last executing test programs: 34.540754112s ago: executing program 32 (id=37): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000100000000000000010200850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x45) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x101) close(r1) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x15, 0x10, 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) close(0x3) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 32.728053958s ago: executing program 1 (id=78): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xa, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000500)='hrtimer_start\x00', r1}, 0x10) timer_create(0x0, 0x0, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) 32.69399906s ago: executing program 1 (id=80): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) recvmmsg(r1, &(0x7f0000000600)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000004780)=""/198, 0xc6}], 0x1}, 0x1}], 0x1, 0x10001, 0x0) syz_emit_ethernet(0x32, &(0x7f0000001200)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x10, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0xfffd, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x3, 0xc6, 0x100, @val=0x80}}}}}}}, 0x0) 32.570937567s ago: executing program 1 (id=86): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r1}, 0x10) r2 = syz_clone(0x26020000, 0x0, 0x0, 0x0, 0x0, 0x0) rt_sigqueueinfo(r2, 0x9, &(0x7f00000007c0)={0x0, 0x0, 0xffffffc0}) 32.488941122s ago: executing program 1 (id=90): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x20080, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000001340)={0x0, 0x0, 0x2, r2, 0x3}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x3, 0x0, 0x2, r2, 0xb}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000100)={0x203, 0x0, 0x1, r2, 0xa}) 32.378264489s ago: executing program 1 (id=97): mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)={[{@subsystem='cpuset'}, {@subsystem='memory'}, {@subsystem='cpuacct'}]}) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000140), 0x1e) syz_clone(0x200, 0x0, 0x0, 0x0, 0x0, 0x0) 32.323417392s ago: executing program 1 (id=100): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x10010, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000600)='sys_enter\x00', r1}, 0x10) exit(0x1) 32.251995676s ago: executing program 3 (id=103): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x7, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0xf, 0x0, 0x0, 0x0, 0x0, 0xc00d, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 32.085807266s ago: executing program 3 (id=110): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="0500000004000000080000000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xb1}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x2a}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) 32.061625517s ago: executing program 3 (id=111): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x3303e648b92827}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r2}, 0x18) listen(r0, 0x3) 32.01190467s ago: executing program 3 (id=113): mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x80) mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x18) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 31.975272242s ago: executing program 3 (id=115): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r2) sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000ecffffffffff2000000005002000000000000c001f0070687930"], 0x28}}, 0x0) 31.816794532s ago: executing program 3 (id=119): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setitimer(0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x2710}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf64(r0, &(0x7f0000000200)=ANY=[], 0x40) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) setitimer(0x1, &(0x7f0000000000), 0x0) 31.775934604s ago: executing program 33 (id=119): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setitimer(0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x2710}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf64(r0, &(0x7f0000000200)=ANY=[], 0x40) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) setitimer(0x1, &(0x7f0000000000), 0x0) 27.483646306s ago: executing program 5 (id=220): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000180)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) lseek(r0, 0x101, 0x0) getdents(r0, &(0x7f0000001fc0)=""/4096, 0x1000) 27.446794968s ago: executing program 5 (id=222): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) 26.438662967s ago: executing program 5 (id=252): ioperm(0x8, 0x3, 0x6) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = epoll_create(0x5) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000100)={0x10000011}) epoll_pwait(r2, &(0x7f00000001c0)=[{}], 0x1, 0x5524, 0x0, 0x0) write$P9_RVERSION(r1, 0x0, 0x13) 26.366867522s ago: executing program 5 (id=256): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x3008042, &(0x7f00000002c0)={[{@resuid}, {@noload}, {@resuid}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80000}}, {@usrquota}, {@data_err_abort}, {@errors_remount}]}, 0x1, 0x5e6, &(0x7f0000001180)="$eJzs3c1vFVUbAPBnbj9oKe/bQoyKC2liDCRKSwsYYlzA1pAGP+LGjZUWRAo0tEaLJpQENybGjTEmrlyI/4US2bLSlQs3rgwJUUPixsRr5nam9LZzW3ppO5X5/ZLLnTnnTs8Zbp+eM+eeMzeAyhpM/6lF7I2I6SSiP5lfzOuMLHNw4XX3/vzodPpIol5/7fckkiwtf32SPfdlB/dExI8/JLGnY2W5M3NXzo9PTU1ezvaHZy9MD8/MXTl47sL42cmzkxdHXxg9dvTI0WMjh9o6r6sFaSevv/t+/ydjb37z1d/JyLe/jCVxPF7OXrj0PDbKYAw2/k+SlVl9xza6sJJ0ZL8nS9/ipLPECrEu+fvXFRFPRH90xP03rz8+fqXUygGbqp5E1IGKSsQ/VFTeD8iv7ZdfB9dK6ZUAW+HuiYUBgJXx37kwNhg9jbGBnfeSWDqsk0REeyNzzXZFxO1bY9fP3Bq7Hps0DgcUm78WEU8WxX/SiP+B6ImBRvzXmuI/7RecSp//qjfSX22z/OVDxeIfts5C/PesGv/RIv7fyp7T9LfbLH/w/uY7vU3x39vuKQEAAAAAAEBl3TwREc8Xff5fW5z/EwXzf/oi4vgGlD+4bH/l5/+1OxtQDFDg7omIlwrn/9by2b8DHdnW/xrzAbqSM+emJg9FxP8j4kB07Uj3RxZ/Yn3F0tuDn+75slX5g9n8v/yRln87mwuY1eNO547mYybGZ8c35OSh4u5ei3iqcP5vstj+JwXtf/r3YPoBy9jz7I1TrfLWjn9gs9S/jthf2P7fv2tFsvr9OYYb/YHhvFew0tMffvZdq/LbjX+3mICHl7b/O1eP/4Fk6f16ZtZfxuG5znqrvHb7/93J641bznRnaR+Mz85eHonoTk52pKlN6aPrrzM8ivJ4yOMljf8Dz6w+/lfU/++NiPllPzv5o3lNce7xf/p+bVUf/X8oTxr/E+tq/9e/MXpj4PtW5T9Y+3+k0dYfyFKM/8GCL/Iw7W5OLwjHzqKsra4vAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwKahGxK5La0OJ2rTY0FNEXEY/FztrUpZnZ585ceu/iRJrX+P7/Wv5Nv/0L+0n+/f8DS/ZHl+0fjojdEfF5R29jf+j0pamJsk8eAAAAAAAAAAAAAAAAAAAAtom+Fuv/U791lF07YNN1ll0BoDQF8f9TGfUAtp72H6pL/EN1iX+oLvEP1SX+obrEP1SX+IfqEv8AAAAAAPBI2b3v5s9JRMy/2Nt4pLqzvK5SawZstlrZFQBK4xY/UF2m/kB1ucYHkjXye1oetNaRq5k+/RAHAwAAAAAAAAAAAEDl7N9r/T9UlfX/UF35+n/rgKF68rjfV3I9gK3nGh+INVbyF67/X/MoAAAAAAAAAAAAAGAjzcxdOT8+NTV52cYb26MaW7lRr9evpr8F26U+//GNfCr8dqnPso18rd+DHVXe3yQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKDZvwEAAP//RYcoPA==") mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) chroot(&(0x7f0000000040)='./file0/../file0/../file0/../file0\x00') r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000080)='./file0\x00') 26.149186154s ago: executing program 5 (id=261): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x181040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000740)=ANY=[@ANYBLOB="010000000000000071000040af6f9f92a80c37"]) 26.003347633s ago: executing program 5 (id=266): syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f00000000c0)='./file0\x00', 0x40, &(0x7f0000000780)=ANY=[], 0x1, 0x1f0, &(0x7f0000000440)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r0, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0x0) 25.917592948s ago: executing program 34 (id=266): syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f00000000c0)='./file0\x00', 0x40, &(0x7f0000000780)=ANY=[], 0x1, 0x1f0, &(0x7f0000000440)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r0, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0x0) 17.286501495s ago: executing program 35 (id=100): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x10010, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000600)='sys_enter\x00', r1}, 0x10) exit(0x1) 16.620770434s ago: executing program 2 (id=504): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x70}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='virtio_transport_alloc_pkt\x00', r0}, 0x10) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2711}, 0x10) 16.580162276s ago: executing program 2 (id=505): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000b80)={0x0, 0x0, @pic={0xc7, 0x7f, 0x0, 0x1, 0x4, 0x0, 0x5, 0x81, 0x2, 0xe, 0xa, 0x6, 0x8, 0x40, 0x8, 0xb}}) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000200)={0x9, 0x8}) 16.469620072s ago: executing program 2 (id=506): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r1, 0x0, 0x32, &(0x7f00000004c0)=0xd, 0x4) 16.422082746s ago: executing program 2 (id=507): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200010, &(0x7f0000000080), 0xfe, 0x55d, &(0x7f0000000980)="$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") creat(&(0x7f00000000c0)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x201000, 0x0) r0 = open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x0) preadv2(r0, &(0x7f00000000c0)=[{&(0x7f0000002200)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x8) 16.286242334s ago: executing program 2 (id=510): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) setresuid(0xee00, 0xee00, 0x0) 15.488942431s ago: executing program 2 (id=517): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 15.417747075s ago: executing program 36 (id=517): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 6.184729137s ago: executing program 8 (id=757): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r1}, 0x10) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, 0x108) 6.169151758s ago: executing program 8 (id=758): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, 0x0, &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x10) munlockall() 6.152791298s ago: executing program 8 (id=759): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="19000000040000000800000003"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x2, 0x4, 0x4, 0x143, 0x1014, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) 6.12650884s ago: executing program 8 (id=760): syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000005700)=ANY=[@ANYBLOB="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"], 0x1, 0x550f, &(0x7f00000001c0)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000380)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000002240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000440)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) mount$9p_unix(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x21, 0x0) quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000080)='./file1\x00') 5.824893228s ago: executing program 8 (id=761): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000008c0)='sys_enter\x00', r1}, 0x10) setpriority(0x0, 0x0, 0x3) 5.464893729s ago: executing program 8 (id=765): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r3}, 0x10) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x2c}}, 0x0) 5.464626989s ago: executing program 37 (id=765): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r3}, 0x10) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x2c}}, 0x0) 3.454671787s ago: executing program 0 (id=852): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0xda, 0xa1, 0x8c, 0x40, 0x6189, 0x182d, 0x173, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xef, 0x0, 0x0, 0xca, 0xea, 0x76}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000005c0)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x40, 0x17, 0x6, @link_local}, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.21940067s ago: executing program 9 (id=863): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000440)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r0, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/19, 0x13}}], 0x1, 0x32103, 0x0) 1.922201207s ago: executing program 4 (id=864): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0xfd, 0x7fffffff}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x5c) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000e280)={0x2020}, 0x2020) 1.905759548s ago: executing program 4 (id=865): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r1}, 0x18) wait4(0x0, 0x0, 0x40000000, 0x0) 1.900840799s ago: executing program 9 (id=866): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000e4000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) 1.820187383s ago: executing program 9 (id=867): r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r0) open(&(0x7f0000000180)='./cgroup\x00', 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) add_key(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) pivot_root(&(0x7f0000000100)='./cgroup\x00', 0x0) 1.70410808s ago: executing program 4 (id=870): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f00000012c0)='sys_enter\x00', r1}, 0x10) r2 = epoll_create1(0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)={0xa000000d}) 1.637561524s ago: executing program 4 (id=871): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000940)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_kthread_work_queue_work\x00', r2}, 0x10) socketpair(0x11, 0xa, 0x0, &(0x7f0000001080)) 1.589234807s ago: executing program 7 (id=872): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000200)={0x2, 0x3, 0x0, 0x3, 0xb, 0x0, 0x0, 0x0, [@sadb_key={0x1, 0x9}, @sadb_address={0x3, 0x6, 0x6c}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x6, 0xb}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @remote}}]}, 0x58}, 0x1, 0x7}, 0x0) 1.567709978s ago: executing program 4 (id=873): creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000040)='./bus\x00', 0x60142, 0x0) fallocate(r0, 0x10, 0x0, 0x2000) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) 1.553010709s ago: executing program 4 (id=874): r0 = syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000140)={{0x12, 0x1, 0x150, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0xa2}, {0xd, 0x24, 0xf, 0x1, 0xfffffff9, 0xfffd, 0x8}, {0x6, 0x24, 0x1a, 0x0, 0x8}}, {{0x9, 0x5, 0x81, 0x3, 0x400}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x10}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x0, 0x7, 0x4}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000500)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x20, 0x80, 0x1c, {0xfff, 0x0, 0x4100, 0x9, 0x3, 0x0, 0x7df, 0x3ff, 0x3, 0x2, 0x4, 0x6}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000200)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 1.544742849s ago: executing program 7 (id=875): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$inet_udplite(0x2, 0x2, 0x88) fgetxattr(r2, &(0x7f0000000540)=@known='trusted.overlay.impure\x00', 0x0, 0x0) 1.116062125s ago: executing program 0 (id=876): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc90}, [@printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r0}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000040)={0x0, 0x0}) 1.115589254s ago: executing program 7 (id=886): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000010340)='io_uring_create\x00', r1}, 0x18) io_uring_setup(0x2c4d, &(0x7f0000000380)) 1.101207145s ago: executing program 7 (id=877): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = eventfd2(0x0, 0x0) io_setup(0x6, &(0x7f0000000140)=0x0) io_submit(r2, 0x2, &(0x7f0000000180)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0xfffd, r0, 0x0, 0x0, 0x0, 0x0, 0x3, r1}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) io_cancel(r2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x5, 0xffffffffffffffff, 0x0, 0x0, 0x7, 0x0, 0x3}, 0x0) 1.049219768s ago: executing program 0 (id=878): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xf, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x2d) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 1.003563511s ago: executing program 7 (id=879): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000100000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000200)='mm_page_alloc\x00', r1}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000740)={{r0}, &(0x7f00000006c0), &(0x7f0000000700)='%pI4 \x00'}, 0x20) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) 984.992972ms ago: executing program 7 (id=880): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "6a10ff", 0x30, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @dev, @empty, [{0x4, 0x1, "1d6ace8f8ca9"}]}}}}}}, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000100b060a4300000000000109022400010000500009040002010300000009210000000122f80409058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f00000001c0)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) 970.992663ms ago: executing program 9 (id=881): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) r2 = epoll_create1(0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000020c0), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000001040)) write$UHID_INPUT(r1, &(0x7f0000001040)={0xa, {"a2e3ad08ed6b52f99cfbf4c087f71e9b3d0963ff7fc6e5539b9b3b0a8b9b441b4552101b080d29558f0e1ac6e7049b3468959b189a242a9b4bf3988f7ef319520700ffe8d178708c523c921b1b23380a169b63d336cd3b78130daa61d8e81aea882f5802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f309f4cff7738596ecae8707ce065cd5b91cd0ae193973735b36d5b1b63e91c00305d3f46635eb016d5b1dda98e2d749be7bd1d020000000000000075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecd03aded6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801000000005b6bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27afc953854a642c57519544ae15a7e454dea05918b412435111c8f11baa500a3621c56cea8d20ff911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269caf12c31357c8219793e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a687974e7b4ab01b7f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a60560a22f1fca567e65d5e880572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5120000008213b704c7fb082ff27590678ef9f190bae979babc7041d860420c5664ba7921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da3710ac000000001a527777a5371f87d0d4aa202fd28f28381aab144a5d429a04a689b83c7068ae949ef06e288e810bac9c76600025e19c907f8ea2e2f05dd3318271a1f5f8528f227e79c1388dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eefc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f103000000416d59fdee5325928974d12dad99dac44c3f0008047096a44060bebc2420aed92fa9b6578b4779415d97b9a6d601005c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac292d9e53803ed000000009737d214060005ea6f1783e287b3bee96e3a7288afe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f48fe4eae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf02b98a269b891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efedfd71af9444e197f47e866101496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b09114edb8e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615f7084a607a7eceb6243378e0610060f02cca4051c2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c4e15a7b6eb65ca8104e1b4da1fbb67ab2fc043aead87c32ab875ee7c2e7b7019c902cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe529003d1802d5676d95f160ec97b1ad948741b2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd73643de50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c1023bf70cc77737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73c497579773767075428067e7f16f4dde374f8211fef42cb468e623daf60b3569d462f4f19eacdb3ed70eeebb4483f070077d443e8b40426db6fe29068c0ca3d3414442e863a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae44369ddb4581c55925d0f6f1ba471eba281f259152f85e654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b405177548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd84e935e00785ec27e923911fab964c271556527697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9ddbfb96d6144345f48843dd014e5c5ad8fe995754bd9cf32fce1e7027132f2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5336651b1b9bd522d60399473296b831dbd933d93994ba30b4279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee29165895ac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463181f4b87c10772d2b13f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76d57227edff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f84fad6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b30f0b932a4d02da711b757fe43c06d21e759595e4e98b27faea8aa12bc8040000000000000033eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d0000010000000000fcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cb0b3e35cb80dd349e891aef595dc4d080e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c60edddab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec014508e5247d33ae6c962d35603ff8454c16f8342856935125102bb784ed704887071f3d998efdd9923c954ab6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6ff7ffb1d62458d0741a12830052fcc460db043afe525629b40d7cee65802cb5e930ed624806c43a006dc9336d07c2b8081c188d26558f48261f7897084c2a1a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da3932ba5c04c24a560ad80a3ce654578376e599aff3565b1d531f30912b99e6619ebe93cc0b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c0ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e6491953264c7b34252600c9654e502dcea39cb0800eb69992e234b4ca7db2f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc640df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c6000064b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ff1aa7082ead01a9b03c37b0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058093fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) 939.472415ms ago: executing program 9 (id=882): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x16, 0x0, 0x8400, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000380)={r0, 0x0, 0x20000000}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_DELETE_ELEM(0x15, &(0x7f0000000400)={r0, 0x0, 0x20000000}, 0x20) 908.903947ms ago: executing program 9 (id=883): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.avg_queue_size\x00', 0x26e1, 0x0) close(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000080)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r2, 0x4b45, 0x1) 824.979362ms ago: executing program 0 (id=887): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000feffffff00000000004000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000006000000850000002300000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r0}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8937, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) 802.983243ms ago: executing program 0 (id=889): r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000180)=0x6, 0x4) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000000c0)=@nat={'nat\x00', 0x19, 0x4, 0x90, [0x20000700, 0x0, 0x0, 0x20000af4, 0x20000b24], 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="00000000000000000000000000100000000000000000000000000000000000000000000000000000ffffffff00000000000000c361c43f5a2e8ab55b6e0000000000000000000000000000000000000002000000feffffff000000000000000000000000af133ffa5e"]}, 0xe1) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2e, &(0x7f0000000500)={@broadcast, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) 736.017057ms ago: executing program 0 (id=891): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000407d1e9c31000000000001090224000100000000090400000103001000092100000001"], 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3000000013000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="000000000000000010000c800c0022"], 0x30}}, 0x0) 325.033171ms ago: executing program 6 (id=896): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000c80)='kfree\x00', r1}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)=r1}, 0x20) r2 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) writev(r2, &(0x7f0000004300)=[{&(0x7f00000031c0)="ef25f8693a925a844006be6bc22ec29b6df45a9c32436e7553e217f33cc27d1cb25ae04e8ee386486563b7f4107d58660fce5ba4a647d481071d2a3fb418d0365b4eb7a2a006", 0x46}], 0x1) 309.720922ms ago: executing program 6 (id=897): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, &(0x7f00000002c0)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) process_mrelease(0xffffffffffffffff, 0x1000000) 286.231053ms ago: executing program 6 (id=898): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) 235.942406ms ago: executing program 6 (id=899): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004", @ANYBLOB], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x2d) bpf$MAP_CREATE(0x1400000000000000, &(0x7f0000000100)=@base={0xf, 0x4, 0x4, 0x10004, 0x0, 0xffffffffffffffff, 0x2000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1200"], 0x48) 43.987207ms ago: executing program 6 (id=900): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000cc0)=ANY=[@ANYBLOB="09000000070000000300000048"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{r0}, &(0x7f0000000500), &(0x7f00000006c0)}, 0x20) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) mount$tmpfs(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000180), 0x8004, &(0x7f0000000480)={[{@inode32}]}) 0s ago: executing program 6 (id=901): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') lseek(r2, 0xcbe, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.159' (ED25519) to the list of known hosts. [ 21.379375][ T28] audit: type=1400 audit(1739979212.324:66): avc: denied { mounton } for pid=281 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 21.380761][ T281] cgroup: Unknown subsys name 'net' [ 21.401828][ T28] audit: type=1400 audit(1739979212.324:67): avc: denied { mount } for pid=281 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.428743][ T28] audit: type=1400 audit(1739979212.354:68): avc: denied { unmount } for pid=281 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.428939][ T281] cgroup: Unknown subsys name 'devices' [ 21.570063][ T281] cgroup: Unknown subsys name 'hugetlb' [ 21.575467][ T281] cgroup: Unknown subsys name 'rlimit' [ 21.681684][ T28] audit: type=1400 audit(1739979212.624:69): avc: denied { setattr } for pid=281 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 21.704654][ T28] audit: type=1400 audit(1739979212.624:70): avc: denied { mounton } for pid=281 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 21.724631][ T284] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 21.729613][ T28] audit: type=1400 audit(1739979212.624:71): avc: denied { mount } for pid=281 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 21.760477][ T28] audit: type=1400 audit(1739979212.674:72): avc: denied { relabelto } for pid=284 comm="mkswap" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.785630][ T28] audit: type=1400 audit(1739979212.674:73): avc: denied { write } for pid=284 comm="mkswap" path="/root/swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.806167][ T281] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 21.811140][ T28] audit: type=1400 audit(1739979212.734:74): avc: denied { read } for pid=281 comm="syz-executor" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.844801][ T28] audit: type=1400 audit(1739979212.734:75): avc: denied { open } for pid=281 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.426797][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.433783][ T291] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.441083][ T291] device bridge_slave_0 entered promiscuous mode [ 22.449275][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.456113][ T291] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.463634][ T291] device bridge_slave_1 entered promiscuous mode [ 22.559256][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.566108][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.573431][ T293] device bridge_slave_0 entered promiscuous mode [ 22.585002][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.592020][ T292] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.599152][ T292] device bridge_slave_0 entered promiscuous mode [ 22.607375][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.614324][ T292] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.621552][ T292] device bridge_slave_1 entered promiscuous mode [ 22.627967][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.634799][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.642117][ T293] device bridge_slave_1 entered promiscuous mode [ 22.650088][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.656927][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.664238][ T294] device bridge_slave_0 entered promiscuous mode [ 22.671140][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.678032][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.685171][ T294] device bridge_slave_1 entered promiscuous mode [ 22.719337][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.726183][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.733490][ T295] device bridge_slave_0 entered promiscuous mode [ 22.756593][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.763489][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.770711][ T295] device bridge_slave_1 entered promiscuous mode [ 22.896295][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.903166][ T291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.910304][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.917145][ T291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.985514][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.992387][ T295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.999496][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.006257][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.045757][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.052640][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.059759][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.066516][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.077460][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.084321][ T293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.091428][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.098212][ T293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.106530][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.113403][ T292] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.120501][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.127259][ T292] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.137593][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.144698][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.151828][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.158921][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.165900][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.173168][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.180158][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.187093][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.194074][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.201047][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.208852][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 23.216054][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.243944][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.252072][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.259006][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.266137][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.274232][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.281104][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.288482][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.296373][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.332319][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.339878][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.348888][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.355744][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.373909][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.381403][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.398595][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.406744][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.414981][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.421843][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.430256][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.438378][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.445207][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.471318][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 23.479669][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.488148][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.495006][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.502342][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 23.510725][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.519189][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 23.527420][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.535556][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.542405][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.549766][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 23.558014][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.565985][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.572949][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.580169][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 23.588207][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.596014][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 23.604234][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.612261][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.619110][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.626371][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 23.634312][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.642196][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 23.650214][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.658058][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 23.666167][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.674307][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.681155][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.688534][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 23.696392][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.717666][ T294] device veth0_vlan entered promiscuous mode [ 23.728195][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.736740][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.744916][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.752277][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.759685][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 23.767429][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.775550][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 23.783809][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 