last executing test programs: 3m51.76494923s ago: executing program 3 (id=122): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) openat$pfkey(0xffffff9c, 0x0, 0x101000, 0x0) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r3) rmdir(&(0x7f0000000040)='./control\x00') bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00a98e6793e6cf4c15d1024004000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000180)='vlan0\x00', 0x10) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0)="c8", &(0x7f0000000380), 0x5, r4}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 3m50.916402054s ago: executing program 3 (id=124): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x1800403, &(0x7f0000000400)={[{@journal_dev={'journal_dev', 0x3d, 0x9}}, {@jqfmt_vfsv1}, {@grpjquota_path={'grpjquota', 0x3d, './file0/file0'}}, {@jqfmt_vfsv1}]}, 0x0, 0x5c1, &(0x7f0000002840)="$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") 3m50.205854927s ago: executing program 3 (id=127): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000980)={0x9c, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x401}]}, 0x9c}}, 0x0) 3m50.175920697s ago: executing program 3 (id=128): syz_open_dev$tty1(0xc, 0x4, 0x1) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x3000010, &(0x7f0000000080), 0x1, 0x513, &(0x7f00000010c0)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = epoll_create1(0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x1, 0x217, &(0x7f0000000700)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r7}, 0x10) epoll_create(0x1ff) r8 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x3c1, 0x3, 0x358, 0x0, 0x4c, 0x1a, 0x0, 0x73, 0x288, 0x258, 0x258, 0x288, 0x258, 0x3, 0x0, {[{{@ipv6={@private0, @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x73}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0x7}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}, {{@uncond, 0x0, 0xf8, 0x128, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@hl={{0x28}}]}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x5400}}, {0x28}}}}, 0x3b8) r9 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_ALM_SET(r9, 0x5452, &(0x7f0000000040)={0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)) read$FUSE(r1, &(0x7f0000001ac0)={0x2020}, 0x2020) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() 3m48.328835836s ago: executing program 3 (id=138): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x5, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2000}, [@call={0x85, 0x0, 0x0, 0x2a}, @call={0x85, 0x0, 0x0, 0x7d}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x10, 0x10, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 3m48.204681626s ago: executing program 3 (id=142): r0 = syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file2\x00', 0x0, &(0x7f0000000180), 0x0, 0x557, &(0x7f0000000940)="$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") ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) 3m48.163931546s ago: executing program 32 (id=142): r0 = syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file2\x00', 0x0, &(0x7f0000000180), 0x0, 0x557, &(0x7f0000000940)="$eJzs3cFvI1cZAPBvJvFudjclKXAolSgVLdotsM6mYduIQwEJwakSUMQJaQmJE0XrxKvEaTfRiqbiioQECCpxgRMXJP4AJNQLd4RUqdwRICpUsnAAqe2gsce7iddOvML2qMnvJ83OvHn2fN+z18/v2RNPAGfWkxFxJSImIuKZiJgp9qfFEvvtJb/d3YM7y/mSRJa99E4SSbGvc6zzxfpScbepiPjGVyO+mzwYd3t37+ZSvV7bKspzzY3k3Szbu7q+sbRWW6ttLizMP7f4/OL1xWtDaedsRLzw5b/99Ie/+soLv/vsK3++8faV7+Vp/TfLXo2udgxTu+mV1mPRMRkRW6MIVpLJVgvbrg90jx7/IQAAGIt8vP/hiPhka/w/ExOt0RwAAABwmmRfmI53k4gMAAAAOLXSiJiOJK0W5/tOF+dmXoqIj8bFtN7Ybn5mtbGzuZLXRcxGJV1dr9euxVTr3IHZqCR5eb44x7ZTfrarvBARj0bET2YutMrV5UZ9pewPPwAAAOCMuNQ1///3TJpWq0XlfsnJAQAAAMMzW3YCAAAAwMiZ/wMAAMDpVsnn/9lAF2RKR58NAAAAMAJfe/HFfMk6179eeXl352bj5asrte2b1Y2d5epyY+tWda3RWGv9Zt/GScerNxq3PhebO7fnmrXt5tz27t6NjcbOZvPG+pFLYAMAAABj9Ogn3vhTEhH7n7/QWnLnirpKRDZx+MaTZWQIjMpDndPz19HlAYzf4ff3CyXmAYyfIT2cXZWyEwBKd9IfAPU9eecPw88FAAAYjcsf6//9/zurpaYGjFjx/X8y0A+AAKfKRNkJAKVpf//3ftZWdjbAOFWOGwGYFMCplw7n+/8TTiVMdCgAAFCy6daSpNViHjAdaVqtRjzSuixgJVldr9euRcSHIuKtmcr5vDzfumdiNA8AAAAAAAAAAAAAAAAAAAAAAAAAA8qyJDIAAADgVItI/965Mtflmaenuz8fOJf8Z6a1johXfv7Sz24vNZtb8/n+f97b33y92P/sw3768OO3h/QxBgAAAHBIZ57emccDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwDDdPbizfDfLsuzgzvI44/7jSxExW8QvlnbNZEy11lNRiYiL/0pi8tD9koiYGEL8/dci4rFe8ZM8rZgtsjgS/1xEGhEXhhU/HjJ+tONfGkJ8OMveyPufL/Z6/aXxZGvd+/U3WSz/r/79X3qv/5vo0/890u+glaPFx9/8zVzf+K9FPD7Zu//pxE/y4/WI/9SAbfzON/f2+tVlv4y43Kv/S47Gmmtu3Jrb3t27ur6xtFZbq20uLMw/t/j84vXFa3Or6/Va8W/PGD/6+G/fv19674H2Xzym/221v8/j//SA7X/vzdsHH2lvdj0zUYlfZNmVp3o//4/lq08/GL/z3vep4n0gL+ePYfr6t3rGf+LXf3yiX255+1f6tH+qq/3nu9p/ZcD2P/P17/9lwJsCAGOwvbt3c6ler23ZOLwRs+OK9QF7Cs5FeyMfd5aeTxJJ5BtvHalaKj+x9sarxWtsqd55tQ3pyL8vJkejTL6k/ggAABid+4P+7pqknIQAAAAAAAAAAAAAAAAAAADgDDrxZ8D6VaURcX/Pt39wzK+RdcfcL6epAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADH+l8AAAD//9CN1mM=") ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) 3m39.413952536s ago: executing program 5 (id=202): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000180)={0xb, {'syz0\x00', 'syz0\x00', 'syz1\x00', 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "03"}}, 0x119) write$UHID_INPUT2(r0, &(0x7f0000000ec0), 0x6) 3m39.246330067s ago: executing program 5 (id=203): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000800)={0x0, 0x2, {0x0, @struct={0x0, 0x1}}}) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000c00)={0x1, 0x0, [{0x0, 0xaf, &(0x7f00000007c0)=""/175}]}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000005c0)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/68, 0x0}) socket$unix(0x1, 0x2, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f0000000480)=""/83, &(0x7f00000001c0)=""/72}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x8b}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000004, 0x28011, r2, 0x0) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) 3m39.182752317s ago: executing program 5 (id=204): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000300)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0x7, [@func={0x3}, @struct={0x3, 0x3, 0x0, 0x4, 0x0, 0x3ff, [{0x3, 0x3}, {0x5, 0x4, 0x15}, {0xfffffff8}]}]}, {0x0, [0x0, 0x0, 0x2e, 0x2e, 0x2e]}}, &(0x7f0000000140)=""/143, 0x5b, 0x8f, 0x1, 0x0, 0x0, @void, @value}, 0x28) syz_open_procfs(0x0, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "000080f100df00000000000000000009f600"}) r5 = dup3(0xffffffffffffffff, r4, 0x0) write$binfmt_elf64(r5, 0x0, 0xfe00) sendmsg$tipc(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, 0x0}, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100), 0x2, 0x500, &(0x7f0000000500)="$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") 3m38.242969151s ago: executing program 5 (id=206): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000280)='./file0\x00', 0x800, &(0x7f0000000500)=ANY=[@ANYBLOB='iocharset=cp850,dmask=00000000000000000000777,namecase=1,uid=', @ANYRESHEX=0x0, @ANYBLOB="2c666d61736b3d30300000000000000040303030303030303030303031302c757466382c666d61736b3d30303030303030303030303030303030303030303030372c6572726f72733d72476d6f756e742d726f2c6e616d65636173653d312c706c6c6f775f7574696d653d30303030323030303030303030303015303134373037302c00904f5ef6c3660c06b4d7d3172ed33955a22d96c6b58d48d25609fc8fd957db7f4cfb97e98333158a7878aa16963be19155c4a0068007e41cc520b790c6292f5e20dbf5725a2a02670903b3d75dfbb2030d8cdef5210ed5485e27f1d33f67e2d90248d081d098053c"], 0x1, 0x1528, &(0x7f00000037c0)="$eJzs3AuYT9X6OPD3XWvtMSS+TXIZ1lrv5ptclkmSXJLkkiRJkuSWkDTJkYTEEJI0JCG5DEkMIblMTBr3+/2SkCRNkoTklqz/M+FxOnX+p/M7/XKe37yf59mP9X73ftd+9/f9XvbeZubbrkNrNaldvRERwX8EL/yTBACxADAQAPICQAAA5ePKx2Wtzykx6T/bCftzPZh6pStgVxL3P3vj/mdv3P/sjfufvXH/szfuf/bG/c/euP+MZWebphW6hpfsu/D9/+yMv///D8ksM/bLNWWu6wYQ80dTuP/ZG/f//6zgj2zE/c/euP/ZVeyVLoD9F+D3f3aQ45+u4f5nb9x/xrKzK33/+UovEPkvew6O5LzQmL/q+BljjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMsb/AaX+ZAoBL4ytdF2OMMcYYY4wxxv48PseVroAxxhhjjDHGGGP/+xAESFAQQAzkgFjICblAAMDVkAfyQgSugTi4FvLBdZAfCkBBKATxUBiKgAYDFghCKArFIArXQ3G4AUpASSgFpcFBGUiAG6Es3ATl4GYoD7dABbgVKkIlqAxV4DaoCrdDNbgDqsOdUANqQi2oDXdBHbgb6sI9UA/uhfpwHzSA+6EhPACN4EFoDA9BE3gYmsIj0AyaQwtoCa3+R/nPQ094AXpBb0iCPtAXXoR+0B8GwEswEF6GQfAKDIZXIRmGwFB4DYbB6zAc3oARMBJGwZswGt6CMTAWxsF4SIEJMBHehknwDkyGd2EKTIVUmAbT4T2YATNhFrwPs+EDmANzYR7MhzT4EBbAQkiHj2ARfAwZsBiWwFJYBsthBayEVbAa1sBaWAfrYQNshE2wGbbAVtgG22EHfAI74VPYBbthD3wGe+HzfzP/1D/kd0NAQIECFSqMwRiMxVjMhbkwN+bGPJgHIxjBOIzDfJgP82N+LIgFMR7jsQgWQYMGCQmLYlGMYhSLY3EsgSWwFJZChw4TMAHL4k1YDstheSyPFbACVsRKWAmrYBWsilWxGlbD6lgda2ANrIW18C68C/tgXayL9bAe1sf6l25PYSNshI2xMTbBJtgUm2IzbIYtsAW2wlbYGltjG2yD7bAdtsf22AE7YCImYkfsiJ2wE3bGztgFu2BX7IrdsDt2z3w+B+AL+AL2xhqiD/bFvtgPk3MMwJfwJXwZB+Er+Aq+isk4BIfia/gavo7D8SSOwJE4CkdhVfEWjsGxSGI8pmAKTsSJOAknYVah7+JUTMVpOB2n4wyciTPxfZyNH+AHOBfn4nxMwzRcgAsxHdNxEZ7CDFyMS3ApLsPluAxX4ipciWtwLa7B9bgeN+JG3IybcStuxe24HT9BBYCf4m7cjcm4F/fiPtyH+3E/HsADmImZeBAP4iE8hIfxMB7BI3gUj+FxPIYn8ASexFN4Gk/jWTyL5/DZ+K8bf1JydTKILEooESNiRKyIFblELpFb5BZ5RB4RERERJ+JEPpFP5Bf5RUFRUMSLeFFEFBFGGEEijAEAERVRUVwUFyVECVFKlBJOOJEgEkRZUVaUE+VEeXGLqCBuFRVFJdHWVRFVRFXRzlUTd4jqorqoIWqKWqK2qC3qiDqirqgr6ol6or6oLxqI+0VD0QcH4IMiqzNNxBBsKoZiM9FcyIufYK3FcGwj2op24nExEkdgB9HaJYqnREcxBjuJv4mx+IzoIsZjV/Gc6Ca6ix7iedFTtHG9RG8xGfuIvmIq9hP9xQDxkpiBNcX7ODtnLfGqSBZDxFDxmpiPr4vh4g0xQowUo8SbYrR4S4wRY8U4MV6kiAlionhbTBLviMniXTFFTBWpYpqYLt4TM8RMMUu8L2aLD8QcMVfME/NFmvhQLBALRbr4SCwSH4sMsVgsEUvFMrFcrBArxSqxWqwRa8U6sV5sEBvFJrFZbBFbxTaxXewQn4id4lOxS+wWe8RnYq/4XOwTX4j94ktxQHwlMsXX4qD4RhwS34rD4jtxRHwvjopj4rj4QZwQP4qT4pQ4Lc6Is+IncU78LM4LL0CiFFJKJQMZI3PIWJlT5pJXydwyuPjsXiPj5LUyn7xO5pcFZEFZSMbLwrKI1NJIK0mGsqgsJqPyellc3iBLyJKylCwtnSwjE+SNsqy8SZaTN8vy8hZZQd4qK8pKsrKsIm+TVeXtEiIX9lFD1pS1ZG15l0yCu2VdeY+sJ++V9eV9soG8XzaUD8hG8kHZWD4km8iHZVP5iGwmm8sWsqVsJR+VreVjso1sK9vJx2V7+YTsIJ+UifIp2VH6iy+RZ2QX+azsKp+T3WR32UP+LM9LL3vJ3hL6gOwrX5T9ZH85IBYA5MtykHxFDpavymQ5RA6Vr8lh8nU5XL4hR8iRcpR8U46Wb8kxcqwcJ8fLFDlBTpRvy0nyHTlZviunyKkyVU6TA+TAX2aaJeW/zH/7d/IH/7L3jXKT3Cy3yK1ym9wud8hP5E65U+6Su+QeuUfulXvlPrlP7pf75QF5QGbKTHlQHpSH5CF5WB6WR+QReVQek2fkD/KE/FGelKfkKXlGnpVn5bmLzwEoVEJJpVSgYlQOFatyqlzqKpVbXa3yqLwqoq5RcepalU9dp/KrAqqgKqTiVWFVRGlllFWkQlVUFVNRdT1efMGoUqq0cqqMSlA3/jv5qri6QZVQJX+Vf6m+pH9SXyvVSrVWrVUb1Ua1U+1Ue9VedVAdVKJKVB1VR9VJdVKdVWfVRXVRXVVX1U11Uz1UD9VT9VS9VC+VpJJUX/Wi6qf6qwHqJTVQvawGqUFqsBqsklWyGqqGqmFqmBquhqsRaoQapUap0Wq0GqPGqHFqnEpRKWqimqgmqUlqspqspqgpKlWlqulqupqhZqhZapaarWarOWqOmqfmqTSVphaoBSpdpatFapHKUIvVYrVULVXL1XK1Uq1Uq9VqtVatVevVepWhNqlNaovaorapbWqH2qF2qp1ql9ql9qg9aq/aq/apfWq/2q8OqAMqU2Wqg+qgOqQOqcPqsDqijqij6qg6ro6rE+qEOqlOqtPqtDqrzqpz6pw6r85nnfYFIhCBClQQE8QEsUFskCvIFeQOcgd5gjxBJIgEcUFckC+4LsgfFAgKBoWC+KBwUCTQgQlsIC42PRpcHxQPbghKBCWDUkHpwAVlgoTgxqBscFNQLrg5KB/cElQIbg0qBpWCykGV4LaganB7UC24I6ge3BnUCGoGtYLawV1BneDuoG5wT1AvuDeoH9wXNAjuDxoGDwSNggeDxsFDQZPg4aBp8EjQLGgetAhaBq3+1Pm9P1ngMddL99ZJuo/uq1/U/XR/PUC/pAfql/Ug/YoerF/VyXqIHqpf08P063q4fkOP0CP1KP2mHq3f0mP0WD1Oj9cpeoKeqN/Wk/Q7erJ+V0/RU3Wqnqan6/f0DD1Tz9Lv69n6Az1Hz9Xz9Hydpj/UC/RCna4/0ov0xzpDL9ZL9FK9TC/XK/RKvUqv1mv0Wr1Or9cb9Ea9SW/WW/RWvU1v1zv0J3qn/lTv0rv1Hv2Z3qs/1/v0F3q//lIf0F/pTP21Pqi/0Yf0t/qw/k4f0d/ro/qYPq5/0Cf0j/qkPqVP6zP6rP5Jn9M/6/PaZ53cZ329G2WUiTExJtbEmlwml8ltcps8Jo+JmIiJM3Emn8ln8pv8pqApaOJNvCliipgsZMgUNUVN1ERNcVPclDAlTClTyjjjTIJJMGVNWVPOlDPlTXlTwVQwFU1FU9lUNreZ28zt5nZzh7nD3GnuNDVNTVPb1DZ1TB1T19Q19Uw9U9/UNw1MA9PQNDSNTCPT2DQ2TUwT09Q0Nc1MM9PCtDCtTCvT2rQ2bUwb0860M+1Ne9PBdDCJJtF0NB1NJ9PJdDadTRfTxXQ1XU030830MD1MT9PT9DK9TJJJMn1NX9PP9DMDzAAz0Aw0g8wgM9gMNskm2Qw1Q80wM8wMN8PNCDPSjMo6UTVvmTFmrBlnxpsUk2ImmolmkplkJpvJZoqZYlJNqpluppsZZoaZZWaZ2Wa2mWPmmHlmnkkzaWaBWWDSTbpZZBaZDJNhlpglZplZZlaYFWaVWWXWmDVmHawzG8wGs8lsMlvMFrPNbDM7zA6z0+w0u8wus8fsMXvNXrPP7DP7zX5zwBwwmSbTHDQHzSFzyBw2h80Rc8QcNUfNcXPcnDAnzElz0pw2p81ZU+Di96U3sTanzWWvsrnt1TaPzWv/MS5oC9l4W9gWsdrmtwV+FRtrbQlb0paypa2zZWyCvfE3cUVbyVa2Vexttqq93Vb7TVzH3m3r2ntsPXuvrW3v+lVc395nG9iHbUNEANvcNrYtbRP7sG1qH7HNbHPbwra07e0TtoN90ibap2xH+/Rv4gV2oV1lV9s1dq3dZXfb0/aMPWS/tWftT7aX7W0H2pftIPuKHWxftcl2yG/iUfZNO9q+ZcfYsXacHf+beIqdalPtNDvdvmdn2Jm/idPsh3a2Tbdz7Fw7z87/Jc6qKd1+ZBfZj22GDWCJXWqX2eV2hV15qVaf1663G+xGu9N+arfYrXab3W53XDoRtrvtHvuZ3Ws/twftN3a//dIesIdtpv36lzjr+A7b7+wR+709ao/Z4/YHe8L+qC5lZx37D/Zne956C4QEJElRQDGUg2IpJ+Wiqyg3XU15KC9F6BqKo2spH11H+akAFaRCFE+FqQhpMmSJKKSiVIyidD1dKq8UlSZHZSiBbqSydBOVo5upPN1CFehWqkiVqDJVoduoKt1O1egOqk53Ug2qSbWoNt1Fdehuqkv3UD26l+rTfdSA7qeG9AA1ogepMT1ETehhakqPUDNqTi2oJbWiR6k1PUZtqC21o8epPT1BHehJSqSnqCM9TZ3ob9SZnqEu9Cx1peeoG3WnHvQ89aQXqBf1piTqQ33pRepH/WkAvUQD6WUaRK/QYHqVkmkIDaXXaBi9TsPpDRpBI2kUvUmj6S0aQ2NpHI2nFJpAE+ltmkTv0GR6l6bQVEqlaTSd3qMZNJNm0fs0mz6gOTSX5tF8SqMPaQEtpHT6iBbRx5RBi2kJLaVltJxW0EpaRatpDa2ldbSeNtBG2kSbaQttpW20nXbQJ7STPqVdtJv20Ge0lz6nffQF7acv6QB9RZn0NR2kb+gQfUuH6Tvfm76no3SMjtMPdIJ+pJN0ik7TGTpLP9E5+pnOkycIMRShDFUYhDFhjjA2zBnmCq8Kc4dXh3nCvGEkvCaMC68N84XXhfnDAmHBsFAYHxYOi4Q6NKENKQzDomGxMBpeHxYPbwhLhCXDUmHp0IVlwoTwxrBseFNYLrw5LB/eElYIbw0rhpXCh++tEt4WVg1vD6uFd4TVwzvDGmHNsFZYO7wrrBPeHdYN7wnrhfeG5cL7wgbh/WHD8IGwUfhg2Dh8KGwSPhw2DR8Jm4XNwxZhy7BV+GjYOnwsbBO2DduFj4ftwyfCDuGTYWL4VNgxfPqX9fct/Ofrk8I+Yd/wxfDF0Pt75Lzo/Gha9MPogujCaHr0o+ii6MfRjOji6JLo0uiy6PLoiujK6Kro6uia6Nrouuj66Iboxqj3tXOAQyecdMoFLsblcLEup8vlrnK53dUuj8vrIu4aF+eudfncdS6/K+AKukIu3hV2RZx2xllHLnRFXTEXdde74u4GV8KVdKVcaedcGZfgWrpWrpVr7R5zbVxb18497h53T7gn3JPuSfeU6+iedp3c31xn94zr4p51z7rnXDfX3fVwz7uebkKeC+/JJNfX9XX9XD83wA1wA91AN8gNcoPdYJfskt1QN9QNc8PccDfcjXAj3Cg3yo12o90YN8aNc+NciktxE91EN8lNcpPdZDfFTXGpLtVNd9PdDDfDVZ15YS9z3Bw3z81zaS7NLXBZ54zpbpFb5DJchlvilrhlbplb4Va4VW6VW+PWuHVundvgNrhNbpPb4ra4bW6b2+F2uJ1up9vl816Y1O11+9w+t9/tdwfcVy7Tfe0Oum/cIfetO+y+c0fc9+6oO+aOux/cCfejO+lOudPujDvrfnLn3M/uvPMuJTIhMjHydmRS5J3I5Mi7kSmRqZHUyLTI9Mh7kRmRmZFZkfcjsyMfROZE5kbmReZH0iIfRhZEFkbSIx9FFkU+jmREFkeWRJZGlkWWR7wvvCX0RX0xH/XX++L+Bl/Cl/SlfGnvfBmf4G/0Zf1Nvpy/2Zf3t/gK/lZf0Vfylf0jvplv7lv4lr6Vf9S39o/5Nr6tb+cf9+39E76Df9In+qd8R/+07+T/5jv7Z3wX/6zv6p/z3Xx338M/73v6F3wv39sn+T6+r3/R9/P9/QD/kh/oX/aD/Ct+sH/VJ/shfqh/zQ/zr/vh/g0/wo/0o2Le9KMvXSLDeJ/iJ/iJ/m0/yb/jJ/t3/RQ/1af6aX66f8/P8DP9LP++n+0/8HP8XD/Pz/dp/kO/wC/06f4jv8h/7DP84ks3lf0Kv9Kv8qv9Gr/Wr/Pr/Qa/0W/ym/0Wv9Vv89v9Dv+J3+k/9bv8br/Hf+b3+s/9Pv+F3++/9Af8Vz7Tf+0P+m/8If+tP+y/80f89/6oP+aP+x/8Cf+jP+lP+dP+jD/rf/Ln/M/+PP/OGmOMMcbYHzLh8lD8es2F2/l9fidH/N3GfQHg6q2FMv9+fdYZ5br8F8b9RXz7CAA81bvrg5eWGjWSkpIubpshISg2F+DS/wRliYHL8WJoB09AIrSFsr9bf3/R/Sz9i/mjtwDk+rucWLgcX57/CwBM+p35H3181IIK4em4/8/8cwFKFLuckxMux4uh3S/3V9pCuX9Sf4HW/6L+nF+mALT5u5zccDm+XH8CPAZPQ+KvtmSMMcYYY4wxxi7oLyp3vnT9eeknPn/v+jxeXc7JAZfjf3V9zhhjjDHGGGOMsSvvme49nnw0MbFt539/UO1/lPWHB03hf2tmHvzuwHuAS48oAPgPJwTIGsi/8ig2/yX7Sr741vnHVcvO+AD+O1r5Zwyu8AcTY4wxxhhj7E93+aT/14+rK1UQY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDGWDf0Vf07sSh8jY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxdqX9vwAAAP//kfb+pw==") mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) mount$binder(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0xa0, &(0x7f00000000c0)=ANY=[@ANYBLOB='max=8446744073']) 3m37.030536017s ago: executing program 5 (id=216): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c00000010000100"/20, @ANYRES32=r1, @ANYBLOB="c89904bd0000000008000d00000009"], 0x5c}}, 0x0) 3m34.750362977s ago: executing program 5 (id=219): r0 = timerfd_create(0x8, 0x80800) timerfd_settime(r0, 0x3, &(0x7f0000000200)={{0x77359400}, {0x0, 0x989680}}, 0x0) read(r0, &(0x7f00000002c0)=""/63, 0x3f) 3m34.658936347s ago: executing program 33 (id=219): r0 = timerfd_create(0x8, 0x80800) timerfd_settime(r0, 0x3, &(0x7f0000000200)={{0x77359400}, {0x0, 0x989680}}, 0x0) read(r0, &(0x7f00000002c0)=""/63, 0x3f) 3m31.346751063s ago: executing program 2 (id=245): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000800)={0x0, 0x2, {0x0, @struct={0x0, 0x1}}}) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000c00)={0x1, 0x0, [{0x0, 0xaf, &(0x7f00000007c0)=""/175}]}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000005c0)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/68, 0x0}) socket$unix(0x1, 0x2, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f0000000480)=""/83, &(0x7f00000001c0)=""/72}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x8b}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000004, 0x28011, r2, 0x0) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) 3m30.772524865s ago: executing program 2 (id=248): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) openat$pfkey(0xffffff9c, 0x0, 0x101000, 0x0) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r3) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00a98e6793e6cf4c15d1024004000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000180)='vlan0\x00', 0x10) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0)="c8", &(0x7f0000000380), 0x5, r4}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 3m29.336680852s ago: executing program 2 (id=253): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000240)={[{@bsdgroups}, {@grpquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@noauto_da_alloc}, {@nolazytime}, {@discard}, {@grpjquota}, {@errors_remount}, {@nobarrier}]}, 0x1, 0x46a, &(0x7f0000000980)="$eJzs289vFFUcAPDvzLZFQWhFFEFUFI2NP1paUDl40WjiQRMTPeCxtoUACzW0JkKIVmPwaEi8G48m/gWe9GLUk4lXvBsSolxAT2tmd6Zsl93tLpRd6H4+yTbv7bzpe9+deTNv5s0EMLD2Zn+SiPsi4mJEjNayKyp5oazctSvnZv+9cm42iUrl3b+TarmrV87NFmWL9bbkmfE0Iv0iyStZbfHM2RMz5fL86Tw/uXTyw8nFM2dfOHZy5uj80flT04cOHTww9fJL0y+uS5xZfFd3f7KwZ9eb7194e/bwhQ9+/T7Jv4+GODox3EGZvVng/1SqGpc93U1ld4GtdelkqI8NoSuliBjK9+eLMRqluL7xRuONz/vaOOC2ys5Nm1ovXq4AG1gS/W4B0B/FiT67/i0+PRp63BEuv1q7AMrivpZ/akuGIs3LDDdc366nvRFxePm/b7JP3MR9CACAbv2YjX+ebzb+S6N+jLgtnxsai4j7I2J7RDwQETsi4sGIeCgidkbEw51Ve7xINE4N3Tj+SS/daoztZOO/V/K5rdXjv2L0F2OlPLe1Gv9wcuRYeX5//puMx/CmLD/Vpo6fXv/jq1bL6sd/2Ser//CqyaX00lDDDbq5maWZjiagOnD5s4jdQ83iT1ZmApKI2BURu7v719uKxLFnv9vTqlDT+POx8JrWYZ6p8m3EM7XtvxwN8ReS9vOTk/dEeX7/ZLFX3Oi338+/06r+W4p/HWTbf/Pq/b+xyFhSP1+72H0d5//8suU1zdrxN9//R5L3qsejkfy7j2eWlk5PRYwkb9XWqv9++vq6Rb4on8U/vq95/9+er5PF/0hEZDvxoxHxWEQ8nrf9iYh4MiL2tYn/l9eeOt5l/Embf7eusvjnmh7/VprQsP27T5RO/PxDq/o72/4Hq6nx/Jvq8W8NnTbwVn47AAAAuFuk1Wfgk3RiJZ2mExO1Z/h3xOa0vLC49NyRhY9OzdWelR+L4bS40zVadz90KlnOnyaO6tX3dH6vuFh+IL9v/HXp3mp+YnahPNfn2GHQbanr/9t3Xu//mb9Kq8uuzIh4vwM2Dv0ZBldj/0/71A6g95z/YXDp/zC49H8YXM36/6cN+VKP2gL0lvM/DK61+n/P3kYCes75HwaX/g8Dqd278cnNv/Iv0d9ELN/+KtI7ItLblRjpoINs6MSNx4oh4wQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOAu9H8AAAD//xjg70M=") listxattr(&(0x7f00000002c0)='./file0\x00', 0x0, 0x8) 3m28.751689074s ago: executing program 2 (id=259): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x1000e, &(0x7f0000000300), 0x3, 0x445, &(0x7f0000000b00)="$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") mount$incfs(&(0x7f0000000240)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x0, 0x0) unlink(&(0x7f0000000080)='./file0/file0\x00') 3m27.963380148s ago: executing program 2 (id=265): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=@framed={{}, [@printk={@llx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x2d}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = socket$tipc(0x1e, 0x1, 0x0) bind$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 3m27.332927661s ago: executing program 2 (id=267): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) openat$pfkey(0xffffff9c, 0x0, 0x101000, 0x0) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r3) rmdir(&(0x7f0000000040)='./control\x00') bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00a98e6793e6cf4c15d1024004000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0)="c8", &(0x7f0000000380), 0x5, r4}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 3m26.977914312s ago: executing program 34 (id=267): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) openat$pfkey(0xffffff9c, 0x0, 0x101000, 0x0) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r3) rmdir(&(0x7f0000000040)='./control\x00') bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00a98e6793e6cf4c15d1024004000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0)="c8", &(0x7f0000000380), 0x5, r4}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 5.933498963s ago: executing program 6 (id=1676): r0 = io_uring_setup(0x1d3, &(0x7f0000000080)) close_range(r0, 0xffffffffffffffff, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000001c0)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000004c0)="e0"}) 5.894692253s ago: executing program 7 (id=1679): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000300)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0x7, [@func={0x3}, @struct={0x3, 0x3, 0x0, 0x4, 0x0, 0x3ff, [{0x3, 0x3}, {0x5, 0x4, 0x15}, {0xfffffff8}]}]}, {0x0, [0x0, 0x0, 0x2e, 0x2e, 0x2e]}}, &(0x7f0000000140)=""/143, 0x5b, 0x8f, 0x1, 0x0, 0x0, @void, @value}, 0x28) syz_open_procfs(0x0, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "000080f100df00000000000000000009f600"}) r6 = dup3(0xffffffffffffffff, r5, 0x0) write$binfmt_elf64(r6, 0x0, 0xfe00) sendmsg$tipc(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, 0x0}, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100), 0x2, 0x500, &(0x7f0000000500)="$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") 4.226374491s ago: executing program 1 (id=1680): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) openat$pfkey(0xffffff9c, 0x0, 0x101000, 0x0) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r3) rmdir(0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00a98e6793e6cf4c15d1024004000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000180)='vlan0\x00', 0x10) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0)="c8", &(0x7f0000000380), 0x5, r4}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 4.167309081s ago: executing program 6 (id=1681): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x1, r1, 0x0, 0x4, 0x0) 3.698665523s ago: executing program 6 (id=1682): r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r0, &(0x7f0000002b80)=[{{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000340)=""/167, 0xa7}, {&(0x7f0000000400)=""/230, 0xe6}, {&(0x7f0000000a80)=""/145, 0x91}, {&(0x7f0000000b40)=""/185, 0xb9}, {&(0x7f0000001900)=""/4096, 0x1000}], 0x5}, 0x13}], 0x1, 0x20, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000007580), 0xffffffffffffffff) recvmmsg(r0, &(0x7f0000004d80), 0x493, 0xa, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000080)=ANY=[@ANYBLOB="18000000", @ANYRES16=r1, @ANYBLOB="030704707900000000000100040004000180"], 0x18}}, 0x0) 3.568490413s ago: executing program 7 (id=1683): write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000002700)={0x8, {"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", 0x1000}}, 0x1006) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x810410, &(0x7f00000016c0)=ANY=[@ANYRES32, @ANYRES32, @ANYRES8, @ANYRESDEC, @ANYRES8, @ANYBLOB="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", @ANYRESDEC, @ANYRES8], 0x2, 0x1d6, &(0x7f0000000200)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0xb, 0x42, 0x40, 0x42, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001340), &(0x7f0000001080), 0x20101, r0}, 0x38) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000500)={r0, &(0x7f00000004c0)}, 0x20) 3.419435474s ago: executing program 6 (id=1689): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB='<\x00'], 0x3c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0700000000020000000005000000180001801400020073797a5f74756e00000000000000005a0c00038004000380040001"], 0x38}}, 0x0) 3.393779284s ago: executing program 6 (id=1691): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000090003206d0414c340000000000109022400010000a000090400000103010100092100080001220100090581", @ANYRES32], 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffe}]}) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, &(0x7f0000000dc0)=ANY=[@ANYBLOB="00020c"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, &(0x7f0000000000)=ANY=[@ANYBLOB='@\r\b\x00\x00\x00'], 0x0, 0x0, 0x0}, 0x0) 3.307489695s ago: executing program 1 (id=1693): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x6, 0x3, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, &(0x7f0000000bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) unshare(0x20060400) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x8, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000300), &(0x7f0000000000)=""/10, 0x2}, 0x20) 3.295754945s ago: executing program 1 (id=1694): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) inotify_init() pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f00000001c0)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d24070000030769dc000049c40c240000e9fffff5ffffffff0924031300010005024524", @ANYRES8=r1, @ANYBLOB="05"], 0x0) 3.255161035s ago: executing program 0 (id=1695): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x4508, &(0x7f0000000c40), 0xa, 0x4e4, &(0x7f0000001400)="$eJzs3c9vG1kdAPDvTOKStClJgUOpRFvRorSCOklD24hDKRKip0pAuZeQOFEUJ45ip22iClLxByAhBEiceuLSvwAk1AN/AEJCgjvix65Wu+3uYQ+765XtcZqmdhztOnGVfD7SdN57Huf7fVN5PDPvyRPAkXU+Im5FRF9EXI6I4aw9zZbbtcpmY7sXzx/N1JYkqtW77yaRZG07/+aJxltiICJ+fDviZ8nrccvrG4vTxWJhNauPVZZWxsrrG1cWlqbnC/OF5cnJietTN6auTY13pZ+1ft38/v9++6s//uDmX7714N/33r7081paQ9nrrfrRDY2u5+r7oqk/Ilb3I1gP9GXrXMct/7rvuQAA0FntHP9LEfH1+vn/cPTVz04BAACAw6T63aH4KImoAgAAAIdWWp8Dm6T5bC7AUKRpPt+Yw/uVOJ4WS+XKN+dKa8uzjbmyI5FL5xaKhfFsTu1I5JJafaJeflm/uqM+GRGnIuI3w4P1en6mVJzt9c0PAAAAOCJO7Lj+/2C4cf0PAAAAHDIjvU4AAAAA2HevXP8/6V0eAAAAwP4x/g8AAACH2g/v3Kkt1ebzr2fvr68tlu5fmS2UF/NLazP5mdLqSn6+VJqv/2bfUqe/VyyVVr4dy2sPxyqFcmWsvL5xb6m0tlwZXHjlEdgAAADAATp17tm/kojY/M5gfak51uukgAORdNpg+127/+5vLsDB6svWT//U40SAA9ff6wSAnsn1OgGg5zrdB2g7eedv3c8FAADYH6Nf3Rr/H2y2Ncf/O98b6Dh6CLzB0l4nAAAcOOP/cHTltmYAAkfVF3c2JBGb26qff/y/Wv0seQEAAN0zVF+SNJ+NBQ5FmubzESfrjwXIJXMLxcJ4dn3wz+HcF2r1ifo7E6P/AAAAAAAAAAAAAAAAAAAAAAAAALBH1WoSVQAAAOBQi0jfSrIn+Y8OXxzaeX/gWPLhcH0dEQ/+cPd3D6crldWJWvt7W+2V32ftVz1PHAAAAN4Ezev05nU8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHTTi+ePZprLay8e27+473wvIkZaxe+Pgfp6IHIRcfz9JPq3vS+JiL4uxN98HBGnW8VPamnFSJZFq/iDPYyfRsSJLsSHo+xZ7fhzq9XnL43z9XXrz1+t/P8uxG9//Eu3jn99bY4/J/cY48zmLvEfR5zpb338acZP2sS/sMf4P/3Jxka716pPIkZbfv8kr8QaqyytjJXXN64sLE3PF+YLy5OTE9enbkxdmxofm1soFrJ/W8b49df+/Mlu/T/eJv5Io//n2vX/4h77//E/Hj7/cqOYaxX/0oXW37+nG/Ff2/9p9t33jaz8olr9xWhWTjYb+3O7s0//fna3/s+26X+n//9Le+z/5R/98j973BQAOADl9Y3F6WKxsKrQulCt2lEKh7IQA7tt0+sjEwAA0G0vT/p7nQkAAAAAAAAAAAAAAAAAAAAcXQfxS2M7Y+7yc9QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD3zaQAAAP//6ajYQw==") r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x800000001fe, 0x82) r1 = dup(r0) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000040)={0x23, 0x3, 0x17, 0x0, 0x0, 0x0, 0x0}) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) 3.052518706s ago: executing program 0 (id=1697): syz_mount_image$exfat(&(0x7f0000006c00), &(0x7f0000001b40)='./file0\x00', 0x208008de, &(0x7f0000000400)={[{@namecase}, {@discard}, {@errors_continue}, {}, {@gid}, {@umask={'umask', 0x3d, 0x3f}}, {@umask={'umask', 0x3d, 0xbbe}}, {@discard}, {@gid={'gid', 0x3d, 0xee00}}]}, 0x80, 0x1503, &(0x7f0000000580)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x103042, 0x0) pwritev2(r0, &(0x7f0000000080)=[{&(0x7f0000000140)='y', 0x1}], 0x1, 0x1000, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x123042, 0x13) read$FUSE(r1, &(0x7f0000001b80)={0x2020}, 0x2020) 2.899392387s ago: executing program 7 (id=1698): setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff000, 0x81, 0x7f, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r0, &(0x7f0000000180)="9e29c175f2d0bac72f29c8a648626000de42eb34654f697171d7a7bb5b5334fa197770893b1f9d7ebf3fa5a04a208e6200cdcf02756976f446a92d4494cb03466a57defaab9ec56198178957367d8602cf8f0485fece40f24295bc31cdad61849952a5e9946d9015528c9656c6744d8eb289f37903b0ce63d561ab02fa87d9", &(0x7f0000000280)=""/223}, 0xb) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c000000020603000000000000000000ffea000005000100070000000900020073797a300000000014000780080012401b0000000800084000000000050005000000001005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) 2.884430337s ago: executing program 7 (id=1699): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x1400c, &(0x7f0000000840)={[{@stripe={'stripe', 0x3d, 0x3d}}, {@init_itable}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x3, 0x44d, &(0x7f0000000340)="$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") syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) fchmodat(r0, &(0x7f00000000c0)='./file1\x00', 0x0) 2.682373287s ago: executing program 7 (id=1700): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000000)=0x4) 2.26577609s ago: executing program 0 (id=1701): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2008002, &(0x7f0000000080), 0x1, 0x54c, &(0x7f0000000fc0)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r0, 0x7fff, 0x0) getdents(r0, 0x0, 0x58) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) 2.15695165s ago: executing program 7 (id=1702): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000440)=ANY=[@ANYBLOB="92"]) ioctl$KVM_GET_CPUID2(r2, 0xc008ae91, &(0x7f0000000e00)) 2.15676044s ago: executing program 35 (id=1702): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000440)=ANY=[@ANYBLOB="92"]) ioctl$KVM_GET_CPUID2(r2, 0xc008ae91, &(0x7f0000000e00)) 1.433336103s ago: executing program 1 (id=1704): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) openat$pfkey(0xffffff9c, 0x0, 0x101000, 0x0) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r3) rmdir(0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00a98e6793e6cf4c15d1024004000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000180)='vlan0\x00', 0x10) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0)="c8", &(0x7f0000000380), 0x5, r4}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 1.348187864s ago: executing program 0 (id=1705): openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x101) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f00000002c0)={[{@init_itable}, {@resuid}, {@stripe}]}, 0x3, 0x445, &(0x7f0000000b00)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.numa_stat\x00', 0x275a, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x8004587d, &(0x7f0000000080)) openat(0xffffffffffffff9c, &(0x7f0000001740)='.\x00', 0x515001, 0x408) 923.563216ms ago: executing program 8 (id=1703): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x802) write$evdev(r1, &(0x7f0000000000), 0x100000008) ioctl$EVIOCGBITSW(r1, 0x80044501, &(0x7f0000000300)=""/243) 921.615646ms ago: executing program 0 (id=1715): syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f00000000c0)='./file2\x00', 0x0, &(0x7f0000000300)={[{@noinline_xattr}, {@four_active_logs}, {@four_active_logs}, {@jqfmt_vfsv1}, {@noinline_data}, {@user_xattr}, {@checkpoint_diasble}, {@fastboot}, {@fsync_mode_strict}, {@discard_unit_section}]}, 0x21, 0x552d, &(0x7f000000abc0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000180)=0xfffffff9) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000003}) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) 789.509386ms ago: executing program 6 (id=1707): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=@framed={{}, [@printk={@llx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x2d}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) r2 = socket$tipc(0x1e, 0x1, 0x0) bind$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r3, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, &(0x7f00000001c0)=[{&(0x7f00000000c0)="c4", 0x1}], 0x1}, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000000)='./file1\x00', 0x1000801, &(0x7f0000000140)=ANY=[], 0xff, 0x208, &(0x7f0000000780)="$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") clock_nanosleep(0x2, 0x0, &(0x7f0000000300)={0x0, 0x989680}, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'bridge_slave_1\x00', &(0x7f0000000000)=@ethtool_perm_addr}) 548.917557ms ago: executing program 1 (id=1709): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000200)={[{@usrjquota}, {@journal_dev={'journal_dev', 0x3d, 0x8000}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@minixdf}, {@resgid}, {@grpquota}, {@usrjquota}, {@journal_dev={'journal_dev', 0x3d, 0xdcc}}]}, 0x3, 0x44a, &(0x7f0000000400)="$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") mount$incfs(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x1008002, &(0x7f0000000480)={[{@mblk_io_submit}, {@delalloc}, {@resuid}, {@errors_remount}, {@jqfmt_vfsv0}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9}}, {@journal_path={'journal_path', 0x3d, './file0/../file0'}}, {@data_err_abort}]}, 0x1, 0x5d8, &(0x7f00000005c0)="$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") mount$tmpfs(0x0, &(0x7f0000000400)='./file0/../file0\x00', &(0x7f00000001c0), 0x0, 0x0) umount2(&(0x7f00000006c0)='./file0\x00', 0x3) 349.755838ms ago: executing program 4 (id=1710): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x208, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0}, &(0x7f0000000040), &(0x7f0000000080)=r1}, 0x20) openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) 228.856659ms ago: executing program 4 (id=1711): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="190000000400000008000000ff"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) unlinkat(0xffffffffffffff9c, 0x0, 0x0) 120.282219ms ago: executing program 0 (id=1712): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x2000040, &(0x7f0000000100)={[{@stripe={'stripe', 0x3d, 0x9}}, {@inlinecrypt}, {@nouser_xattr}]}, 0x1, 0x4e2, &(0x7f0000000cc0)="$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") r0 = open(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)={0x2, 0x1, 0x2, 0x0, 0x2, 0x0, 0x70bd29, 0x25dfdbfc}, 0x10}}, 0x20000000) flistxattr(r0, &(0x7f0000000000)=""/18, 0x12) 120.081669ms ago: executing program 4 (id=1713): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000740)='scsi_dispatch_cmd_start\x00', r1}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 88.581299ms ago: executing program 4 (id=1714): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='scsi_dispatch_cmd_start\x00', r1}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 27.0368ms ago: executing program 1 (id=1716): socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x32, &(0x7f0000001500)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000400)={@local, @local, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@timestamp_prespec={0x44, 0x4, 0xce}]}}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) 26.34437ms ago: executing program 4 (id=1717): r0 = socket$igmp6(0xa, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000080)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)={0x2c, r2, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_LISTEN_PORT={0x6}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r3}]}, 0x2c}}, 0x0) 0s ago: executing program 4 (id=1718): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc086, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) syz_usb_control_io(r0, &(0x7f0000000640)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="000005"], 0x0, 0x0, 0x0, 0x0}, 0x0) kernel console output (not intermixed with test programs): 44][ T597] usb 7-1: Product: syz [ 197.697087][ T597] usb 7-1: Manufacturer: syz [ 197.702449][ T56] cdc_ncm 5-1:1.0: failed GET_NTB_PARAMETERS [ 197.708535][ T56] cdc_ncm 5-1:1.0: bind() failure [ 197.713670][ T597] usb 7-1: SerialNumber: syz [ 197.719693][ T56] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 197.730702][ T597] usb 7-1: config 0 descriptor?? [ 197.735519][ T56] cdc_ncm 5-1:1.1: bind() failure [ 197.759447][ T4032] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 197.768393][ T4032] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 197.913203][ T4054] loop7: detected capacity change from 0 to 512 [ 198.052102][ T389] usb 5-1: USB disconnect, device number 16 [ 198.087712][ T4032] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 198.146082][ T4032] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 198.201527][ T4054] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 198.212824][ T4054] ext4 filesystem being mounted at /147/file0 supports timestamps until 2038 (0x7fffffff) [ 198.912208][ T4074] loop4: detected capacity change from 0 to 512 [ 199.019045][ T4074] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 199.029949][ T4074] ext4 filesystem being mounted at /224/file0 supports timestamps until 2038 (0x7fffffff) [ 199.550630][ T4082] loop7: detected capacity change from 0 to 512 [ 199.690234][ T4082] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 199.729392][ T4082] ext4 filesystem being mounted at /148/file0 supports timestamps until 2038 (0x7fffffff) [ 199.779385][ T597] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): set LINK LED failed : -71 [ 199.795260][ T597] CoreChips: probe of 7-1:0.41 failed with error -71 [ 199.833020][ T597] usb 7-1: USB disconnect, device number 13 [ 200.025647][ T4095] loop4: detected capacity change from 0 to 16 [ 200.130640][ T4096] fuse: Bad value for 'fd' [ 200.179062][ T4095] erofs: (device loop4): mounted with root inode @ nid 36. [ 201.150406][ T4111] fuse: Bad value for 'fd' [ 201.609963][ T4116] fuse: Bad value for 'fd' [ 203.088845][ T4127] loop0: detected capacity change from 0 to 512 [ 203.281820][ T4142] fuse: Bad value for 'fd' [ 203.926884][ T4143] loop7: detected capacity change from 0 to 512 [ 203.944745][ T4127] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 203.955739][ T4127] ext4 filesystem being mounted at /248/file0 supports timestamps until 2038 (0x7fffffff) [ 204.038673][ T4143] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 204.049589][ T4143] ext4 filesystem being mounted at /152/file0 supports timestamps until 2038 (0x7fffffff) [ 204.285982][ T4151] loop1: detected capacity change from 0 to 16 [ 204.540191][ T4157] fuse: Bad value for 'fd' [ 204.644147][ T4151] erofs: (device loop1): mounted with root inode @ nid 36. [ 205.264089][ T4164] loop7: detected capacity change from 0 to 512 [ 205.325367][ T4164] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 205.371150][ T4164] ext4 filesystem being mounted at /153/file0 supports timestamps until 2038 (0x7fffffff) [ 205.451887][ T4173] fuse: Bad value for 'fd' [ 205.669276][ T4175] loop0: detected capacity change from 0 to 512 [ 205.774333][ T4180] fuse: Bad value for 'fd' [ 205.831491][ T4175] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 205.939442][ T4175] ext4 filesystem being mounted at /250/file0 supports timestamps until 2038 (0x7fffffff) [ 207.122981][ T4199] loop6: detected capacity change from 0 to 512 [ 207.628001][ T4199] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 207.639256][ T4199] ext4 filesystem being mounted at /148/file0 supports timestamps until 2038 (0x7fffffff) [ 207.901921][ T4211] fuse: Bad value for 'fd' [ 210.424017][ T4212] loop7: detected capacity change from 0 to 512 [ 210.663921][ T4214] loop0: detected capacity change from 0 to 512 [ 210.768398][ T4212] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 210.779339][ T4212] ext4 filesystem being mounted at /155/file0 supports timestamps until 2038 (0x7fffffff) [ 210.818460][ T4214] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 210.829377][ T4214] ext4 filesystem being mounted at /251/file0 supports timestamps until 2038 (0x7fffffff) [ 211.769627][ T4237] fuse: Bad value for 'fd' [ 211.959434][ T302] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 212.029373][ T39] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 212.279313][ T302] usb 5-1: Using ep0 maxpacket: 16 [ 212.339161][ T4245] fuse: Bad value for 'fd' [ 212.349414][ T39] usb 1-1: Using ep0 maxpacket: 16 [ 212.410139][ T302] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 212.418373][ T302] usb 5-1: config 0 has no interface number 0 [ 212.426563][ T302] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 212.437988][ T302] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 212.449146][ T302] usb 5-1: config 0 interface 41 has no altsetting 0 [ 212.479395][ T39] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 212.487605][ T39] usb 1-1: config 0 has no interface number 0 [ 212.493697][ T39] usb 1-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 212.503462][ T39] usb 1-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 212.513219][ T39] usb 1-1: config 0 interface 41 has no altsetting 0 [ 212.629401][ T302] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 212.638340][ T302] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.659259][ T302] usb 5-1: Product: syz [ 212.663436][ T302] usb 5-1: Manufacturer: syz [ 212.667851][ T302] usb 5-1: SerialNumber: syz [ 212.673565][ T302] usb 5-1: config 0 descriptor?? [ 212.689609][ T4233] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 212.689676][ T39] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 212.696458][ T4233] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 212.705554][ T39] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.720302][ T39] usb 1-1: Product: syz [ 212.724333][ T39] usb 1-1: Manufacturer: syz [ 212.728751][ T39] usb 1-1: SerialNumber: syz [ 212.737048][ T39] usb 1-1: config 0 descriptor?? [ 212.759605][ T4236] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 212.766657][ T4236] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 212.933639][ T4233] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 212.941407][ T4233] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 212.984692][ T4236] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 212.991576][ T4236] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 213.198752][ T4254] loop1: detected capacity change from 0 to 512 [ 213.276490][ T4254] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 213.293694][ T4254] ext4 filesystem being mounted at /236/file0 supports timestamps until 2038 (0x7fffffff) [ 214.051064][ T4266] loop1: detected capacity change from 0 to 16 [ 214.090047][ T4266] erofs: (device loop1): mounted with root inode @ nid 36. [ 214.833031][ T39] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): set LINK LED failed : -71 [ 214.842637][ T302] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): set LINK LED failed : -71 [ 214.852150][ T302] CoreChips: probe of 5-1:0.41 failed with error -71 [ 214.902501][ T39] CoreChips: probe of 1-1:0.41 failed with error -71 [ 215.315582][ T4282] loop6: detected capacity change from 0 to 16 [ 215.326929][ T4278] loop7: detected capacity change from 0 to 512 [ 215.336664][ T302] usb 5-1: USB disconnect, device number 17 [ 215.358924][ T39] usb 1-1: USB disconnect, device number 10 [ 215.375153][ T4282] erofs: (device loop6): mounted with root inode @ nid 36. [ 215.410054][ T4278] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 215.420950][ T4278] ext4 filesystem being mounted at /157/file0 supports timestamps until 2038 (0x7fffffff) [ 215.579634][ T3981] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 218.461441][ T4293] loop0: detected capacity change from 0 to 512 [ 218.644610][ T4293] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 218.655541][ T4293] ext4 filesystem being mounted at /253/file0 supports timestamps until 2038 (0x7fffffff) [ 218.968358][ T4304] fuse: Bad value for 'fd' [ 220.404343][ T4321] fuse: Bad value for 'fd' [ 221.569729][ T4336] loop4: detected capacity change from 0 to 512 [ 221.720571][ T4336] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 221.731802][ T4336] ext4 filesystem being mounted at /237/file0 supports timestamps until 2038 (0x7fffffff) [ 221.755499][ T4327] loop0: detected capacity change from 0 to 40427 [ 221.814589][ T4340] fuse: Bad value for 'fd' [ 221.831442][ T4327] F2FS-fs (loop0): fault_injection options not supported [ 221.844653][ T4327] F2FS-fs (loop0): invalid crc value [ 221.851205][ T4327] F2FS-fs (loop0): Found nat_bits in checkpoint [ 222.096771][ T4327] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 222.161569][ T30] audit: type=1400 audit(1731455372.630:1636): avc: denied { create } for pid=4326 comm="syz.0.1150" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=fifo_file permissive=1 [ 222.182427][ T294] attempt to access beyond end of device [ 222.182427][ T294] loop0: rw=2049, want=45112, limit=40427 [ 222.188250][ T30] audit: type=1400 audit(1731455372.630:1637): avc: denied { read write } for pid=4326 comm="syz.0.1150" name="file0" dev="loop0" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=fifo_file permissive=1 [ 222.258771][ T3981] usb 2-1: device descriptor read/64, error -71 [ 222.264950][ T30] audit: type=1400 audit(1731455372.630:1638): avc: denied { open } for pid=4326 comm="syz.0.1150" path="/255/file1/file0" dev="loop0" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=fifo_file permissive=1 [ 223.782116][ T4353] loop4: detected capacity change from 0 to 16 [ 223.789195][ T4359] loop7: detected capacity change from 0 to 16 [ 223.820385][ T4359] erofs: (device loop7): mounted with root inode @ nid 36. [ 223.820385][ T4353] erofs: (device loop4): mounted with root inode @ nid 36. [ 223.871389][ T4360] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 223.880864][ T4360] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -35 in[64, 4032] out[1851] [ 223.893812][ T4360] erofs: (device loop4): z_erofs_readpage: failed to read, err [-117] [ 223.903212][ T4359] erofs: (device loop7): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 223.913904][ T4359] erofs: (device loop7): z_erofs_lz4_decompress_mem: failed to decompress -35 in[64, 4032] out[1851] [ 223.927771][ T4359] erofs: (device loop7): z_erofs_readpage: failed to read, err [-117] [ 224.049592][ T3981] usb 2-1: Using ep0 maxpacket: 16 [ 224.073440][ T4369] fuse: Bad value for 'fd' [ 224.106046][ T4368] loop0: detected capacity change from 0 to 512 [ 224.230725][ T3981] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 224.238846][ T3981] usb 2-1: config 0 has no interface number 0 [ 224.245220][ T3981] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 224.255687][ T3981] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 224.295144][ T3981] usb 2-1: config 0 interface 41 has no altsetting 0 [ 224.297535][ T4368] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 224.720067][ T4375] fuse: Bad value for 'fd' [ 224.821951][ T4368] ext4 filesystem being mounted at /257/file0 supports timestamps until 2038 (0x7fffffff) [ 225.101590][ T3981] usb 2-1: string descriptor 0 read error: -71 [ 225.107650][ T3981] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 225.128359][ T3981] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.159607][ T3981] usb 2-1: config 0 descriptor?? [ 225.439128][ T4393] fuse: Bad value for 'fd' [ 226.388019][ T3981] usb 2-1: can't set config #0, error -71 [ 226.403952][ T3981] usb 2-1: USB disconnect, device number 14 [ 226.559995][ T4403] fuse: Bad value for 'fd' [ 227.036034][ T4405] loop7: detected capacity change from 0 to 512 [ 227.212965][ T4407] loop6: detected capacity change from 0 to 512 [ 227.238973][ T4405] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 227.249857][ T4405] ext4 filesystem being mounted at /163/file0 supports timestamps until 2038 (0x7fffffff) [ 227.284324][ T4407] EXT4-fs (loop6): orphan cleanup on readonly fs [ 227.314480][ T4407] EXT4-fs (loop6): 1 orphan inode deleted [ 228.479767][ T4407] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 229.569179][ T4429] loop6: detected capacity change from 0 to 16 [ 229.677707][ T4429] erofs: (device loop6): mounted with root inode @ nid 36. [ 231.012823][ T4434] loop1: detected capacity change from 0 to 512 [ 231.057618][ T4448] loop7: detected capacity change from 0 to 16 [ 231.095102][ T4434] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 231.117694][ T4434] ext4 filesystem being mounted at /244/file0 supports timestamps until 2038 (0x7fffffff) [ 231.239676][ T4448] erofs: (device loop7): mounted with root inode @ nid 36. [ 231.653499][ T4458] fuse: Bad value for 'fd' [ 231.852371][ T30] audit: type=1326 audit(1731455382.320:1639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4460 comm="syz.0.1179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6842b56719 code=0x7ffc0000 [ 231.877235][ T30] audit: type=1326 audit(1731455382.320:1640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4460 comm="syz.0.1179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6842b56719 code=0x7ffc0000 [ 231.918548][ T30] audit: type=1326 audit(1731455382.320:1641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4460 comm="syz.0.1179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6842b56719 code=0x7ffc0000 [ 231.942199][ T30] audit: type=1326 audit(1731455382.320:1642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4460 comm="syz.0.1179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6842b56719 code=0x7ffc0000 [ 231.969197][ T4465] loop4: detected capacity change from 0 to 128 [ 231.975359][ T30] audit: type=1326 audit(1731455382.320:1643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4460 comm="syz.0.1179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6842b56719 code=0x7ffc0000 [ 231.975389][ T30] audit: type=1326 audit(1731455382.320:1644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4460 comm="syz.0.1179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=5 compat=0 ip=0x7f6842b56719 code=0x7ffc0000 [ 231.975414][ T30] audit: type=1326 audit(1731455382.320:1645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4460 comm="syz.0.1179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6842b56719 code=0x7ffc0000 [ 232.075358][ T30] audit: type=1326 audit(1731455382.320:1646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4460 comm="syz.0.1179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6842b56719 code=0x7ffc0000 [ 232.156130][ T4465] EXT4-fs (loop4): mounted filesystem without journal. Opts: minixdf,nodelalloc,,errors=continue. Quota mode: none. [ 232.168334][ T4465] ext4 filesystem being mounted at /242/mnt supports timestamps until 2038 (0x7fffffff) [ 232.273407][ T30] audit: type=1326 audit(1731455382.740:1647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4475 comm="syz.4.1183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69f6d91719 code=0x7ffc0000 [ 232.369844][ T4477] fuse: Bad value for 'fd' [ 232.491210][ T30] audit: type=1326 audit(1731455382.950:1648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4475 comm="syz.4.1183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=106 compat=0 ip=0x7f69f6d91719 code=0x7ffc0000 [ 232.969357][ T3981] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 233.018592][ T4491] loop1: detected capacity change from 0 to 16 [ 233.250427][ T4491] erofs: (device loop1): mounted with root inode @ nid 36. [ 233.310654][ T4497] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 233.320158][ T4497] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -35 in[64, 4032] out[1851] [ 233.333352][ T4497] erofs: (device loop1): z_erofs_readpage: failed to read, err [-117] [ 233.650017][ T4501] loop7: detected capacity change from 0 to 512 [ 233.714364][ T4501] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 233.725686][ T4501] ext4 filesystem being mounted at /167/file0 supports timestamps until 2038 (0x7fffffff) [ 233.749338][ T3981] usb 5-1: Using ep0 maxpacket: 16 [ 233.869419][ T3981] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 233.877475][ T3981] usb 5-1: config 0 has no interface number 0 [ 233.883900][ T3981] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 233.895038][ T3981] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 233.905071][ T3981] usb 5-1: config 0 interface 41 has no altsetting 0 [ 233.982635][ T4511] fuse: Bad value for 'fd' [ 234.186913][ T4512] fuse: Bad value for 'fd' [ 234.276103][ T4516] loop6: detected capacity change from 0 to 16 [ 234.283013][ T3981] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 234.297821][ T3981] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.317101][ T3981] usb 5-1: Product: syz [ 234.327052][ T3981] usb 5-1: Manufacturer: syz [ 234.332451][ T4516] erofs: (device loop6): mounted with root inode @ nid 36. [ 234.371488][ T3981] usb 5-1: SerialNumber: syz [ 234.505538][ T4518] fuse: Bad value for 'fd' [ 234.686153][ T3981] usb 5-1: config 0 descriptor?? [ 234.709985][ T4484] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 234.716940][ T4484] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 234.959955][ T4484] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 234.989177][ T4484] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 235.056699][ T4529] fuse: Bad value for 'fd' [ 235.484832][ T4535] fuse: Bad value for 'fd' [ 235.509819][ T4536] fuse: Bad value for 'fd' [ 237.541722][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 237.541740][ T30] audit: type=1400 audit(1731455387.990:1650): avc: denied { setopt } for pid=4571 comm="syz.0.1209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 237.579396][ T3981] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): set LINK LED failed : -71 [ 237.588751][ T3981] CoreChips: probe of 5-1:0.41 failed with error -71 [ 237.599402][ T3981] usb 5-1: USB disconnect, device number 18 [ 237.696595][ T30] audit: type=1400 audit(1731455388.160:1651): avc: denied { bind } for pid=4582 comm="syz.1.1215" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 237.733353][ T4585] usb usb8: check_ctrlrecip: process 4585 (syz.6.1214) requesting ep 01 but needs 81 [ 237.745101][ T4586] loop0: detected capacity change from 0 to 16 [ 237.778728][ T4585] usb usb8: usbfs: process 4585 (syz.6.1214) did not claim interface 0 before use [ 237.791778][ T30] audit: type=1400 audit(1731455388.190:1652): avc: denied { name_bind } for pid=4582 comm="syz.1.1215" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 237.860351][ T4586] erofs: (device loop0): mounted with root inode @ nid 36. [ 237.877618][ T30] audit: type=1400 audit(1731455388.190:1653): avc: denied { node_bind } for pid=4582 comm="syz.1.1215" saddr=ff02::1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 238.651891][ T4603] loop1: detected capacity change from 0 to 512 [ 238.806565][ T4603] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 238.817473][ T4603] ext4 filesystem being mounted at /251/file0 supports timestamps until 2038 (0x7fffffff) [ 239.320063][ T4616] fuse: Bad value for 'fd' [ 239.656741][ T4625] fuse: Bad value for 'fd' [ 239.786738][ T4627] fuse: Bad value for 'fd' [ 239.819648][ T454] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 240.165088][ T4633] loop6: detected capacity change from 0 to 16 [ 240.209530][ T454] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 240.220601][ T4633] erofs: (device loop6): mounted with root inode @ nid 36. [ 240.234669][ T454] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 240.359425][ T454] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 240.369362][ T30] audit: type=1400 audit(1731455390.820:1654): avc: denied { setopt } for pid=4635 comm="syz.7.1228" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 240.408468][ T454] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 240.499680][ T454] usb 2-1: SerialNumber: syz [ 241.184261][ T4646] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1231'. [ 241.220983][ T4648] loop0: detected capacity change from 0 to 16 [ 241.229910][ T454] usb 2-1: 0:2 : does not exist [ 241.237965][ T454] usb 2-1: USB disconnect, device number 15 [ 241.262170][ T4648] erofs: (device loop0): mounted with root inode @ nid 36. [ 241.347331][ T4652] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 241.365453][ T4652] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -35 in[64, 4032] out[1851] [ 241.378580][ T4652] erofs: (device loop0): z_erofs_readpage: failed to read, err [-117] [ 241.450610][ T4653] loop7: detected capacity change from 0 to 512 [ 241.527488][ T4653] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 241.538992][ T4653] ext4 filesystem being mounted at /176/file0 supports timestamps until 2038 (0x7fffffff) [ 241.551512][ T4663] loop4: detected capacity change from 0 to 16 [ 241.580387][ T4663] erofs: (device loop4): mounted with root inode @ nid 36. [ 241.639357][ T4665] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 241.648775][ T4665] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -35 in[64, 4032] out[1851] [ 241.662641][ T4665] erofs: (device loop4): z_erofs_readpage: failed to read, err [-117] [ 241.783829][ T4668] loop0: detected capacity change from 0 to 512 [ 241.857866][ T4669] fuse: Bad value for 'fd' [ 241.887101][ T4668] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 241.898070][ T4668] ext4 filesystem being mounted at /277/file0 supports timestamps until 2038 (0x7fffffff) [ 241.992592][ T4675] fuse: Bad value for 'fd' [ 242.543350][ T4685] fuse: Bad value for 'fd' [ 242.643798][ T4688] fuse: Bad value for 'fd' [ 242.737405][ T4690] loop0: detected capacity change from 0 to 512 [ 242.839541][ T4690] EXT4-fs (loop0): Test dummy encryption mode enabled [ 242.880386][ T4690] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 242.899519][ T4690] EXT4-fs (loop0): 1 truncate cleaned up [ 242.905221][ T4690] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsv0,user_xattr,max_dir_size_kb=0x0000000000000001,auto_da_alloc,test_dummy_encryption,quota,,errors=continue. Quota mode: writeback. [ 242.949306][ T3981] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 243.661063][ T4707] loop1: detected capacity change from 0 to 512 [ 243.699707][ T30] audit: type=1400 audit(1731455394.170:1655): avc: denied { read write } for pid=4712 comm="syz.6.1250" name="uinput" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 243.740858][ T30] audit: type=1400 audit(1731455394.170:1656): avc: denied { open } for pid=4712 comm="syz.6.1250" path="/dev/uinput" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 243.769996][ T30] audit: type=1400 audit(1731455394.170:1657): avc: denied { ioctl } for pid=4712 comm="syz.6.1250" path="/dev/uinput" dev="devtmpfs" ino=254 ioctlcmd=0x5567 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 243.776955][ T4707] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 243.795483][ T3981] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 243.819104][ T4707] ext4 filesystem being mounted at /257/file0 supports timestamps until 2038 (0x7fffffff) [ 243.847472][ T4721] fuse: Bad value for 'fd' [ 244.009383][ T3981] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 244.020038][ T3981] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 244.027916][ T3981] usb 5-1: SerialNumber: syz [ 244.039371][ T30] audit: type=1400 audit(1731455394.510:1658): avc: denied { audit_write } for pid=4724 comm="syz.6.1255" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 244.106447][ T30] audit: type=1107 audit(1731455394.530:1659): pid=4724 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='r57ֆpz孕i~voB9' [ 244.134194][ T4727] loop1: detected capacity change from 0 to 2048 [ 244.157939][ T30] audit: type=1326 audit(1731455394.620:1660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4733 comm="syz.6.1258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f9f75c719 code=0x7ffc0000 [ 244.208145][ T30] audit: type=1326 audit(1731455394.620:1661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4733 comm="syz.6.1258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5f9f75c719 code=0x7ffc0000 [ 244.247569][ T30] audit: type=1326 audit(1731455394.670:1662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4733 comm="syz.6.1258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f9f75c719 code=0x7ffc0000 [ 244.289332][ T30] audit: type=1326 audit(1731455394.700:1663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4733 comm="syz.6.1258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5f9f75c719 code=0x7ffc0000 [ 244.373375][ T30] audit: type=1326 audit(1731455394.700:1664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4733 comm="syz.6.1258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f9f75c719 code=0x7ffc0000 [ 244.411099][ T4727] EXT4-fs error (device loop1): ext4_orphan_get:1423: comm syz.1.1254: bad orphan inode 8192 [ 244.421977][ T4727] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 244.444228][ T4727] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.1254: bg 0: block 184: padding at end of block bitmap is not set [ 244.727373][ T4745] fuse: Bad value for 'fd' [ 244.731988][ T4741] fuse: Bad value for 'fd' [ 245.030564][ T4756] loop0: detected capacity change from 0 to 1024 [ 245.046846][ T4758] loop7: detected capacity change from 0 to 128 [ 245.072543][ T4758] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 245.084980][ T4758] ext4 filesystem being mounted at /180/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 245.087767][ T4756] EXT4-fs (loop0): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000002,,errors=continue. Quota mode: none. [ 245.554623][ T4768] incfs: Error accessing: ./file0. [ 245.559668][ T4768] incfs: mount failed -20 [ 245.579454][ T3981] cdc_ether: probe of 5-1:1.0 failed with error -71 [ 245.596295][ T3981] usb 5-1: USB disconnect, device number 19 [ 245.640495][ T4775] loop6: detected capacity change from 0 to 1024 [ 245.648889][ T4775] EXT4-fs (loop6): can't mount with journal_async_commit, fs mounted w/o journal [ 245.788283][ T4780] fuse: Bad value for 'fd' [ 245.923243][ T4785] loop6: detected capacity change from 0 to 2048 [ 245.970319][ T4785] Alternate GPT is invalid, using primary GPT. [ 245.976579][ T4785] loop6: p1 p2 p3 [ 246.146054][ T4788] fuse: Bad value for 'fd' [ 246.152309][ T4790] fuse: Bad value for 'fd' [ 246.193485][ T101] Alternate GPT is invalid, using primary GPT. [ 246.207204][ T101] loop6: p1 p2 p3 [ 246.245241][ T1710] udevd[1710]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 246.246229][ T1711] udevd[1711]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 246.259057][ T379] udevd[379]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 246.428198][ T4794] loop7: detected capacity change from 0 to 512 [ 246.460356][ T4794] EXT4-fs (loop7): Test dummy encryption mode enabled [ 246.467456][ T4794] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 246.479581][ T4794] EXT4-fs (loop7): 1 truncate cleaned up [ 246.485115][ T4794] EXT4-fs (loop7): mounted filesystem without journal. Opts: jqfmt=vfsv0,user_xattr,max_dir_size_kb=0x0000000000000001,auto_da_alloc,test_dummy_encryption,quota,,errors=continue. Quota mode: writeback. [ 246.579167][ T4801] loop7: detected capacity change from 0 to 512 [ 246.631347][ T4802] fuse: Bad value for 'fd' [ 246.701202][ T4808] loop4: detected capacity change from 0 to 128 [ 246.736382][ T4801] EXT4-fs (loop7): mounted filesystem without journal. Opts: user_xattr,,errors=continue. Quota mode: writeback. [ 246.749467][ T4801] ext4 filesystem being mounted at /183/file0 supports timestamps until 2038 (0x7fffffff) [ 246.767879][ T4801] EXT4-fs error (device loop7): ext4_acquire_dquot:6187: comm syz.7.1278: Failed to acquire dquot type 0 [ 246.834811][ T4808] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 246.846060][ T4808] ext4 filesystem being mounted at /253/mnt supports timestamps until 2038 (0x7fffffff) [ 247.137760][ T4823] loop4: detected capacity change from 0 to 512 [ 247.209674][ T363] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 247.234875][ T4823] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 247.245787][ T4823] ext4 filesystem being mounted at /254/file0 supports timestamps until 2038 (0x7fffffff) [ 247.257473][ T4815] loop0: detected capacity change from 0 to 512 [ 247.318395][ T4815] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 247.329578][ T4815] ext4 filesystem being mounted at /288/file0 supports timestamps until 2038 (0x7fffffff) [ 247.599390][ T363] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 247.610349][ T363] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 247.620099][ T363] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 247.629027][ T363] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.637539][ T363] usb 2-1: config 0 descriptor?? [ 247.695114][ T4837] fuse: Bad value for 'fd' [ 247.855630][ T4845] loop0: detected capacity change from 0 to 512 [ 247.941326][ T4845] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsv0,minixdf,noquota,,errors=continue. Quota mode: none. [ 247.957470][ T4845] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.1292: bg 0: block 425: padding at end of block bitmap is not set [ 248.300858][ T4851] fuse: Bad value for 'fd' [ 248.305365][ T4848] fuse: Bad value for 'fd' [ 248.572131][ T363] keytouch 0003:0926:3333.0012: fixing up Keytouch IEC report descriptor [ 248.604396][ T363] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0012/input/input14 [ 248.820610][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 248.820642][ T30] audit: type=1400 audit(1731455399.290:1677): avc: denied { read } for pid=86 comm="acpid" name="event3" dev="devtmpfs" ino=1106 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 248.849537][ T363] keytouch 0003:0926:3333.0012: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 248.870358][ T363] usb 2-1: USB disconnect, device number 16 [ 248.935004][ T30] audit: type=1400 audit(1731455399.290:1678): avc: denied { open } for pid=86 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=1106 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 248.984938][ T30] audit: type=1400 audit(1731455399.290:1679): avc: denied { ioctl } for pid=86 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=1106 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 249.023878][ T4859] loop6: detected capacity change from 0 to 40427 [ 249.062579][ T4867] fuse: Bad value for 'fd' [ 249.090258][ T30] audit: type=1400 audit(1731455399.560:1680): avc: denied { append } for pid=4868 comm="syz.7.1299" name="kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 249.120172][ T4859] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 249.134287][ T4859] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 249.155804][ T4859] F2FS-fs (loop6): invalid crc value [ 249.183962][ T4859] F2FS-fs (loop6): Found nat_bits in checkpoint [ 249.233846][ T4859] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 249.240784][ T4859] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 249.479384][ T643] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 249.583972][ T4883] loop1: detected capacity change from 0 to 256 [ 249.598274][ T4295] F2FS-fs (loop6): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 249.619688][ T4295] F2FS-fs (loop6): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 249.652954][ T4883] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 249.692438][ T30] audit: type=1400 audit(1731455400.160:1681): avc: denied { write } for pid=4882 comm="syz.1.1302" name="/" dev="loop1" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 249.715023][ T30] audit: type=1400 audit(1731455400.160:1682): avc: denied { add_name } for pid=4882 comm="syz.1.1302" name="cpu.stat" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 249.736297][ T30] audit: type=1400 audit(1731455400.160:1683): avc: denied { associate } for pid=4882 comm="syz.1.1302" name="cpu.stat" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 249.758231][ T30] audit: type=1400 audit(1731455400.160:1684): avc: denied { append } for pid=4882 comm="syz.1.1302" path="/263/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/cpu.stat" dev="loop1" ino=1048668 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 249.807159][ T30] audit: type=1400 audit(1731455400.160:1685): avc: denied { map } for pid=4882 comm="syz.1.1302" path="/263/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/cpu.stat" dev="loop1" ino=1048668 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 249.854601][ T30] audit: type=1326 audit(1731455400.320:1686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4888 comm="syz.6.1303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f9f75c719 code=0x7ffc0000 [ 250.000518][ T643] usb 5-1: config 17 has an invalid descriptor of length 255, skipping remainder of the config [ 250.013884][ T643] usb 5-1: config 17 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 250.405257][ T4893] fuse: Bad value for 'fd' [ 250.412195][ T4898] loop0: detected capacity change from 0 to 16 [ 250.449799][ T4898] erofs: Unknown parameter '' [ 250.475129][ T643] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 250.485090][ T643] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.689450][ T4909] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.736097][ T4913] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1314'. [ 250.746333][ T4911] loop1: detected capacity change from 0 to 512 [ 250.780795][ T4915] loop7: detected capacity change from 0 to 2048 [ 250.800515][ T4911] EXT4-fs (loop1): Test dummy encryption mode enabled [ 250.812251][ T4911] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 250.824131][ T4911] EXT4-fs (loop1): 1 truncate cleaned up [ 250.829802][ T4911] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsv0,user_xattr,max_dir_size_kb=0x0000000000000001,auto_da_alloc,test_dummy_encryption,quota,,errors=continue. Quota mode: writeback. [ 250.896079][ T4915] EXT4-fs error (device loop7): ext4_orphan_get:1423: comm syz.7.1313: bad orphan inode 8192 [ 250.909122][ T4915] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 250.930495][ T4915] EXT4-fs error (device loop7): ext4_validate_block_bitmap:438: comm syz.7.1313: bg 0: block 184: padding at end of block bitmap is not set [ 251.069344][ T4924] tipc: Enabling of bearer rejected, failed to enable media [ 251.131873][ T4928] loop1: detected capacity change from 0 to 128 [ 251.189121][ T4928] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 251.228775][ T4928] attempt to access beyond end of device [ 251.228775][ T4928] loop1: rw=3, want=6952, limit=128 [ 251.232221][ T4946] loop0: detected capacity change from 0 to 1024 [ 251.241182][ T4928] attempt to access beyond end of device [ 251.241182][ T4928] loop1: rw=2051, want=7894, limit=128 [ 251.310375][ T4946] EXT4-fs (loop0): Ignoring removed orlov option [ 251.321454][ T4947] fuse: Bad value for 'fd' [ 251.325890][ T643] usb 5-1: string descriptor 0 read error: -71 [ 251.347463][ T4946] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 251.354951][ T643] aiptek 5-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 251.381878][ T643] usb 5-1: USB disconnect, device number 20 [ 251.382382][ T4946] EXT4-fs (loop0): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 251.502214][ T4946] EXT4-fs (loop0): shut down requested (1) [ 251.542230][ T4946] EXT4-fs warning (device loop0): ext4_resize_fs:1981: can't read last block, resize aborted [ 252.649994][ T4979] fuse: Bad value for 'fd' [ 253.444961][ T4982] fuse: Bad value for 'fd' [ 253.539674][ T384] tipc: Subscription rejected, illegal request [ 253.739686][ T5004] fuse: Bad value for 'fd' [ 253.776980][ T5011] syz.7.1349[5011] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 253.777086][ T5011] syz.7.1349[5011] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 253.956492][ T5029] incfs: Error accessing: ./file0. [ 253.972612][ T5029] incfs: mount failed -20 [ 254.023680][ T5031] netlink: 'syz.6.1359': attribute type 298 has an invalid length. [ 254.041180][ T5034] fuse: Bad value for 'fd' [ 254.089373][ T321] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 254.119683][ T30] kauditd_printk_skb: 42 callbacks suppressed [ 254.119698][ T30] audit: type=1326 audit(1731455404.590:1729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5038 comm="syz.1.1362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4fb9a7719 code=0x7ffc0000 [ 254.156754][ T30] audit: type=1326 audit(1731455404.590:1730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5038 comm="syz.1.1362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7fa4fb9a7719 code=0x7ffc0000 [ 254.211379][ T5043] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1364'. [ 254.274919][ T5043] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 254.423930][ T5050] loop6: detected capacity change from 0 to 16 [ 254.480039][ T5050] erofs: (device loop6): mounted with root inode @ nid 36. [ 254.639984][ T5055] loop4: detected capacity change from 0 to 512 [ 254.742515][ T5055] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000008,minixdf,,errors=continue. Quota mode: writeback. [ 254.786266][ T5055] ext4 filesystem being mounted at /265/bus supports timestamps until 2038 (0x7fffffff) [ 254.919382][ T321] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 254.934842][ T321] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 254.968272][ T5069] loop4: detected capacity change from 0 to 512 [ 254.977133][ T321] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 254.997049][ T321] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 255.010130][ T321] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.284357][ T5069] EXT4-fs (loop4): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000004735,inode_readahead_blks=0x0000000000000800,norecovery,user_xattr,,errors=continue. Quota mode: writeback. [ 255.337753][ T5088] loop6: detected capacity change from 0 to 512 [ 255.493034][ T5088] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 255.504424][ T5088] ext4 filesystem being mounted at /215/file0 supports timestamps until 2038 (0x7fffffff) [ 255.517039][ T5069] ext4 filesystem being mounted at /266/bus supports timestamps until 2038 (0x7fffffff) [ 255.527046][ T321] usb 1-1: config 0 descriptor?? [ 255.545871][ T30] audit: type=1326 audit(1731455406.010:1731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5091 comm="syz.1.1378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4fb9a7719 code=0x7ffc0000 [ 255.571526][ T30] audit: type=1326 audit(1731455406.010:1732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5091 comm="syz.1.1378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4fb9a7719 code=0x7ffc0000 [ 255.595171][ T30] audit: type=1326 audit(1731455406.010:1733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5091 comm="syz.1.1378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa4fb9a7719 code=0x7ffc0000 [ 255.618763][ T30] audit: type=1326 audit(1731455406.010:1734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5091 comm="syz.1.1378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4fb9a7719 code=0x7ffc0000 [ 255.647020][ T30] audit: type=1326 audit(1731455406.010:1735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5091 comm="syz.1.1378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa4fb9a7719 code=0x7ffc0000 [ 255.670540][ T30] audit: type=1326 audit(1731455406.040:1736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5091 comm="syz.1.1378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4fb9a7719 code=0x7ffc0000 [ 255.693893][ T30] audit: type=1326 audit(1731455406.040:1737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5091 comm="syz.1.1378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4fb9a7719 code=0x7ffc0000 [ 255.717511][ T30] audit: type=1326 audit(1731455406.040:1738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5091 comm="syz.1.1378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa4fb9a7719 code=0x7ffc0000 [ 255.830111][ T5111] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=5111 comm=syz.4.1385 [ 255.870888][ T313] tipc: Subscription rejected, illegal request [ 255.886954][ T5116] loop1: detected capacity change from 0 to 16 [ 256.000624][ T5116] erofs: (device loop1): mounted with root inode @ nid 36. [ 256.010436][ T321] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 256.017657][ T321] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 256.046086][ T5119] loop4: detected capacity change from 0 to 16 [ 256.065437][ T321] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 256.090662][ T321] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 256.129340][ T321] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 256.146820][ T321] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 256.508401][ T5127] loop7: detected capacity change from 0 to 16 [ 256.531616][ T321] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 256.539094][ T321] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 256.558009][ T321] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 256.578188][ T321] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 256.601281][ T5127] erofs: (device loop7): mounted with root inode @ nid 36. [ 256.661004][ T5119] erofs: (device loop4): mounted with root inode @ nid 36. [ 256.745689][ T321] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 256.752947][ T321] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 256.760266][ T321] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 256.767456][ T321] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 256.774685][ T321] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 256.797699][ T321] plantronics 0003:047F:FFFF.0013: No inputs registered, leaving [ 256.848997][ T321] plantronics 0003:047F:FFFF.0013: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 256.912197][ T321] usb 1-1: USB disconnect, device number 11 [ 256.976155][ T5137] loop6: detected capacity change from 0 to 512 [ 257.060161][ T5137] EXT4-fs (loop6): Ignoring removed oldalloc option [ 257.070269][ T5137] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 257.177788][ T5137] EXT4-fs (loop6): 1 truncate cleaned up [ 257.186596][ T5137] EXT4-fs (loop6): mounted filesystem without journal. Opts: quota,oldalloc,barrier=0x0000000000000003,debug_want_extra_isize=0x0000000000000080,block_validity,jqfmt=vfsv1,,errors=continue. Quota mode: writeback. [ 257.280037][ T410] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 257.344337][ T5146] fuse: Bad value for 'fd' [ 257.488708][ T454] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 257.555190][ T410] usb 2-1: Using ep0 maxpacket: 16 [ 257.725339][ T410] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 257.736465][ T410] usb 2-1: config 0 has no interface number 0 [ 257.752557][ T410] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 257.762263][ T410] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 257.772041][ T410] usb 2-1: config 0 interface 41 has no altsetting 0 [ 257.889828][ T454] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 257.900648][ T454] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 257.910791][ T454] usb 1-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 257.919736][ T454] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.929432][ T410] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 257.946808][ T410] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.954880][ T410] usb 2-1: Product: syz [ 257.958999][ T410] usb 2-1: Manufacturer: syz [ 257.963710][ T410] usb 2-1: SerialNumber: syz [ 257.973567][ T410] usb 2-1: config 0 descriptor?? [ 257.983267][ T454] usb 1-1: config 0 descriptor?? [ 257.989392][ T5138] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 257.996329][ T5138] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 258.052473][ T5154] loop4: detected capacity change from 0 to 512 [ 258.108633][ T5154] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 258.119584][ T5154] ext4 filesystem being mounted at /271/file0 supports timestamps until 2038 (0x7fffffff) [ 258.211865][ T5138] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 258.229633][ T5138] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 258.286566][ T5163] loop7: detected capacity change from 0 to 512 [ 258.416668][ T5163] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 258.427957][ T5163] ext4 filesystem being mounted at /211/file0 supports timestamps until 2038 (0x7fffffff) [ 258.510546][ T454] hid-steam 0003:28DE:1142.0014: unknown main item tag 0x0 [ 258.517855][ T454] hid-steam 0003:28DE:1142.0014: : USB HID v0.40 Device [HID 28de:1142] on usb-dummy_hcd.0-1/input0 [ 258.580451][ T5167] fuse: Bad value for 'fd' [ 258.652654][ T454] hid-steam 0003:28DE:1142.0015: unknown main item tag 0x0 [ 258.660326][ T454] hid-steam 0003:28DE:1142.0015: hidraw0: USB HID v0.40 Device [HID 28de:1142] on usb-dummy_hcd.0-1/input0 [ 258.739310][ T454] hid-steam 0003:28DE:1142.0014: Steam wireless receiver connected [ 258.778219][ T454] usb 1-1: USB disconnect, device number 12 [ 258.785732][ T454] hid-steam 0003:28DE:1142.0014: Steam wireless receiver disconnected [ 258.820534][ T5172] incfs: Error accessing: ./file0. [ 258.825518][ T5172] incfs: mount failed -20 [ 258.913435][ T5184] xt_nat: multiple ranges no longer supported [ 258.945379][ T5186] input: syz0 as /devices/virtual/input/input16 [ 258.976706][ T5188] loop4: detected capacity change from 0 to 1024 [ 259.064040][ T5188] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 259.179634][ T5198] loop7: detected capacity change from 0 to 512 [ 259.350584][ T5198] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 259.361883][ T5198] ext4 filesystem being mounted at /213/file0 supports timestamps until 2038 (0x7fffffff) [ 259.396959][ T5201] loop6: detected capacity change from 0 to 2048 [ 259.411075][ T30] kauditd_printk_skb: 28 callbacks suppressed [ 259.411091][ T30] audit: type=1400 audit(1731455409.880:1767): avc: denied { read } for pid=5203 comm="syz.0.1416" name="ptp0" dev="devtmpfs" ino=256 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 259.440851][ T30] audit: type=1400 audit(1731455409.880:1768): avc: denied { open } for pid=5203 comm="syz.0.1416" path="/dev/ptp0" dev="devtmpfs" ino=256 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 259.465089][ T30] audit: type=1400 audit(1731455409.880:1769): avc: denied { ioctl } for pid=5203 comm="syz.0.1416" path="/dev/ptp0" dev="devtmpfs" ino=256 ioctlcmd=0x3d0f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 259.568557][ T5213] loop4: detected capacity change from 0 to 16 [ 259.592208][ T5201] EXT4-fs (loop6): mounted filesystem without journal. Opts: commit=0x0000000000000005,,errors=continue. Quota mode: none. [ 259.680570][ T5216] fuse: Bad value for 'fd' [ 260.460346][ T5213] erofs: (device loop4): mounted with root inode @ nid 36. [ 260.599339][ T410] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): set LINK LED failed : -71 [ 260.613118][ T410] CoreChips: probe of 2-1:0.41 failed with error -71 [ 260.624147][ T410] usb 2-1: USB disconnect, device number 17 [ 261.844773][ T5234] sit: Dst spoofed 0.0.0.0/2002::bfd8:a5dd -> 224.0.0.1/2002:c021:42c4:3911:45ba:dd28:fd7f:ffc [ 261.889708][ T5235] loop4: detected capacity change from 0 to 16 [ 261.982017][ T5235] erofs: (device loop4): mounted with root inode @ nid 36. [ 262.039256][ C1] sched: RT throttling activated [ 262.080244][ T5239] loop1: detected capacity change from 0 to 256 [ 262.099502][ T5227] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 262.139877][ T5227] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -35 in[64, 4032] out[1851] [ 262.181011][ T5227] erofs: (device loop4): z_erofs_readpage: failed to read, err [-117] [ 262.234864][ T5239] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 262.262513][ T30] audit: type=1400 audit(1731455412.730:1770): avc: denied { mounton } for pid=5238 comm="syz.1.1426" path="/284/file0" dev="loop1" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 262.263249][ T5239] incfs: ino conflict with backing FS 1 [ 262.295630][ T30] audit: type=1400 audit(1731455412.730:1771): avc: denied { create } for pid=5238 comm="syz.1.1426" name=".index" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 262.577108][ T5253] loop6: detected capacity change from 0 to 512 [ 262.692768][ T30] audit: type=1400 audit(1731455413.090:1772): avc: denied { remove_name } for pid=5238 comm="syz.1.1426" name="file1" dev="loop1" ino=1048673 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 262.787591][ T30] audit: type=1400 audit(1731455413.090:1773): avc: denied { rename } for pid=5238 comm="syz.1.1426" name="file1" dev="loop1" ino=1048673 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 262.810324][ T30] audit: type=1400 audit(1731455413.090:1774): avc: denied { unlink } for pid=5238 comm="syz.1.1426" name="file0" dev="loop1" ino=1048672 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 262.832938][ T30] audit: type=1400 audit(1731455413.190:1775): avc: denied { mount } for pid=5255 comm="syz.0.1431" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 262.856346][ T5264] syz.7.1432[5264] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 262.856429][ T5264] syz.7.1432[5264] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 262.859589][ T5253] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 262.890129][ T5253] ext4 filesystem being mounted at /222/file0 supports timestamps until 2038 (0x7fffffff) [ 262.901510][ T30] audit: type=1400 audit(1731455413.230:1776): avc: denied { mounton } for pid=5255 comm="syz.0.1431" path="/320/file0" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 263.032739][ T5274] loop7: detected capacity change from 0 to 256 [ 263.062134][ T5274] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x4f8593fa, utbl_chksum : 0xe619d30d) [ 263.097719][ T5276] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 263.225546][ T5261] loop4: detected capacity change from 0 to 40427 [ 263.244949][ T5261] F2FS-fs (loop4): Found nat_bits in checkpoint [ 263.245617][ T5266] loop0: detected capacity change from 0 to 40427 [ 263.282784][ T5261] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 263.299650][ T5284] attempt to access beyond end of device [ 263.299650][ T5284] loop4: rw=2049, want=45104, limit=40427 [ 263.301042][ T5266] F2FS-fs (loop0): invalid crc value [ 263.317375][ T5266] F2FS-fs (loop0): Found nat_bits in checkpoint [ 263.359670][ T5266] F2FS-fs (loop0): Cannot turn on quotas: -2 on 0 [ 263.366419][ T5266] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 263.385347][ T5266] attempt to access beyond end of device [ 263.385347][ T5266] loop0: rw=10241, want=53256, limit=40427 [ 263.402018][ T5266] attempt to access beyond end of device [ 263.402018][ T5266] loop0: rw=2049, want=53264, limit=40427 [ 263.422804][ T294] attempt to access beyond end of device [ 263.422804][ T294] loop0: rw=2049, want=45104, limit=40427 [ 263.439340][ T39] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 263.685343][ T5305] fuse: Bad value for 'fd' [ 263.739332][ T39] usb 7-1: Using ep0 maxpacket: 16 [ 263.771893][ T5306] loop0: detected capacity change from 0 to 512 [ 263.815142][ T5306] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 263.826392][ T5306] ext4 filesystem being mounted at /323/file0 supports timestamps until 2038 (0x7fffffff) [ 263.889539][ T39] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 263.912512][ T39] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 263.956766][ T39] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 264.026308][ T39] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 264.055378][ T39] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.123411][ T39] usb 7-1: config 0 descriptor?? [ 264.222132][ T5327] loop7: detected capacity change from 0 to 128 [ 264.415349][ T5333] fuse: Bad value for 'fd' [ 264.739485][ T30] kauditd_printk_skb: 34 callbacks suppressed [ 264.739511][ T30] audit: type=1326 audit(1731455415.200:1811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5344 comm="syz.0.1463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6842b56719 code=0x7ffc0000 [ 264.917494][ T30] audit: type=1326 audit(1731455415.240:1812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5344 comm="syz.0.1463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6842b56719 code=0x7ffc0000 [ 264.953968][ T30] audit: type=1326 audit(1731455415.240:1813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5344 comm="syz.0.1463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6842b56719 code=0x7ffc0000 [ 264.979223][ T30] audit: type=1326 audit(1731455415.250:1814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5344 comm="syz.0.1463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6842b56719 code=0x7ffc0000 [ 265.005807][ T30] audit: type=1326 audit(1731455415.250:1815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5344 comm="syz.0.1463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6842b56719 code=0x7ffc0000 [ 265.030882][ T30] audit: type=1326 audit(1731455415.250:1816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5344 comm="syz.0.1463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6842b56719 code=0x7ffc0000 [ 265.055842][ T30] audit: type=1326 audit(1731455415.260:1817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5344 comm="syz.0.1463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6842b56719 code=0x7ffc0000 [ 265.080449][ T30] audit: type=1326 audit(1731455415.260:1818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5344 comm="syz.0.1463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=132 compat=0 ip=0x7f6842b56719 code=0x7ffc0000 [ 265.104962][ T30] audit: type=1326 audit(1731455415.260:1819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5344 comm="syz.0.1463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6842b56719 code=0x7ffc0000 [ 265.452328][ T39] microsoft 0003:045E:07DA.0016: No inputs registered, leaving [ 265.469806][ T39] microsoft 0003:045E:07DA.0016: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.6-1/input0 [ 265.478622][ T5352] loop7: detected capacity change from 0 to 128 [ 265.489292][ T39] microsoft 0003:045E:07DA.0016: no inputs found [ 265.494989][ T30] audit: type=1400 audit(1731455415.960:1820): avc: denied { create } for pid=5353 comm="syz.6.1467" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 265.495462][ T39] microsoft 0003:045E:07DA.0016: could not initialize ff, continuing anyway [ 265.551137][ T5354] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5354 comm=syz.6.1467 [ 265.562027][ T39] usb 7-1: USB disconnect, device number 14 [ 265.869353][ T5370] fuse: Bad value for 'fd' [ 266.570619][ T5373] fuse: Bad value for 'fd' [ 266.732145][ T5380] loop7: detected capacity change from 0 to 1036 [ 266.796143][ T5386] loop1: detected capacity change from 0 to 512 [ 267.782045][ T5384] loop6: detected capacity change from 0 to 40427 [ 267.860723][ T5386] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 267.871621][ T5386] ext4 filesystem being mounted at /287/file0 supports timestamps until 2038 (0x7fffffff) [ 268.034895][ T5406] fuse: Bad value for 'fd' [ 268.703134][ T5408] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5408 comm=syz.4.1487 [ 268.734356][ T5384] F2FS-fs (loop6): Found nat_bits in checkpoint [ 268.780521][ T5384] F2FS-fs (loop6): Start checkpoint disabled! [ 268.800856][ T5384] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 268.837889][ T5384] attempt to access beyond end of device [ 268.837889][ T5384] loop6: rw=2049, want=53256, limit=40427 [ 268.933898][ T5425] fuse: Bad value for 'fd' [ 268.996740][ T45] attempt to access beyond end of device [ 268.996740][ T45] loop6: rw=2049, want=40992, limit=40427 [ 269.315737][ T5423] loop0: detected capacity change from 0 to 40427 [ 269.421166][ T5423] F2FS-fs (loop0): Found nat_bits in checkpoint [ 269.466847][ T5423] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 269.554251][ T5439] loop6: detected capacity change from 0 to 512 [ 269.824937][ T5439] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 269.836043][ T5439] ext4 filesystem being mounted at /230/file0 supports timestamps until 2038 (0x7fffffff) [ 269.860788][ T5423] attempt to access beyond end of device [ 269.860788][ T5423] loop0: rw=2049, want=45104, limit=40427 [ 269.930458][ T5446] loop4: detected capacity change from 0 to 16 [ 270.005892][ T5446] erofs: (device loop4): mounted with root inode @ nid 36. [ 270.139312][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 270.139332][ T30] audit: type=1400 audit(1731455420.600:1835): avc: denied { read } for pid=5448 comm="syz.7.1497" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 271.015878][ T5463] fuse: Bad value for 'fd' [ 271.655025][ T5472] incfs: Options parsing error. -22 [ 271.699622][ T5472] incfs: mount failed -22 [ 271.902152][ T5481] fuse: Bad value for 'fd' [ 272.326393][ T5484] syz.6.1509[5484] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 272.326470][ T5484] syz.6.1509[5484] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 272.390775][ T5477] loop7: detected capacity change from 0 to 40427 [ 272.520391][ T5488] loop6: detected capacity change from 0 to 16 [ 272.539338][ T5477] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12 [ 272.629956][ T5488] erofs: (device loop6): mounted with root inode @ nid 36. [ 272.749840][ T5477] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 272.769109][ T5477] F2FS-fs (loop7): invalid crc value [ 272.789632][ T5477] F2FS-fs (loop7): Found nat_bits in checkpoint [ 272.869437][ T5477] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 272.876306][ T5477] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 272.969315][ T321] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 272.999415][ T410] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 273.008034][ T5477] attempt to access beyond end of device [ 273.008034][ T5477] loop7: rw=10241, want=45104, limit=40427 [ 273.046933][ T858] F2FS-fs (loop7): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 273.059641][ T858] F2FS-fs (loop7): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 273.239360][ T410] usb 1-1: Using ep0 maxpacket: 32 [ 273.275200][ T5508] tipc: Started in network mode [ 273.280702][ T5508] tipc: Node identity 7f000001, cluster identity 4711 [ 273.287613][ T5508] tipc: Enabled bearer , priority 10 [ 273.349360][ T321] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 273.360205][ T410] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 273.454154][ T5512] fuse: Bad value for 'fd' [ 273.524426][ T5513] fuse: Bad value for 'fd' [ 273.653449][ T597] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 273.662481][ T410] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 273.672054][ T321] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 273.681674][ T410] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 273.690561][ T321] usb 5-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 273.699589][ T410] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.707395][ T321] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.718895][ T321] usb 5-1: config 0 descriptor?? [ 273.723813][ T410] usb 1-1: config 0 descriptor?? [ 273.762012][ T410] hub 1-1:0.0: USB hub found [ 273.979591][ T410] hub 1-1:0.0: 1 port detected [ 274.019428][ T597] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 