341:951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1192 comm="syz.0.262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd357d85d29 code=0x7ffc0000 [ 79.834895][ T28] audit: type=1326 audit(1737568788.341:952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1192 comm="syz.0.262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd357d85d29 code=0x7ffc0000 [ 80.455609][ T1206] syz.2.259[1206] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 80.455785][ T1206] syz.2.259[1206] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 81.402768][ T28] audit: type=1326 audit(1737568788.341:953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1192 comm="syz.0.262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd357d85d29 code=0x7ffc0000 [ 81.646568][ T1217] netlink: 28 bytes leftover after parsing attributes in process `syz.1.266'. [ 81.684142][ T1217] loop1: detected capacity change from 0 to 16 [ 82.428101][ T295] EXT4-fs (loop2): unmounting filesystem. [ 82.456361][ T1219] netlink: 88 bytes leftover after parsing attributes in process `syz.4.268'. [ 82.547972][ T1222] loop4: detected capacity change from 0 to 256 [ 82.571410][ T294] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 82.571441][ T294] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 82.593311][ T294] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 82.603975][ T1222] FAT-fs (loop4): Directory bread(block 64) failed [ 82.638488][ T294] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 82.638516][ T294] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 82.652997][ T294] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 82.663324][ T1222] FAT-fs (loop4): Directory bread(block 65) failed [ 82.681485][ T294] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 82.681786][ T28] kauditd_printk_skb: 82 callbacks suppressed [ 82.681799][ T28] audit: type=1400 audit(1737568791.521:1036): avc: denied { unmount } for pid=294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 82.724469][ T1222] FAT-fs (loop4): Directory bread(block 66) failed [ 82.732494][ T1222] FAT-fs (loop4): Directory bread(block 67) failed [ 82.740441][ T1222] FAT-fs (loop4): Directory bread(block 68) failed [ 82.750153][ T1222] FAT-fs (loop4): Directory bread(block 69) failed [ 82.757773][ T28] audit: type=1400 audit(1737568791.561:1037): avc: denied { remove_name } for pid=294 comm="syz-executor" name="file0" dev="loop3" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 82.787503][ T1222] FAT-fs (loop4): Directory bread(block 70) failed [ 82.796446][ T1222] FAT-fs (loop4): Directory bread(block 71) failed [ 82.803664][ T1222] FAT-fs (loop4): Directory bread(block 72) failed [ 82.811671][ T28] audit: type=1400 audit(1737568791.561:1038): avc: denied { rmdir } for pid=294 comm="syz-executor" name="file0" dev="loop3" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 82.819122][ T19] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 82.854987][ T1222] FAT-fs (loop4): Directory bread(block 73) failed [ 82.879162][ T28] audit: type=1400 audit(1737568791.711:1039): avc: denied { mount } for pid=1221 comm="syz.4.270" name="/" dev="loop4" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 82.942591][ T1230] loop1: detected capacity change from 0 to 512 [ 82.951931][ T1230] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 83.071911][ T1230] EXT4-fs (loop1): 1 truncate cleaned up [ 83.089671][ T1230] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 83.104833][ T28] audit: type=1400 audit(1737568791.931:1040): avc: denied { mount } for pid=1229 comm="syz.1.274" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 83.147417][ T28] audit: type=1400 audit(1737568791.971:1041): avc: denied { read write } for pid=1221 comm="syz.4.270" name="fuse" dev="devtmpfs" ino=93 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 83.173143][ T28] audit: type=1400 audit(1737568791.971:1042): avc: denied { open } for pid=1221 comm="syz.4.270" path="/dev/fuse" dev="devtmpfs" ino=93 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 83.188291][ T1237] loop3: detected capacity change from 0 to 1024 [ 83.201966][ T28] audit: type=1400 audit(1737568791.981:1043): avc: denied { unlink } for pid=1229 comm="syz.1.274" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 83.240811][ T292] EXT4-fs (loop1): unmounting filesystem. [ 83.296184][ T1237] EXT4-fs: Ignoring removed i_version option [ 83.309148][ T28] audit: type=1400 audit(1737568792.141:1044): avc: denied { read } for pid=1239 comm="syz.1.276" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 83.335929][ T1237] EXT4-fs (loop3): Test dummy encryption mode enabled [ 83.396090][ T1237] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 83.477497][ T28] audit: type=1400 audit(1737568792.311:1045): avc: denied { unmount } for pid=291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 84.291498][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 84.302613][ T1245] device bridge_slave_0 left promiscuous mode [ 84.310504][ T1245] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.702609][ T1245] device bridge_slave_1 left promiscuous mode [ 84.709943][ T1245] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.762908][ T294] EXT4-fs (loop3): unmounting filesystem. [ 84.787341][ T1257] loop0: detected capacity change from 0 to 256 [ 84.822818][ T1257] exfat: Deprecated parameter 'namecase' [ 84.830000][ T1257] exfat: Deprecated parameter 'utf8' [ 84.837910][ T1257] exfat: Deprecated parameter 'namecase' [ 84.844113][ T1257] exfat: Deprecated parameter 'utf8' [ 84.853012][ T1257] exFAT-fs (loop0): failed to load upcase table (idx : 0x00012153, chksum : 0x555ffa9e, utbl_chksum : 0xe619d30d) [ 85.897008][ T1272] loop0: detected capacity change from 0 to 1024 [ 85.915883][ T1272] EXT4-fs: Ignoring removed i_version option [ 85.928009][ T1272] EXT4-fs (loop0): Test dummy encryption mode enabled [ 85.942653][ T1275] loop4: detected capacity change from 0 to 512 [ 85.971873][ T1275] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 86.042232][ T1272] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 86.058123][ T1275] EXT4-fs (loop4): 1 truncate cleaned up [ 86.065553][ T1275] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 86.074017][ T1282] loop3: detected capacity change from 0 to 256 [ 86.399338][ T1282] FAT-fs (loop3): Directory bread(block 64) failed [ 86.406384][ T1282] FAT-fs (loop3): Directory bread(block 65) failed [ 86.415591][ T1282] FAT-fs (loop3): Directory bread(block 66) failed [ 86.416689][ T291] EXT4-fs (loop4): unmounting filesystem. [ 86.422811][ T1282] FAT-fs (loop3): Directory bread(block 67) failed [ 86.436165][ T1282] FAT-fs (loop3): Directory bread(block 68) failed [ 86.443945][ T1282] FAT-fs (loop3): Directory bread(block 69) failed [ 86.453754][ T1282] FAT-fs (loop3): Directory bread(block 70) failed [ 86.462469][ T1282] FAT-fs (loop3): Directory bread(block 71) failed [ 86.470986][ T1282] FAT-fs (loop3): Directory bread(block 72) failed [ 86.480598][ T1282] FAT-fs (loop3): Directory bread(block 73) failed [ 86.828366][ T293] EXT4-fs (loop0): unmounting filesystem. [ 87.578606][ T1316] loop1: detected capacity change from 0 to 512 [ 87.601778][ T1316] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 87.626833][ T1306] loop3: detected capacity change from 0 to 2048 [ 87.642838][ T1316] EXT4-fs (loop1): 1 truncate cleaned up [ 87.655178][ T1316] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 87.715322][ T1306] loop3: p2 p3 p7 [ 87.724236][ T292] EXT4-fs (loop1): unmounting filesystem. [ 87.772765][ T1306] mmap: syz.3.293 (1306) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 87.835285][ T28] kauditd_printk_skb: 61 callbacks suppressed [ 87.835302][ T28] audit: type=1400 audit(1737568796.671:1107): avc: denied { write } for pid=1308 comm="syz.2.297" name="kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 87.864958][ T19] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 87.940971][ T1329] netlink: 96 bytes leftover after parsing attributes in process `syz.0.304'. [ 87.969447][ T1327] loop3: detected capacity change from 0 to 256 [ 88.005509][ T375] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 88.016511][ T28] audit: type=1326 audit(1737568796.851:1108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1334 comm="syz.1.306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc891185d29 code=0x7ffc0000 [ 88.074857][ T19] usb 5-1: Using ep0 maxpacket: 16 [ 88.078073][ T28] audit: type=1326 audit(1737568796.851:1109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1334 comm="syz.1.306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc891185d29 code=0x7ffc0000 [ 88.081863][ T19] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 88.129971][ T28] audit: type=1326 audit(1737568796.871:1110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1334 comm="syz.1.306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc891185d29 code=0x7ffc0000 [ 88.183991][ T28] audit: type=1326 audit(1737568796.871:1111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1334 comm="syz.1.306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc891185d29 code=0x7ffc0000 [ 88.195660][ T19] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 88.239192][ T19] usb 5-1: New USB device found, idVendor=046b, idProduct=0000, bcdDevice= 0.00 [ 88.263013][ T19] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.280223][ T28] audit: type=1326 audit(1737568796.871:1112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1334 comm="syz.1.306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc891185d29 code=0x7ffc0000 [ 88.321687][ T19] usb 5-1: 0:2 : does not exist [ 88.345042][ T28] audit: type=1326 audit(1737568796.871:1113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1334 comm="syz.1.306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc891185d29 code=0x7ffc0000 [ 88.383009][ T28] audit: type=1326 audit(1737568796.871:1114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1334 comm="syz.1.306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc891185d29 code=0x7ffc0000 [ 88.410436][ T28] audit: type=1326 audit(1737568796.871:1115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1334 comm="syz.1.306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc891185d29 code=0x7ffc0000 [ 88.436515][ T28] audit: type=1326 audit(1737568796.871:1116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1334 comm="syz.1.306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fc891185d29 code=0x7ffc0000 [ 88.522736][ T19] usb 5-1: string descriptor 0 read error: -71 [ 88.561278][ T19] usb 5-1: USB disconnect, device number 5 [ 88.829407][ T1342] loop3: detected capacity change from 0 to 40427 [ 88.840893][ T1347] loop2: detected capacity change from 0 to 128 [ 88.868834][ T1342] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 88.889031][ T1342] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 88.908770][ T1342] F2FS-fs (loop3): invalid crc value [ 88.917317][ T1347] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 88.966955][ T1342] F2FS-fs (loop3): Found nat_bits in checkpoint [ 89.048104][ T1347] ext4 filesystem being mounted at /61/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 89.090587][ T1342] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 89.118424][ T1342] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 89.128258][ T1347] fscrypt (loop2, inode 12): Unsupported encryption flags (0x10) [ 89.827237][ T295] EXT4-fs (loop2): unmounting filesystem. [ 90.048515][ T347] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 90.145932][ T347] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 90.629072][ T631] Bluetooth: hci0: Frame reassembly failed (-84) [ 90.642656][ T631] Bluetooth: hci0: Frame reassembly failed (-84) [ 91.647162][ T1377] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 91.667236][ T1377] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 92.639908][ T1374] Bluetooth: hci0: command 0x1003 tx timeout [ 92.646346][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 92.790096][ T1397] loop3: detected capacity change from 0 to 512 [ 92.808101][ T1400] loop0: detected capacity change from 0 to 256 [ 92.856031][ T1397] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 92.868636][ T1400] FAT-fs (loop0): Directory bread(block 64) failed [ 92.887401][ T28] kauditd_printk_skb: 65 callbacks suppressed [ 92.887420][ T28] audit: type=1400 audit(1737568801.721:1182): avc: denied { read write } for pid=1401 