23.791728][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.799615][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 23.807458][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.815572][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.823088][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.830615][ T291] device veth0_vlan entered promiscuous mode [ 23.853364][ T294] device veth1_macvtap entered promiscuous mode [ 23.860389][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.868543][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 23.876633][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.884785][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 23.893197][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.901184][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 23.909599][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.926843][ T292] device veth0_vlan entered promiscuous mode [ 23.935484][ T295] device veth0_vlan entered promiscuous mode [ 23.942398][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 23.950824][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.959116][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 23.966780][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.974993][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 23.982914][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.990988][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.998371][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.005579][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.013067][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.023857][ T291] device veth1_macvtap entered promiscuous mode [ 24.033615][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.041787][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.049919][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 24.063656][ T293] device veth0_vlan entered promiscuous mode [ 24.073672][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.081888][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.090032][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.098381][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.106480][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.114782][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.122987][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.130800][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.138841][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.146098][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.160296][ T292] device veth1_macvtap entered promiscuous mode [ 24.173581][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.181974][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.190691][ T294] request_module fs-gadgetfs succeeded, but still no fs? [ 24.190772][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.222293][ T295] device veth1_macvtap entered promiscuous mode [ 24.235655][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.244516][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.254062][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.262473][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.271093][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.279564][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.288149][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.296404][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.304533][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.310285][ T322] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 24.332401][ T293] device veth1_macvtap entered promiscuous mode [ 24.345720][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.354194][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.362453][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.371240][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.395764][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.406741][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.449599][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.458307][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.458605][ T327] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1'. [ 25.001059][ T386] Driver unsupported XDP return value 0 on prog (id 18) dev N/A, expect packet loss! [ 25.119561][ T291] syz-executor (291) used greatest stack depth: 21040 bytes left [ 25.238110][ T39] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 25.261561][ T400] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.268770][ T400] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.275977][ T400] device bridge_slave_0 entered promiscuous mode [ 25.285151][ T400] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.292096][ T400] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.299340][ T400] device bridge_slave_1 entered promiscuous mode [ 25.357579][ T400] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.364441][ T400] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.371552][ T400] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.378320][ T400] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.401931][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 25.409710][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.416826][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.431872][ T39] usb 3-1: Using ep0 maxpacket: 32 [ 25.437462][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 25.438464][ T39] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 25.445667][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.456407][ T39] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 25.462799][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.472637][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 25.479861][ T39] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 25.496368][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.496629][ T39] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 25.503227][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.520844][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.521636][ T39] usb 3-1: config 0 descriptor?? [ 25.534700][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 25.542900][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.573981][ T362] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.582516][ T362] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.592292][ T362] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.600651][ T362] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.609548][ T362] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.622633][ T362] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.633079][ T400] device veth0_vlan entered promiscuous mode [ 25.646191][ T410] loop1: detected capacity change from 0 to 2048 [ 25.652912][ T400] device veth1_macvtap entered promiscuous mode [ 25.660146][ T408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.669786][ T408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.672483][ T410] Alternate GPT is invalid, using primary GPT. [ 25.678299][ T408] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 25.684085][ T410] loop1: p2 p3 p7 [ 25.717904][ T362] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.733459][ T362] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.771060][ T362] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.773942][ T405] udevd[405]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 25.791416][ T411] udevd[411]: inotify_add_watch(7, /dev/loop1p7, 10) failed: No such file or directory [ 25.793121][ T412] udevd[412]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 25.807635][ T362] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.889289][ T10] device bridge_slave_1 left promiscuous mode [ 25.896413][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.906699][ T10] device bridge_slave_0 left promiscuous mode [ 25.915253][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.923916][ T10] device veth1_macvtap left promiscuous mode [ 25.930170][ T10] device veth0_vlan left promiscuous mode [ 25.938948][ T39] koneplus 0003:1E7D:2D51.0001: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.2-1/input0 [ 26.094375][ T425] loop4: detected capacity change from 0 to 40427 [ 26.101719][ T425] F2FS-fs (loop4): fault_injection options not supported [ 26.109570][ T425] F2FS-fs (loop4): invalid crc value [ 26.116133][ T425] F2FS-fs (loop4): Found nat_bits in checkpoint [ 26.207532][ T425] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 26.362808][ T293] syz-executor: attempt to access beyond end of device [ 26.362808][ T293] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 26.379597][ T323] usb 3-1: USB disconnect, device number 2 [ 26.411496][ T28] kauditd_printk_skb: 67 callbacks suppressed [ 26.411512][ T28] audit: type=1400 audit(1739979217.354:143): avc: denied { load_policy } for pid=448 comm="syz.5.54" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 26.411552][ T449] SELinux: policydb version 0 does not match my version range 15-33 [ 26.445411][ T449] SELinux: failed to load policy [ 26.559198][ T28] audit: type=1400 audit(1739979217.504:144): avc: denied { create } for pid=454 comm="syz.4.57" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 26.590659][ T28] audit: type=1400 audit(1739979217.524:145): avc: denied { create } for pid=456 comm="syz.5.56" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 26.659237][ T28] audit: type=1400 audit(1739979217.604:146): avc: denied { connect } for pid=464 comm="syz.4.61" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 26.711262][ T28] audit: type=1400 audit(1739979217.654:147): avc: denied { ioctl } for pid=471 comm="syz.1.64" path="socket:[16126]" dev="sockfs" ino=16126 ioctlcmd=0x48c8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 26.752270][ T28] audit: type=1400 audit(1739979217.694:148): avc: denied { mount } for pid=477 comm="syz.4.67" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 26.774610][ T28] audit: type=1400 audit(1739979217.724:149): avc: denied { unmount } for pid=293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 26.826190][ T28] audit: type=1400 audit(1739979217.764:150): avc: denied { create } for pid=485 comm="syz.1.69" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 26.866399][ T28] audit: type=1400 audit(1739979217.794:151): avc: denied { setopt } for pid=485 comm="syz.1.69" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 26.894464][ T28] audit: type=1400 audit(1739979217.794:152): avc: denied { bind } for pid=485 comm="syz.1.69" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 27.051312][ T505] netlink: 96 bytes leftover after parsing attributes in process `syz.5.79'. [ 27.062246][ T509] capability: warning: `syz.3.81' uses deprecated v2 capabilities in a way that may be insecure [ 27.153364][ T517] device vlan2 entered promiscuous mode [ 27.163068][ T517] device dummy0 entered promiscuous mode [ 27.299892][ T538] netlink: 96 bytes leftover after parsing attributes in process `syz.2.93'. [ 27.314098][ T541] loop3: detected capacity change from 0 to 16 [ 27.339344][ T541] erofs: (device loop3): mounted with root inode @ nid 36. [ 27.367378][ T548] netlink: 20 bytes leftover after parsing attributes in process `syz.5.96'. [ 27.379045][ T541] process 'syz.3.95' launched '/dev/fd/3/./file2' with NULL argv: empty string added [ 27.400889][ T47] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -23 in[46, 4050] out[9000] [ 27.416911][ T541] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -23 in[46, 4050] out[4096] [ 27.708947][ T581] loop4: detected capacity change from 0 to 128 [ 28.059482][ T597] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 28.211019][ T599] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.251802][ T599] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.289816][ T615] netlink: 104 bytes leftover after parsing attributes in process `syz.5.129'. [ 28.300247][ T599] device bridge_slave_0 entered promiscuous mode [ 28.332792][ T599] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.369028][ T599] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.376400][ T599] device bridge_slave_1 entered promiscuous mode [ 28.431595][ T623] Zero length message leads to an empty skb [ 28.658827][ T362] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 28.668277][ T362] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 28.705331][ T408] device bridge_slave_1 left promiscuous mode [ 28.714116][ T408] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.737900][ T39] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 28.748547][ T408] device bridge_slave_0 left promiscuous mode [ 28.754664][ T408] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.769135][ T408] device veth1_macvtap left promiscuous mode [ 28.780446][ T408] device veth0_vlan left promiscuous mode [ 28.924815][ T362] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 28.933889][ T39] usb 5-1: config 0 has an invalid interface number: 239 but max is 0 [ 28.951272][ T362] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 28.967843][ T39] usb 5-1: config 0 has no interface number 0 [ 28.974712][ T362] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.981598][ T362] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.990121][ T39] usb 5-1: New USB device found, idVendor=6189, idProduct=182d, bcdDevice= 1.73 [ 29.007817][ T39] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 29.025316][ T362] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 29.033704][ T39] usb 5-1: Product: syz [ 29.037693][ T39] usb 5-1: Manufacturer: syz [ 29.048146][ T362] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 29.056297][ T39] usb 5-1: SerialNumber: syz [ 29.078286][ T39] usb 5-1: config 0 descriptor?? [ 29.084713][ T362] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.091601][ T362] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.108450][ T362] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 29.126582][ T362] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 29.146724][ T362] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 29.166955][ T362] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 29.188906][ T362] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 29.217651][ T362] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 29.226211][ T362] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 29.248461][ T656] syz.2.148 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 29.251316][ T599] device veth0_vlan entered promiscuous mode [ 29.281062][ T362] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 29.298618][ T362] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 29.316900][ T362] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 29.324713][ T362] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 29.359873][ T362] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 29.386809][ T599] device veth1_macvtap entered promiscuous mode [ 29.406953][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 29.428403][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 29.447289][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 29.458850][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 29.581389][ T690] netlink: 12 bytes leftover after parsing attributes in process `+}[@'. [ 29.712880][ T700] loop2: detected capacity change from 0 to 2048 [ 29.803795][ T700] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 29.859228][ T294] EXT4-fs (loop2): unmounting filesystem. [ 29.872582][ T688] loop6: detected capacity change from 0 to 40427 [ 29.907396][ T688] F2FS-fs (loop6): Found nat_bits in checkpoint [ 29.969346][ T688] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 30.098385][ T39] asix 5-1:0.239 (unnamed net_device) (uninitialized): invalid hw address, using random [ 30.234431][ T734] device pim6reg1 entered promiscuous mode [ 30.299166][ T39] asix 5-1:0.239 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 30.317820][ T39] asix 5-1:0.239 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 30.338207][ T39] asix: probe of 5-1:0.239 failed with error -71 [ 30.355972][ T39] usb 5-1: USB disconnect, device number 2 [ 30.427840][ T60] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 30.607834][ T60] usb 3-1: Using ep0 maxpacket: 16 [ 30.613986][ T60] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1023 [ 30.624213][ T60] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1023 [ 30.634405][ T60] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 14 [ 30.650670][ T60] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 30.659701][ T60] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 30.667555][ T60] usb 3-1: SerialNumber: syz [ 30.673542][ T717] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 30.677846][ T299] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 30.680890][ T717] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 30.841151][ T741] loop4: detected capacity change from 0 to 2048 [ 30.862775][ T741] EXT4-fs: Ignoring removed mblk_io_submit option [ 30.887867][ T299] usb 6-1: Using ep0 maxpacket: 16 [ 30.889984][ T741] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 30.893937][ T299] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 30.908189][ T60] cdc_ether: probe of 3-1:1.0 failed with error -71 [ 30.922119][ T60] usb 3-1: USB