last executing test programs: 15.237019855s ago: executing program 1 (id=489): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x3, 0xff) socket(0x10, 0x0, 0xfffffffe) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xb, 0x400000000008b}, 0x0) r1 = fsopen(&(0x7f0000000040)='tmpfs\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r1, 0x2, &(0x7f0000000080)='seclabel', &(0x7f00000000c0)='<', 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) flock(0xffffffffffffffff, 0x37b8297d3fbaacb3) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x5) sched_setscheduler(r2, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0xe1b17000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_netfilter(0x10, 0x3, 0xc) connect$unix(r3, &(0x7f0000000500)=@abs={0x0, 0x0, 0x80}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000580), 0x651, 0x0) r5 = io_uring_setup(0x59d0, &(0x7f0000000100)={0x0, 0xf7fffffa, 0x2, 0x0, 0xe0}) io_uring_enter(r5, 0x0, 0x0, 0xf, &(0x7f0000000400), 0x18) 14.384524061s ago: executing program 1 (id=500): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x200010, &(0x7f0000000180)={[{@iocharset={'iocharset', 0x3d, 'iso8859-3'}}, {@uni_xlate}, {@shortname_winnt}, {@iocharset={'iocharset', 0x3d, 'cp855'}}, {@shortname_mixed}, {@utf8}, {@uni_xlateno}, {@shortname_win95}, {@iocharset={'iocharset', 0x3d, 'macceltic'}}, {@fat=@codepage={'codepage', 0x3d, '775'}}, {@fat=@umask={'umask', 0x3d, 0xed82}}, {@utf8no}, {@uni_xlate}, {@shortname_lower}, {@iocharset={'iocharset', 0x3d, 'cp860'}}, {@utf8no}]}, 0x3, 0x288, &(0x7f0000000280)="$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") creat(&(0x7f0000000540)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./proc\x00', 0x1fd) mount(0x0, &(0x7f0000000600)='./proc\x00', &(0x7f0000000640)='proc\x00', 0x0, 0x0) statx(0xffffffffffffffff, 0x0, 0x2000, 0x80, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f00000006c0)='27', 0x2) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000740)=0x4) ioctl$PPPIOCSMAXCID(r1, 0x40047451, 0x0) ioctl$PPPIOCSMAXCID(r1, 0x40047451, 0x0) openat(0xffffffffffffff9c, &(0x7f00000009c0)='./tracing/events/sched/filter\x00', 0x1, 0x0) r2 = syz_open_procfs(0x0, 0x0) getdents(r2, &(0x7f0000001000)=""/4085, 0xff5) 13.80135958s ago: executing program 1 (id=505): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000a40)='./cgroup.cpu/memory.force_empty\x00', 0x2, 0x4) openat$loop_ctrl(0xffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000a80)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000ac0)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000b00)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000b40)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000b80)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000bc0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000c40), 0x318, 0x0) recvmmsg(r2, &(0x7f0000000c80), 0x10106, 0x2, 0x0) syz_mount_image$erofs(&(0x7f0000000cc0), &(0x7f0000000d00)='./file0\x00', 0x18000c6, &(0x7f0000000d40)=ANY=[@ANYRES16=0x0, @ANYRES16], 0x0, 0x17d, &(0x7f0000000d80)="$eJzsmLFP+kAUx7/vyg/yMy6uLg4SxcHSFjUuxLA5mogaNwlUghYx0EGYdPH/cHZwdvOPMM7qYFwY3Uxqej3oQQR10MT4PsPj+7h313evyXcoGIb5szw+vNyvFe+EAWASaaTU/89GXCO0+tfb83Jraj1/OfeUv041robPIwBB8PnnJwDcFAz4Kg+Cwd1p9VuE6OstCCwovQOCqfQeBLaVdkHYVfpA042w3jT3a55rlhteJRRWGOwwOGHIDffXPSNUtP5IW2+1O4clz3Ob3yg+ml+3IJDX+tPfV282ljY/GwK20jkQNpVeRao3m2gk2v2nE/H5xg/fnwULFr9NxP4UXBDmNX9KaP6R9evH2Va7s1irl6pu1T1ynNyKtWRZy05WGlEUx/jff+lPE9r5/0bUJimJk5LvN+0o9nMniu85rpD+J5CZjfLQ+5Mju4nWSe0jqTLGmHKGYRiGYRiGYRiGYRiGYZgvMAOSX0EldIo4GcDZkNVvAQAA///an3MA") mkdir(&(0x7f0000000f00)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000f40)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000f80)='./bus\x00', &(0x7f0000000fc0), 0x0, &(0x7f0000001000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000001040)='./bus\x00') renameat2(0xffffffffffffff9c, &(0x7f0000001080)='./file0/file0\x00', 0xffffffffffffff9c, &(0x7f00000010c0)='./file1\x00', 0x2) mount$bind(0x0, 0x0, 0x0, 0x21, 0x0) recvmmsg(r0, &(0x7f0000003600)=[{{&(0x7f00000004c0)=@can, 0x80, &(0x7f00000022c0)=[{&(0x7f0000000540)=""/58, 0x3a}, {&(0x7f0000000c40)=""/66, 0x42}, {&(0x7f0000001140)=""/226, 0xe2}, {&(0x7f0000001240)=""/49, 0x31}, {&(0x7f0000001280)}, {&(0x7f00000012c0)=""/4096, 0x1000}], 0x6}, 0x6}, {{&(0x7f0000002340)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000003700)=[{&(0x7f0000003780)=""/4096, 0x1000}, {&(0x7f00000033c0)=""/227, 0xe3}, {&(0x7f00000034c0)=""/36, 0x24}, {&(0x7f0000003500)=""/187, 0xbb}, {0x0}, {&(0x7f0000003680)=""/107, 0x6b}], 0x6}, 0xa}], 0x2, 0x2000000022, &(0x7f0000000440)={0x77359400}) 12.921199989s ago: executing program 1 (id=510): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x4, 0x4, 0x4, 0x1740, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x8, &(0x7f0000000500)=@raw=[@map_fd={0x18, 0x2, 0x1, 0x0, r0}, @generic={0xb7, 0x3, 0x0, 0x0, 0xfffffff2}, @generic={0xbf, 0x4, 0xa}, @generic={0x7, 0x4, 0x0, 0x0, 0xfffffff4}, @generic={0xb7, 0x5}, @generic={0x85, 0x0, 0x0, 0x0, 0x19}, @generic={0x95}], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$vfat(&(0x7f0000002e00), &(0x7f0000002e40)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2008404, &(0x7f0000002f40)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYBLOB="999c07c03c5bc6a3d07b90faae21d196274f93a6593a9830472d5633665f2f51cfb24aaad481c74e142cd734ec6fd04935a94af71c756dbd6f5e2f39b2c4c30725d103d40d7e65129bb928ef73849dae618e438695e0a9078605ba418298145bf2fec11b0d16763288e7ecfe663aa5ff450d1e46d251160109c0378e04fe2629890c28366a6489e706ecf23195dc7f19e03fad", @ANYRESHEX, @ANYRESDEC, @ANYBLOB="c5ce1b9733c91520022860834995bd440de70a56f9b17205184d3be668bd36e2d9b2c62fb43e3a2a12e69d2eea113cf5ab1f668b2855d9a2bb426304b9bbf1debf4d593fe5"], 0x41, 0x2bd, &(0x7f00000030c0)="$eJzs3LFrE2EYx/HHpDZpSpsIIiioD7roEto4OGqQFsSAUpuiDsLVXjTkTMpdqETEZhFX/47i6Cao/0AXcXF3K4Lg0kE86d2lvbRpm7ZJk9rvB8r75p73x71NruVJILfy4N3zUsFJF4yqROIqEZG6rIqk1maBE8EY8eaDElaXq8O/v5+///DRnWwuNzGlOpmdvpZR1dGLn168en/pS3V45sPox5gspx6v/Mr8WB5cPrvyd/pZ0dGio+VKVQ2drVSqxqxl6lzRKaVV71mm4ZhaLDum3VQvWJX5+Zoa5bmRxLxtOo4a5ZqWzJpWK1q1a2o8NYplTafTOpKQYywiMtDGsvzS1JSR3bbsRju6KXTdUKuDtp2tty7mlw5hTwAAoM/s3P/7vf72/X9uxh/30v+f2b3/F6H/75J606Nd+n8cVdfDV79tZ41E8PfbjP4fAAAAAAAAAAAAAAAAAAAAAICjYNV1k67rJtfG4JD3OCYicRFxg3qPt4kuCb/+buhnl9f/Ro+2iw4LfXEvLmK9Xcgv5P3Rr2cLUhRLTBmTpPzxroeAP5+8nZsYU09KPluLQX5xIR+VWCPfkGqVv3Bq3M9rc/6kJMLnz0hSTrc+f6ZlflCuXA7l05KUr0+kIpbMedf1Rv71uOqtu7lN+SFvHQAAAAAA/4O0rtvy/t2rewvisrXu50OfD7iuu7jT5wOb3l8PyLl2blEJAAAAAAAOzKm9LBmWZdr7mMRE5ADxzk9cV6T324hKfzwbzZObItIH2zisSVxE/CO6n/jP9XhbKbeNNQMi0vOnZQ+TXv9nAgAAANBpG03/HkLf3nRxRwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHD/t3g+ssX5LqVHYIR46XfTQf0EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgj/wLAAD//7KDHOI=") prlimit64(0x0, 0xe, &(0x7f0000003380)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000033c0)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000003400)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000003440)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000003480)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000003500), 0x651, 0x0) recvmmsg(r3, &(0x7f0000003540), 0x10106, 0x2, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000003580)={0x0, 0x0, &(0x7f00000035c0)={&(0x7f0000003600)=ANY=[@ANYBLOB], 0x68}, 0x1, 0x0, 0x0, 0x4000145}, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000003640)={0x7, 0x0, &(0x7f0000003680)={&(0x7f00000036c0)=ANY=[@ANYBLOB="020100090a000000007fffffff0000000200100000e9000000e9000000000000030005000000000002000000ac1414000000000000000000030006000000000002"], 0x50}}, 0x0) sendmmsg(r5, &(0x7f0000003740), 0x40000000000007b, 0x4004) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000580)={r1, r0}, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x3, 0x6) memfd_create(&(0x7f00000000c0)='^(}%-$}\x11\x00', 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000002640)=@raw={'raw\x00', 0x8, 0x3, 0x3c8, 0x0, 0xa, 0x148, 0x0, 0x10, 0x330, 0x2a8, 0x2a8, 0x330, 0x2a8, 0x3, 0x0, {[{{@ip={@rand_addr, @multicast1, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x70, 0xe0, 0x0, {0x200003ae, 0x7f00}}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f2f7b90ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc0d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @local, 0x0, 0x0, 'ip6erspan0\x00', 'veth0_to_team\x00'}, 0x0, 0x1f0, 0x250, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'wg2\x00', {0xffffffffffffffff, 0xff, 0x0, 0x0, 0x0, 0x7fff, 0x200}}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @multicast, 0x2, 0x7, [0x0, 0x10, 0x1b, 0x2b, 0x37, 0x2e, 0x2b, 0x18, 0x2b, 0x34, 0xd, 0x0, 0x3d, 0x1, 0x32, 0x37], 0x1, 0x6, 0x1570000000000}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x428) r7 = io_uring_setup(0x1dd, &(0x7f0000000100)={0x0, 0x1fffff, 0x2, 0x100003, 0x140}) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r7, 0xd, &(0x7f0000000180)={0x7, 0x0, 0x0, 0x0}, 0x20) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r7, 0xe, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)=[{0x0, 0xffffffff00000005}], &(0x7f0000000240)=[0xffffffff, 0x7fffffff, 0x2, 0x6, 0x101, 0x1], 0x7}, 0x20) r8 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x1e7d, 0x2d50, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x50, 0x0, "", [{{0x9, 0x4, 0x0, 0x5, 0x3, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x9, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x0, 0x15, 0x87}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r8, 0x0, 0x0) syz_usb_control_io$hid(r8, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00221800000005", @ANYRES32], 0x0}, 0x0) syz_usb_control_io$hid(r8, &(0x7f0000002b40)={0x24, &(0x7f0000000340)={0x20, 0x23, 0x6c, {0x6c, 0x4, "b46dac3421d6046dea7f39728a9393ce45e5f7a0c5bd35ab9405019d45f8fc1ac683f5a08c7f3a85ad2e73cf3919f58474fea3c311257e45ec8517b23e8881cee74e2e41fb3e0df2404134b07d47c8135e306f3f038ae438473d013a5633acc6e821113b8c79a0186773"}}, &(0x7f0000002a80)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x40f}}, &(0x7f0000000000)=ANY=[@ANYBLOB="0049be6522050000002ede89c127"], &(0x7f0000002b00)={0x0, 0x21, 0x9, {0x9, 0x21, 0x800, 0xd, 0x1, {0x22, 0xb55}}}}, &(0x7f0000002dc0)={0x2c, &(0x7f0000002b80)={0x20, 0xf, 0x56, "2bebd30151019bb87e7c46105b5fb8c93a2775c3f966ccba440fe8a2a114e8683c14ad535ec62c198b0c28fa8d5cb6b51f294e7ca51b597e7e977dd65c8f237945af21c9c2670deae1f15bd2e2b22edc823abc8956f6"}, &(0x7f0000002c00)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000002c40)={0x0, 0x8, 0x1, 0xfc}, &(0x7f0000002c80)={0x20, 0x1, 0xbb, "e48c995ce3fc4318fd8e2e0ac4d2c70876b09dc59e9dab132b09d20c4452278a7fd1dde89ebd398626091f36a3e3ad84e36ec6ff7944117b1243fe030b8897580a4c32a3cb2320e01c7d2c1b25cea6d78acdfcd95d508b497978f13365dbd9a5e101ee572529151f2e0ed9dc5ac7870954f61e763787c00447fce4110322244fc1b863c6221ef47bfae3ce780844c729aa9fec1620854e70dd1bd1d4b5b97f273f38f8b427c8f8e594462b5e61aaa4f774e8a1ef034579e33dedc6"}, &(0x7f0000002d80)={0x20, 0x3, 0x1, 0x8}}) read$FUSE(0xffffffffffffffff, &(0x7f00000005c0)={0x2020}, 0x2020) 9.785182905s ago: executing program 1 (id=531): mmap(&(0x7f0000b23000/0x1000)=nil, 0x1000, 0xb, 0x31, 0xffffffffffffffff, 0x4b0e1000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) write$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000040)={'full'}, 0xfffffdef) remap_file_pages(&(0x7f00006ca000/0x4000)=nil, 0x4000, 0x0, 0x3, 0x20000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x60280, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000480)={'bridge0\x00'}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x25, 0x55bf, &(0x7f00000005c0)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000005b80)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000005bc0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) 9.670819186s ago: executing program 1 (id=533): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24048814}, 0x20008090) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) connect$unix(r2, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r2, &(0x7f0000000380), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0x100000000e2) bind$inet6(0xffffffffffffffff, &(0x7f0000000400)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x2) getdents64(r3, &(0x7f0000000540)=""/46, 0x2e) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0xe, 0x4, 0x4, 0x3}, 0x50) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)={0x2, 0x4, 0x8, 0x1, 0x80, r4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x18, 0x1c, &(0x7f0000000740)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0x6, 0x9, 0x0, 0x0, 0x3}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0x6, 0x0}, {0x18, 0x9, 0x2, 0x0, r5}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x6, 0x1, 0x5, 0x2}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0xd, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 9.613656082s ago: executing program 32 (id=533): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24048814}, 0x20008090) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) connect$unix(r2, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r2, &(0x7f0000000380), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0x100000000e2) bind$inet6(0xffffffffffffffff, &(0x7f0000000400)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x2) getdents64(r3, &(0x7f0000000540)=""/46, 0x2e) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0xe, 0x4, 0x4, 0x3}, 0x50) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)={0x2, 0x4, 0x8, 0x1, 0x80, r4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x18, 0x1c, &(0x7f0000000740)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0x6, 0x9, 0x0, 0x0, 0x3}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0x6, 0x0}, {0x18, 0x9, 0x2, 0x0, r5}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x6, 0x1, 0x5, 0x2}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0xd, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 7.402719344s ago: executing program 5 (id=549): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x1c1) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x48000, 0x0) read$FUSE(r0, &(0x7f0000000c80)={0x2020}, 0x2020) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x80, &(0x7f0000000b00)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000440)={0x1f, 0xffff, 0x3}, 0x6) write(r2, &(0x7f0000000480)="4a00ffff11003ee0b4fdddd685986a49e00588f1ba6f01", 0x17) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) umount2(&(0x7f00000003c0)='./file0\x00', 0xb) write$UHID_CREATE2(r3, &(0x7f00000000c0)={0xb, {'syz0\x00', 'syz0\x00', 'syz0\x00', 0x1d, 0x0, 0x56a, 0x3f, 0x0, 0x0, "05010905a10105091901290a150025017501950a8102950175068103c0"}}, 0x135) nanosleep(&(0x7f0000000200)={0x0, 0x5f5e100}, 0x0) write$UHID_INPUT2(r3, &(0x7f0000000240)={0xc, {0x1, "12"}}, 0x7) statfs(&(0x7f0000000b80)='./file0\x00', 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000bc0)={0x1, &(0x7f0000000c00)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) getpid() mknod$loop(&(0x7f0000000000)='./file0\x00', 0x6000, 0x0) ioctl$TCSETSW(0xffffffffffffffff, 0x4c08, 0x0) setns(0xffffffffffffffff, 0x24020000) umount2(&(0x7f0000000400)='./file0\x00', 0x3) close_range(r1, 0xffffffffffffffff, 0x0) 7.310018444s ago: executing program 5 (id=551): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x11182ba4e1422672, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @multicast1}, {0x1, @local}, 0x4a, {0x2, 0x0, @multicast1}}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40002123, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)="290000001e00190f00003fffffffda060200000000e80001dd0008040d000900250000000005000000", 0x29}], 0x1) r2 = socket$inet(0x2, 0x1, 0x0) unshare(0x22020400) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1c0) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000240)={{}, {0x1, 0x1}, [], {0x4, 0x2}, [], {0x10, 0x2}, {0x20, 0x2}}, 0x24, 0x1) listxattr(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)=""/7, 0x7) r4 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_JOIN_FILTERS(r4, 0x65, 0x6, &(0x7f0000000340)=0x1, 0x4) syz_mount_image$exfat(&(0x7f0000000380), &(0x7f00000003c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x1c040, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x1, 0x1533, &(0x7f0000001f40)="$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") r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000003480)='.\x00', 0x0, 0x0) lseek(r5, 0x2, 0x0) bind$inet(r2, &(0x7f00000034c0)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007f9, &(0x7f0000003500)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) r6 = syz_open_procfs(0x0, &(0x7f0000003540)='net/nf_conntrack\x00') lseek(r6, 0x101, 0x1) ioctl$sock_inet_tcp_SIOCOUTQ(r6, 0x5411, &(0x7f0000003580)) r7 = socket$netlink(0x10, 0x3, 0x0) writev(r7, &(0x7f00000035c0)=[{&(0x7f0000003600)="390000001300090468fe0700000000000000ff3f08000000480100100000000019002b000a0001000500000000000072080003000500000000", 0x39}], 0x1) sendto$inet(r2, &(0x7f0000003640)="02", 0x1, 0x14, 0x0, 0x0) shutdown(r2, 0x1) pipe2(0x0, 0x0) splice(r2, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x28, 0x0, 0x100, 0x70bd25, 0x25dfdbff, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x40) 7.038869401s ago: executing program 5 (id=553): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x3, 0xff) socket(0x10, 0x0, 0xfffffffe) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xb, 0x400000000008b}, 0x0) r1 = fsopen(&(0x7f0000000040)='tmpfs\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r1, 0x2, &(0x7f0000000080)='seclabel', &(0x7f00000000c0)='<', 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) flock(0xffffffffffffffff, 0x37b8297d3fbaacb3) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x5) sched_setscheduler(r2, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0xe1b17000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r5, 0x0, 0x20000080) connect$unix(r3, &(0x7f0000000500)=@abs={0x0, 0x0, 0x80}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000580), 0x651, 0x0) recvmmsg(r3, &(0x7f00000005c0), 0x4000087, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000600)=0x80000000001, 0x4) sendto$inet6(r6, &(0x7f0000000680)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d118", 0x7e, 0x840, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r7 = io_uring_setup(0x59d0, &(0x7f0000000100)={0x0, 0xf7fffffa, 0x2, 0x0, 0xe0}) io_uring_enter(r7, 0x0, 0x0, 0xf, &(0x7f0000000400), 0x18) 5.670479619s ago: executing program 5 (id=560): sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000980), 0x651, 0x0) recvmmsg(r0, &(0x7f00000009c0), 0x4000087, 0x2, 0x0) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0) r2 = gettid() timer_create(0x2, &(0x7f00000000c0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000000980)) timer_settime(0x0, 0x0, &(0x7f00000009c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) clock_nanosleep(0x2, 0x0, 0x0, 0x0) 1.803007648s ago: executing program 0 (id=579): mmap(&(0x7f0000b23000/0x1000)=nil, 0x1000, 0xb, 0x31, 0xffffffffffffffff, 0x4b0e1000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) write$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000040)={'full'}, 0xfffffdef) remap_file_pages(&(0x7f00006ca000/0x4000)=nil, 0x4000, 0x0, 0x3, 0x20000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x60280, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000440)={'virt_wifi0\x00', 0xc1eb461a2917d087}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000480)={'bridge0\x00'}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="02000000040000001800470001"], 0x17) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000180), 0xfffffff9, r1}, 0x38) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x25, 0x55bf, &(0x7f00000005c0)="$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") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000005b80)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000005bc0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0xa, [@fwd={0x6}, @ptr={0x0, 0x0, 0x0, 0x2, 0x1}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x5f, 0x30]}}, &(0x7f0000005c00)=""/246, 0x3a, 0xf6, 0x1}, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) 1.49001648s ago: executing program 5 (id=583): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002800)={0x0, 0x0, &(0x7f0000002840)={&(0x7f0000002880)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x70bd29, 0x0, {0x2, 0x20, 0x14, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x2000}, [@RTA_SRC={0x8, 0x2, @broadcast}]}, 0x24}, 0x1, 0x0, 0x0, 0x44004}, 0x0) chdir(&(0x7f0000000200)='./file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000001780)='.