comm="syz.1.325" name="uinput" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 92.888190][ T1400] FAT-fs (loop0): Directory bread(block 65) failed [ 92.904875][ T28] audit: type=1400 audit(1737568801.721:1183): avc: denied { open } for pid=1401 comm="syz.1.325" path="/dev/uinput" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 92.938426][ T1400] FAT-fs (loop0): Directory bread(block 66) failed [ 92.978777][ T1400] FAT-fs (loop0): Directory bread(block 67) failed [ 93.001783][ T1400] FAT-fs (loop0): Directory bread(block 68) failed [ 93.011128][ T1400] FAT-fs (loop0): Directory bread(block 69) failed [ 93.027717][ T1397] EXT4-fs (loop3): orphan cleanup on readonly fs [ 93.035583][ T1397] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.323: bg 0: block 248: padding at end of block bitmap is not set [ 93.052559][ T1397] Quota error (device loop3): write_blk: dquota write failed [ 93.061541][ T1397] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 93.063409][ T1400] FAT-fs (loop0): Directory bread(block 70) failed [ 93.073160][ T1397] EXT4-fs error (device loop3): ext4_acquire_dquot:6788: comm syz.3.323: Failed to acquire dquot type 1 [ 93.105841][ T1400] FAT-fs (loop0): Directory bread(block 71) failed [ 93.112811][ T1400] FAT-fs (loop0): Directory bread(block 72) failed [ 93.120376][ T1400] FAT-fs (loop0): Directory bread(block 73) failed [ 93.120481][ T1397] EXT4-fs (loop3): 1 truncate cleaned up [ 93.476172][ T28] audit: type=1400 audit(1737568802.291:1184): avc: denied { create } for pid=1401 comm="syz.1.325" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 93.560413][ T1397] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 93.925829][ T28] audit: type=1326 audit(1737568802.501:1185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1393 comm="syz.4.321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1be1185d29 code=0x7ffc0000 [ 93.978627][ T28] audit: type=1326 audit(1737568802.501:1186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1393 comm="syz.4.321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1be1185d29 code=0x7ffc0000 [ 94.011863][ T28] audit: type=1326 audit(1737568802.791:1187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1393 comm="syz.4.321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1be1185d29 code=0x7ffc0000 [ 94.012959][ T294] EXT4-fs (loop3): unmounting filesystem. [ 94.039980][ T28] audit: type=1326 audit(1737568802.791:1188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1393 comm="syz.4.321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1be1185d29 code=0x7ffc0000 [ 94.070611][ T28] audit: type=1326 audit(1737568802.791:1189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1393 comm="syz.4.321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7f1be1185d29 code=0x7ffc0000 [ 94.252343][ T1399] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.261568][ T1399] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.277806][ T1423] Source file dentry negative [ 94.364433][ T1424] netlink: 8 bytes leftover after parsing attributes in process `syz.1.327'. [ 94.796275][ T1412] kvm: emulating exchange as write [ 95.242307][ T1432] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 95.464524][ T1421] loop3: detected capacity change from 0 to 40427 [ 95.492819][ T1421] F2FS-fs (loop3): Image doesn't support compression [ 95.513491][ T1421] F2FS-fs (loop3): invalid crc value [ 95.520947][ T1447] loop0: detected capacity change from 0 to 256 [ 95.530098][ T1447] exfat: Deprecated parameter 'namecase' [ 95.545203][ T1447] exfat: Deprecated parameter 'utf8' [ 95.551064][ T1447] exfat: Deprecated parameter 'namecase' [ 95.560116][ T1447] exfat: Deprecated parameter 'utf8' [ 95.568489][ T1447] exFAT-fs (loop0): failed to load upcase table (idx : 0x00012153, chksum : 0x555ffa9e, utbl_chksum : 0xe619d30d) [ 95.617792][ T1421] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 95.678825][ T1421] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 97.178793][ T1487] loop1: detected capacity change from 0 to 40427 [ 97.200536][ T1487] F2FS-fs (loop1): Image doesn't support compression [ 97.214961][ T1487] F2FS-fs (loop1): invalid crc value [ 97.439062][ T1487] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 97.600140][ T1487] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 97.859332][ T1499] loop0: detected capacity change from 0 to 256 [ 97.870920][ T1499] exfat: Deprecated parameter 'namecase' [ 97.885847][ T1499] exfat: Deprecated parameter 'utf8' [ 97.897164][ T1499] exfat: Deprecated parameter 'namecase' [ 97.936805][ T1499] exfat: Deprecated parameter 'utf8' [ 97.983967][ T1499] exFAT-fs (loop0): failed to load upcase table (idx : 0x00012153, chksum : 0x555ffa9e, utbl_chksum : 0xe619d30d) [ 98.077971][ T1513] loop4: detected capacity change from 0 to 512 [ 98.094376][ T1518] loop0: detected capacity change from 0 to 512 [ 98.101858][ T1513] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 98.112373][ T1518] EXT4-fs: Ignoring removed i_version option [ 98.124300][ T1518] EXT4-fs: Ignoring removed mblk_io_submit option [ 98.131987][ T1518] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 98.157935][ T1513] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 98.171403][ T1518] EXT4-fs (loop0): 1 truncate cleaned up [ 98.185588][ T1518] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 98.185625][ T1513] ext4 filesystem being mounted at /73/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 98.357830][ T1510] loop2: detected capacity change from 0 to 40427 [ 98.365906][ T1510] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 98.376460][ T1510] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 98.391842][ T1510] F2FS-fs (loop2): invalid crc value [ 98.414094][ T1510] F2FS-fs (loop2): Found nat_bits in checkpoint [ 98.459008][ T28] kauditd_printk_skb: 73 callbacks suppressed [ 98.459026][ T28] audit: type=1400 audit(1737568807.291:1263): avc: denied { mac_admin } for pid=1517 comm="syz.0.365" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 98.473288][ T1510] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 98.502329][ T1510] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 98.558170][ T28] audit: type=1400 audit(1737568807.391:1264): avc: denied { ioctl } for pid=1509 comm="syz.2.362" path="/74/bus/bus" dev="loop2" ino=455 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 98.643198][ T43] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 98.654440][ T43] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 98.847799][ T1541] netlink: 88 bytes leftover after parsing attributes in process `syz.2.369'. [ 98.858696][ T1541] netlink: 48 bytes leftover after parsing attributes in process `syz.2.369'. [ 98.964357][ T293] EXT4-fs (loop0): unmounting filesystem. [ 99.162504][ T1547] loop2: detected capacity change from 0 to 8192 [ 99.212222][ T291] EXT4-fs (loop4): unmounting filesystem. [ 99.220483][ T28] audit: type=1326 audit(1737568808.061:1265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1546 comm="syz.2.373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcafd985d29 code=0x7ffc0000 [ 99.248353][ T28] audit: type=1326 audit(1737568808.061:1266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1546 comm="syz.2.373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcafd985d29 code=0x7ffc0000 [ 99.296051][ T1560] netlink: 28 bytes leftover after parsing attributes in process `syz.4.378'. [ 99.310590][ T28] audit: type=1326 audit(1737568808.061:1267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1546 comm="syz.2.373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcafd985d29 code=0x7ffc0000 [ 99.432711][ T28] audit: type=1326 audit(1737568808.061:1268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1546 comm="syz.2.373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7fcafd985d29 code=0x7ffc0000 [ 99.554538][ T28] audit: type=1326 audit(1737568808.061:1269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1546 comm="syz.2.373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcafd985d29 code=0x7ffc0000 [ 99.581549][ T28] audit: type=1326 audit(1737568808.061:1270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1546 comm="syz.2.373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcafd985d29 code=0x7ffc0000 [ 99.608339][ T28] audit: type=1326 audit(1737568808.061:1271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1546 comm="syz.2.373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcafd985d29 code=0x7ffc0000 [ 99.638476][ T28] audit: type=1326 audit(1737568808.061:1272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1546 comm="syz.2.373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcafd985d29 code=0x7ffc0000 [ 99.693872][ T1547] FAT-fs (loop2): error, invalid access to FAT (entry 0x0000e1b1) [ 99.702092][ T1547] FAT-fs (loop2): Filesystem has been set read-only [ 99.741250][ T1569] netlink: 96 bytes leftover after parsing attributes in process `syz.2.381'. [ 99.946613][ T1573] loop4: detected capacity change from 0 to 512 [ 100.009638][ T1576] device syzkaller0 entered promiscuous mode [ 100.153418][ T1586] netlink: 28 bytes leftover after parsing attributes in process `syz.0.389'. [ 100.232953][ T1590] loop0: detected capacity change from 0 to 8192 [ 100.234081][ T1592] kvm: pic: non byte write [ 100.258031][ T1590] FAT-fs (loop0): error, invalid access to FAT (entry 0x0000e1b1) [ 100.269185][ T1590] FAT-fs (loop0): Filesystem has been set read-only [ 100.774081][ T1601] input input8: cannot allocate more than FF_MAX_EFFECTS effects [ 101.166174][ T1606] loop1: detected capacity change from 0 to 512 [ 101.222365][ T1606] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 101.256644][ T1606] ext4 filesystem being mounted at /76/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 101.310602][ T1606] EXT4-fs error (device loop1): ext4_acquire_dquot:6788: comm syz.1.396: Failed to acquire dquot type 0 [ 101.333262][ T1612] device syzkaller0 entered promiscuous mode [ 101.352167][ T292] EXT4-fs (loop1): unmounting filesystem. [ 101.404310][ T1615] netlink: 28 bytes leftover after parsing attributes in process `syz.1.400'. [ 101.492904][ T1622] loop3: detected capacity change from 0 to 256 [ 101.503311][ T1622] exfat: Deprecated parameter 'namecase' [ 101.513116][ T1622] exfat: Deprecated parameter 'utf8' [ 101.519108][ T1622] exfat: Deprecated parameter 'namecase' [ 101.527804][ T1622] exfat: Deprecated parameter 'utf8' [ 101.543817][ T1622] exFAT-fs (loop3): failed to load upcase table (idx : 0x00012153, chksum : 0x555ffa9e, utbl_chksum : 0xe619d30d) [ 101.584947][ T1626] netlink: 88 bytes leftover after parsing attributes in process `syz.0.404'. [ 101.599438][ T1626] netlink: 48 bytes leftover after parsing attributes in process `syz.0.404'. [ 101.632347][ T1628] input input9: cannot allocate more than FF_MAX_EFFECTS effects [ 101.690039][ T1630] loop0: detected capacity change from 0 to 1024 [ 101.704091][ T1630] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 101.715779][ T1630] EXT4-fs (loop0): orphan cleanup on readonly fs [ 101.722928][ T1630] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5887: Corrupt filesystem [ 101.741493][ T1630] EXT4-fs (loop0): Remounting filesystem read-only [ 101.749875][ T1630] EXT4-fs error (device loop0): ext4_dirty_inode:6091: inode #3: comm syz.0.406: mark_inode_dirty error [ 101.765966][ T1630] EXT4-fs (loop0): Remounting filesystem read-only [ 101.776228][ T1630] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:477: comm syz.0.406: Invalid block bitmap block 3 in block_group 0 [ 101.798766][ T1630] EXT4-fs (loop0): Remounting filesystem read-only [ 101.806846][ T1630] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5887: Corrupt filesystem [ 101.819614][ T1630] EXT4-fs (loop0): Remounting filesystem read-only [ 101.827518][ T1630] EXT4-fs error (device loop0): ext4_dirty_inode:6091: inode #3: comm syz.0.406: mark_inode_dirty error [ 101.848741][ T1630] EXT4-fs (loop0): Remounting filesystem read-only [ 101.851986][ T1630] EXT4-fs error (device loop0): ext4_map_blocks:634: inode #3: block 1: comm syz.0.406: lblock 6 mapped to illegal pblock 1 (length 1) [ 101.889955][ T1630] EXT4-fs (loop0): Remounting filesystem read-only [ 101.898612][ T1647] loop2: detected capacity change from 0 to 512 [ 101.904196][ T1630] EXT4-fs error (device loop0): ext4_map_blocks:634: inode #3: block 48: comm syz.0.406: lblock 0 mapped to illegal pblock 48 (length 1) [ 101.929968][ T1647] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 101.933742][ T1630] EXT4-fs (loop0): Remounting filesystem read-only [ 101.940694][ T1647] ext4 filesystem being mounted at /85/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 101.960457][ T1630] EXT4-fs error (device loop0): ext4_acquire_dquot:6788: comm syz.0.406: Failed to acquire dquot type 0 [ 101.990004][ T295] EXT4-fs (loop2): unmounting filesystem. [ 101.993670][ T1630] EXT4-fs (loop0): Remounting filesystem read-only [ 102.004023][ T1630] EXT4-fs error (device loop0): ext4_map_blocks:634: inode #3: block 49: comm syz.0.406: lblock 1 mapped to illegal pblock 49 (length 1) [ 102.042130][ T1630] EXT4-fs (loop0): Remounting filesystem read-only [ 102.051950][ T1651] loop2: detected capacity change from 0 to 256 [ 102.062185][ T1630] EXT4-fs error (device loop0): ext4_acquire_dquot:6788: comm syz.0.406: Failed to acquire dquot type 0 [ 102.093803][ T1630] EXT4-fs (loop0): Remounting filesystem read-only [ 102.101265][ T1630] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5887: Corrupt filesystem [ 102.119551][ T1630] EXT4-fs (loop0): Remounting filesystem read-only [ 102.126994][ T1630] EXT4-fs error (device loop0): ext4_evict_inode:279: inode #15: comm syz.0.406: mark_inode_dirty error [ 102.140714][ T1630] EXT4-fs (loop0): Remounting filesystem read-only [ 102.154392][ T1630] EXT4-fs warning (device loop0): ext4_evict_inode:282: couldn't mark inode dirty (err -117) [ 102.169489][ T1630] EXT4-fs (loop0): 1 orphan inode deleted [ 102.177667][ T1630] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 102.224047][ T293] EXT4-fs (loop0): unmounting filesystem. [ 102.233255][ T1630] syz.0.406 (1630) used greatest stack depth: 19048 bytes left [ 102.293445][ T1658] netlink: 88 bytes leftover after parsing attributes in process `syz.0.416'. [ 102.308127][ T1658] netlink: 48 bytes leftover after parsing attributes in process `syz.0.416'. [ 102.312575][ T1660] input input10: cannot allocate more than FF_MAX_EFFECTS effects [ 102.373728][ T1666] loop2: detected capacity change from 0 to 16 [ 102.382143][ T1666] erofs: (device loop2): mounted with root inode @ nid 36. [ 102.464730][ T1670] loop1: detected capacity change from 0 to 256 [ 102.506381][ T1673] loop0: detected capacity change from 0 to 512 [ 102.536676][ T1673] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 102.548140][ T1673] ext4 filesystem being mounted at /94/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 102.571528][ T1671] syz.2.421: attempt to access beyond end of device [ 102.571528][ T1671] loop2: rw=0, sector=34359738360, nr_sectors = 8 limit=16 [ 102.591229][ T293] EXT4-fs (loop0): unmounting filesystem. [ 102.881960][ T1689] netlink: 88 bytes leftover after parsing attributes in process `syz.4.429'. [ 102.897309][ T1689] netlink: 48 bytes leftover after parsing attributes in process `syz.4.429'. [ 103.413505][ T1701] netlink: 96 bytes leftover after parsing attributes in process `syz.1.434'. [ 103.481529][ T28] kauditd_printk_skb: 72 callbacks suppressed [ 103.481550][ T28] audit: type=1400 audit(2000000000.880:1337): avc: denied { read } for pid=1708 comm="syz.2.438" name="msr" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 103.690802][ T28] audit: type=1400 audit(2000000000.880:1338): avc: denied { open } for pid=1708 comm="syz.2.438" path="/dev/cpu/0/msr" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 104.043128][ T1720] loop4: detected capacity change from 0 to 256 [ 105.398704][ T1720] FAT-fs (loop4): Directory bread(block 64) failed [ 106.215378][ T1720] FAT-fs (loop4): Directory bread(block 65) failed [ 106.222942][ T1720] FAT-fs (loop4): Directory bread(block 66) failed [ 106.563343][ T1720] FAT-fs (loop4): Directory bread(block 67) failed [ 106.570256][ T1720] FAT-fs (loop4): Directory bread(block 68) failed [ 106.586194][ T1720] FAT-fs (loop4): Directory bread(block 69) failed [ 106.593622][ T1720] FAT-fs (loop4): Directory bread(block 70) failed [ 106.668245][ T1720] FAT-fs (loop4): Directory bread(block 71) failed [ 106.675530][ T1720] FAT-fs (loop4): Directory bread(block 72) failed [ 106.682145][ T1720] FAT-fs (loop4): Directory bread(block 73) failed [ 107.491854][ T1742] __nla_validate_parse: 2 callbacks suppressed [ 107.491875][ T1742] netlink: 88 bytes leftover after parsing attributes in process `syz.0.451'. [ 107.584720][ T1746] loop2: detected capacity change from 0 to 8192 [ 107.623362][ T28] audit: type=1400 audit(2000000006.017:1339): avc: denied { create } for pid=1752 comm="syz.1.455" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 108.421387][ T28] audit: type=1326 audit(2000000006.457:1340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1744 comm="syz.2.443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcafd985d29 code=0x7ffc0000 [ 108.448461][ T697] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 108.647976][ T28] audit: type=1326 audit(2000000006.457:1341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1744 comm="syz.2.443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcafd985d29 code=0x7ffc0000 [ 108.714972][ T28] audit: type=1326 audit(2000000006.457:1342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1744 comm="syz.2.443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcafd985d29 code=0x7ffc0000 [ 108.769232][ T1767] loop3: detected capacity change from 0 to 512 [ 108.780430][ T697] usb 5-1: Using ep0 maxpacket: 32 [ 108.790903][ T697] usb 5-1: unable to get BOS descriptor or descriptor too short [ 108.813460][ T697] usb 5-1: config 17 has an invalid interface number: 11 but max is 0 [ 108.843770][ T28] audit: type=1326 audit(2000000006.457:1343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1744 comm="syz.2.443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7fcafd985d29 code=0x7ffc0000 [ 108.871791][ T697] usb 5-1: config 17 has no interface number 0 [ 108.903141][ T697] usb 5-1: config 17 interface 11 altsetting 128 endpoint 0xA has an invalid bInterval 254, changing to 7 [ 108.926286][ T1767] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 108.948165][ T697] usb 5-1: config 17 interface 11 has no altsetting 0 [ 108.976809][ T28] audit: type=1326 audit(2000000006.457:1344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1744 