disconnect, device number 3 [ 30.931626][ T299] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 30.956709][ T741] netlink: 8 bytes leftover after parsing attributes in process `syz.4.182'. [ 30.965402][ T299] usb 6-1: New USB device found, idVendor=056a, idProduct=00b3, bcdDevice= 0.00 [ 30.974657][ T299] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 30.986507][ T299] usb 6-1: config 0 descriptor?? [ 31.001705][ T293] EXT4-fs (loop4): unmounting filesystem. [ 31.397037][ T299] wacom 0003:056A:00B3.0002: unknown main item tag 0x0 [ 31.408661][ T299] wacom 0003:056A:00B3.0002: unknown main item tag 0x0 [ 31.419520][ T299] wacom 0003:056A:00B3.0002: unknown main item tag 0x0 [ 31.437509][ T299] wacom 0003:056A:00B3.0002: unknown main item tag 0x0 [ 31.444394][ T299] wacom 0003:056A:00B3.0002: unknown main item tag 0x0 [ 31.460630][ T28] kauditd_printk_skb: 60 callbacks suppressed [ 31.460645][ T28] audit: type=1400 audit(1739979222.404:213): avc: denied { remount } for pid=776 comm="syz.6.198" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 31.488875][ T299] wacom 0003:056A:00B3.0002: Unknown device_type for 'HID 056a:00b3'. Assuming pen. [ 31.510674][ T299] wacom 0003:056A:00B3.0002: hidraw0: USB HID v0.00 Device [HID 056a:00b3] on usb-dummy_hcd.5-1/input0 [ 31.537460][ T299] input: Wacom Intuos3 12x12 Pen as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:056A:00B3.0002/input/input4 [ 31.600666][ T789] capability: warning: `syz.2.203' uses 32-bit capabilities (legacy support in use) [ 31.616625][ T299] usb 6-1: USB disconnect, device number 2 [ 31.697766][ T28] audit: type=1400 audit(1739979222.634:214): avc: denied { create } for pid=797 comm="syz.6.207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 31.724895][ T798] netlink: 8 bytes leftover after parsing attributes in process `syz.6.207'. [ 31.777094][ T801] device bond_slave_1 entered promiscuous mode [ 31.779222][ T28] audit: type=1400 audit(1739979222.664:215): avc: denied { write } for pid=797 comm="syz.6.207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 31.798333][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 31.813615][ T803] futex_wake_op: syz.2.210 tries to shift op by -1; fix this program [ 31.834176][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 31.840497][ T806] loop6: detected capacity change from 0 to 4096 [ 31.863332][ T28] audit: type=1400 audit(1739979222.804:216): avc: denied { create } for pid=807 comm="syz.4.212" name="file2" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 31.898309][ T806] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 31.938431][ T28] audit: type=1400 audit(1739979222.834:217): avc: denied { write } for pid=807 comm="syz.4.212" name="file2" dev="tmpfs" ino=280 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 31.961632][ T28] audit: type=1400 audit(1739979222.834:218): avc: denied { open } for pid=807 comm="syz.4.212" path="/51/file2" dev="tmpfs" ino=280 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 31.984337][ T28] audit: type=1400 audit(1739979222.834:219): avc: denied { ioctl } for pid=807 comm="syz.4.212" path="/51/file2" dev="tmpfs" ino=280 ioctlcmd=0x4c00 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 32.009066][ T599] EXT4-fs (loop6): unmounting filesystem. [ 32.011137][ T28] audit: type=1400 audit(1739979222.874:220): avc: denied { setattr } for pid=805 comm="syz.6.211" path="/17/file1/file1" dev="loop6" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 32.037739][ T28] audit: type=1400 audit(1739979222.884:221): avc: denied { unlink } for pid=293 comm="syz-executor" name="file2" dev="tmpfs" ino=280 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 32.191872][ T28] audit: type=1400 audit(1739979223.134:222): avc: denied { read write } for pid=820 comm="syz.6.218" name="fuse" dev="devtmpfs" ino=93 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 32.684901][ T866] netlink: 8 bytes leftover after parsing attributes in process `syz.6.237'. [ 32.703973][ T864] netem: change failed [ 32.885216][ T883] device batadv_slave_1 entered promiscuous mode [ 32.914256][ T882] device batadv_slave_1 left promiscuous mode [ 32.931345][ T886] loop2: detected capacity change from 0 to 256 [ 32.972193][ T888] loop4: detected capacity change from 0 to 512 [ 32.988750][ T888] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 33.017878][ T890] netlink: 80 bytes leftover after parsing attributes in process `syz.2.248'. [ 33.026580][ T890] netlink: 40 bytes leftover after parsing attributes in process `syz.2.248'. [ 33.050011][ T888] EXT4-fs (loop4): 1 orphan inode deleted [ 33.055583][ T888] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 33.067957][ T43] EXT4-fs error (device loop4): ext4_release_dquot:6804: comm kworker/u4:2: Failed to release dquot type 1 [ 33.081690][ T888] ext4 filesystem being mounted at /58/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 33.138552][ T293] EXT4-fs (loop4): unmounting filesystem. [ 33.177728][ T896] loop4: detected capacity change from 0 to 2048 [ 33.229236][ T896] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 33.338867][ T293] EXT4-fs (loop4): unmounting filesystem. [ 33.381111][ T911] loop5: detected capacity change from 0 to 1024 [ 33.411724][ T911] ======================================================= [ 33.411724][ T911] WARNING: The mand mount option has been deprecated and [ 33.411724][ T911] and is ignored by this kernel. Remove the mand [ 33.411724][ T911] option from the mount to silence this warning. [ 33.411724][ T911] ======================================================= [ 33.425833][ T917] loop2: detected capacity change from 0 to 512 [ 33.473107][ T919] mmap: syz.4.259 (919) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 33.497327][ T911] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 33.517631][ T917] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 33.619602][ T294] EXT4-fs (loop2): unmounting filesystem. [ 33.627534][ T928] netlink: 12 bytes leftover after parsing attributes in process `syz.4.264'. [ 33.676794][ T400] EXT4-fs (loop5): unmounting filesystem. [ 33.987882][ T60] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 33.989803][ T948] netlink: 4344 bytes leftover after parsing attributes in process `syz.6.273'. [ 34.041008][ T950] loop2: detected capacity change from 0 to 512 [ 34.102011][ T950] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 34.111657][ T950] ext4 filesystem being mounted at /63/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 34.154996][ T951] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.169094][ T60] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 34.171343][ T951] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.188259][ T60] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 34.189355][ T294] EXT4-fs (loop2): unmounting filesystem. [ 34.203283][ T951] device bridge_slave_0 entered promiscuous mode [ 34.203642][ T60] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 34.218605][ T60] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 34.226372][ T60] usb 5-1: Product: syz [ 34.231023][ T60] usb 5-1: Manufacturer: syz [ 34.235486][ T60] usb 5-1: SerialNumber: syz [ 34.240168][ T951] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.249037][ T951] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.263851][ T951] device bridge_slave_1 entered promiscuous mode [ 34.347754][ T951] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.354662][ T951] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.361771][ T951] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.368542][ T951] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.378872][ T43] device bridge_slave_1 left promiscuous mode [ 34.385054][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.393639][ T43] device bridge_slave_0 left promiscuous mode [ 34.400050][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.408298][ T43] device dummy0 left promiscuous mode [ 34.413605][ T43] device veth1_macvtap left promiscuous mode [ 34.419571][ T43] device veth0_vlan left promiscuous mode [ 34.450234][ T60] usb 5-1: 0:2 : does not exist [ 34.460237][ T60] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 34.481514][ T60] usb 5-1: USB disconnect, device number 3 [ 34.548126][ T299] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 34.590669][ T408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 34.601199][ T408] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.609316][ T408] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.628351][ T362] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 34.636801][ T362] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 34.645955][ T362] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.652831][ T362] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.660385][ T362] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 34.668633][ T362] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 34.676721][ T362] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.683598][ T362] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.691196][ T362] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 34.699321][ T362] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 34.707190][ T362] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 34.716211][ T412] udevd[412]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 34.732187][ T362] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 34.749277][ T362] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 34.757861][ T299] usb 3-1: Using ep0 maxpacket: 8 [ 34.757961][ T362] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 34.763964][ T299] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 34.778679][ T951] device veth0_vlan entered promiscuous mode [ 34.786324][ T362] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 34.795024][ T362] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 34.800927][ T299] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 34.810446][ T362] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 34.810793][ T362] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 34.825345][ T362] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 34.833502][ T362] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 34.836426][ T299] usb 3-1: config 0 descriptor?? [ 34.845120][ T951] device veth1_macvtap entered promiscuous mode [ 34.856834][ T362] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 34.865982][ T362] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 34.876337][ T362] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 34.900616][ T362] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 34.908832][ T362] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 34.964055][ T965] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 35.037882][ T971] netlink: 20 bytes leftover after parsing attributes in process `syz.6.279'. [ 35.058159][ T299] asix 3-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 35.069418][ T971] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.076427][ T971] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.259046][ T299] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 35.277943][ T299] asix 3-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 35.305487][ T299] asix: probe of 3-1:0.0 failed with error -71 [ 35.320634][ T983] tmpfs: Unknown parameter '' [ 35.321820][ T299] usb 3-1: USB disconnect, device number 4 [ 35.426926][ T991] netlink: 120 bytes leftover after parsing attributes in process `syz.6.289'. [ 35.437455][ T39] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 35.463358][ T991] b: renamed from bridge_slave_0 [ 35.504292][ T991] syz.6.289 (991) used greatest stack depth: 21000 bytes left [ 35.617950][ T39] usb 5-1: Using ep0 maxpacket: 32 [ 35.624410][ T39] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 35.646913][ T39] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 35.672579][ T39] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 35.691863][ T39] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 35.711520][ T39] usb 5-1: config 0 descriptor?? [ 35.724585][ T39] hub 5-1:0.0: USB hub found [ 35.752287][ T1008] loop6: detected capacity change from 0 to 128 [ 35.808293][ T1008] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 35.850150][ T1008] ext4 filesystem being mounted at /46/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 35.865823][ T1014] loop2: detected capacity change from 0 to 512 [ 35.914143][ T1014] EXT4-fs: Ignoring removed i_version option [ 35.926637][ T39] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 35.928080][ T1014] EXT4-fs: Ignoring removed mblk_io_submit option [ 35.941976][ T599] EXT4-fs (loop6): unmounting filesystem. [ 35.974074][ T1014] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 35.995788][ T1014] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2809: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 36.018460][ T1014] EXT4-fs (loop2): 1 truncate cleaned up [ 36.023974][ T1014] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 36.136192][ T294] EXT4-fs (loop2): unmounting filesystem. [ 36.145378][ T39] hid-generic 0003:046D:C31C.0003: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.4-1/input0 [ 36.224132][ T1026] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 36.282215][ T1026] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 36.317277][ T1026] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 36.356318][ T1026] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 36.386454][ T1026] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 36.416346][ T1026] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 36.447066][ T1026] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 36.457969][ T6] usb 5-1: USB disconnect, device number 4 [ 36.595158][ T1037] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1037 comm=syz.2.308 [ 36.609254][ T1036] xt_bpf: check failed: parse error [ 36.643369][ T28] kauditd_printk_skb: 24 callbacks suppressed [ 36.643385][ T28] audit: type=1400 audit(1739979227.584:246): avc: denied { map } for pid=1038 comm="syz.7.310" path="/dev/ashmem" dev="devtmpfs" ino=265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 36.717740][ T28] audit: type=1400 audit(1739979227.644:247): avc: denied { name_bind } for pid=1042 comm="syz.2.312" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 36.770718][ T28] audit: type=1400 audit(1739979227.694:248): avc: denied { map } for pid=1046 comm="syz.7.314" path="socket:[19559]" dev="sockfs" ino=19559 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 36.795831][ T28] audit: type=1400 audit(1739979227.694:249): avc: denied { read } for pid=1046 comm="syz.7.314" path="socket:[19559]" dev="sockfs" ino=19559 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 36.820021][ T28] audit: type=1400 audit(1739979227.714:250): avc: denied { map } for pid=1046 comm="syz.7.314" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=19560 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 36.849661][ T28] audit: type=1400 audit(1739979227.714:251): avc: denied { read write } for pid=1046 comm="syz.7.314" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=19560 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 36.941476][ T28] audit: type=1400 audit(1739979227.884:252): avc: denied { read } for pid=1057 comm="syz.6.319" name="loop-control" dev="devtmpfs" ino=113 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 36.951551][ T1060] input: syz1 as /devices/virtual/input/input7 [ 36.997053][ T28] audit: type=1400 audit(1739979227.884:253): avc: denied { open } for pid=1057 comm="syz.6.319" path="/dev/loop-control" dev="devtmpfs" ino=113 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 37.023859][ T28] audit: type=1400 audit(1739979227.884:254): avc: denied { ioctl } for pid=1057 comm="syz.6.319" path="/dev/loop-control" dev="devtmpfs" ino=113 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 37.056507][ T28] audit: type=1400 audit(1739979227.884:255): avc: denied { write } for pid=1059 comm="syz.4.320" name="uinput" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 37.118564][ T1066] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=1066 comm=syz.4.322 [ 37.157938][ T1069] netlink: 24 bytes leftover after parsing attributes in process `syz.6.324'. [ 37.204541][ T1075] loop4: detected capacity change from 0 to 256 [ 37.219237][ T1075] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0xf3b5d04a, utbl_chksum : 0xe619d30d) [ 37.401929][ T1089] kvm [1088]: vcpu0, guest rIP: 0xfff0 unimplemented MMIO_CONF_BASE wrmsr: 0x400000000240 [ 37.593458][ T1108] loop7: detected capacity change from 0 to 512 [ 37.635198][ T1108] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 37.690683][ T1108] EXT4-fs (loop7): 1 truncate cleaned up [ 37.696219][ T1108] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 37.739799][ T951] EXT4-fs (loop7): unmounting filesystem. [ 37.843400][ T1136] syz.4.354[1136] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 37.843489][ T1136] syz.4.354[1136] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 38.218430][ T1179] netlink: 9 bytes leftover after parsing attributes in process `syz.7.374'. [ 38.248526][ T1179] device gretap0 entered promiscuous mode [ 38.269266][ T1183] netlink: 5 bytes leftover after parsing attributes in process `syz.7.374'. [ 