274.183213][ T5518] binfmt_misc: register: failed to install interpreter file ./file0 [ 274.191287][ T597] usb 2-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 274.201455][ T321] samsung 0003:0419:0600.0017: report_id 4010416497 is invalid [ 274.208827][ T321] samsung 0003:0419:0600.0017: item 0 4 1 8 parsing failed [ 274.216256][ T597] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.224388][ T597] usb 2-1: Product: syz [ 274.228632][ T321] samsung 0003:0419:0600.0017: parse failed [ 274.234530][ T597] usb 2-1: Manufacturer: syz [ 274.238956][ T597] usb 2-1: SerialNumber: syz [ 274.243437][ T321] samsung: probe of 0003:0419:0600.0017 failed with error -22 [ 274.252305][ T597] usb 2-1: config 0 descriptor?? [ 274.271080][ T5522] loop7: detected capacity change from 0 to 512 [ 274.289479][ T410] hub 1-1:0.0: hub_hub_status failed (err = -71) [ 274.296544][ T410] hub 1-1:0.0: config failed, can't get hub status (err -71) [ 274.339760][ T5522] EXT4-fs (loop7): Test dummy encryption mode enabled [ 274.348203][ T5522] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #13: comm syz.7.1522: invalid indirect mapped block 10 (level 1) [ 274.361612][ T5522] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #13: comm syz.7.1522: invalid indirect mapped block 8 (level 1) [ 274.374961][ T5522] EXT4-fs (loop7): 1 truncate cleaned up [ 274.380598][ T5522] EXT4-fs (loop7): mounted filesystem without journal. Opts: acl,user_xattr,test_dummy_encryption=v1,resuid=0x000000000000ee00,grpid,,errors=continue. Quota mode: none. [ 274.399408][ T410] usbhid 1-1:0.0: can't add hid device: -71 [ 274.406422][ T30] audit: type=1400 audit(1731455424.870:1836): avc: denied { module_request } for pid=5521 comm="syz.7.1522" kmod="crypto-cryptd(__ecb-aes-aesni)" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 274.409323][ T321] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 274.437870][ T410] usbhid: probe of 1-1:0.0 failed with error -71 [ 274.444864][ T3981] tipc: Node number set to 2130706433 [ 274.450498][ T3981] usb 5-1: USB disconnect, device number 21 [ 274.469565][ T410] usb 1-1: USB disconnect, device number 13 [ 274.486447][ T5529] loop7: detected capacity change from 0 to 512 [ 274.509452][ T597] snd-usb-audio: probe of 2-1:0.0 failed with error -2 [ 274.517096][ T597] usb 2-1: USB disconnect, device number 18 [ 274.533030][ T5529] EXT4-fs (loop7): 1 orphan inode deleted [ 274.538653][ T5529] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 274.549577][ T5529] ext4 filesystem being mounted at /248/file1 supports timestamps until 2038 (0x7fffffff) [ 274.617344][ T5533] loop7: detected capacity change from 0 to 256 [ 274.679389][ T321] usb 7-1: Using ep0 maxpacket: 16 [ 274.705497][ T5533] FAT-fs (loop7): Directory bread(block 64) failed [ 274.711875][ T5533] FAT-fs (loop7): Directory bread(block 65) failed [ 274.718266][ T5533] FAT-fs (loop7): Directory bread(block 66) failed [ 274.724553][ T5533] FAT-fs (loop7): Directory bread(block 67) failed [ 274.731030][ T5533] FAT-fs (loop7): Directory bread(block 68) failed [ 274.737359][ T5533] FAT-fs (loop7): Directory bread(block 69) failed [ 274.743792][ T5533] FAT-fs (loop7): Directory bread(block 70) failed [ 274.750080][ T5533] FAT-fs (loop7): Directory bread(block 71) failed [ 274.756408][ T5533] FAT-fs (loop7): Directory bread(block 72) failed [ 274.762731][ T5533] FAT-fs (loop7): Directory bread(block 73) failed [ 274.799378][ T321] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 274.815215][ T321] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 274.817602][ T5538] loop0: detected capacity change from 0 to 1024 [ 274.825444][ T321] usb 7-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 274.840300][ T321] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.849181][ T321] usb 7-1: config 0 descriptor?? [ 274.857869][ T5540] loop7: detected capacity change from 0 to 512 [ 274.880970][ T5538] JBD2: no valid journal superblock found [ 274.884629][ T5540] EXT4-fs (loop7): couldn't mount as ext3 due to feature incompatibilities [ 274.895798][ T5538] EXT4-fs (loop0): error loading journal [ 275.067417][ T5551] loop1: detected capacity change from 0 to 512 [ 275.110396][ T5549] fuse: Bad value for 'fd' [ 275.151187][ T5551] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 275.173399][ T5551] EXT4-fs (loop1): 1 truncate cleaned up [ 275.178886][ T5551] EXT4-fs (loop1): mounted filesystem without journal. Opts: init_itable,resuid=0x0000000000000000,stripe=0x0000000000000000,,errors=continue. Quota mode: none. [ 275.204248][ T30] audit: type=1400 audit(1731455425.670:1837): avc: denied { rename } for pid=5550 comm="syz.1.1533" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop1" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 275.309981][ T5516] UDC core: couldn't find an available UDC or it's busy: -16 [ 275.317196][ T5516] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 275.359654][ T321] hid (null): bogus close delimiter [ 275.375639][ T321] hid-generic 0003:0158:0100.0018: unknown main item tag 0x0 [ 275.383169][ T321] hid-generic 0003:0158:0100.0018: unknown main item tag 0x0 [ 275.390600][ T321] hid-generic 0003:0158:0100.0018: bogus close delimiter [ 275.397678][ T321] hid-generic 0003:0158:0100.0018: item 0 0 2 10 parsing failed [ 275.405611][ T321] hid-generic: probe of 0003:0158:0100.0018 failed with error -22 [ 275.441994][ T5559] loop0: detected capacity change from 0 to 40427 [ 275.494347][ T5563] fuse: Bad value for 'fd' [ 275.500833][ T5559] F2FS-fs (loop0): fault_injection options not supported [ 275.508871][ T5559] F2FS-fs (loop0): invalid crc value [ 275.519517][ T5559] F2FS-fs (loop0): Found nat_bits in checkpoint [ 275.581853][ T5559] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 275.596419][ T363] usb 7-1: USB disconnect, device number 15 [ 275.971780][ T5571] loop4: detected capacity change from 0 to 512 [ 276.081185][ T5571] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 276.092066][ T5571] ext4 filesystem being mounted at /304/file0 supports timestamps until 2038 (0x7fffffff) [ 276.124551][ T294] attempt to access beyond end of device [ 276.124551][ T294] loop0: rw=2049, want=45104, limit=40427 [ 276.204311][ T5579] loop1: detected capacity change from 0 to 512 [ 276.241278][ T5577] fuse: Bad value for 'fd' [ 276.266627][ T5579] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 276.277768][ T5579] EXT4-fs (loop1): 1 truncate cleaned up [ 276.284837][ T5579] EXT4-fs (loop1): mounted filesystem without journal. Opts: noinit_itable,dioread_lock,noauto_da_alloc,lazytime,nombcache,max_batch_time=0x000000000000000a,,errors=continue. Quota mode: none. [ 276.694514][ T5597] loop0: detected capacity change from 0 to 512 [ 276.761316][ T5597] EXT4-fs (loop0): Ignoring removed orlov option [ 276.771360][ T5597] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 276.789933][ T5597] EXT4-fs error (device loop0): dx_probe:823: inode #2: comm syz.0.1547: Attempting to read directory block (0) that is past i_size (256) [ 276.804528][ T5597] EXT4-fs (loop0): Remounting filesystem read-only [ 276.811324][ T5597] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 276.819798][ T5597] EXT4-fs (loop0): mounted filesystem without journal. Opts: sysvgroups,orlov,nogrpid,init_itable,dioread_nolock,grpjquota=.oldalloc,errors=remount-ro,jqfmt=vfsv1,grpid,,. Quota mode: writeback. [ 276.854476][ T5597] EXT4-fs (loop0): shut down requested (2) [ 276.967362][ T5592] loop1: detected capacity change from 0 to 131072 [ 277.049315][ T410] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 277.081169][ T5592] F2FS-fs (loop1): invalid crc value [ 277.093587][ T5592] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (15359802341028777995, 275811881701387) [ 277.109407][ T5613] loop6: detected capacity change from 0 to 512 [ 277.122376][ T5592] F2FS-fs (loop1): Mounted with checkpoint version = 753bd00b [ 277.170793][ T5613] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 277.181670][ T5613] ext4 filesystem being mounted at /238/file0 supports timestamps until 2038 (0x7fffffff) [ 277.182832][ T5617] fuse: Bad value for 'fd' [ 277.199096][ T5592] syz.1.1544 (pid 5592) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 277.211726][ T30] audit: type=1400 audit(1731455427.680:1838): avc: denied { write } for pid=5591 comm="syz.1.1544" name="file0" dev="loop1" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 277.234364][ T30] audit: type=1400 audit(1731455427.680:1839): avc: denied { add_name } for pid=5591 comm="syz.1.1544" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 277.299282][ T410] usb 5-1: Using ep0 maxpacket: 16 [ 277.419337][ T410] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 277.429430][ T410] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 277.438278][ T410] usb 5-1: New USB device found, idVendor=045e, idProduct=05da, bcdDevice= 0.00 [ 277.447314][ T410] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.462646][ T410] usb 5-1: config 0 descriptor?? [ 277.638865][ T5621] fuse: Bad value for 'fd' [ 277.740671][ T39] usb 5-1: USB disconnect, device number 22 [ 277.854795][ T30] audit: type=1326 audit(1731455428.320:1840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5623 comm="syz.0.1553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6842b56719 code=0x7ffc0000 [ 277.881919][ T30] audit: type=1326 audit(1731455428.350:1841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5623 comm="syz.0.1553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6842b56719 code=0x7ffc0000 [ 277.906804][ T30] audit: type=1326 audit(1731455428.360:1842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5623 comm="syz.0.1553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6842b56719 code=0x7ffc0000 [ 277.934119][ T30] audit: type=1326 audit(1731455428.400:1843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5623 comm="syz.0.1553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6842b56719 code=0x7ffc0000 [ 277.960417][ T30] audit: type=1326 audit(1731455428.400:1844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5623 comm="syz.0.1553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6842b56719 code=0x7ffc0000 [ 277.987259][ T30] audit: type=1326 audit(1731455428.420:1845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5623 comm="syz.0.1553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6842b56719 code=0x7ffc0000 [ 278.012246][ T30] audit: type=1326 audit(1731455428.420:1846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5623 comm="syz.0.1553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6842b56719 code=0x7ffc0000 [ 278.039944][ T5628] loop0: detected capacity change from 0 to 512 [ 278.149075][ T5628] EXT4-fs (loop0): Test dummy encryption mode enabled [ 278.163713][ T5628] EXT4-fs error (device loop0): ext4_get_branch:178: inode #13: block 2: comm syz.0.1555: invalid block [ 278.175397][ T5628] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.1555: invalid indirect mapped block 10 (level 1) [ 278.190884][ T5628] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.1555: invalid indirect mapped block 8 (level 1) [ 278.209323][ T5639] loop6: detected capacity change from 0 to 512 [ 278.216141][ T5628] EXT4-fs (loop0): 1 truncate cleaned up [ 278.221836][ T5628] EXT4-fs (loop0): mounted filesystem without journal. Opts: acl,user_xattr,test_dummy_encryption=v1,resuid=0x000000000000ee00,grpid,,errors=continue. Quota mode: none. [ 278.305207][ T5639] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 278.316681][ T5639] ext4 filesystem being mounted at /240/file0 supports timestamps until 2038 (0x7fffffff) [ 278.894221][ T5647] loop7: detected capacity change from 0 to 512 [ 278.910673][ T5654] loop0: detected capacity change from 0 to 512 [ 279.133084][ T5647] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 279.144474][ T5647] ext4 filesystem being mounted at /257/file0 supports timestamps until 2038 (0x7fffffff) [ 279.206253][ T5654] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 279.217673][ T5654] ext4 filesystem being mounted at /357/file0 supports timestamps until 2038 (0x7fffffff) [ 279.394454][ T5676] loop7: detected capacity change from 0 to 2048 [ 279.413576][ T5679] loop6: detected capacity change from 0 to 512 [ 279.496016][ T5679] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 279.512551][ T5679] EXT4-fs (loop6): 1 truncate cleaned up [ 279.522764][ T5676] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 279.539825][ T5679] EXT4-fs (loop6): mounted filesystem without journal. Opts: i_version,nombcache,debug_want_extra_isize=0x0000000000000006,lazytime,noblock_validity,quota,,errors=continue. Quota mode: writeback. [ 279.608380][ T5691] fuse: Bad value for 'fd' [ 280.090367][ T5697] loop4: detected capacity change from 0 to 512 [ 280.494350][ T5699] loop6: detected capacity change from 0 to 512 [ 280.502115][ T39] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 280.659453][ T5697] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 280.670760][ T5697] ext4 filesystem being mounted at /309/file0 supports timestamps until 2038 (0x7fffffff) [ 280.723151][ T5699] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 280.734214][ T5699] ext4 filesystem being mounted at /245/file0 supports timestamps until 2038 (0x7fffffff) [ 280.743483][ T5705] loop7: detected capacity change from 0 to 1024 [ 280.809906][ T5705] EXT4-fs (loop7): Ignoring removed orlov option [ 280.818114][ T5705] EXT4-fs (loop7): Ignoring removed nomblk_io_submit option [ 280.840551][ T5705] EXT4-fs (loop7): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,init_itable,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 280.864524][ T39] usb 2-1: Using ep0 maxpacket: 16 [ 281.077978][ T5717] loop6: detected capacity change from 0 to 256 [ 281.139327][ T39] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 281.147740][ T39] usb 2-1: config 0 has no interface number 0 [ 281.153909][ T39] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 281.164789][ T39] usb 2-1: config 0 interface 41 has no altsetting 0 [ 281.233986][ T5725] loop4: detected capacity change from 0 to 512 [ 281.240644][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 281.240756][ T30] audit: type=1326 audit(1731455431.660:1862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5723 comm="syz.0.1583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6842b56719 code=0x7ffc0000 [ 281.285648][ T30] audit: type=1326 audit(1731455431.660:1863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5723 comm="syz.0.1583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=120 compat=0 ip=0x7f6842b56719 code=0x7ffc0000 [ 281.379006][ T30] audit: type=1326 audit(1731455431.660:1864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5723 comm="syz.0.1583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6842b56719 code=0x7ffc0000 [ 281.404484][ T5725] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 281.415389][ T5725] ext4 filesystem being mounted at /310/file0 supports timestamps until 2038 (0x7fffffff) [ 281.428823][ T5732] loop0: detected capacity change from 0 to 256 [ 281.466566][ T5732] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x46ae1815, utbl_chksum : 0xe619d30d) [ 281.478702][ T5732] exFAT-fs (loop0): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 281.479355][ T39] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 281.496315][ T39] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.504465][ T39] usb 2-1: Product: syz [ 281.508509][ T39] usb 2-1: Manufacturer: syz [ 281.513629][ T39] usb 2-1: SerialNumber: syz [ 281.519205][ T39] usb 2-1: config 0 descriptor?? [ 281.549374][ T5683] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 281.574246][ T39] CoreChips: probe of 2-1:0.41 failed with error -22 [ 281.576035][ T5734] usb usb7: usbfs: process 5734 (syz.6.1587) did not claim interface 0 before use [ 281.591590][ T30] audit: type=1326 audit(1731455432.060:1865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5733 comm="syz.6.1587" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5f9f75c719 code=0x0 [ 281.859301][ T321] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 281.927993][ T5739] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1588'. [ 281.957242][ T5743] loop4: detected capacity change from 0 to 256 [ 281.979931][ T5743] exfat: Deprecated parameter 'namecase' [ 281.985537][ T5743] exfat: Deprecated parameter 'namecase' [ 282.055672][ T5743] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x1fdf94bc, utbl_chksum : 0xe619d30d) [ 282.071927][ T30] audit: type=1400 audit(1731455432.540:1866): avc: denied { write } for pid=5742 comm="syz.4.1590" name="file1" dev="loop4" ino=1048686 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 282.074421][ T5743] exFAT-fs (loop4): hint_cluster is invalid (4278190089) [ 282.101919][ T5743] exFAT-fs (loop4): error, failed to bmap (inode : ffff88812651df00 iblock : 8, err : -5) [ 282.112229][ T5743] exFAT-fs (loop4): error, invalid access to FAT (entry 0xff000008) [ 282.121940][ T5743] exFAT-fs (loop4): error, invalid access to FAT (entry 0xff000008) [ 282.172721][ T5749] loop7: detected capacity change from 0 to 512 [ 282.347154][ T5749] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 282.358516][ T5749] ext4 filesystem being mounted at /262/file0 supports timestamps until 2038 (0x7fffffff) [ 282.379782][ T5743] exFAT-fs (loop4): error, invalid access to FAT (entry 0xff000008) [ 282.387791][ T5743] exFAT-fs (loop4): error, failed to bmap (inode : ffff88812651df00 iblock : 8, err : -5) [ 282.398139][ T5743] exFAT-fs (loop4): error, invalid access to FAT (entry 0xff000008) [ 282.406308][ T5743] exFAT-fs (loop4): error, invalid access to FAT (entry 0xff000008) [ 282.436692][ T858] attempt to access beyond end of device [ 282.436692][ T858] loop4: rw=1, want=34225520826, limit=256 [ 282.437775][ T5754] loop6: detected capacity change from 0 to 1024 [ 282.448343][ T321] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 282.464266][ T858] Buffer I/O error on dev loop4, logical block 34225520825, lost async page write [ 282.473744][ T858] attempt to access beyond end of device [ 282.473744][ T858] loop4: rw=1, want=34225520827, limit=256 [ 282.475602][ T321] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 282.485113][ T858] Buffer I/O error on dev loop4, logical block 34225520826, lost async page write [ 282.493901][ T5754] EXT4-fs (loop6): Ignoring removed orlov option [ 282.503110][ T858] attempt to access beyond end of device [ 282.503110][ T858] loop4: rw=1, want=34225520828, limit=256 [ 282.509110][ T5754] EXT4-fs (loop6): Ignoring removed nomblk_io_submit option [ 282.520476][ T858] Buffer I/O error on dev loop4, logical block 34225520827, lost async page write [ 282.531855][ T5754] EXT4-fs (loop6): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 282.536553][ T858] attempt to access beyond end of device [ 282.536553][ T858] loop4: rw=1, want=34225520829, limit=256 [ 282.569483][ T858] Buffer I/O error on dev loop4, logical block 34225520828, lost async page write [ 282.578500][ T858] attempt to access beyond end of device [ 282.578500][ T858] loop4: rw=1, want=34225520830, limit=256 [ 282.589596][ T858] Buffer I/O error on dev loop4, logical block 34225520829, lost async page write [ 282.589713][ T321] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 282.598670][ T858] attempt to access beyond end of device [ 282.598670][ T858] loop4: rw=1, want=34225520831, limit=256 [ 282.608279][ T321] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 282.618730][ T858] Buffer I/O error on dev loop4, logical block 34225520830, lost async page write [ 282.618785][ T858] attempt to access beyond end of device [ 282.618785][ T858] loop4: rw=1, want=34225520832, limit=256 [ 282.632266][ T321] usb 1-1: SerialNumber: syz [ 282.639724][ T858] Buffer I/O error on dev loop4, logical block 34225520831, lost async page write [ 282.659012][ T30] audit: type=1400 audit(1731455433.120:1867): avc: denied { execute } for pid=5753 comm="syz.6.1592" name="file0" dev="loop6" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 282.682626][ T30] audit: type=1400 audit(1731455433.120:1868): avc: denied { execute_no_trans } for pid=5753 comm="syz.6.1592" path="/248/file1/file0/file0" dev="loop6" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 282.727525][ T30] audit: type=1326 audit(1731455433.190:1869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5758 comm="syz.4.1593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69f6d91719 code=0x7ffc0000 [ 282.750984][ T30] audit: type=1326 audit(1731455433.190:1870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5758 comm="syz.4.1593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69f6d91719 code=0x7ffc0000 [ 282.781437][ T30] audit: type=1326 audit(1731455433.190:1871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5758 comm="syz.4.1593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f69f6d91719 code=0x7ffc0000 [ 282.787972][ T5761] loop6: detected capacity change from 0 to 1024 [ 282.824386][ T5765] loop4: detected capacity change from 0 to 512 [ 282.839005][ T5765] EXT4-fs (loop4): invalid journal inode [ 282.846396][ T5765] EXT4-fs (loop4): can't get journal size [ 282.858693][ T5761] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 282.875902][ T5765] EXT4-fs (loop4): 1 truncate cleaned up [ 282.883024][ T5765] EXT4-fs (loop4): mounted filesystem without journal. Opts: norecovery,,errors=continue. Quota mode: none. [ 282.965394][ T321] usb 1-1: 0:2 : does not exist [ 282.980816][ T5779] loop7: detected capacity change from 0 to 256 [ 282.995415][ T321] usb 1-1: USB disconnect, device number 14 [ 283.019623][ T5779] exfat: Deprecated parameter 'namecase' [ 283.025255][ T5779] exfat: Deprecated parameter 'utf8' [ 283.052290][ T5779] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xdc42f586, utbl_chksum : 0xe619d30d) [ 283.056842][ T1711] udevd[1711]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 283.130737][ T5787] loop6: detected capacity change from 0 to 16 [ 283.181862][ T5787] erofs: (device loop6): mounted with root inode @ nid 36. [ 283.229794][ T410] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 283.494379][ T643] usb 2-1: USB disconnect, device number 19 [ 283.682773][ T5798] fuse: Bad value for 'fd' [ 283.865085][ T5796] loop0: detected capacity change from 0 to 40427 [ 283.910190][ T5796] F2FS-fs (loop0): Insane cp_payload (553648128 >= 504) [ 283.916999][ T5796] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 283.925332][ T5796] F2FS-fs (loop0): fault_injection options not supported [ 283.932253][ T5796] F2FS-fs (loop0): fault_type options not supported [ 283.939939][ T5796] F2FS-fs (loop0): invalid crc value [ 283.946489][ T5796] F2FS-fs (loop0): Found nat_bits in checkpoint [ 283.947411][ T5802] loop1: detected capacity change from 0 to 40427 [ 283.979084][ T5796] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 283.985978][ T5796] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 284.006458][ T294] attempt to access beyond end of device [ 284.006458][ T294] loop0: rw=2049, want=45112, limit=40427 [ 284.040041][ T5802] F2FS-fs (loop1): fault_injection options not supported [ 284.051417][ T5802] F2FS-fs (loop1): invalid crc value [ 284.059590][ T410] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 284.070468][ T410] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 284.071291][ T5802] F2FS-fs (loop1): Found nat_bits in checkpoint [ 284.080752][ T410] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 284.099073][ T321] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 284.106580][ T410] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 284.115664][ T410] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.124479][ T410] usb 5-1: config 0 descriptor?? [ 284.128820][ T5802] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 284.381497][ T5802] attempt to access beyond end of device [ 284.381497][ T5802] loop1: rw=0, want=77832, limit=40427 [ 284.466023][ T293] attempt to access beyond end of device [ 284.466023][ T293] loop1: rw=2049, want=45104, limit=40427 [ 284.584692][ T5822] loop1: detected capacity change from 0 to 2048 [ 284.690873][ T5822] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 284.701312][ T5822] ext4 filesystem being mounted at /303/file0 supports timestamps until 2038 (0x7fffffff) [ 284.760308][ T410] plantronics 0003:047F:FFFF.0019: No inputs registered, leaving [ 284.779410][ T321] usb 7-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice= 0.00 [ 284.795710][ T321] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.807188][ T410] plantronics 0003:047F:FFFF.0019: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 284.825768][ T321] usb 7-1: config 0 descriptor?? [ 285.002812][ T5837] loop1: detected capacity change from 0 to 512 [ 285.164112][ T5838] fuse: Bad value for 'fd' [ 285.562074][ T5837] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 285.573099][ T5837] ext4 filesystem being mounted at /306/file0 supports timestamps until 2038 (0x7fffffff) [ 285.732826][ T321] playstation 0003:054C:0DF2.001A: hidraw1: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.6-1/input0 [ 285.818649][ T5843] fuse: Bad value for 'fd' [ 285.831293][ T5846] loop0: detected capacity change from 0 to 2048 [ 285.844397][ T5846] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 285.991272][ T5854] loop1: detected capacity change from 0 to 16 [ 286.021867][ T5854] erofs: (device loop1): mounted with root inode @ nid 36. [ 286.059514][ T321] playstation 0003:054C:0DF2.001A: Invalid byte count transferred, expected 20 got 0 [ 286.093978][ T321] playstation 0003:054C:0DF2.001A: Failed to retrieve DualSense pairing info: -22 [ 286.107925][ T321] playstation 0003:054C:0DF2.001A: Failed to get MAC address from DualSense [ 286.116765][ T321] playstation 0003:054C:0DF2.001A: Failed to create dualsense. [ 286.131398][ T3981] usb 5-1: USB disconnect, device number 23 [ 286.146654][ T321] playstation: probe of 0003:054C:0DF2.001A failed with error -22 [ 286.262593][ T321] usb 7-1: USB disconnect, device number 16 [ 286.790883][ T5864] loop7: detected capacity change from 0 to 512 [ 286.865814][ T5864] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 286.876920][ T5864] ext4 filesystem being mounted at /269/file0 supports timestamps until 2038 (0x7fffffff) [ 286.892071][ T30] kauditd_printk_skb: 22 callbacks suppressed [ 286.892087][ T30] audit: type=1400 audit(1731455437.360:1894): avc: denied { load_policy } for pid=5871 comm="syz.1.1629" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 286.892129][ T5872] SELinux: failed to load policy [ 287.256753][ T5883] loop6: detected capacity change from 0 to 512 [ 288.032603][ T5883] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 288.043631][ T5883] ext4 filesystem being mounted at /258/file0 supports timestamps until 2038 (0x7fffffff) [ 288.089303][ T321] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 288.292368][ T5890] fuse: Bad value for 'fd' [ 288.373245][ T5876] loop4: detected capacity change from 0 to 131072 [ 288.449339][ T321] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 288.462060][ T5876] F2FS-fs (loop4): invalid crc value [ 288.480562][ T321] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 288.487790][ T5876] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (15359802341028777995, 275811881701387) [ 288.490673][ T321] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 288.513837][ T321] usb 1-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 288.523019][ T321] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.534598][ T5876] F2FS-fs (loop4): Mounted with checkpoint version = 753bd00b [ 288.536360][ T321] usb 1-1: config 0 descriptor?? [ 288.736384][ T30] audit: type=1400 audit(1731455439.200:1895): avc: denied { setopt } for pid=5904 comm="syz.4.1639" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 288.759516][ T39] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 288.977302][ T5908] netlink: 'syz.7.1640': attribute type 3 has an invalid length. [ 288.984882][ T5908] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1640'. [ 289.031146][ T321] acrux 0003:1A34:0802.001B: hidraw0: USB HID v0.00 Device [HID 1a34:0802] on usb-dummy_hcd.0-1/input0 [ 289.045271][ T321] acrux 0003:1A34:0802.001B: no inputs found [ 289.051388][ T321] acrux 0003:1A34:0802.001B: Failed to enable force feedback support, error: -19 [ 289.211023][ T39] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 289.221949][ T39] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 289.233035][ T39] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 289.249851][ T321] usb 1-1: USB disconnect, device number 15 [ 289.340000][ T5925] fuse: Bad value for 'fd' [ 289.479304][ T5926] loop7: detected capacity change from 0 to 16 [ 289.563229][ T5926] erofs: (device loop7): mounted with root inode @ nid 36. [ 290.050057][ T30] audit: type=1400 audit(1731455440.490:1896): avc: denied { mount } for pid=5928 comm="syz.4.1647" name="/" dev="configfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 290.090958][ T30] audit: type=1400 audit(1731455440.550:1897): avc: denied { read } for pid=5928 comm="syz.4.1647" name="/" dev="configfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 290.125598][ T30] audit: type=1400 audit(1731455440.550:1898): avc: denied { open } for pid=5928 comm="syz.4.1647" path="/321/file0" dev="configfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 290.148817][ T30] audit: type=1400 audit(1731455440.560:1899): avc: denied { unmount } for pid=291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 290.550201][ T5940] loop4: detected capacity change from 0 to 16 [ 290.612252][ T5940] erofs: (device loop4): mounted with root inode @ nid 36. [ 290.709343][ T39] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 290.724837][ T39] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.734417][ T39] usb 7-1: Product: syz [ 290.738398][ T39] usb 7-1: Manufacturer: syz [ 290.742954][ T39] usb 7-1: SerialNumber: syz [ 290.927428][ T5954] fuse: Bad value for 'fd' [ 292.769927][ T5957] loop0: detected capacity change from 0 to 16 [ 294.688941][ T30] audit: type=1326 audit(1731455445.150:1900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5961 comm="syz.6.1667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f9f75c719 code=0x7ffc0000 [ 294.712732][ T5957] erofs: (device loop0): mounted with root inode @ nid 36. [ 294.724433][ T30] audit: type=1326 audit(1731455445.190:1901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5961 comm="syz.6.1667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5f9f75c719 code=0x7ffc0000 [ 294.749358][ T39] cdc_ncm 7-1:1.0: bind() failure [ 294.760666][ T39] usb 7-1: USB disconnect, device number 17 [ 294.772549][ T30] audit: type=1326 audit(1731455445.240:1902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5961 comm="syz.6.1667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f9f75c719 code=0x7ffc0000 [ 294.795909][ T5957] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 294.805295][ T5957] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -35 in[64, 4032] out[1851] [ 294.808910][ T30] audit: type=1326 audit(1731455445.270:1903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5961 comm="syz.6.1667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5f9f75c719 code=0x7ffc0000 [ 294.841515][ T5957] erofs: (device loop0): z_erofs_readpage: failed to read, err [-117] [ 294.842966][ T30] audit: type=1326 audit(1731455445.270:1904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5961 comm="syz.6.1667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f9f75c719 code=0x7ffc0000 [ 294.928513][ T30] audit: type=1326 audit(1731455445.310:1905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5961 comm="syz.6.1667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f5f9f75c719 code=0x7ffc0000 [ 294.979651][ T30] audit: type=1326 audit(1731455445.310:1906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5961 comm="syz.6.1667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f9f75c719 code=0x7ffc0000 [ 295.043370][ T30] audit: type=1326 audit(1731455445.310:1907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5961 comm="syz.6.1667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f9f75c719 code=0x7ffc0000 [ 295.081488][ T5977] fuse: Bad value for 'fd' [ 295.180647][ T30] audit: type=1326 audit(1731455445.340:1908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5961 comm="syz.6.1667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=76 compat=0 ip=0x7f5f9f75c719 code=0x7ffc0000 [ 295.352946][ T5981] loop6: detected capacity change from 0 to 16 [ 295.412307][ T5981] erofs: (device loop6): mounted with root inode @ nid 36. [ 295.465189][ T30] audit: type=1326 audit(1731455445.340:1909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5961 comm="syz.6.1667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f9f75c719 code=0x7ffc0000 [ 295.671165][ T5993] loop1: detected capacity change from 0 to 512 [ 295.776476][ T5996] fuse: Bad value for 'fd' [ 295.971421][ T5999] loop4: detected capacity change from 0 to 512 [ 296.330041][ T5999] EXT4-fs (loop4): Mount option "nouser_xattr" will be removed by 3.5 [ 296.330041][ T5999] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 296.330041][ T5999] [ 296.354215][ T5993] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 296.429807][ T5999] EXT4-fs (loop4): 1 orphan inode deleted [ 296.439000][ T5999] EXT4-fs (loop4): mounted filesystem without journal. Opts: stripe=0x0000000000000009,inlinecrypt,nouser_xattr,,errors=continue. Quota mode: writeback. [ 296.454903][ T5999] ext4 filesystem being mounted at /325/file1 supports timestamps until 2038 (0x7fffffff) [ 296.515490][ T5993] EXT4-fs (loop1): 1 truncate cleaned up [ 296.567317][ T6009] loop6: detected capacity change from 0 to 512 [ 296.578945][ T5993] EXT4-fs (loop1): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000068,lazytime,nombcache,noload,,errors=continue. Quota mode: none. [ 296.703712][ T6009] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 296.714998][ T6009] ext4 filesystem being mounted at /266/file0 supports timestamps until 2038 (0x7fffffff) [ 297.289739][ T6023] incfs: Error accessing: ./file0. [ 297.294717][ T6023] incfs: mount failed -20 [ 297.397792][ T6033] loop4: detected capacity change from 0 to 16 [ 297.584982][ T6035] loop7: detected capacity change from 0 to 512 [ 297.789809][ T6033] erofs: (device loop4): mounted with root inode @ nid 36. [ 299.114065][ T6044] syz.6.1681[6044] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 299.114150][ T6044] syz.6.1681[6044] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 299.204856][ T6047] fuse: Bad value for 'fd' [ 299.438061][ T6035] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 299.449069][ T6035] ext4 filesystem being mounted at /282/file0 supports timestamps until 2038 (0x7fffffff) [ 299.694901][ T6055] loop7: detected capacity change from 0 to 16 [ 299.702843][ T6056] netlink: 'syz.4.1684': attribute type 34 has an invalid length. [ 299.720130][ T6055] erofs: Unknown parameter '18446744073709551615n&*4c N3iVEl?lѾνB^'׃juL]CJ(Hyt pdNGn+'X [ 299.720130][ T6055] ' [ 299.731359][ T6059] syz.0.1687[6059] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 299.739191][ T6059] syz.0.1687[6059] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 299.801371][ T6067] loop4: detected capacity change from 0 to 512 [ 299.821473][ T6067] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 299.854612][ T6072] loop0: detected capacity change from 0 to 128 [ 299.989214][ T6082] loop0: detected capacity change from 0 to 512 [ 300.051250][ T6082] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 300.071698][ T6082] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1053: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 300.086660][ T6082] EXT4-fs (loop0): 1 truncate cleaned up [ 300.092847][ T6082] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 300.099299][ T454] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 300.159347][ T410] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 300.168588][ T6087] loop0: detected capacity change from 0 to 256 [ 300.219738][ T6087] exfat: Deprecated parameter 'namecase' [ 300.227989][ T6087] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 300.229295][ T321] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 300.254559][ T6087] exFAT-fs (loop0): hint_cluster is invalid (1) [ 300.262537][ T6087] exFAT-fs (loop0): error, invalid access to exfat cache (entry 0x00000000) [ 300.271375][ T6087] exFAT-fs (loop0): error, failed to bmap (inode : ffff88810c818dc0 iblock : 0, err : -5) [ 300.281628][ T6087] exFAT-fs (loop0): error, invalid access to exfat cache (entry 0x00000000) [ 300.290238][ T30] kauditd_printk_skb: 27 callbacks suppressed [ 300.290254][ T30] audit: type=1400 audit(2000000004.760:1937): avc: denied { write } for pid=6088 comm="syz.7.1698" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 300.302422][ T6087] exFAT-fs (loop0): error, failed to bmap (inode : ffff88810c818dc0 iblock : 0, err : -5) [ 300.321915][ T6091] loop7: detected capacity change from 0 to 512 [ 300.332858][ T6087] exFAT-fs (loop0): error, invalid access to exfat cache (entry 0x00000000) [ 300.341420][ T6087] exFAT-fs (loop0): error, failed to bmap (inode : ffff88810c818dc0 iblock : 1, err : -5) [ 300.351431][ T6087] exFAT-fs (loop0): error, invalid access to exfat cache (entry 0x00000000) [ 300.360154][ T6087] exFAT-fs (loop0): error, failed to bmap (inode : ffff88810c818dc0 iblock : 2, err : -5) [ 300.370021][ T6087] exFAT-fs (loop0): error, invalid access