last executing test programs: 25.51017799s ago: executing program 1 (id=131): r0 = syz_open_procfs(0x0, &(0x7f0000000580)='mountinfo\x00') openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000380)={0x90000008}) 25.49311594s ago: executing program 1 (id=132): r0 = inotify_init1(0x0) r1 = gettid() fcntl$setownex(r0, 0xf, &(0x7f0000000180)={0x0, r1}) rt_sigtimedwait(&(0x7f0000000100)={[0x100000000000ad28]}, &(0x7f0000000080), 0x0, 0x8) fcntl$getownex(r0, 0x10, &(0x7f0000000000)={0x0, 0x0}) tkill(r2, 0x4) 25.426251231s ago: executing program 1 (id=134): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./file1\x00', 0x101880a, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x1, 0x550b, &(0x7f00000079c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40032041, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000180)=0xfffffff9) 25.100430592s ago: executing program 1 (id=135): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x1000e, &(0x7f0000000300), 0x1, 0x445, &(0x7f0000000b00)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file2\x00', 0x30000, 0x0, 0x41, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) chdir(&(0x7f0000000000)='./file0\x00') r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x7a000}], 0x1, 0x33000, 0x0, 0x3) 24.893867322s ago: executing program 1 (id=138): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) io_setup(0xc, &(0x7f00000001c0)=0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r1, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) io_submit(r0, 0x1, &(0x7f0000000880)=[0x0]) 24.774278093s ago: executing program 1 (id=141): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x296, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x54]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) 24.774135713s ago: executing program 32 (id=141): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x296, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x54]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) 24.389005465s ago: executing program 4 (id=154): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x44, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0}, @IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x44}}, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x7, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001100a7cc5a8100ae541d002007000000", @ANYRES32=r2, @ANYBLOB="00000a00100000801c001a80080002802d03fa0408000200f47b0c0d"], 0x44}, 0x1, 0x10000000}, 0x0) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 24.353917175s ago: executing program 4 (id=155): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x7f) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file1'}, 0xb) close(r0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) execveat(r0, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) 24.273445596s ago: executing program 4 (id=157): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000c40), 0x12) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0x7b}, @exit], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 24.243909785s ago: executing program 4 (id=158): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x2000040, &(0x7f00000003c0), 0x10, 0x4d2, &(0x7f0000002d00)="$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") r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mount(&(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000100)='./bus\x00', 0x14113e, 0x0) write$binfmt_script(r1, &(0x7f0000000080), 0x208e24b) flistxattr(r0, 0x0, 0x0) 24.025031346s ago: executing program 4 (id=163): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x0, &(0x7f0000001080), 0x1, 0x4f7, &(0x7f0000000540)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000240), 0x208e24b) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000e00)=ANY=[@ANYBLOB="000000004c9002000c0000000300010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff"]) 23.794639237s ago: executing program 4 (id=167): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000040)="fb6bba8839fe8bc048c0cdafd1f8a9918bc4055eaaeb6db4ee9bcb25b1811dbf40b3a7da5a8a64db04ed6dd26eea2e37229c339b1f91201c2796173864", 0x3d}], 0x1}, 0x0) recvmsg(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/60, 0x3c}], 0x1}, 0x40fd) close(r1) 23.777961387s ago: executing program 33 (id=167): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000040)="fb6bba8839fe8bc048c0cdafd1f8a9918bc4055eaaeb6db4ee9bcb25b1811dbf40b3a7da5a8a64db04ed6dd26eea2e37229c339b1f91201c2796173864", 0x3d}], 0x1}, 0x0) recvmsg(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/60, 0x3c}], 0x1}, 0x40fd) close(r1) 14.00975844s ago: executing program 2 (id=365): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000ff01000000000000002000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'xfrm0\x00', 0x0}) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000080)=0xf3e, 0x62) sendto$packet(r1, &(0x7f00000000c0)="3f033608260812002c001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c152bfdf9435e3ffe46", 0xe90c, 0xa0c4, &(0x7f0000000540)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) 14.00958024s ago: executing program 2 (id=366): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x22000406, &(0x7f0000000900)={[{@dioread_lock}, {@noblock_validity}, {@data_err_abort}, {@init_itable}, {@auto_da_alloc}, {@grpjquota, 0x2e}, {@nouid32}, {@errors_remount}, {@jqfmt_vfsv1}, {@grpid}], [], 0x2c}, 0x84, 0x4c2, &(0x7f0000000980)="$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") pivot_root(&(0x7f0000000080)='./file0\x00', 0x0) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') unlinkat(r0, &(0x7f0000000280)='./file0\x00', 0x200) 13.709147871s ago: executing program 2 (id=367): r0 = socket$nl_audit(0x10, 0x3, 0x9) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000c80)='kmem_cache_free\x00', r1}, 0x10) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x14, 0x453, 0x4, 0x70bd2d, 0xa0000000, "af"}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) 13.675580211s ago: executing program 2 (id=368): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000300)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x9101a, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000480)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) close(0x3) 13.625954571s ago: executing program 2 (id=369): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000141007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) write$cgroup_subtree(r0, 0x0, 0xfdef) 13.624481421s ago: executing program 2 (id=370): syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x800, &(0x7f0000000100)={[{@iocharset={'iocharset', 0x3d, 'maciceland'}}, {@umask={'umask', 0x3d, 0x9}}, {@iocharset={'iocharset', 0x3d, 'maccyrillic'}}, {@errors_remount}, {}, {@errors_continue}, {@gid}, {@errors_remount}, {@discard}, {@errors_continue}]}, 0x5, 0x1510, &(0x7f00000037c0)="$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") r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x1, 0x56a, &(0x7f00000015c0)="$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") getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 13.608109341s ago: executing program 34 (id=370): syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x800, &(0x7f0000000100)={[{@iocharset={'iocharset', 0x3d, 'maciceland'}}, {@umask={'umask', 0x3d, 0x9}}, {@iocharset={'iocharset', 0x3d, 'maccyrillic'}}, {@errors_remount}, {}, {@errors_continue}, {@gid}, {@errors_remount}, {@discard}, {@errors_continue}]}, 0x5, 0x1510, &(0x7f00000037c0)="$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") r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x1, 0x56a, &(0x7f00000015c0)="$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") getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 12.570204496s ago: executing program 7 (id=412): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000740)='scsi_dispatch_cmd_start\x00', r1}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 12.569885386s ago: executing program 7 (id=414): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x19) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0x4e, &(0x7f0000000a40)={@local, @broadcast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "89d884", 0x18, 0x0, 0x0, @remote, @empty, {[@dstopts={0x0, 0x1, '\x00', [@generic={0x1, 0x7, "f40063662a5fb8"}]}]}}}}}, 0x0) 12.569569856s ago: executing program 7 (id=415): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 12.517983846s ago: executing program 7 (id=416): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="b0"], 0xb0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 12.517813386s ago: executing program 7 (id=417): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x0) bind$bt_hci(r0, &(0x7f0000000140), 0x6) ioctl$sock_bt_hci(r0, 0x800448d7, 0x0) 7.774735657s ago: executing program 6 (id=482): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r2, &(0x7f00000002c0)=ANY=[], 0x200002e6) fcntl$setpipe(r2, 0x407, 0x7000000) read$FUSE(r1, &(0x7f0000002b80)={0x2020}, 0x2020) 7.697431727s ago: executing program 6 (id=483): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b0001110000000904000001", @ANYRES32], 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r1}, &(0x7f0000000380), &(0x7f00000003c0)=r2}, 0x20) syz_usb_disconnect(r0) 7.401486948s ago: executing program 5 (id=494): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000011c0), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0x2a, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000080)={r1, &(0x7f0000000240), 0x20000000}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r1}, &(0x7f0000000440), &(0x7f0000000480)=r0}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000000c0)={r1, &(0x7f0000000100)}, 0x20) 2.47018424s ago: executing program 7 (id=495): r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000002c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0xfffffffffffffe1d, {0x10, 0x10, 0x10, 0x10, 0x411, 0x8, 0x175, 0x0, 0x2010, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 2.46987344s ago: executing program 6 (id=497): r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r1) r2 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0x0, r3) 2.46692394s ago: executing program 5 (id=498): r0 = syz_mount_image$exfat(&(0x7f0000000040), &(0x7f00000004c0)='./file0\x00', 0x800, &(0x7f00000000c0)={[{@discard}, {@iocharset={'iocharset', 0x3d, 'macgaelic'}}, {@errors_remount}, {@allow_utime={'allow_utime', 0x3d, 0x9}}, {@errors_remount}, {@discard}, {@utf8}, {@iocharset={'iocharset', 0x3d, 'iso8859-1'}}, {@discard}, {@dmask={'dmask', 0x3d, 0x2}}]}, 0x5, 0x151c, &(0x7f0000000500)="$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") syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000000000)='./file0\x00', 0x20010080, &(0x7f0000000480)=ANY=[@ANYBLOB='allow_utime=00000000000000000000007,dmask=00000000000000001,iocharset=macroman,allow_utime=00000000000000000000002,uid=', @ANYRES64=r0, @ANYRESOCT, @ANYBLOB="2a3a6dc4d70cd8504afe4f20df34ad3cf37d706dd73fd000", @ANYBLOB="00001b0087e1e85631dc26e7a9ce3c4396436bc6736574e997938c382c009cd0aeba477396b2cb852b9c7a6a4bf39e0368bfe3e9c44e297aeade0000000000fb4fffa3da2229249f9eae67b594fb6fa71518c4638f5e66923f2ba986156feb62be500e4840d9758d3d1f11577798871b0a2d0009ae68165160d76495fc48f43da2e2147ad0809022a1a0c2d4", @ANYRESHEX], 0x1, 0x14ee, &(0x7f0000004000)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000280), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) 2.44628773s ago: executing program 6 (id=499): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x319c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, &(0x7f0000000280)={0x0, 0x0, 0x7, {0x7, 0x0, "5a7da32917"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000e40)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000d80)={0x20, 0x1, 0x3, "e31334"}, 0x0}) 2.30747163s ago: executing program 5 (id=502): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='sched_switch\x00', r0}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0xe0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r1 = openat$tun(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000002280)={'pim6reg0\x00', 0x2102}) ioctl$TUNSETTXFILTER(r1, 0x401054d5, &(0x7f0000000380)=ANY=[@ANYBLOB="4504"]) 2.166900371s ago: executing program 5 (id=507): socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) close(r0) 2.166766831s ago: executing program 5 (id=508): r0 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x4000)=nil, 0x930, 0x2, 0x4018831, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x80801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) syz_memcpy_off$KVM_EXIT_HYPERCALL(r0, 0x20, &(0x7f0000000000)="1eb3bf65654102f4af4d221c8bd458d1e7cbdaf3657d0f34e790c85bdba7931791f6d15c3e681411f7a496c0dace6a3c242f5b016f64b4ef8a9cedaf6bec340dee49474360b24cb8", 0x0, 0x48) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000ff9000/0x4000)=nil, 0x4000}) 1.933961762s ago: executing program 3 (id=511): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x4000, &(0x7f0000000380)={[{@test_dummy_encryption}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x84}}, {@sysvgroups}, {@commit={'commit', 0x3d, 0x5}}, {@orlov}, {@nobarrier}, {@max_batch_time}, {@data_err_abort}]}, 0xd, 0x5e9, &(0x7f0000001200)="$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") r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) unlink(&(0x7f0000000480)='./file0/file0\x00') fallocate(r0, 0x0, 0x0, 0x1000f4) r1 = open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000300)="0f", 0xff00}], 0x1) 1.918975842s ago: executing program 0 (id=512): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000000000000000000000030000850000007b00000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000600)='tlb_flush\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 1.815223242s ago: executing program 0 (id=513): prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffc000/0x4000)=nil) munmap(&(0x7f0000ff3000/0xb000)=nil, 0xb000) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000002000/0x4000)=nil) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffc000/0x4000)=nil) prlimit64(0x0, 0x2, &(0x7f0000001fc0)={0x8, 0xc2}, 0x0) brk(0x20ffc004) 1.770076353s ago: executing program 3 (id=514): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000500)='hrtimer_start\x00', r1}, 0x10) timer_create(0x0, 0x0, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) 1.769876903s ago: executing program 0 (id=515): io_setup(0x23, &(0x7f0000000280)=0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) io_submit(r0, 0x1, &(0x7f0000000700)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) ioctl$BINDER_WRITE_READ(r2, 0x40046208, 0x0) 1.768762393s ago: executing program 3 (id=516): r0 = socket$packet(0x11, 0xa, 0x300) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000900)=[{0x6, 