38.305506][ T1183] 0ªX¹¦D: renamed from gretap0 [ 38.321979][ T1183] device 30ªX¹¦D left promiscuous mode [ 38.330542][ T1183] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 38.346247][ T1186] tipc: Enabling of bearer rejected, failed to enable media [ 38.379052][ T1183] syz.7.374 (1183) used greatest stack depth: 20072 bytes left [ 38.854348][ T1221] netlink: 'syz.7.392': attribute type 1 has an invalid length. [ 39.079626][ T1234] SELinux: ebitmap start bit (5259586) is not a multiple of the map unit size (64) [ 39.097625][ T1234] SELinux: failed to load policy [ 39.146576][ T1231] loop7: detected capacity change from 0 to 40427 [ 39.154505][ T1231] F2FS-fs (loop7): invalid crc value [ 39.159926][ T6] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 39.178764][ T1231] F2FS-fs (loop7): Found nat_bits in checkpoint [ 39.179386][ T1239] loop4: detected capacity change from 0 to 1024 [ 39.229056][ T1239] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 39.254203][ T1239] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 39.258009][ T1231] F2FS-fs (loop7): Start checkpoint disabled! [ 39.275136][ T1239] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 21 with max blocks 44 with error 28 [ 39.288372][ T1239] EXT4-fs (loop4): This should not happen!! Data will be lost [ 39.288372][ T1239] [ 39.298181][ T1239] EXT4-fs (loop4): Total free blocks count 0 [ 39.305073][ T1244] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 39.305630][ T1231] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e6 [ 39.324700][ T1244] EXT4-fs (loop4): This should not happen!! Data will be lost [ 39.324700][ T1244] [ 39.334244][ T1244] EXT4-fs (loop4): Total free blocks count 0 [ 39.340042][ T1244] EXT4-fs (loop4): Free/Dirty block details [ 39.345712][ T1244] EXT4-fs (loop4): free_blocks=68451041280 [ 39.351468][ T1244] EXT4-fs (loop4): dirty_blocks=80 [ 39.359327][ T6] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 39.378894][ T6] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 39.407518][ T6] usb 7-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 39.426725][ T6] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 39.454186][ T6] usb 7-1: config 0 descriptor?? [ 39.462570][ T362] kworker/u4:4: attempt to access beyond end of device [ 39.462570][ T362] loop7: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 39.784343][ T1263] device pim6reg1 entered promiscuous mode [ 39.804597][ T1266] input: syz0 as /devices/virtual/input/input8 [ 39.818024][ T1266] input: failed to attach handler leds to device input8, error: -6 [ 39.891213][ T1271] loop2: detected capacity change from 0 to 512 [ 39.920510][ T1273] loop7: detected capacity change from 0 to 512 [ 39.927648][ T1273] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 39.940635][ T1271] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 39.949991][ T1271] ext4 filesystem being mounted at /81/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 39.968631][ T1273] EXT4-fs (loop7): orphan cleanup on readonly fs [ 39.981273][ T1273] EXT4-fs error (device loop7): ext4_acquire_dquot:6781: comm syz.7.413: Failed to acquire dquot type 1 [ 40.028802][ T1273] EXT4-fs (loop7): 1 truncate cleaned up [ 40.038030][ T1273] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 40.071313][ T294] EXT4-fs (loop2): unmounting filesystem. [ 40.080856][ T6] usb 7-1: language id specifier not provided by device, defaulting to English [ 40.117614][ T1284] loop2: detected capacity change from 0 to 256 [ 40.157152][ T1284] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 40.186518][ T1284] exFAT-fs (loop2): error, exfat_alloc_cluster: invalid used clusters(t:15,u:4294967295) [ 40.186518][ T1284] [ 40.200690][ T951] EXT4-fs (loop7): unmounting filesystem. [ 40.206631][ T1284] exFAT-fs (loop2): Filesystem has been set read-only [ 40.214330][ T1284] exFAT-fs (loop2): error, failed to bmap (inode : ffff888114a4c910 iblock : 0, err : -5) [ 40.281801][ T6] uclogic 0003:256C:006D.0004: failed retrieving Huion firmware version: -71 [ 40.300907][ T6] uclogic 0003:256C:006D.0004: failed probing parameters: -71 [ 40.310596][ T6] uclogic: probe of 0003:256C:006D.0004 failed with error -71 [ 40.331823][ T6] usb 7-1: USB disconnect, device number 2 [ 40.365277][ T1295] SELinux: Context system_u:object_r:devicekit_power_exec_t:s0 is not valid (left unmapped). [ 40.695611][ T1336] loop7: detected capacity change from 0 to 512 [ 40.747487][ T1336] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 40.795321][ T1336] ext4 filesystem being mounted at /46/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 40.897641][ T951] EXT4-fs (loop7): unmounting filesystem. [ 41.451766][ T1394] loop6: detected capacity change from 0 to 8192 [ 41.541698][ T1401] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 41.829898][ T1413] netlink: 20 bytes leftover after parsing attributes in process `syz.4.474'. [ 41.966400][ T1425] loop4: detected capacity change from 0 to 512 [ 42.002350][ T1425] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 42.021032][ T1425] ext4 filesystem being mounted at /113/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 42.062117][ T1425] EXT4-fs error (device loop4): ext4_do_update_inode:5226: inode #2: comm syz.4.479: corrupted inode contents [ 42.102573][ T1439] netlink: 12 bytes leftover after parsing attributes in process `+}[@'. [ 42.118804][ T1425] EXT4-fs error (device loop4): ext4_dirty_inode:6091: inode #2: comm syz.4.479: mark_inode_dirty error [ 42.133814][ T1425] EXT4-fs error (device loop4): ext4_do_update_inode:5226: inode #2: comm syz.4.479: corrupted inode contents [ 42.147129][ T1425] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #2: comm syz.4.479: mark_inode_dirty error [ 42.199083][ T28] kauditd_printk_skb: 58 callbacks suppressed [ 42.199099][ T28] audit: type=1400 audit(1739979233.144:312): avc: denied { ioctl } for pid=1423 comm="syz.4.479" path="/113/bus/cpu.stat" dev="loop4" ino=18 ioctlcmd=0x583b scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 42.243115][ T293] EXT4-fs (loop4): unmounting filesystem. [ 42.301423][ T1448] loop6: detected capacity change from 0 to 512 [ 42.361391][ T1448] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 42.397965][ T1448] ext4 filesystem being mounted at /95/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 42.494376][ T28] audit: type=1400 audit(1739979233.434:313): avc: denied { ioctl } for pid=1447 comm="syz.6.488" path="/95/bus/file2" dev="loop6" ino=16 ioctlcmd=0x660f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 42.549659][ T599] EXT4-fs (loop6): unmounting filesystem. [ 42.699662][ T1463] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.706619][ T1463] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.713915][ T1463] device bridge_slave_0 entered promiscuous mode [ 42.721063][ T1463] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.743825][ T1463] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.751517][ T1463] device bridge_slave_1 entered promiscuous mode [ 42.963202][ T28] audit: type=1400 audit(1739979233.904:314): avc: denied { ioctl } for pid=1478 comm="syz.4.498" path="socket:[22533]" dev="sockfs" ino=22533 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 43.015923][ T1481] loop2: detected capacity change from 0 to 1024 [ 43.024441][ T1481] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 43.086109][ T1463] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.093010][ T1463] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.100112][ T1463] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.106959][ T1463] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.188667][ T362] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 43.200304][ T362] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.207697][ T362] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.226760][ T362] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 43.257136][ T362] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.264067][ T362] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.277819][ T404] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 43.294363][ T362] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 43.312663][ T362] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.313663][ T1499] loop2: detected capacity change from 0 to 1024 [ 43.319562][ T362] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.350033][ T1501] netlink: 12 bytes leftover after parsing attributes in process `syz.4.508'. [ 43.364522][ T362] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 43.373691][ T362] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 43.383160][ T1499] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 43.401717][ T28] audit: type=1400 audit(1739979234.344:315): avc: denied { mounton } for pid=1498 comm="syz.2.507" path="/110/file1/bus" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 43.409816][ T294] EXT4-fs error (device loop2): ext4_readdir:260: inode #11: block 38: comm syz-executor: path /110/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=327680, rec_len=0, size=1024 fake=0 [ 43.449502][ T362] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 43.459268][ T294] EXT4-fs error (device loop2): ext4_empty_dir:3177: inode #11: block 38: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=6144, inode=327680, rec_len=0, size=1024 fake=0 [ 43.480023][ T362] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 43.488630][ T404] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 43.510488][ T294] EXT4-fs error (device loop2): ext4_readdir:260: inode #11: block 38: comm syz-executor: path /110/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=327680, rec_len=0, size=1024 fake=0 [ 43.512681][ T1463] device veth0_vlan entered promiscuous mode [ 43.547632][ T404] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 43.549425][ T1463] device veth1_macvtap entered promiscuous mode [ 43.564626][ T362] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 43.572659][ T294] EXT4-fs error (device loop2): ext4_empty_dir:3177: inode #11: block 38: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=6144, inode=327680, rec_len=0, size=1024 fake=0 [ 43.575655][ T404] usb 8-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 43.593579][ T294] EXT4-fs error (device loop2): ext4_readdir:260: inode #11: block 38: comm syz-executor: path /110/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=327680, rec_len=0, size=1024 fake=0 [ 43.602080][ T362] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 43.623670][ T294] EXT4-fs error (device loop2): ext4_empty_dir:3177: inode #11: block 38: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=6144, inode=327680, rec_len=0, size=1024 fake=0 [ 43.647881][ T404] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 43.658902][ T362] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 43.666974][ T362] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 43.668402][ T294] EXT4-fs error (device loop2): ext4_readdir:260: inode #11: block 38: comm syz-executor: path /110/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=327680, rec_len=0, size=1024 fake=0 [ 43.688592][ T404] usb 8-1: config 0 descriptor?? [ 43.702139][ T362] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 43.707197][ T294] EXT4-fs error (device loop2): ext4_empty_dir:3177: inode #11: block 38: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=6144, inode=327680, rec_len=0, size=1024 fake=0 [ 43.711156][ T362] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 43.745813][ T362] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 43.746705][ T294] EXT4-fs error (device loop2): ext4_readdir:260: inode #11: block 38: comm syz-executor: path /110/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=327680, rec_len=0, size=1024 fake=0 [ 43.781236][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 43.785650][ T294] EXT4-fs error (device loop2): ext4_empty_dir:3177: inode #11: block 38: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=6144, inode=327680, rec_len=0, size=1024 fake=0 [ 43.790921][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 43.819934][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 43.844785][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 43.864108][ T43] device bridge_slave_1 left promiscuous mode [ 43.871205][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.871617][ T1514] hub 2-0:1.0: USB hub found [ 43.883185][ T1514] hub 2-0:1.0: 1 port detected [ 43.889947][ T43] device bridge_slave_0 left promiscuous mode [ 43.908512][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.917355][ T43] device veth1_macvtap left promiscuous mode [ 43.923282][ T43] device veth0_vlan left promiscuous mode [ 44.057094][ T1516] loop6: detected capacity change from 0 to 40427 [ 44.065301][ T398] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 44.072726][ T1516] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 44.080332][ T1516] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 44.089427][ T1516] F2FS-fs (loop6): invalid crc value [ 44.100536][ T1516] F2FS-fs (loop6): Found nat_bits in checkpoint [ 44.140084][ T1516] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 44.146943][ T1516] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 44.159608][ T404] isku 0003:1E7D:319C.0005: item fetching failed at offset 5/7 [ 44.170104][ T294] EXT4-fs (loop2): unmounting filesystem. [ 44.181122][ T404] isku 0003:1E7D:319C.0005: parse failed [ 44.186869][ T404] isku: probe of 0003:1E7D:319C.0005 failed with error -22 [ 44.268445][ T398] usb 5-1: Using ep0 maxpacket: 16 [ 44.286387][ T398] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 44.311237][ T398] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 44.321005][ T398] usb 5-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 44.337866][ T398] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 44.358050][ T398] usb 5-1: config 0 descriptor?? [ 44.366432][ T404] usb 8-1: USB disconnect, device number 2 [ 44.452315][ T28] audit: type=1400 audit(1739979235.394:316): avc: denied { mounton } for pid=1534 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 44.562970][ T1534] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.570619][ T1534] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.580163][ T28] audit: type=1400 audit(1739979235.524:317): avc: denied { ioctl } for pid=1544 comm="syz.8.526" path="socket:[22734]" dev="sockfs" ino=22734 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 44.622469][ T1534] device bridge_slave_0 entered promiscuous mode [ 44.632530][ T1534] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.639711][ T1534] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.646582][ T28] audit: type=1400 audit(1739979235.584:318): avc: denied { read } for pid=1552 comm="syz.8.529" name="file0" dev="incremental-fs" ino=57 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 44.650288][ T1534] device bridge_slave_1 entered promiscuous mode [ 44.732351][ T28] audit: type=1400 audit(1739979235.674:319): avc: denied { read } for pid=1559 comm="syz.6.533" name="usbmon0" dev="devtmpfs" ino=155 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 44.755600][ T28] audit: type=1400 audit(1739979235.674:320): avc: denied { open } for pid=1559 comm="syz.6.533" path="/dev/usbmon0" dev="devtmpfs" ino=155 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 44.769290][ T398] appleir 0003:05AC:8241.0006: unknown main item tag 0x0 [ 44.779939][ T28] audit: type=1400 audit(1739979235.684:321): avc: denied { write } for pid=1559 comm="syz.6.533" name="usbmon0" dev="devtmpfs" ino=155 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 44.791335][ T398] appleir 0003:05AC:8241.0006: unknown main item tag 0x0 [ 44.825910][ T398] appleir 0003:05AC:8241.0006: unknown main item tag 0x0 [ 44.836594][ T1564] input: syz0 as /devices/virtual/input/input9 [ 44.843260][ T398] appleir 0003:05AC:8241.0006: No inputs registered, leaving [ 44.852686][ T398] appleir 0003:05AC:8241.0006: hiddev96,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.4-1/input0 [ 44.899647][ T1534] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.906535][ T1534] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.913643][ T1534] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.920419][ T1534] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.971045][ T1575] loop6: detected capacity change from 0 to 256 [ 44.991418][ T1575] FAT-fs (loop6): Directory bread(block 64) failed [ 44.997934][ T1575] FAT-fs (loop6): Directory bread(block 65) failed [ 45.004336][ T362] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 45.005066][ T1575] FAT-fs (loop6): Directory bread(block 66) failed [ 45.018419][ T362] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.025536][ T1575] FAT-fs (loop6): Directory bread(block 67) failed [ 45.031983][ T1575] FAT-fs (loop6): Directory bread(block 68) failed [ 45.038452][ T1575] FAT-fs (loop6): Directory bread(block 69) failed [ 45.044860][ T362] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.045103][ T1575] FAT-fs (loop6): Directory bread(block 70) failed [ 45.058619][ T1575] FAT-fs (loop6): Directory bread(block 71) failed [ 45.065044][ T1575] FAT-fs (loop6): Directory bread(block 72) failed [ 45.076736][ T24] usb 5-1: USB disconnect, device number 5 [ 45.079234][ T1575] FAT-fs (loop6): Directory