to exfat cache (entry 0x00000000) [ 300.374516][ T6091] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 300.378522][ T6087] exFAT-fs (loop0): error, failed to bmap (inode : ffff88810c818dc0 iblock : 3, err : -5) [ 300.394353][ T6091] EXT4-fs error (device loop7): ext4_orphan_get:1423: comm syz.7.1699: bad orphan inode 131083 [ 300.397938][ T454] usb 7-1: Using ep0 maxpacket: 32 [ 300.408728][ T6091] EXT4-fs (loop7): mounted filesystem without journal. Opts: stripe=0x000000000000003d,init_itable,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 300.413011][ T6087] exFAT-fs (loop0): error, invalid access to exfat cache (entry 0x00000000) [ 300.438494][ T6087] exFAT-fs (loop0): error, failed to bmap (inode : ffff88810c818dc0 iblock : 4, err : -5) [ 300.449965][ T6087] exFAT-fs (loop0): error, invalid access to exfat cache (entry 0x00000000) [ 300.458314][ T30] audit: type=1400 audit(2000000004.930:1938): avc: denied { mounton } for pid=6090 comm="syz.7.1699" path="/285/bus/file0" dev="loop7" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 300.458646][ T6087] exFAT-fs (loop0): error, failed to bmap (inode : ffff88810c818dc0 iblock : 5, err : -5) [ 300.491613][ T6087] exFAT-fs (loop0): error, invalid access to exfat cache (entry 0x00000000) [ 300.500364][ T6087] exFAT-fs (loop0): error, failed to bmap (inode : ffff88810c818dc0 iblock : 6, err : -5) [ 300.507465][ T30] audit: type=1400 audit(2000000004.960:1939): avc: denied { setattr } for pid=6090 comm="syz.7.1699" name="work" dev="loop7" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 300.511572][ T6087] exFAT-fs (loop0): error, invalid access to exfat cache (entry 0x00000000) [ 300.540319][ T30] audit: type=1400 audit(2000000004.960:1940): avc: denied { remove_name } for pid=6090 comm="syz.7.1699" name="#11" dev="loop7" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 300.540832][ T6087] exFAT-fs (loop0): error, failed to bmap (inode : ffff88810c818dc0 iblock : 7, err : -5) [ 300.562878][ T410] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 300.572986][ T30] audit: type=1400 audit(2000000004.960:1941): avc: denied { unlink } for pid=6090 comm="syz.7.1699" name="#11" dev="loop7" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 300.582799][ T6087] exFAT-fs (loop0): error, invalid access to exfat cache (entry 0x00000000) [ 300.604647][ T454] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 300.613743][ T410] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 300.624329][ T454] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 300.633518][ T6087] exFAT-fs (loop0): error, failed to bmap (inode : ffff88810c818dc0 iblock : 0, err : -5) [ 300.644229][ T30] audit: type=1400 audit(2000000004.960:1942): avc: denied { unlink } for pid=6090 comm="syz.7.1699" name="#12" dev="loop7" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 300.653935][ T6087] exFAT-fs (loop0): error, invalid access to exfat cache (entry 0x00000000) [ 300.683294][ T454] usb 7-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 300.684007][ T6087] exFAT-fs (loop0): error, invalid access to exfat cache (entry 0x00000000) [ 300.692512][ T454] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.701237][ T321] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 300.708948][ T30] audit: type=1400 audit(2000000004.960:1943): avc: denied { setattr } for pid=6090 comm="syz.7.1699" name="file1" dev="overlay" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 300.720594][ T321] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 300.743345][ T454] usb 7-1: config 0 descriptor?? [ 300.755539][ T6087] exFAT-fs (loop0): error, invalid access to exfat cache (entry 0x00000000) [ 300.764826][ T30] audit: type=1400 audit(2000000004.960:1944): avc: denied { write } for pid=6090 comm="syz.7.1699" dev="loop7" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 300.785744][ T6087] exFAT-fs (loop0): error, invalid access to exfat cache (entry 0x00000000) [ 300.785873][ T6069] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 300.794312][ T30] audit: type=1400 audit(2000000004.960:1945): avc: denied { open } for pid=6090 comm="syz.7.1699" path=2F202864656C6574656429 dev="loop7" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 300.802105][ T410] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 300.826660][ T6087] exFAT-fs (loop0): error, invalid access to exfat cache (entry 0x00000000) [ 300.834458][ T321] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 300.843174][ T454] hub 7-1:0.0: USB hub found [ 300.859286][ T410] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 300.859344][ T410] usb 2-1: SerialNumber: syz [ 300.859889][ T321] usb 5-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 300.868446][ T6087] exFAT-fs (loop0): error, invalid access to exfat cache (entry 0x00000000) [ 300.874559][ T321] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.880783][ T6087] exFAT-fs (loop0): error, invalid access to exfat cache (entry 0x00000000) [ 300.890179][ T30] audit: type=1400 audit(2000000004.960:1946): avc: denied { link } for pid=6090 comm="syz.7.1699" name="#20" dev="loop7" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 300.928209][ T321] usb 5-1: config 0 descriptor?? [ 300.936601][ T313] tipc: Disabling bearer [ 300.941856][ T313] tipc: Left network mode [ 300.956881][ T6094] loop0: detected capacity change from 0 to 512 [ 301.056824][ T6094] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 301.067954][ T6094] ext4 filesystem being mounted at /383/file0 supports timestamps until 2038 (0x7fffffff) [ 301.069415][ T454] hub 7-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 301.087520][ T6094] EXT4-fs error (device loop0): ext4_readdir:260: inode #2: block 12: comm syz.0.1701: path /383/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 301.108788][ T6094] EXT4-fs error (device loop0): ext4_readdir:260: inode #2: block 13: comm syz.0.1701: path /383/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 301.130257][ T6094] EXT4-fs error (device loop0): ext4_readdir:260: inode #2: block 14: comm syz.0.1701: path /383/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 301.150869][ T6094] EXT4-fs error (device loop0): ext4_readdir:260: inode #2: block 15: comm syz.0.1701: path /383/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 301.160489][ T410] usb 2-1: 0:2 : does not exist [ 301.173312][ T6103] EXT4-fs error (device loop0): ext4_map_blocks:629: inode #2: block 18: comm syz.0.1701: lblock 23 mapped to illegal pblock 18 (length 1) [ 301.190495][ T6094] EXT4-fs error (device loop0): ext4_readdir:260: inode #2: block 16: comm syz.0.1701: path /383/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0 [ 301.215814][ T6094] EXT4-fs error (device loop0): ext4_readdir:260: inode #2: block 17: comm syz.0.1701: path /383/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 301.215889][ T6097] bridge0: port 1(bridge_slave_0) entered blocking state [ 301.243755][ T6094] EXT4-fs error (device loop0): ext4_map_blocks:629: inode #2: block 18: comm syz.0.1701: lblock 23 mapped to illegal pblock 18 (length 1) [ 301.258121][ T6094] EXT4-fs error (device loop0): ext4_readdir:260: inode #2: block 19: comm syz.0.1701: path /383/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 301.259642][ T410] usb 2-1: USB disconnect, device number 20 [ 301.279023][ T6094] EXT4-fs error (device loop0): ext4_readdir:260: inode #2: block 20: comm syz.0.1701: path /383/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=2048 fake=0 [ 301.299274][ T6097] bridge0: port 1(bridge_slave_0) entered disabled state [ 301.319870][ T6097] device bridge_slave_0 entered promiscuous mode [ 301.328885][ T6097] bridge0: port 2(bridge_slave_1) entered blocking state [ 301.335990][ T6097] bridge0: port 2(bridge_slave_1) entered disabled state [ 301.343537][ T6097] device bridge_slave_1 entered promiscuous mode [ 301.410496][ T321] gt683r_led 0003:1770:FF00.001C: item fetching failed at offset 1/5 [ 301.428901][ T321] gt683r_led 0003:1770:FF00.001C: hid parsing failed [ 301.439572][ T6097] bridge0: port 2(bridge_slave_1) entered blocking state [ 301.446420][ T6097] bridge0: port 2(bridge_slave_1) entered forwarding state [ 301.453588][ T6097] bridge0: port 1(bridge_slave_0) entered blocking state [ 301.460438][ T6097] bridge0: port 1(bridge_slave_0) entered forwarding state [ 301.468299][ T321] gt683r_led: probe of 0003:1770:FF00.001C failed with error -22 [ 301.514235][ T384] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 301.523003][ T454] hid-generic 0003:046D:C314.001D: item fetching failed at offset 0/1 [ 301.534193][ T384] bridge0: port 1(bridge_slave_0) entered disabled state [ 301.541827][ T454] hid-generic: probe of 0003:046D:C314.001D failed with error -22 [ 301.550011][ T384] bridge0: port 2(bridge_slave_1) entered disabled state [ 301.573395][ T384] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 301.581520][ T384] bridge0: port 1(bridge_slave_0) entered blocking state [ 301.588370][ T384] bridge0: port 1(bridge_slave_0) entered forwarding state [ 301.595833][ T384] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 301.605111][ T384] bridge0: port 2(bridge_slave_1) entered blocking state [ 301.612018][ T384] bridge0: port 2(bridge_slave_1) entered forwarding state [ 301.659756][ T313] device bridge_slave_1 left promiscuous mode [ 301.665735][ T313] bridge0: port 2(bridge_slave_1) entered disabled state [ 301.673193][ T313] device bridge_slave_0 left promiscuous mode [ 301.679150][ T313] bridge0: port 1(bridge_slave_0) entered disabled state [ 301.687465][ T313] device veth1_macvtap left promiscuous mode [ 301.693804][ T313] device veth0_vlan left promiscuous mode [ 301.693929][ T643] usb 5-1: USB disconnect, device number 24 [ 301.841778][ T384] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 301.849592][ T384] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 301.862188][ T384] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 301.874240][ T6108] loop0: detected capacity change from 0 to 512 [ 301.883721][ T6108] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 301.938086][ T6109] fuse: Bad value for 'fd' [ 301.965985][ T384] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 302.009851][ T6108] EXT4-fs (loop0): 1 truncate cleaned up [ 302.045258][ T6108] EXT4-fs (loop0): mounted filesystem without journal. Opts: init_itable,resuid=0x0000000000000000,stripe=0x0000000000000000,,errors=continue. Quota mode: none. [ 302.129047][ T384] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 302.137529][ T384] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 302.140969][ T321] usb 7-1: USB disconnect, device number 18 [ 302.152505][ T6097] device veth0_vlan entered promiscuous mode [ 302.159346][ T6108] EXT4-fs (loop0): shut down requested (0) [ 302.172123][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 302.180390][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 302.189602][ T6097] device veth1_macvtap entered promiscuous mode [ 302.198581][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 302.206190][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 302.214498][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 302.224876][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 302.233138][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 302.335708][ T6118] loop4: detected capacity change from 0 to 128 [ 302.477372][ T6113] loop0: detected capacity change from 0 to 40427 [ 302.493179][ T6123] loop4: detected capacity change from 0 to 512 [ 302.510735][ T6124] loop6: detected capacity change from 0 to 16 [ 302.540075][ T6123] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 302.560396][ T6124] erofs: (device loop6): mounted with root inode @ nid 36. [ 302.570677][ T6123] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1053: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 302.631548][ T6113] F2FS-fs (loop0): Insane cp_payload (553648128 >= 504) [ 302.641407][ T6113] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 302.656260][ T6113] F2FS-fs (loop0): invalid crc value [ 302.663772][ T6129] loop1: detected capacity change from 0 to 512 [ 302.674493][ T6113] F2FS-fs (loop0): Found nat_bits in checkpoint [ 302.710027][ T6123] EXT4-fs (loop4): 1 truncate cleaned up [ 302.719342][ T6123] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 302.745881][ T6129] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.1709: inode #1: comm syz.1.1709: iget: illegal inode # [ 302.768417][ T6113] F2FS-fs (loop0): Start checkpoint disabled! [ 302.797247][ T6129] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.1709: error while reading EA inode 1 err=-117 [ 302.823528][ T6113] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 302.832416][ T6113] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 302.844493][ T6129] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.1709: inode #1: comm syz.1.1709: iget: illegal inode # [ 302.904945][ T6129] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.1709: error while reading EA inode 1 err=-117 [ 302.963642][ T6129] EXT4-fs (loop1): 1 orphan inode deleted [ 302.979325][ T6129] EXT4-fs (loop1): mounted filesystem without journal. Opts: usrjquota=,journal_dev=0x0000000000008000,debug_want_extra_isize=0x000000000000005c,minixdf,resgid=0x0000000000000000,grpquota,usrjquota=,journal_dev=0x0000000000000dcc,,errors=continue. Quota mode: writeback. [ 303.092289][ T313] attempt to access beyond end of device [ 303.092289][ T313] loop0: rw=2049, want=40968, limit=40427 [ 303.107645][ T293] EXT4-fs error (device loop1): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0 [ 303.193319][ T293] ------------[ cut here ]------------ [ 303.198671][ T293] kernel BUG at fs/namei.c:2933! [ 303.229327][ T293] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 303.235587][ T293] CPU: 0 PID: 293 Comm: syz-executor Not tainted 5.15.167-syzkaller-00002-g3bfe08931bff #0 [ 303.245399][ T293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 303.255286][ T293] RIP: 0010:may_delete+0x6eb/0x6f0 [ 303.260233][ T293] Code: 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c 7f fe ff ff 4c 89 e7 e8 06 71 f4 ff e9 72 fe ff ff e8 7c 18 b2 ff 0f 0b e8 75 18 b2 ff <0f> 0b 0f 1f 00 55 48 89 e5 41 56 53 48 89 fb e8 61 18 b2 ff 4c 8d [ 303.279675][ T293] RSP: 0018:ffffc90000a07c70 EFLAGS: 00010293 [ 303.285576][ T293] RAX: ffffffff81be3f0b RBX: ffff8881266a4140 RCX: ffff88810acde2c0 [ 303.293396][ T293] RDX: 0000000000000000 RSI: 0000000000200000 RDI: 0000000000000000 [ 303.301198][ T293] RBP: ffffc90000a07cd8 R08: ffffffff81be389f R09: 0000000000000003 [ 303.309006][ T293] R10: fffff52000140f70 R11: dffffc0000000001 R12: ffff888100437ee0 [ 303.316817][ T293] R13: 1ffff11020086fdc R14: ffff88812f630d08 R15: dffffc0000000000 [ 303.324630][ T293] FS: 0000555577e84500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 303.333397][ T293] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 303.339817][ T293] CR2: 0000000020c7a030 CR3: 0000000123ad0000 CR4: 00000000003506b0 [ 303.347980][ T293] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 303.355788][ T293] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 303.363606][ T293] Call Trace: [ 303.366723][ T293] [ 303.369504][ T293] ? __die_body+0x62/0xb0 [ 303.373674][ T293] ? die+0x88/0xb0 [ 303.377225][ T293] ? do_trap+0x103/0x330 [ 303.381306][ T293] ? may_delete+0x6eb/0x6f0 [ 303.385644][ T293] ? handle_invalid_op+0x95/0xc0 [ 303.390418][ T293] ? may_delete+0x6eb/0x6f0 [ 303.395311][ T293] ? exc_invalid_op+0x32/0x50 [ 303.399819][ T293] ? asm_exc_invalid_op+0x1b/0x20 [ 303.404714][ T293] ? may_delete+0x7f/0x6f0 [ 303.409826][ T293] ? may_delete+0x6eb/0x6f0 [ 303.414166][ T293] ? may_delete+0x6eb/0x6f0 [ 303.418519][ T293] vfs_rmdir+0x32/0x470 [ 303.422502][ T293] incfs_kill_sb+0x113/0x230 [ 303.426922][ T293] deactivate_locked_super+0xad/0x110 [ 303.432129][ T293] deactivate_super+0xbe/0xf0 [ 303.436643][ T293] cleanup_mnt+0x45c/0x510 [ 303.440902][ T293] __cleanup_mnt+0x19/0x20 [ 303.445155][ T293] task_work_run+0x129/0x190 [ 303.449578][ T293] exit_to_user_mode_loop+0xc4/0xe0 [ 303.454623][ T293] exit_to_user_mode_prepare+0x5a/0xa0 [ 303.459904][ T293] syscall_exit_to_user_mode+0x26/0x160 [ 303.465287][ T293] do_syscall_64+0x47/0xb0 [ 303.469544][ T293] ? clear_bhb_loop+0x35/0x90 [ 303.474049][ T293] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 303.479780][ T293] RIP: 0033:0x7fa4fb9a8a47 [ 303.484030][ T293] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 303.503471][ T293] RSP: 002b:00007fffeaedc1f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 303.511730][ T293] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fa4fb9a8a47 [ 303.519652][ T293] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffeaedc2b0 [ 303.527563][ T293] RBP: 00007fffeaedc2b0 R08: 0000000000000000 R09: 0000000000000000 [ 303.535353][ T293] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fffeaedd3a0 [ 303.539350][ T454] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 303.543335][ T293] R13: 00007fa4fba1a4b4 R14: 0000000000049e29 R15: 00007fffeaede460 [ 303.543361][ T293] [ 303.543369][ T293] Modules linked in: [ 303.574578][ T6149] loop0: detected capacity change from 0 to 512 [ 303.580812][ T293] ---[ end trace a5956ffaae4694f9 ]--- [ 303.586085][ T293] RIP: 0010:may_delete+0x6eb/0x6f0 [ 303.591538][ T293] Code: 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c 7f fe ff ff 4c 89 e7 e8 06 71 f4 ff e9 72 fe ff ff e8 7c 18 b2 ff 0f 0b e8 75 18 b2 ff <0f> 0b 0f 1f 00 55 48 89 e5 41 56 53 48 89 fb e8 61 18 b2 ff 4c 8d [ 303.611543][ T293] RSP: 0018:ffffc90000a07c70 EFLAGS: 00010293 [ 303.617443][ T293] RAX: ffffffff81be3f0b RBX: ffff8881266a4140 RCX: ffff88810acde2c0 [ 303.625587][ T293] RDX: 0000000000000000 RSI: 0000000000200000 RDI: 0000000000000000 [ 303.633810][ T293] RBP: ffffc90000a07cd8 R08: ffffffff81be389f R09: 0000000000000003 [ 303.641688][ T293] R10: fffff52000140f70 R11: dffffc0000000001 R12: ffff888100437ee0 [ 303.649675][ T293] R13: 1ffff11020086fdc R14: ffff88812f630d08 R15: dffffc0000000000 [ 303.657457][ T293] FS: 0000555577e84500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 303.666293][ T293] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 303.672922][ T293] CR2: 00007f6842b398a0 CR3: 0000000123ad0000 CR4: 00000000003506b0 [ 303.680876][ T6149] EXT4-fs (loop0): Mount option "nouser_xattr" will be removed by 3.5 [ 303.680876][ T6149] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 303.680876][ T6149] [ 303.701082][ T293] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 303.708904][ T293] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 303.716792][ T293] Kernel panic - not syncing: Fatal exception [ 303.722084][ T6149] EXT4-fs (loop0): 1 orphan inode deleted [ 303.722865][ T293] Kernel Offset: disabled [ 303.732552][ T293] Rebooting in 86400 seconds..