last executing test programs: 8.786054471s ago: executing program 1 (id=1936): socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x8, 0x10001, 0x9, 0x1}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000d00)='sched_switch\x00', r4}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000740)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r5, 0x10f, 0x8a, 0x0, 0x0) dup(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x4) mkdir(&(0x7f0000000240)='./bus\x00', 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a"], 0xe8}}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r6) sendmsg$IEEE802154_LLSEC_ADD_DEV(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r7], 0x40}, 0x4, 0x700000000000000}, 0x0) mkdir(0x0, 0x0) 7.756084159s ago: executing program 1 (id=1944): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000580)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000d00)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) chdir(&(0x7f0000000000)='./file0\x00') mount$incfs(0x0, &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0x0) fchownat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) creat(&(0x7f0000000280)='./file0\x00', 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) lstat(0x0, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f00000000c0)=0x5) setuid(r4) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) 7.384949791s ago: executing program 1 (id=1946): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000406d041bc700000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) dup(r0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100)) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r4 = dup3(r3, r2, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f00000004c0)={@flat=@weak_binder, @flat=@weak_binder={0x77622a85, 0x0, 0x2}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000000), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r6, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc018620b, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r8}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) 5.974899931s ago: executing program 3 (id=1961): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000940)=@newqdisc={0x44, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x18, 0x2, [@TCA_TBF_RATE64={0xc}, @TCA_TBF_PBURST={0x8}]}}]}, 0x44}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000080)='task_rename\x00'}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{}, &(0x7f0000000640), &(0x7f0000000680)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x10, 0x4, 0x8, 0x7, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000940)={{r4}, &(0x7f00000008c0), 0x0}, 0x20) 5.224088925s ago: executing program 1 (id=1965): r0 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201010000000010580100010000000000010902"], 0x0) syz_usb_connect$cdc_ncm(0x3, 0x6e, &(0x7f0000000300)=ANY=[@ANYRES64=r0, @ANYRESHEX=r1, @ANYRESHEX=r1], 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, 0xffffffffffffffff, 0x0) socket$igmp6(0xa, 0x3, 0x2) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x4, 0x0) r3 = syz_pidfd_open(r2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x101c08a, &(0x7f0000000380)={[{@utf8no}, {@iocharset={'iocharset', 0x3d, 'iso8859-1'}}, {@fat=@fmask={'fmask', 0x3d, 0x36}}, {@uni_xlate}, {@uni_xlateno}, {@shortname_lower}, {@shortname_lower}, {@uni_xlateno}, {@utf8}, {@fat=@tz_utc}, {@shortname_win95}, {@rodir}, {@fat=@nfs_nostale_ro}, {@rodir}, {@fat=@dos1xfloppy}, {@shortname_winnt}, {}]}, 0x6, 0x2c2, &(0x7f0000000900)="$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") mount$bpf(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) chdir(&(0x7f0000000000)='./file0\x00') bpf$OBJ_PIN_PROG(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000440)='./file0\x00', r4}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) pidfd_send_signal(r3, 0x2, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="20002bbd7000fedbdf2502000000c0791d6990ddc3e2a8fb47397f93d63021b906be919720c15ac917185bcf8c6a4287a64c3f2f"], 0x14}, 0x1, 0x0, 0x0, 0xc00c}, 0x80) waitid(0x1, r2, 0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00'}, 0x10) 5.064427399s ago: executing program 3 (id=1966): execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x400) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, &(0x7f0000000380)={[{@test_dummy_encryption}, {@dioread_lock}, {@test_dummy_encryption}, {@commit={'commit', 0x3d, 0x5}}, {@orlov}, {@barrier_val={'barrier', 0x3d, 0x5}}, {@max_batch_time}, {@data_err_abort}]}, 0xd, 0x5e9, &(0x7f0000001340)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4800, 0x0, 0x2, 0x0, &(0x7f0000000000)) chdir(&(0x7f00000003c0)='./bus\x00') bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0xec35, 0x8000, 0x0, 0x24, 0xffffffffffffffff, 0x101, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x3}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000000)={'ip6gre0\x00', 0x0, 0x4, 0xa, 0x49, 0x9, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8000, 0x7, 0x5, 0x10001}}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = dup3(r4, r2, 0x44731211fdde8f44) sendmsg$nl_generic(r5, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000002080)=ANY=[@ANYBLOB="201200002f00000129bd7000fbdbdf250900000004007d007d2f0772338ab16aba823262d4f5317463f08a3805c513643531064e2e7c53a8661405a56facc2d2bbed9c5b9f0ca9050ffd8f9e653c4b70abf218883732b7d2172502541a0f4347c5909a736395afacbe1bcaacc9aa2008b64a5b079ac4ee8852e7f8cd8876839f5b2e969c2d8355ac36fa07045a09c88f5aac7b51c667cb65563419d7209cce9407146b779553ecbc9c6d7abe0508253eb57b41a8e7f342fcb6da4fee2a3610d9faca1ebbdadfd42b1912c7fd2f10954200ff334d4db1716fa4f6e7f6a80c778cb056bac5589007287037a155309b611635a6f0cf97fa7fb1f2b67f27399838587399854716134c744c74c90d89effd91f4ae095ab693a18875c0e9d197691e6723566cdbb62554324a256ca5ee542abfbf5b5878346022dadc4c6d2e4f2d0b71583b96d7e8a6878c7f5846efbc116137d123168fb1d3ed4648de44cc34811780bcab1730e13c58fac6526f1588d2abb22e1c5e923e4d8b65797420ab067699b7d4e45aa6dd5d6640399df97a47273381e0a24d182f59cfcd9edaf70b593d758a725d47224b122f45a88775be1b541ea081ff695dc3d7e183232fd279acdda414289b3643261807ca5cb7adf455b43a3be86678dfe3c71f8a2e208c077131a7f47cb78f740d4a809bae174c48c8dce61ddafe5a59b143c494388da1a1ac8a9d4aed47aff14cb11598de9b2bf54f0bceb80b543da3c7f4865ccefc44360e8345465a9115ccafa3796966cfcc3e302cc9c191ce9d3bc3c88e3d6866d32eaa4a61abc612f22a0d2941315a04a4f99ac312c4371bf9b296a4e57d70134adcb0a72f21e2da841a9492b3a5edd5596bf5c490453054a805ad1044cb2e5104d9cf0b040d86234ed3f62fd8c36b3e8884e0377ce8e55038030df2630cb0e65fcc3635c38f21ed4b52282de96e32da2568b74c55fec1a5141a3970158360b8cbbd84abef920416ae161bdea28d4ccd4fda30f639acafec89be960d10d553d23a4c50834ad7696bbc2415dece23e437e91b611eadf8bae482f5cb416458bb4ae6e150dd475eb22dea16f61fbd839a41b2df5628cc4532e18aaca7260003c214ac04f01a298992ea2968bcdabb838cdf9187370eb792940c038470a58b6f11724658ee87e68f1922d6c6abfa6ae36e04c8ea64503a3142c192a41dc4a9686af23dfd6c34485adb4b3b1747e21831f23a21d4ccad3824cfeb353aae351b2966d6a7f1d4132cb39b9c2f5f2a01428ef09af6f22ef9cac469df9c82341809b40fd86dd7b2eca9d5237c2720a9957fe264f7d51cdd986c95b2377cfd261573324d77a75aeacecd12aad8d5f656926bdbd6cfcd548f2f5e1dae62a9ec63a6441b026c785650c9ad0d900a93671cfc4e4a724c4d827483052b79b784ec7ee5ab6dfddc434359d6a81f550206cd07fa870de0300901366e7ec95d1c8aaeeed8a2e0b26cbb5ebdfa3cf4e06824b1c4aff15dbb700901b92a5612f00ac90c2fdc64e9a418e603b8de023349238010cff14039875ebb0f34d5a4c08e737c8709708fa3700fa57475019b2878f2b2df55325d870496e88d083aed53ae18ee020bcd3fe62d3671305811f493b6e4b8e4de279f81f83214d71d9ed4bd8239d8f327b93fabf5c4c9a03c8fa590d75b0aa9ac754a63b9b4d1089ac5b1e0f11d2ebdc48f12eff5afd486c30db94f7036521090dabb6008a6e29c1f7a14fd6652de82069a5d992ddaa99d5f943de541fc359f1b3b6aaf5a8af1598ecdb2935ec80da05a7f08ff30d21883b738132718c509ac196854de482344fa8faed569c56a1c403e1d7ee8c5acee8dac250082df0b32a68c9066eeae0247eb55f6a6ece06a27babfd5854530f5bd59840401c07eac2fdfebfe0048208e34472165d6bd17cc194c52334afc836d400bec7c3357ee788a73a7c7f32ae523effb9c4146cd09039e5a065635209cb09bd8a732c47f3dd880abddc751cbc6bfbea83e0fa3889fb969288a6997b1f43f8a035e032eeee0580083ed929cadafbdae2df177c0e7526aff276e55ddb556f6b13e3ce21f8c2c2c3475a0ddc0052a1784a033fc31883aa5710046ab032137af97b7b04b2db09a95b1098449294e3423ccd7972a59a7c4dd7f6ab825f07987c761a44637a3d61086e9b735d9616df606eef61b24cdc55f95c330c18d9aa155ef7e2fc85cc07f429a6072d3a9f855b792007dbd0a43afe489f8964cd0ab685b275898b5030437f673d143b70d1ff7917d7731dd8a307b770298aec4966cfe2564d18d1ec9852cbf1e992147d9402b2c8d6e767a6b4591747827784b49a8a597a082acf6d93527352eb4630af7b4f190a5b15403fe44b48a06e5b08741b0f5e4acc276864043edac20c9381acba31e0fb04ebfd803c4bc625ce00af47d360dbd5532232f8ca039d905495559ccdde24c3e84ba792935cea41a2f4043e0c4ee3c9b47ddb1288fe76df28a5027e52cfc544c87b4558509b0ea7288d9c2c3f51f12fdc409673cbb3002ce872cdf0389a92e59cffc69f71794f33e44ae4748c9571dcb8cb203d5733efcb1a5540a7deea248388c9da9dd5a27d2211d670d3043262f61305f12fbef84ac1a2913d2b67f05f34d81e6666797630003142bc3c00c4fc9aa012f6af0b1494181aeb2161875b4226a5e613cf4334a96db5fd83ec5c105d71b1b1a9b7aed259da61eb308b23857a7de8cd8a39dc516915de873388f3ce4e64dfe365805bec261bae6d0af878ad18418f4e3dc5dfe5ab9c56c1c6c65c7268b4fbb3b3c0c5bb235ecd087d2e7a71b30ac50cf64765aa93c785f4fac8fec7992e7172cec3da973a625c50c0794ab8aadfa4385ec55b12ea1d71b14b9be96213bde50e6b88473e908eaf6766c5e71a5ddc12bb68127230d9a02f5f682bdb8dfa0e0970cdf898344c027b4e48b074df36ea26cc0ae355eaee36db1ec000e9f2652e0ef3ce9d78df4bc842aa1b0377e774afc39c78a6ba2b4622b84e239c23007cd55f1c71d093ea7e9e9bb4a04242e0355b8a01d5337b611de05b1703fb0bacba4a09927befd7476e5f64e3281371a7998d798d825de2ad2af953d6b83b41b947eff7741dba8d4bb8a63a1a0815787ce615e7fdbc0888135c4f968aa671b86af3556a613ad6189be7953e7b3f6ac90f4b4fac536a6829ed02b5c651cd07b8d3ebbb35947a99a9e90d7f1db6a4760807c1f433c1b2a31f2347a8cd54d4db88a90367070cac630435d4f6b1036df5cdda6d1899e29e97d40d646e8f4eaf3a26c2ffa0fe55b432161fd12e3584fc25f9f041e259a10351557275ef067f8c44ff68a8eb67f1ee93e1dcca16ebdd9d12c0af372d99445c1f2877766455dec65a65691750606a003469ba583ea5864e5c26c5f609c515bbe359e31e62d980293ce7c4bcfe26aa4f2c776b2c2845abbed2d530203303e430418244697025e5c62c55d4adbc937aad41563d6edd8a90f2203b90ee1ffe5dea9730cd5bf9e8f64608ea65178638de9cc72d1c2b673ab7fc3dccfa81994b7e207e0ac1f9ad82b2579b8b2680fcf1461b193a73b774a0f6ece08d2341d488bfde46eb02fedc06414fa834467ca1e799520e8f453ee605c84d5d78a0ea82b534c27c58bfc23bb877c9ba78369f58dc4da36453075c2166fc6d19bbe9ddb4bdf49d19dcb9d75723304deaed931ec3651874edf88fe4c24fc6f8d70d9a384d13b6c739a6dbea3bd837798684e45d1c3bf4dc935dc90615cbcca4bd74b3452a1c588c8275336a779e1da219ea10d3ff8a931e441795f599b12230ae0c1ebee3ba319da5175592073705ac98c53a5e2f36c271a910de0cac1a30e94e13ca7471490c21676c9c50272bae2d2530b8663d3c603e8e71bf5bf7be994898e91fc0a1980e1218283b0c868e3ea307da77348b2bb76df7b569116e90bad5c94314b3fa7a83a3fdb6556d0b4b69322e99c5034948967a6b92a3a938e61e56b8152a6c549fa3a1da11eb94d570bc39f5b87c0644e3e1b9d9c00aeb183044f0b6f7d292c9b3763bbc36a5cd4155cd2283240425fd97a50359288e46f2da38f51dd7a655f2bf87528517bb94013028a22724a2717001014f59c029cb6f8bc29b4f363d4750e1fcf6feca9ca0a0b22785646b06db706454438fc09aa2924661a00c8a339c1a3c032d908df463c69d84fc193d772006b4fa16d598c57f71d16c8de4c4187d47fc67e77392e19a209732628ae09b5eb73b1b64db59408b21b4cb05ad6a0a43eb26c23b42e853886190123577d7c6205da61df74be73a9973545342223d0188380aba387f5c08f03c1ed9374456e72bade0d1477527c50a2b1532f79c4d997dbf77e501a7333dab28fead922f2c27412d3cb095333c6acef64d52cf9d6ce9f6f04a0541c3145e15ad01ddd7b30e935db94aa07781c74fe040f8da6e19601491493f7c2dc3377f7949f1b63f365d7fea9c6f516eebe7164ad940263e7a64822b126a93b6742c3c727b31c78b1308f0a57de04ac944a23effb80ce39e81d184b2b54e2902382cda675c79ad94d05a75213f38ff6836156becf3ab6fc4c3021484ca4ef21dcdacd26c4b5c1d34b56e5aad51a51893ec50364f6326ad0e2f2f9e0001fc6537cd67ebb5ce8c3c59134f83e464cf264cce512c7b1e5729d367a885d23f0c99c828e98c41ef155b9a47ced5d6b29629e10ae10529ce48caf3783da4fae622621a43969f21968b4c5ea5b962ca3625a51171d5b1bf5a84e65c2b67c51060fdde48a345548309f2c3d0fe4064c47e24d53109310c137ebe706e8288d7d6726d452afb25b50645bdf415d75b8eae665c88c4b43d93021cf32a9c5d9d05950508b3f1128dc138266e2596eaa46a4a9718bf87a68f0744a2c0327e82e59bba58f41c06fffa7f7055752f66c285f7725a5a51823ab663dd41857ebb6c76a067d0b68b848ff1a97d2d2c5d96f965739485cb8e4bdde76831e81df75c7ae2a5ab8f4e9c176e78f0d6f19abc117925fb0e64663fe4f8580a8e0c203c48e346ebae1067ecc6dab2c4e318a3533300ded88c8729136f50ee68fe135b93406e603c1dc32a8dad83fc8b35b100ab45d4038c5c2601874d739411b0e66180e9c8a00d5df0f850f7f9d56e134f7cca6e33e18812b67ee52a3fddded7e76d44f61e0fc8accf286d448d0221482257f5c4c569a485c743a4ba42b02fe02b78b5905360d94e264b5e3ff7f1e8cbf0ca9559c874ee32c1b5ade73d7d5cb775793db303d4ab5a849c6a82ac0494a4568097e57d16435504f96b9dce4feac0692fe338d6d71730b1c67814b9aa3fbddef7c4b508ec614cc72225676ba63c72bd435ac7fb7b8095ff298202681a69e373af990a657b88239bda07e0b99d68a8d3e5293de30dd8b05c9d787801d2bf5707a9c51c9358781ad71fd012dc36afb89e88681635256392db7946e11c335aa45a309048aeb90d8db2ebce69fdba3bee5c6e0eda7562139e489b4944a55f59d04d22ca94294c94621d17452f5926408c7a79402206b9b3b72f40371e03bc1fcded43078cb4e3d68b32f9197825923bff80fd4b6df26a649aa8296df840e1e1c66b67d75b59c63b0f73cb5cd015a9b14350e716c0b18d854f20a00e413c820066ba495a2bf37899297f59cd63b3a8181362d6ef2a6e54fcb5b24a1456c38346208e6d35ba9465757d9d4a8b3c525cac5ca0f99412421e8166458b1337f52cde62e0d2ea456c65b617aebeb138917f6f0ca3a61e1bf00135d117a7d107eb391dce2df35bebb3ea80330aae1fa33e65a000ec7665219333b048d152a4501475b3ccd4ec1f618bb8b9e96e59c524d8846532c2419d1b3b54649ccc5ef32ce2fe813d79187f87f0707087f48870319cafdd5600796bbdeb14eab4da09de1fe21e19592fddbc5100ef364ae032bf980c6cba3329808365fcf101a9a5b0a69d64a0c7ecf03c331f718eb69aac2f76d19c6292c837fc419ffb57242c07d4c356a573cd00c01b454aa249a04bbe15ca3e2f1b59e7c3ff3f683bbc156851ec9e5a75e4e04a6b589bb49412dac40967046716f37361a933fd992b6db39bb8eb7a733e3b28ad1746536c972041432bf37250b551e453dc1e95ee1a17b03ab409315d3d3613b58d4b8b9b3233563ada8345af47c60986ee013c22c2db1b31f0c0082000900000000000000640f871003fa40aed1c4ea912e06c3d3f3267e8e25b5bf286c377f066d44fbcca5ba76512a2466285d920dd156cf072045c06d50fc585ff06532fc1c4aa2caa5681d6a7e197e3f176648211c43723dbcb57110463b9d9322efa8eb485642a9457a09f245b0f06b881851d0f25e5741c30e642dfeb02807adc8fb931434cf41c7ce5f0377a104d5c046600cf9bf523cdfa3ee9472acb8bf44c123758617b54b3fca1d47137b6b69e1ef8bd72fd776f4548f8b9dec9709f575f566d276715cb802cef8e79843e0704fa1c7f61f32a34aed2c5b8aead264a8956a3313f94817ce4f55549869c7c65f9e02ef91884feea09228df687e413cbd0983848b88c84bf10c002a800800c700ff7f0000"], 0x1220}, 0x1, 0x0, 0x0, 0x31}, 0x6010) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={0x0, r4}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') rename(0x0, &(0x7f0000000280)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) 3.714874433s ago: executing program 3 (id=1975): syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xb, &(0x7f0000000440)=ANY=[@ANYRES8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000080)='./file0\x00', 0x10000, &(0x7f0000001900)=ANY=[], 0xfd, 