bread(block 73) failed [ 45.095649][ T362] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 45.115665][ T362] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.122582][ T362] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.133179][ T362] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 45.141550][ T362] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.148419][ T362] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.157724][ T362] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 45.176703][ T362] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 45.187452][ T1584] syz.7.545[1584] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 45.187529][ T1584] syz.7.545[1584] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 45.198104][ T362] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 45.244769][ T43] device bridge_slave_1 left promiscuous mode [ 45.254046][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.262622][ T43] device bridge_slave_0 left promiscuous mode [ 45.269006][ T1584] input: syz0 as /devices/virtual/input/input10 [ 45.273095][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.286269][ T1590] loop8: detected capacity change from 0 to 2048 [ 45.303382][ T43] device veth1_macvtap left promiscuous mode [ 45.314341][ T43] device veth0_vlan left promiscuous mode [ 45.354413][ T1590] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 45.432654][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 45.442945][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 45.466638][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 45.482009][ T1534] device veth0_vlan entered promiscuous mode [ 45.520624][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 45.529497][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 45.540363][ T1600] loop7: detected capacity change from 0 to 2048 [ 45.562940][ T1534] device veth1_macvtap entered promiscuous mode [ 45.575622][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 45.581152][ T1594] loop6: detected capacity change from 0 to 40427 [ 45.584370][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 45.598523][ T1463] EXT4-fs (loop8): unmounting filesystem. [ 45.611579][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 45.620032][ T1600] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 45.629179][ T1594] F2FS-fs (loop6): invalid crc value [ 45.642907][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 45.651384][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 45.690110][ T951] EXT4-fs (loop7): unmounting filesystem. [ 45.698301][ T1594] F2FS-fs (loop6): Found nat_bits in checkpoint [ 45.766966][ T1616] loop4: detected capacity change from 0 to 1024 [ 45.773896][ T1594] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4 [ 45.822653][ T1616] EXT4-fs (loop4): Test dummy encryption mode enabled [ 45.853649][ T1616] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 45.895268][ T599] syz-executor: attempt to access beyond end of device [ 45.895268][ T599] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 45.948060][ T1616] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 45.988690][ T293] EXT4-fs (loop4): unmounting filesystem. [ 46.167935][ T299] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 46.178624][ T1646] SELinux: policydb version 0 does not match my version range 15-33 [ 46.187192][ T1646] SELinux: failed to load policy [ 46.197987][ T6] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 46.286840][ T1664] input: syz0 as /devices/virtual/input/input11 [ 46.358142][ T299] usb 8-1: Using ep0 maxpacket: 16 [ 46.364561][ T299] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 46.367913][ T404] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 46.382606][ T299] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 46.383039][ T1674] usb usb5: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 46.393409][ T299] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 46.415592][ T299] usb 8-1: New USB device found, idVendor=056a, idProduct=0325, bcdDevice= 0.00 [ 46.424793][ T299] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 46.433054][ T6] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 46.451956][ T299] usb 8-1: config 0 descriptor?? [ 46.461639][ T6] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 46.480542][ T6] usb 10-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 46.489676][ T6] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 46.499759][ T6] usb 10-1: SerialNumber: syz [ 46.579123][ T404] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 46.589454][ T404] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 46.602431][ T404] usb 7-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 46.611318][ T404] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 46.620107][ T404] usb 7-1: config 0 descriptor?? [ 46.625905][ T404] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 46.675309][ T1632] loop7: detected capacity change from 0 to 512 [ 46.682840][ T1632] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 46.693276][ T1632] EXT4-fs (loop7): orphan cleanup on readonly fs [ 46.702367][ T1632] EXT4-fs warning (device loop7): ext4_enable_quotas:7016: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 46.710194][ T6] usb 10-1: 0:2 : does not exist [ 46.725893][ T6] usb 10-1: unit 102 not found! [ 46.737511][ T1632] EXT4-fs (loop7): Cannot turn on quotas: error -117 [ 46.745191][ T6] usb 10-1: USB disconnect, device number 2 [ 46.753221][ T1632] EXT4-fs error (device loop7): ext4_orphan_get:1400: inode #16: comm syz.7.559: casefold flag without casefold feature [ 46.766236][ T1632] EXT4-fs error (device loop7): ext4_orphan_get:1405: comm syz.7.559: couldn't read orphan inode 16 (err -117) [ 46.778314][ T19] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 46.787141][ T1632] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 46.833367][ T404] usb 7-1: USB disconnect, device number 3 [ 46.978293][ T405] udevd[405]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 46.979054][ T19] usb 9-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 47.004030][ T19] usb 9-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 47.014646][ T19] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 47.023730][ T299] wacom 0003:056A:0325.0007: hidraw0: USB HID v0.08 Device [HID 056a:0325] on usb-dummy_hcd.7-1/input0 [ 47.036120][ T19] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 47.218948][ T19] usb 8-1: USB disconnect, device number 3 [ 47.261472][ T404] usb 9-1: USB disconnect, device number 2 [ 47.296401][ T1717] loop9: detected capacity change from 0 to 1024 [ 47.304191][ T1717] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 47.314214][ T1717] EXT4-fs (loop9): barriers disabled [ 47.319559][ T1717] JBD2: no valid journal superblock found [ 47.325180][ T1717] EXT4-fs (loop9): error loading journal [ 47.475247][ T1729] Bluetooth: hci0: sending frame failed (-49) [ 47.481261][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -49 [ 47.687862][ T6] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 47.728377][ T951] EXT4-fs (loop7): unmounting filesystem. [ 47.867963][ T6] usb 10-1: Using ep0 maxpacket: 16 [ 47.883711][ T6] usb 10-1: config 0 has an invalid interface number: 17 but max is 0 [ 47.897038][ T6] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 47.907392][ T6] usb 10-1: config 0 has no interface number 0 [ 47.929070][ T6] usb 10-1: New USB device found, idVendor=0408, idProduct=4034, bcdDevice=dd.cd [ 47.945225][ T6] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 47.953425][ T6] usb 10-1: Product: syz [ 47.958580][ T6] usb 10-1: Manufacturer: syz [ 47.963267][ T6] usb 10-1: SerialNumber: syz [ 47.972535][ T6] usb 10-1: config 0 descriptor?? [ 47.985657][ T6] usb 10-1: Found UVC 0.00 device syz (0408:4034) [ 47.994132][ T6] usb 10-1: No valid video chain found. [ 47.996427][ T1767] tipc: Started in network mode [ 48.004738][ T1767] tipc: Node identity ac1414aa, cluster identity 4711 [ 48.011529][ T1745] loop4: detected capacity change from 0 to 40427 [ 48.011947][ T1767] tipc: Enabled bearer , priority 10 [ 48.019261][ T1745] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 48.031895][ T1745] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 48.041218][ T1745] F2FS-fs (loop4): invalid crc value [ 48.048229][ T1745] F2FS-fs (loop4): Found nat_bits in checkpoint [ 48.103563][ T1745] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 48.110675][ T1745] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 48.149607][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 48.149631][ T28] audit: type=1400 audit(1739979239.094:326): avc: denied { mounton } for pid=1744 comm="syz.4.611" path="/152/bus/bus" dev="loop4" ino=457 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 48.178785][ T43] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 48.191748][ T28] audit: type=1400 audit(1739979239.094:327): avc: denied { write } for pid=1744 comm="syz.4.611" name="bus" dev="loop4" ino=457 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 48.211068][ T43] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 48.213540][ T28] audit: type=1400 audit(1739979239.094:328): avc: denied { add_name } for pid=1744 comm="syz.4.611" name="work" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 48.242092][ T28] audit: type=1400 audit(1739979239.094:329): avc: denied { setattr } for pid=1744 comm="syz.4.611" name="work" dev="loop4" ino=458 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 48.265181][ T28] audit: type=1400 audit(1739979239.094:330): avc: denied { remove_name } for pid=1744 comm="syz.4.611" name="#1" dev="loop4" ino=460 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 48.288585][ T28] audit: type=1400 audit(1739979239.094:331): avc: denied { rename } for pid=1744 comm="syz.4.611" name="#1" dev="loop4" ino=460 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 48.311018][ T28] audit: type=1400 audit(1739979239.094:332): avc: denied { unlink } for pid=1744 comm="syz.4.611" name="#1" dev="loop4" ino=461 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 48.333222][ T28] audit: type=1400 audit(1739979239.094:333): avc: denied { unlink } for pid=1744 comm="syz.4.611" name="#2" dev="loop4" ino=460 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 48.452895][ T1779] netlink: 12 bytes leftover after parsing attributes in process `syz.4.624'. [ 48.488131][ T28] audit: type=1400 audit(1739979239.434:334): avc: denied { setattr } for pid=1780 comm="syz.6.625" name="maps" dev="proc" ino=23252 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 48.576887][ T28] audit: type=1400 audit(1739979239.514:335): avc: denied { listen } for pid=1792 comm="syz.6.630" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 48.837871][ T404] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 48.861914][ T1799] tmpfs: Bad value for 'nr_inodes' [ 48.911358][ T1805] loop8: detected capacity change from 0 to 512 [ 48.931034][ T1805] EXT4-fs error (device loop8): ext4_do_update_inode:5226: inode #16: comm syz.8.632: corrupted inode contents [ 48.943099][ T1805] EXT4-fs (loop8): Remounting filesystem read-only [ 48.949728][ T1805] EXT4-fs error (device loop8): ext4_dirty_inode:6091: inode #16: comm syz.8.632: mark_inode_dirty error [ 48.961182][ T1805] EXT4-fs (loop8): Remounting filesystem read-only [ 48.967514][ T1805] EXT4-fs error (device loop8): ext4_do_update_inode:5226: inode #16: comm syz.8.632: corrupted inode contents [ 48.979452][ T1805] EXT4-fs (loop8): Remounting filesystem read-only [ 48.985766][ T1805] EXT4-fs error (device loop8): __ext4_ext_dirty:202: inode #16: comm syz.8.632: mark_inode_dirty error [ 48.997048][ T1805] EXT4-fs (loop8): Remounting filesystem read-only [ 49.003456][ T1805] EXT4-fs error (device loop8): ext4_do_update_inode:5226: inode #16: comm syz.8.632: corrupted inode contents [ 49.015220][ T1805] EXT4-fs (loop8): Remounting filesystem read-only [ 49.021645][ T1805] EXT4-fs error (device loop8) in ext4_orphan_del:305: Corrupt filesystem [ 49.030253][ T1805] EXT4-fs (loop8): Remounting filesystem read-only [ 49.031011][ T404] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 49.036770][ T1805] EXT4-fs error (device loop8): ext4_do_update_inode:5226: inode #16: comm syz.8.632: corrupted inode contents [ 49.047359][ T404] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 49.047386][ T404] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 49.047428][ T404] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 49.047452][ T404] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 49.060148][ T1805] EXT4-fs (loop8): Remounting filesystem read-only [ 49.105570][ T1805] EXT4-fs error (device loop8): ext4_truncate:4313: inode #16: comm syz.8.632: mark_inode_dirty error [ 49.116805][ T404] usb 5-1: config 0 descriptor?? [ 49.121863][ T1805] EXT4-fs (loop8): Remounting filesystem read-only [ 49.128240][ T1805] EXT4-fs error (device loop8) in ext4_process_orphan:347: Corrupt filesystem [ 49.137186][ T1805] EXT4-fs (loop8): Remounting filesystem read-only [ 49.143657][ T6] tipc: Node number set to 2886997162 [ 49.143934][ T1805] EXT4-fs (loop8): 1 truncate cleaned up [ 49.154435][ T1805] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 49.163371][ T1805] ext4 filesystem being mounted at /26/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 49.163598][ T43] EXT4-fs error (device loop8): ext4_release_dquot:6804: comm kworker/u4:2: Failed to release dquot type 1 [ 49.189161][ T43] EXT4-fs (loop8): Remounting filesystem read-only [ 49.245265][ T1463] EXT4-fs (loop8): unmounting filesystem. [ 49.540464][ T404] plantronics 0003:047F:FFFF.0008: No inputs registered, leaving [ 49.549859][ T404] plantronics 0003:047F:FFFF.0008: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 50.022359][ T1856] I/O error, dev loop15, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 50.031652][ T1856] FAT-fs (loop15): unable to read boot sector [ 50.303674][ T1857] loop6: detected capacity change from 0 to 40427 [ 50.324495][ T1857] F2FS-fs (loop6): fault_type options not supported [ 50.335179][ T1857] F2FS-fs (loop6): invalid crc value [ 50.351051][ T1857] F2FS-fs (loop6): Found nat_bits in checkpoint [ 50.412612][ T299] usb 10-1: USB disconnect, device number 3 [ 50.457012][ T1893] loop9: detected capacity change from 0 to 2048 [ 50.458433][ T1857] F2FS-fs (loop6): Start checkpoint disabled! [ 50.479647][ T1895] loop7: detected capacity change from 0 to 256 [ 50.486434][ T1895] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 50.503523][ T1895] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 50.514184][ T1857] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 50.525769][ T1893] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 50.577425][ T1534] EXT4-fs (loop9): unmounting filesystem. [ 50.645578][ T1902] tipc: Started in network mode [ 50.665010][ T1902] tipc: Node identity ac1414aa, cluster identity 4711 [ 50.682045][ T1902] tipc: New replicast peer: 100.1.1.1 [ 50.687422][ T1902] tipc: Enabled bearer , priority 10 [ 50.710811][ T1857] syz.6.655: attempt to access beyond end of device [ 50.710811][ T1857] loop6: rw=2049, sector=77824, nr_sectors = 2048 limit=40427 [ 50.734814][ T1857] syz.6.655: attempt to access beyond end of device [ 50.734814][ T1857] loop6: rw=2049, sector=79872, nr_sectors = 2048 limit=40427 [ 50.760185][ T1857] syz.6.655: attempt to access beyond end of device [ 50.760185][ T1857] loop6: rw=2049, sector=49152, nr_sectors = 2048 limit=40427 [ 50.798501][ T1857] syz.6.655: attempt to access beyond end of device [ 50.798501][ T1857] loop6: rw=2049, sector=51200, nr_sectors = 2048 limit=40427 [ 50.821437][ T1857] syz.6.655: attempt to access beyond end of device [ 50.821437][ T1857] loop6: rw=2049, sector=57344, nr_sectors = 2048 limit=40427 [ 50.841327][ T1857] syz.6.655: attempt to access beyond end of device [ 50.841327][ T1857] loop6: rw=2049, sector=59392, nr_sectors = 2048 limit=40427 [ 50.861060][ T1857] syz.6.655: attempt to access beyond end of device [ 50.861060][ T1857] loop6: rw=2049, sector=61440, nr_sectors = 2048 limit=40427 [ 50.882273][ T1857] syz.6.655: attempt to access beyond end of device [ 50.882273][ T1857] loop6: rw=2049, sector=63488, nr_sectors = 2048 limit=40427 [ 50.902185][ T1857] syz.6.655: attempt to access beyond end of device [ 50.902185][ T1857] loop6: rw=2049, sector=65536, nr_sectors = 2048 limit=40427 [ 50.922849][ T1857] syz.6.655: attempt to access beyond end of device [ 50.922849][ T1857] loop6: rw=2049, sector=67584, nr_sectors = 2048 limit=40427 [ 50.937865][ T1857] syz.6.655: attempt to access beyond end of device [ 50.937865][ T1857] loop6: rw=2049, sector=69632, nr_sectors = 8 limit=40427 [ 50.951576][ T1857] syz.6.655: attempt to access beyond end of device [ 50.951576][ T1857] loop6: rw=2049, sector=69640, nr_sectors = 8 limit=40427 [ 50.965747][ T1857] syz.6.655: attempt to access beyond end of device [ 50.965747][ T1857] loop6: rw=2049, sector=69648, nr_sectors = 8 limit=40427 [ 50.979680][ T1857] syz.6.655: attempt to access beyond end of device [ 50.979680][ T1857] loop6: rw=2049, sector=69656, nr_sectors = 8 limit=40427 [ 50.993381][ T1857] syz.6.655: attempt to access beyond end of device [ 50.993381][ T1857] loop6: rw=2049, sector=69664, nr_sectors = 8 limit=40427 [ 51.007114][ T1857] syz.6.655: attempt to access beyond end of