0xe, 0xfe, 0xec}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, &(0x7f0000000700)="09268a60fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88ff4f90b1a7511bf746bec66ba1fe92e8615fc3f7af9c3310b39cc2dc3616dcdfaebc65ca325fd99357ed9d11b266a7c88722db6e38df1089394f438cb9fbc08e62754c233cced4a4d4d05a3e5029a01298d3ee87d8a0803a2d26906f42f5b5aaf47d2752a8b23954f309cae13ef250cf76775ddfd153e", 0xab, 0x40040, 0x0, 0x0) 1.761474663s ago: executing program 3 (id=517): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_setup(0x7, &(0x7f0000000280)=0x0) io_submit(r2, 0x1, &(0x7f0000000b40)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0xf, r0, 0x0}]) 1.742102723s ago: executing program 0 (id=518): r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmmsg(r1, &(0x7f0000000800)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000001640)=""/4088, 0xff8}], 0x1}}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000004100)=""/4099, 0x1003}], 0x1}}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/83, 0x53}], 0x1}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000280)=""/189, 0xbd}], 0x1}, 0x4}], 0x4, 0x7ffeedc1, 0x0) 1.605674363s ago: executing program 0 (id=519): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x1d, &(0x7f0000000180), 0x4) 1.605518643s ago: executing program 0 (id=520): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000107d1e502d0000ecff000109022400010000300009040000010300020009210700b90122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, &(0x7f00000006c0)={0x0, 0x4, 0x7, {0x7, 0xa, "d269f71d61"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000580)={0x24, &(0x7f0000000440)={0x20, 0x22, 0x2, {0x2, 0xc}}, 0x0, &(0x7f0000000380), 0x0}, &(0x7f0000000880)={0x2c, &(0x7f00000005c0)={0x40, 0xe}, 0x0, 0x0, 0x0, 0x0}) 1.339648345s ago: executing program 5 (id=521): r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000001280)={0x20, 0x80, 0x1c, {0x0, 0xd, 0x4, 0xfffc, 0x5, 0x2, 0x0, 0x6, 0x4, 0x0, 0x1000, 0x2}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 842.136407ms ago: executing program 3 (id=522): prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) unshare(0x20000400) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0xe22, 0x0, @loopback={0xff00000000000000}}, 0x1c) 208.443999ms ago: executing program 6 (id=523): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r0}, &(0x7f0000000400), &(0x7f00000004c0)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r2}, 0x10) syz_emit_ethernet(0x5e, &(0x7f0000003680)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x28, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @loopback={0x0, 0x1ff0000aa}, @private1}}}}}}, 0x0) 208.1546ms ago: executing program 6 (id=524): r0 = syz_usb_connect$uac1(0x0, 0xa4, &(0x7f00000000c0)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172"], 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000014b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x41, 0x3, 0x200, 0x0, 0x0, 0x0, 0x120, 0x0, 0x1f0, 0x1f0, 0x1f0, 0x1f0, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @remote, 0x0, 0x0, 'wlan1\x00', 'wg1\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98, 0x0, {0x0, 0xffffffffa0028000}}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ip={@broadcast, @private, 0x0, 0x0, 'veth1_to_team\x00', 'sit0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x260) syz_usb_control_io$uac1(r0, &(0x7f0000000680)={0x14, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0003"]}, 0x0) 0s ago: executing program 3 (id=525): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000003c0)=[@increfs], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x10, 0x0, &(0x7f00000002c0)=[@request_death={0x400c6313}], 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.25' (ED25519) to the list of known hosts. [ 19.136328][ T30] audit: type=1400 audit(1731326626.944:66): avc: denied { integrity } for pid=279 comm="syz-executor" lockdown_reason="debugfs access" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=lockdown permissive=1 [ 19.159557][ T30] audit: type=1400 audit(1731326626.974:67): avc: denied { mounton } for pid=279 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 19.160625][ T279] cgroup: Unknown subsys name 'net' [ 19.181978][ T30] audit: type=1400 audit(1731326626.974:68): avc: denied { mount } for pid=279 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 19.209102][ T279] cgroup: Unknown subsys name 'devices' [ 19.209135][ T30] audit: type=1400 audit(1731326627.004:69): avc: denied { unmount } for pid=279 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 19.348254][ T279] cgroup: Unknown subsys name 'hugetlb' [ 19.353655][ T279] cgroup: Unknown subsys name 'rlimit' [ 19.485026][ T30] audit: type=1400 audit(1731326627.294:70): avc: denied { setattr } for pid=279 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 19.507962][ T30] audit: type=1400 audit(1731326627.294:71): avc: denied { mounton } for pid=279 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 19.514758][ T282] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 19.532720][ T30] audit: type=1400 audit(1731326627.294:72): avc: denied { mount } for pid=279 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 19.562805][ T279] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 19.563778][ T30] audit: type=1400 audit(1731326627.364:73): avc: denied { relabelto } for pid=282 comm="mkswap" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 19.597480][ T30] audit: type=1400 audit(1731326627.364:74): avc: denied { write } for pid=282 comm="mkswap" path="/root/swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 19.622823][ T30] audit: type=1400 audit(1731326627.364:75): avc: denied { read } for pid=279 comm="syz-executor" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.011542][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.018428][ T288] bridge0: port 1(bridge_slave_0) entered disabled state [ 20.025499][ T288] device bridge_slave_0 entered promiscuous mode [ 20.033220][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.040084][ T288] bridge0: port 2(bridge_slave_1) entered disabled state [ 20.047286][ T288] device bridge_slave_1 entered promiscuous mode [ 20.077867][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.084707][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 20.091927][ T289] device bridge_slave_0 entered promiscuous mode [ 20.098532][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.105362][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 20.112648][ T289] device bridge_slave_1 entered promiscuous mode [ 20.168391][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.175228][ T290] bridge0: port 1(bridge_slave_0) entered disabled state [ 20.182680][ T290] device bridge_slave_0 entered promiscuous mode [ 20.190684][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.197542][ T290] bridge0: port 2(bridge_slave_1) entered disabled state [ 20.204748][ T290] device bridge_slave_1 entered promiscuous mode [ 20.233397][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.240282][ T292] bridge0: port 1(bridge_slave_0) entered disabled state [ 20.247510][ T292] device bridge_slave_0 entered promiscuous mode [ 20.266881][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.273801][ T292] bridge0: port 2(bridge_slave_1) entered disabled state [ 20.281040][ T292] device bridge_slave_1 entered promiscuous mode [ 20.344775][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.351643][ T291] bridge0: port 1(bridge_slave_0) entered disabled state [ 20.358866][ T291] device bridge_slave_0 entered promiscuous mode [ 20.375161][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.382010][ T291] bridge0: port 2(bridge_slave_1) entered disabled state [ 20.389176][ T291] device bridge_slave_1 entered promiscuous mode [ 20.474893][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.481751][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 20.488855][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.495620][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 20.505426][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.512274][ T288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 20.519377][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.526158][ T288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 20.540113][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.546958][ T292] bridge0: port 2(bridge_slave_1) entered forwarding state [ 20.554069][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.560860][ T292] bridge0: port 1(bridge_slave_0) entered forwarding state [ 20.595979][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.602829][ T290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 20.609924][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.616719][ T290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 20.632621][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 20.639652][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 20.646623][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 20.653961][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 20.661187][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 20.668270][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 20.675170][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 20.682241][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 20.689264][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 20.699116][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 20.706364][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 20.749089][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 20.757549][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 20.765416][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.772202][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 20.779445][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 20.787476][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.794288][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 20.801461][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 20.809392][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.816204][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 20.823413][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 20.831275][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 20.839082][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 20.847096][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.853917][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 20.861101][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 20.869024][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.875835][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 20.883018][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 20.890981][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.897818][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 20.904964][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 20.912611][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 20.920299][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 20.933042][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 20.954848][ T289] device veth0_vlan entered promiscuous mode [ 20.965358][ T292] device veth0_vlan entered promiscuous mode [ 20.971606][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 20.979283][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 20.987606][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 20.995302][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 21.003600][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 21.011396][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 21.018606][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 21.025712][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 21.032938][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 21.040211][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 21.047969][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 21.055843][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.062614][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.069820][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 21.077758][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.084570][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.094318][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 21.102257][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.109086][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.124008][ T288] device veth0_vlan entered promiscuous mode [ 21.133418][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 21.141046][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 21.149234][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 21.157516][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 21.165363][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 21.173423][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 21.181155][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 21.188966][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 21.197068][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 21.204936][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.211714][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.219115][ T289] device veth1_macvtap entered promiscuous mode [ 21.231206][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 21.238669][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 21.245852][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 21.253262][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 21.261412][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 21.272721][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 21.280756][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 21.289775][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 21.297762][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 21.311820][ T292] device veth1_macvtap entered promiscuous mode [ 21.319280][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 21.326702][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 21.334672][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 21.342978][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 21.350940][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 21.358800][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 21.366824][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 21.374491][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 21.382504][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 21.405020][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 21.413443][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 21.421859][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 21.430652][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 