\x00', 0x0, 0x0) getdents(r1, 0x0, 0x58) r2 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)={0x60040, 0x157, 0x25}, 0x18) r3 = socket$netlink(0x10, 0x3, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000340)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000001380)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000013c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000001400)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000001480)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001500), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001540), 0x80002c1, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000001580), r5) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001640)=ANY=[@ANYBLOB="ec000000", @ANYRES16=r6, @ANYBLOB="010000000000000000000100000008000500"], 0xec}, 0x1, 0x0, 0x0, 0x4084}, 0x80) ioctl$OCFS2_IOC_REFLINK(r3, 0x40186f04, &(0x7f0000001680)={&(0x7f00000016c0)='/sys/kern\x81\xeb/config/rnull/syzrnull', &(0x7f0000001700)='\x03\x00\x00\x002kernel/config/rnull/syznull\x00\xc4\xa8\xbc\x91\x01E\x84a$y\xc9\xc0\xd801-\xc0E:Q\x8b<;\x8fO\'&p\xeeo\xd4\xe6\x82\xc1\x12\x17\xe4\xe5\fI\xbd?\x10\x13\xd6\x88[\xb6!y', 0x78}) openat(r2, &(0x7f0000000300)='./file0\x00', 0x101000, 0x40) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x80) getdents64(r7, &(0x7f0000000380)=""/4096, 0x1000) 1.333006126s ago: executing program 5 (id=584): syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12011001000000088f0e03000000000000010902240001000080000904000208090000000921ff7f6f0122280009058103"], 0x0) ioctl$TIOCMBIS(0xffffffffffffffff, 0x5416, &(0x7f0000000140)=0x7) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x42, 0x80) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newlink={0x30, 0x10, 0x20, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x7}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) socket$nl_audit(0x10, 0x3, 0x9) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x10800, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'wg0\x00', 0x200}) 945.299845ms ago: executing program 4 (id=595): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) unshare(0x20000400) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) recvmmsg(r1, &(0x7f0000000140)=[{{0x0, 0x0, 0x0}, 0x263b}], 0x1, 0x40004000, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="8b33000000000300f1000500000008000300", @ANYRES32=r4], 0x28}}, 0x0) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x14, r2, 0x1, 0x70bd2d, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x24000000}, 0x20008004) r5 = socket(0x2b, 0x80801, 0x1) shutdown(r5, 0x7ffffffe) 871.242112ms ago: executing program 0 (id=596): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x10, 0x4, 0x0, &(0x7f0000000200)='GPL\x00', 0x1}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000500)={r0, 0xffffffffffffffff, 0x33, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x80000000, 0x0, 0x1}}, 0x40) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x1000009, 0x3032, 0xffffffffffffffff, 0xc6dd5000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100fe02000000000000200000000c000600010000000100000024002d8005000100090000000500040000000000080002000300e200080003"], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) 674.901462ms ago: executing program 0 (id=598): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x4, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}]}, &(0x7f00000003c0)='GPL\x00', 0x4, 0x1007, &(0x7f0000000440)=""/4103, 0x41100, 0x68}, 0x94) 671.957312ms ago: executing program 0 (id=599): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000580)={'vcan0\x00', 0x0}) ioctl$SIOCGSTAMP(r0, 0x8906, 0x0) bind$can_raw(r0, &(0x7f00000005c0)={0x1d, r1}, 0x10) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f0000000600)=0x1, 0x4) sendmsg$can_raw(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000022c0)={&(0x7f0000002300)=@can={{0x4, 0x0, 0x0, 0x1}, 0x3, 0x1}, 0x10}, 0x1, 0x0, 0x0, 0x10}, 0x40040) recvmmsg(r0, &(0x7f0000006d40)=[{{0x0, 0x0, &(0x7f0000003480)=[{&(0x7f0000002340)=""/4096, 0x1000}, {0x0}], 0x2, &(0x7f00000034c0)=""/82, 0x52}, 0x9}], 0x1, 0x40000043, 0x0) 606.297989ms ago: executing program 0 (id=604): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x34, r1, 0x7, 0x2, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x2}]}, 0x34}, 0x1, 0x3000000, 0x0, 0x4060850}, 0x400d4) 601.47359ms ago: executing program 0 (id=607): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x1000, @dev={0xfe, 0x80, '\x00', 0x21}, 0x9}, 0x1c) getsockopt$inet6_buf(r0, 0x29, 0x3d, &(0x7f0000000080)=""/68, &(0x7f0000000100)=0x44) 235.481677ms ago: executing program 3 (id=645): socket(0x28, 0x801, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x12, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xffffff1f}, {}, {}, [], {{}, {0x6, 0x0, 0x7, 0x8}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r1) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x38, 0x2, 0x3, 0x101, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x2}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x0, 0x2}}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x2}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}]}, 0x38}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=@bridge_getvlan={0x18, 0x72, 0x7e3bfe4fa73db39f, 0x70bd26, 0x25dfdbff}, 0x18}, 0x1, 0x0, 0x0, 0x804c090}, 0x20041040) socket$inet_udp(0x2, 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) close(0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x40) 173.786112ms ago: executing program 2 (id=649): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) write(0xca, &(0x7f0000000440)="040f1c0087c100", 0x7) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000000c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x21}, @in=@loopback, 0x4e20, 0x0, 0x4e21, 0x3f, 0xa, 0x40, 0xa0, 0x3a}, {0x3, 0x2, 0x3, 0xc, 0x7fffffff, 0x5, 0x4, 0x4}, {0x1, 0x6, 0xffffffffffff3b52, 0xfff}, 0x10000, 0x6e6bbd, 0x2, 0x0, 0x2, 0x3}, {{@in=@private=0xa010100, 0x4d5, 0x93}, 0x8, @in=@rand_addr=0x64010102, 0x3505, 0x3, 0x2, 0x3, 0x100, 0x0, 0x80000000}}, 0xe8) 159.873174ms ago: executing program 2 (id=650): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x44}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MLD_VERSION={0x5, 0x2c, 0x9}]}}}]}, 0x3c}}, 0x0) 139.742296ms ago: executing program 2 (id=651): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000f80)) 111.881409ms ago: executing program 2 (id=652): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000004c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x500, 0x0, 0xd0, 0x1a0, 0x270, 0x340, 0x1a0, 0xd0, 0x1a0, 0x270, 0x430, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@empty, @ipv6=@empty, 0x40, 0x40}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x560) 111.183099ms ago: executing program 3 (id=653): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x8}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}, 0x1, 0x0, 0x0, 0x40}, 0x24000840) 72.910413ms ago: executing program 2 (id=654): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0100000004000000040000000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x8, &(0x7f00000001c0)=@framed={{}, [@map_fd={0x18, 0x1, 0x1, 0x0, r0}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0xe, 0x0, &(0x7f00000002c0)="0008000000000001000000000000", 0x0, 0xfeff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 72.739863ms ago: executing program 3 (id=655): unshare(0x20000400) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b00)={0xffffffffffffffff}) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000c80)) 72.519343ms ago: executing program 4 (id=656): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000680)='%pI4 \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r1, 0xffffffffffffffff}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xa, 0x1c, &(0x7f00000006c0)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}], {{0x6, 0x1, 0xd, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) setsockopt$MRT6_DEL_MIF(0xffffffffffffffff, 0x29, 0xcb, &(0x7f0000000200)={0x0, 0x0, 0x5c, 0x0, 0x2}, 0xc) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000840)="5aa3f4904927bdee4f9b2345d5a6", 0x0, 0x1000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 72.065413ms ago: executing program 2 (id=657): mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) r0 = socket(0x28, 0x801, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x12, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xffffff1f}, {}, {}, [], {{}, {0x6, 0x0, 0x7, 0x8}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000004c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3c8, 0x290, 0x290, 0x328, 0x98, 0x98, 0x420, 0x420, 0x420, 0x420, 0x420, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0xfffb, 0xfff8}}}, {{@ip={@multicast2, @rand_addr=0x64010102, 0xff, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {0xff}, {}, 0x16, 0x2, 0x4}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@local, @rand_addr=0x64010100, 0x0, 0x0, 'tunl0\x00', 'vlan0\x00', {}, {0xff}, 0x32, 0x2, 0x57}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x10, 0x62, 0x1}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x1, 0x40, 0x2}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x4, 0x4, 0x1, 0x3, 0x7, 0x2], 0x3, 0x6}, {0x4, [0x0, 0x0, 0x0, 0x2, 0x0, 0x6], 0x4, 0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r2) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x50, r3, 0x60b, 0x70bd2d, 0x0, {}, [@IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x7}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x3}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0xe}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x3}]}, 0x50}}, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x6}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xd4}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x38, 0x2, 0x3, 0x101, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x2}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x0, 0x2}}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x2}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}]}, 0x38}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=@bridge_getvlan={0x20, 0x72, 0x7e3bfe4fa73db39f, 0x70bd26, 0x25dfdbff, {}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x7ffffffe}]}, 0x20}, 0x1, 0x0, 0x0, 0x804c090}, 0x20041040) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r7, 0x1, 0x3c, &(0x7f0000000280)=0x1, 0x4) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000900), 0x4) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r9) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x4, 0x35dfdbfd, {0x0, 0x0, 0x0, r11, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0x0, 0xb}, {0xffff, 0x6}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_TARGET={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240048e4}, 0x40) 71.854503ms ago: executing program 4 (id=658): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x3c, r1, 0x7, 0x2, 0x0, {}, [@ETHTOOL_A_LINKMODES_OURS={0x8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}]}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x2}]}, 0x3c}, 0x1, 0x3000000, 0x0, 0x4060850}, 0x400d4) 22.879458ms ago: executing program 3 (id=659): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x3, 0xe, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f00000011c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000001200), 0xfffffedf, 0x10, &(0x7f0000001240)}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001280)={r0, 0x0, 0x62, 0xfe, &(0x7f0000001300)="cb74445b7d4c0b24676c6c71ae37efcedaf40242309766deb4e793f90000000000000000dbc856cbc664650634231454ca2d8034c4ca29e0d99c3b6615e91835a600c08f989af45438a54981be310aad92ae545b1c961e5f3762a51fe4c736edec6f", &(0x7f0000001380)=""/254, 0x2f00, 0x0, 0xff, 0x194, &(0x7f0000001480)="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", &(0x7f00000015c0)="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", 0x2, 0x0, 0x10000}, 0x24) 22.625608ms ago: executing program 4 (id=660): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$sock(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)=[{0x0}, {&(0x7f0000000000)='4\t(', 0x3}], 0x2}, 0x20000800) 22.465988ms ago: executing program 3 (id=661): r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x130}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$TIPC_NL_MON_SET(r0, 0x0, 0x40000) 22.089968ms ago: executing program 4 (id=662): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'lo\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@ipv6_newaddr={0x40, 0x14, 0x101, 0x70bd26, 0x25dffbf8, {0xa, 0x38, 0x78, 0xff, r1}, [@IFA_LOCAL={0x14, 0x2, @loopback}, @IFA_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x40}, 0x1, 0x0, 0x0, 0x4004051}, 0x0) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000500)={'lo\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@ipv6_newaddr={0x48, 0x14, 0x9535393fea6295b5, 0x70bd27, 0x25dfdbff, {0xa, 0x8, 0x0, 0xff, r4}, [@IFA_LOCAL={0x14, 0x2, @loopback}, @IFA_ADDRESS={0x14, 0x1, @empty}, @IFA_RT_PRIORITY={0x8, 0x9, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x2004c040}, 0x0) 3.21184ms ago: executing program 4 (id=663): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f00000004c0)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x3, @dev}, 0x2}}, 0x2e) ioctl$PPPIOCGMRU(r0, 0x80047453, 0x0) 0s ago: executing program 3 (id=664): mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x20, &(0x7f0000000000)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d440fe000000000000290000003b000000", 0xfe60) kernel console output (not intermixed with test programs): V_CHANGE): veth0_to_bridge: link becomes ready [ 38.560530][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 38.570975][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 38.583013][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 38.591385][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 38.599701][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 38.608077][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 38.617352][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 38.627606][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 38.637667][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 38.646341][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 38.656294][ T314] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 38.675305][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 38.688924][ T289] EXT4-fs (loop2): unmounting filesystem. [ 38.690487][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 38.780115][ T318] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 38.841708][ T28] audit: type=1400 audit(1793944471.421:313): avc: denied { create } for pid=464 comm="syz.2.39" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 38.863806][ T314] usb 5-1: config 0 has too many interfaces: 223, using maximum allowed: 32 [ 38.873784][ T314] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 38.884643][ T28] audit: type=1400 audit(1793944471.431:314): avc: denied { bind } for pid=464 comm="syz.2.39" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 38.884742][ T314] usb 5-1: config 0 has 2 interfaces, different from the descriptor's value: 223 [ 38.916799][ T314] usb 5-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 38.926261][ T314] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 38.926771][ T28] audit: type=1400 audit(1793944471.431:315): avc: denied { listen } for pid=464 comm="syz.2.39" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 38.958689][ T314] usb 5-1: config 0 descriptor?? [ 38.964165][ T316] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 38.971009][ T28] audit: type=1400 audit(1793944471.431:316): avc: denied { write } for pid=464 comm="syz.2.39" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 38.998119][ T314] usb 5-1: Found UVC 9.00 device (046d:0825) [ 39.006828][ T28] audit: type=1400 audit(1793944471.501:317): avc: denied { accept } for pid=464 comm="syz.2.39" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 39.031835][ T318] usb 2-1: config 0 has too many interfaces: 223, using maximum allowed: 32 [ 39.041292][ T318] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 39.051849][ T318] usb 2-1: config 0 has 2 interfaces, different from the descriptor's value: 223 [ 39.061381][ T318] usb 2-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 39.071090][ T318] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 39.085565][ T318] usb 2-1: config 0 descriptor?? [ 39.097268][ T318] usb 2-1: Found UVC 9.00 device (046d:0825) [ 39.182314][ T316] usb 4-1: config 0 has too many interfaces: 223, using maximum allowed: 32 [ 39.195283][ T316] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 39.221170][ T316] usb 4-1: config 0 has 2 interfaces, different from the descriptor's value: 223 [ 39.243855][ T316] usb 4-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 39.253540][ T316] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 39.266018][ T316] usb 4-1: config 0 descriptor?? [ 39.278576][ T316] usb 4-1: Found UVC 9.00 device (046d:0825) [ 39.910540][ T318] usb 2-1: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 39.933294][ T318] uvcvideo 2-1:0.1: Failed to query (129) UVC probe control : -71 (exp. 48). [ 39.950297][ T318] uvcvideo 2-1:0.1: Failed to initialize the device (-5). [ 39.969620][ T318] usb 2-1: USB disconnect, device number 4 [ 40.184156][ T314] uvcvideo 5-1:0.1: Failed to set UVC probe control : -71 (exp. 48). [ 40.194189][ T314] uvcvideo 5-1:0.1: Failed to query (129) UVC probe control : -71 (exp. 48). [ 40.210059][ T314] uvcvideo 5-1:0.1: Failed to initialize the device (-5). [ 40.230698][ T314] usb 5-1: USB disconnect, device number 3 [ 40.241806][ T28] audit: type=1400 audit(1793944472.831:318): avc: denied { read write } for pid=476 comm="syz.0.41" name="fuse" dev="devtmpfs" ino=93 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 40.269232][ T473] loop2: detected capacity change from 0 to 40427 [ 40.283627][ T473] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 40.291888][ T473] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 40.308041][ T28] audit: type=1400 audit(1793944472.861:319): avc: denied { open } for pid=476 comm="syz.0.41" path="/dev/fuse" dev="devtmpfs" ino=93 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 40.332493][ T473] F2FS-fs (loop2): invalid crc value [ 