device [ 51.007114][ T1857] loop6: rw=2049, sector=69672, nr_sectors = 8 limit=40427 [ 51.021006][ T1857] syz.6.655: attempt to access beyond end of device [ 51.021006][ T1857] loop6: rw=2049, sector=69680, nr_sectors = 8 limit=40427 [ 51.034903][ T1857] syz.6.655: attempt to access beyond end of device [ 51.034903][ T1857] loop6: rw=2049, sector=69688, nr_sectors = 8 limit=40427 [ 51.067862][ T299] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 51.238340][ T1919] x_tables: ip6_tables: CT target: only valid in raw table, not  [ 51.249092][ T299] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 51.260144][ T299] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 51.269301][ T299] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 51.281497][ T299] usb 8-1: config 0 descriptor?? [ 51.353954][ T1924] loop6: detected capacity change from 0 to 512 [ 51.362170][ T1924] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 51.380290][ T599] EXT4-fs (loop6): unmounting filesystem. [ 51.472279][ T1934] bridge0: port 3(vlan2) entered blocking state [ 51.478565][ T1934] bridge0: port 3(vlan2) entered disabled state [ 51.692686][ T299] keytouch 0003:0926:3333.0009: fixing up Keytouch IEC report descriptor [ 51.713023][ T299] input: HID 0926:3333 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:0926:3333.0009/input/input15 [ 51.728249][ T6] usb 5-1: USB disconnect, device number 6 [ 51.790900][ T299] keytouch 0003:0926:3333.0009: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.7-1/input0 [ 51.844488][ T299] tipc: Node number set to 2886997162 [ 51.888451][ T1961] SELinux: Context Ü is not valid (left unmapped). [ 52.094172][ T1982] loop8: detected capacity change from 0 to 512 [ 52.114785][ T1982] EXT4-fs: Ignoring removed oldalloc option [ 52.122378][ T1982] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b802e02d, mo2=0002] [ 52.130792][ T1982] System zones: 1-12 [ 52.135263][ T1982] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #11: comm syz.8.708: invalid indirect mapped block 1 (level 1) [ 52.149561][ T1982] EXT4-fs (loop8): Remounting filesystem read-only [ 52.155929][ T1982] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #11: comm syz.8.708: invalid indirect mapped block 7 (level 2) [ 52.169609][ T1982] EXT4-fs (loop8): Remounting filesystem read-only [ 52.176059][ T1982] EXT4-fs (loop8): 1 truncate cleaned up [ 52.181695][ T1982] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 52.231980][ T1463] EXT4-fs (loop8): unmounting filesystem. [ 52.288035][ T299] usb 8-1: USB disconnect, device number 4 [ 52.632537][ T2021] loop6: detected capacity change from 0 to 512 [ 52.660859][ T2021] EXT4-fs: Ignoring removed nobh option [ 52.673988][ T2028] xt_bpf: check failed: parse error [ 52.695572][ T2021] EXT4-fs error (device loop6): ext4_do_update_inode:5226: inode #3: comm syz.6.725: corrupted inode contents [ 52.708644][ T2021] EXT4-fs (loop6): Remounting filesystem read-only [ 52.721668][ T2021] EXT4-fs error (device loop6): ext4_dirty_inode:6091: inode #3: comm syz.6.725: mark_inode_dirty error [ 52.733138][ T2021] EXT4-fs (loop6): Remounting filesystem read-only [ 52.739801][ T2021] EXT4-fs error (device loop6): ext4_do_update_inode:5226: inode #3: comm syz.6.725: corrupted inode contents [ 52.752485][ T2021] EXT4-fs (loop6): Remounting filesystem read-only [ 52.758878][ T2021] EXT4-fs error (device loop6): __ext4_ext_dirty:202: inode #3: comm syz.6.725: mark_inode_dirty error [ 52.770039][ T2021] EXT4-fs (loop6): Remounting filesystem read-only [ 52.782235][ T2021] EXT4-fs error (device loop6): ext4_acquire_dquot:6781: comm syz.6.725: Failed to acquire dquot type 0 [ 52.798805][ T2021] EXT4-fs (loop6): Remounting filesystem read-only [ 52.805902][ T2021] EXT4-fs error (device loop6): ext4_do_update_inode:5226: inode #16: comm syz.6.725: corrupted inode contents [ 52.819149][ T2021] EXT4-fs (loop6): Remounting filesystem read-only [ 52.825728][ T2021] EXT4-fs error (device loop6): ext4_dirty_inode:6091: inode #16: comm syz.6.725: mark_inode_dirty error [ 52.837260][ T2021] EXT4-fs (loop6): Remounting filesystem read-only [ 52.843937][ T2021] EXT4-fs error (device loop6): ext4_do_update_inode:5226: inode #16: comm syz.6.725: corrupted inode contents [ 52.857813][ T2021] EXT4-fs (loop6): Remounting filesystem read-only [ 52.864899][ T2021] EXT4-fs error (device loop6): __ext4_ext_dirty:202: inode #16: comm syz.6.725: mark_inode_dirty error [ 52.876868][ T2021] EXT4-fs (loop6): Remounting filesystem read-only [ 52.883256][ T2021] EXT4-fs error (device loop6): ext4_do_update_inode:5226: inode #16: comm syz.6.725: corrupted inode contents [ 52.898159][ T2021] EXT4-fs (loop6): Remounting filesystem read-only [ 52.904733][ T2021] EXT4-fs error (device loop6) in ext4_orphan_del:305: Corrupt filesystem [ 52.913589][ T2021] EXT4-fs (loop6): Remounting filesystem read-only [ 52.921942][ T2021] EXT4-fs error (device loop6): ext4_do_update_inode:5226: inode #16: comm syz.6.725: corrupted inode contents [ 52.934136][ T2021] EXT4-fs (loop6): Remounting filesystem read-only [ 52.940758][ T2021] EXT4-fs error (device loop6): ext4_truncate:4313: inode #16: comm syz.6.725: mark_inode_dirty error [ 52.952183][ T2021] EXT4-fs (loop6): Remounting filesystem read-only [ 52.958616][ T2021] EXT4-fs error (device loop6) in ext4_process_orphan:347: Corrupt filesystem [ 52.967509][ T2021] EXT4-fs (loop6): Remounting filesystem read-only [ 52.974117][ T2021] EXT4-fs (loop6): 1 truncate cleaned up [ 52.979635][ T2021] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 52.988388][ T2021] ext4 filesystem being mounted at /150/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.998767][ T398] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 53.020473][ T599] EXT4-fs (loop6): unmounting filesystem. [ 53.187874][ T299] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 53.196224][ T398] usb 10-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 53.205211][ T398] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.218909][ T398] usb 10-1: config 0 descriptor?? [ 53.276900][ T2076] loop8: detected capacity change from 0 to 128 [ 53.283722][ T2076] EXT4-fs (loop8): Test dummy encryption mode enabled [ 53.291749][ T2076] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 53.300274][ T2076] ext4 filesystem being mounted at /45/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 53.313454][ T2076] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 53.335180][ T1463] EXT4-fs (loop8): unmounting filesystem. [ 53.364226][ T28] kauditd_printk_skb: 31 callbacks suppressed [ 53.364244][ T28] audit: type=1400 audit(1739979244.304:364): avc: denied { bind } for pid=2081 comm="syz.8.753" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 53.368977][ T299] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 53.370257][ T28] audit: type=1400 audit(1739979244.304:365): avc: denied { listen } for pid=2081 comm="syz.8.753" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 53.394863][ T299] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 53.428749][ T39] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 53.428998][ T299] usb 8-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 53.445004][ T299] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.453905][ T299] usb 8-1: config 0 descriptor?? [ 53.629057][ T39] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 53.640242][ T39] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 53.650431][ T39] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 53.664903][ T39] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 53.673977][ T39] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.692290][ T39] usb 5-1: config 0 descriptor?? [ 53.754829][ T2097] loop8: detected capacity change from 0 to 40427 [ 53.763151][ T2097] F2FS-fs (loop8): invalid crc value [ 53.770086][ T2097] F2FS-fs (loop8): Found nat_bits in checkpoint [ 53.815619][ T2097] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 53.850750][ T28] audit: type=1400 audit(1739979244.794:366): avc: denied { remount } for pid=2096 comm="syz.8.760" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 53.871297][ T299] arvo 0003:1E7D:30D4.000A: unknown main item tag 0x0 [ 53.878216][ T299] arvo 0003:1E7D:30D4.000A: unknown main item tag 0x0 [ 53.885274][ T299] arvo 0003:1E7D:30D4.000A: unknown main item tag 0x0 [ 53.892133][ T299] arvo 0003:1E7D:30D4.000A: unknown main item tag 0x0 [ 53.898833][ T299] arvo 0003:1E7D:30D4.000A: unknown main item tag 0x0 [ 53.905455][ T299] arvo 0003:1E7D:30D4.000A: unknown main item tag 0x0 [ 53.912257][ T299] arvo 0003:1E7D:30D4.000A: unknown main item tag 0x0 [ 53.919920][ T299] arvo 0003:1E7D:30D4.000A: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.7-1/input0 [ 53.971978][ T320] tipc: Disabling bearer [ 53.973726][ T28] audit: type=1400 audit(1739979244.914:367): avc: denied { read } for pid=2106 comm="syz.6.764" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 53.977020][ T320] tipc: Left network mode [ 54.073528][ T299] arvo 0003:1E7D:30D4.000A: couldn't init struct arvo_device [ 54.083942][ T299] arvo 0003:1E7D:30D4.000A: couldn't install keyboard [ 54.102045][ T39] plantronics 0003:047F:FFFF.000B: No inputs registered, leaving [ 54.103985][ T299] arvo: probe of 0003:1E7D:30D4.000A failed with error -71 [ 54.120223][ T39] plantronics 0003:047F:FFFF.000B: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 54.139456][ T299] usb 8-1: USB disconnect, device number 5 [ 54.271989][ T398] usb 10-1: Cannot set autoneg [ 54.276718][ T398] MOSCHIP usb-ethernet driver: probe of 10-1:0.0 failed with error -71 [ 54.291182][ T398] usb 10-1: USB disconnect, device number 4 [ 54.352951][ T2114] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.359874][ T2114] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.367022][ T2114] device bridge_slave_0 entered promiscuous mode [ 54.371580][ T299] usb 5-1: USB disconnect, device number 7 [ 54.374273][ T2114] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.385764][ T2114] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.393341][ T2114] device bridge_slave_1 entered promiscuous mode [ 54.446835][ T2114] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.453719][ T2114] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.460811][ T2114] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.467575][ T2114] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.493223][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.500910][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.508377][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.516511][ T320] device bridge_slave_1 left promiscuous mode [ 54.522589][ T320] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.530136][ T320] device bridge_slave_0 left promiscuous mode [ 54.536112][ T320] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.544014][ T320] device veth1_macvtap left promiscuous mode [ 54.549894][ T320] device veth0_vlan left promiscuous mode [ 54.621657][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.631316][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.638298][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.647038][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.658809][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.665689][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.680510][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.693754][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.708002][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 54.722106][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 54.731110][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 54.739153][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 54.747667][ T2114] device veth0_vlan entered promiscuous mode [ 54.761006][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 54.770600][ T2114] device veth1_macvtap entered promiscuous mode [ 54.781453][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 54.808540][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 54.821414][ T28] audit: type=1400 audit(1739979245.764:368): avc: denied { mounton } for pid=2114 comm="syz-executor" path="/root/syzkaller.OfplDl/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 54.892683][ T2132] loop9: detected capacity change from 0 to 512 [ 54.905385][ T28] audit: type=1400 audit(1739979245.844:369): avc: denied { ioctl } for pid=2131 comm="syz.0.766" path="socket:[24433]" dev="sockfs" ino=24433 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 54.968263][ T2132] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 54.980085][ T2132] ext4 filesystem being mounted at /42/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.016886][ T2132] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 55.048806][ T2132] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 31 with error 28 [ 55.067125][ T2132] EXT4-fs (loop9): This should not happen!! Data will be lost [ 55.067125][ T2132] [ 55.077000][ T2132] EXT4-fs (loop9): Total free blocks count 0 [ 55.088926][ T2132] EXT4-fs (loop9): Free/Dirty block details [ 55.094655][ T2132] EXT4-fs (loop9): free_blocks=65280 [ 55.100160][ T2132] EXT4-fs (loop9): dirty_blocks=31 [ 55.112495][ T2160] loop6: detected capacity change from 0 to 512 [ 55.118946][ T2132] EXT4-fs (loop9): Block reservation details [ 55.124795][ T2132] EXT4-fs (loop9): i_reserved_data_blocks=31 [ 55.148874][ T1534] EXT4-fs (loop9): unmounting filesystem. [ 55.189419][ T2160] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 55.203027][ T2160] ext4 filesystem being mounted at /160/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 55.230621][ T28] audit: type=1400 audit(1739979246.174:370): avc: denied { watch watch_reads } for pid=2171 comm="syz.9.787" path="/43/file1" dev="tmpfs" ino=241 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 55.258772][ T28] audit: type=1400 audit(1739979246.204:371): avc: denied { execute_no_trans } for pid=2171 comm="syz.9.787" path="/43/file1" dev="tmpfs" ino=241 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 55.283079][ T599] EXT4-fs (loop6): unmounting filesystem. [ 55.610767][ T28] audit: type=1400 audit(1739979246.554:372): avc: denied { shutdown } for pid=2228 comm="syz.4.814" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 55.656512][ T2234] futex_wake_op: syz.4.817 tries to shift op by -1; fix this program [ 55.901541][ T2259] loop4: detected capacity change from 0 to 256 [ 55.982737][ T2276] input: syz0 as /devices/virtual/input/input17 [ 56.160744][ T2302] netlink: 'syz.9.844': attribute type 4 has an invalid length. [ 56.210577][ T2304] netlink: 4 bytes leftover after parsing attributes in process `syz.9.848'. [ 56.465419][ T2333] loop4: detected capacity change from 0 to 1024 [ 56.482241][ T2333] EXT4-fs: Ignoring removed orlov option [ 56.498369][ T2333] EXT4-fs: Ignoring removed nomblk_io_submit option [ 56.508076][ T2333] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 56.537970][ T398] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 56.558966][ T2333] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 56.598317][ T293] EXT4-fs (loop4): unmounting filesystem. [ 56.707334][ T2325] loop6: detected capacity change from 0 to 40427 [ 56.728297][ T2325] F2FS-fs (loop6): invalid crc value [ 56.734001][ T398] usb 1-1: config 0 has an invalid interface number: 239 but max is 0 [ 56.744239][ T398] usb 1-1: config 0 has no interface number 0 [ 56.759251][ T398] usb 1-1: New USB device found, idVendor=6189, idProduct=182d, bcdDevice= 1.73 [ 56.769214][ T2325] F2FS-fs (loop6): Found nat_bits in checkpoint [ 56.791850][ T398] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 56.815148][ T398] usb 1-1: Product: syz [ 56.829106][ T398] usb 1-1: Manufacturer: syz [ 56.842365][ T398] usb 1-1: SerialNumber: syz [ 56.858220][ T398] usb 1-1: config 0 descriptor?? [ 56.882785][ T2325] F2FS-fs (loop6): Start checkpoint disabled! [ 56.903468][ T2325] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 57.025786][ T408] bio_check_eod: 1511 callbacks suppressed [ 57.025806][ T408] kworker/u4:5: attempt to access beyond end of device [ 57.025806][ T408] loop6: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 57.309996][ T2340] loop9: detected capacity change from 0 to 40427 [ 57.331112][ T2340] F2FS-fs (loop9): Invalid log_blocksize (268), supports only 12 [ 57.339005][ T2340] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 57.348208][ T2340] F2FS-fs (loop9): invalid crc value [ 57.355008][ T2340] F2FS-fs (loop9): Found nat_bits in checkpoint [ 57.408449][ T2340] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0 [ 57.415409][ T2340] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 57.491309][ T43] F2FS-fs (loop9): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 57.503437][ T43] F2FS-fs (loop9): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 57.777829][ T39] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 57.873731][ T398] asix 1-1:0.239 (unnamed net_device) (uninitialized): invalid hw address, using random [ 57.896445][ T28] audit: type=1326 audit(1739979248.834:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2364 comm="syz.9.867" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f35f478cde9 code=0x0 [ 57.987823][ T39] usb 7-1: Using ep0 maxpacket: 16 [ 58.010421][ T39] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1023 [ 58.020354][ T39] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1023 [ 58.030270][ T39] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 14 [ 58.044176][ T39] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 58.053205][ T39] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 58.061444][ T39] usb 7-1: SerialNumber: syz [ 58.076091][ T2348] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 58.084254][ T398] asix 1-1:0.239 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 58.088601][ T2348] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 58.101217][ T398] asix 1-1:0.239 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 58.113559][ T398] asix: probe of 1-1:0.239 failed with error -71 [ 58.124862][ T398] usb 1-1: USB disconnect, device number 2 [ 58.324111][ T39] cdc_ether: probe of 7-1:1.0 failed with error -71 [ 58.333432][ T39] usb 7-1: USB disconnect, device number 4 [ 58.437819][ T6] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 58.618952][ T6] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 58.629965][ T6] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 58.642038][ T6] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 58.651236][ T6] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.659090][ T6] usb 5-1: Product: syz [ 58.663043][ T6] usb 5-1: Manufacturer: syz [ 58.667468][ T6] usb 5-1: SerialNumber: syz [ 58.673588][ T2385] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 58.778935][ T2402] syz.9.882[2402] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 58.779015][ T2402] syz.9.882[2402] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 59.017822][ T299] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 59.061845][ T2423] loop6: detected capacity change from 0 to 256 [ 59.074251][ T2423] FAT-fs (loop6): Directory bread(block 64) failed [ 59.080678][ T2423] FAT-fs (loop6): Directory bread(block 65) failed [ 59.087139][ T2423] FAT-fs (loop6): Directory bread(block 66) failed [ 59.087919][ T60] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 59.093864][ T2423] FAT-fs (loop6): Directory bread(block 67) failed [ 59.107340][ T2423] FAT-fs (loop6): Directory bread(block 68) failed [ 59.113869][ T2423] FAT-fs (loop6): Directory bread(block 69) failed [ 59.120292][ T2423] FAT-fs (loop6): Directory bread(block 70) failed [ 59.126648][ T2423] FAT-fs (loop6): Directory bread(block 71) failed [ 59.133228][ T2423] FAT-fs (loop6): Directory bread(block 72) failed [ 59.139653][ T2423] FAT-fs (loop6): Directory bread(block 73) failed [ 59.160684][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 59.160700][ T28] audit: type=1400 audit(1739979250.104:375): avc: denied { mounton } for pid=2422 comm="syz.6.892" path="/189/bus" dev="loop6" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 59.212574][ T28] audit: type=1400 audit(1739979250.154:376): avc: denied { create } for pid=2427 comm="syz.6.894" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 59.231840][ T299] usb 8-1: Using ep0 maxpacket: 16 [ 59.238044][ T299] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 59.249252][ T299] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 59.258998][ T299] usb 8-1: config 0 interface 0 has no altsetting 0 [ 59.265488][ T299] usb 8-1: New USB device found, idVendor=060b, idProduct=430a, bcdDevice= 0.00 [ 59.268873][ T398] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 59.274577][ T299] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.292987][ T299] usb 8-1: config 0 descriptor?? [ 59.310123][ T60] usb 10-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 59.319201][ T60] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.338209][ T60] usb 10-1: config 0 descriptor?? [ 59.361511][ T28] audit: type=1400 audit(1739979250.304:377): avc: denied { unlink } for pid=2429 comm="syz.6.895" name="#9" dev="tmpfs" ino=1018 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 59.488923][ T398] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 59.499054][ T398] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 59.512402][ T398] usb 1-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 59.521344][ T398] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.541265][ T398] usb 1-1: config 0 descriptor?? [ 59.559326][ T398] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 59.674800][ T28] audit: type=1400 audit(1739979250.614:378): avc: denied { mounton } for pid=2441 comm="syz.6.900" path="/197/file0" dev="tmpfs" ino=1044 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 59.700468][ T299] hid (null): bogus close delimiter [ 59.705862][ T6] cdc_ncm 5-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 59.717845][ T6] cdc_ncm 5-1:1.0: setting rx_max = 16384 [ 59.730831][ T299] hid-generic 0003:060B:430A.000C: unknown main item tag 0x0 [ 59.738110][ T299] hid-generic 0003:060B:430A.000C: unknown main item tag 0x0 [ 59.745266][ T299] hid-generic 0003:060B:430A.000C: unknown main item tag 0x0 [ 59.753020][ T299] hid-generic 0003:060B:430A.000C: unknown main item tag 0x0 [ 59.760776][ T2421] netlink: 'syz.0.891': attribute type 34 has an invalid length. [ 59.768417][ T299] hid-generic 0003:060B:430A.000C: unknown main item tag 0x0 [ 59.775591][ T299] hid-generic 0003:060B:430A.000C: unknown main item tag 0x0 [ 59.785446][ T299] hid-generic 0003:060B:430A.000C: unknown main item tag 0x0 [ 59.792925][ T299] hid-generic 0003:060B:430A.000C: unknown main item tag 0x0 [ 59.800364][ T299] hid-generic 0003:060B:430A.000C: unknown main item tag 0x0 [ 59.807596][ T299] hid-generic 0003:060B:430A.000C: unknown main item tag 0x0 [ 59.815113][ T299] hid-generic 0003:060B:430A.000C: unknown main item tag 0x0 [ 59.822704][ T299] hid-generic 0003:060B:430A.000C: unknown main item tag 0x0 [ 59.830364][ T299] hid-generic 0003:060B:430A.000C: unknown main item tag 0x0 [ 59.837602][ T299] hid-generic 0003:060B:430A.000C: unknown main item tag 0x0 [ 59.844829][ T299] hid-generic 0003:060B:430A.000C: unknown main item tag 0x0 [ 59.852136][ T299] hid-generic 0003:060B:430A.000C: unknown main item tag 0x0 [ 59.859328][ T299] hid-generic 0003:060B:430A.000C: unknown main item tag 0x0 [ 59.866497][ T299] hid-generic 0003:060B:430A.000C: unknown main item tag 0x0 [ 59.873747][ T299] hid-generic 0003:060B:430A.000C: unknown main item tag 0x0 [ 59.880911][ T299] hid-generic 0003:060B:430A.000C: unknown main item tag 0x0 [ 59.888145][ T299] hid-generic 0003:060B:430A.000C: unknown main item tag 0x0 [ 59.895319][ T299] hid-generic 0003:060B:430A.000C: unknown main item tag 0x0 [ 59.903660][ T299] hid-generic 0003:060B:430A.000C: unknown main item tag 0x0 [ 59.914412][ T6] cdc_ncm 5-1:1.0 eth1: register 'cdc_ncm' at usb-dummy_hcd.4-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 59.926161][ T299] hid-generic 0003:060B:430A.000C: unknown main item tag 0x0 [ 59.934458][ T6] usb 5-1: USB disconnect, device number 8 [ 59.940446][ T6] cdc_ncm 5-1:1.0 eth1: unregister 'cdc_ncm' usb-dummy_hcd.4-1, CDC NCM (NO ZLP) [ 59.949462][ T299] hid-generic 0003:060B:430A.000C: unknown main item tag 0x0 [ 59.956622][ T299] hid-generic 0003:060B:430A.000C: bogus close delimiter [ 59.965188][ T299] hid-generic 0003:060B:430A.000C: item 0 1 2 10 parsing failed [ 59.972902][ T299] hid-generic: probe of 0003:060B:430A.000C failed with error -22 [ 59.987717][ T299] usb 8-1: USB disconnect, device number 6 [ 60.001372][ T323] ================================================================== [ 60.009257][ T323] BUG: KASAN: use-after-free in __list_del_entry_valid+0xa6/0x130 [ 60.016892][ T323] Read of size 8 at addr ffff888113106cf0 by task kworker/0:3/323 [ 60.024527][ T323] [ 60.026711][ T323] CPU: 0 PID: 323 Comm: kworker/0:3 Not tainted 6.1.124-syzkaller-00016-ga5f88b652947 #0 [ 60.036335][ T323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 60.046234][ T323] Workqueue: events vmstat_shepherd [ 60.051268][ T323] Call Trace: [ 60.054395][ T323] [ 60.057164][ T323] dump_stack_lvl+0x151/0x1b7 [ 60.061677][ T323] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 60.066969][ T323] ? _printk+0xd1/0x111 [ 60.070968][ T323] ? __virt_addr_valid+0x242/0x2f0 [ 60.075914][ T323] print_report+0x158/0x4e0 [ 60.080252][ T323] ? __virt_addr_valid+0x242/0x2f0 [ 60.085212][ T323] ? kasan_complete_mode_report_info+0x90/0x1b0 [ 60.091274][ T323] ? __list_del_entry_valid+0xa6/0x130 [ 60.096572][ T323] kasan_report+0x13c/0x170 [ 60.100909][ T323] ? __list_del_entry_valid+0xa6/0x130 [ 60.106206][ T323] __asan_report_load8_noabort+0x14/0x20 [ 60.111673][ T323] __list_del_entry_valid+0xa6/0x130 [ 60.116792][ T323] process_one_work+0x4d7/0xcb0 [ 60.121476][ T323] worker_thread+0xa60/0x1260 [ 60.125999][ T323] kthread+0x26d/0x300 [ 60.129902][ T323] ? worker_clr_flags+0x1a0/0x1a0 [ 60.134757][ T323] ? kthread_blkcg+0xd0/0xd0 [ 60.139291][ T323] ret_from_fork+0x1f/0x30 [ 60.143535][ T323] [ 60.146398][ T323] [ 60.148569][ T323] Allocated by task 6: [ 60.152478][ T323] kasan_set_track+0x4b/0x70 [ 60.156901][ T323] kasan_save_alloc_info+0x1f/0x30 [ 60.161849][ T323] __kasan_kmalloc+0x9c/0xb0 [ 60.166274][ T323] __kmalloc_node+0xb4/0x1e0 [ 60.170720][ T323] kvmalloc_node+0x221/0x640 [ 60.175130][ T323] alloc_netdev_mqs+0x8c/0xf90 [ 60.179730][ T323] alloc_etherdev_mqs+0x36/0x40 [ 60.184411][ T323] usbnet_probe+0x213/0x28a0 [ 60.188839][ T323] usb_probe_interface+0x5b6/0xa90 [ 60.193786][ T323] really_probe+0x2b8/0x920 [ 60.198123][ T323] __driver_probe_device+0x1a0/0x310 [ 60.203245][ T323] driver_probe_device+0x54/0x3d0 [ 60.208106][ T323] __device_attach_driver+0x2e3/0x490 [ 60.213315][ T323] bus_for_each_drv+0x183/0x200 [ 60.217998][ T323] __device_attach+0x312/0x510 [ 60.222599][ T323] device_initial_probe+0x1a/0x20 [ 60.227460][ T323] bus_probe_device+0xbe/0x1e0 [ 60.232060][ T323] device_add+0xb60/0xf10 [ 60.236226][ T323] usb_set_configuration+0x190f/0x1e80 [ 60.241519][ T323] usb_generic_driver_probe+0x8b/0x150 [ 60.246816][ T323] usb_probe_device+0x144/0x260 [ 60.251501][ T323] really_probe+0x2b8/0x920 [ 60.255840][ T323] __driver_probe_device+0x1a0/0x310 [ 60.260964][ T323] driver_probe_device+0x54/0x3d0 [ 60.265824][ T323] __device_attach_driver+0x2e3/0x490 [ 60.271030][ T323] bus_for_each_drv+0x183/0x200 [ 60.275719][ T323] __device_attach+0x312/0x510 [ 60.280324][ T323] device_initial_probe+0x1a/0x20 [ 60.285178][ T323] bus_probe_device+0xbe/0x1e0 [ 60.289781][ T323] device_add+0xb60/0xf10 [ 60.293972][ T323] usb_new_device+0xf2f/0x1820 [ 60.298549][ T323] hub_event+0x2db1/0x4830 [ 60.302825][ T323] process_one_work+0x73d/0xcb0 [ 60.307486][ T323] worker_thread+0xa60/0x1260 [ 60.311997][ T323] kthread+0x26d/0x300 [ 60.315903][ T323] ret_from_fork+0x1f/0x30 [ 60.320157][ T323] [ 60.322322][ T323] Freed by task 6: [ 60.325882][ T323] kasan_set_track+0x4b/0x70 [ 60.330311][ T323] kasan_save_free_info+0x2b/0x40 [ 60.335170][ T323] ____kasan_slab_free+0x131/0x180 [ 60.340117][ T323] __kasan_slab_free+0x11/0x20 [ 60.344718][ T323] __kmem_cache_free+0x21d/0x410 [ 60.349491][ T323] kfree+0x7a/0xf0 [ 60.353049][ T323] kvfree+0x35/0x40 [ 60.356693][ T323] netdev_freemem+0x3f/0x60 [ 60.361037][ T323] netdev_release+0x7f/0xb0 [ 60.365375][ T323] device_release+0x95/0x1c0 [ 60.369813][ T323] kobject_put+0x178/0x260 [ 60.374060][ T323] put_device+0x1f/0x30 [ 60.378048][ T323] free_netdev+0x393/0x480 [ 60.382300][ T323] usbnet_disconnect+0x25f/0x3b0 [ 60.387073][ T323] usb_unbind_interface+0x1fa/0x8c0 [ 60.392108][ T323] device_release_driver_internal+0x53e/0x870 [ 60.398009][ T323] device_release_driver+0x19/0x20 [ 60.402962][ T323] bus_remove_device+0x2fa/0x360 [ 60.407732][ T323] device_del+0x663/0xe90 [ 60.411893][ T323] usb_disable_device+0x380/0x720 [ 60.416755][ T323] usb_disconnect+0x32a/0x890 [ 60.421269][ T323] hub_event+0x1ed8/0x4830 [ 60.425521][ T323] process_one_work+0x73d/0xcb0 [ 60.430209][ T323] worker_thread+0xd71/0x1260 [ 60.434721][ T323] kthread+0x26d/0x300 [ 60.438625][ T323] ret_from_fork+0x1f/0x30 [ 60.442882][ T323] [ 60.445050][ T323] Last potentially related work creation: [ 60.450606][ T323] kasan_save_stack+0x3b/0x60 [ 60.455118][ T323] __kasan_record_aux_stack+0xb4/0xc0 [ 60.460324][ T323] kasan_record_aux_stack_noalloc+0xb/0x10 [ 60.465967][ T323] insert_work+0x56/0x310 [ 60.470136][ T323] __queue_work+0x9b6/0xd70 [ 60.474472][ T323] queue_work_on+0x105/0x170 [ 60.478902][ T323] usbnet_link_change+0x182/0x1a0 [ 60.483760][ T323] usbnet_probe+0x1e1e/0x28a0 [ 60.488272][ T323] usb_probe_interface+0x5b6/0xa90 [ 60.493222][ T323] really_probe+0x2b8/0x920 [ 60.497560][ T323] __driver_probe_device+0x1a0/0x310 [ 60.502681][ T323] driver_probe_device+0x54/0x3d0 [ 60.507545][ T323] __device_attach_driver+0x2e3/0x490 [ 60.512752][ T323] bus_for_each_drv+0x183/0x200 [ 60.517437][ T323] __device_attach+0x312/0x510 [ 60.522033][ T323] device_initial_probe+0x1a/0x20 [ 60.526918][ T323] bus_probe_device+0xbe/0x1e0 [ 60.531496][ T323] device_add+0xb60/0xf10 [ 60.535661][ T323] usb_set_configuration+0x190f/0x1e80 [ 60.540960][ T323] usb_generic_driver_probe+0x8b/0x150 [ 60.546251][ T323] usb_probe_device+0x144/0x260 [ 60.550940][ T323] really_probe+0x2b8/0x920 [ 60.555404][ T323] __driver_probe_device+0x1a0/0x310 [ 60.560521][ T323] driver_probe_device+0x54/0x3d0 [ 60.565382][ T323] __device_attach_driver+0x2e3/0x490 [ 60.570588][ T323] bus_for_each_drv+0x183/0x200 [ 60.575275][ T323] __device_attach+0x312/0x510 [ 60.579873][ T323] device_initial_probe+0x1a/0x20 [ 60.584733][ T323] bus_probe_device+0xbe/0x1e0 [ 60.589335][ T323] device_add+0xb60/0xf10 [ 60.593503][ T323] usb_new_device+0xf2f/0x1820 [ 60.598103][ T323] hub_event+0x2db1/0x4830 [ 60.602356][ T323] process_one_work+0x73d/0xcb0 [ 60.607040][ T323] worker_thread+0xa60/0x1260 [ 60.611555][ T323] kthread+0x26d/0x300 [ 60.615459][ T323] ret_from_fork+0x1f/0x30 [ 60.619805][ T323] [ 60.621968][ T323] The buggy address belongs to the object at ffff888113106000 [ 60.621968][ T323] which belongs to the cache kmalloc-4k of size 4096 [ 60.635854][ T323] The buggy address is located 3312 bytes inside of [ 60.635854][ T323] 4096-byte region [ffff888113106000, ffff888113107000) [ 60.649135][ T323] [ 60.651307][ T323] The buggy address belongs to the physical page: [ 60.657565][ T323] page:ffffea00044c4000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x113100 [ 60.667723][ T323] head:ffffea00044c4000 order:3 compound_mapcount:0 compound_pincount:0 [ 60.675868][ T323] flags: 0x4000000000010200(slab|head|zone=1) [ 60.681781][ T323] raw: 4000000000010200 ffffea0004360600 dead000000000002 ffff888100043380 [ 60.690280][ T323] raw: 0000000000000000 0000000000040004 00000001ffffffff 0000000000000000 [ 60.698694][ T323] page dumped because: kasan: bad access detected [ 60.704949][ T323] page_owner tracks the page as allocated [ 60.710497][ T323] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 103, tgid 103 (udevd), ts 24698808606, free_ts 23758561120 [ 60.732369][ T323] post_alloc_hook+0x213/0x220 [ 60.736968][ T323] prep_new_page+0x1b/0x110 [ 60.741309][ T323] get_page_from_freelist+0x3a98/0x3b10 [ 60.746690][ T323] __alloc_pages+0x234/0x610 [ 60.751117][ T323] alloc_slab_page+0x6c/0xf0 [ 60.755544][ T323] new_slab+0x90/0x3e0 [ 60.759448][ T323] ___slab_alloc+0x6f9/0xb80 [ 60.763875][ T323] __slab_alloc+0x5d/0xa0 [ 60.768040][ T323] __kmem_cache_alloc_node+0x207/0x2a0 [ 60.773335][ T323] __kmalloc_node+0xa3/0x1e0 [ 60.777763][ T323] kvmalloc_node+0x221/0x640 [ 60.782187][ T323] seq_read_iter+0x1ff/0xd00 [ 60.786616][ T323] kernfs_fop_read_iter+0x145/0x470 [ 60.791649][ T323] vfs_read+0x801/0xae0 [ 60.795641][ T323] ksys_read+0x199/0x2c0 [ 60.799720][ T323] __x64_sys_read+0x7b/0x90 [ 60.804063][ T323] page last free stack trace: [ 60.808573][ T323] free_unref_page_prepare+0x9f1/0xa00 [ 60.813868][ T323] free_unref_page+0xb2/0x5c0 [ 60.818380][ T323] __free_pages+0x61/0xf0 [ 60.822548][ T323] __free_slab+0xce/0x1a0 [ 60.826714][ T323] __unfreeze_partials+0x165/0x1a0 [ 60.831660][ T323] put_cpu_partial+0xa9/0x100 [ 60.836174][ T323] __slab_free+0x1c8/0x280 [ 60.840435][ T323] ___cache_free+0xc6/0xd0 [ 60.844681][ T323] qlist_free_all+0xc5/0x140 [ 60.849105][ T323] kasan_quarantine_reduce+0x15a/0x180 [ 60.854401][ T323] __kasan_slab_alloc+0x24/0x80 [ 60.859194][ T323] slab_post_alloc_hook+0x53/0x2c0 [ 60.864141][ T323] kmem_cache_alloc_node+0x188/0x330 [ 60.869263][ T323] __alloc_skb+0xcc/0x2d0 [ 60.873419][ T323] alloc_skb_with_frags+0xa6/0x680 [ 60.878370][ T323] sock_alloc_send_pskb+0x915/0xa50 [ 60.883407][ T323] [ 60.885571][ T323] Memory state around the buggy address: [ 60.891043][ T323] ffff888113106b80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 60.899010][ T323] ffff888113106c00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 60.906845][ T323] >ffff888113106c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 60.914742][ T323] ^ [ 60.922289][ T323] ffff888113106d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 60.930206][ T323] ffff888113106d80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 60.938078][ T323] ================================================================== [ 60.945990][ T323] Disabling lock debugging due to kernel taint [ 60.958121][ T19] usb 1-1: USB disconnect, device number 3 [ 61.109045][ T28] audit: type=1400 audit(1739979252.054:379): avc: denied { read } for pid=141 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 61.820805][ T299] usb 10-1: USB disconnect, device number 5