21.443334][ T288] device veth1_macvtap entered promiscuous mode [ 21.453993][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 21.462227][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 21.471845][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 21.473129][ T314] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 21.481455][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 21.503042][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 21.511264][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 21.520553][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 21.548862][ T318] loop3: detected capacity change from 0 to 256 [ 21.552458][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 21.566921][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 21.574813][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 21.587726][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 21.595488][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 21.616676][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 21.627041][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 21.635108][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 21.643819][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 21.654100][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 21.665465][ T324] loop3: detected capacity change from 0 to 512 [ 21.671892][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 21.679369][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 21.687713][ T291] device veth0_vlan entered promiscuous mode [ 21.697285][ T290] device veth0_vlan entered promiscuous mode [ 21.709723][ T324] ======================================================= [ 21.709723][ T324] WARNING: The mand mount option has been deprecated and [ 21.709723][ T324] and is ignored by this kernel. Remove the mand [ 21.709723][ T324] option from the mount to silence this warning. [ 21.709723][ T324] ======================================================= [ 21.756976][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 21.767201][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 21.783703][ T291] device veth1_macvtap entered promiscuous mode [ 21.794112][ T290] device veth1_macvtap entered promiscuous mode [ 21.810917][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 21.819721][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 21.827913][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 21.835891][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 21.843706][ T324] EXT4-fs (loop3): 1 truncate cleaned up [ 21.850329][ T324] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 21.862893][ T331] tipc: Started in network mode [ 21.874543][ T331] tipc: Node identity 4, cluster identity 4711 [ 21.881861][ T331] tipc: Node number set to 4 [ 21.888346][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 21.896693][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 21.905059][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 21.914010][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 21.922323][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 21.930584][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 21.939016][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 21.952331][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 21.978292][ T336] device pim6reg1 entered promiscuous mode [ 22.085285][ T351] loop1: detected capacity change from 0 to 256 [ 22.165453][ T363] loop0: detected capacity change from 0 to 256 [ 22.191848][ T363] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x72685a33, utbl_chksum : 0xe619d30d) [ 22.226340][ T20] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 22.275658][ T375] input: syz0 as /devices/virtual/input/input4 [ 22.330993][ T381] loop2: detected capacity change from 0 to 2048 [ 22.413899][ T381] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 22.427738][ T391] loop1: detected capacity change from 0 to 4096 [ 22.449025][ T381] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.28: bg 0: block 274: padding at end of block bitmap is not set [ 22.471833][ T391] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 22.499226][ T381] EXT4-fs (loop2): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 16 with error 117 [ 22.528379][ T381] EXT4-fs (loop2): This should not happen!! Data will be lost [ 22.528379][ T381] [ 22.565609][ T381] syz.2.28 (381) used greatest stack depth: 20664 bytes left [ 22.579721][ T396] loop1: detected capacity change from 0 to 256 [ 22.606525][ T396] exfat: Deprecated parameter 'utf8' [ 22.608088][ T20] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 22.634682][ T396] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 22.694726][ T400] device veth2 entered promiscuous mode [ 22.792645][ T409] loop2: detected capacity change from 0 to 256 [ 22.839230][ T20] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 22.853631][ T20] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 22.869093][ T20] usb 4-1: Product: syz [ 22.877465][ T20] usb 4-1: Manufacturer: syz [ 22.886211][ T20] usb 4-1: SerialNumber: syz [ 22.912912][ T415] option changes via remount are deprecated (pid=414 comm=syz.1.41) [ 23.029018][ T423] 9pnet: p9_errstr2errno: server reported unknown error ™^Pœ£— [ 23.068049][ T421] loop1: detected capacity change from 0 to 4096 [ 23.108916][ T427] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.115931][ T427] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.130851][ T421] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 23.150004][ T427] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.156901][ T427] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.163962][ T427] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.170764][ T427] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.183471][ T427] device bridge0 entered promiscuous mode [ 23.186039][ T421] EXT4-fs (loop1): mounted filesystem without journal. Opts: bsdgroups,grpquota,init_itable,user_xattr,nomblk_io_submit,,errors=continue. Quota mode: writeback. [ 23.231298][ T421] EXT4-fs error (device loop1): ext4_do_update_inode:5205: inode #15: comm syz.1.45: corrupted inode contents [ 23.244584][ T421] EXT4-fs error (device loop1): ext4_dirty_inode:6038: inode #15: comm syz.1.45: mark_inode_dirty error [ 23.258185][ T421] EXT4-fs error (device loop1): ext4_do_update_inode:5205: inode #15: comm syz.1.45: corrupted inode contents [ 23.271252][ T421] EXT4-fs error (device loop1): __ext4_ext_dirty:183: inode #15: comm syz.1.45: mark_inode_dirty error [ 23.284526][ T439] cannot load conntrack support for proto=3 [ 23.296656][ T421] EXT4-fs error (device loop1): ext4_do_update_inode:5205: inode #15: comm syz.1.45: corrupted inode contents [ 23.300819][ T442] loop4: detected capacity change from 0 to 512 [ 23.320810][ T421] EXT4-fs error (device loop1): __ext4_ext_dirty:183: inode #15: comm syz.1.45: mark_inode_dirty error [ 23.332071][ T421] EXT4-fs error (device loop1): ext4_do_update_inode:5205: inode #15: comm syz.1.45: corrupted inode contents [ 23.344953][ T442] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 23.358236][ T421] EXT4-fs error (device loop1): ext4_truncate:4303: inode #15: comm syz.1.45: mark_inode_dirty error [ 23.369479][ T442] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 23.379631][ T421] EXT4-fs error (device loop1) in ext4_setattr:5606: Corrupt filesystem [ 23.388618][ T445] EXT4-fs error (device loop1): ext4_do_update_inode:5205: inode #15: comm syz.1.45: corrupted inode contents [ 23.408950][ T442] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2815: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 23.427885][ T442] EXT4-fs (loop4): 1 truncate cleaned up [ 23.433555][ T442] EXT4-fs (loop4): mounted filesystem without journal. Opts: quota,sysvgroups,barrier=0x0000000000000003,debug_want_extra_isize=0x0000000000000080,block_validity,jqfmt=vfsv1,,errors=continue. Quota mode: writeback. [ 23.561959][ T474] loop4: detected capacity change from 0 to 2048 [ 23.601423][ T474] EXT4-fs (loop4): mounted filesystem without journal. Opts: commit=0x0000000000000005,,errors=continue. Quota mode: none. [ 23.647521][ T486] netlink: 'syz.2.70': attribute type 3 has an invalid length. [ 23.688849][ T494] SELinux: security_context_str_to_sid(unconfined_u) failed for (dev ?, type ?) errno=-22 [ 23.698692][ T494] SELinux: security_context_str_to_sid(unconfined_u) failed for (dev incremental-fs, type incremental-fs) errno=-22 [ 23.765391][ T510] loop4: detected capacity change from 0 to 512 [ 23.803808][ T510] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 23.806295][ T39] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 23.865312][ T510] EXT4-fs (loop4): shut down requested (0) [ 23.872073][ T525] device batadv_slave_1 entered promiscuous mode [ 23.884790][ T524] device batadv_slave_1 left promiscuous mode [ 23.902928][ T528] tmpfs: Unknown parameter 'c' [ 23.982577][ T518] loop2: detected capacity change from 0 to 40427 [ 24.016397][ T20] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 24.022696][ T20] cdc_ncm 4-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 24.031875][ T20] cdc_ncm 4-1:1.0: setting rx_max = 2048 [ 24.040615][ T518] F2FS-fs (loop2): Found nat_bits in checkpoint [ 24.077823][ T518] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 24.115149][ T518] attempt to access beyond end of device [ 24.115149][ T518] loop2: rw=2049, want=53792, limit=40427 [ 24.131669][ T518] attempt to access beyond end of device [ 24.131669][ T518] loop2: rw=2049, want=53792, limit=40427 [ 24.150178][ T291] attempt to access beyond end of device [ 24.150178][ T291] loop2: rw=2049, want=45104, limit=40427 [ 24.152568][ T538] loop4: detected capacity change from 0 to 40427 [ 24.186653][ T39] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 24.197521][ T39] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 24.197558][ T538] F2FS-fs (loop4): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 24.207366][ T39] usb 2-1: New USB device found, idVendor=056a, idProduct=0045, bcdDevice= 0.00 [ 24.224391][ T39] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 24.225323][ T538] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 24.240320][ T20] cdc_ncm 4-1:1.0: setting tx_max = 184 [ 24.247999][ T20] cdc_ncm 4-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM, 42:42:42:42:42:42 [ 24.248316][ T39] usb 2-1: config 0 descriptor?? [ 24.262298][ T20] usb 4-1: USB disconnect, device number 2 [ 24.269281][ T538] F2FS-fs (loop4): invalid crc value [ 24.274652][ T20] cdc_ncm 4-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM [ 24.275805][ T538] F2FS-fs (loop4): Found nat_bits in checkpoint [ 24.306074][ T538] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 24.313202][ T538] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 24.340375][ T30] kauditd_printk_skb: 173 callbacks suppressed [ 24.340387][ T30] audit: type=1400 audit(24.321:249): avc: denied { read } for pid=139 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 24.384302][ T30] audit: type=1400 audit(24.361:250): avc: denied { create } for pid=537 comm="syz.4.88" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 24.404468][ T288] attempt to access beyond end of device [ 24.404468][ T288] loop4: rw=2049, want=45104, limit=40427 [ 24.415736][ T339] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 24.503727][ T30] audit: type=1400 audit(24.481:251): avc: denied { create } for pid=555 comm="syz.2.97" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 24.531279][ T30] audit: type=1400 audit(24.511:252): avc: denied { bind } for pid=555 comm="syz.2.97" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 24.563372][ T30] audit: type=1400 audit(24.541:253): avc: denied { create } for pid=561 comm="syz.2.99" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 24.581917][ T30] audit: type=1400 audit(24.541:254): avc: denied { write } for pid=561 comm="syz.2.99" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 24.601661][ T30] audit: type=1400 audit(24.541:255): avc: denied { nlmsg_write } for pid=561 comm="syz.2.99" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 24.634445][ T30] audit: type=1326 audit(24.611:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=564 comm="syz.2.100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4846bd9719 code=0x7ffc0000 [ 24.664242][ T30] audit: type=1326 audit(24.611:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=564 comm="syz.2.100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=36 compat=0 ip=0x7f4846bd9719 code=0x7ffc0000 [ 24.691714][ T30] audit: type=1326 audit(24.611:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=564 comm="syz.2.100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4846bd9719 code=0x7ffc0000 [ 24.719262][ T570] SELinux: Context @ is not valid (left unmapped). [ 24.742182][ T572] IPv6: NLM_F_CREATE should be specified when creating new route [ 24.749875][ T572] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 24.756906][ T572] IPv6: NLM_F_CREATE should be set when creating new route [ 24.763945][ T572] IPv6: NLM_F_CREATE should be set when creating new route [ 24.771816][ T39] hid (null): invalid report_count 962051742 [ 24.787935][ T39] wacom 0003:056A:0045.0001: invalid report_count 962051742 [ 24.795366][ T39] wacom 0003:056A:0045.0001: item 0 4 1 9 parsing failed [ 24.807617][ T576] loop3: detected capacity change from 0 to 1024 [ 24.814411][ T39] wacom 0003:056A:0045.0001: parse failed [ 24.818067][ T580] loop4: detected capacity change from 0 to 128 [ 24.820505][ T39] wacom: probe of 0003:056A:0045.0001 failed with error -22 [ 24.833414][ T339] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 24.847357][ T339] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 24.857104][ T339] usb 1-1: New USB device found, idVendor=05ac, idProduct=0262, bcdDevice= 0.00 [ 24.861608][ T580] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 24.866043][ T339] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 24.878113][ T580] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 24.894568][ T339] usb 1-1: config 0 descriptor?? [ 24.907317][ T576] EXT4-fs (loop3): Test dummy encryption mode enabled [ 24.915490][ T576] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 24.922929][ T576] EXT4-fs (loop3): Unrecognized mount option "smackfsfloor=" or missing value [ 25.004958][ T589] loop3: detected capacity change from 0 to 512 [ 25.028621][ T39] usb 2-1: USB disconnect, device number 2 [ 25.104015][ T589] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 25.184512][ T611] 9pnet: p9_errstr2errno: server reported unknown error @íÎh [ 25.204712][ T613] loop3: detected capacity change from 0 to 512 [ 25.227432][ T613] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.120: bg 0: block 393: padding at