0x222, &(0x7f00000016c0)="$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") ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat(0xffffffffffffffff, &(0x7f0000000100)='./file3\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000380)={[{@user_xattr}, {@nombcache}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x2}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40000}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x7e}}, {@lazytime}, {@init_itable_val={'init_itable', 0x3d, 0x5}}, {@usrquota}, {@errors_continue}]}, 0xfe, 0x55d, &(0x7f0000000980)="$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") creat(&(0x7f0000000000)='./bus\x00', 0x0) r5 = open(&(0x7f00000005c0)='./bus\x00', 0x145802, 0x0) fallocate(r5, 0x0, 0x0, 0x950e) open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x38, 0x1, 0x2, 0x301, 0x0, 0x0, {0x2}, [@CTA_EXPECT_MASTER={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}}, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x7a00, 0x0, 0x3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) connect$inet(0xffffffffffffffff, 0x0, 0x0) 3.511954781s ago: executing program 0 (id=1977): r0 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201010000000010580100010000000000010902"], 0x0) syz_usb_connect$cdc_ncm(0x3, 0x6e, &(0x7f0000000300)=ANY=[@ANYRES64=r0, @ANYRESHEX=r1, @ANYRESHEX=r1], 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, 0xffffffffffffffff, 0x0) socket$igmp6(0xa, 0x3, 0x2) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x4, 0x0) r3 = syz_pidfd_open(r2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x101c08a, &(0x7f0000000380)={[{@utf8no}, {@iocharset={'iocharset', 0x3d, 'iso8859-1'}}, {@fat=@fmask={'fmask', 0x3d, 0x36}}, {@uni_xlate}, {@uni_xlateno}, {@shortname_lower}, {@shortname_lower}, {@uni_xlateno}, {@utf8}, {@fat=@tz_utc}, {@shortname_win95}, {@rodir}, {@fat=@nfs_nostale_ro}, {@rodir}, {@fat=@dos1xfloppy}, {@shortname_winnt}, {}]}, 0x6, 0x2c2, &(0x7f0000000900)="$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") mount$bpf(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) chdir(&(0x7f0000000000)='./file0\x00') bpf$OBJ_PIN_PROG(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000440)='./file0\x00', r4}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) pidfd_send_signal(r3, 0x2, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000280)={0x28, r6, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}]}]}, 0x28}}, 0x0) waitid(0x1, r2, 0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00'}, 0x10) 3.450136756s ago: executing program 4 (id=1978): prlimit64(0x0, 0xd, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2008002, &(0x7f0000000080), 0x1, 0x53d, &(0x7f0000000a80)="$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") syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1982072, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) mkdir(&(0x7f0000000400)='./file0\x00', 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x32) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000740)='ext2\x00', &(0x7f00000006c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1a11736, &(0x7f0000000840)={[{@prjquota}, {@bsdgroups}, {@jqfmt_vfsv1}, {}, {@prjquota}, {@usrjquota}, {@nomblk_io_submit}, {@test_dummy_encryption}, {@discard}]}, 0xff, 0x47d, &(0x7f0000000fc0)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) close(r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x10, 0x3}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES16=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x90) close(r1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0xe0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x8, 0x0, 0x0}}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x1, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r3, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r3}, 0x0, 0x0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r3, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='rxrpc_propose_ack\x00', r5}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000580)='rdma.current\x00', 0x100002, 0x0) write$cgroup_type(r6, &(0x7f0000000180), 0x40010) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) 3.007588214s ago: executing program 4 (id=1979): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x679fd000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x10) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) r5 = socket$inet6(0xa, 0x80803, 0x87) connect$inet6(r5, 0x0, 0x0) write$binfmt_script(r5, &(0x7f0000001580)={'#! ', './bus'}, 0x9) 2.715514569s ago: executing program 2 (id=1980): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000580)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000d00)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) chdir(&(0x7f0000000000)='./file0\x00') mount$incfs(0x0, &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0x0) fchownat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) creat(&(0x7f0000000280)='./file0\x00', 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) lstat(&(0x7f0000000500)='./file0/bus\x00', 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, 0x0, &(0x7f00000000c0)) setuid(0x0) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) 2.644130045s ago: executing program 1 (id=1981): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) mkdir(&(0x7f0000000200)='./bus\x00', 0x0) mount$incfs(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='./bus\x00', &(0x7f00000000c0), 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./bus\x00', 0x0, 0x1160422, &(0x7f0000000280)={[{@uuid_off}, {@workdir={'workdir', 0x3d, './file1'}}, {@default_permissions}, {@redirect_dir_follow}, {@verity_off}, {@xino_auto}, {@uuid_off}], [{@subj_type={'subj_type', 0x3d, '/)&)'}}]}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f00000103c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0xfffffffffffffff5, r5, {0x7, 0x1f, 0x0, 0x10408}}, 0x50) dup2(0xffffffffffffffff, r4) fdatasync(0xffffffffffffffff) 2.607020328s ago: executing program 2 (id=1982): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 2.593193459s ago: executing program 1 (id=1983): r0 = socket$inet_tcp(0x2, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x10, &(0x7f00000014c0), 0x3, 0x793, &(0x7f0000001700)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000001c0)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x6) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x18, 0x0, 0x0, 0x0, 0x726}, 0x48) r5 = open(&(0x7f0000000380)='./file1\x00', 0x42042, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000001740)={0x9c02}, 0x8) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x4, 0x8f, &(0x7f00000002c0)=""/143}, 0x90) r7 = socket(0x10, 0x80002, 0x4) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r9, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r9, 0x400455c8, 0x0) bind$bt_hci(r8, &(0x7f0000000140), 0x6) ioctl$sock_bt_hci(r8, 0x800448d5, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x91) ptrace$poke(0x5, r1, &(0x7f00000000c0), 0x101) socket(0x10, 0x1, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x14, 0x0, &(0x7f0000000100), &(0x7f0000000180)='syzkaller\x00', 0x2, 0xed, &(0x7f00000003c0)=""/237, 0x40f00, 0x8, '\x00', 0x0, 0xe, r5, 0x8, &(0x7f0000000540)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000000580)={0x5, 0x8, 0xffffff7f, 0xc}, 0x10, 0x0, r6, 0x0, &(0x7f0000000640)=[0xffffffffffffffff, r5, r4, r4], 0x0, 0x10, 0x10}, 0x90) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) 2.491184778s ago: executing program 2 (id=1984): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002a20702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) openat$rtc(0xffffff9c, 0x0, 0x0, 0x0) getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000180), 0x20000) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x100) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/keys\x00', 0x0, 0x0) read$FUSE(r6, &(0x7f0000006140)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) lchown(&(0x7f0000000040)='./file0\x00', r7, r8) r9 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$read(0xb, r9, &(0x7f0000000200)=""/130, 0x82) keyctl$chown(0x4, r9, r1, 0xffffffffffffffff) 1.692091506s ago: executing program 4 (id=1985): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r1}, 0x10) sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x1c}, 0x1c}}, 0x6c00000000000000) 1.691843846s ago: executing program 4 (id=1986): socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x8, 0x10001, 0x9, 0x1}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000d00)='sched_switch\x00', r4}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000740)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r5, 0x10f, 0x8a, 0x0, 0x0) dup(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x4) mkdir(&(0x7f0000000240)='./bus\x00', 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a"], 0xe8}}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r6) sendmsg$IEEE802154_LLSEC_ADD_DEV(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r7, @ANYBLOB], 0x40}, 0x4, 0x700000000000000}, 0x0) mkdir(0x0, 0x0) 1.610064673s ago: executing program 2 (id=1987): sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="800037bbfa", 0x5, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0xc9d7, 0x9, 0x1}, 0x48) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000080)="290000001e00190f00003fffffffda060200000000e80001dd0008040d000d00220000000005000000", 0x29}], 0x1) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r0, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20) r4 = socket$nl_generic(0x11, 0x3, 0x10) sendmsg(r4, &(0x7f0000000640)={&(0x7f00000000c0)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x0, 0x1, 0x1, 0x1, {0xa, 0x4e21, 0x2, @private0, 0x9}}}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000000)="4b0400000000000000f46c3f0800", 0xe}, {&(0x7f0000000040)="f5ca803ac297fd8939cedea311e69ee283fe16d36e282d", 0x17}, {&(0x7f0000000780)="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", 0x1000}], 0x3, 0x0, 0x0, 0x11000000}, 0x0) 1.588782795s ago: executing program 2 (id=1988): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002a20702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) openat$rtc(0xffffff9c, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000180), 0x20000) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x100) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/keys\x00', 0x0, 0x0) read$FUSE(r6, &(0x7f0000006140)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) lchown(&(0x7f0000000040)='./file0\x00', r7, r8) r9 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$read(0xb, r9, &(0x7f0000000200)=""/130, 0x82) keyctl$chown(0x4, r9, r1, 0xffffffffffffffff) 1.553248938s ago: executing program 0 (id=1989): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f00000001c0)={[{@usrquota}, {@jqfmt_vfsold}]}, 0x2, 0x508, &(0x7f0000000c00)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r3, 0x7, 0x0, 0x0, 0x0) r5 = add_key$keyring(0x0, &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setresgid(0x0, 0x0, 0x0) keyctl$chown(0x4, r5, 0xee00, 0x0) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000000)={r5, 0x41}, &(0x7f0000000380)=ANY=[@ANYBLOB="656e633d6f61657020686173683d637279707464286d64352d67656e65726963290000000200000000000000eb60d8bce5ec3fb900"/78], &(0x7f0000000240)="f6b91c5f3fd3f2bab7121ebc9efd889b17a33b354fe0699dde21bc728eb3241afaca9b0b9ecdafdb088caf3b9f00e256b055f062015415c69684d54d0035ad2ae9", &(0x7f0000000300)) 842.925678ms ago: executing program 4 (id=1990): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000940)=@newqdisc={0x44, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x18, 0x2, [@TCA_TBF_RATE64={0xc}, @TCA_TBF_PBURST={0x8}]}}]}, 0x44}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000080)='task_rename\x00'}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{}, &(0x7f0000000640), &(0x7f0000000680)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x10, 0x4, 0x8, 0x7, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000940)={{r4}, &(0x7f00000008c0), 0x0}, 0x20) 718.289709ms ago: executing program 2 (id=1991): syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xb, &(0x7f0000000440)=ANY=[@ANYRES8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000080)='./file0\x00', 0x10000, &(0x7f0000001900)=ANY=[], 0xfd, 0x222, &(0x7f00000016c0)="$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") ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat(0xffffffffffffffff, &(0x7f0000000100)='./file3\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000380)={[{@user_xattr}, {@nombcache}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x2}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40000}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x7e}}, {@lazytime}, {@init_itable_val={'init_itable', 0x3d, 0x5}}, {@usrquota}, {@errors_continue}]}, 0xfe, 0x55d, &(0x7f0000000980)="$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") creat(&(0x7f0000000000)='./bus\x00', 0x0) r5 = open(&(0x7f00000005c0)='./bus\x00', 0x145802, 0x0) fallocate(r5, 0x0, 0x0, 0x950e) open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x7a00, 0x0, 0x3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) connect$inet(0xffffffffffffffff, 0x0, 0x0) 649.607195ms ago: executing program 0 (id=1992): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000580)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000d00)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) chdir(&(0x7f0000000000)='./file0\x00') mount$incfs(0x0, &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0x0) fchownat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) creat(&(0x7f0000000280)='./file0\x00', 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) lstat(&(0x7f0000000500)='./file0/bus\x00', 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, 0x0, &(0x7f00000000c0)) setuid(0x0) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) 649.112345ms ago: executing program 0 (id=1993): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) mkdir(&(0x7f0000000200)='./bus\x00', 0x0) mount$incfs(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='./bus\x00', &(0x7f00000000c0), 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./bus\x00', 0x0, 0x1160422, &(0x7f0000000280)={[{@uuid_off}, {@workdir={'workdir', 0x3d, './file1'}}, {@default_permissions}, {@redirect_dir_follow}, {@verity_off}, {@xino_auto}, {@uuid_off}], [{@subj_type={'subj_type', 0x3d, '/)&)'}}]}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f00000103c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0xfffffffffffffff5, r5, {0x7, 0x1f, 0x0, 0x10408}}, 0x50) dup2(0xffffffffffffffff, r4) fdatasync(0xffffffffffffffff) 584.11117ms ago: executing program 0 (id=1994): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 572.359471ms ago: executing program 0 (id=1995): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000300)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000280), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r3, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0xc0189436, &(0x7f0000000140)) kcmp$KCMP_EPOLL_TFD(r0, r0, 