40.341945][ T28] audit: type=1400 audit(1793944472.921:320): avc: denied { connect } for pid=476 comm="syz.0.41" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 40.380982][ T473] F2FS-fs (loop2): Found nat_bits in checkpoint [ 40.411507][ T28] audit: type=1400 audit(1793944472.921:321): avc: denied { getopt } for pid=476 comm="syz.0.41" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 40.490795][ T473] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 40.505966][ T473] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 40.625681][ T316] uvcvideo 4-1:0.1: Failed to set UVC probe control : -71 (exp. 48). [ 40.644178][ T316] uvcvideo 4-1:0.1: Failed to query (129) UVC probe control : -71 (exp. 48). [ 40.660387][ T316] uvcvideo 4-1:0.1: Failed to initialize the device (-5). [ 40.679497][ T316] usb 4-1: USB disconnect, device number 5 [ 40.734852][ T483] overlayfs: failed to clone upperpath [ 40.808829][ T308] kworker/u4:3: attempt to access beyond end of device [ 40.808829][ T308] loop2: rw=1, sector=77824, nr_sectors = 4096 limit=40427 [ 40.829883][ T308] kworker/u4:3: attempt to access beyond end of device [ 40.829883][ T308] loop2: rw=1, sector=49152, nr_sectors = 1128 limit=40427 [ 40.898775][ T499] device macsec0 entered promiscuous mode [ 40.906276][ T499] netlink: 4 bytes leftover after parsing attributes in process `syz.0.48'. [ 40.916110][ T499] device veth1_macvtap left promiscuous mode [ 40.924172][ T499] device macsec0 left promiscuous mode [ 40.950777][ T501] loop2: detected capacity change from 0 to 512 [ 40.965247][ T501] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 40.978556][ T501] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 40.991017][ T501] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2802: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 41.004401][ T501] EXT4-fs (loop2): 1 truncate cleaned up [ 41.010355][ T501] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 41.019984][ T501] EXT4-fs (loop2): unmounting filesystem. [ 41.090098][ T60] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 41.108034][ T501] loop2: detected capacity change from 0 to 128 [ 41.114800][ T501] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 41.271242][ T60] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 41.289612][ T60] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 41.307567][ T60] usb 5-1: config 0 has no interface number 0 [ 41.322383][ T60] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 41.341261][ T60] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 41.355019][ T60] usb 5-1: Product: syz [ 41.363073][ T60] usb 5-1: Manufacturer: syz [ 41.370177][ T60] usb 5-1: SerialNumber: syz [ 41.380443][ T60] usb 5-1: config 0 descriptor?? [ 41.390370][ T60] CoreChips: probe of 5-1:0.41 failed with error -22 [ 41.441815][ T510] loop1: detected capacity change from 0 to 256 [ 41.464775][ T510] FAT-fs (loop1): bogus logical sector size 0 [ 41.480098][ T510] FAT-fs (loop1): Can't find a valid FAT filesystem [ 41.499753][ T510] FAULT_INJECTION: forcing a failure. [ 41.499753][ T510] name fail_futex, interval 1, probability 0, space 0, times 1 [ 41.512671][ T316] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 41.539407][ T510] CPU: 0 PID: 510 Comm: syz.1.50 Not tainted syzkaller #0 [ 41.546603][ T510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 41.556871][ T510] Call Trace: [ 41.560174][ T510] [ 41.563130][ T510] __dump_stack+0x21/0x24 [ 41.567490][ T510] dump_stack_lvl+0x110/0x170 [ 41.572193][ T510] ? __cfi_dump_stack_lvl+0x8/0x8 [ 41.577242][ T510] ? __cfi_enqueue_task_fair+0x10/0x10 [ 41.582742][ T510] dump_stack+0x15/0x24 [ 41.586931][ T510] should_fail_ex+0x3bf/0x510 [ 41.591642][ T510] should_fail+0xb/0x10 [ 41.595914][ T510] get_futex_key+0x143/0xb10 [ 41.600548][ T510] ? __cfi_check_preempt_wakeup+0x10/0x10 [ 41.606297][ T510] ? get_wchan+0xa0/0xd0 [ 41.610592][ T510] ? __cfi_get_futex_key+0x10/0x10 [ 41.615774][ T510] ? __kasan_check_read+0x11/0x20 [ 41.620824][ T510] ? ttwu_do_wakeup+0x102/0x490 [ 41.625708][ T510] futex_wait_setup+0xb8/0x260 [ 41.630498][ T510] ? __cfi_futex_wait_setup+0x10/0x10 [ 41.635907][ T510] ? _raw_spin_unlock_irqrestore+0x5a/0x80 [ 41.641910][ T510] ? futex_setup_timer+0xb0/0xc0 [ 41.646883][ T510] futex_wait+0x1ce/0x900 [ 41.651237][ T510] ? __cfi_futex_wait+0x10/0x10 [ 41.656191][ T510] ? __cfi_futex_wake+0x10/0x10 [ 41.661061][ T510] ? __kasan_check_write+0x14/0x20 [ 41.666191][ T510] ? mutex_unlock+0x8f/0x230 [ 41.670812][ T510] do_futex+0x2e2/0x430 [ 41.674984][ T510] ? __cfi_do_futex+0x10/0x10 [ 41.679670][ T510] ? ppp_ioctl+0x109f/0x17c0 [ 41.684629][ T510] __se_sys_futex+0x136/0x310 [ 41.689326][ T510] ? __x64_sys_futex+0x100/0x100 [ 41.694278][ T510] ? fput+0x154/0x1a0 [ 41.698285][ T510] __x64_sys_futex+0xe5/0x100 [ 41.703071][ T510] x64_sys_call+0x7ec/0x9a0 [ 41.707780][ T510] do_syscall_64+0x4c/0xa0 [ 41.712401][ T510] ? clear_bhb_loop+0x30/0x80 [ 41.717125][ T510] ? clear_bhb_loop+0x30/0x80 [ 41.721868][ T510] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 41.727802][ T510] RIP: 0033:0x7f1fe859fb19 [ 41.732256][ T510] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 41.751887][ T510] RSP: 002b:00007f1fe94be0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 41.760329][ T510] RAX: ffffffffffffffda RBX: 00007f1fe8825fa8 RCX: 00007f1fe859fb19 [ 41.768315][ T510] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f1fe8825fa8 [ 41.776304][ T510] RBP: 00007f1fe8825fa0 R08: 0000000000000000 R09: 0000000000000000 [ 41.784287][ T510] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 41.792388][ T510] R13: 00007f1fe8826038 R14: 00007ffc13bf6ac0 R15: 00007ffc13bf6ba8 [ 41.800385][ T510] [ 41.911413][ T316] usb 4-1: unable to get BOS descriptor or descriptor too short [ 41.923503][ T316] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 41.935079][ T513] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 41.950056][ T316] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 41.959228][ T316] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 41.997309][ T316] usb 4-1: New USB device found, idVendor=0644, idProduct=8020, bcdDevice= 0.40 [ 42.017779][ T512] loop4: detected capacity change from 0 to 256 [ 42.030741][ T316] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 42.035547][ T512] FAT-fs (loop4): Unrecognized mount option "ip_vti0" or missing value [ 42.059718][ T316] usb 4-1: Product: syz [ 42.084258][ T316] usb 4-1: Manufacturer: syz [ 42.088919][ T316] usb 4-1: SerialNumber: syz [ 42.100566][ T512] loop4: detected capacity change from 0 to 512 [ 42.118069][ T512] EXT4-fs: journaled quota format not specified [ 42.406273][ T60] usb 5-1: USB disconnect, device number 4 [ 42.476046][ T516] loop1: detected capacity change from 0 to 128 [ 42.948012][ T528] loop4: detected capacity change from 0 to 512 [ 42.958711][ T528] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 42.972270][ T528] EXT4-fs (loop4): 1 truncate cleaned up [ 42.978038][ T528] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 42.987647][ T528] EXT4-fs (loop4): unmounting filesystem. [ 44.773072][ T542] loop2: detected capacity change from 0 to 512 [ 44.801156][ T542] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: comm syz.2.59: inode #1: comm syz.2.59: iget: illegal inode # [ 44.838669][ T542] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.59: error while reading EA inode 1 err=-117 [ 44.852251][ T542] EXT4-fs (loop2): 1 orphan inode deleted [ 44.858042][ T542] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 45.526102][ T316] usb 4-1: 1:1 : no or invalid class specific endpoint descriptor [ 45.540528][ T316] usb 4-1: 1:1 : format type 0 is detected, processed as PCM [ 46.487073][ T28] kauditd_printk_skb: 20 callbacks suppressed [ 46.487089][ T28] audit: type=1400 audit(1793944479.071:342): avc: denied { associate } for pid=550 comm="syz.4.61" name="current" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 46.517636][ T316] usb 4-1: 1:1 : sample bitwidth 62 in over sample bytes 2 [ 46.525469][ T316] usb 4-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 46.540986][ T316] usb 4-1: unit 2 not found! [ 46.545828][ T316] usb 4-1: unit 0 not found! [ 46.546204][ T554] loop1: detected capacity change from 0 to 256 [ 46.558379][ T289] EXT4-fs (loop2): unmounting filesystem. [ 46.577142][ T554] exfat: Unknown parameter '000000000000000000030x0000000000000000' [ 46.609174][ T28] audit: type=1400 audit(1793944479.181:343): avc: denied { map } for pid=550 comm="syz.4.61" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=17522 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 46.638076][ T316] usb 4-1: USB disconnect, device number 6 [ 46.665114][ T28] audit: type=1400 audit(1793944479.181:344): avc: denied { write } for pid=550 comm="syz.4.61" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=17522 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 46.690327][ T28] audit: type=1400 audit(1793944479.181:345): avc: denied { map } for pid=550 comm="syz.4.61" path="socket:[17521]" dev="sockfs" ino=17521 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 46.789642][ T563] loop2: detected capacity change from 0 to 2048 [ 46.822002][ T563] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 46.854088][ T563] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.861307][ T563] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.020123][ T28] audit: type=1400 audit(1793944479.561:346): avc: denied { setopt } for pid=553 comm="syz.1.62" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 47.194833][ T570] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 47.207966][ T570] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.215097][ T570] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.234964][ T570] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.242098][ T570] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.283677][ T570] device veth0_vlan left promiscuous mode [ 47.291873][ T570] device veth0_vlan entered promiscuous mode [ 47.301184][ T570] device veth1_macvtap left promiscuous mode [ 47.308256][ T570] device veth1_macvtap entered promiscuous mode [ 47.324054][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 47.340089][ T316] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 47.348115][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 47.358332][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 47.377275][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 47.396653][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 47.416145][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 47.430729][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 47.454388][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 47.470605][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 47.496859][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 47.502642][ T573] loop4: detected capacity change from 0 to 40427 [ 47.509718][ T570] syz.2.63 (570) used greatest stack depth: 20576 bytes left [ 47.521384][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 47.530801][ T573] F2FS-fs (loop4): invalid crc value [ 47.531400][ T289] EXT4-fs (loop2): unmounting filesystem. [ 47.543028][ T316] usb 4-1: config 0 has too many interfaces: 223, using maximum allowed: 32 [ 47.552850][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 47.560955][ T316] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 47.572722][ T573] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 47.573919][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 47.600405][ T316] usb 4-1: config 0 has 2 interfaces, different from the descriptor's value: 223 [ 47.609702][ T316] usb 4-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 47.619171][ T316] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 47.627798][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 47.636771][ T316] usb 4-1: config 0 descriptor?? [ 47.643003][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 47.653498][ T316] usb 4-1: Found UVC 9.00 device (046d:0825) [ 47.691027][ T580] loop2: detected capacity change from 0 to 2048 [ 47.709124][ T573] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 47.739315][ T580] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 47.764026][ T316] usb 4-1: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 47.784863][ T28] audit: type=1400 audit(1793944480.371:347): avc: denied { ioctl } for pid=572 comm="syz.4.67" path="/11/file1/bus" dev="loop4" ino=10 ioctlcmd=0xf50d scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 47.788795][ T316] uvcvideo 4-1:0.1: Failed to query (129) UVC probe control : -71 (exp. 48). [ 47.822869][ T586] loop3: detected capacity change from 0 to 2048 [ 47.824304][ T316] uvcvideo 4-1:0.1: Failed to initialize the device (-5). [ 47.838726][ T580] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.846038][ T580] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.855804][ T313] udevd[313]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 47.879154][ T316] usb 4-1: USB disconnect, device number 7 [ 47.895825][ T586] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 48.011378][ T587] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 48.022267][ T291] syz-executor: attempt to access beyond end of device [ 48.022267][ T291] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 48.050205][ T587] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.057314][ T587] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.085043][ T587] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.092210][ T587] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.128000][ T587] device veth0_vlan left promiscuous mode [ 48.141040][ T587] device veth0_vlan entered promiscuous mode [ 48.156870][ T587] device veth1_macvtap left promiscuous mode [ 48.173258][ T587] device veth1_macvtap entered promiscuous mode [ 48.188429][ T594] Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 48.199736][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 48.232221][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 48.246624][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 48.261009][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 48.279971][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 48.320851][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 48.329334][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 48.338278][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 48.338509][ T28] audit: type=1400 audit(1793944480.931:348): avc: denied { create } for pid=593 comm="syz.4.71" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 48.366291][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 48.379881][ T289] EXT4-fs (loop2): unmounting filesystem. [ 48.388484][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 48.411477][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 48.426495][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 48.451419][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 48.769454][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 48.790280][ T28] audit: type=1400 audit(1793944481.081:349): avc: denied { sqpoll } for pid=593 comm="syz.4.71" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 48.858551][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 49.449154][ T586] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.456475][ T586] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.529450][ T592] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 49.543278][ T592] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.550433][ T592] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.560955][ T592] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.568055][ T592] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.587176][ T592] device veth0_vlan left promiscuous mode [ 49.593920][ T592] device veth0_vlan entered promiscuous mode [ 49.602176][ T592] device veth1_macvtap left promiscuous mode [ 49.609356][ T592] device veth1_macvtap entered promiscuous mode [ 49.636809][ T288] EXT4-fs (loop3): unmounting filesystem. [ 49.656450][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 49.676131][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 49.699571][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 49.717072][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 49.737502][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 49.752495][ T605] loop2: detected capacity change from 0 to 128 [ 49.759410][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 49.785909][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 49.794759][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 49.813508][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 49.826644][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 49.873488][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 49.882643][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 49.892214][ T426] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 49.905134][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 49.914526][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 51.090328][ T28] audit: type=1400 audit(1793944483.601:350): avc: denied { ioctl } for pid=604 comm="syz.2.75" path="socket:[18159]" dev="sockfs" ino=18159 ioctlcmd=0x8941 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 51.160265][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 51.288644][ T19] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 51.341125][ T610] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.348400][ T610] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.397901][ T612] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 51.414558][ T612] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.421693][ T612] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.431110][ T612] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.438182][ T612] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.454375][ T612] device veth0_vlan left promiscuous mode [ 51.460786][ T612] device veth0_vlan entered promiscuous mode [ 51.471607][ T19] usb 5-1: config 0 has too many interfaces: 223, using maximum allowed: 32 [ 51.485851][ T19] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 51.494644][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 51.515151][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 51.522596][ T19] usb 5-1: config 0 has 2 interfaces, different from the descriptor's value: 223 [ 51.523320][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 51.536147][ T19] usb 5-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 51.545928][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 51.550572][ T19] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 51.561696][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 51.566355][ T314] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 51.579181][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 51.589596][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 51.599607][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 51.600695][ T19] usb 5-1: config 0 descriptor?? [ 51.609908][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 51.615285][ T625] loop1: detected capacity change from 0 to 512 [ 51.623907][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 51.637160][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 51.647174][ T19] usb 5-1: Found UVC 9.00 device (046d:0825) [ 51.654455][ T625] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 51.662020][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 