end of block bitmap is not set [ 25.244498][ T613] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6185: Corrupt filesystem [ 25.254167][ T613] EXT4-fs (loop3): 2 truncates cleaned up [ 25.259929][ T613] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 25.367194][ T339] apple 0003:05AC:0262.0002: bogus close delimiter [ 25.381129][ T339] apple 0003:05AC:0262.0002: item 0 1 2 10 parsing failed [ 25.391128][ T339] apple 0003:05AC:0262.0002: parse failed [ 25.406311][ T339] apple: probe of 0003:05AC:0262.0002 failed with error -22 [ 25.430308][ T620] loop2: detected capacity change from 0 to 40427 [ 25.436628][ T60] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 25.444350][ T620] F2FS-fs (loop2): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 25.451865][ T620] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 25.460629][ T620] F2FS-fs (loop2): invalid crc value [ 25.467125][ T620] F2FS-fs (loop2): Found nat_bits in checkpoint [ 25.489055][ T620] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 25.495909][ T620] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 25.513178][ T620] attempt to access beyond end of device [ 25.513178][ T620] loop2: rw=2051, want=45056, limit=40427 [ 25.524224][ T620] attempt to access beyond end of device [ 25.524224][ T620] loop2: rw=2051, want=65536, limit=40427 [ 25.537440][ T620] F2FS-fs (loop2): Issue discard(4614, 4614, 1018) failed, ret: -5 [ 25.537462][ T620] F2FS-fs (loop2): Issue discard(5637, 5637, 2555) failed, ret: -5 [ 25.586864][ T565] usb 1-1: USB disconnect, device number 2 [ 25.782214][ T644] loop1: detected capacity change from 0 to 40427 [ 25.816399][ T60] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 25.827260][ T60] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 25.837281][ T644] F2FS-fs (loop1): fault_injection options not supported [ 25.840047][ T60] usb 5-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 25.845086][ T644] F2FS-fs (loop1): invalid crc value [ 25.853107][ T60] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 25.865818][ T644] F2FS-fs (loop1): Found nat_bits in checkpoint [ 25.866650][ T60] usb 5-1: config 0 descriptor?? [ 25.892913][ T644] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 25.972589][ T289] attempt to access beyond end of device [ 25.972589][ T289] loop1: rw=2049, want=45104, limit=40427 [ 26.077096][ T652] loop1: detected capacity change from 0 to 512 [ 26.128818][ T652] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 26.139400][ T652] EXT4-fs (loop1): 1 truncate cleaned up [ 26.144844][ T652] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 26.227977][ T45] tipc: Left network mode [ 26.256381][ T60] usbhid 5-1:0.0: can't add hid device: -71 [ 26.262308][ T60] usbhid: probe of 5-1:0.0 failed with error -71 [ 26.271956][ T60] usb 5-1: USB disconnect, device number 2 [ 26.298244][ T662] binfmt_misc: register: failed to install interpreter file ./file0/../file0 [ 26.369003][ T675] loop3: detected capacity change from 0 to 256 [ 26.397640][ T667] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.404472][ T667] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.411851][ T667] device bridge_slave_0 entered promiscuous mode [ 26.418594][ T667] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.425437][ T667] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.432848][ T667] device bridge_slave_1 entered promiscuous mode [ 26.441560][ T675] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 26.520350][ T686] netlink: 36 bytes leftover after parsing attributes in process `syz.2.151'. [ 26.530014][ T686] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.574263][ T688] loop3: detected capacity change from 0 to 2048 [ 26.582522][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 26.589570][ T293] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 26.601880][ T526] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 26.610192][ T526] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.617052][ T526] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.624728][ T526] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 26.633358][ T688] EXT4-fs (loop3): mounted filesystem without journal. Opts: commit=0x0000000000000005,,errors=continue. Quota mode: none. [ 26.652767][ T526] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 26.663989][ T688] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 26.696563][ T526] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.703416][ T526] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.732205][ T526] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 26.744791][ T526] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 26.765291][ T667] device veth0_vlan entered promiscuous mode [ 26.772172][ T696] process 'syz.4.155' launched '/dev/fd/3/./file1' with NULL argv: empty string added [ 26.784883][ T690] loop2: detected capacity change from 0 to 40427 [ 26.791423][ T526] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 26.800996][ T526] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 26.821798][ T526] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 26.829742][ T703] loop4: detected capacity change from 0 to 512 [ 26.836211][ T526] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 26.844245][ T690] F2FS-fs (loop2): Invalid log blocks per segment (83886089) [ 26.851512][ T293] usb 1-1: Using ep0 maxpacket: 32 [ 26.862908][ T690] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 26.872243][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 26.880615][ T690] F2FS-fs (loop2): invalid crc value [ 26.886963][ T667] device veth1_macvtap entered promiscuous mode [ 26.897321][ T690] F2FS-fs (loop2): Found nat_bits in checkpoint [ 26.897333][ T45] device bridge_slave_1 left promiscuous mode [ 26.897424][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.926640][ T45] device bridge_slave_0 left promiscuous mode [ 26.927926][ T703] EXT4-fs (loop4): 1 orphan inode deleted [ 26.942710][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.945441][ T703] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 26.966546][ T45] device veth1_macvtap left promiscuous mode [ 26.975031][ T716] loop3: detected capacity change from 0 to 2048 [ 26.976502][ T293] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 26.992745][ T690] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 26.994662][ T45] device veth0_vlan left promiscuous mode [ 27.002206][ T690] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 27.008527][ T703] EXT4-fs error (device loop4): ext4_xattr_block_list:719: inode #16: comm syz.4.158: corrupted xattr block 37 [ 27.024603][ T293] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 27.046144][ T293] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 27.047636][ T288] EXT4-fs error (device loop4): ext4_map_blocks:629: inode #2: block 3: comm syz-executor: lblock 0 mapped to illegal pblock 3 (length 1) [ 27.074809][ T293] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 27.076571][ T288] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5834: Corrupt filesystem [ 27.092968][ T288] EXT4-fs error (device loop4): ext4_quota_off:6476: inode #3: comm syz-executor: mark_inode_dirty error [ 27.106032][ T293] usb 1-1: config 0 descriptor?? [ 27.115465][ T716] EXT4-fs (loop3): mounted filesystem without journal. Opts: commit=0x0000000000000005,,errors=continue. Quota mode: none. [ 27.128168][ T665] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 27.140610][ T291] attempt to access beyond end of device [ 27.140610][ T291] loop2: rw=2049, want=45104, limit=40427 [ 27.160619][ T293] hub 1-1:0.0: USB hub found [ 27.172109][ T716] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 27.208359][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 27.216585][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 27.258019][ T288] syz-executor (288) used greatest stack depth: 20096 bytes left [ 27.270211][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 27.281230][ T725] loop5: detected capacity change from 0 to 256 [ 27.295166][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 27.321323][ T725] exFAT-fs (loop5): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 27.402952][ T736] syz.5.171[736] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 27.403026][ T736] syz.5.171[736] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 27.406396][ T293] hub 1-1:0.0: 1 port detected [ 27.443689][ T736] capability: warning: `syz.5.171' uses deprecated v2 capabilities in a way that may be insecure [ 27.491040][ T731] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.497969][ T731] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.505173][ T731] device bridge_slave_0 entered promiscuous mode [ 27.513151][ T731] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.520072][ T731] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.527406][ T731] device bridge_slave_1 entered promiscuous mode [ 27.627056][ T293] hub 1-1:0.0: hub_hub_status failed (err = -71) [ 27.636416][ T293] hub 1-1:0.0: config failed, can't get hub status (err -71) [ 27.674306][ T731] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.681189][ T731] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.688304][ T731] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.695049][ T731] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.770613][ T697] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 27.777895][ T293] usbhid 1-1:0.0: can't add hid device: -71 [ 27.785191][ T293] usbhid: probe of 1-1:0.0 failed with error -71 [ 27.792283][ T697] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.811012][ T697] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.837232][ T293] usb 1-1: USB disconnect, device number 3 [ 27.852587][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 27.860472][ T565] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 27.874226][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.881104][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.889203][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 27.897226][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.904176][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.911849][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 27.919758][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 27.957936][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 27.974783][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 27.989342][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 27.997588][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 28.008071][ T731] device veth0_vlan entered promiscuous mode [ 28.022002][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 28.031744][ T731] device veth1_macvtap entered promiscuous mode [ 28.045913][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 28.066572][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 28.116336][ T565] usb 6-1: Using ep0 maxpacket: 8 [ 28.130567][ T777] IPv6: sit1: Disabled Multicast RS [ 28.208609][ T45] device bridge_slave_1 left promiscuous mode [ 28.217946][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.247305][ T45] device bridge_slave_0 left promiscuous mode [ 28.253248][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.266376][ T565] usb 6-1: New USB device found, idVendor=0403, idProduct=f0c8, bcdDevice= 2.56 [ 28.291200][ T565] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 28.308880][ T45] device veth1_macvtap left promiscuous mode [ 28.326052][ T565] usb 6-1: config 0 descriptor?? [ 28.329669][ T45] device veth0_vlan left promiscuous mode [ 28.368286][ T565] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected [ 28.576352][ T565] usb 6-1: Detected FT8U232AM [ 28.589250][ T565] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 28.779289][ T607] usb 6-1: USB disconnect, device number 2 [ 28.788705][ T607] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 28.809196][ T607] ftdi_sio 6-1:0.0: device disconnected [ 28.847273][ T821] kvm: emulating exchange as write [ 28.909943][ T828] loop3: detected capacity change from 0 to 2048 [ 28.938447][ T834] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.945377][ T834] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.952357][ T834] device bridge0 left promiscuous mode [ 28.977639][ T828] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 29.002217][ T834] syz.0.210 (834) used greatest stack depth: 19552 bytes left [ 29.101712][ T856] loop3: detected capacity change from 0 to 128 [ 29.184724][ T868] loop2: detected capacity change from 0 to 256 [ 29.258503][ T868] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011f3f, chksum : 0x96b62a4c, utbl_chksum : 0xe619d30d) [ 29.396456][ T293] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 29.576311][ T39] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 29.596373][ T607] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 29.756355][ T293] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 29.767104][ T293] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 29.776599][ T293] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 29.785429][ T293] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 29.793839][ T293] usb 1-1: config 0 descriptor?? [ 29.826656][ T39] usb 6-1: Using ep0 maxpacket: 16 [ 29.856372][ T607] usb 7-1: Using ep0 maxpacket: 16 [ 29.966688][ T39] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 29.977417][ T39] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 29.986976][ T607] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 29.997634][ T39] usb 6-1: New USB device found, idVendor=1b96, idProduct=0008, bcdDevice= 0.00 [ 30.006457][ T607] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 30.016198][ T607] usb 7-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 30.025309][ T39] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 30.034047][ T39] usb 6-1: config 0 descriptor?? [ 30.040021][ T607] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 30.048571][ T607] usb 7-1: config 0 descriptor?? [ 30.084649][ T884] loop3: detected capacity change from 0 to 1024 [ 30.108981][ T884] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 30.118383][ T884] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 30.125472][ T884] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 30.137964][ T884] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 30.145971][ T884] System zones: 0-1, 3-36 [ 30.151095][ T884] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,jqfmt=vfsold,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 30.188071][ T30] kauditd_printk_skb: 135 callbacks suppressed [ 30.188084][ T30] audit: type=1400 audit(30.171:394): avc: denied { read } for pid=886 comm="syz.2.234" name="ptp0" dev="devtmpfs" ino=256 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 