0x7, r2, &(0x7f0000000340)={r3, 0xffffffffffffffff, 0x81}) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x2000040, &(0x7f00000001c0)={[{@errors_remount}, {@nodiscard}, {@auto_da_alloc}, {@init_itable}, {@stripe={'stripe', 0x3d, 0x7b}}, {@orlov}, {@sysvgroups}, {@delalloc}, {@usrquota}]}, 0x10, 0x4d2, &(0x7f00000002c0)="$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") openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "7f12ddc1517600"}) r5 = syz_open_pts(r4, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r6, 0x8933, &(0x7f0000000080)={'wg0\x00'}) ioctl$TIOCVHANGUP(r5, 0x5437, 0x0) poll(&(0x7f0000000000), 0x57, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0xb, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0x7}]}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x2e, 0x5f]}}, &(0x7f0000000440)=""/224, 0x37, 0xe0, 0x1}, 0x20) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='smaps_rollup\x00') socket$packet(0x11, 0x3, 0x300) 273.620257ms ago: executing program 3 (id=1996): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f0000000580)='cgroup.procs\x00', 0x2, 0x0) r7 = syz_clone(0x4080, 0x0, 0x0, 0x0, 0x0, 0x0) write$cgroup_pid(r6, &(0x7f00000007c0)=r7, 0x12) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000180)="0b03feff4f00020002004788aa96a13bb1000011000088ca1a00", 0x1fffc, 0x0, &(0x7f0000000140)={0x11, 0x0, r8}, 0x14) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r3, 0xc0c89425, &(0x7f0000000340)={"80ebeddc35e519bb3901e215bfa81025", 0x0, 0x0, {0xfffffffffffffff9, 0x5c}, {0x4, 0xffffffff}, 0x6, [0x5, 0x738, 0x80000000, 0x1, 0x3, 0x0, 0x9, 0x2, 0xe2fb, 0x5, 0x400, 0x0, 0x3, 0x5, 0x7, 0x2]}) ioctl$BTRFS_IOC_WAIT_SYNC(r1, 0x40089416, &(0x7f0000000080)=r9) r10 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r11) sendmmsg$inet(r0, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000000100)="c7ee341b8127e4367f1de4c38f4ba163a3b2f5843e3d2189acc6b6ba75c700e7631251c3cedff5c2fe253aafc7af521c36f1d78b4a5d8260314edc6620e97c1dda762f7a82e24f41b9a41310fa4869a09886dd1083367675b96a2a8bbcf90734d48de12c599fe1687b598aecdd8fe70e70121a8acbb2c9cf38fe24a596049eab947a4ddf8381da09b865cf2de45fb0cd0574cb84a6a27c0c37f08d8b4f0049e1e226952ffd0fd4952fafdc00a4c9e1d9ecbf5b4a7a0bbc26", 0x1}, {&(0x7f0000002800)="cf", 0x1}, {&(0x7f0000002980)='|', 0x1}, {&(0x7f00000029c0)="f5", 0x1}, {&(0x7f0000002a00)="fe", 0xfffffc5d}, {&(0x7f0000002a80)="f0", 0x1}, {&(0x7f00000028c0)='-', 0x1}], 0x7}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000002cc0)="80", 0x1}, {&(0x7f0000000000)="054c508cb2547e1302c6c5e095d2b2ad93bd99cfcdfd48ff683372c51b476bcbd3b6abbcbe4c6c8991a39aebb0ff0ebd825f029f79de6300000000", 0x1}, {&(0x7f0000002e40)='\x00', 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000003040)=[{&(0x7f0000000240)="c06940a8686be6575e44b48667d8738b70d318ea861eaf18e3737d0925cb82efc174e436b30093721a192cc28e9c6dce7850bf1dd7ea90d902e8319e0d2c5589a7f5954c7803a3b7d5075bbe9248254b4a5eaf62e587e301d70f374dfadfbc88b140f5537a4becfd7754adbd18f22a0130dc032843312bdf7f0018c979c5d78bd4dfe21fc6bfc9e9a1ac864490900778f89c23f989647b6ecd5dba55bb2d30504f56ef9aad0bf5b7a7a1b3e8c3e246164581a48b941b135f7a94287fa4d977b9b1baed41aedfadc4ee"}], 0x1}}, {{0x0, 0x0, &(0x7f0000003640)=[{&(0x7f0000003200)="8c", 0x1}, {&(0x7f0000003300)="bf", 0x1}, {&(0x7f0000003400)="12", 0x1}, {&(0x7f00000034c0)="8f", 0x1}, {&(0x7f00000035c0)='_'}, {&(0x7f0000003600)="14", 0x1}], 0x6}}], 0x2, 0xf000000) 8.088529ms ago: executing program 3 (id=1997): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000340)={[{@resuid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x84}}, {@resuid}, {@jqfmt_vfsold}, {@resuid}, {@jqfmt_vfsold}, {@barrier_val={'barrier', 0x3d, 0x648}}, {@data_err_abort}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000090a000000000000000000000000000008000a40000000000900020073797a32"], 0x50}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'gre0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x32, 0x4, 0x0, 0x2, 0xc8, 0x67, 0x0, 0x0, 0x0, 0x0, @dev, @remote, {[@timestamp={0x44, 0x18, 0x0, 0x0, 0x9, [0x401, 0x5, 0x0, 0x0, 0x0]}, @timestamp_prespec={0x44, 0x44, 0xc0, 0x3, 0x1, [{@private=0xa010102}, {@multicast1}, {@remote, 0x8000}, {@dev={0xac, 0x14, 0x14, 0x35}, 0x65c}, {@rand_addr=0x64010100}, {@empty}, {@multicast1, 0xffd200}, {@private=0xa010100, 0x7}]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x8, [{@loopback}, {@remote}, {@multicast2, 0xb}, {@private=0xa010100}, {@rand_addr=0x64010101}, {@broadcast, 0x52b1}, {@multicast2}]}, @noop, @noop, @noop, @end, @rr={0x7, 0x17, 0x0, [@dev, @remote, @multicast1, @private=0xa010102, @remote]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/anycast6\x00') ioctl$TCSETS(r1, 0x5402, &(0x7f0000000180)={0x3, 0x4, 0x81, 0x4, 0xd, "bf8e3017594e897587abba4eafe3042d96f2bc"}) (async) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r3, 0x0) (async) r4 = dup(r2) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) (async) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) (async) write$binfmt_elf32(r1, &(0x7f0000001200)={{0x7f, 0x45, 0x4c, 0x46, 0xf0, 0x5, 0x7, 0xe9, 0xffff, 0x2, 0x3, 0x4, 0xfe, 0x38, 0x47, 0x7, 0x2, 0x20, 0x1, 0x3, 0x400, 0x101}, [{0x2, 0x7, 0x7fff, 0x0, 0x7f, 0x6, 0x7fff, 0x9}, {0x60000000, 0x0, 0x2, 0x9, 0x5, 0x7, 0xa, 0x9}], "e44bb9875de77e12cc32234247546a785aece4225c6dd7381f4b77d3f480508cbfa3e3197c3720537108dbbf454df3f96ad6455e8b549c7cfc925480b05b687cf6bc1480153a714b7e80f065f426925501b748293b643b3c59fffdcda6c737bbe02f55844a0d14e8818c345e001dae3464ce263760d0783e5b4a753ce7e0d7f2ea23ff90ecb6db26430e327943120a9d767bc8e72e4a7b5163b812ca0d7e3888d02bd4b41da3b1f7a5c02d10e9c46e0d9ce2d337d7ef94a6cbd9c56a939e189f95ffc63d16fff4969e0426a7a48547dac80a8d87374d6c90166fca9d24e566be005f", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xa5a) (async) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) (async, rerun: 32) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) ioctl$KVM_NMI(r5, 0xae9a) ioctl$KVM_RUN(r5, 0xae80, 0x0) 7.760199ms ago: executing program 3 (id=1998): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x5, 0x2, 0x1000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000000000000000000000000000d797f4ff1000000002070900ff7f0000186100000506000000000000fc76fe7d9500000000000000950000000000b2d002cc14a589c4916cd4828b5a3f9a5db691f09e850dbe393605208e0a93bf528c9affcf844660808a0ea1ee5d45a5e807540a1296203780c04dd0295d71dc8e1997a608824f13fd181bbc09d6969e7e87cda84c1aad"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1f, 0x401, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000040)='jbd2_handle_stats\x00', r3}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f0000000340)='task\x00') fchdir(r4) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r5 = inotify_init1(0x0) fcntl$setown(r5, 0x8, 0xffffffffffffffff) fcntl$getownex(r5, 0x10, &(0x7f0000000140)={0x0, 0x0}) r7 = syz_open_procfs(r6, &(0x7f0000000600)='fd/4\x00') writev(r7, &(0x7f0000000300)=[{&(0x7f00000004c0)="e5cfa6fcce1aea665aa3882fe47d345043804d6b8d997d3ed4474054a6aef90c0337f7f7ee8eeb0779531f02e9601df4e558d77d0fd3b54dfcc784adfdae13669978f7cbf49e589d98494c01853e729e125821f2811a886c5641d35cf05ef122850fe7ea461d6abb51659d2ffbc87c68f26f3aad9d6fe077fee1bc1edb4e475f05f177f626fec9626f676ccb76bd98f4d9bc5f7debc6c5e9cd563a08b07436a12f54e8ed53684196f4a7e7c7cdfcc76ad03a27105b0f", 0xb6}, {&(0x7f0000000780)="631f3252b27728190a9885bd054ccfed0a1419bee8378afef0d4284554854c02d4c429a4e7f30a066e7972a4dc4fb1db38afed166865e268448fd2908eb742cd99f37a192760341d8fb2df25ad066ad94282804b21192f926c50b2ef8bba2dc2e50b0cc4d3336a846ed9b351a1a577b4", 0x70}, {&(0x7f0000000200)="48af4fe622c7adc94c84b850f660eb895ddf469be4692ff1d345f4ef04e3b80f0be4d919c9411a60854cc085b0e31b748312076c8cfebfce1f", 0x39}, {&(0x7f0000000800)="3acf0b2209e49b4e16c74ba7191915b673bc692b7d0ae92c6ee270b75954f296c0f8ea5840a4791d296c8b22f432911324da08db2407f5292d207cfe934fb395c3428d28dc86c70bc603bb7791c3ce822e7d13f514654cf9005ea6828edbc0e63329f1c55e2abe9ff4dd5c8c90dc2af549c609ba06", 0x75}], 0x4) ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, &(0x7f0000000180)=0x80000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r8, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x3, &(0x7f00000002c0)=0x0) io_submit(r9, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r8, &(0x7f0000000040)="0a00ffff0000", 0x6}]) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000141007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r10}, 0x10) socket$nl_generic(0x11, 0x3, 0x10) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x5, 0x2, 0x7fe2, 0x1}, 0x48) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r12}, 0x10) r13 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r13, 0x400454ca, &(0x7f0000000240)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) 0s ago: executing program 4 (id=1999): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b7030000000000de850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x8, [{0x0, 0x3, 0x8000000}]}]}}, 0x0, 0x32}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x120, 0x120, 0x3, [@struct={0xc, 0x8, 0x0, 0x4, 0x0, 0x80000000, [{0x4, 0x3, 0x2}, {0xb, 0x3, 0x7961}, {0x5, 0x4, 0x5}, {0x3, 0x0, 0x5}, {0x7, 0x0, 0xffffff00}, {0x0, 0x3, 0x10000}, {0x10, 0x4}, {0x7, 0x4, 0x5}]}, @func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0x10, 0x1}, {0x1, 0x3}, {0xc}]}, @struct={0x0, 0x2, 0x0, 0x4, 0x1, 0x10, [{0xe, 0x3, 0x1}, {0x0, 0x2, 0x4}]}, @struct={0x2, 0x6, 0x0, 0x4, 0x1, 0x2, [{0xc, 0x0, 0xfff}, {0x4, 0x5, 0xfffffff9}, {0xe, 0x1, 0x10}, {0xd, 0x5, 0x2}, {0xc}, {0x9, 0x4, 0x7f7}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x1, 0x180}}]}, {0x0, [0x30]}}, &(0x7f0000000200)=""/245, 0x13b, 0xf5, 0x0, 0x2}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000000000)={&(0x7f0000000300)=@nameseq={0x1e, 0x1, 0x1, {0x0, 0x0, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0xfffffffffffffee0}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) fcntl$lock(r2, 0x25, &(0x7f0000000000)={0x1}) fcntl$lock(r2, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x4004}) fcntl$lock(r2, 0x26, &(0x7f0000000040)={0x0, 0x2}) r3 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000400)={'ip6tnl0\x00', 0x0}) bind$packet(r3, &(0x7f0000000080)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$sock_inet6_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000140)={@remote, 0x1c, r4}) kernel console output (not intermixed with test programs): 27][ T6256] ext4 filesystem being mounted at /42/file1 supports timestamps until 2038 (0x7fffffff) [ 303.942416][ T6256] EXT4-fs error (device loop2): ext4_ext_map_blocks:4155: inode #16: comm syz.2.1562: bad extent address lblock: 0, depth: 1 pblock 0 [ 303.956378][ T6256] EXT4-fs (loop2): Remounting filesystem read-only [ 303.975656][ T5475] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 3: comm syz-executor: path /42/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=4096 fake=0 [ 303.979494][ T1291] usb 5-1: config 1 has an invalid descriptor of length 95, skipping remainder of the config [ 304.006383][ T1291] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 304.319450][ T1291] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 304.328339][ T1291] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 304.336219][ T1291] usb 5-1: SerialNumber: syz [ 304.454401][ T6265] bridge0: port 1(bridge_slave_0) entered blocking state [ 304.461310][ T6265] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.468457][ T6265] device bridge_slave_0 entered promiscuous mode [ 304.475325][ T6265] bridge0: port 2(bridge_slave_1) entered blocking state [ 304.482210][ T6265] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.489322][ T6265] device bridge_slave_1 entered promiscuous mode [ 304.526563][ T6265] bridge0: port 2(bridge_slave_1) entered blocking state [ 304.533428][ T6265] bridge0: port 2(bridge_slave_1) entered forwarding state [ 304.540536][ T6265] bridge0: port 1(bridge_slave_0) entered blocking state [ 304.547290][ T6265] bridge0: port 1(bridge_slave_0) entered forwarding state [ 304.566591][ T487] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 304.574202][ T487] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.581788][ T487] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.590390][ T1291] usb 5-1: 0:2 : does not exist [ 304.591773][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 304.603020][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 304.609859][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 304.619646][ T562] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 304.627625][ T562] bridge0: port 2(bridge_slave_1) entered blocking state [ 304.634468][ T562] bridge0: port 2(bridge_slave_1) entered forwarding state [ 304.649893][ T562] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 304.657753][ T562] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 304.670230][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 304.681886][ T562] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 304.690331][ T562] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 304.697517][ T562] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 304.706171][ T6265] device veth0_vlan entered promiscuous mode [ 304.717231][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 304.750954][ T6265] device veth1_macvtap entered promiscuous mode [ 304.762148][ T487] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 304.770794][ T487] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 304.793223][ T562] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 304.801691][ T562] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 304.841144][ T6239] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue [ 304.851680][ T6239] ext4 filesystem being mounted at /23/file0 supports timestamps until 2038 (0x7fffffff) [ 305.159628][ T15] uclogic 0003:256C:006D.002F: failed retrieving Huion firmware version: -71 [ 305.168283][ T15] uclogic 0003:256C:006D.002F: failed probing parameters: -71 [ 305.176118][ T15] uclogic: probe of 0003:256C:006D.002F failed with error -71 [ 305.181002][ T6282] device syzkaller0 entered promiscuous mode [ 305.187662][ T15] usb 1-1: USB disconnect, device number 36 [ 305.271369][ T24] audit: type=1326 audit(1725032182.890:2443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6283 comm="syz.0.1570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82db974ef9 code=0x7ffc0000 [ 305.294985][ T24] audit: type=1326 audit(1725032182.890:2444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6283 comm="syz.0.1570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82db974ef9 code=0x7ffc0000 [ 305.319206][ T24] audit: type=1326 audit(1725032182.890:2445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6283 comm="syz.0.1570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f82db974ef9 code=0x7ffc0000 [ 305.319443][ T487] usb 3-1: new full-speed USB device number 46 using