51.673063][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 51.682789][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 51.691122][ T625] EXT4-fs (loop1): 1 truncate cleaned up [ 51.691142][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 51.691845][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 51.702325][ T625] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 51.706420][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 51.718470][ T625] EXT4-fs (loop1): unmounting filesystem. [ 51.723101][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 51.744504][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 51.762055][ T623] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.769296][ T623] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.785583][ T625] loop1: detected capacity change from 0 to 128 [ 51.792430][ T625] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 51.811216][ T314] usb 4-1: config 0 has too many interfaces: 223, using maximum allowed: 32 [ 51.823475][ T314] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 51.840657][ T314] usb 4-1: config 0 has 2 interfaces, different from the descriptor's value: 223 [ 51.865502][ T314] usb 4-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 51.876463][ T314] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 51.897546][ T314] usb 4-1: config 0 descriptor?? [ 51.919361][ T622] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.926685][ T622] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.936975][ T314] usb 4-1: Found UVC 9.00 device (046d:0825) [ 51.986760][ T626] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 52.005039][ T626] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.012158][ T626] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.022332][ T626] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.029409][ T626] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.047220][ T626] device veth0_vlan left promiscuous mode [ 52.054133][ T626] device veth0_vlan entered promiscuous mode [ 52.115324][ T627] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 52.151674][ T627] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.158818][ T627] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.195408][ T627] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.202529][ T627] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.231011][ T627] device veth0_vlan left promiscuous mode [ 52.240795][ T627] device veth0_vlan entered promiscuous mode [ 52.250991][ T627] device veth1_macvtap left promiscuous mode [ 52.264306][ T627] device veth1_macvtap entered promiscuous mode [ 52.280443][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 52.288327][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 52.296398][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 52.320912][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 52.349554][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 52.358106][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 52.366502][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 52.388786][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 52.428773][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 52.455931][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 52.505962][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 52.578173][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 52.731728][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 52.855474][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 53.834511][ T642] loop2: detected capacity change from 0 to 16 [ 53.842429][ T642] erofs: (device loop2): mounted with root inode @ nid 36. [ 53.890099][ T28] audit: type=1400 audit(1793944486.461:351): avc: denied { remount } for pid=639 comm="syz.2.82" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 53.982828][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 54.127005][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.153878][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.200573][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.230862][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.250567][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.258939][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.267515][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.275918][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.284833][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 54.315876][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 54.343104][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.366318][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.383872][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 54.436208][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 54.558410][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 55.498181][ T28] audit: type=1400 audit(1793944488.081:352): avc: denied { mount } for pid=654 comm="syz.0.85" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 55.534473][ T314] uvcvideo 4-1:0.1: Failed to set UVC probe control : -71 (exp. 48). [ 55.550263][ T314] uvcvideo 4-1:0.1: Failed to query (129) UVC probe control : -71 (exp. 48). [ 55.559153][ T314] uvcvideo 4-1:0.1: Failed to initialize the device (-5). [ 55.567721][ T19] uvcvideo 5-1:0.1: Failed to set UVC probe control : -71 (exp. 48). [ 55.580244][ T19] uvcvideo 5-1:0.1: Failed to query (129) UVC probe control : -71 (exp. 48). [ 55.589094][ T19] uvcvideo 5-1:0.1: Failed to initialize the device (-5). [ 55.616126][ T314] usb 4-1: USB disconnect, device number 8 [ 55.631133][ T659] loop2: detected capacity change from 0 to 256 [ 55.640057][ T19] usb 5-1: USB disconnect, device number 5 [ 55.658562][ T659] FAT-fs (loop2): bogus logical sector size 0 [ 55.680836][ T659] FAT-fs (loop2): Can't find a valid FAT filesystem [ 55.744554][ T28] audit: type=1400 audit(1793944488.331:353): avc: denied { write } for pid=658 comm="syz.2.87" name="filter" dev="tracefs" ino=2496 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 55.787189][ T28] audit: type=1400 audit(1793944488.331:354): avc: denied { open } for pid=658 comm="syz.2.87" path="/22/tracing/events/sched/filter" dev="tracefs" ino=2496 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 55.847034][ T28] audit: type=1400 audit(1793944488.431:355): avc: denied { unmount } for pid=289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 55.981540][ T667] loop2: detected capacity change from 0 to 16 [ 55.990105][ T667] erofs: (device loop2): mounted with root inode @ nid 36. [ 56.014646][ T667] erofs: (device loop2): z_erofs_readahead: readahead error at page 4 @ nid 89 [ 56.023709][ T667] erofs: (device loop2): z_erofs_readahead: readahead error at page 3 @ nid 89 [ 56.033052][ T667] syz.2.89: attempt to access beyond end of device [ 56.033052][ T667] loop2: rw=524288, sector=34359738360, nr_sectors = 8 limit=16 [ 56.047317][ T667] syz.2.89: attempt to access beyond end of device [ 56.047317][ T667] loop2: rw=524288, sector=8, nr_sectors = 16 limit=16 [ 56.125117][ T19] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 57.212722][ T673] loop3: detected capacity change from 0 to 16 [ 57.223814][ T673] erofs: (device loop3): mounted with root inode @ nid 36. [ 57.596054][ T678] loop1: detected capacity change from 0 to 256 [ 57.604531][ T678] FAT-fs (loop1): bogus logical sector size 0 [ 57.610757][ T678] FAT-fs (loop1): Can't find a valid FAT filesystem [ 57.619558][ T28] audit: type=1400 audit(1793944490.201:356): avc: denied { bind } for pid=676 comm="syz.3.93" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 57.652691][ T679] Bluetooth: ISO socket layer initialized [ 57.663181][ T28] audit: type=1400 audit(1793944490.241:357): avc: denied { write } for pid=676 comm="syz.3.93" path="socket:[18338]" dev="sockfs" ino=18338 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 57.687717][ T28] audit: type=1400 audit(1793944490.281:358): avc: denied { read write } for pid=676 comm="syz.3.93" name="uhid" dev="devtmpfs" ino=267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 57.715650][ T314] input: syz0 as /devices/virtual/misc/uhid/0000:056A:003F.0001/input/input4 [ 57.725441][ T28] audit: type=1400 audit(1793944490.281:359): avc: denied { open } for pid=676 comm="syz.3.93" path="/dev/uhid" dev="devtmpfs" ino=267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 57.751625][ T19] usb 5-1: config 0 has too many interfaces: 223, using maximum allowed: 32 [ 57.779433][ T683] loop2: detected capacity change from 0 to 512 [ 57.792073][ T28] audit: type=1400 audit(1793944490.381:360): avc: denied { read } for pid=88 comm="acpid" name="event3" dev="devtmpfs" ino=677 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 57.808995][ T683] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 57.821068][ T314] hid-generic 0000:056A:003F.0001: input,hidraw0: HID v0.00 Gamepad [syz0] on syz0 [ 57.837855][ T683] EXT4-fs (loop2): 1 truncate cleaned up [ 57.843653][ T683] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 57.853328][ T683] EXT4-fs (loop2): unmounting filesystem. [ 57.875096][ T19] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 57.885605][ T19] usb 5-1: config 0 has 2 interfaces, different from the descriptor's value: 223 [ 57.901669][ T19] usb 5-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 57.915495][ T693] fuse: Bad value for 'fd' [ 57.921015][ T19] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 57.930569][ T19] usb 5-1: config 0 descriptor?? [ 57.937276][ T19] usb 5-1: Found UVC 9.00 device (046d:0825) [ 58.006912][ T617] input: syz0 as /devices/virtual/misc/uhid/0000:056A:003F.0002/input/input5 [ 58.024036][ T617] hid-generic 0000:056A:003F.0002: input,hidraw0: HID v0.00 Gamepad [syz0] on syz0 [ 58.059102][ T692] fido_id[692]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 58.104771][ T703] loop1: detected capacity change from 0 to 16 [ 59.379006][ T703] erofs: (device loop1): mounted with root inode @ nid 36. [ 59.574639][ T19] usb 5-1: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 59.600323][ T19] uvcvideo 5-1:0.1: Failed to query (129) UVC probe control : -71 (exp. 48). [ 59.611668][ T716] loop1: detected capacity change from 0 to 128 [ 59.627614][ T708] fido_id[708]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 59.645734][ T19] uvcvideo 5-1:0.1: Failed to initialize the device (-5). [ 59.717938][ T19] usb 5-1: USB disconnect, device number 6 [ 59.732040][ T718] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.739304][ T718] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.056474][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 60.056493][ T28] audit: type=1400 audit(1793944492.621:363): avc: denied { read } for pid=714 comm="syz.3.102" name="trigger" dev="tracefs" ino=2566 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 60.163795][ T724] netlink: 208 bytes leftover after parsing attributes in process `syz.2.100'. [ 60.508374][ T720] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 60.539400][ T727] loop3: detected capacity change from 0 to 1024 [ 60.596731][ T720] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.603871][ T720] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.618631][ T727] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 60.651047][ T720] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.658148][ T720] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.665616][ T727] ext4 filesystem being mounted at /17/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 60.683911][ T720] device veth0_vlan left promiscuous mode [ 60.695042][ T727] netlink: 156 bytes leftover after parsing attributes in process `syz.3.105'. [ 60.710708][ T720] device veth0_vlan entered promiscuous mode [ 60.729240][ T720] device veth1_macvtap left promiscuous mode [ 60.746910][ T720] device veth1_macvtap entered promiscuous mode [ 60.768949][ T727] device-mapper: ioctl: Unable to change uuid of mapped device syzd1 to LVM-syzd3 because uuid is already set to CRP-syzd2 [ 60.940074][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 60.961385][ T288] EXT4-fs (loop3): unmounting filesystem. [ 60.968403][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.258135][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 61.266807][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 61.275440][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 61.300919][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 61.337399][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 61.348083][ T292] input: syz0 as /devices/virtual/misc/uhid/0000:056A:003F.0003/input/input6 [ 61.351572][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 61.365854][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 61.373891][ T292] hid-generic 0000:056A:003F.0003: input,hidraw0: HID v0.00 Gamepad [syz0] on syz0 [ 61.387069][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 61.397414][ T744] fuse: Bad value for 'fd' [ 61.417795][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 61.438625][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 61.455565][ T748] loop3: detected capacity change from 0 to 1024 [ 61.464539][ T745] fido_id[745]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 61.472568][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 61.499739][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 61.521344][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 61.540176][ T748] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 61.562712][ T748] ext4 filesystem being mounted at /19/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.579679][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 61.629981][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 61.633406][ T748] netlink: 156 bytes leftover after parsing attributes in process `syz.3.111'. [ 62.494060][ T314] input: syz0 as /devices/virtual/misc/uhid/0000:056A:003F.0004/input/input7 [ 62.529650][ T314] hid-generic 0000:056A:003F.0004: input,hidraw0: HID v0.00 Gamepad [syz0] on syz0 [ 62.685927][ T764] device-mapper: ioctl: Unable to change uuid of mapped device syzd1 to LVM-syzd3 because uuid is already set to CRP-syzd2 [ 62.709475][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 62.728504][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 62.777183][ T769] loop2: detected capacity change from 0 to 256 [ 62.783570][ T28] audit: type=1400 audit(1793944495.361:364): avc: denied { sys_module } for pid=755 comm="syz.2.114" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 62.865845][ T767] fido_id[767]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 62.887930][ T288] EXT4-fs (loop3): unmounting filesystem. [ 62.896929][ T769] exFAT-fs (loop2): failed to read sector(0x800000080) [ 62.910777][ T769] exFAT-fs (loop2): failed to load upcase table [ 62.917161][ T769] exFAT-fs (loop2): failed to recognize exfat type [ 62.935431][ T775] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.942717][ T775] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.953171][ T774] loop1: detected capacity change from 0 to 512 [ 63.030120][ T774] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 63.047645][ T774] EXT4-fs (loop1): 1 truncate cleaned up [ 63.053580][ T774] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 63.063114][ T774] EXT4-fs (loop1): unmounting filesystem. [ 65.370776][ T775] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 65.404826][ T775] device veth0_vlan left promiscuous mode [ 65.411470][ T775] device veth0_vlan entered promiscuous mode [ 65.418846][ T775] device veth1_macvtap left promiscuous mode [ 65.426004][ T775] device veth1_macvtap entered promiscuous mode [ 65.491148][ T367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.508934][ T367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.529131][ T367] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.539422][ T799] loop2: detected capacity change from 0 to 128 [ 65.550905][ T367] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.557979][ T367] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.565551][ T314] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 65.583071][ T367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.614596][ T367] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.632611][ T367] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.639741][ T367] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.665256][ T367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.673925][ T367] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 65.682248][ T367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.690741][ T367] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 65.698955][ T367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.707789][ T367] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.716159][ T367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.725080][ T367] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.733718][ T367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.742194][ T367] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.760797][ T367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.769425][ T314] usb 4-1: config 0 has too many interfaces: 223, using maximum allowed: 32 [ 65.778559][ T367] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.786764][ T314] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 65.799551][ T367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.810046][ T314] usb 4-1: config 0 has 2 interfaces, different from the descriptor's value: 223 [ 65.821814][ T367] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.831924][ T314] usb 4-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 65.843657][ T367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.854904][ T314] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.864445][ T367] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.873387][ T314] usb 4-1: config 0 descriptor?? [ 65.878724][ T367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.888909][ T314] usb 4-1: Found UVC 9.00 device (046d:0825) [ 65.896508][ T367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.905918][ T367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.915871][ T367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.924673][ T367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.933559][ T367] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.941556][ T367] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2: link becomes ready [ 65.949268][ T367] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.957425][ T367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.973413][ T367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.991590][ T367] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.008777][ T367] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.044735][ T314] usb 4-1: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 66.064082][ T314] uvcvideo 4-1:0.1: Failed to query (129) UVC probe control : -71 (exp. 48). [ 66.095998][ T314] uvcvideo 4-1:0.1: Failed to initialize the device (-5). [ 66.121781][ T314] usb 4-1: USB disconnect, device number 9 [ 66.142402][ T292] input: syz0 as /devices/virtual/misc/uhid/0000:056A:003F.0005/input/input8 [ 66.162544][ T292] hid-generic 0000:056A:003F.0005: input,hidraw0: HID v0.00 Gamepad [syz0] on syz0 [ 66.201683][ T809] fido_id[809]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 66.277647][ T811] loop3: detected capacity change from 0 to 128 [ 69.511339][ T292] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 