30.225213][ T30] audit: type=1400 audit(30.171:395): avc: denied { open } for pid=886 comm="syz.2.234" path="/dev/ptp0" dev="devtmpfs" ino=256 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 30.248051][ T30] audit: type=1400 audit(30.201:396): avc: denied { ioctl } for pid=886 comm="syz.2.234" path="/dev/ptp0" dev="devtmpfs" ino=256 ioctlcmd=0x3d06 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 30.286884][ T293] hid (null): bogus close delimiter [ 30.308768][ T30] audit: type=1400 audit(30.291:397): avc: denied { audit_write } for pid=892 comm="syz.3.237" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 30.328852][ T30] audit: type=1107 audit(30.291:398): pid=892 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 30.358498][ T30] audit: type=1400 audit(30.341:399): avc: denied { name_bind } for pid=896 comm="syz.3.239" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 30.385888][ T900] syz.3.240 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 30.496338][ T6] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 30.506436][ T293] usb 1-1: language id specifier not provided by device, defaulting to English [ 30.541473][ T875] UDC core: couldn't find an available UDC or it's busy: -16 [ 30.548718][ T875] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 30.557013][ T39] ntrig 0003:1B96:0008.0004: unbalanced collection at end of report description [ 30.565991][ T39] ntrig 0003:1B96:0008.0004: parse failed [ 30.571823][ T39] ntrig: probe of 0003:1B96:0008.0004 failed with error -22 [ 30.579413][ T607] hid (null): bogus close delimiter [ 30.584420][ T607] hid (null): bogus close delimiter [ 30.590478][ T607] hid (null): bogus close delimiter [ 30.595578][ T607] hid (null): invalid report_size 29797 [ 30.602708][ T607] hid-generic 0003:0158:0100.0005: unknown main item tag 0x0 [ 30.610013][ T607] hid-generic 0003:0158:0100.0005: unknown main item tag 0x0 [ 30.617455][ T607] hid-generic 0003:0158:0100.0005: unknown main item tag 0x0 [ 30.624651][ T607] hid-generic 0003:0158:0100.0005: unknown main item tag 0x0 [ 30.632072][ T607] hid-generic 0003:0158:0100.0005: unknown main item tag 0x0 [ 30.639417][ T607] hid-generic 0003:0158:0100.0005: unknown main item tag 0x0 [ 30.646786][ T607] hid-generic 0003:0158:0100.0005: unknown main item tag 0x0 [ 30.653976][ T607] hid-generic 0003:0158:0100.0005: unknown main item tag 0x0 [ 30.661385][ T607] hid-generic 0003:0158:0100.0005: unknown main item tag 0x0 [ 30.668725][ T607] hid-generic 0003:0158:0100.0005: unknown main item tag 0x0 [ 30.675919][ T607] hid-generic 0003:0158:0100.0005: unknown main item tag 0x0 [ 30.683379][ T607] hid-generic 0003:0158:0100.0005: unknown main item tag 0x0 [ 30.690735][ T607] hid-generic 0003:0158:0100.0005: unknown main item tag 0x0 [ 30.698075][ T607] hid-generic 0003:0158:0100.0005: unknown main item tag 0x0 [ 30.705261][ T607] hid-generic 0003:0158:0100.0005: unknown main item tag 0x0 [ 30.712764][ T607] hid-generic 0003:0158:0100.0005: unknown main item tag 0x0 [ 30.720105][ T607] hid-generic 0003:0158:0100.0005: unknown main item tag 0x0 [ 30.727323][ T607] hid-generic 0003:0158:0100.0005: unknown main item tag 0x0 [ 30.734502][ T607] hid-generic 0003:0158:0100.0005: unknown main item tag 0x0 [ 30.736313][ T6] usb 3-1: Using ep0 maxpacket: 16 [ 30.741726][ T607] hid-generic 0003:0158:0100.0005: unknown main item tag 0x0 [ 30.753855][ T607] hid-generic 0003:0158:0100.0005: unknown main item tag 0x0 [ 30.761127][ T607] hid-generic 0003:0158:0100.0005: unknown main item tag 0x0 [ 30.768319][ T607] hid-generic 0003:0158:0100.0005: unknown main item tag 0x0 [ 30.775483][ T607] hid-generic 0003:0158:0100.0005: unknown main item tag 0x0 [ 30.782833][ T607] hid-generic 0003:0158:0100.0005: unknown main item tag 0x0 [ 30.790092][ T607] hid-generic 0003:0158:0100.0005: unknown main item tag 0x0 [ 30.797279][ T607] hid-generic 0003:0158:0100.0005: unknown main item tag 0x0 [ 30.804452][ T607] hid-generic 0003:0158:0100.0005: unknown main item tag 0x0 [ 30.804684][ T760] usb 6-1: USB disconnect, device number 3 [ 30.811682][ T607] hid-generic 0003:0158:0100.0005: unknown main item tag 0x0 [ 30.811742][ T607] hid-generic 0003:0158:0100.0005: unknown main item tag 0x0 [ 30.831716][ T607] hid-generic 0003:0158:0100.0005: unknown main item tag 0x0 [ 30.839049][ T607] hid-generic 0003:0158:0100.0005: unknown main item tag 0x0 [ 30.846229][ T607] hid-generic 0003:0158:0100.0005: unknown main item tag 0x0 [ 30.853580][ T607] hid-generic 0003:0158:0100.0005: unknown main item tag 0x0 [ 30.860821][ T607] hid-generic 0003:0158:0100.0005: unknown main item tag 0x0 [ 30.866360][ T6] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 30.868078][ T607] hid-generic 0003:0158:0100.0005: unknown main item tag 0x1 [ 30.878916][ T6] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 30.886124][ T607] hid-generic 0003:0158:0100.0005: unknown main item tag 0x0 [ 30.898892][ T6] usb 3-1: New USB device found, idVendor=0458, idProduct=5015, bcdDevice= 0.00 [ 30.905881][ T607] hid-generic 0003:0158:0100.0005: unknown main item tag 0x0 [ 30.914874][ T6] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 30.921965][ T607] hid-generic 0003:0158:0100.0005: unknown main item tag 0x0 [ 30.933182][ T6] usb 3-1: config 0 descriptor?? [ 30.937149][ T607] hid-generic 0003:0158:0100.0005: unknown main item tag 0x0 [ 30.948939][ T607] hid-generic 0003:0158:0100.0005: unknown main item tag 0x0 [ 30.956058][ T607] hid-generic 0003:0158:0100.0005: unknown main item tag 0x0 [ 30.963328][ T607] hid-generic 0003:0158:0100.0005: unknown main item tag 0x0 [ 30.970490][ T607] hid-generic 0003:0158:0100.0005: unknown main item tag 0x0 [ 30.977744][ T607] hid-generic 0003:0158:0100.0005: unknown main item tag 0x1 [ 30.984876][ T607] hid-generic 0003:0158:0100.0005: unknown main item tag 0x0 [ 30.992153][ T607] hid-generic 0003:0158:0100.0005: unknown main item tag 0x0 [ 30.999304][ T607] hid-generic 0003:0158:0100.0005: unknown main item tag 0x0 [ 31.006532][ T607] hid-generic 0003:0158:0100.0005: unknown main item tag 0x7 [ 31.013689][ T607] hid-generic 0003:0158:0100.0005: unknown main item tag 0x0 [ 31.020942][ T607] hid-generic 0003:0158:0100.0005: bogus close delimiter [ 31.027760][ T607] hid-generic 0003:0158:0100.0005: item 0 0 2 10 parsing failed [ 31.035407][ T607] hid-generic: probe of 0003:0158:0100.0005 failed with error -22 [ 31.045604][ T607] usb 7-1: USB disconnect, device number 2 [ 31.176356][ T293] uclogic 0003:256C:006D.0003: failed retrieving string descriptor #100: -71 [ 31.184994][ T293] uclogic 0003:256C:006D.0003: failed retrieving pen parameters: -71 [ 31.192889][ T293] uclogic 0003:256C:006D.0003: failed probing pen v1 parameters: -71 [ 31.200851][ T293] uclogic 0003:256C:006D.0003: failed probing parameters: -71 [ 31.208048][ T293] uclogic: probe of 0003:256C:006D.0003 failed with error -71 [ 31.216566][ T293] usb 1-1: USB disconnect, device number 4 [ 31.332761][ T30] audit: type=1326 audit(31.311:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=912 comm="syz.6.245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8472bae719 code=0x7ffc0000 [ 31.355303][ T30] audit: type=1326 audit(31.311:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=912 comm="syz.6.245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8472bae719 code=0x7ffc0000 [ 31.378224][ T30] audit: type=1326 audit(31.311:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=912 comm="syz.6.245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f8472bae719 code=0x7ffc0000 [ 31.408890][ T918] loop5: detected capacity change from 0 to 256 [ 31.417715][ T6] kye 0003:0458:5015.0006: item fetching failed at offset 5/11 [ 31.426460][ T30] audit: type=1326 audit(31.311:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=912 comm="syz.6.245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8472bae719 code=0x7ffc0000 [ 31.450907][ T6] kye 0003:0458:5015.0006: parse failed [ 31.456318][ T6] kye: probe of 0003:0458:5015.0006 failed with error -22 [ 31.472690][ T920] Illegal XDP return value 4294967274, expect packet loss! [ 31.552714][ T935] syz.6.255[935] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 31.552799][ T935] syz.6.255[935] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 31.573112][ T939] loop6: detected capacity change from 0 to 16 [ 31.597888][ T939] erofs: (device loop6): erofs_read_inode: unsupported chunk format 7fff of nid 36 [ 31.653077][ T293] hid-generic 0000:1000000:0000.0007: unknown main item tag 0x0 [ 31.660609][ T293] hid-generic 0000:1000000:0000.0007: unknown main item tag 0x0 [ 31.669529][ T293] hid-generic 0000:1000000:0000.0007: unknown main item tag 0x0 [ 31.677166][ T293] hid-generic 0000:1000000:0000.0007: unknown main item tag 0x0 [ 31.684649][ T293] hid-generic 0000:1000000:0000.0007: unknown main item tag 0x0 [ 31.692265][ T293] hid-generic 0000:1000000:0000.0007: unknown main item tag 0x0 [ 31.699914][ T293] hid-generic 0000:1000000:0000.0007: unknown main item tag 0x0 [ 31.702730][ T950] Zero length message leads to an empty skb [ 31.707521][ T293] hid-generic 0000:1000000:0000.0007: unknown main item tag 0x0 [ 31.720873][ T293] hid-generic 0000:1000000:0000.0007: unknown main item tag 0x0 [ 31.728481][ T293] hid-generic 0000:1000000:0000.0007: unknown main item tag 0x0 [ 31.735961][ T293] hid-generic 0000:1000000:0000.0007: unknown main item tag 0x0 [ 31.743557][ T293] hid-generic 0000:1000000:0000.0007: unknown main item tag 0x0 [ 31.751145][ T293] hid-generic 0000:1000000:0000.0007: unknown main item tag 0x0 [ 31.758656][ T293] hid-generic 0000:1000000:0000.0007: unknown main item tag 0x0 [ 31.766052][ T293] hid-generic 0000:1000000:0000.0007: unknown main item tag 0x0 [ 31.773560][ T293] hid-generic 0000:1000000:0000.0007: unknown main item tag 0x0 [ 31.780994][ T293] hid-generic 0000:1000000:0000.0007: unknown main item tag 0x0 [ 31.788484][ T293] hid-generic 0000:1000000:0000.0007: unknown main item tag 0x0 [ 31.795908][ T293] hid-generic 0000:1000000:0000.0007: unknown main item tag 0x0 [ 31.803422][ T293] hid-generic 0000:1000000:0000.0007: unknown main item tag 0x0 [ 31.810854][ T293] hid-generic 0000:1000000:0000.0007: unknown main item tag 0x0 [ 31.818771][ T293] hid-generic 0000:1000000:0000.0007: hidraw0: HID v0.00 Device [syz0] on syz1 [ 31.831911][ T6] usb 3-1: USB disconnect, device number 2 [ 31.926349][ T607] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 32.126316][ T317] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 32.346358][ T607] usb 6-1: config 0 has no interfaces? [ 32.351699][ T607] usb 6-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 32.365424][ T607] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 32.366307][ T317] usb 7-1: Using ep0 maxpacket: 16 [ 32.380393][ T607] usb 6-1: config 0 descriptor?? [ 32.436208][ T975] netlink: 176 bytes leftover after parsing attributes in process `syz.3.272'. [ 32.496420][ T317] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 32.507150][ T317] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 32.516825][ T317] usb 7-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 32.525681][ T317] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 32.534017][ T317] usb 7-1: config 0 descriptor?? [ 32.618601][ T523] usb 6-1: USB disconnect, device number 4 [ 32.736314][ T6] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 33.017136][ T317] appleir 0003:05AC:8241.0008: unknown main item tag 0x0 [ 33.024105][ T317] appleir 0003:05AC:8241.0008: unknown main item tag 0x0 [ 33.030934][ T317] appleir 0003:05AC:8241.0008: unknown main item tag 0x0 [ 33.037763][ T317] appleir 0003:05AC:8241.0008: unknown main item tag 0x0 [ 33.044575][ T317] appleir 0003:05AC:8241.0008: unknown main item tag 0x0 [ 33.051672][ T317] appleir 0003:05AC:8241.0008: No inputs registered, leaving [ 33.061844][ T317] appleir 0003:05AC:8241.0008: hiddev96,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.6-1/input0 [ 33.096402][ T6] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 33.107320][ T6] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 33.116898][ T6] usb 3-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00 [ 33.125692][ T6] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.134490][ T6] usb 3-1: config 0 descriptor?? [ 33.285522][ T992] loop2: detected capacity change from 0 to 7 [ 33.297049][ T523] usb 7-1: USB disconnect, device number 3 [ 33.351271][ T998] loop3: detected capacity change from 0 to 512 [ 33.361276][ T998] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #15: comm syz.3.283: casefold flag without casefold feature [ 33.373800][ T998] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.283: couldn't read orphan inode 15 (err -117) [ 33.385641][ T998] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 33.386980][ T607] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 33.466320][ T565] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 33.617911][ T6] magicmouse 0003:05AC:0269.0009: hidraw0: USB HID v0.00 Device [HID 05ac:0269] on usb-dummy_hcd.2-1/input0 [ 33.726313][ T565] usb 6-1: Using ep0 maxpacket: 8 [ 33.726313][ T317] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 33.776382][ T607] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 33.806587][ T1007] loop6: detected capacity change from 0 to 128 [ 33.819359][ T6] usb 3-1: USB disconnect, device number 3 [ 33.896382][ T565] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 33.935623][ T1009] loop6: detected capacity change from 0 to 512 [ 33.978561][ T1009] EXT4-fs error (device loop6): ext4_expand_extra_isize_ea:2765: inode #11: comm syz.6.287: corrupted xattr block 95 [ 33.990749][ T607] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 33.990885][ T1009] EXT4-fs error (device loop6): ext4_validate_block_bitmap:429: comm syz.6.287: bg 0: block 7: invalid block bitmap [ 33.999664][ T565] usb 6-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 34.011959][ T1009] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6185: Corrupt filesystem [ 34.020653][ T607] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 34.029934][ T1009] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2931: inode #11: comm syz.6.287: corrupted xattr block 95 [ 34.036904][ T565] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 34.049117][ T1009] EXT4-fs warning (device loop6): ext4_evict_inode:303: xattr delete (err -117) [ 34.056543][ T607] usb 1-1: Product: syz [ 34.065705][ T1009] EXT4-fs (loop6): 1 orphan inode deleted [ 34.069394][ T607] usb 1-1: Manufacturer: syz [ 34.069408][ T607] usb 1-1: SerialNumber: syz [ 34.069737][ T565] usb 6-1: SerialNumber: syz [ 34.075351][ T1009] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 34.080914][ T565] usb 6-1: config 0 descriptor?? [ 34.086390][ T317] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 