dummy_hcd [ 305.350091][ T24] audit: type=1326 audit(1725032182.890:2446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6283 comm="syz.0.1570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82db974ef9 code=0x7ffc0000 [ 305.373372][ T24] audit: type=1326 audit(1725032182.890:2447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6283 comm="syz.0.1570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f82db974ef9 code=0x7ffc0000 [ 305.396714][ T24] audit: type=1326 audit(1725032182.890:2448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6283 comm="syz.0.1570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f82db974f33 code=0x7ffc0000 [ 305.420195][ T24] audit: type=1326 audit(1725032182.890:2449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6283 comm="syz.0.1570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f82db9739df code=0x7ffc0000 [ 305.443975][ T24] audit: type=1326 audit(1725032182.890:2450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6283 comm="syz.0.1570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f82db974f87 code=0x7ffc0000 [ 305.444497][ T53] usb 5-1: USB disconnect, device number 36 [ 305.474663][ T24] audit: type=1326 audit(1725032182.890:2451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6283 comm="syz.0.1570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f82db973890 code=0x7ffc0000 [ 305.512371][ T6286] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 305.713860][ T6291] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 305.721921][ T6291] EXT4-fs (loop3): 1 truncate cleaned up [ 305.727413][ T6291] EXT4-fs (loop3): mounted filesystem without journal. Opts: journal_dev=0x0000000000000009,noblock_validity,usrquota,journal_ioprio=0x0000000000000002,debug_want_extra_isize=0x0000000000000008,jqfmt=vfsold,usrjquota=min_batch_time=0x0000000000000a9f,nodiscard,,errors=continue [ 305.757609][ T6291] fuse: Bad value for 'fd' [ 305.769476][ T487] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 305.780569][ T487] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 253 [ 305.793735][ T487] usb 3-1: New USB device found, idVendor=17ef, idProduct=6085, bcdDevice= 0.00 [ 305.802619][ T487] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.811648][ T487] usb 3-1: config 0 descriptor?? [ 305.819858][ T1477] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 305.850034][ T487] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 305.994492][ T6295] F2FS-fs (loop3): Invalid log sectorsize (8454153) [ 306.001028][ T6295] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 306.014719][ T6295] F2FS-fs (loop3): invalid crc value [ 306.020066][ T6295] F2FS-fs (loop3): invalid crc value [ 306.025239][ T6295] F2FS-fs (loop3): Failed to get valid F2FS checkpoint [ 306.060187][ T1477] usb 1-1: Using ep0 maxpacket: 16 [ 306.189576][ T1477] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 306.199852][ T1477] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 306.299532][ T1271] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 306.320899][ T6276] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 306.383910][ T6276] EXT4-fs (loop2): 1 truncate cleaned up [ 306.389635][ T6276] EXT4-fs (loop2): mounted filesystem without journal. Opts: block_validity,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000068,minixdf,journal_dev=0x0000000000000004,quota,,errors=continue [ 306.454005][ T1477] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 306.463507][ T1477] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.471510][ T1477] usb 1-1: Product: syz [ 306.475476][ T1477] usb 1-1: Manufacturer: syz [ 306.479951][ T1477] usb 1-1: SerialNumber: syz [ 306.570544][ T6308] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1574'. [ 306.596445][ T6308] fuse: Bad value for 'user_id' [ 306.699845][ T1271] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 306.723351][ T1271] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 306.805158][ T1271] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.815751][ T1271] usb 5-1: config 0 descriptor?? [ 307.409841][ T1271] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 307.769702][ T1271] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 308.766430][ T1291] usb 3-1: USB disconnect, device number 46 [ 308.868773][ T24] kauditd_printk_skb: 26 callbacks suppressed [ 308.868787][ T24] audit: type=1326 audit(1725032186.480:2478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6328 comm="syz.3.1582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74df10cef9 code=0x7ffc0000 [ 308.898667][ T24] audit: type=1326 audit(1725032186.480:2479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6328 comm="syz.3.1582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74df10cef9 code=0x7ffc0000 [ 308.946182][ T24] audit: type=1326 audit(1725032186.490:2480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6328 comm="syz.3.1582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f74df10cef9 code=0x7ffc0000 [ 308.971186][ T24] audit: type=1326 audit(1725032186.490:2481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6328 comm="syz.3.1582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74df10cef9 code=0x7ffc0000 [ 309.000473][ T24] audit: type=1326 audit(1725032186.490:2482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6328 comm="syz.3.1582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74df10cef9 code=0x7ffc0000 [ 309.042623][ T24] audit: type=1326 audit(1725032186.490:2483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6328 comm="syz.3.1582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f74df10cef9 code=0x7ffc0000 [ 309.066146][ T1477] usb 1-1: 0:2 : does not exist [ 309.070952][ T1271] usb 2-1: Using ep0 maxpacket: 16 [ 309.078942][ T1477] usb 1-1: USB disconnect, device number 37 [ 309.105925][ T6329] EXT4-fs error (device loop3): ext4_read_inode_bitmap:140: comm syz.3.1582: Invalid inode bitmap blk 4 in block_group 0 [ 309.120694][ T24] audit: type=1326 audit(1725032186.490:2484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6328 comm="syz.3.1582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f74df10cf33 code=0x7ffc0000 [ 309.143884][ T6329] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,resuid=0x0000000000000000,data_err=abort,noload,nobarrier,lazytime,,errors=continue [ 309.170897][ T24] audit: type=1326 audit(1725032186.490:2485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6328 comm="syz.3.1582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f74df10b9df code=0x7ffc0000 [ 309.194575][ T6329] EXT4-fs error (device loop3): ext4_read_inode_bitmap:140: comm syz.3.1582: Invalid inode bitmap blk 4 in block_group 0 [ 309.207192][ T24] audit: type=1326 audit(1725032186.490:2486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6328 comm="syz.3.1582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f74df10cf87 code=0x7ffc0000 [ 309.217342][ T6329] EXT4-fs error (device loop3) in ext4_free_inode:360: Corrupt filesystem [ 309.231166][ T1271] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 309.248831][ T1271] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 309.249028][ T24] audit: type=1326 audit(1725032186.510:2487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6328 comm="syz.3.1582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f74df10b890 code=0x7ffc0000 [ 309.437827][ T1271] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 309.447122][ T1271] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.454999][ T1271] usb 2-1: Product: syz [ 309.458914][ T1271] usb 2-1: Manufacturer: syz [ 309.463370][ T1271] usb 2-1: SerialNumber: syz [ 309.757925][ T1477] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 309.774464][ T1291] usb 5-1: USB disconnect, device number 37 [ 309.780614][ T15] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 310.497403][ T1477] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 310.508805][ T6370] device syzkaller0 entered promiscuous mode [ 310.517549][ T1477] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 310.527484][ T1477] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.590368][ T1477] usb 1-1: config 0 descriptor?? [ 310.769425][ T15] usb 4-1: config 1 has an invalid descriptor of length 95, skipping remainder of the config [ 310.781460][ T15] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 310.840218][ T6377] EXT4-fs (loop4): Ignoring removed bh option [ 310.847474][ T6377] EXT4-fs error (device loop4): __ext4_iget:4958: inode #12: block 2: comm syz.4.1596: invalid block [ 310.858477][ T6377] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.1596: couldn't read orphan inode 12 (err -117) [ 310.870482][ T6377] EXT4-fs (loop4): mounted filesystem without journal. Opts: bh,,errors=continue [ 310.899451][ T6327] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 310.899526][ T15] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 310.915981][ T15] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 310.923919][ T15] usb 4-1: SerialNumber: syz [ 311.190379][ T15] usb 4-1: 0:2 : does not exist [ 311.238406][ T1477] keytouch 0003:0926:3333.0030: fixing up Keytouch IEC report descriptor [ 311.247917][ T1477] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0030/input/input62 [ 311.279392][ T6327] usb 3-1: Using ep0 maxpacket: 16 [ 311.322359][ T1477] keytouch 0003:0926:3333.0030: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 311.336573][ T1477] usb 1-1: USB disconnect, device number 38 [ 311.399465][ T6327] usb 3-1: config 0 has no interfaces? [ 311.404803][ T6327] usb 3-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 311.441615][ T6327] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.450154][ T6327] usb 3-1: config 0 descriptor?? [ 311.483326][ T6346] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue [ 311.496204][ T6346] ext4 filesystem being mounted at /14/file0 supports timestamps until 2038 (0x7fffffff) [ 311.500397][ T6384] EXT4-fs error (device loop1): ext4_read_inode_bitmap:140: comm syz.1.1597: Invalid inode bitmap blk 4 in block_group 0 [ 311.518684][ T6384] EXT4-fs (loop1): mounted filesystem without journal. Opts: noblock_validity,resuid=0x0000000000000000,data_err=abort,noload,nobarrier,lazytime,,errors=continue [ 311.707078][ T6372] udc-core: couldn't find an available UDC or it's busy [ 311.713935][ T6372] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 311.759659][ T1271] usb 2-1: 0:2 : does not exist [ 311.765964][ T1271] usb 2-1: USB disconnect, device number 38 [ 311.781786][ T6394] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1599'. [ 311.888582][ T6397] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 311.988545][ T1477] usb 4-1: USB disconnect, device number 48 [ 312.013254][ T317] udevd[317]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 312.349428][ T1271] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 312.641332][ T6410] device syzkaller0 entered promiscuous mode [ 312.672089][ T5] usb 3-1: USB disconnect, device number 47 [ 312.959509][ T1271] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 313.032928][ T1271] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 313.127777][ T1271] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.167182][ T6417] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 313.176358][ T6417] ext4 filesystem being mounted at /7/mnt supports timestamps until 2038 (0x7fffffff) [ 313.253679][ T1271] usb 1-1: config 0 descriptor?? [ 313.290850][ T1271] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 313.323004][ T6430] EXT4-fs error (device loop3): ext4_read_inode_bitmap:140: comm syz.3.1609: Invalid inode bitmap blk 4 in block_group 0 [ 313.335751][ T6430] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,resuid=0x0000000000000000,data_err=abort,noload,nobarrier,lazytime,,errors=continue [ 313.563085][ T1291] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 313.989775][ T15] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 314.050130][ T1291] usb 5-1: Using ep0 maxpacket: 16 [ 314.199965][ T1291] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 314.279692][ T15] usb 2-1: Using ep0 maxpacket: 16 [ 314.440882][ T15] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 314.455718][ T15] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 314.477318][ T15] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 314.497593][ T15] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 314.513129][ T15] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.560854][ T1291] usb 5-1: New USB device found, idVendor=0b57, idProduct=2bbd, bcdDevice=e7.cc [ 314.583327][ T15] usb 2-1: config 0 descriptor?? [ 314.588792][ T1291] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.612355][ T1291] usb 5-1: Product: syz [ 314.628737][ T1291] usb 5-1: Manufacturer: syz [ 314.643136][ T1291] usb 5-1: SerialNumber: syz [ 314.828956][ T1291] usb 5-1: config 0 descriptor?? [ 314.834403][ T24] kauditd_printk_skb: 145 callbacks suppressed [ 314.834496][ T24] audit: type=1326 audit(1725032192.450:2633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6444 comm="syz.2.1612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4dec391ef9 code=0x7ffc0000 [ 314.863877][ T24] audit: type=1326 audit(1725032192.450:2634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6444 comm="syz.2.1612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4dec391ef9 code=0x7ffc0000 [ 314.887814][ T24] audit: type=1326 audit(1725032192.450:2635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6444 comm="syz.2.1612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f4dec391ef9 code=0x7ffc0000 [ 314.910316][ T1291] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 314.919420][ T24] audit: type=1326 audit(1725032192.450:2636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6444 comm="syz.2.1612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f4dec391f33 code=0x7ffc0000 [ 314.942684][ T24] audit: type=1326 audit(1725032192.460:2637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6444 comm="syz.2.1612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f4dec3909df code=0x7ffc0000 [ 314.966002][ T24] audit: type=1326 audit(1725032192.460:2638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6444 comm="syz.2.1612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f4dec391f87 code=0x7ffc0000 [ 314.989740][ T24] audit: type=1326 audit(1725032192.460:2639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6444 comm="syz.2.1612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4dec390890 code=0x7ffc0000 [ 315.100634][ T24] audit: type=1326 audit(1725032192.460:2640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6444 comm="syz.2.1612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4dec391afb code=0x7ffc0000 [ 315.127413][ T1291] usb 5-1: USB disconnect, device number 38 [ 315.134215][ T24] audit: type=1326 audit(1725032192.460:2641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6444 comm="syz.2.1612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f4dec390b8a