69.678368][ T24] input: syz0 as /devices/virtual/misc/uhid/0000:056A:003F.0006/input/input9 [ 69.725478][ T24] hid-generic 0000:056A:003F.0006: input,hidraw0: HID v0.00 Gamepad [syz0] on syz0 [ 69.854885][ T834] fido_id[834]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 69.874360][ T24] input: syz0 as /devices/virtual/misc/uhid/0000:056A:003F.0007/input/input10 [ 69.899425][ T24] hid-generic 0000:056A:003F.0007: input,hidraw0: HID v0.00 Gamepad [syz0] on syz0 [ 70.028884][ T24] input: syz0 as /devices/virtual/misc/uhid/0000:056A:003F.0008/input/input11 [ 70.039270][ T846] fido_id[846]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 70.051363][ T24] hid-generic 0000:056A:003F.0008: input,hidraw0: HID v0.00 Gamepad [syz0] on syz0 [ 70.164543][ T850] fido_id[850]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 70.212166][ T825] loop2: detected capacity change from 0 to 40427 [ 70.231955][ T854] loop4: detected capacity change from 0 to 256 [ 70.246865][ T825] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 70.264860][ T825] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 70.273624][ T854] exFAT-fs (loop4): failed to read sector(0x800000080) [ 70.288337][ T825] F2FS-fs (loop2): invalid crc value [ 70.303932][ T854] exFAT-fs (loop4): failed to load upcase table [ 70.324095][ T854] exFAT-fs (loop4): failed to recognize exfat type [ 70.331945][ T825] F2FS-fs (loop2): Found nat_bits in checkpoint [ 70.415403][ T825] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 70.422743][ T825] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 70.442691][ T864] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.450112][ T864] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.841805][ T868] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 70.859292][ T868] device veth0_vlan left promiscuous mode [ 70.865641][ T868] device veth0_vlan entered promiscuous mode [ 70.873542][ T868] device veth1_macvtap left promiscuous mode [ 70.880668][ T868] device veth1_macvtap entered promiscuous mode [ 70.888022][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.900403][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.908103][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.916745][ T308] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.923833][ T308] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.931784][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.940546][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.948847][ T308] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.956041][ T308] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.014549][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.030658][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 71.046463][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.067241][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 71.082906][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.091725][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.099948][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.112660][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.121552][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.129865][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.141839][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.150984][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.159955][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.168790][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.177301][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.186254][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.203481][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.229476][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.238037][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.246502][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.254951][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.263215][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.271196][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2: link becomes ready [ 71.279773][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.288967][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.299029][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.308450][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 71.342613][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.873966][ T318] input: syz0 as /devices/virtual/misc/uhid/0000:056A:003F.0009/input/input12 [ 71.894007][ T318] hid-generic 0000:056A:003F.0009: input,hidraw0: HID v0.00 Gamepad [syz0] on syz0 [ 72.181334][ T887] fido_id[887]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 72.446080][ T367] kworker/u4:5: attempt to access beyond end of device [ 72.446080][ T367] loop2: rw=1, sector=77824, nr_sectors = 2824 limit=40427 [ 72.651058][ T901] fuse: Bad value for 'fd' [ 72.874578][ T907] fuse: Bad value for 'fd' [ 72.926657][ T894] loop3: detected capacity change from 0 to 40427 [ 72.944095][ T910] overlayfs: failed to clone lowerpath [ 72.963639][ T894] F2FS-fs (loop3): invalid crc value [ 73.107342][ T894] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 73.201597][ T915] netlink: 208 bytes leftover after parsing attributes in process `syz.0.157'. [ 73.555514][ T894] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 74.303905][ T288] syz-executor: attempt to access beyond end of device [ 74.303905][ T288] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 74.396899][ T921] fuse: Bad value for 'fd' [ 74.825660][ T928] netlink: 156 bytes leftover after parsing attributes in process `syz.0.162'. [ 74.847701][ T928] No source specified [ 74.896886][ T932] fuse: Bad value for 'fd' [ 74.989885][ T939] loop3: detected capacity change from 0 to 16 [ 74.999644][ T939] erofs: (device loop3): mounted with root inode @ nid 36. [ 75.559038][ T941] loop2: detected capacity change from 0 to 40427 [ 75.595297][ T941] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 75.603690][ T941] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 75.615383][ T941] F2FS-fs (loop2): invalid crc value [ 75.653440][ T948] loop4: detected capacity change from 0 to 1024 [ 75.662595][ T948] EXT4-fs: Ignoring removed oldalloc option [ 75.668603][ T948] EXT4-fs: Ignoring removed oldalloc option [ 75.677377][ T948] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 76.428040][ T941] F2FS-fs (loop2): Found nat_bits in checkpoint [ 76.438551][ T948] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 76.469312][ T28] audit: type=1400 audit(1793944509.051:365): avc: denied { connect } for pid=945 comm="syz.4.168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 76.735395][ T941] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 76.834813][ T941] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 76.835832][ T28] audit: type=1400 audit(1793944509.111:366): avc: denied { getopt } for pid=945 comm="syz.4.168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 76.865121][ T291] EXT4-fs (loop4): unmounting filesystem. [ 77.171767][ T960] loop1: detected capacity change from 0 to 40427 [ 77.187350][ T960] F2FS-fs (loop1): invalid crc value [ 77.213339][ T960] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 77.268044][ T960] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 77.358419][ T308] kworker/u4:3: attempt to access beyond end of device [ 77.358419][ T308] loop2: rw=1, sector=77824, nr_sectors = 4096 limit=40427 [ 77.442751][ T308] kworker/u4:3: attempt to access beyond end of device [ 77.442751][ T308] loop2: rw=1, sector=49152, nr_sectors = 4096 limit=40427 [ 77.534827][ T308] kworker/u4:3: attempt to access beyond end of device [ 77.534827][ T308] loop2: rw=1, sector=57344, nr_sectors = 5040 limit=40427 [ 77.617046][ T977] loop1: detected capacity change from 0 to 1024 [ 77.668510][ T965] loop4: detected capacity change from 0 to 40427 [ 77.690304][ T965] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 77.699593][ T977] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 77.709595][ T965] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 77.720396][ T977] ext4 filesystem being mounted at /29/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 77.732505][ T965] F2FS-fs (loop4): invalid crc value [ 77.761275][ T977] netlink: 156 bytes leftover after parsing attributes in process `syz.1.174'. [ 77.791210][ T965] F2FS-fs (loop4): Found nat_bits in checkpoint [ 77.831055][ T977] device-mapper: ioctl: Unable to change uuid of mapped device syzb1 to LVM-syzb3 because uuid is already set to CRP-syzb2 [ 77.888261][ T989] overlayfs: failed to clone lowerpath [ 77.891509][ T287] EXT4-fs (loop1): unmounting filesystem. [ 77.907382][ T965] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 77.914812][ T965] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 78.121641][ T997] netlink: 208 bytes leftover after parsing attributes in process `syz.0.175'. [ 79.215672][ T24] input: syz0 as /devices/virtual/misc/uhid/0000:056A:003F.000A/input/input13 [ 79.260361][ T24] hid-generic 0000:056A:003F.000A: input,hidraw0: HID v0.00 Gamepad [syz0] on syz0 [ 79.281714][ T1004] loop3: detected capacity change from 0 to 256 [ 79.325528][ T1004] FAT-fs (loop3): bogus logical sector size 0 [ 79.352328][ T1004] FAT-fs (loop3): Can't find a valid FAT filesystem [ 79.361514][ T1008] fido_id[1008]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 79.530309][ T28] audit: type=1400 audit(1793944512.111:367): avc: denied { accept } for pid=1010 comm="syz.1.181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 79.807957][ T950] kworker/u4:6: attempt to access beyond end of device [ 79.807957][ T950] loop4: rw=1, sector=77824, nr_sectors = 4096 limit=40427 [ 79.834456][ T950] kworker/u4:6: attempt to access beyond end of device [ 79.834456][ T950] loop4: rw=1, sector=49152, nr_sectors = 3360 limit=40427 [ 79.853103][ T950] kworker/u4:6: attempt to access beyond end of device [ 79.853103][ T950] loop4: rw=1, sector=52512, nr_sectors = 736 limit=40427 [ 79.869721][ T950] kworker/u4:6: attempt to access beyond end of device [ 79.869721][ T950] loop4: rw=1, sector=57344, nr_sectors = 512 limit=40427 [ 79.886601][ T1021] loop3: detected capacity change from 0 to 512 [ 79.897061][ T1021] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 79.916545][ T1021] EXT4-fs (loop3): 1 truncate cleaned up [ 79.923613][ T1021] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 79.938090][ T1021] EXT4-fs (loop3): unmounting filesystem. [ 81.476715][ T314] input: syz0 as /devices/virtual/misc/uhid/0000:056A:003F.000B/input/input14 [ 81.481936][ T24] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 81.489966][ T314] hid-generic 0000:056A:003F.000B: input,hidraw0: HID v0.00 Gamepad [syz0] on syz0 [ 81.533879][ T1040] fido_id[1040]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 81.609545][ T1046] loop3: detected capacity change from 0 to 256 [ 81.657384][ T1046] FAT-fs (loop3): bogus logical sector size 0 [ 81.668424][ T1046] FAT-fs (loop3): Can't find a valid FAT filesystem [ 81.684176][ T24] usb 5-1: config 0 has too many interfaces: 223, using maximum allowed: 32 [ 81.693058][ T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 81.704246][ T24] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 223 [ 81.713657][ T24] usb 5-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 81.723454][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.800532][ T24] usb 5-1: config 0 descriptor?? [ 81.807033][ T24] usb 5-1: Found UVC 9.00 device (046d:0825) [ 81.825381][ T24] usb 5-1: No streaming interface found for terminal 2. [ 82.600635][ T1060] netlink: 208 bytes leftover after parsing attributes in process `syz.1.193'. [ 83.126240][ T1077] netlink: 164 bytes leftover after parsing attributes in process `syz.3.198'. [ 83.172585][ T28] audit: type=1400 audit(1793944515.711:368): avc: denied { write } for pid=1075 comm="syz.3.198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 83.334034][ T1080] loop1: detected capacity change from 0 to 1024 [ 83.361845][ T1080] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 83.371005][ T1080] ext4 filesystem being mounted at /34/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 83.385079][ T1080] netlink: 156 bytes leftover after parsing attributes in process `syz.1.199'. [ 83.396723][ T1080] device-mapper: ioctl: Unable to change uuid of mapped device syzb1 to LVM-syzb3 because uuid is already set to CRP-syzb2 [ 83.421261][ T287] EXT4-fs (loop1): unmounting filesystem. [ 83.449878][ T1088] loop1: detected capacity change from 0 to 512 [ 83.467003][ T1088] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 83.479579][ T1088] EXT4-fs (loop1): 1 truncate cleaned up [ 83.485411][ T1088] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 83.495829][ T1088] EXT4-fs (loop1): unmounting filesystem. [ 84.508694][ T1095] fuse: Bad value for 'fd' [ 86.772046][ T24] usb 5-1: USB disconnect, device number 8 [ 86.802162][ T1107] fuse: Bad value for 'fd' [ 86.955081][ T1110] loop4: detected capacity change from 0 to 16 [ 87.010674][ T1113] netlink: 164 bytes leftover after parsing attributes in process `syz.1.208'. [ 87.151474][ T1110] erofs: (device loop4): mounted with root inode @ nid 36. [ 87.232364][ T1119] overlayfs: failed to clone upperpath [ 87.257937][ T1118] overlayfs: failed to clone lowerpath [ 87.313147][ T1110] erofs: (device loop4): z_erofs_readahead: readahead error at page 4 @ nid 89 [ 87.550366][ T1118] netlink: 208 bytes leftover after parsing attributes in process `syz.0.210'. [ 87.559838][ T1110] erofs: (device loop4): z_erofs_readahead: readahead error at page 3 @ nid 89 [ 87.569180][ T1110] syz.4.206: attempt to access beyond end of device [ 87.569180][ T1110] loop4: rw=524288, sector=34359738360, nr_sectors = 8 limit=16 [ 87.590938][ T1110] syz.4.206: attempt to access beyond end of device [ 87.590938][ T1110] loop4: rw=524288, sector=8, nr_sectors = 16 limit=16 [ 87.698471][ T24] input: syz0 as /devices/virtual/misc/uhid/0000:056A:003F.000C/input/input15 [ 87.710143][ T24] hid-generic 0000:056A:003F.000C: input,hidraw0: HID v0.00 Gamepad [syz0] on syz0 [ 87.803850][ T292] input: syz0 as /devices/virtual/misc/uhid/0000:056A:003F.000D/input/input16 [ 87.827489][ T292] hid-generic 0000:056A:003F.000D: input,hidraw1: HID v0.00 Gamepad [syz0] on syz0 [ 87.897646][ T1130] fido_id[1130]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 87.923827][ T1135] fido_id[1135]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 88.997143][ T1138] loop3: detected capacity change from 0 to 40427 [ 89.012929][ T1138] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 89.029005][ T1138] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 89.064223][ T1138] F2FS-fs (loop3): invalid crc value [ 89.109273][ T1138] F2FS-fs (loop3): Found nat_bits in checkpoint [ 89.827144][ T1138] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 89.970073][ T1138] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 90.422674][ T1166] loop1: detected capacity change from 0 to 1024 [ 90.431596][ T1166] EXT4-fs: Ignoring removed oldalloc option [ 90.437595][ T1166] EXT4-fs: Ignoring removed oldalloc option [ 90.490928][ T1166] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 91.283048][ T1166] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 91.726227][ T287] EXT4-fs (loop1): unmounting filesystem. [ 91.798935][ T8] kworker/u4:0: attempt to access beyond end of device [ 91.798935][ T8] loop3: rw=1, sector=77824, nr_sectors = 2048 limit=40427 [ 91.814125][ T8] kworker/u4:0: attempt to access beyond end of device [ 91.814125][ T8] loop3: rw=1, sector=79872, nr_sectors = 120 limit=40427 [ 93.211133][ T1179] Driver unsupported XDP return value 0 on prog (id 49) dev N/A, expect packet loss! [ 93.248800][ T1181] loop1: detected capacity change from 0 to 256 [ 93.294083][ T1181] FAT-fs (loop1): bogus logical sector size 0 [ 93.313109][ T1181] FAT-fs (loop1): Can't find a valid FAT filesystem [ 93.492858][ T24] input: syz0 as /devices/virtual/misc/uhid/0000:056A:003F.000E/input/input17 [ 93.524126][ T24] hid-generic 0000:056A:003F.000E: input,hidraw0: HID v0.00 Gamepad [syz0] on syz0 [ 93.688820][ T1191] loop1: detected capacity change from 0 to 128 [ 94.468177][ T1194] fido_id[1194]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 94.918749][ T1205] loop4: detected capacity change from 0 to 1024 [ 94.925636][ T1205] EXT4-fs: Ignoring removed oldalloc option [ 94.931633][ T1205] EXT4-fs: Ignoring removed oldalloc option [ 95.550552][ T1205] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 96.259915][ T1205] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 96.436685][ T291] EXT4-fs (loop4): unmounting filesystem. [ 96.475059][ T1218] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.482501][ T1218] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.493846][ T318] input: syz0 as /devices/virtual/misc/uhid/0000:056A:003F.000F/input/input18 [ 96.510157][ T318] hid-generic 0000:056A:003F.000F: input,hidraw0: HID v0.00 Gamepad [syz0] on syz0 [ 96.555401][ T1225] fuse: Bad value for 'fd' [ 96.568870][ T1222] fido_id[1222]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 96.625648][ T318] input: syz0 as /devices/virtual/misc/uhid/0000:056A:003F.0010/input/input19 [ 96.636780][ T318] hid-generic 0000:056A:003F.0010: input,hidraw0: HID v0.00 Gamepad [syz0] on syz0 [ 97.060081][ T1241] loop4: detected capacity change from 0 to 40427 [ 97.076344][ T1241] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 97.101036][ T1241] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 97.113744][ T1241] F2FS-fs (loop4): invalid crc value [ 97.385795][ T1241] F2FS-fs (loop4): Found nat_bits in checkpoint [ 97.537052][ T617] input: syz0 as /devices/virtual/misc/uhid/0000:056A:003F.0011/input/input20 [ 97.558859][ T617] hid-generic 0000:056A:003F.0011: input,hidraw0: HID v0.00 Gamepad [syz0] on syz0 [ 97.628902][ T1241] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 97.702644][ T1260] fido_id[1260]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 97.990449][ T1241] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 98.465016][ T318] input: syz0 as /devices/virtual/misc/uhid/0000:056A:003F.0012/input/input21 [ 98.561333][ T318] hid-generic 0000:056A:003F.0012: input,hidraw0: HID v0.00 Gamepad [syz0] on syz0 [ 98.680863][ T1266] fido_id[1266]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 98.929428][ T1279] fuse: Bad value for 'fd' [ 98.975421][ T1281] fuse: Bad value for 'fd' [ 99.202536][ T291] syz-executor: attempt to access beyond end of device [ 99.202536][ T291] loop4: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 99.537883][ T1289] loop4: detected capacity change from 0 to 128 [ 99.782663][ T1297] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.790189][ T1297] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.818058][ T1300] loop1: detected capacity change from 0 to 256 [ 99.836436][ T1300] FAT-fs (loop1): bogus logical sector size 0 [ 99.843046][ T1300] FAT-fs (loop1): Can't find a valid FAT filesystem [ 100.517023][ T1304] overlayfs: failed to clone lowerpath [ 100.992899][ T1306] loop4: detected capacity change from 0 to 1024 [ 101.134909][ T617] input: syz0 as /devices/virtual/misc/uhid/0000:056A:003F.0013/input/input22 [ 101.153597][ T1306] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 101.163016][ T1306] ext4 filesystem being mounted at /42/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 101.180405][ T617] hid-generic 0000:056A:003F.0013: input,hidraw0: HID v0.00 Gamepad [syz0] on syz0 [ 101.197127][ T1316] netlink: 208 bytes leftover after parsing attributes in process `syz.0.256'. [ 102.062000][ T1315] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 102.117865][ T1315] EXT4-fs (loop4): Remounting filesystem read-only [ 102.295507][ T1306] netlink: 156 bytes leftover after parsing attributes in process `syz.4.257'. [ 102.327603][ T1324] fuse: Bad value for 'fd' [ 102.349752][ T1306] device-mapper: ioctl: Unable to change uuid of mapped device syze1 to LVM-syze3 because uuid is already set to CRP-syze2 [ 102.381728][ T291] EXT4-fs (loop4): unmounting filesystem. [ 102.428230][ T1334] loop4: detected capacity change from 0 to 16 [ 102.523455][ T1334] erofs: (device loop4): mounted with root inode @ nid 36. [ 102.535993][ T1334] erofs: (device loop4): z_erofs_readahead: readahead error at page 4 @ nid 89 [ 102.545280][ T1334] erofs: (device loop4): z_erofs_readahead: readahead error at page 3 @ nid 89 [ 102.554898][ T1334] syz.4.263: attempt to access beyond end of device [ 102.554898][ T1334] loop4: rw=524288, sector=34359738360, nr_sectors = 8 limit=16 [ 102.570276][ T1334] syz.4.263: attempt to access beyond end of device [ 102.570276][ T1334] loop4: rw=524288, sector=8, nr_sectors = 16 limit=16 [ 103.905878][ T1349] loop4: detected capacity change from 0 to 40427 [ 103.920385][ T1349] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 103.928181][ T1349] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 103.954370][ T1349] F2FS-fs (loop4): invalid crc value [ 103.973877][ T1349] F2FS-fs (loop4): Found nat_bits in checkpoint [ 104.014360][ T1349] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 104.021641][ T1349] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 104.358967][ T19] input: syz0 as /devices/virtual/misc/uhid/0000:056A:003F.0014/input/input23 [ 104.368735][ T19] hid-generic 0000:056A:003F.0014: input,hidraw0: HID v0.00 Gamepad [syz0] on syz0 [ 104.685847][ T1376] loop1: detected capacity change from 0 to 256 [ 105.196889][ T1379] fido_id[1379]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 105.221475][ T1376] exFAT-fs (loop1): failed to read sector(0x800000080) [ 105.240944][ T1376] exFAT-fs (loop1): failed to load upcase table [ 105.255922][ T1376] exFAT-fs (loop1): failed to recognize exfat type [ 105.363097][ T1385] overlayfs: failed to clone lowerpath [ 105.712142][ T1385] netlink: 208 bytes leftover after parsing attributes in process `syz.0.278'. [ 105.807370][ T19] input: syz0 as /devices/virtual/misc/uhid/0000:056A:003F.0015/input/input24 [ 105.818491][ T19] hid-generic 0000:056A:003F.0015: input,hidraw0: HID v0.00 Gamepad [syz0] on syz0 [ 105.889023][ T1401] netlink: 208 bytes leftover after parsing attributes in process `syz.4.280'. [ 105.899622][ T1402] loop3: detected capacity change from 0 to 16 [ 105.940737][ T1402] erofs: (device loop3): mounted with root inode @ nid 36. [ 106.272263][ T1406] overlayfs: failed to clone lowerpath [ 106.853806][ T1416] netlink: 208 bytes leftover after parsing attributes in process `syz.2.283'. [ 109.067438][ T1414] loop1: detected capacity change from 0 to 40427 [ 109.091518][ T1414] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 109.129708][ T1414] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 109.194390][ T1414] F2FS-fs (loop1): invalid crc value [ 109.240920][ T1414] F2FS-fs (loop1): Found nat_bits in checkpoint [ 109.314219][ T1418] loop3: detected capacity change from 0 to 40427 [ 109.330039][ T1418] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 109.337853][ T1418] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 109.360569][ T1418] F2FS-fs (loop3): invalid crc value [ 109.390962][ T1418] F2FS-fs (loop3): Found nat_bits in checkpoint [ 109.486364][ T1418] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 109.510041][ T1418] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 109.921882][ T1452] loop1: detected capacity change from 0 to 256 [ 109.960152][ T1452] exFAT-fs (loop1): failed to read sector(0x800000080) [ 111.250140][ T1452] exFAT-fs (loop1): failed to load upcase table [ 111.272938][ T1452] exFAT-fs (loop1): failed to recognize exfat type [ 111.394080][ T288] syz-executor: attempt to access beyond end of device [ 111.394080][ T288] loop3: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 111.413101][ T617] input: syz0 as /devices/virtual/misc/uhid/0000:056A:003F.0016/input/input25 [ 111.424169][ T1462] overlayfs: failed to clone upperpath [ 111.431557][ T617] hid-generic 0000:056A:003F.0016: input,hidraw0: HID v0.00 Gamepad [syz0] on syz0 [ 111.542203][ T1464] fido_id[1464]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 111.565297][ T1469] loop1: detected capacity change from 0 to 16 [ 111.602630][ T1469] erofs: (device loop1): mounted with root inode @ nid 36. [ 111.620823][ T1469] erofs: (device loop1): z_erofs_readahead: readahead error at page 4 @ nid 89 [ 111.661779][ T1469] erofs: (device loop1): z_erofs_readahead: readahead error at page 3 @ nid 89 [ 111.744162][ T1469] syz.1.299: attempt to access beyond end of device [ 111.744162][ T1469] loop1: rw=524288, sector=34359738360, nr_sectors = 8 limit=16 [ 111.759014][ T1475] overlayfs: failed to clone upperpath [ 111.861986][ T1469] syz.1.299: attempt to access beyond end of device [ 111.861986][ T1469] loop1: rw=524288, sector=8, nr_sectors = 16 limit=16 [ 112.207969][ T1480] fuse: Bad value for 'fd' [ 112.311141][ T1468] loop4: detected capacity change from 0 to 40427 [ 112.327797][ T1468] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 112.356401][ T1468] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 112.382707][ T1468] F2FS-fs (loop4): invalid crc value [ 112.424554][ T1468] F2FS-fs (loop4): Found nat_bits in checkpoint [ 112.541621][ T1468] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 112.548718][ T1468] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 112.801157][ T1494] fuse: Bad value for 'fd' [ 112.985767][ T319] input: syz0 as /devices/virtual/misc/uhid/0000:056A:003F.0017/input/input26 [ 113.011236][ T319] hid-generic 0000:056A:003F.0017: input,hidraw0: HID v0.00 Gamepad [syz0] on syz0 [ 113.086463][ T1501] fido_id[1501]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 113.113610][ T319] input: syz0 as /devices/virtual/misc/uhid/0000:056A:003F.0018/input/input27 [ 113.133087][ T319] hid-generic 0000:056A:003F.0018: input,hidraw0: HID v0.00 Gamepad [syz0] on syz0 [ 113.224491][ T1505] fido_id[1505]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 113.642804][ T1511] loop4: detected capacity change from 0 to 256 [ 113.666810][ T1511] exFAT-fs (loop4): failed to read sector(0x800000080) [ 113.719719][ T1511] exFAT-fs (loop4): failed to load upcase table [ 113.733572][ T1511] exFAT-fs (loop4): failed to recognize exfat type [ 113.741128][ T1514] overlayfs: failed to clone lowerpath [ 115.317737][ T1527] loop1: detected capacity change from 0 to 1024 [ 115.387306][ T1527] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 115.406737][ T1527] ext4 filesystem being mounted at /61/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 115.461539][ T1527] netlink: 156 bytes leftover after parsing attributes in process `syz.1.316'. [ 115.501088][ T1527] device-mapper: ioctl: Unable to change uuid of mapped device syzb1 to LVM-syzb3 because uuid is already set to CRP-syzb2 [ 115.545316][ T287] EXT4-fs (loop1): unmounting filesystem. [ 116.851202][ T1551] loop3: detected capacity change from 0 to 128 [ 117.009207][ T19] input: syz0 as /devices/virtual/misc/uhid/0000:056A:003F.0019/input/input28 [ 117.024416][ T19] hid-generic 0000:056A:003F.0019: input,hidraw0: HID v0.00 Gamepad [syz0] on syz0 [ 117.099354][ T1558] fido_id[1558]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 117.346839][ T1556] loop4: detected capacity change from 0 to 40427 [ 117.360831][ T1556] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 117.374522][ T1556] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 117.383732][ T1556] F2FS-fs (loop4): invalid crc value [ 117.418794][ T1556] F2FS-fs (loop4): Found nat_bits in checkpoint [ 117.496170][ T1556] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 117.510014][ T1556] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 117.564187][ T1563] loop1: detected capacity change from 0 to 40427 [ 117.580042][ T1563] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 117.587830][ T1563] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 117.627896][ T1563] F2FS-fs (loop1): invalid crc value [ 117.690958][ T1563] F2FS-fs (loop1): Found nat_bits in checkpoint [ 117.740333][ T1573] loop3: detected capacity change from 0 to 16 [ 117.761204][ T1573] erofs: (device loop3): mounted with root inode @ nid 36. [ 117.775773][ T1563] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 117.784028][ T1563] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 117.797791][ T1573] erofs: (device loop3): z_erofs_readahead: readahead error at page 4 @ nid 89 [ 117.837036][ T1573] erofs: (device loop3): z_erofs_readahead: readahead error at page 3 @ nid 89 [ 117.846240][ T1573] syz.3.325: attempt to access beyond end of device [ 117.846240][ T1573] loop3: rw=524288, sector=34359738360, nr_sectors = 8 limit=16 [ 117.870111][ T1573] syz.3.325: attempt to access beyond end of device [ 117.870111][ T1573] loop3: rw=524288, sector=8, nr_sectors = 16 limit=16 [ 117.924790][ T291] syz-executor: attempt to access beyond end of device [ 117.924790][ T291] loop4: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 118.087244][ T1582] fuse: Bad value for 'fd' [ 118.294657][ T287] syz-executor: attempt to access beyond end of device [ 118.294657][ T287] loop1: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 119.725796][ T1597] loop4: detected capacity change from 0 to 16 [ 119.735723][ T1597] erofs: (device loop4): mounted with root inode @ nid 36. [ 121.313999][ T28] audit: type=1400 audit(1793944553.901:369): avc: denied { read } for pid=1611 comm="syz.1.335" name="usbmon3" dev="devtmpfs" ino=168 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 121.367630][ T28] audit: type=1400 audit(1793944553.931:370): avc: denied { open } for pid=1611 comm="syz.1.335" path="/dev/usbmon3" dev="devtmpfs" ino=168 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 121.440009][ T28] audit: type=1400 audit(1793944553.941:371): avc: denied { connect } for pid=1611 comm="syz.1.335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 121.712140][ T1620] loop1: detected capacity change from 0 to 256 [ 121.728830][ T1620] exFAT-fs (loop1): failed to read sector(0x800000080) [ 121.748705][ T1620] exFAT-fs (loop1): failed to load upcase table [ 121.774120][ T1620] exFAT-fs (loop1): failed to recognize exfat type [ 121.818509][ T1624] loop3: detected capacity change from 0 to 1024 [ 121.830230][ T1608] loop4: detected capacity change from 0 to 40427 [ 121.850027][ T1608] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 121.857871][ T1608] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 122.074747][ T1608] F2FS-fs (loop4): invalid crc value [ 122.178123][ T1624] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 122.199291][ T1608] F2FS-fs (loop4): Found nat_bits in checkpoint [ 122.251238][ T1624] ext4 filesystem being mounted at /61/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 122.640322][ T1624] netlink: 156 bytes leftover after parsing attributes in process `syz.3.339'. [ 122.650297][ T1608] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 122.664026][ T1608] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 122.683324][ T1632] input: syz0 as /devices/virtual/misc/uhid/0000:056A:003F.001A/input/input29 [ 122.695543][ T1624] device-mapper: ioctl: Unable to change uuid of mapped device syzd1 to LVM-syzd3 because uuid is already set to CRP-syzd2 [ 122.751059][ T1632] hid-generic 0000:056A:003F.001A: input,hidraw0: HID v0.00 Gamepad [syz0] on syz0 [ 122.816713][ T288] EXT4-fs (loop3): unmounting filesystem. [ 122.885636][ T1639] fido_id[1639]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 122.954703][ T1643] overlayfs: failed to clone lowerpath [ 122.987178][ T1643] netlink: 208 bytes leftover after parsing attributes in process `syz.2.344'. [ 123.333704][ T43] kworker/u4:2: attempt to access beyond end of device [ 123.333704][ T43] loop4: rw=1, sector=77824, nr_sectors = 2104 limit=40427 [ 123.387564][ T43] kworker/u4:2: attempt to access beyond end of device [ 123.387564][ T43] loop4: rw=1, sector=79928, nr_sectors = 1992 limit=40427 [ 123.407577][ T43] kworker/u4:2: attempt to access beyond end of device [ 123.407577][ T43] loop4: rw=1, sector=49152, nr_sectors = 2048 limit=40427 [ 123.427541][ T43] kworker/u4:2: attempt to access beyond end of device [ 123.427541][ T43] loop4: rw=1, sector=51200, nr_sectors = 2048 limit=40427 [ 123.444905][ T43] kworker/u4:2: attempt to access beyond end of device [ 123.444905][ T43] loop4: rw=1, sector=57344, nr_sectors = 1016 limit=40427 [ 123.470043][ T369] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 123.492080][ T1656] fuse: Bad value for 'fd' [ 123.512875][ T1641] loop1: detected capacity change from 0 to 40427 [ 123.537940][ T1641] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 123.552891][ T1641] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 123.571542][ T1641] F2FS-fs (loop1): invalid crc value [ 123.578332][ T1641] F2FS-fs (loop1): Found nat_bits in checkpoint [ 123.632425][ T1641] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 123.640354][ T1641] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 123.681281][ T369] usb 4-1: config 0 has too many interfaces: 223, using maximum allowed: 32 [ 123.697801][ T369] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 123.710331][ T1668] loop4: detected capacity change from 0 to 16 [ 123.732762][ T369] usb 4-1: config 0 has 2 interfaces, different from the descriptor's value: 223 [ 123.756562][ T1668] erofs: (device loop4): mounted with root inode @ nid 36. [ 123.771282][ T369] usb 4-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 123.792679][ T369] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.806637][ T1668] erofs: (device loop4): z_erofs_readahead: readahead error at page 4 @ nid 89 [ 123.821363][ T369] usb 4-1: config 0 descriptor?? [ 123.837405][ T1668] erofs: (device loop4): z_erofs_readahead: readahead error at page 3 @ nid 89 [ 123.849541][ T369] usb 4-1: Found UVC 9.00 device (046d:0825) [ 123.898158][ T1671] fuse: Bad value for 'fd' [ 123.912212][ T1668] syz.4.350: attempt to access beyond end of device [ 123.912212][ T1668] loop4: rw=524288, sector=34359738360, nr_sectors = 8 limit=16 [ 123.952722][ T1668] syz.4.350: attempt to access beyond end of device [ 123.952722][ T1668] loop4: rw=524288, sector=8, nr_sectors = 16 limit=16 [ 124.045156][ T10] kworker/u4:1: attempt to access beyond end of device [ 124.045156][ T10] loop1: rw=1, sector=77824, nr_sectors = 2048 limit=40427 [ 124.096185][ T10] kworker/u4:1: attempt to access beyond end of device [ 124.096185][ T10] loop1: rw=1, sector=79872, nr_sectors = 2048 limit=40427 [ 124.136785][ T10] kworker/u4:1: attempt to access beyond end of device [ 124.136785][ T10] loop1: rw=1, sector=49152, nr_sectors = 2048 limit=40427 [ 124.466913][ T1681] netlink: 156 bytes leftover after parsing attributes in process `syz.0.354'. [ 124.514648][ T1681] No source specified [ 124.977478][ T28] audit: type=1400 audit(1793944557.561:372): avc: denied { nlmsg_read } for pid=1691 comm="syz.2.357" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 124.999304][ T1692] netlink: 164 bytes leftover after parsing attributes in process `syz.2.357'. [ 125.123306][ T369] uvcvideo 4-1:0.1: Failed to set UVC probe control : -71 (exp. 48). [ 125.136193][ T369] uvcvideo 4-1:0.1: Failed to query (129) UVC probe control : -71 (exp. 48). [ 125.176013][ T369] uvcvideo 4-1:0.1: Failed to initialize the device (-5). [ 125.201685][ T369] usb 4-1: USB disconnect, device number 10 [ 125.802985][ T1703] loop3: detected capacity change from 0 to 128 [ 125.854359][ T1709] fuse: Bad value for 'fd' [ 126.234716][ T1723] netlink: 156 bytes leftover after parsing attributes in process `syz.0.366'. [ 126.272924][ T1723] No source specified [ 126.862378][ T1728] loop1: detected capacity change from 0 to 40427 [ 126.890254][ T1728] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 126.898047][ T1728] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 126.918735][ T1728] F2FS-fs (loop1): invalid crc value [ 126.943820][ T1728] F2FS-fs (loop1): Found nat_bits in checkpoint [ 126.995126][ T1733] loop3: detected capacity change from 0 to 40427 [ 127.012855][ T1733] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 127.033325][ T1728] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 127.036863][ T1733] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 127.041274][ T1728] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 127.057438][ T1733] F2FS-fs (loop3): invalid crc value [ 127.087431][ T1733] F2FS-fs (loop3): Found nat_bits in checkpoint [ 127.187358][ T1733] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 127.204660][ T1733] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 127.219034][ T1751] fuse: Bad value for 'fd' [ 127.406702][ T28] audit: type=1400 audit(1793944559.991:373): avc: denied { ioctl } for pid=1758 comm="syz.0.375" path="socket:[21278]" dev="sockfs" ino=21278 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 129.101138][ T1778] fuse: Bad value for 'fd' [ 129.344550][ T1766] loop1: detected capacity change from 0 to 40427 [ 129.728369][ T1766] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 130.182700][ T1766] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 130.238495][ T1766] F2FS-fs (loop1): invalid crc value [ 130.340234][ T1766] F2FS-fs (loop1): Found nat_bits in checkpoint [ 130.405960][ T1793] fuse: Bad value for 'fd' [ 130.440281][ T1766] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 130.447555][ T1766] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 130.611744][ T1800] overlayfs: failed to clone lowerpath [ 130.728949][ T1800] netlink: 208 bytes leftover after parsing attributes in process `syz.0.386'. [ 130.760538][ T1766] syz.1.376 (1766) used greatest stack depth: 19744 bytes left [ 130.923291][ T1808] fuse: Bad value for 'fd' [ 132.257280][ T1813] loop1: detected capacity change from 0 to 40427 [ 132.280081][ T1813] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 132.308212][ T1813] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 132.328937][ T1813] F2FS-fs (loop1): invalid crc value [ 132.427045][ T1813] F2FS-fs (loop1): Found nat_bits in checkpoint [ 132.522858][ T1833] overlayfs: failed to clone upperpath [ 132.840243][ T1813] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 132.847541][ T1813] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 132.897365][ T1844] loop4: detected capacity change from 0 to 512 [ 132.918573][ T1844] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 132.935445][ T1839] netlink: 208 bytes leftover after parsing attributes in process `syz.3.399'. [ 132.946269][ T1844] EXT4-fs (loop4): 1 truncate cleaned up [ 132.952583][ T1844] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 133.027702][ T28] audit: type=1400 audit(1793944565.611:374): avc: denied { read } for pid=1849 comm="syz.3.402" name="loop-control" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 133.055972][ T28] audit: type=1400 audit(1793944565.611:375): avc: denied { open } for pid=1849 comm="syz.3.402" path="/dev/loop-control" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 133.080901][ T28] audit: type=1400 audit(1793944565.651:376): avc: denied { mounton } for pid=1849 comm="syz.3.402" path="/69/file0" dev="tmpfs" ino=452 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 133.107053][ T28] audit: type=1400 audit(1793944565.701:377): avc: denied { create } for pid=1843 comm="syz.4.401" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 133.138991][ T335] bio_check_eod: 11 callbacks suppressed [ 133.139005][ T335] kworker/u4:4: attempt to access beyond end of device [ 133.139005][ T335] loop1: rw=1, sector=77824, nr_sectors = 4096 limit=40427 [ 133.165243][ T335] kworker/u4:4: attempt to access beyond end of device [ 133.165243][ T335] loop1: rw=1, sector=49152, nr_sectors = 1264 limit=40427 [ 133.313310][ T1861] loop1: detected capacity change from 0 to 4096 [ 134.503495][ T28] audit: type=1400 audit(1793944566.041:378): avc: denied { sqpoll } for pid=1857 comm="syz.3.405" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 134.523550][ T1861] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 134.532524][ T1861] EXT4-fs (loop1): Test dummy encryption mode enabled [ 134.541122][ T1861] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 134.945428][ T291] EXT4-fs (loop4): unmounting filesystem. [ 135.779553][ T1884] loop4: detected capacity change from 0 to 256 [ 135.796610][ T1884] exFAT-fs (loop4): failed to read sector(0x800000080) [ 135.803849][ T1884] exFAT-fs (loop4): failed to load upcase table [ 135.811704][ T1884] exFAT-fs (loop4): failed to recognize exfat type [ 135.823304][ T1885] fuse: Bad value for 'fd' [ 135.905861][ T1889] fuse: Bad value for 'fd' [ 135.962720][ T1893] overlayfs: failed to clone lowerpath [ 136.041059][ T1894] loop4: detected capacity change from 0 to 16 [ 136.065061][ T1894] erofs: (device loop4): mounted with root inode @ nid 36. [ 136.088313][ T1893] netlink: 208 bytes leftover after parsing attributes in process `syz.0.413'. [ 136.110273][ T1894] erofs: (device loop4): z_erofs_readahead: readahead error at page 4 @ nid 89 [ 136.139582][ T1894] erofs: (device loop4): z_erofs_readahead: readahead error at page 3 @ nid 89 [ 136.170297][ T1894] syz.4.412: attempt to access beyond end of device [ 136.170297][ T1894] loop4: rw=524288, sector=34359738360, nr_sectors = 8 limit=16 [ 136.228524][ T1894] syz.4.412: attempt to access beyond end of device [ 136.228524][ T1894] loop4: rw=524288, sector=8, nr_sectors = 16 limit=16 [ 136.264149][ T287] EXT4-fs (loop1): unmounting filesystem. [ 136.308495][ T1901] netlink: 'syz.1.415': attribute type 11 has an invalid length. [ 136.326190][ T1901] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.415'. [ 136.489322][ T1910] overlayfs: failed to clone upperpath [ 137.113810][ T1919] netlink: 208 bytes leftover after parsing attributes in process `syz.4.418'. [ 137.224863][ T1928] loop1: detected capacity change from 0 to 256 [ 137.232479][ T1930] fuse: Bad value for 'fd' [ 137.245211][ T1932] overlayfs: failed to clone lowerpath [ 137.253591][ T1928] exFAT-fs (loop1): failed to read sector(0x800000080) [ 137.261009][ T1928] exFAT-fs (loop1): failed to load upcase table [ 137.267488][ T1928] exFAT-fs (loop1): failed to recognize exfat type [ 137.371559][ T1938] netlink: 12 bytes leftover after parsing attributes in process `syz.1.426'. [ 137.494826][ T1932] netlink: 208 bytes leftover after parsing attributes in process `syz.3.424'. [ 137.524985][ T1939] netlink: 28 bytes leftover after parsing attributes in process `syz.1.426'. [ 137.603982][ T1939] netlink: 28 bytes leftover after parsing attributes in process `syz.1.426'. [ 137.656794][ T1939] netlink: 20 bytes leftover after parsing attributes in process `syz.1.426'. [ 138.448199][ T28] audit: type=1400 audit(1793944571.031:379): avc: denied { mount } for pid=1950 comm="syz.2.428" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 138.632135][ T28] audit: type=1400 audit(1793944571.221:380): avc: denied { read } for pid=1968 comm="syz.0.433" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 138.651991][ T1965] netlink: 4 bytes leftover after parsing attributes in process `syz.1.429'. [ 139.021034][ T1978] loop4: detected capacity change from 0 to 16 [ 139.030393][ T1978] erofs: (device loop4): mounted with root inode @ nid 36. [ 139.467387][ T1985] overlayfs: failed to clone upperpath [ 139.819430][ T1992] loop4: detected capacity change from 0 to 256 [ 139.827388][ T1991] netlink: 272 bytes leftover after parsing attributes in process `syz.2.440'. [ 139.864917][ T1992] FAT-fs (loop4): bogus logical sector size 0 [ 140.150067][ T1992] FAT-fs (loop4): Can't find a valid FAT filesystem [ 140.160821][ T28] audit: type=1400 audit(1793944572.751:381): avc: denied { sys_admin } for pid=1989 comm="syz.2.440" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 140.199840][ T28] audit: type=1400 audit(1793944572.781:382): avc: denied { associate } for pid=1995 comm="syz.2.440" name="core" scontext=root:object_r:etc_runtime_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 140.279279][ T1997] overlayfs: failed to clone lowerpath [ 140.394362][ T28] audit: type=1400 audit(1793944572.981:383): avc: denied { remove_name } for pid=1998 comm="syz.4.443" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 140.480674][ T28] audit: type=1400 audit(1793944573.011:384): avc: denied { rename } for pid=1998 comm="syz.4.443" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 140.914338][ T2022] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 140.968764][ T2024] fuse: Bad value for 'fd' [ 141.229182][ T2036] capability: warning: `syz.2.456' uses deprecated v2 capabilities in a way that may be insecure [ 142.447312][ T2043] fuse: Bad value for 'fd' [ 142.807217][ T2033] loop4: detected capacity change from 0 to 40427 [ 142.844242][ T2033] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 142.871274][ T2033] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 142.903007][ T2033] F2FS-fs (loop4): invalid crc value [ 142.936265][ T2033] F2FS-fs (loop4): Found nat_bits in checkpoint [ 143.020342][ T2033] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 143.027514][ T2033] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 143.050788][ T2063] loop1: detected capacity change from 0 to 256 [ 143.073391][ T2063] exFAT-fs (loop1): failed to read sector(0x800000080) [ 143.094412][ T2063] exFAT-fs (loop1): failed to load upcase table [ 143.110040][ T2063] exFAT-fs (loop1): failed to recognize exfat type [ 143.273063][ T2066] loop1: detected capacity change from 0 to 512 [ 143.379864][ T2066] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 143.400602][ T2066] ext4 filesystem being mounted at /84/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 143.431483][ T28] audit: type=1400 audit(1793944576.021:385): avc: denied { setattr } for pid=2065 comm="syz.1.464" name="bus" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 143.467085][ T287] EXT4-fs (loop1): unmounting filesystem. [ 143.488331][ T2075] loop1: detected capacity change from 0 to 256 [ 143.511650][ T2075] FAT-fs (loop1): bogus logical sector size 0 [ 143.527165][ T2075] FAT-fs (loop1): Can't find a valid FAT filesystem [ 143.580813][ T2075] FAULT_INJECTION: forcing a failure. [ 143.580813][ T2075] name failslab, interval 1, probability 0, space 0, times 0 [ 143.609036][ T2077] fuse: Bad value for 'fd' [ 143.613946][ T2075] CPU: 1 PID: 2075 Comm: syz.1.467 Not tainted syzkaller #0 [ 143.621276][ T2075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 143.631494][ T2075] Call Trace: [ 143.634805][ T2075] [ 143.637767][ T2075] __dump_stack+0x21/0x24 [ 143.642248][ T2075] dump_stack_lvl+0x110/0x170 [ 143.646990][ T2075] ? __cfi_dump_stack_lvl+0x8/0x8 [ 143.652052][ T2075] ? selinux_kernfs_init_security+0x143/0x450 [ 143.658262][ T2075] dump_stack+0x15/0x24 [ 143.662461][ T2075] should_fail_ex+0x3bf/0x510 [ 143.667192][ T2075] ? __kernfs_new_node+0xe1/0x670 [ 143.672343][ T2075] __should_failslab+0xac/0xf0 [ 143.677167][ T2075] should_failslab+0x9/0x20 [ 143.681735][ T2075] kmem_cache_alloc+0x3b/0x320 [ 143.686564][ T2075] __kernfs_new_node+0xe1/0x670 [ 143.691456][ T2075] ? clear_nonspinnable+0x60/0x60 [ 143.696544][ T2075] ? rwsem_write_trylock+0x136/0x300 [ 143.701865][ T2075] ? kernfs_new_node+0x260/0x260 [ 143.707014][ T2075] ? up_write+0x7b/0x290 [ 143.711488][ T2075] kernfs_new_node+0x150/0x260 [ 143.716305][ T2075] __kernfs_create_file+0x4e/0x270 [ 143.721473][ T2075] sysfs_add_file_mode_ns+0x1ce/0x270 [ 143.726994][ T2075] internal_create_group+0x6b7/0xeb0 [ 143.732358][ T2075] ? sysfs_create_group+0x30/0x30 [ 143.737534][ T2075] ? up_write+0x7b/0x290 [ 143.741834][ T2075] ? kernfs_activate+0x1ea/0x200 [ 143.746816][ T2075] sysfs_create_groups+0x58/0x120 [ 143.751889][ T2075] device_add_attrs+0xdb/0x830 [ 143.756706][ T2075] ? get_device_parent+0x410/0x410 [ 143.761862][ T2075] ? sysfs_do_create_link_sd+0xe9/0x110 [ 143.767467][ T2075] device_add+0x5b0/0xec0 [ 143.771854][ T2075] netdev_register_kobject+0x18e/0x330 [ 143.777404][ T2075] ? raw_notifier_call_chain+0xfa/0x110 [ 143.783087][ T2075] register_netdevice+0xec9/0x1550 [ 143.789988][ T2075] ? __cfi_register_netdevice+0x10/0x10 [ 143.795585][ T2075] ? mutex_unlock+0x8f/0x230 [ 143.800224][ T2075] ? __cfi_mutex_unlock+0x10/0x10 [ 143.805327][ T2075] ? radix_tree_lookup+0x276/0x290 [ 143.810580][ T2075] ppp_dev_configure+0x7c9/0xa60 [ 143.815559][ T2075] ppp_ioctl+0x82d/0x17c0 [ 143.819944][ T2075] ? __cfi_ppp_ioctl+0x10/0x10 [ 143.824750][ T2075] ? __fget_files+0x2d1/0x330 [ 143.829452][ T2075] ? security_file_ioctl+0x95/0xc0 [ 143.834586][ T2075] ? __cfi_ppp_ioctl+0x10/0x10 [ 143.839383][ T2075] __se_sys_ioctl+0x12f/0x1b0 [ 143.844077][ T2075] __x64_sys_ioctl+0x7b/0x90 [ 143.848715][ T2075] x64_sys_call+0x58b/0x9a0 [ 143.853240][ T2075] do_syscall_64+0x4c/0xa0 [ 143.857672][ T2075] ? clear_bhb_loop+0x30/0x80 [ 143.862529][ T2075] ? clear_bhb_loop+0x30/0x80 [ 143.867243][ T2075] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 143.873190][ T2075] RIP: 0033:0x7f1fe859fb19 [ 143.877655][ T2075] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 143.898513][ T2075] RSP: 002b:00007f1fe94be028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 143.907330][ T2075] RAX: ffffffffffffffda RBX: 00007f1fe8825fa0 RCX: 00007f1fe859fb19 [ 143.915336][ T2075] RDX: 0000200000000740 RSI: 00000000c004743e RDI: 0000000000000004 [ 143.923337][ T2075] RBP: 00007f1fe8637b70 R08: 0000000000000000 R09: 0000000000000000 [ 143.931325][ T2075] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 143.939319][ T2075] R13: 00007f1fe8826038 R14: 00007f1fe8825fa0 R15: 00007ffc13bf6ba8 [ 143.947343][ T2075] [ 143.960524][ T291] syz-executor: attempt to access beyond end of device [ 143.960524][ T291] loop4: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 144.189596][ T28] audit: type=1400 audit(1793944576.771:386): avc: denied { watch } for pid=2088 comm="syz.0.471" path="/119/control" dev="tmpfs" ino=704 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 144.216097][ T2089] 9pnet_fd: Insufficient options for proto=fd [ 144.368757][ T2101] loop1: detected capacity change from 0 to 256 [ 144.401932][ T2101] exFAT-fs (loop1): failed to read sector(0x800000080) [ 144.419109][ T2101] exFAT-fs (loop1): failed to load upcase table [ 144.430103][ T2101] exFAT-fs (loop1): failed to recognize exfat type [ 144.538307][ T2108] loop1: detected capacity change from 0 to 256 [ 144.576891][ T2108] FAT-fs (loop1): bogus logical sector size 0 [ 144.600765][ T2108] FAT-fs (loop1): Can't find a valid FAT filesystem [ 144.686956][ T28] audit: type=1400 audit(1793944577.271:387): avc: denied { search } for pid=2107 comm="syz.1.477" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 144.969220][ T2115] fuse: Bad value for 'fd' [ 145.006359][ T28] audit: type=1400 audit(1793944577.591:388): avc: denied { setopt } for pid=2117 comm="syz.4.480" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 145.062295][ T2121] __nla_validate_parse: 1 callbacks suppressed [ 145.062315][ T2121] netlink: 156 bytes leftover after parsing attributes in process `syz.4.481'. [ 145.140765][ T2124] No source specified [ 145.205624][ T2128] netlink: 156 bytes leftover after parsing attributes in process `syz.4.483'. [ 145.230780][ T2128] No source specified [ 145.261768][ T2116] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=512 sclass=netlink_route_socket pid=2116 comm=syz.1.478 [ 145.264462][ T28] audit: type=1400 audit(1793944577.851:389): avc: denied { setopt } for pid=2112 comm="syz.1.478" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 145.308350][ T28] audit: type=1400 audit(1793944577.851:390): avc: denied { write } for pid=2112 comm="syz.1.478" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 145.415651][ T2135] netlink: 176 bytes leftover after parsing attributes in process `syz.4.484'. [ 145.813851][ T2139] loop1: detected capacity change from 0 to 16 [ 145.897656][ T2139] erofs: (device loop1): mounted with root inode @ nid 36. [ 146.651434][ T2155] fuse: Bad value for 'fd' [ 146.725978][ T2157] fuse: Bad value for 'fd' [ 146.798065][ T2160] netlink: 156 bytes leftover after parsing attributes in process `syz.2.494'. [ 146.825615][ T2160] No source specified [ 147.174621][ T2175] loop1: detected capacity change from 0 to 256 [ 147.200627][ T2175] FAT-fs (loop1): bogus logical sector size 0 [ 147.210859][ T2175] FAT-fs (loop1): Can't find a valid FAT filesystem [ 147.244686][ T2178] fuse: Bad value for 'fd' [ 147.266637][ T2175] FAULT_INJECTION: forcing a failure. [ 147.266637][ T2175] name failslab, interval 1, probability 0, space 0, times 0 [ 147.282679][ T2175] CPU: 0 PID: 2175 Comm: syz.1.500 Not tainted syzkaller #0 [ 147.290285][ T2175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 147.300379][ T2175] Call Trace: [ 147.303878][ T2175] [ 147.306854][ T2175] __dump_stack+0x21/0x24 [ 147.311312][ T2175] dump_stack_lvl+0x110/0x170 [ 147.316031][ T2175] ? __cfi_dump_stack_lvl+0x8/0x8 [ 147.321101][ T2175] ? selinux_kernfs_init_security+0x143/0x450 [ 147.327222][ T2175] dump_stack+0x15/0x24 [ 147.331412][ T2175] should_fail_ex+0x3bf/0x510 [ 147.336130][ T2175] ? __kernfs_new_node+0xe1/0x670 [ 147.341191][ T2175] __should_failslab+0xac/0xf0 [ 147.346002][ T2175] should_failslab+0x9/0x20 [ 147.350546][ T2175] kmem_cache_alloc+0x3b/0x320 [ 147.355358][ T2175] __kernfs_new_node+0xe1/0x670 [ 147.360341][ T2175] ? clear_nonspinnable+0x60/0x60 [ 147.365759][ T2175] ? rwsem_write_trylock+0x136/0x300 [ 147.371128][ T2175] ? kernfs_new_node+0x260/0x260 [ 147.376135][ T2175] ? up_write+0x7b/0x290 [ 147.380530][ T2175] kernfs_new_node+0x150/0x260 [ 147.385375][ T2175] __kernfs_create_file+0x4e/0x270 [ 147.390525][ T2175] sysfs_add_file_mode_ns+0x1ce/0x270 [ 147.397098][ T2175] internal_create_group+0x6b7/0xeb0 [ 147.409259][ T2175] ? sysfs_create_group+0x30/0x30 [ 147.414518][ T2175] ? up_write+0x7b/0x290 [ 147.418846][ T2175] ? kernfs_activate+0x1ea/0x200 [ 147.425669][ T2175] sysfs_create_groups+0x58/0x120 [ 147.430781][ T2175] device_add_attrs+0xdb/0x830 [ 147.435706][ T2175] ? get_device_parent+0x410/0x410 [ 147.441378][ T2175] ? sysfs_do_create_link_sd+0xe9/0x110 [ 147.447065][ T2175] device_add+0x5b0/0xec0 [ 147.451434][ T2175] netdev_register_kobject+0x18e/0x330 [ 147.456927][ T2175] ? raw_notifier_call_chain+0xfa/0x110 [ 147.463280][ T2175] register_netdevice+0xec9/0x1550 [ 147.468507][ T2175] ? __cfi_register_netdevice+0x10/0x10 [ 147.474873][ T2175] ? mutex_unlock+0x8f/0x230 [ 147.480859][ T2175] ? __cfi_mutex_unlock+0x10/0x10 [ 147.486399][ T2175] ? radix_tree_lookup+0x276/0x290 [ 147.492186][ T2175] ppp_dev_configure+0x7c9/0xa60 [ 147.498125][ T2175] ppp_ioctl+0x82d/0x17c0 [ 147.502759][ T2175] ? __cfi_ppp_ioctl+0x10/0x10 [ 147.508086][ T2175] ? __fget_files+0x2d1/0x330 [ 147.513067][ T2175] ? security_file_ioctl+0x95/0xc0 [ 147.518213][ T2175] ? __cfi_ppp_ioctl+0x10/0x10 [ 147.523196][ T2175] __se_sys_ioctl+0x12f/0x1b0 [ 147.527996][ T2175] __x64_sys_ioctl+0x7b/0x90 [ 147.532607][ T2175] x64_sys_call+0x58b/0x9a0 [ 147.537148][ T2175] do_syscall_64+0x4c/0xa0 [ 147.541607][ T2175] ? clear_bhb_loop+0x30/0x80 [ 147.546327][ T2175] ? clear_bhb_loop+0x30/0x80 [ 147.551751][ T2175] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 147.557975][ T2175] RIP: 0033:0x7f1fe859fb19 [ 147.562437][ T2175] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 147.582565][ T2175] RSP: 002b:00007f1fe94be028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 147.591259][ T2175] RAX: ffffffffffffffda RBX: 00007f1fe8825fa0 RCX: 00007f1fe859fb19 [ 147.600101][ T2175] RDX: 0000200000000740 RSI: 00000000c004743e RDI: 0000000000000004 [ 147.608374][ T2175] RBP: 00007f1fe8637b70 R08: 0000000000000000 R09: 0000000000000000 [ 147.619673][ T2175] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 147.627682][ T2175] R13: 00007f1fe8826038 R14: 00007f1fe8825fa0 R15: 00007ffc13bf6ba8 [ 147.635945][ T2175] [ 147.884562][ T2195] loop1: detected capacity change from 0 to 16 [ 147.950997][ T2195] erofs: (device loop1): mounted with root inode @ nid 36. [ 148.258537][ T2200] netlink: 156 bytes leftover after parsing attributes in process `syz.0.507'. [ 148.268753][ T2200] No source specified [ 148.649318][ T2210] loop1: detected capacity change from 0 to 128 [ 148.686489][ T2210] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 148.718739][ T2210] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 148.948361][ T2215] xt_hashlimit: overflow, try lower: 18446744073709551615/255 [ 149.149022][ T2213] netlink: 'syz.0.511': attribute type 9 has an invalid length. [ 149.201276][ T2213] device sit0 entered promiscuous mode [ 149.242334][ T2213] netlink: 'syz.0.511': attribute type 1 has an invalid length. [ 149.250284][ T309] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 149.343577][ T2213] netlink: 1 bytes leftover after parsing attributes in process `syz.0.511'. [ 149.450055][ T309] usb 2-1: Using ep0 maxpacket: 16 [ 149.465402][ T309] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 149.494972][ T309] usb 2-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 149.509440][ T309] usb 2-1: config 0 interface 0 has no altsetting 0 [ 149.528265][ T309] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 149.554907][ T2230] fuse: Bad value for 'fd' [ 149.555471][ T309] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.571707][ T2230] fuse: Bad value for 'fd' [ 149.604867][ T309] usb 2-1: config 0 descriptor?? [ 149.782660][ T2233] fuse: Bad value for 'fd' [ 150.180931][ T309] kovaplus 0003:1E7D:2D50.001B: item fetching failed at offset 2/24 [ 150.194689][ T309] kovaplus 0003:1E7D:2D50.001B: parse failed [ 150.201236][ T309] kovaplus: probe of 0003:1E7D:2D50.001B failed with error -22 [ 150.253798][ T2248] fuse: Bad value for 'fd' [ 151.740788][ T287] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 151.749358][ T287] FAT-fs (loop1): Filesystem has been set read-only [ 151.757634][ T2276] fuse: Bad value for 'fd' [ 151.763972][ T318] usb 2-1: USB disconnect, device number 5 [ 151.771317][ T287] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 152.217253][ T2282] fuse: Bad value for 'fd' [ 152.250722][ T28] audit: type=1400 audit(1793944584.841:391): avc: denied { mounton } for pid=2283 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 152.306970][ T28] audit: type=1400 audit(1793944584.871:392): avc: denied { create } for pid=2283 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 152.374724][ T335] device bridge_slave_1 left promiscuous mode [ 152.390083][ T335] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.400444][ T335] device