34.114461][ T317] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 34.124072][ T317] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 34.138259][ T317] usb 4-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00 [ 34.146827][ T565] usb 6-1: Found UVC 0.00 device (05ac:8501) [ 34.147181][ T317] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 34.153869][ T565] uvcvideo 6-1:0.0: Entity type for entity Output 255 was not initialized! [ 34.170234][ T565] usb 6-1: Failed to create links for entity 255 [ 34.176577][ T565] usb 6-1: Failed to register entities (-22). [ 34.177007][ T317] usb 4-1: config 0 descriptor?? [ 34.264772][ T1016] syz.6.290[1016] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 34.264815][ T1016] syz.6.290[1016] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 34.388760][ T523] usb 6-1: USB disconnect, device number 5 [ 34.436703][ T1028] incfs: Error accessing: ./file0. [ 34.441729][ T1028] incfs: mount failed -20 [ 34.491429][ T1041] loop6: detected capacity change from 0 to 128 [ 34.519175][ T1041] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 34.573224][ T1049] loop6: detected capacity change from 0 to 512 [ 34.626449][ T1056] loop2: detected capacity change from 0 to 128 [ 34.667749][ T1049] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 34.688887][ T1056] EXT4-fs (loop2): Ignoring removed orlov option [ 34.695850][ T1056] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsv1,i_version,data_err=abort,noload,orlov,nobarrier,,errors=continue. Quota mode: none. [ 34.714955][ T1056] EXT4-fs warning (device loop2): verify_group_input:147: Cannot add at group 169877795 (only 1 groups) [ 34.733451][ T1061] loop6: detected capacity change from 0 to 256 [ 34.916342][ T317] usbhid 4-1:0.0: can't add hid device: -71 [ 34.922387][ T317] usbhid: probe of 4-1:0.0 failed with error -71 [ 34.930301][ T317] usb 4-1: USB disconnect, device number 3 [ 34.944158][ T1072] netlink: 8 bytes leftover after parsing attributes in process `syz.5.313'. [ 34.967560][ T1072] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 35.056316][ T565] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 35.076014][ T1074] loop5: detected capacity change from 0 to 40427 [ 35.157194][ T1074] F2FS-fs (loop5): fault_injection options not supported [ 35.164126][ T1074] F2FS-fs (loop5): fault_type options not supported [ 35.171313][ T1074] F2FS-fs (loop5): invalid crc value [ 35.177376][ T1074] F2FS-fs (loop5): Found nat_bits in checkpoint [ 35.199170][ T1074] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 35.206369][ T607] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 35.212775][ T607] cdc_ncm 1-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 35.219940][ T607] cdc_ncm 1-1:1.0: setting rx_max = 2048 [ 35.226914][ T667] attempt to access beyond end of device [ 35.226914][ T667] loop5: rw=2049, want=45104, limit=40427 [ 35.296298][ T565] usb 7-1: Using ep0 maxpacket: 32 [ 35.317070][ T30] kauditd_printk_skb: 64 callbacks suppressed [ 35.317082][ T30] audit: type=1400 audit(35.301:468): avc: denied { mounton } for pid=1077 comm="syz.5.315" path="/proc/38/cgroup" dev="proc" ino=18962 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 35.397036][ T1088] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 35.404063][ T1088] IPv6: NLM_F_CREATE should be set when creating new route [ 35.417432][ T607] cdc_ncm 1-1:1.0: setting tx_max = 184 [ 35.424596][ T565] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 35.433674][ T30] audit: type=1400 audit(35.401:469): avc: denied { bind } for pid=1093 comm="syz.5.323" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 35.443145][ T607] cdc_ncm 1-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM, 42:42:42:42:42:42 [ 35.463857][ T565] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 35.474055][ T565] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 35.490104][ T1097] serio: Serial port ptm0 [ 35.498110][ T565] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 35.513494][ T607] usb 1-1: USB disconnect, device number 5 [ 35.533121][ T1102] loop3: detected capacity change from 0 to 256 [ 35.536709][ T607] cdc_ncm 1-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM [ 35.553297][ T565] usb 7-1: config 0 descriptor?? [ 35.606817][ T565] hub 7-1:0.0: USB hub found [ 35.656833][ T30] audit: type=1400 audit(35.641:470): avc: denied { map } for pid=1122 comm="syz.2.331" path="/dev/ashmem" dev="devtmpfs" ino=261 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 35.772588][ T1145] loop2: detected capacity change from 0 to 128 [ 35.826343][ T565] hub 7-1:0.0: 1 port detected [ 35.832109][ T1145] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 35.843118][ T30] audit: type=1400 audit(35.821:471): avc: denied { mount } for pid=1144 comm="syz.2.336" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 35.872766][ T30] audit: type=1400 audit(35.851:472): avc: denied { unmount } for pid=291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 35.877770][ T1115] loop5: detected capacity change from 0 to 40427 [ 35.940748][ T30] audit: type=1400 audit(35.921:473): avc: denied { create } for pid=1153 comm="syz.2.338" dev="anon_inodefs" ino=19009 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 35.961721][ T30] audit: type=1400 audit(35.921:474): avc: denied { ioctl } for pid=1153 comm="syz.2.338" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=19009 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 35.966831][ T1156] syz.2.339[1156] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 35.986887][ T1156] syz.2.339[1156] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 36.002867][ T1115] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 36.024885][ T30] audit: type=1400 audit(35.991:475): avc: denied { read } for pid=1157 comm="syz.0.340" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 36.030908][ T1115] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 36.046800][ T30] audit: type=1400 audit(35.991:476): avc: denied { open } for pid=1157 comm="syz.0.340" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 36.056831][ T1115] F2FS-fs (loop5): Found nat_bits in checkpoint [ 36.083023][ T339] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 36.111074][ T1115] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 36.118009][ T1115] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 36.118024][ T565] hub 7-1:0.0: hub_hub_status failed (err = -71) [ 36.143501][ T565] hub 7-1:0.0: config failed, can't get hub status (err -71) [ 36.156925][ T30] audit: type=1400 audit(36.141:477): avc: denied { read } for pid=1169 comm="syz.2.344" dev="nsfs" ino=4026532460 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 36.276345][ T565] usbhid 7-1:0.0: can't add hid device: -71 [ 36.282119][ T565] usbhid: probe of 7-1:0.0 failed with error -71 [ 36.316900][ T565] usb 7-1: USB disconnect, device number 4 [ 36.332107][ T1165] binder: 1164:1165 ioctl c0306201 20001a80 returned -14 [ 36.362653][ T1180] syz.0.348[1180] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 36.362705][ T1180] syz.0.348[1180] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 36.456377][ T339] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 36.476156][ T339] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 36.486137][ T339] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 36.494891][ T339] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 36.505656][ T339] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 36.556312][ T317] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 36.636384][ T339] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 36.645472][ T339] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 36.653489][ T339] usb 4-1: Product: syz [ 36.657472][ T339] usb 4-1: Manufacturer: syz [ 36.697033][ T339] cdc_wdm 4-1:1.0: skipping garbage [ 36.702049][ T339] cdc_wdm 4-1:1.0: skipping garbage [ 36.707831][ T339] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 36.876313][ T565] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 36.897799][ T523] usb 4-1: USB disconnect, device number 4 [ 36.936455][ T317] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 36.947266][ T317] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 36.956877][ T317] usb 6-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 36.965635][ T317] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 36.974034][ T317] usb 6-1: config 0 descriptor?? [ 37.065046][ T1220] loop2: detected capacity change from 0 to 512 [ 37.138312][ T1220] EXT4-fs warning (device loop2): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 37.149654][ T1220] EXT4-fs warning (device loop2): dx_probe:881: Enable large directory feature to access it [ 37.159643][ T1220] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.366: Corrupt directory, running e2fsck is recommended [ 37.172635][ T1220] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 37.180667][ T1220] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2219: inode #15: comm syz.2.366: corrupted in-inode xattr [ 37.192518][ T1220] EXT4-fs (loop2): Remounting filesystem read-only [ 37.199058][ T1220] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.366: couldn't read orphan inode 15 (err -117) [ 37.210859][ T1220] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_lock,noblock_validity,data_err=abort,init_itable,auto_da_alloc,grpjquota=.nouid32,errors=remount-ro,jqfmt=vfsv1,grpid,,. Quota mode: writeback. [ 37.232804][ T1220] EXT4-fs warning (device loop2): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 37.244238][ T565] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 37.244314][ T1220] EXT4-fs warning (device loop2): dx_probe:881: Enable large directory feature to access it [ 37.264833][ T1220] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.366: Corrupt directory, running e2fsck is recommended [ 37.279540][ T1220] EXT4-fs warning (device loop2): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 37.290948][ T1220] EXT4-fs warning (device loop2): dx_probe:881: Enable large directory feature to access it [ 37.300874][ T1220] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.366: Corrupt directory, running e2fsck is recommended [ 37.314077][ T1220] EXT4-fs warning (device loop2): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 37.325419][ T1220] EXT4-fs warning (device loop2): dx_probe:881: Enable large directory feature to access it [ 37.335392][ T1220] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.366: Corrupt directory, running e2fsck is recommended [ 37.348535][ T1220] EXT4-fs warning (device loop2): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 37.406346][ T565] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 37.415267][ T565] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 37.423051][ T565] usb 7-1: Product: syz [ 37.427059][ T565] usb 7-1: Manufacturer: syz [ 37.431546][ T565] usb 7-1: SerialNumber: syz [ 37.439006][ T317] hid-thrustmaster 0003:044F:B65D.000A: unknown main item tag 0x0 [ 37.447920][ T317] hid-thrustmaster 0003:044F:B65D.000A: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.5-1/input0 [ 37.460098][ T317] hid-thrustmaster 0003:044F:B65D.000A: Wrong number of endpoints? [ 37.510523][ T1229] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.517629][ T1229] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.524825][ T1229] device bridge_slave_0 entered promiscuous mode [ 37.533142][ T1229] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.540013][ T1229] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.547153][ T1229] device bridge_slave_1 entered promiscuous mode [ 37.586499][ T1229] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.593344][ T1229] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.600453][ T1229] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.607237][ T1229] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.638983][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 37.646821][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.654073][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.671115][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 37.679856][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.686723][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.694203][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 37.702363][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.703888][ T1240] SELinux: security_context_str_to_sid(unconfined_u) failed for (dev ?, type ?) errno=-22 [ 37.709221][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.717650][ T60] usb 6-1: USB disconnect, device number 6 [ 37.720143][ T1240] SELinux: security_context_str_to_sid(unconfined_u) failed for (dev ?, type ?) errno=-22 [ 37.731638][ C0] hid-thrustmaster 0003:044F:B65D.000A: URB to get model id failed with error -2 [ 37.750431][ T1240] SELinux: duplicate or incompatible mount options [ 37.757192][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 37.765244][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 37.784739][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 37.796352][ T1246] device pim6reg1 entered promiscuous mode [ 37.807147][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 37.814851][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 37.822251][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 37.830156][ T1229] device veth0_vlan entered promiscuous mode [ 37.841279][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 37.850404][ T1229] device veth1_macvtap entered promiscuous mode [ 37.861368][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 37.871116][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 37.879983][ T1251] loop3: detected capacity change from 0 to 2048 [ 37.958274][ T1251] EXT4-fs (loop3): mounted filesystem without journal. Opts: commit=0x0000000000000005,,errors=continue. Quota mode: none. [ 37.986956][ T1270] binfmt_misc: register: failed to install interpreter file ./bus/file0 [ 38.021497][ T8] device bridge_slave_1 left promiscuous mode [ 38.029694][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.037327][ T8] device bridge_slave_0 left promiscuous mode [ 38.043256][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.051573][ T8] device veth1_macvtap left promiscuous mode [ 38.057457][ T8] device veth0_vlan left promiscuous mode [ 38.128056][ T1292] loop3: detected capacity change from 0 to 2048 [ 38.156847][ T1292] EXT4-fs error (device loop3): ext4_fill_super:4831: inode #2: comm syz.3.395: casefold flag without casefold feature [ 38.169485][ T1292] EXT4-fs (loop3): get root inode failed [ 38.174930][ T1292] EXT4-fs (loop3): mount failed [ 38.309326][ T1314] loop5: detected capacity change from 0 to 256 [ 38.346790][ T1314] exFAT-fs (loop5): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d) [ 