code=0x7ffc0000 [ 315.266790][ T464] usb 1-1: USB disconnect, device number 39 [ 315.542562][ T15] microsoft 0003:045E:07DA.0031: unknown main item tag 0x0 [ 315.550274][ T15] microsoft 0003:045E:07DA.0031: unknown main item tag 0x0 [ 315.557339][ T15] microsoft 0003:045E:07DA.0031: unknown main item tag 0x0 [ 315.564911][ T15] microsoft 0003:045E:07DA.0031: unknown main item tag 0x0 [ 315.574165][ T15] microsoft 0003:045E:07DA.0031: unknown main item tag 0x0 [ 315.581262][ T15] microsoft 0003:045E:07DA.0031: unknown main item tag 0x0 [ 315.588278][ T15] microsoft 0003:045E:07DA.0031: unknown main item tag 0x0 [ 315.595322][ T15] microsoft 0003:045E:07DA.0031: unknown main item tag 0x0 [ 315.602342][ T15] microsoft 0003:045E:07DA.0031: unknown main item tag 0x0 [ 315.609477][ T15] microsoft 0003:045E:07DA.0031: unknown main item tag 0x0 [ 315.619491][ T24] audit: type=1326 audit(1725032192.460:2642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6444 comm="syz.2.1612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f4dec390b8a code=0x7ffc0000 [ 315.628129][ T15] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0031/input/input64 [ 315.723105][ T15] microsoft 0003:045E:07DA.0031: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 315.740022][ T6454] syz.2.1614[6454] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 315.740094][ T6454] syz.2.1614[6454] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 315.757275][ T15] usb 2-1: USB disconnect, device number 39 [ 315.913916][ T6462] device syzkaller0 entered promiscuous mode [ 316.401101][ T6471] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 316.418709][ T6471] ext4 filesystem being mounted at /7/bus supports timestamps until 2038 (0x7fffffff) [ 316.934352][ T6494] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=6494 comm=syz.2.1626 [ 317.003755][ T6500] erofs: (device loop4): mounted with root inode @ nid 36. [ 317.100021][ T6509] EXT4-fs error (device loop4): ext4_read_inode_bitmap:140: comm syz.4.1630: Invalid inode bitmap blk 4 in block_group 0 [ 317.112717][ T6509] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,resuid=0x0000000000000000,data_err=abort,noload,nobarrier,lazytime,,errors=continue [ 317.233482][ T15] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 317.244210][ T487] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 317.341179][ T6521] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 317.361411][ T6521] EXT4-fs (loop1): mounted filesystem without journal. Opts: usrquota,jqfmt=vfsold,,errors=continue [ 317.372339][ T6521] ext4 filesystem being mounted at /8/file0 supports timestamps until 2038 (0x7fffffff) [ 318.132436][ T487] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 318.143464][ T15] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 318.164290][ T15] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 318.175220][ T487] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 318.186433][ T15] usb 3-1: New USB device found, idVendor=056a, idProduct=00d0, bcdDevice= 0.00 [ 318.195454][ T487] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 318.208354][ T15] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.216438][ T487] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 318.235566][ T487] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.248194][ T15] usb 3-1: config 0 descriptor?? [ 318.254020][ T487] usb 4-1: config 0 descriptor?? [ 318.269522][ T6498] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 318.291800][ T6539] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 318.300884][ T6539] ext4 filesystem being mounted at /42/file0 supports timestamps until 2038 (0x7fffffff) [ 318.447410][ T1477] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 318.740051][ T6487] EXT4-fs (loop3): Ignoring removed bh option [ 318.747805][ T6487] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 318.761878][ T6487] EXT4-fs error (device loop3): __ext4_iget:4958: inode #11: block 1: comm syz.3.1623: invalid block [ 318.773137][ T6487] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.1623: couldn't read orphan inode 11 (err -117) [ 318.785298][ T6487] EXT4-fs (loop3): mounted filesystem without journal. Opts: noauto_da_alloc,user_xattr,noinit_itable,stripe=0x0000000000000004,nodelalloc,jqfmt=vfsv0,dioread_nolock,bh,nodiscard,,errors=continue [ 318.861361][ T15] wacom 0003:056A:00D0.0032: unknown main item tag 0x0 [ 318.869575][ T1477] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 318.871459][ T15] wacom 0003:056A:00D0.0032: Unknown device_type for 'HID 056a:00d0'. Assuming pen. [ 318.889867][ T1477] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 318.909909][ T15] wacom 0003:056A:00D0.0032: hidraw0: USB HID v0.00 Device [HID 056a:00d0] on usb-dummy_hcd.2-1/input0 [ 318.918882][ T1477] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 318.932748][ T15] input: Wacom Bamboo 2FG Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:056A:00D0.0032/input/input65 [ 318.973150][ T1477] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 319.001374][ T1477] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.030646][ T1477] usb 2-1: config 0 descriptor?? [ 319.084570][ T20] usb 3-1: USB disconnect, device number 48 [ 319.119401][ T487] usbhid 4-1:0.0: can't add hid device: -71 [ 319.125396][ T487] usbhid: probe of 4-1:0.0 failed with error -71 [ 319.153626][ T487] usb 4-1: USB disconnect, device number 49 [ 319.410763][ T6565] EXT4-fs (loop4): Journaled quota options ignored when QUOTA feature is enabled [ 319.419773][ T6565] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 319.433242][ T6565] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,nojournal_checksum,errors=continue,grpjquota=./file0,errors=continue,sysvgroups,jqfmt=vfsv0,nombcache, [ 319.452496][ T6565] EXT4-fs error (device loop4): ext4_acquire_dquot:6219: comm syz.4.1641: Failed to acquire dquot type 1 [ 319.557435][ T6569] EXT4-fs error (device loop4): ext4_read_inode_bitmap:140: comm syz.4.1642: Invalid inode bitmap blk 4 in block_group 0 [ 319.570279][ T6569] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,resuid=0x0000000000000000,data_err=abort,noload,nobarrier,lazytime,,errors=continue [ 319.639507][ T25] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 319.752946][ T6584] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 319.763145][ T6584] FAT-fs (loop2): Filesystem has been set read-only [ 319.769993][ T6584] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 319.786427][ T6265] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 319.794533][ T6265] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 319.821995][ T6588] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 319.839428][ T6588] FAT-fs (loop3): Filesystem has been set read-only [ 319.846089][ T6588] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 319.863499][ T6594] EXT4-fs (loop4): 1 truncate cleaned up [ 319.869187][ T6594] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 319.883449][ T6130] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 319.890998][ T25] usb 1-1: Using ep0 maxpacket: 16 [ 319.896547][ T6130] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 320.059537][ T25] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 320.091743][ T6600] fuse: Unknown parameter 'fÿü0x0000000000000006' [ 320.163884][ T24] kauditd_printk_skb: 415 callbacks suppressed [ 320.163908][ T24] audit: type=1400 audit(1725032197.780:3056): avc: denied { mounton } for pid=6599 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 320.228582][ T24] audit: type=1400 audit(1725032197.820:3057): avc: denied { mounton } for pid=6599 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 320.232108][ T25] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 320.273104][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.281515][ T25] usb 1-1: Product: syz [ 320.285673][ T25] usb 1-1: Manufacturer: syz [ 320.290296][ T25] usb 1-1: SerialNumber: syz [ 320.315257][ T6599] bridge0: port 1(bridge_slave_0) entered blocking state [ 320.322238][ T25] usb 1-1: config 0 descriptor?? [ 320.334337][ T6599] bridge0: port 1(bridge_slave_0) entered disabled state [ 320.350617][ T6599] device bridge_slave_0 entered promiscuous mode [ 320.364288][ T6599] bridge0: port 2(bridge_slave_1) entered blocking state [ 320.372213][ T25] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 320.383014][ T25] usb 1-1: Detected FT232RL [ 320.392567][ T6599] bridge0: port 2(bridge_slave_1) entered disabled state [ 320.407111][ T6599] device bridge_slave_1 entered promiscuous mode [ 320.493811][ T6599] bridge0: port 2(bridge_slave_1) entered blocking state [ 320.500711][ T6599] bridge0: port 2(bridge_slave_1) entered forwarding state [ 320.507765][ T6599] bridge0: port 1(bridge_slave_0) entered blocking state [ 320.514583][ T6599] bridge0: port 1(bridge_slave_0) entered forwarding state [ 320.552003][ T6605] bridge0: port 1(bridge_slave_0) entered blocking state [ 320.558871][ T6605] bridge0: port 1(bridge_slave_0) entered disabled state [ 320.566439][ T6605] device bridge_slave_0 entered promiscuous mode [ 320.579432][ T25] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 320.588525][ T6605] bridge0: port 2(bridge_slave_1) entered blocking state [ 320.595749][ T6605] bridge0: port 2(bridge_slave_1) entered disabled state [ 320.603109][ T6605] device bridge_slave_1 entered promiscuous mode [ 320.622290][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 320.630310][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 320.638392][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 320.690523][ T487] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 320.701410][ T487] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 320.725094][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 320.733424][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 320.741798][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 320.749096][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 320.768618][ T6599] device veth0_vlan entered promiscuous mode [ 320.799986][ T24] audit: type=1326 audit(1725032198.420:3058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6609 comm="syz.4.1656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecf36e0ef9 code=0x7ffc0000 [ 320.825139][ T24] audit: type=1326 audit(1725032198.440:3059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6609 comm="syz.4.1656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecf36e0ef9 code=0x7ffc0000 [ 320.849132][ T25] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 320.851020][ T6599] device veth1_macvtap entered promiscuous mode [ 320.865934][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 320.887942][ T7] device bridge_slave_1 left promiscuous mode [ 320.894776][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 320.914929][ T7] device bridge_slave_0 left promiscuous mode [ 320.920932][ T24] audit: type=1326 audit(1725032198.480:3060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6609 comm="syz.4.1656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fecf36e0ef9 code=0x7ffc0000 [ 320.926383][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 320.949890][ T6610] EXT4-fs error (device loop4): ext4_read_inode_bitmap:140: comm syz.4.1656: Invalid inode bitmap blk 4 in block_group 0 [ 320.963950][ T6610] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,resuid=0x0000000000000000,data_err=abort,noload,nobarrier,lazytime,,errors=continue [ 320.977568][ T24] audit: type=1326 audit(1725032198.480:3061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6609 comm="syz.4.1656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecf36e0ef9 code=0x7ffc0000 [ 321.003556][ T24] audit: type=1326 audit(1725032198.480:3062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6609 comm="syz.4.1656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecf36e0ef9 code=0x7ffc0000 [ 321.027159][ T24] audit: type=1326 audit(1725032198.480:3063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6609 comm="syz.4.1656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fecf36e0ef9 code=0x7ffc0000 [ 321.051426][ T24] audit: type=1326 audit(1725032198.480:3064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6609 comm="syz.4.1656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fecf36e0f33 code=0x7ffc0000 [ 321.074542][ T1477] usbhid 2-1:0.0: can't add hid device: -71 [ 321.074627][ T1477] usbhid: probe of 2-1:0.0 failed with error -71 [ 321.080414][ T24] audit: type=1326 audit(1725032198.480:3065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6609 comm="syz.4.1656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fecf36df9df code=0x7ffc0000 [ 321.112711][ T1477] usb 2-1: USB disconnect, device number 40 [ 321.125146][ T7] device veth1_macvtap left promiscuous mode [ 321.131198][ T305] usb 1-1: USB disconnect, device number 40 [ 321.132657][ T7] device veth0_vlan left promiscuous mode [ 321.142957][ T305] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 321.157149][ T305] ftdi_sio 1-1:0.0: device disconnected [ 321.413482][ T6605] device veth0_vlan entered promiscuous mode [ 321.453792][ T6605] device veth1_macvtap entered promiscuous mode [ 321.565185][ T464] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 321.601855][ T464] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 321.879529][ T464] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 321.887829][ T464] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 321.896009][ T464] bridge0: port 1(bridge_slave_0) entered blocking state [ 321.902863][ T464] bridge0: port 1(bridge_slave_0) entered forwarding state [ 321.959093][ T464] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 321.967698][ T464] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 321.975872][ T464] bridge0: port 2(bridge_slave_1) entered blocking state [ 321.982731][ T464] bridge0: port 2(bridge_slave_1) entered forwarding state [ 321.989894][ T464] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 321.997810][ T464] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 322.005748][ T464] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 322.013604][ T464] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 322.022189][ T464] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 322.031289][ T464] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 322.040150][ T464] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 322.048588][ T464] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 322.061082][ T464] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 322.073571][ T464] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 322.082720][ T464] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 322.093565][ T464] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 322.103446][ T464] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 322.113782][ T464] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 322.156385][ T464] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 322.164801][ T464] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 322.173169][ T464] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 322.181766][ T464] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 322.190254][ T464] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 322.246941][ T1271] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 322.267092][ T1271] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 322.341036][ T1271] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 322.460517][ T6656] device syzkaller0 entered promiscuous mode [ 322.573548][ T6663] EXT4-fs error (device loop3): ext4_read_inode_bitmap:140: comm syz.3.1668: Invalid inode bitmap blk 4 in block_group 0 [ 322.586360][ T6663] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,resuid=0x0000000000000000,data_err=abort,noload,nobarrier,lazytime,,errors=continue [ 322.966494][ T6681] syz.1.1674[6681] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 322.966556][ T6681] syz.1.1674[6681] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 322.970873][ T6682] syz.1.1674[6682] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 322.989514][ T6682] syz.1.1674[6682] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 322.989682][ T487] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 323.021928][ T6681] syz.1.1674[6681] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 323.021979][ T6681] syz.1.1674[6681] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 323.302070][ T5] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 323.450770][ T7] device bridge_slave_1 left promiscuous mode [ 323.458797][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 323.466335][ T7] device bridge_slave_0 left promiscuous mode [ 323.472311][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 323.480127][ T7] device veth1_macvtap left promiscuous mode [ 323.485950][ T7] device veth0_vlan left promiscuous mode [ 323.916815][ T487] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 323.960486][ T5] usb 4-1: Using ep0 maxpacket: 16 [ 324.076947][ T487] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 324.088608][ T487] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 324.103159][ T487] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.116370][ T487] usb 5-1: config 0 descriptor?? [ 324.189427][ T5] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 324.198440][ T5] usb 4-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 324.251910][ T5] usb 4-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 324.271243][ T5] usb 4-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 324.289516][ T5] usb 4-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 324.297858][ T6709] device syzkaller0 entered promiscuous mode [ 324.308176][ T5] usb 4-1: config 1 interface 0 has no altsetting 0 [ 324.315112][ T5] usb 4-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 324.324205][ T5] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.369839][ T5] ums-sddr09 4-1:1.0: USB Mass Storage device detected [ 324.529611][ T25] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 324.716540][ T5] scsi host1: usb-storage 4-1:1.0 [ 324.723146][ T6714] EXT4-fs error (device loop1): ext4_read_inode_bitmap:140: comm syz.1.1682: Invalid inode bitmap blk 4 in block_group 0 [ 324.736188][ T6714] EXT4-fs (loop1): mounted filesystem without journal. Opts: noblock_validity,resuid=0x0000000000000000,data_err=abort,noload,nobarrier,lazytime,,errors=continue [ 324.950004][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 324.964987][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 324.975104][ T5] usb 4-1: USB disconnect, device number 50 [ 325.005136][ T25] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 325.014306][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.026989][ T25] usb 3-1: config 0 descriptor?? [ 325.498810][ T24] kauditd_printk_skb: 94 callbacks suppressed [ 325.498821][ T24] audit: type=1400 audit(1725032203.110:3160): avc: denied { setopt } for pid=6730 comm="syz.3.1685" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 325.524561][ T25] hid (null): bogus close delimiter [ 325.528162][ T24] audit: type=1400 audit(1725032203.130:3161): avc: denied { write } for pid=6730 comm="syz.3.1685" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 326.058997][ T24] audit: type=1400 audit(1725032203.440:3162): avc: denied { connect } for pid=6733 comm="syz.3.1687" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 326.159714][ T25] usb 3-1: string descriptor 0 read error: -71 [ 326.179437][ T487] usbhid 5-1:0.0: can't add hid device: -71 [ 326.185421][ T487] usbhid: probe of 5-1:0.0 failed with error -71 [ 326.195735][ T487] usb 5-1: USB disconnect, device number 39 [ 326.247654][ T25] uclogic 0003:256C:006D.0033: failed retrieving string descriptor #200: -71 [ 326.301560][ T25] uclogic 0003:256C:006D.0033: failed retrieving pen parameters: -71 [ 326.309775][ T25] uclogic 0003:256C:006D.0033: failed probing pen v2 parameters: -71 [ 326.317720][ T25] uclogic 0003:256C:006D.0033: failed probing parameters: -71 [ 326.325205][ T25] uclogic: probe of 0003:256C:006D.0033 failed with error -71 [ 326.333560][ T25] usb 3-1: USB disconnect, device number 49 [ 326.780349][ T24] audit: type=1400 audit(1725032204.190:3163): avc: denied { write } for pid=6746 comm="syz.4.1689" name="protocols" dev="proc" ino=4026532389 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 326.885150][ T6758] EXT4-fs error (device loop1): ext4_read_inode_bitmap:140: comm syz.1.1693: Invalid inode bitmap blk 4 in block_group 0 [ 326.885172][ T24] audit: type=1326 audit(1725032204.490:3164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6757 comm="syz.1.1693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f299fd93ef9 code=0x7ffc0000 [ 326.898290][ T6758] EXT4-fs (loop1): mounted filesystem without journal. Opts: noblock_validity,resuid=0x0000000000000000,data_err=abort,noload,nobarrier,lazytime,,errors=continue [ 326.921998][ T24] audit: type=1326 audit(1725032204.490:3165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6757 comm="syz.1.1693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f299fd93ef9 code=0x7ffc0000 [ 326.960774][ T24] audit: type=1326 audit(1725032204.490:3166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6757 comm="syz.1.1693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f299fd93ef9 code=0x7ffc0000 [ 326.984494][ T24] audit: type=1326 audit(1725032204.490:3167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6757 comm="syz.1.1693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f299fd93ef9 code=0x7ffc0000 [ 327.010673][ T24] audit: type=1326 audit(1725032204.490:3168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6757 comm="syz.1.1693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f299fd93ef9 code=0x7ffc0000 [ 327.038135][ T24] audit: type=1326 audit(1725032204.490:3169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6757 comm="syz.1.1693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f299fd93ef9 code=0x7ffc0000 [ 327.129685][ T6764] exfat: Bad value for 'allow_utime' [ 327.139494][ T20] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 327.299849][ T6764] incfs: Can't find or create .index dir in ./file0 [ 327.318259][ T6775] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=6775 comm=syz.0.1698 [ 327.331065][ T6764] incfs: mount failed -14 [ 327.509438][ T305] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 327.644577][ T20] usb 4-1: config 1 has an invalid descriptor of length 95, skipping remainder of the config [ 327.655067][ T20] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 327.749702][ T20] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 327.759022][ T20] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 327.768571][ T20] usb 4-1: SerialNumber: syz [ 327.909933][ T305] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 327.941878][ T305] usb 2-1: config 0 has no interfaces? [ 327.953409][ T305] usb 2-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 327.971211][ T305] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.985107][ T305] usb 2-1: config 0 descriptor?? [ 328.070774][ T20] usb 4-1: 0:2 : does not exist [ 328.412733][ T6756] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue [ 328.429520][ T6756] ext4 filesystem being mounted at /7/file0 supports timestamps until 2038 (0x7fffffff) [ 328.564666][ T6796] EXT4-fs error (device loop2): ext4_read_inode_bitmap:140: comm syz.2.1704: Invalid inode bitmap blk 4 in block_group 0 [ 328.585487][ T6796] EXT4-fs (loop2): mounted filesystem without journal. Opts: noblock_validity,resuid=0x0000000000000000,data_err=abort,noload,nobarrier,lazytime,,errors=continue [ 329.083670][ T305] usb 4-1: USB disconnect, device number 51 [ 329.157392][ T6811] IPv6: NLM_F_CREATE should be specified when creating new route [ 329.243403][ T6810] syz.4.1707 uses obsolete (PF_INET,SOCK_PACKET) [ 329.856690][ T6820] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 329.889132][ T6769] F2FS-fs (loop1): Found nat_bits in checkpoint [ 329.974773][ T6825] incfs: Can't find or create .index dir in ./file0 [ 329.982229][ T6825] incfs: mount failed -14 [ 330.135100][ T6820] EXT4-fs (loop3): mounted filesystem without journal. Opts: usrquota,jqfmt=vfsold,,errors=continue [ 330.146330][ T6820] ext4 filesystem being mounted at /8/file0 supports timestamps until 2038 (0x7fffffff) [ 330.193876][ T1291] usb 2-1: USB disconnect, device number 41 [ 330.397079][ T6839] overlayfs: failed to resolve './file1': -2 [ 330.607421][ T24] kauditd_printk_skb: 155 callbacks suppressed [ 330.607435][ T24] audit: type=1326 audit(1725032208.220:3325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6841 comm="syz.0.1714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82db974ef9 code=0x7ffc0000 [ 330.644812][ T24] audit: type=1326 audit(1725032208.260:3326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6841 comm="syz.0.1714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82db974ef9 code=0x7ffc0000 [ 330.692316][ T24] audit: type=1326 audit(1725032208.260:3327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6841 comm="syz.0.1714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f82db974ef9 code=0x7ffc0000 [ 330.716016][ T24] audit: type=1326 audit(1725032208.260:3328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6841 comm="syz.0.1714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f82db974f33 code=0x7ffc0000 [ 330.740128][ T24] audit: type=1326 audit(1725032208.260:3329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6841 comm="syz.0.1714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f82db9739df code=0x7ffc0000 [ 330.751295][ T6842] incfs: Can't find or create .index dir in ./file0 [ 330.763723][ T24] audit: type=1326 audit(1725032208.260:3330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6841 comm="syz.0.1714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f82db974f87 code=0x7ffc0000 [ 330.770072][ T6842] incfs: mount failed -14 [ 330.793399][ T24] audit: type=1326 audit(1725032208.260:3331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6841 comm="syz.0.1714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f82db973890 code=0x7ffc0000 [ 330.835950][ T24] audit: type=1326 audit(1725032208.260:3332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6841 comm="syz.0.1714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f82db974afb code=0x7ffc0000 [ 330.859233][ T24] audit: type=1326 audit(1725032208.260:3333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6841 comm="syz.0.1714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f82db974afb code=0x7ffc0000 [ 330.892421][ T24] audit: type=1326 audit(1725032208.260:3334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6841 comm="syz.0.1714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f82db9a6fe5 code=0x7ffc0000 [ 331.788675][ T6861] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6861 comm=syz.0.1719 [ 331.886632][ T6865] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 331.896814][ T6865] FAT-fs (loop3): Filesystem has been set read-only [ 331.904056][ T6865] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 331.936473][ T6605] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 331.944770][ T6605] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 332.069462][ T1291] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 332.092806][ T6869] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 332.102691][ T6869] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #15: comm syz.1.1723: iget: bad i_size value: -67835469387268086 [ 332.112656][ T6872] bridge0: port 1(bridge_slave_0) entered blocking state [ 332.116409][ T6869] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.1723: couldn't read orphan inode 15 (err -117) [ 332.134867][ T6869] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 332.143923][ T6872] bridge0: port 1(bridge_slave_0) entered disabled state [ 332.146143][ T6869] ext2 filesystem being mounted at /27/file0 supports timestamps until 2038 (0x7fffffff) [ 332.162538][ T6872] device bridge_slave_0 entered promiscuous mode [ 332.175263][ T6872] bridge0: port 2(bridge_slave_1) entered blocking state [ 332.182172][ T6872] bridge0: port 2(bridge_slave_1) entered disabled state [ 332.190308][ T6872] device bridge_slave_1 entered promiscuous mode [ 332.229324][ T6880] syz.4.1727[6880] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 332.229570][ T6880] syz.4.1727[6880] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 332.276439][ T6872] bridge0: port 2(bridge_slave_1) entered blocking state [ 332.294531][ T6872] bridge0: port 2(bridge_slave_1) entered forwarding state [ 332.301656][ T6872] bridge0: port 1(bridge_slave_0) entered blocking state [ 332.308416][ T6872] bridge0: port 1(bridge_slave_0) entered forwarding state [ 332.430139][ T6882] overlayfs: upper fs needs to support d_type. [ 332.610836][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 332.618229][ T304] bridge0: port 1(bridge_slave_0) entered disabled state [ 332.625443][ T304] bridge0: port 2(bridge_slave_1) entered disabled state [ 332.638636][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 332.643773][ T6880] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 332.647077][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 332.663145][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 332.666226][ T6880] EXT4-fs error (device loop4): ext4_free_branches:1026: inode #16: comm syz.4.1727: invalid indirect mapped block 4294967295 (level 0) [ 332.670772][ T1291] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 332.684398][ T6880] EXT4-fs (loop4): Remounting filesystem read-only [ 332.695727][ T1291] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 332.705933][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 332.711398][ T1291] usb 1-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 332.725166][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 332.727991][ T1291] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.734528][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 332.743797][ T1291] usb 1-1: config 0 descriptor?? [ 332.755613][ T6880] EXT4-fs error (device loop4): ext4_free_branches:1026: inode #16: comm syz.4.1727: invalid indirect mapped block 4294967295 (level 1) [ 332.769836][ T6880] EXT4-fs (loop4): 1 orphan inode deleted [ 332.776333][ T6880] EXT4-fs (loop4): 1 truncate cleaned up [ 332.783609][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 332.791847][ T6880] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,lazytime,debug_want_extra_isize=0x000000000000006e,block_validity,inode_readahead_blks=0x0000000000000040,quota, [ 332.813568][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 332.830512][ T487] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 332.844755][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 332.853713][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 332.861332][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 332.870229][ T6872] device veth0_vlan entered promiscuous mode [ 332.883840][ T6872] device veth1_macvtap entered promiscuous mode [ 332.907866][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 332.918538][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 332.927804][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 333.001247][ T6861] udc-core: couldn't find an available UDC or it's busy [ 333.008261][ T6861] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 333.321927][ T1291] hid-led 0003:27B8:01ED.0034: unknown main item tag 0x0 [ 333.328863][ T1291] hid-led 0003:27B8:01ED.0034: unknown main item tag 0x0 [ 333.337184][ T1291] hid-led 0003:27B8:01ED.0034: unknown main item tag 0x0 [ 333.344111][ T1291] hid-led 0003:27B8:01ED.0034: unknown main item tag 0x0 [ 333.350976][ T1291] hid-led 0003:27B8:01ED.0034: unknown main item tag 0x0 [ 333.401132][ T6896] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 333.523712][ T6896] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1730'. [ 333.744254][ T1291] hid-led: probe of 0003:27B8:01ED.0034 failed with error -71 [ 333.759586][ T1291] usb 1-1: USB disconnect, device number 41 [ 333.932624][ T6909] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 333.955782][ T6909] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1731'. [ 333.965637][ T1849] device bridge_slave_1 left promiscuous mode [ 333.971717][ T1849] bridge0: port 2(bridge_slave_1) entered disabled state [ 333.981317][ T1849] device bridge_slave_0 left promiscuous mode [ 333.987689][ T1849] bridge0: port 1(bridge_slave_0) entered disabled state [ 334.000403][ T1849] device veth1_macvtap left promiscuous mode [ 334.014935][ T1849] device veth0_vlan left promiscuous mode [ 335.070885][ T6921] exfat: Bad value for 'allow_utime' [ 335.162036][ T6923] EXT4-fs error (device loop4): ext4_fill_super:4955: inode #2: comm syz.4.1735: casefold flag without casefold feature [ 335.174801][ T6923] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 335.184941][ T6923] EXT4-fs (loop4): Errors on filesystem, clearing orphan list. [ 335.184941][ T6923] [ 335.194940][ T6923] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 335.666228][ T24] kauditd_printk_skb: 176 callbacks suppressed [ 335.669515][ T24] audit: type=1400 audit(1725032213.280:3511): avc: denied { read write open } for pid=6919 comm="syz.4.1735" path=2F36342F66696C65322F627573202864656C6574656429 dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 336.033283][ T6945] FAT-fs (loop3): Unrecognized mount option "" or missing value [ 336.363800][ T6945] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 336.378064][ T24] audit: type=1400 audit(1725032214.000:3512): avc: denied { read append open } for pid=6944 comm="syz.3.1741" path="/5/file2/cpuacct.usage_percpu_user" dev="loop3" ino=1048757 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 336.379448][ T5] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 336.419073][ T6952] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 336.430890][ T6952] ext4 filesystem being mounted at /32/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 336.869411][ T5] usb 5-1: Using ep0 maxpacket: 16 [ 337.058825][ T5] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 338.723664][ T24] audit: type=1326 audit(1725032216.340:3513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6974 comm="syz.3.1749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe655043ef9 code=0x7ffc0000 [ 338.752863][ T6975] exfat: Bad value for 'allow_utime' [ 338.760018][ T24] audit: type=1326 audit(1725032216.360:3514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6974 comm="syz.3.1749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fe655043ef9 code=0x7ffc0000 [ 338.860354][ T24] audit: type=1326 audit(1725032216.360:3515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6974 comm="syz.3.1749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fe655043f33 code=0x7ffc0000 [ 338.885167][ T24] audit: type=1326 audit(1725032216.370:3516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6974 comm="syz.3.1749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fe6550429df code=0x7ffc0000 [ 338.908527][ T24] audit: type=1326 audit(1725032216.370:3517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6974 comm="syz.3.1749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fe655043f87 code=0x7ffc0000 [ 338.912607][ T5] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 338.933908][ T24] audit: type=1326 audit(1725032216.370:3518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6974 comm="syz.3.1749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe655042890 code=0x7ffc0000 [ 338.963823][ T5] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.963833][ T5] usb 5-1: Product: syz [ 338.963842][ T5] usb 5-1: Manufacturer: syz [ 338.963851][ T5] usb 5-1: SerialNumber: syz [ 338.984957][ T24] audit: type=1326 audit(1725032216.370:3519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6974 comm="syz.3.1749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe655043afb code=0x7ffc0000 [ 339.008450][ T24] audit: type=1326 audit(1725032216.370:3520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6974 comm="syz.3.1749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fe655042b8a code=0x7ffc0000 [ 339.040503][ T5] usb 5-1: can't set config #1, error -71 [ 339.050546][ T5] usb 5-1: USB disconnect, device number 40 [ 339.057606][ T6978] exfat: Bad value for 'allow_utime' [ 339.123933][ T6978] incfs: Can't find or create .index dir in ./file0 [ 339.131897][ T6978] incfs: mount failed -14 [ 339.762542][ T6994] EXT4-fs (loop3): Test dummy encryption mode enabled [ 339.866887][ T6994] EXT4-fs (loop3): Ignoring removed orlov option [ 339.881630][ T6994] EXT4-fs (loop3): can't mount with journal_checksum, fs mounted w/o journal [ 340.039496][ T7019] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=7019 comm=syz.4.1763 [ 340.558587][ T7015] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1760'. [ 340.609403][ T464] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 340.621680][ T7025] 9pnet: Insufficient options for proto=fd [ 340.698053][ T7032] FAT-fs (loop2): Unrecognized mount option "" or missing value [ 340.813415][ T24] kauditd_printk_skb: 121 callbacks suppressed [ 340.813429][ T24] audit: type=1400 audit(1725032218.430:3642): avc: denied { setopt } for pid=7036 comm="syz.1.1770" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 340.873483][ T24] audit: type=1326 audit(1725032218.490:3643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7041 comm="syz.1.1771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f299fd93ef9 code=0x7ffc0000 [ 340.906550][ T24] audit: type=1326 audit(1725032218.510:3644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7041 comm="syz.1.1771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f299fd93ef9 code=0x7ffc0000 [ 340.930159][ T24] audit: type=1326 audit(1725032218.510:3645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7041 comm="syz.1.1771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f299fd93ef9 code=0x7ffc0000 [ 340.953840][ T24] audit: type=1326 audit(1725032218.510:3646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7041 comm="syz.1.1771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f299fd93ef9 code=0x7ffc0000 [ 340.977725][ T24] audit: type=1326 audit(1725032218.510:3647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7041 comm="syz.1.1771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f299fd93ef9 code=0x7ffc0000 [ 341.005773][ T7032] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 341.081484][ T24] audit: type=1326 audit(1725032218.510:3648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7041 comm="syz.1.1771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f299fd93ef9 code=0x7ffc0000 [ 341.086787][ T464] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 341.108911][ T24] audit: type=1326 audit(1725032218.520:3649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7041 comm="syz.1.1771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f299fd93ef9 code=0x7ffc0000 [ 341.115860][ T464] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 341.140121][ T24] audit: type=1326 audit(1725032218.520:3650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7041 comm="syz.1.1771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f299fd93ef9 code=0x7ffc0000 [ 341.149006][ T464] usb 5-1: New USB device found, idVendor=056a, idProduct=00d0, bcdDevice= 0.00 [ 341.181620][ T464] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.182254][ T24] audit: type=1326 audit(1725032218.520:3651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7041 comm="syz.1.1771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f299fd93ef9 code=0x7ffc0000 [ 341.199593][ T464] usb 5-1: config 0 descriptor?? [ 341.951222][ T7064] EXT4-fs (loop2): 1 truncate cleaned up [ 341.956695][ T7064] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 342.000391][ T7060] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1776'. [ 342.218866][ T464] wacom 0003:056A:00D0.0035: unknown main item tag 0x0 [ 342.268869][ T464] wacom 0003:056A:00D0.0035: Unknown device_type for 'HID 056a:00d0'. Assuming pen. [ 342.375270][ T464] wacom 0003:056A:00D0.0035: hidraw0: USB HID v0.00 Device [HID 056a:00d0] on usb-dummy_hcd.4-1/input0 [ 342.443134][ T464] input: Wacom Bamboo 2FG Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:056A:00D0.0035/input/input68 [ 342.662451][ T464] usb 5-1: USB disconnect, device number 41 [ 342.702051][ T1291] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 342.962357][ T7082] overlayfs: unrecognized mount option "uid<00000000000000000000" or missing value [ 343.002111][ T7080] FAT-fs (loop3): Unrecognized mount option "" or missing value [ 343.049544][ T1291] usb 1-1: device descriptor read/64, error -71 [ 343.401568][ T7080] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 343.497507][ T7104] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 343.509409][ T1291] usb 1-1: device descriptor read/64, error -71 [ 343.540547][ T7104] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1790'. [ 344.289481][ T1291] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 344.769370][ T486] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 344.829435][ T1291] usb 1-1: device descriptor read/64, error -71 [ 345.312493][ T486] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 345.334181][ T7144] FAULT_INJECTION: forcing a failure. [ 345.334181][ T7144] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 345.347383][ T486] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 345.356285][ T7144] CPU: 0 PID: 7144 Comm: syz.1.1802 Tainted: G W 5.10.223-syzkaller-00011-g1c5354a314ea #0 [ 345.356304][ T7144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 345.367742][ T486] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 345.377217][ T7144] Call Trace: [ 345.377237][ T7144] dump_stack_lvl+0x1e2/0x24b [ 345.377249][ T7144] ? bfq_pos_tree_add_move+0x43b/0x43b [ 345.377263][ T7144] ? kmem_cache_free+0xa9/0x1e0 [ 345.377272][ T7144] dump_stack+0x15/0x17 [ 345.377282][ T7144] should_fail+0x3c6/0x510 [ 345.377293][ T7144] should_fail_usercopy+0x1a/0x20 [ 345.377304][ T7144] _copy_from_user+0x20/0xd0 [ 345.377316][ T7144] __copy_msghdr_from_user+0xaf/0x7c0 [ 345.377327][ T7144] ? __ia32_sys_shutdown+0x70/0x70 [ 345.377341][ T7144] ___sys_sendmsg+0x166/0x2e0 [ 345.377352][ T7144] ? __sys_sendmsg+0x280/0x280 [ 345.377365][ T7144] ? rw_verify_area+0x1c3/0x360 [ 345.377383][ T7144] ? __fdget+0x1bc/0x240 [ 345.377394][ T7144] __se_sys_sendmsg+0x1b1/0x280 [ 345.377414][ T7144] ? __x64_sys_sendmsg+0x90/0x90 [ 345.457830][ T7144] ? ksys_write+0x260/0x2c0 [ 345.462169][ T7144] ? debug_smp_processor_id+0x17/0x20 [ 345.467369][ T7144] __x64_sys_sendmsg+0x7b/0x90 [ 345.471969][ T7144] do_syscall_64+0x34/0x70 [ 345.476226][ T7144] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 345.481969][ T7144] RIP: 0033:0x7f299fd93ef9 [ 345.486207][ T7144] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 345.505641][ T7144] RSP: 002b:00007f299ea11038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 345.513886][ T7144] RAX: ffffffffffffffda RBX: 00007f299ff2ff80 RCX: 00007f299fd93ef9 [ 345.521702][ T7144] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000003 [ 345.529511][ T7144] RBP: 00007f299ea11090 R08: 0000000000000000 R09: 0000000000000000 [ 345.537320][ T7144] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 345.545132][ T7144] R13: 0000000000000000 R14: 00007f299ff2ff80 R15: 00007fff0cec6a38 [ 345.590377][ T486] snd-usb-audio: probe of 3-1:27.0 failed with error -2 [ 345.622435][ T7149] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 345.673669][ T7149] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1804'. [ 345.860182][ T5] usb 3-1: USB disconnect, device number 50 [ 346.057918][ T24] kauditd_printk_skb: 81 callbacks suppressed [ 346.057937][ T24] audit: type=1107 audit(1725032223.670:3733): pid=7157 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 346.161112][ T7156] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 346.169161][ T7156] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 346.184098][ T7156] F2FS-fs (loop4): Found nat_bits in checkpoint [ 346.211883][ T7156] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 346.223791][ T7156] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 346.230947][ T7156] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 346.266462][ T7156] attempt to access beyond end of device [ 346.266462][ T7156] loop4: rw=2049, want=78792, limit=40427 [ 346.820685][ T7180] syz.2.1810[7180] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 346.820745][ T7180] syz.2.1810[7180] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 346.838094][ T24] audit: type=1400 audit(1725032224.450:3734): avc: denied { unmount } for pid=6166 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 346.874617][ T24] audit: type=1400 