bridge_slave_0 left promiscuous mode [ 152.406739][ T335] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.435838][ T335] device veth1_macvtap left promiscuous mode [ 152.444697][ T335] device veth0_vlan left promiscuous mode [ 152.704281][ T2292] netlink: 72 bytes leftover after parsing attributes in process `syz.4.537'. [ 152.735430][ T2283] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.767536][ T2283] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.800466][ T2283] device bridge_slave_0 entered promiscuous mode [ 152.821400][ T2283] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.849990][ T2283] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.857578][ T2283] device bridge_slave_1 entered promiscuous mode [ 152.865922][ T28] audit: type=1400 audit(1793944585.461:393): avc: denied { create } for pid=2293 comm="syz.4.538" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 152.968324][ T28] audit: type=1400 audit(1793944585.551:394): avc: denied { write } for pid=2293 comm="syz.4.538" path="socket:[22325]" dev="sockfs" ino=22325 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 153.104415][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 153.131105][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 153.172084][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 153.180917][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 153.200816][ T335] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.207925][ T335] bridge0: port 1(bridge_slave_0) entered forwarding state [ 153.230139][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 153.250390][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 153.270125][ T335] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.277240][ T335] bridge0: port 2(bridge_slave_1) entered forwarding state [ 153.295127][ T28] audit: type=1400 audit(1793944585.881:395): avc: denied { read } for pid=2293 comm="syz.4.538" path="socket:[22325]" dev="sockfs" ino=22325 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 153.319593][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 153.332915][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 153.358727][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 153.382531][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 153.400967][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 153.420171][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 153.437956][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 153.450477][ T2283] device veth0_vlan entered promiscuous mode [ 153.469134][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 153.482105][ T2283] device veth1_macvtap entered promiscuous mode [ 153.504554][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 153.522132][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 153.537410][ T28] audit: type=1400 audit(1793944586.121:396): avc: denied { mount } for pid=2283 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 153.610043][ T28] audit: type=1400 audit(1793944586.161:397): avc: denied { mounton } for pid=2283 comm="syz-executor" path="/root/syzkaller.3kdWsr/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 153.730514][ T2304] overlayfs: failed to resolve './file0': -2 [ 153.847282][ T2304] netlink: 208 bytes leftover after parsing attributes in process `syz.5.534'. [ 153.884319][ T2317] fuse: Bad value for 'fd' [ 154.003273][ T2323] fuse: Bad value for 'fd' [ 154.119723][ T309] input: syz0 as /devices/virtual/misc/uhid/0000:056A:003F.001C/input/input30 [ 154.130234][ T309] hid-generic 0000:056A:003F.001C: input,hidraw0: HID v0.00 Gamepad [syz0] on syz0 [ 154.302091][ T2337] netlink: 'syz.5.551': attribute type 9 has an invalid length. [ 154.313326][ T2337] loop5: detected capacity change from 0 to 256 [ 154.327944][ T2337] exfat: Deprecated parameter 'namecase' [ 154.337814][ T2337] exfat: Deprecated parameter 'namecase' [ 154.349373][ T2337] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 154.367590][ T28] audit: type=1400 audit(1793944586.961:398): avc: denied { write } for pid=2336 comm="syz.5.551" name="nf_conntrack" dev="proc" ino=4026532955 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 154.415465][ T2337] device sit0 entered promiscuous mode [ 154.422671][ T2337] netlink: 'syz.5.551': attribute type 1 has an invalid length. [ 154.430508][ T2337] netlink: 1 bytes leftover after parsing attributes in process `syz.5.551'. [ 154.978471][ T2354] overlayfs: failed to clone upperpath [ 155.699730][ T2359] fuse: Bad value for 'fd' [ 155.778789][ T2364] overlayfs: failed to clone lowerpath [ 155.916224][ T2364] netlink: 208 bytes leftover after parsing attributes in process `syz.4.558'. [ 156.102647][ T2376] fuse: Bad value for 'fd' [ 156.288709][ T2382] netlink: 176 bytes leftover after parsing attributes in process `syz.3.564'. [ 157.386194][ T2388] overlayfs: failed to clone lowerpath [ 157.587672][ T2391] netlink: 208 bytes leftover after parsing attributes in process `syz.4.567'. [ 157.620426][ T2394] device vlan0 entered promiscuous mode [ 157.628530][ T28] audit: type=1326 audit(1793944590.211:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2395 comm="syz.2.570" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5da9f9fb19 code=0x7ffc0000 [ 157.689269][ T28] audit: type=1326 audit(1793944590.211:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2395 comm="syz.2.570" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5da9f9fb19 code=0x7ffc0000 [ 157.769992][ T28] audit: type=1326 audit(1793944590.211:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2395 comm="syz.2.570" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5da9f9fb19 code=0x7ffc0000 [ 157.870001][ T28] audit: type=1326 audit(1793944590.211:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2395 comm="syz.2.570" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=140 compat=0 ip=0x7f5da9f9fb19 code=0x7ffc0000 [ 157.945410][ T28] audit: type=1326 audit(1793944590.211:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2395 comm="syz.2.570" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5da9f9fb19 code=0x7ffc0000 [ 158.000129][ T28] audit: type=1326 audit(1793944590.211:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2395 comm="syz.2.570" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5da9f9fb19 code=0x7ffc0000 [ 158.051856][ T28] audit: type=1326 audit(1793944590.211:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2395 comm="syz.2.570" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f5da9f9f882 code=0x7ffc0000 [ 158.100171][ T28] audit: type=1326 audit(1793944590.211:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2395 comm="syz.2.570" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5da9f9fb19 code=0x7ffc0000 [ 158.156019][ T28] audit: type=1326 audit(1793944590.211:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2395 comm="syz.2.570" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f5da9f9f917 code=0x7ffc0000 [ 158.209995][ T28] audit: type=1326 audit(1793944590.211:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2395 comm="syz.2.570" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f5da9f5c811 code=0x7ffc0000 [ 158.240478][ T2403] netlink: 156 bytes leftover after parsing attributes in process `syz.0.572'. [ 158.270484][ T2403] No source specified [ 158.291052][ T2405] fuse: Bad value for 'fd' [ 158.407721][ T2411] overlayfs: failed to clone lowerpath [ 159.100927][ T2416] netlink: 208 bytes leftover after parsing attributes in process `syz.2.574'. [ 159.791450][ T2425] fuse: Bad value for 'fd' [ 160.168329][ T2433] netlink: 208 bytes leftover after parsing attributes in process `syz.5.583'. [ 160.500071][ T24] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 160.678660][ T2467] netlink: 12 bytes leftover after parsing attributes in process `syz.4.595'. [ 160.690034][ T24] usb 6-1: Using ep0 maxpacket: 8 [ 160.697649][ T24] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 160.723724][ T24] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 160.750578][ T24] usb 6-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 160.799385][ T24] usb 6-1: config 0 interface 0 has no altsetting 0 [ 160.813801][ T24] usb 6-1: New USB device found, idVendor=0e8f, idProduct=0003, bcdDevice= 0.00 [ 160.832962][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.853021][ T24] usb 6-1: config 0 descriptor?? [ 160.859336][ T24] hub 6-1:0.0: USB hub found [ 160.907919][ T2482] netlink: 'syz.3.602': attribute type 8 has an invalid length. [ 161.041745][ T2510] netlink: 40 bytes leftover after parsing attributes in process `syz.2.615'. [ 161.051287][ T2510] netlink: 40 bytes leftover after parsing attributes in process `syz.2.615'. [ 161.223557][ T2551] netlink: 'syz.3.635': attribute type 6 has an invalid length. [ 161.427639][ T2586] x_tables: unsorted underflow at hook 1 [ 161.556800][ T2608] ================================================================== [ 161.565213][ T2608] BUG: KASAN: use-after-free in pppol2tp_sock_to_session+0x1a0/0x1b0 [ 161.573518][ T2608] Read of size 4 at addr ffff888115bbe800 by task syz.4.663/2608 [ 161.581533][ T2608] [ 161.583976][ T2608] CPU: 0 PID: 2608 Comm: syz.4.663 Not tainted syzkaller #0 [ 161.591374][ T2608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 161.601460][ T2608] Call Trace: [ 161.604098][ T24] hub 6-1:0.0: config failed, can't read hub descriptor (err -22) [ 161.604825][ T2608] [ 161.604835][ T2608] __dump_stack+0x21/0x24 [ 161.620070][ T2608] dump_stack_lvl+0x110/0x170 [ 161.625429][ T2608] ? __cfi_dump_stack_lvl+0x8/0x8 [ 161.631852][ T2608] ? _raw_spin_lock_bh+0x94/0xf0 [ 161.636839][ T2608] ? pppol2tp_sock_to_session+0x1a0/0x1b0 [ 161.642625][ T2608] print_address_description+0x71/0x200 [ 161.648233][ T2608] print_report+0x4a/0x60 [ 161.652616][ T2608] kasan_report+0x122/0x150 [ 161.657339][ T2608] ? pppol2tp_sock_to_session+0x1a0/0x1b0 [ 161.661278][ T24] usb 6-1: USB disconnect, device number 2 [ 161.663137][ T2608] __asan_report_load4_noabort+0x14/0x20 [ 161.674610][ T2608] pppol2tp_sock_to_session+0x1a0/0x1b0 [ 161.680220][ T2608] pppol2tp_release+0x150/0x2b0 [ 161.685117][ T2608] sock_close+0xc9/0x220 [ 161.689417][ T2608] ? __cfi_sock_close+0x10/0x10 [ 161.694548][ T2608] __fput+0x1fd/0x8f0 [ 161.698852][ T2608] ____fput+0x15/0x20 [ 161.702908][ T2608] task_work_run+0x1e1/0x250 [ 161.707565][ T2608] ? __cfi_task_work_run+0x10/0x10 [ 161.712726][ T2608] ? __cfi___close_range+0x10/0x10 [ 161.717902][ T2608] ? do_user_addr_fault+0x9a5/0x1030 [ 161.723335][ T2608] exit_to_user_mode_loop+0x9b/0xb0 [ 161.728609][ T2608] exit_to_user_mode_prepare+0x87/0xd0 [ 161.734111][ T2608] syscall_exit_to_user_mode+0x1a/0x30 [ 161.739617][ T2608] do_syscall_64+0x58/0xa0 [ 161.744072][ T2608] ? clear_bhb_loop+0x30/0x80 [ 161.748952][ T2608] ? clear_bhb_loop+0x30/0x80 [ 161.753885][ T2608] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 161.759828][ T2608] RIP: 0033:0x7f9cf359fb19 [ 161.764487][ T2608] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 161.784133][ T2608] RSP: 002b:00007ffc1f0cbd08 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 161.792595][ T2608] RAX: 0000000000000000 RBX: 00007ffc1f0cbdf0 RCX: 00007f9cf359fb19 [ 161.800604][ T2608] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 161.808611][ T2608] RBP: 00000000000276e9 R08: 0000000000000001 R09: 0000000000000000 [ 161.816618][ T2608] R10: 0000001b2de20000 R11: 0000000000000246 R12: 00007ffc1f0cbe30 [ 161.825239][ T2608] R13: 00007f9cf3825fac R14: 000000000002771e R15: 00007f9cf3825fa0 [ 161.833257][ T2608] [ 161.836311][ T2608] [ 161.838745][ T2608] Allocated by task 2610: [ 161.843275][ T2608] kasan_set_track+0x4b/0x70 [ 161.847941][ T2608] kasan_save_alloc_info+0x1f/0x30 [ 161.853127][ T2608] __kasan_kmalloc+0x95/0xb0 [ 161.857875][ T2608] __kmalloc+0xb4/0x1e0 [ 161.862162][ T2608] l2tp_session_create+0x38/0xbd0 [ 161.867597][ T2608] pppol2tp_connect+0xbf5/0x1640 [ 161.872676][ T2608] __sys_connect+0x3da/0x460 [ 161.877314][ T2608] __x64_sys_connect+0x7a/0x90 [ 161.882303][ T2608] x64_sys_call+0x88d/0x9a0 [ 161.886957][ T2608] do_syscall_64+0x4c/0xa0 [ 161.891414][ T2608] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 161.897345][ T2608] [ 161.899761][ T2608] Freed by task 43: [ 161.904272][ T2608] kasan_set_track+0x4b/0x70 [ 161.909377][ T2608] kasan_save_free_info+0x2b/0x40 [ 161.915744][ T2608] ____kasan_slab_free+0x132/0x180 [ 161.921269][ T2608] __kasan_slab_free+0x11/0x20 [ 161.926610][ T2608] slab_free_freelist_hook+0xc2/0x190 [ 161.932031][ T2608] __kmem_cache_free+0xb7/0x1b0 [ 161.936980][ T2608] kfree+0x6f/0xf0 [ 161.941603][ T2608] l2tp_session_put+0xaf/0x1a0 [ 161.946411][ T2608] l2tp_session_delete+0x3df/0x4d0 [ 161.951983][ T2608] l2tp_tunnel_del_work+0x199/0x410 [ 161.957491][ T2608] process_one_work+0x717/0xc30 [ 161.962467][ T2608] worker_thread+0xa4d/0x11d0 [ 161.967184][ T2608] kthread+0x281/0x320 [ 161.970731][ T2625] netlink: 8 bytes leftover after parsing attributes in process `syz.2.670'. [ 161.971376][ T2608] ret_from_fork+0x1f/0x30 [ 161.984593][ T2608] [ 161.986934][ T2608] The buggy address belongs to the object at ffff888115bbe800 [ 161.986934][ T2608] which belongs to the cache kmalloc-512 of size 512 [ 162.001750][ T2608] The buggy address is located 0 bytes inside of [ 162.001750][ T2608] 512-byte region [ffff888115bbe800, ffff888115bbea00) [ 162.014971][ T2608] [ 162.017351][ T2608] The buggy address belongs to the physical page: [ 162.023788][ T2608] page:ffffea000456ef00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x115bbc [ 162.027914][ T2628] ip_tables: iptables: counters copy to user failed while replacing table [ 162.034084][ T2608] head:ffffea000456ef00 order:2 compound_mapcount:0 compound_pincount:0 [ 162.034110][ T2608] flags: 0x4000000000010200(slab|head|zone=1) [ 162.034146][ T2608] raw: 4000000000010200 0000000000000000 dead000000000122 ffff888100042f00 [ 162.034165][ T2608] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 162.034176][ T2608] page dumped because: kasan: bad access detected [ 162.034206][ T2608] page_owner tracks the page as allocated [ 162.087844][ T2608] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 2593, tgid 2592 (syz.2.657), ts 161552804955, free_ts 160660670513 [ 162.112414][ T2608] post_alloc_hook+0x1f5/0x210 [ 162.117234][ T2608] prep_new_page+0x1c/0x110 [ 162.121991][ T2608] get_page_from_freelist+0x2ca9/0x2d20 [ 162.127780][ T2608] __alloc_pages+0x1fa/0x610 [ 162.132447][ T2608] alloc_slab_page+0x6e/0xf0 [ 162.137072][ T2608] new_slab+0x98/0x3e0 [ 162.141181][ T2608] ___slab_alloc+0x70f/0xb70 [ 162.145808][ T2608] __slab_alloc+0x5e/0xa0 [ 162.150184][ T2608] __kmem_cache_alloc_node+0x204/0x2d0 [ 162.155784][ T2608] __kmalloc_node_track_caller+0xa1/0x1e0 [ 162.161543][ T2608] __alloc_skb+0x226/0x4a0 [ 162.166087][ T2608] alloc_skb_with_frags+0xa8/0x620 [ 162.171239][ T2608] sock_alloc_send_pskb+0x87f/0x9a0 [ 162.176481][ T2608] __ip_append_data+0x230f/0x3520 [ 162.181559][ T2608] ip_make_skb+0x1e5/0x400 [ 162.186021][ T2608] udp_sendmsg+0x17b3/0x2170 [ 162.190666][ T2608] page last free stack trace: [ 162.195360][ T2608] free_unref_page_prepare+0x81b/0x820 [ 162.200864][ T2608] free_unref_page+0x93/0x530 [ 162.205588][ T2608] __free_pages+0x67/0x100 [ 162.210040][ T2608] __vunmap+0xa3c/0xc00 [ 162.214230][ T2608] vfree+0x61/0x90 [ 162.217997][ T2608] kvfree+0x26/0x40 [ 162.221847][ T2608] bpf_map_area_free+0x15/0x20 [ 162.226735][ T2608] array_map_free+0x49e/0x550 [ 162.231485][ T2608] bpf_map_free_deferred+0x104/0x1c0 [ 162.236823][ T2608] process_one_work+0x717/0xc30 [ 162.241708][ T2608] worker_thread+0xa4d/0x11d0 [ 162.246414][ T2608] kthread+0x281/0x320 [ 162.250495][ T2608] ret_from_fork+0x1f/0x30 [ 162.255090][ T2608] [ 162.257407][ T2608] Memory state around the buggy address: [ 162.263034][ T2608] ffff888115bbe700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 162.271468][ T2608] ffff888115bbe780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 162.279619][ T2608] >ffff888115bbe800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 162.287765][ T2608] ^ [ 162.291833][ T2608] ffff888115bbe880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 162.299889][ T2608] ffff888115bbe900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 162.308140][ T2608] ================================================================== [ 162.317083][ T2608] Disabling lock debugging due to kernel taint [ 162.323751][ T2608] ------------[ cut here ]------------ [ 162.329250][ T2608] WARNING: CPU: 0 PID: 2608 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 162.339473][ T2608] Modules linked in: [ 162.343743][ T2608] CPU: 0 PID: 2608 Comm: syz.4.663 Tainted: G B syzkaller #0 [ 162.352831][ T2608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 162.363104][ T2608] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 162.369490][ T2608] Code: 5d c3 e8 fc b9 d4 fc be 02 00 00 00 eb 0a e8 f0 b9 d4 fc be 01 00 00 00 4c 89 f7 e8 83 bd cc fd e9 0f ff ff ff e8 d9 b9 d4 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 c8 b9 d4 fc 4c 89 f7 be 03 [ 162.389362][ T2608] RSP: 0018:ffffc90000d1fcb0 EFLAGS: 00010293 [ 162.396367][ T2608] RAX: ffffffff849cb847 RBX: ffff88811469d000 RCX: ffff88811a486540 [ 162.404585][ T2608] RDX: 0000000000000000 RSI: 0000000016965fc0 RDI: 000000000c04eb7d [ 162.412802][ T2608] RBP: ffffc90000d1fcd0 R08: ffffffff87b777e7 R09: 1ffffffff0f6eefc [ 162.421015][ T2608] R10: dffffc0000000000 R11: fffffbfff0f6eefd R12: dffffc0000000000 [ 162.429102][ T2608] R13: dffffc0000000000 R14: 0000000016965fc0 R15: ffff888115bbe800 [ 162.437918][ T2608] FS: 000055558e44a500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 162.447189][ T2608] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 162.454085][ T2608] CR2: 0000001b2f021ff8 CR3: 000000014ac16000 CR4: 00000000003506b0 [ 162.462873][ T2608] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 162.471514][ T2608] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 162.479721][ T2608] Call Trace: [ 162.483356][ T2608] [ 162.486321][ T2608] pppol2tp_release+0x150/0x2b0 [ 162.491404][ T2608] sock_close+0xc9/0x220 [ 162.495704][ T2608] ? __cfi_sock_close+0x10/0x10 [ 162.500803][ T2608] __fput+0x1fd/0x8f0 [ 162.505013][ T2608] ____fput+0x15/0x20 [ 162.509055][ T2608] task_work_run+0x1e1/0x250 [ 162.514061][ T2608] ? __cfi_task_work_run+0x10/0x10 [ 162.519267][ T2608] ? __cfi___close_range+0x10/0x10 [ 162.524451][ T2608] ? do_user_addr_fault+0x9a5/0x1030 [ 162.529770][ T2608] exit_to_user_mode_loop+0x9b/0xb0 [ 162.535034][ T2608] exit_to_user_mode_prepare+0x87/0xd0 [ 162.540661][ T2608] syscall_exit_to_user_mode+0x1a/0x30 [ 162.546148][ T2608] do_syscall_64+0x58/0xa0 [ 162.550667][ T2608] ? clear_bhb_loop+0x30/0x80 [ 162.555460][ T2608] ? clear_bhb_loop+0x30/0x80 [ 162.560291][ T2608] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 162.566257][ T2608] RIP: 0033:0x7f9cf359fb19 [ 162.570841][ T2608] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 162.590615][ T2608] RSP: 002b:00007ffc1f0cbd08 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 162.599158][ T2608] RAX: 0000000000000000 RBX: 00007ffc1f0cbdf0 RCX: 00007f9cf359fb19 [ 162.607293][ T2608] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 162.615328][ T2608] RBP: 00000000000276e9 R08: 0000000000000001 R09: 0000000000000000 [ 162.623375][ T2608] R10: 0000001b2de20000 R11: 0000000000000246 R12: 00007ffc1f0cbe30 [ 162.631390][ T2608] R13: 00007f9cf3825fac R14: 000000000002771e R15: 00007f9cf3825fa0 [ 162.639409][ T2608] [ 162.642506][ T2608] ---[ end trace 0000000000000000 ]---