comm="syz.2.443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcafd985d29 code=0x7ffc0000 [ 109.012095][ T697] usb 5-1: New USB device found, idVendor=1e2d, idProduct=005b, bcdDevice=79.14 [ 109.131586][ T697] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.150263][ T28] audit: type=1326 audit(2000000006.477:1345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1744 comm="syz.2.443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcafd985d29 code=0x7ffc0000 [ 109.187900][ T28] audit: type=1326 audit(2000000006.477:1346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1744 comm="syz.2.443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcafd985d29 code=0x7ffc0000 [ 109.197847][ T1767] EXT4-fs (loop3): orphan cleanup on readonly fs [ 109.223992][ T697] usb 5-1: Product: syz [ 109.224029][ T28] audit: type=1326 audit(2000000006.477:1347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1744 comm="syz.2.443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcafd985d29 code=0x7ffc0000 [ 109.234891][ T697] usb 5-1: Manufacturer: syz [ 109.266414][ T697] usb 5-1: SerialNumber: syz [ 109.277098][ T28] audit: type=1326 audit(2000000006.477:1348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1744 comm="syz.2.443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcafd985d29 code=0x7ffc0000 [ 109.307164][ T28] audit: type=1326 audit(2000000006.487:1349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1744 comm="syz.2.443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcafd985d29 code=0x7ffc0000 [ 109.333399][ T28] audit: type=1326 audit(2000000006.487:1350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1744 comm="syz.2.443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcafd985d29 code=0x7ffc0000 [ 109.375053][ T1767] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.457: bg 0: block 248: padding at end of block bitmap is not set [ 109.399048][ T1753] loop1: detected capacity change from 0 to 512 [ 109.425588][ T1753] EXT4-fs: Ignoring removed orlov option [ 109.436117][ T1767] EXT4-fs error (device loop3): ext4_acquire_dquot:6788: comm syz.3.457: Failed to acquire dquot type 1 [ 109.460427][ T1753] ext4: Unknown parameter 'S¶é¹ÿ/QŒx/µBl€ô' [ 109.467186][ T1767] EXT4-fs (loop3): 1 truncate cleaned up [ 109.478708][ T1767] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 109.545665][ T24] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 109.565794][ T1782] netlink: 88 bytes leftover after parsing attributes in process `syz.1.464'. [ 109.717535][ T1787] netlink: 8 bytes leftover after parsing attributes in process `syz.1.465'. [ 109.740166][ T1787] loop1: detected capacity change from 0 to 128 [ 109.751488][ T1787] EXT4-fs (loop1): Test dummy encryption mode enabled [ 109.833311][ T1787] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 109.844327][ T1787] ext4 filesystem being mounted at /96/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 109.996269][ T24] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 110.129130][ T24] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 110.139521][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.149399][ T24] usb 1-1: Product: syz [ 110.154884][ T24] usb 1-1: Manufacturer: syz [ 110.160607][ T24] usb 1-1: SerialNumber: syz [ 110.899008][ T697] usb 5-1: bad CDC descriptors [ 111.030066][ T697] usb 5-1: USB disconnect, device number 6 [ 111.128560][ T1799] loop2: detected capacity change from 0 to 256 [ 111.139060][ T1799] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 111.901522][ T1799] FAT-fs (loop2): Directory bread(block 64) failed [ 111.909475][ T1799] FAT-fs (loop2): Directory bread(block 65) failed [ 111.919635][ T1799] FAT-fs (loop2): Directory bread(block 66) failed [ 111.929515][ T1799] FAT-fs (loop2): Directory bread(block 67) failed [ 111.936650][ T1799] FAT-fs (loop2): Directory bread(block 68) failed [ 111.943594][ T1799] FAT-fs (loop2): Directory bread(block 69) failed [ 111.951322][ T1799] FAT-fs (loop2): Directory bread(block 70) failed [ 111.959316][ T1799] FAT-fs (loop2): Directory bread(block 71) failed [ 111.966808][ T1799] FAT-fs (loop2): Directory bread(block 72) failed [ 111.974779][ T1799] FAT-fs (loop2): Directory bread(block 73) failed [ 112.006273][ T292] EXT4-fs (loop1): unmounting filesystem. [ 112.097537][ T1799] netlink: 8 bytes leftover after parsing attributes in process `syz.2.467'. [ 112.107000][ T1799] netlink: 16 bytes leftover after parsing attributes in process `syz.2.467'. [ 112.379905][ T1802] input input11: cannot allocate more than FF_MAX_EFFECTS effects [ 113.047959][ T1818] loop1: detected capacity change from 0 to 128 [ 113.075710][ T1818] EXT4-fs (loop1): Test dummy encryption mode enabled [ 113.091837][ T1818] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 113.192368][ T1818] ext4 filesystem being mounted at /98/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 113.464365][ T24] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 113.535045][ T622] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 113.595012][ T697] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 113.682555][ T24] cdc_ncm 1-1:1.0 eth1: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 113.776346][ T622] usb 2-1: Using ep0 maxpacket: 32 [ 113.783198][ T28] kauditd_printk_skb: 37 callbacks suppressed [ 113.783212][ T28] audit: type=1326 audit(2000000012.177:1386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1817 comm="syz.1.475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc89118592b code=0x7ffc0000 [ 113.830070][ T622] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 113.841506][ T24] usb 1-1: USB disconnect, device number 5 [ 113.849280][ T622] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 113.864110][ T622] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 113.880539][ T24] cdc_ncm 1-1:1.0 eth1: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM (NO ZLP) [ 113.913803][ T622] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 113.933081][ T1838] input input12: cannot allocate more than FF_MAX_EFFECTS effects [ 113.942792][ T697] usb 5-1: Using ep0 maxpacket: 32 [ 114.049567][ T697] usb 5-1: unable to get BOS descriptor or descriptor too short [ 114.063740][ T622] usb 2-1: config 1 