38.365944][ T1318] loop7: detected capacity change from 0 to 1024 [ 38.400182][ T1318] EXT4-fs (loop7): Ignoring removed nomblk_io_submit option [ 38.407526][ T1318] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 38.417733][ T1318] EXT4-fs (loop7): barriers disabled [ 38.422901][ T1318] JBD2: no valid journal superblock found [ 38.428482][ T1318] EXT4-fs (loop7): error loading journal [ 38.543875][ T10] Bluetooth: hci0: Frame reassembly failed (-84) [ 38.557895][ T565] cdc_ncm 7-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 38.562383][ T1345] loop5: detected capacity change from 0 to 512 [ 38.564153][ T565] cdc_ncm 7-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 38.578340][ T565] cdc_ncm 7-1:1.0: setting rx_max = 2048 [ 38.589754][ T1345] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 38.606292][ T1345] EXT4-fs error (device loop5): ext4_find_dest_de:2113: inode #12: block 32: comm syz.5.418: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=12, rec_len=106, size=2048 fake=1 [ 38.766330][ T565] cdc_ncm 7-1:1.0: setting tx_max = 184 [ 38.772955][ T565] cdc_ncm 7-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.6-1, CDC NCM, 42:42:42:42:42:42 [ 38.784663][ T565] usb 7-1: USB disconnect, device number 5 [ 38.790570][ T565] cdc_ncm 7-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.6-1, CDC NCM [ 38.946308][ T339] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 38.965009][ T1380] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 39.186326][ T339] usb 6-1: Using ep0 maxpacket: 16 [ 39.202908][ T760] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 39.210204][ T760] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 39.217358][ T760] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 39.224507][ T760] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 39.231762][ T760] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 39.239114][ T760] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 39.246330][ T760] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 39.253489][ T760] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 39.260728][ T760] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 39.267919][ T760] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 39.275099][ T760] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 39.282348][ T760] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 39.289542][ T760] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 39.296763][ T760] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 39.303914][ T760] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 39.306403][ T339] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 39.320808][ T760] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 39.320831][ T760] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 39.320850][ T760] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 39.320867][ T760] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 39.320884][ T760] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 39.320902][ T760] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 39.320919][ T760] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 39.328572][ T339] usb 6-1: config 0 interface 0 has no altsetting 0 [ 39.342558][ T760] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 39.351094][ T339] usb 6-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 39.357067][ T760] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 39.370430][ T339] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 39.379923][ T760] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 39.392499][ T339] usb 6-1: config 0 descriptor?? [ 39.411286][ T760] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 39.416945][ T565] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 39.435532][ T760] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 39.435556][ T760] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 39.435575][ T760] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 39.435593][ T760] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 39.465960][ T760] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 39.473315][ T760] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 39.480712][ T760] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 39.488040][ T760] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 39.496231][ T760] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 39.505427][ T760] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 39.507820][ T1414] loop6: detected capacity change from 0 to 128 [ 39.512907][ T760] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 39.526094][ T760] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 39.533502][ T760] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 39.540790][ T760] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 39.547893][ T760] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 39.555143][ T760] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 39.562329][ T760] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 39.571725][ T760] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz0] on syz0 [ 39.606780][ T1414] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 39.618689][ T1414] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 39.743904][ T1431] loop6: detected capacity change from 0 to 2048 [ 39.767088][ T1431] loop6: p1 < > p4 [ 39.771449][ T1431] loop6: p4 size 8388608 extends beyond EOD, truncated [ 39.816398][ T565] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 39.826512][ T565] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 39.838326][ T565] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 39.848015][ T565] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 39.860672][ T565] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 39.869517][ T565] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 39.910866][ T312] udevd[312]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 39.915561][ T319] udevd[319]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory [ 39.930794][ T565] usb 4-1: invalid MIDI out EP 0 [ 39.935939][ T565] snd-usb-audio: probe of 4-1:27.0 failed with error -22 [ 39.943957][ T339] hid (null): global environment stack underflow [ 39.950114][ T339] hid (null): unknown global tag 0x84 [ 39.955290][ T339] hid (null): report_id 0 is invalid [ 39.961389][ T339] hid (null): unknown global tag 0xc [ 39.967084][ T339] hid (null): unknown global tag 0xd [ 39.972174][ T339] hid (null): report_id 2863014418 is invalid [ 39.978126][ T339] hid (null): report_id 2384115945 is invalid [ 39.984704][ T339] hid-generic 0003:060B:500A.000C: unexpected long global item [ 39.992233][ T339] hid-generic: probe of 0003:060B:500A.000C failed with error -22 [ 40.122890][ T339] usb 4-1: USB disconnect, device number 5 [ 40.135756][ T760] usb 6-1: USB disconnect, device number 7 [ 40.596346][ T760] Bluetooth: hci0: command 0x1003 tx timeout [ 40.602217][ T1342] Bluetooth: hci0: sending frame failed (-49) [ 40.696803][ T30] kauditd_printk_skb: 78 callbacks suppressed [ 40.696818][ T30] audit: type=1326 audit(40.681:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1452 comm="syz.3.452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f826cd91719 code=0x7ffc0000 [ 40.725312][ T30] audit: type=1326 audit(40.681:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1452 comm="syz.3.452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f826cd91719 code=0x7ffc0000 [ 40.747817][ T30] audit: type=1326 audit(40.681:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1452 comm="syz.3.452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f826cd91719 code=0x7ffc0000 [ 40.771149][ T30] audit: type=1326 audit(40.681:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1452 comm="syz.3.452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f826cd91753 code=0x7ffc0000 [ 40.800969][ T30] audit: type=1326 audit(40.781:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1452 comm="syz.3.452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f826cd901ff code=0x7ffc0000 [ 40.844109][ T30] audit: type=1326 audit(40.821:561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1452 comm="syz.3.452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f826cd917a7 code=0x7ffc0000 [ 40.845384][ T1453] loop3: detected capacity change from 0 to 40427 [ 40.866600][ T30] audit: type=1326 audit(40.821:562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1452 comm="syz.3.452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f826cd900b0 code=0x7ffc0000 [ 40.894940][ T30] audit: type=1326 audit(40.821:563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1452 comm="syz.3.452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f826cd9131b code=0x7ffc0000 [ 40.917376][ T30] audit: type=1326 audit(40.851:564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1452 comm="syz.3.452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f826cd903aa code=0x7ffc0000 [ 40.936323][ T760] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 40.940253][ T339] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 40.947189][ T30] audit: type=1326 audit(40.851:565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1452 comm="syz.3.452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f826cd903aa code=0x7ffc0000 [ 41.007917][ T1453] F2FS-fs (loop3): invalid crc value [ 41.014722][ T1453] F2FS-fs (loop3): Found nat_bits in checkpoint [ 41.036207][ T1453] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 41.052715][ T292] attempt to access beyond end of device [ 41.052715][ T292] loop3: rw=2049, want=45104, limit=40427 [ 41.186638][ T1464] syz.3.456 (1464): /proc/1463/oom_adj is deprecated, please use /proc/1463/oom_score_adj instead. [ 41.316474][ T760] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 41.366331][ T339] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 41.375932][ T339] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 41.388531][ T339] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 41.397393][ T339] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 41.405827][ T339] usb 7-1: config 0 descriptor?? [ 41.486428][ T760] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 41.495341][ T760] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 41.503421][ T760] usb 6-1: Product: syz [ 41.507591][ T760] usb 6-1: Manufacturer: syz [ 41.511991][ T760] usb 6-1: SerialNumber: syz [ 41.526315][ T6] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 41.886410][ T6] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 41.888999][ T339] kovaplus 0003:1E7D:2D50.000D: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.6-1/input0 [ 41.900907][ T6] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 41.917801][ T6] usb 4-1: New USB device found, idVendor=056a, idProduct=00b8, bcdDevice= 0.00 [ 41.926618][ T6] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 41.935054][ T6] usb 4-1: config 0 descriptor?? [ 42.417652][ T6] wacom 0003:056A:00B8.000E: Unknown device_type for 'HID 056a:00b8'. Assuming pen. [ 42.428118][ T6] wacom 0003:056A:00B8.000E: hidraw1: USB HID v0.00 Device [HID 056a:00b8] on usb-dummy_hcd.3-1/input0 [ 42.445414][ T6] input: Wacom Intuos4 4x6 Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:056A:00B8.000E/input/input6 [ 42.618836][ T6] usb 4-1: USB disconnect, device number 6 [ 42.656357][ T760] cdc_ncm 6-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 42.662593][ T760] cdc_ncm 6-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 42.669930][ T760] cdc_ncm 6-1:1.0: setting rx_max = 2048 [ 42.676325][ T607] Bluetooth: hci0: command 0x1001 tx timeout [ 42.682214][ T1342] Bluetooth: hci0: sending frame failed (-49) [ 42.736347][ T339] kovaplus 0003:1E7D:2D50.000D: couldn't init struct kovaplus_device [ 42.744266][ T339] kovaplus 0003:1E7D:2D50.000D: couldn't install mouse [ 42.751659][ T339] kovaplus: probe of 0003:1E7D:2D50.000D failed with error -71 [ 42.760754][ T339] usb 7-1: USB disconnect, device number 6 [ 42.866362][ T760] cdc_ncm 6-1:1.0: setting tx_max = 184 [ 42.872909][ T760] cdc_ncm 6-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.5-1, CDC NCM, 42:42:42:42:42:42 [ 42.884646][ T760] usb 6-1: USB disconnect, device number 8 [ 42.890528][ T760] cdc_ncm 6-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.5-1, CDC NCM [ 43.284402][ T1515] loop3: detected capacity change from 0 to 40427 [ 43.297064][ T1515] F2FS-fs (loop3): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 43.304691][ T1515] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 43.313551][ T1515] F2FS-fs (loop3): invalid crc value [ 43.326033][ T1515] F2FS-fs (loop3): Found nat_bits in checkpoint [ 43.362013][ T1515] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 43.379565][ T1515] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 43.430924][ T1536] loop5: detected capacity change from 0 to 512 [ 43.448416][ T1515] attempt to access beyond end of device [ 43.448416][ T1515] loop3: rw=34817, want=77856, limit=40427 [ 43.496670][ T1536] EXT4-fs (loop5): Ignoring removed nobh option [ 43.502818][ T1536] EXT4-fs (loop5): Journaled quota options ignored when QUOTA feature is enabled [ 43.518474][ T1536] EXT4-fs (loop5): 1 orphan inode deleted [ 43.524063][ T1536] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpquota,nodiscard,noquota,resuid=0x0000000000000000,errors=remount-ro,nobh,sysvgroups,delalloc,usrjquota=./file1,. Quota mode: writeback. [ 43.559758][ T292] attempt to access beyond end of device [ 43.559758][ T292] loop3: rw=2049, want=45104, limit=40427 [ 43.656738][ T760] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 44.026337][ T760] usb 7-1: config 17 has an invalid descriptor of length 0, skipping remainder of the config [ 44.036376][ T760] usb 7-1: config 17 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 44.049088][ T760] usb 7-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 44.057958][ T760] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 44.346357][ T760] usb 7-1: string descriptor 0 read error: -71 [ 44.352643][ T760] aiptek 7-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 44.361905][ T760] usb 7-1: USB disconnect, device number 7 [ 44.756450][ T565] Bluetooth: hci0: command 0x1009 tx timeout [ 48.615726][ T1572] loop5: detected capacity change from 0 to 256 [ 48.669774][ T1572] exfat: Deprecated parameter 'utf8' [ 48.697015][ T1572] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x967df478, utbl_chksum : 0xe619d30d) [ 48.820959][ T1584] futex_wake_op: syz.3.503 tries to shift op by 32; fix this program [ 48.896317][ T607] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 48.902630][ T1590] loop3: detected capacity change from 0 to 4096 [ 48.921644][ T1590] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 48.926330][ T523] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 49.107969][ T1601] loop3: detected capacity change from 0 to 1024 [ 49.167179][ T1601] EXT4-fs (loop3): Test dummy encryption mode enabled [ 49.173805][ T1601] EXT4-fs (loop3): Ignoring removed orlov option [ 49.182415][ T1601] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000084,sysvgroups,commit=0x0000000000000005,orlov,nobarrier,max_batch_time=0x0000000000000000,data_err=abort,,errors=continue. Quota mode: writeback. [ 49.214082][ T1601] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 49.221975][ T30] kauditd_printk_skb: 60 callbacks suppressed [ 49.221986][ T30] audit: type=1400 audit(49.211:626): avc: denied { unlink } for pid=1600 comm="syz.3.511" name="file0" dev="loop3" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 49.261589][ T1607] mmap: syz.0.513 (1607): VmData 29020160 exceed data ulimit 8. Update limits or use boot option ignore_rlimit_data. [ 49.286393][ T607] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 49.356358][ T523] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 49.367220][ T523] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 49.376833][ T523] usb 7-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 49.386310][ T523] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 49.410368][ T523] usb 7-1: config 0 descriptor?? [ 49.456351][ T607] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 49.465335][ T607] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 49.473444][ T607] usb 8-1: Product: syz [ 49.477421][ T607] usb 8-1: Manufacturer: syz [ 49.481915][ T607] usb 8-1: SerialNumber: syz [ 49.696316][ T6] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 49.888278][ T523] isku 0003:1E7D:319C.000F: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.6-1/input0 [ 49.946289][ T6] usb 1-1: Using ep0 maxpacket: 16 [ 50.006321][ T760] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 50.086345][ T6] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 50.097054][ T6] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 50.232795][ T30] audit: type=1326 audit(50.211:627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1629 comm="syz.3.522" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f826cd91719 code=0x0 [ 50.256400][ T6] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 50.265324][ T6] usb 1-1: New USB device strings: Mfr=236, Product=255, SerialNumber=0 [ 50.273447][ T6] usb 1-1: Product: syz [ 50.277451][ T6] usb 1-1: Manufacturer: syz [ 50.282593][ T6] usb 1-1: config 0 descriptor?? [ 50.309016][ T523] usb 7-1: USB disconnect, device number 8 [ 50.426340][ T760] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 50.626393][ T607] cdc_ncm 8-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 50.632674][ T607] cdc_ncm 8-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 50.639853][ T607] cdc_ncm 8-1:1.0: setting rx_max = 2048 [ 50.656347][ T760] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 50.665250][ T760] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 50.673180][ T760] usb 6-1: Product: syz [ 50.677208][ T760] usb 6-1: Manufacturer: syz [ 50.681570][ T760] usb 6-1: SerialNumber: syz [ 50.747512][ T6] kovaplus 0003:1E7D:2D50.0010: hidraw0: USB HID v0.07 Device [syz syz] on usb-dummy_hcd.0-1/input0 [ 50.836393][ T607] cdc_ncm 8-1:1.0: setting tx_max = 184 [ 50.842913][ T607] cdc_ncm 8-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.7-1, CDC NCM, 42:42:42:42:42:42 [ 50.856639][ T607] usb 8-1: USB disconnect, device number 2 [ 50.863894][ T607] cdc_ncm 8-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.7-1, CDC NCM [ 50.868209][ T30] audit: type=1400 audit(50.841:628): avc: denied { read } for pid=139 comm="dhcpcd" name="n19" dev="tmpfs" ino=2956 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 50.892761][ T30] audit: type=1400 audit(50.841:629): avc: denied { open } for pid=139 comm="dhcpcd" path="/run/udev/data/n19" dev="tmpfs" ino=2956 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 50.914826][ T30] audit: type=1400 audit(50.841:630): avc: denied { getattr } for pid=139 comm="dhcpcd" path="/run/udev/data/n19" dev="tmpfs" ino=2956 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 50.972781][ T30] audit: type=1400 audit(50.951:631): avc: denied { create } for pid=1641 comm="dhcpcd-run-hook" name="resolv.conf.usb0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 50.994707][ T30] audit: type=1400 audit(50.951:632): avc: denied { write } for pid=1641 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.usb0.link" dev="tmpfs" ino=2958 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 51.020370][ T30] audit: type=1400 audit(50.951:633): avc: denied { append } for pid=1641 comm="dhcpcd-run-hook" name="resolv.conf.usb0.link" dev="tmpfs" ino=2958 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 51.043797][ T30] audit: type=1400 audit(50.971:634): avc: denied { unlink } for pid=1652 comm="rm" name="resolv.conf.usb0.link" dev="tmpfs" ino=2958 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 51.078839][ T30] audit: type=1400 audit(51.061:635): avc: denied { set_context_mgr } for pid=1665 comm="syz.3.525" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 51.097606][ T565] ================================================================== [ 51.097617][ T565] BUG: KASAN: use-after-free in __list_del_entry_valid+0x2f/0x120 [ 51.113106][ T565] Read of size 8 at addr ffff888124f52108 by task kworker/1:4/565 [ 51.120747][ T565] [ 51.122918][ T565] CPU: 1 PID: 565 Comm: kworker/1:4 Not tainted 5.15.167-syzkaller-00002-g3bfe08931bff #0 [ 51.132638][ T565] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 51.142530][ T565] Workqueue: events binder_deferred_func [ 51.146359][ T523] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 51.147994][ T565] Call Trace: [ 51.148010][ T565] [ 51.161193][ T565] dump_stack_lvl+0x151/0x1c0 [ 51.165706][ T565] ? io_uring_drop_tctx_refs+0x190/0x190 [ 51.171176][ T565] ? panic+0x760/0x760 [ 51.175077][ T565] ? kasan_quarantine_put+0x34/0x1a0 [ 51.180197][ T565] print_address_description+0x87/0x3b0 [ 51.185576][ T565] kasan_report+0x179/0x1c0 [ 51.189914][ T565] ? _raw_spin_lock+0xa4/0x1b0 [ 51.194514][ T565] ? __list_del_entry_valid+0x2f/0x120 [ 51.199810][ T565] ? __list_del_entry_valid+0x2f/0x120 [ 51.205111][ T565] __asan_report_load8_noabort+0x14/0x20 [ 51.210573][ T565] __list_del_entry_valid+0x2f/0x120 [ 51.215694][ T565] binder_release_work+0xcd/0x680 [ 51.220553][ T565] binder_deferred_func+0x1847/0x1bc0 [ 51.225763][ T565] ? read_word_at_a_time+0x12/0x20 [ 51.230709][ T565] process_one_work+0x6bb/0xc10 [ 51.235397][ T565] worker_thread+0xad5/0x12a0 [ 51.239912][ T565] kthread+0x421/0x510 [ 51.243815][ T565] ? worker_clr_flags+0x180/0x180 [ 51.248673][ T565] ? kthread_blkcg+0xd0/0xd0 [ 51.253100][ T565] ret_from_fork+0x1f/0x30 [ 51.257355][ T565] [ 51.260219][ T565] [ 51.262390][ T565] Allocated by task 1666: [ 51.266556][ T565] ____kasan_kmalloc+0xdb/0x110 [ 51.271238][ T565] __kasan_kmalloc+0x9/0x10 [ 51.275578][ T565] kmem_cache_alloc_trace+0x115/0x210 [ 51.280786][ T565] binder_thread_write+0x9f5/0x6ec0 [ 51.285820][ T565] binder_ioctl_write_read+0x205/0x7300 [ 51.291201][ T565] binder_ioctl+0x371/0x2640 [ 51.295629][ T565] __se_sys_ioctl+0x114/0x190 [ 51.300141][ T565] __x64_sys_ioctl+0x7b/0x90 [ 51.304570][ T565] x64_sys_call+0x98/0x9a0 [ 51.308822][ T565] do_syscall_64+0x3b/0xb0 [ 51.313075][ T565] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 51.318801][ T565] [ 51.320972][ T565] Freed by task 565: [ 51.324705][ T565] kasan_set_track+0x4b/0x70 [ 51.329132][ T565] kasan_set_free_info+0x23/0x40 [ 51.333904][ T565] ____kasan_slab_free+0x126/0x160 [ 51.338852][ T565] __kasan_slab_free+0x11/0x20 [ 51.343451][ T565] slab_free_freelist_hook+0xbd/0x190 [ 51.348658][ T565] kfree+0xc8/0x220 [ 51.352310][ T565] binder_free_ref+0x128/0x260 [ 51.356904][ T565] binder_deferred_func+0x171c/0x1bc0 [ 51.362113][ T565] process_one_work+0x6bb/0xc10 [ 51.366804][ T565] worker_thread+0xad5/0x12a0 [ 51.371315][ T565] kthread+0x421/0x510 [ 51.375216][ T565] ret_from_fork+0x1f/0x30 [ 51.379472][ T565] [ 51.381640][ T565] The buggy address belongs to the object at ffff888124f52100 [ 51.381640][ T565] which belongs to the cache kmalloc-64 of size 64 [ 51.395353][ T565] The buggy address is located 8 bytes inside of [ 51.395353][ T565] 64-byte region [ffff888124f52100, ffff888124f52140) [ 51.408198][ T565] The buggy address belongs to the page: [ 51.413682][ T565] page:ffffea000493d480 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888124f52a00 pfn:0x124f52 [ 51.425036][ T565] flags: 0x4000000000000200(slab|zone=1) [ 51.430511][ T565] raw: 4000000000000200 ffffea0004395d80 0000000600000006 ffff888100042780 [ 51.438929][ T565] raw: ffff888124f52a00 000000008020001f 00000001ffffffff 0000000000000000 [ 51.447346][ T565] page dumped because: kasan: bad access detected [ 51.453600][ T565] page_owner tracks the page as allocated [ 51.459149][ T565] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY), pid 289, ts 20410005870, free_ts 0 [ 51.474076][ T565] post_alloc_hook+0x1a3/0x1b0 [ 51.478673][ T565] prep_new_page+0x1b/0x110 [ 51.483015][ T565] get_page_from_freelist+0x3550/0x35d0 [ 51.488397][ T565] __alloc_pages+0x27e/0x8f0 [ 51.492822][ T565] new_slab+0x9a/0x4e0 [ 51.496729][ T565] ___slab_alloc+0x39e/0x830 [ 51.501156][ T565] __slab_alloc+0x4a/0x90 [ 51.505319][ T565] __kmalloc+0x16d/0x270 [ 51.509399][ T565] kobject_get_path+0xbc/0x1f0 [ 51.513999][ T565] kobject_uevent_env+0x27f/0x700 [ 51.518859][ T565] kobject_uevent+0x1f/0x30 [ 51.523198][ T565] __kobject_del+0xee/0x300 [ 51.527537][ T565] kobject_put+0x1cc/0x260 [ 51.531808][ T565] netdev_queue_update_kobjects+0x390/0x400 [ 51.537521][ T565] netif_set_real_num_tx_queues+0x16b/0x7c0 [ 51.543251][ T565] veth_newlink+0xa23/0xe20 [ 51.547591][ T565] page_owner free stack trace missing [ 51.552802][ T565] [ 51.554967][ T565] Memory state around the buggy address: [ 51.560436][ T565] ffff888124f52000: 00 00 00 00 00 00 00 03 fc fc fc fc fc fc fc fc [ 51.568332][ T565] ffff888124f52080: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 51.576229][ T565] >ffff888124f52100: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 51.584127][ T565] ^ [ 51.588298][ T565] ffff888124f52180: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 51.596196][ T565] ffff888124f52200: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 51.604096][ T565] ================================================================== [ 51.611987][ T565] Disabling lock debugging due to kernel taint [ 51.618521][ T565] general protection fault, probably for non-canonical address 0xf2effc4080000046: 0000 [#1] PREEMPT SMP KASAN [ 51.618554][ T6] kovaplus 0003:1E7D:2D50.0010: couldn't init struct kovaplus_device [ 51.630065][ T565] KASAN: maybe wild-memory-access in range [0x9780020400000230-0x9780020400000237] [ 51.630087][ T565] CPU: 1 PID: 565 Comm: kworker/1:4 Tainted: G B 5.15.167-syzkaller-00002-g3bfe08931bff #0 [ 51.630105][ T565] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 51.630116][ T565] Workqueue: events binder_deferred_func [ 51.630137][ T565] RIP: 0010:__list_del_entry_valid+0x75/0x120 [ 51.630159][ T565] Code: 1e 48 85 db 74 68 4d 85 ff 74 74 48 ba 00 01 00 00 00 00 ad de 48 39 d3 74 76 48 83 c2 22 49 39 d7 74 7e 4c 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ff e8 7c 7b 48 ff 49 8b 17 4c 39 f2 75 [ 51.638166][ T6] kovaplus 0003:1E7D:2D50.0010: couldn't install mouse [ 51.647068][ T565] RSP: 0018:ffffc90000b67c00 EFLAGS: 00010a03 [ 51.647094][ T565] RAX: 12f0004080000046 RBX: ffff88810b29b400 RCX: ffffffff826a3469 [ 51.719269][ T565] RDX: dead000000000122 RSI: 0000000000000282 RDI: ffff888124f52100 [ 51.727080][ T565] RBP: ffffc90000b67c20 R08: ffffffff8141997b R09: 0000000000000003 [ 51.734885][ T565] R10: fffffbfff0e9a24c R11: dffffc0000000001 R12: dffffc0000000000 [ 51.742699][ T565] R13: ffff888124f52100 R14: ffff888124f52100 R15: 9780020400000235 [ 51.750509][ T565] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 51.759275][ T565] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 51.765698][ T565] CR2: 000055df82d08300 CR3: 0000000006a0f000 CR4: 00000000003506a0 [ 51.773512][ T565] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 51.781321][ T565] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 51.789133][ T565] Call Trace: [ 51.792259][ T565] [ 51.795034][ T565] ? __die_body+0x62/0xb0 [ 51.799201][ T565] ? die_addr+0x9f/0xd0 [ 51.803194][ T565] ? exc_general_protection+0x311/0x4b0 [ 51.808577][ T565] ? check_panic_on_warn+0x65/0xb0 [ 51.813522][ T565] ? asm_exc_general_protection+0x27/0x30 [ 51.819080][ T565] ? check_panic_on_warn+0x5b/0xb0 [ 51.824022][ T565] ? __list_del_entry_valid+0x49/0x120 [ 51.829320][ T565] ? __list_del_entry_valid+0x75/0x120 [ 51.834612][ T565] binder_release_work+0xcd/0x680 [ 51.839473][ T565] binder_deferred_func+0x1847/0x1bc0 [ 51.844680][ T565] ? read_word_at_a_time+0x12/0x20 [ 51.849630][ T565] process_one_work+0x6bb/0xc10 [ 51.854318][ T565] worker_thread+0xad5/0x12a0 [ 51.858830][ T565] kthread+0x421/0x510 [ 51.862732][ T565] ? worker_clr_flags+0x180/0x180 [ 51.867593][ T565] ? kthread_blkcg+0xd0/0xd0 [ 51.872028][ T565] ret_from_fork+0x1f/0x30 [ 51.876276][ T565] [ 51.879135][ T565] Modules linked in: [ 51.883466][ T565] ---[ end trace 0e7dcdda9e89d13a ]--- [ 51.889220][ T565] RIP: 0010:__list_del_entry_valid+0x75/0x120 [ 51.895117][ T565] Code: 1e 48 85 db 74 68 4d 85 ff 74 74 48 ba 00 01 00 00 00 00 ad de 48 39 d3 74 76 48 83 c2 22 49 39 d7 74 7e 4c 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ff e8 7c 7b 48 ff 49 8b 17 4c 39 f2 75 [ 51.914573][ T565] RSP: 0018:ffffc90000b67c00 EFLAGS: 00010a03 [ 51.920466][ T565] RAX: 12f0004080000046 RBX: ffff88810b29b400 RCX: ffffffff826a3469 [ 51.928275][ T565] RDX: dead000000000122 RSI: 0000000000000282 RDI: ffff888124f52100 [ 51.936075][ T565] RBP: ffffc90000b67c20 R08: ffffffff8141997b R09: 0000000000000003 [ 51.943902][ T565] R10: fffffbfff0e9a24c R11: dffffc0000000001 R12: dffffc0000000000 [ 51.951724][ T565] R13: ffff888124f52100 R14: ffff888124f52100 R15: 9780020400000235 [ 51.952247][ T6] kovaplus: probe of 0003:1E7D:2D50.0010 failed with error -71 [ 51.959531][ T565] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 51.959549][ T565] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 51.959561][ T565] CR2: 000055df82d08300 CR3: 0000000006a0f000 CR4: 00000000003506a0 [ 51.959575][ T565] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 51.959585][ T565] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 51.959607][ T565] Kernel panic - not syncing: Fatal exception [ 51.970141][ T6] usb 1-1: USB disconnect, device number 6 [ 51.975836][ T565] Kernel Offset: disabled [ 52.021357][ T565] Rebooting in 86400 seconds..