interface 1 has no altsetting 0 [ 114.145675][ T28] audit: type=1326 audit(2000000012.227:1387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1817 comm="syz.1.475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc89118592b code=0x7ffc0000 [ 114.182378][ T697] usb 5-1: config 17 has an invalid interface number: 11 but max is 0 [ 114.199486][ T622] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 114.220096][ T622] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.229858][ T697] usb 5-1: config 17 has no interface number 0 [ 114.237746][ T28] audit: type=1326 audit(2000000012.227:1388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1817 comm="syz.1.475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc89118592b code=0x7ffc0000 [ 114.252337][ T697] usb 5-1: config 17 interface 11 altsetting 128 endpoint 0xA has an invalid bInterval 254, changing to 7 [ 114.265710][ T28] audit: type=1326 audit(2000000012.227:1389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1817 comm="syz.1.475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc89118592b code=0x7ffc0000 [ 114.281990][ T622] usb 2-1: Product: syz [ 114.310991][ T28] audit: type=1326 audit(2000000012.227:1390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1817 comm="syz.1.475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc89118592b code=0x7ffc0000 [ 114.355434][ T697] usb 5-1: config 17 interface 11 has no altsetting 0 [ 114.355442][ T294] EXT4-fs (loop3): unmounting filesystem. [ 114.355520][ T622] usb 2-1: Manufacturer: syz [ 114.362861][ T28] audit: type=1326 audit(2000000012.227:1391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1817 comm="syz.1.475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc89118592b code=0x7ffc0000 [ 114.369195][ T622] usb 2-1: SerialNumber: syz [ 114.400452][ T28] audit: type=1400 audit(2000000012.387:1392): avc: denied { read } for pid=140 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 114.400531][ T28] audit: type=1326 audit(2000000012.577:1393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1817 comm="syz.1.475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc89118592b code=0x7ffc0000 [ 114.400561][ T28] audit: type=1326 audit(2000000012.577:1394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1817 comm="syz.1.475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc89118592b code=0x7ffc0000 [ 114.420046][ T524] ================================================================== [ 114.433588][ T28] audit: type=1326 audit(2000000012.577:1395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1817 comm="syz.1.475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc89118592b code=0x7ffc0000 [ 114.463740][ T524] BUG: KASAN: use-after-free in __list_del_entry_valid+0xa6/0x130 [ 114.463798][ T524] Read of size 8 at addr ffff88812fb0acf0 by task kworker/1:5/524 [ 114.463817][ T524] [ 114.463822][ T524] CPU: 1 PID: 524 Comm: kworker/1:5 Not tainted 6.1.118-syzkaller-00022-g0405a25a6ed7 #0 [ 114.572482][ T524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 114.589129][ T524] Workqueue: rcu_gp process_srcu [ 114.595109][ T524] Call Trace: [ 114.598345][ T524] [ 114.601680][ T524] dump_stack_lvl+0x151/0x1b7 [ 114.606601][ T524] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 114.612357][ T524] ? _printk+0xd1/0x111 [ 114.616662][ T524] ? __virt_addr_valid+0x242/0x2f0 [ 114.622199][ T524] print_report+0x158/0x4e0 [ 114.629199][ T524] ? __virt_addr_valid+0x242/0x2f0 [ 114.637691][ T524] ? kasan_complete_mode_report_info+0x90/0x1b0 [ 114.645036][ T524] ? __list_del_entry_valid+0xa6/0x130 [ 114.651528][ T524] kasan_report+0x13c/0x170 [ 114.656383][ T524] ? __list_del_entry_valid+0xa6/0x130 [ 114.661918][ T524] __asan_report_load8_noabort+0x14/0x20 [ 114.669128][ T524] __list_del_entry_valid+0xa6/0x130 [ 114.675021][ T524] process_one_work+0x4d7/0xcb0 [ 114.680130][ T524] worker_thread+0xa60/0x1260 [ 114.684740][ T524] kthread+0x26d/0x300 [ 114.690472][ T524] ? worker_clr_flags+0x1a0/0x1a0 [ 114.698323][ T524] ? kthread_blkcg+0xd0/0xd0 [ 114.704196][ T524] ret_from_fork+0x1f/0x30 [ 114.712719][ T524] [ 114.716936][ T524] [ 114.719202][ T524] Allocated by task 24: [ 114.724036][ T524] kasan_set_track+0x4b/0x70 [ 114.732640][ T524] kasan_save_alloc_info+0x1f/0x30 [ 114.741633][ T524] __kasan_kmalloc+0x9c/0xb0 [ 114.747742][ T524] __kmalloc_node+0xb4/0x1e0 [ 114.754429][ T524] kvmalloc_node+0x221/0x640 [ 114.760146][ T524] alloc_netdev_mqs+0x8c/0xf90 [ 114.766616][ T524] alloc_etherdev_mqs+0x36/0x40 [ 114.773488][ T524] usbnet_probe+0x213/0x28a0 [ 114.780047][ T524] usb_probe_interface+0x5b6/0xa90 [ 114.788641][ T524] really_probe+0x2b8/0x920 [ 114.794114][ T524] __driver_probe_device+0x1a0/0x310 [ 114.801681][ T524] driver_probe_device+0x54/0x3d0 [ 114.807844][ T524] __device_attach_driver+0x2e3/0x490 [ 114.814175][ T524] bus_for_each_drv+0x183/0x200 [ 114.819870][ T524] __device_attach+0x312/0x510 [ 114.825350][ T524] device_initial_probe+0x1a/0x20 [ 114.831282][ T524] bus_probe_device+0xbe/0x1e0 [ 114.836316][ T524] device_add+0xb60/0xf10 [ 114.840669][ T524] usb_set_configuration+0x190f/0x1e80 [ 114.846216][ T524] usb_generic_driver_probe+0x8b/0x150 [ 114.853210][ T524] usb_probe_device+0x144/0x260 [ 114.861021][ T524] really_probe+0x2b8/0x920 [ 114.865974][ T524] __driver_probe_device+0x1a0/0x310 [ 114.871622][ T524] driver_probe_device+0x54/0x3d0 [ 114.877997][ T524] __device_attach_driver+0x2e3/0x490 [ 114.886686][ T524] bus_for_each_drv+0x183/0x200 [ 114.891824][ T524] __device_attach+0x312/0x510 [ 114.897221][ T524] device_initial_probe+0x1a/0x20 [ 114.903253][ T524] bus_probe_device+0xbe/0x1e0 [ 114.908996][ T524] device_add+0xb60/0xf10 [ 114.913644][ T524] usb_new_device+0xf2f/0x1820 [ 114.918236][ T524] hub_event+0x2db1/0x4830 [ 114.922864][ T524] process_one_work+0x73d/0xcb0 [ 114.928197][ T524] worker_thread+0xa60/0x1260 [ 114.932945][ T524] kthread+0x26d/0x300 [ 114.937621][ T524] ret_from_fork+0x1f/0x30 [ 114.941844][ T524] [ 114.944264][ T524] Freed by task 24: [ 114.949354][ T524] kasan_set_track+0x4b/0x70 [ 114.955176][ T524] kasan_save_free_info+0x2b/0x40 [ 114.960413][ T524] ____kasan_slab_free+0x131/0x180 [ 114.965830][ T524] __kasan_slab_free+0x11/0x20 [ 114.971409][ T524] __kmem_cache_free+0x21d/0x410 [ 114.977140][ T524] kfree+0x7a/0xf0 [ 114.981892][ T524] kvfree+0x35/0x40 [ 114.986568][ T524] netdev_freemem+0x3f/0x60 [ 114.991148][ T524] netdev_release+0x7f/0xb0 [ 114.997454][ T524] device_release+0x95/0x1c0 [ 115.002132][ T524] kobject_put+0x178/0x260 [ 115.007437][ T524] put_device+0x1f/0x30 [ 115.012216][ T524] free_netdev+0x393/0x480 [ 115.019062][ T524] usbnet_disconnect+0x25f/0x3b0 [ 115.024097][ T524] usb_unbind_interface+0x1fa/0x8c0 [ 115.030108][ T524] device_release_driver_internal+0x53e/0x870 [ 115.036978][ T524] device_release_driver+0x19/0x20 [ 115.043324][ T524] bus_remove_device+0x2fa/0x360 [ 115.049033][ T524] device_del+0x663/0xe90 [ 115.053550][ T524] usb_disable_device+0x380/0x720 [ 115.058869][ T524] usb_disconnect+0x32a/0x890 [ 115.063912][ T524] hub_event+0x1ed8/0x4830 [ 115.069868][ T524] process_one_work+0x73d/0xcb0 [ 115.074814][ T524] worker_thread+0xd71/0x1260 [ 115.080034][ T524] kthread+0x26d/0x300 [ 115.084240][ T524] ret_from_fork+0x1f/0x30 [ 115.088962][ T524] [ 115.091255][ T524] Last potentially related work creation: [ 115.098214][ T524] kasan_save_stack+0x3b/0x60 [ 115.102968][ T524] __kasan_record_aux_stack+0xb4/0xc0 [ 115.108508][ T524] kasan_record_aux_stack_noalloc+0xb/0x10 [ 115.115419][ T524] insert_work+0x56/0x310 [ 115.120732][ T524] __queue_work+0x9b6/0xd70 [ 115.128184][ T524] queue_work_on+0x105/0x170 [ 115.134942][ T524] usbnet_link_change+0x182/0x1a0 [ 115.141649][ T524] usbnet_probe+0x1e1e/0x28a0 [ 115.149087][ T524] usb_probe_interface+0x5b6/0xa90 [ 115.154172][ T524] really_probe+0x2b8/0x920 [ 115.159074][ T524] __driver_probe_device+0x1a0/0x310 [ 115.164799][ T524] driver_probe_device+0x54/0x3d0 [ 115.171012][ T524] __device_attach_driver+0x2e3/0x490 [ 115.177449][ T524] bus_for_each_drv+0x183/0x200 [ 115.183706][ T524] __device_attach+0x312/0x510 [ 115.188687][ T524] device_initial_probe+0x1a/0x20 [ 115.196935][ T524] bus_probe_device+0xbe/0x1e0 [ 115.203979][ T524] device_add+0xb60/0xf10 [ 115.209813][ T524] usb_set_configuration+0x190f/0x1e80 [ 115.215203][ T524] usb_generic_driver_probe+0x8b/0x150 [ 115.221004][ T524] usb_probe_device+0x144/0x260 [ 115.226046][ T524] really_probe+0x2b8/0x920 [ 115.231532][ T524] __driver_probe_device+0x1a0/0x310 [ 115.236973][ T524] driver_probe_device+0x54/0x3d0 [ 115.242185][ T524] __device_attach_driver+0x2e3/0x490 [ 115.247868][ T524] bus_for_each_drv+0x183/0x200 [ 115.254054][ T524] __device_attach+0x312/0x510 [ 115.259374][ T524] device_initial_probe+0x1a/0x20 [ 115.265449][ T524] bus_probe_device+0xbe/0x1e0 [ 115.273040][ T524] device_add+0xb60/0xf10 [ 115.278616][ T524] usb_new_device+0xf2f/0x1820 [ 115.283729][ T524] hub_event+0x2db1/0x4830 [ 115.289125][ T524] process_one_work+0x73d/0xcb0 [ 115.294215][ T524] worker_thread+0xa60/0x1260 [ 115.299107][ T524] kthread+0x26d/0x300 [ 115.306716][ T524] ret_from_fork+0x1f/0x30 [ 115.312682][ T524] [ 115.315032][ T524] The buggy address belongs to the object at ffff88812fb0a000 [ 115.315032][ T524] which belongs to the cache kmalloc-4k of size 4096 [ 115.336440][ T524] The buggy address is located 3312 bytes inside of [ 115.336440][ T524] 4096-byte region [ffff88812fb0a000, ffff88812fb0b000) [ 115.356989][ T524] [ 115.359547][ T524] The buggy address belongs to the physical page: [ 115.370679][ T524] page:ffffea0004bec200 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x12fb08 [ 115.391739][ T524] head:ffffea0004bec200 order:3 compound_mapcount:0 compound_pincount:0 [ 115.403408][ T524] flags: 0x4000000000010200(slab|head|zone=1) [ 115.416105][ T524] raw: 4000000000010200 dead000000000100 dead000000000122 ffff888100043380 [ 115.427279][ T524] raw: 0000000000000000 0000000000040004 00000001ffffffff 0000000000000000 [ 115.441550][ T524] page dumped because: kasan: bad access detected [ 115.450948][ T524] page_owner tracks the page as allocated [ 115.459394][ T524] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 291, tgid 291 (syz-executor), ts 24381704919, free_ts 0 [ 115.495106][ T524] post_alloc_hook+0x213/0x220 [ 115.501398][ T524] prep_new_page+0x1b/0x110 [ 115.509878][ T524] get_page_from_freelist+0x2f41/0x2fc0 [ 115.522854][ T524] __alloc_pages+0x234/0x610 [ 115.533989][ T524] alloc_slab_page+0x6c/0xf0 [ 115.538871][ T524] new_slab+0x90/0x3e0 [ 115.543160][ T524] ___slab_alloc+0x6f9/0xb80 [ 115.554473][ T524] __slab_alloc+0x5d/0xa0 [ 115.562904][ T524] __kmem_cache_alloc_node+0x207/0x2a0 [ 115.575514][ T524] __kmalloc_node_track_caller+0xa2/0x1e0 [ 115.586473][ T524] kmemdup+0x29/0x60 [ 115.595915][ T524] __addrconf_sysctl_register+0xad/0x3e0 [ 115.603127][ T524] addrconf_sysctl_register+0x141/0x1a0 [ 115.614289][ T524] ipv6_add_dev+0xbd7/0x11a0 [ 115.619477][ T524] addrconf_notify+0x6d2/0xe10 [ 115.628853][ T524] raw_notifier_call_chain+0x8c/0xf0 [ 115.639522][ T524] page_owner free stack trace missing [ 115.650354][ T524] [ 115.655568][ T524] Memory state around the buggy address: [ 115.665254][ T524] ffff88812fb0ab80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 115.681943][ T524] ffff88812fb0ac00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 115.701385][ T524] >ffff88812fb0ac80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 115.717373][ T524] ^ [ 115.728831][ T524] ffff88812fb0ad00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 115.742457][ T524] ffff88812fb0ad80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 115.757541][ T524] ================================================================== [ 115.768479][ T524] Disabling lock debugging due to kernel taint [ 115.843601][ T697] usb 5-1: New USB device found, idVendor=1e2d, idProduct=005b, bcdDevice=79.14 [ 115.874214][ T697] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.883160][ T697] usb 5-1: Product: syz [ 115.889024][ T697] usb 5-1: Manufacturer: syz [ 115.897187][ T697] usb 5-1: SerialNumber: syz [ 116.047564][ T622] usb 2-1: 2:1 : no or invalid class specific endpoint descriptor [ 116.059771][ T622] usb 2-1: 2:1 : no or invalid class specific endpoint descriptor [ 116.061612][ T292] EXT4-fs (loop1): unmounting filesystem. [ 116.088060][ T622] usb 2-1: USB disconnect, device number 5 [ 116.135056][ T697] usb 5-1: bad CDC descriptors [ 116.152161][ T697] usb 5-1: USB disconnect, device number 7