audit(1725032224.490:3735): avc: denied { map } for pid=7179 comm="syz.2.1810" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 346.898788][ T24] audit: type=1400 audit(1725032224.490:3736): avc: denied { call } for pid=7179 comm="syz.2.1810" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 346.953295][ T7182] sit: Dst spoofed 0.0.0.0/2002::bfd8:a5dd -> 224.0.0.1/2002:c021:42c4:3911:45ba:dd28:fd7f:ffc [ 347.046100][ T7182] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 347.056069][ T7182] EXT4-fs (loop4): warning: maximal mount count reached, running e2fsck is recommended [ 347.063783][ T7185] bridge0: port 1(bridge_slave_0) entered blocking state [ 347.066592][ T7182] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #15: comm syz.4.1811: iget: bad extended attribute block 19 [ 347.072588][ T486] usb 4-1: new full-speed USB device number 52 using dummy_hcd [ 347.085338][ T7182] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.1811: couldn't read orphan inode 15 (err -117) [ 347.092482][ T20] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 347.104279][ T7182] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 347.111804][ T7185] bridge0: port 1(bridge_slave_0) entered disabled state [ 347.127899][ T7185] device bridge_slave_0 entered promiscuous mode [ 347.134823][ T7185] bridge0: port 2(bridge_slave_1) entered blocking state [ 347.141926][ T7185] bridge0: port 2(bridge_slave_1) entered disabled state [ 347.149211][ T7185] device bridge_slave_1 entered promiscuous mode [ 347.155579][ T304] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 347.167325][ T24] audit: type=1326 audit(1725032224.790:3737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7181 comm="syz.4.1811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecf36e0ef9 code=0x7ffc0000 [ 347.198508][ T24] audit: type=1326 audit(1725032224.810:3738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7181 comm="syz.4.1811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=132 compat=0 ip=0x7fecf36e0ef9 code=0x7ffc0000 [ 347.203791][ T7185] bridge0: port 2(bridge_slave_1) entered blocking state [ 347.222516][ T24] audit: type=1326 audit(1725032224.810:3739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7181 comm="syz.4.1811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecf36e0ef9 code=0x7ffc0000 [ 347.228651][ T7185] bridge0: port 2(bridge_slave_1) entered forwarding state [ 347.252171][ T24] audit: type=1326 audit(1725032224.810:3740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7181 comm="syz.4.1811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7fecf36e0ef9 code=0x7ffc0000 [ 347.258942][ T7185] bridge0: port 1(bridge_slave_0) entered blocking state [ 347.282090][ T24] audit: type=1326 audit(1725032224.810:3741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7181 comm="syz.4.1811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecf36e0ef9 code=0x7ffc0000 [ 347.288797][ T7185] bridge0: port 1(bridge_slave_0) entered forwarding state [ 347.312188][ T24] audit: type=1326 audit(1725032224.810:3742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7181 comm="syz.4.1811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7fecf36e0ef9 code=0x7ffc0000 [ 347.338970][ T464] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 347.351620][ T464] bridge0: port 1(bridge_slave_0) entered disabled state [ 347.358645][ T464] bridge0: port 2(bridge_slave_1) entered disabled state [ 347.368380][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 347.376457][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 347.383305][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 347.391879][ T464] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 347.400110][ T464] bridge0: port 2(bridge_slave_1) entered blocking state [ 347.406929][ T464] bridge0: port 2(bridge_slave_1) entered forwarding state [ 347.430397][ T464] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 347.438466][ T464] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 347.447159][ T464] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 347.458206][ T6972] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 347.466171][ T6972] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 347.473507][ T6972] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 347.482597][ T7185] device veth0_vlan entered promiscuous mode [ 347.492467][ T6972] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 347.501719][ T7185] device veth1_macvtap entered promiscuous mode [ 347.511428][ T487] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 347.523033][ T6972] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 347.548368][ T7194] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1825'. [ 347.559893][ T20] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 347.572979][ T486] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 347.579537][ T304] usb 3-1: config 0 has no interfaces? [ 347.584031][ T486] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 253 [ 347.602619][ T20] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 347.611487][ T20] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 347.619373][ T486] usb 4-1: New USB device found, idVendor=17ef, idProduct=6085, bcdDevice= 0.00 [ 347.628110][ T486] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 347.636619][ T20] usb 2-1: config 0 descriptor?? [ 347.642733][ T486] usb 4-1: config 0 descriptor?? [ 347.659457][ T304] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 347.668588][ T304] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 347.676565][ T304] usb 3-1: SerialNumber: syz [ 347.685071][ T304] usb 3-1: config 0 descriptor?? [ 347.689928][ T5] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 347.723569][ T20] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 347.731595][ T486] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 348.000396][ T20] usb 3-1: USB disconnect, device number 51 [ 348.153162][ T7176] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 348.164547][ T7176] EXT4-fs (loop3): 1 truncate cleaned up [ 348.170155][ T7176] EXT4-fs (loop3): mounted filesystem without journal. Opts: block_validity,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000068,minixdf,journal_dev=0x0000000000000004,quota,,errors=continue [ 348.198889][ T304] usb 4-1: USB disconnect, device number 52 [ 348.359528][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 348.370449][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 348.380091][ T5] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 348.388990][ T5] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 348.409405][ T5] usb 5-1: config 0 descriptor?? [ 349.975693][ T5] hid (null): bogus close delimiter [ 350.106544][ T7227] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 350.117171][ T7227] FAT-fs (loop2): Filesystem has been set read-only [ 350.123825][ T7227] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 350.138687][ T6599] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 350.146237][ T6599] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 350.156175][ T7219] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 350.163780][ T7219] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 350.174638][ T7219] F2FS-fs (loop3): Found nat_bits in checkpoint [ 350.205429][ T7219] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 350.218117][ T7219] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 350.225291][ T7219] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 350.243630][ T7] device bridge_slave_1 left promiscuous mode [ 350.257880][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.272126][ T7] device bridge_slave_0 left promiscuous mode [ 350.278080][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.286978][ T7] device veth1_macvtap left promiscuous mode [ 350.292916][ T7] device veth0_vlan left promiscuous mode [ 350.325274][ T7219] attempt to access beyond end of device [ 350.325274][ T7219] loop3: rw=2049, want=78792, limit=40427 [ 350.450249][ T7235] bridge0: port 1(bridge_slave_0) entered blocking state [ 350.459272][ T7235] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.549014][ T7235] device bridge_slave_0 entered promiscuous mode [ 350.563268][ T7235] bridge0: port 2(bridge_slave_1) entered blocking state [ 350.632260][ T7235] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.709887][ T7235] device bridge_slave_1 entered promiscuous mode [ 350.757439][ T304] usb 2-1: USB disconnect, device number 42 [ 350.771646][ T6872] f2fs_fill_dentries: 4 callbacks suppressed [ 350.771654][ T6872] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 350.787428][ T6872] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 350.807828][ T6872] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 350.816034][ T6872] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 350.825414][ T6872] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 350.833203][ T6872] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 350.841094][ T6872] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 350.879983][ T7235] bridge0: port 2(bridge_slave_1) entered blocking state [ 350.894248][ T7235] bridge0: port 2(bridge_slave_1) entered forwarding state [ 350.901350][ T7235] bridge0: port 1(bridge_slave_0) entered blocking state [ 350.908108][ T7235] bridge0: port 1(bridge_slave_0) entered forwarding state [ 350.942678][ T487] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 350.957957][ T487] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.965938][ T487] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.988672][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 350.996798][ T15] bridge0: port 1(bridge_slave_0) entered blocking state [ 351.003672][ T15] bridge0: port 1(bridge_slave_0) entered forwarding state [ 351.012400][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 351.020487][ T15] bridge0: port 2(bridge_slave_1) entered blocking state [ 351.027340][ T15] bridge0: port 2(bridge_slave_1) entered forwarding state [ 351.099056][ T24] kauditd_printk_skb: 15 callbacks suppressed [ 351.099073][ T24] audit: type=1107 audit(1725032228.710:3758): pid=7253 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 351.282579][ T24] audit: type=1326 audit(1725032228.900:3759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7191 comm="syz.4.1816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecf36e0ef9 code=0x7fc00000 [ 351.311165][ T487] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 351.323442][ T487] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 351.331312][ T5] usb 5-1: string descriptor 0 read error: -71 [ 351.340057][ T487] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 351.352565][ T7235] device veth0_vlan entered promiscuous mode [ 351.360487][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 351.368357][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 351.375562][ T5] uclogic 0003:256C:006D.0036: failed retrieving string descriptor #200: -71 [ 351.385145][ T5] uclogic 0003:256C:006D.0036: failed retrieving pen parameters: -71 [ 351.395818][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 351.403323][ T5] uclogic 0003:256C:006D.0036: failed probing pen v2 parameters: -71 [ 351.412073][ T5] uclogic 0003:256C:006D.0036: failed probing parameters: -71 [ 351.419640][ T5] uclogic: probe of 0003:256C:006D.0036 failed with error -71 [ 351.429145][ T5] usb 5-1: USB disconnect, device number 42 [ 351.438805][ T7262] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 351.452274][ T7262] FAT-fs (loop1): Filesystem has been set read-only [ 351.467821][ T464] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 351.479047][ T464] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 351.491030][ T7262] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 351.503097][ T7235] device veth1_macvtap entered promiscuous mode [ 351.516830][ T464] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 351.527434][ T464] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 351.544021][ T464] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 351.568167][ T1477] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 351.579739][ T1477] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 351.591128][ T6212] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 351.599574][ T6212] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 351.661047][ T7266] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 351.668726][ T7266] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 351.678795][ T7266] F2FS-fs (loop3): invalid crc value [ 351.686641][ T24] audit: type=1400 audit(1725032229.310:3760): avc: denied { mounton } for pid=7268 comm="syz.2.1828" path="/0/file0" dev="tmpfs" ino=17 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 351.713043][ T7266] F2FS-fs (loop3): Found nat_bits in checkpoint [ 351.752994][ T7266] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 351.760155][ T7266] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 351.781912][ T24] audit: type=1326 audit(1725032229.400:3761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7264 comm="syz.3.1831" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe655043ef9 code=0x0 [ 351.813632][ T5] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 351.829848][ T24] audit: type=1400 audit(1725032229.440:3762): avc: denied { write } for pid=7275 comm="syz.0.1839" name="event0" dev="devtmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 351.879630][ T24] audit: type=1400 audit(1725032229.480:3763): avc: denied { create } for pid=7264 comm="syz.3.1831" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 351.937680][ T24] audit: type=1400 audit(1725032229.550:3764): avc: denied { mount } for pid=7268 comm="syz.2.1828" name="/" dev="ramfs" ino=47592 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 351.972085][ T24] audit: type=1400 audit(1725032229.560:3765): avc: denied { ioctl } for pid=7275 comm="syz.0.1839" path="/dev/input/event0" dev="devtmpfs" ino=163 ioctlcmd=0x4591 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 352.195218][ T7281] bridge0: port 1(bridge_slave_0) entered blocking state [ 352.202999][ T7281] bridge0: port 1(bridge_slave_0) entered disabled state [ 352.210389][ T1849] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 352.210833][ T7281] device bridge_slave_0 entered promiscuous mode [ 352.219039][ T1849] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 352.235278][ T7281] bridge0: port 2(bridge_slave_1) entered blocking state [ 352.242572][ T7281] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.250506][ T7281] device bridge_slave_1 entered promiscuous mode [ 352.311785][ T7] device bridge_slave_1 left promiscuous mode [ 352.318053][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.325893][ T7] device bridge_slave_0 left promiscuous mode [ 352.342685][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 352.349520][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 352.361026][ T7] device veth1_macvtap left promiscuous mode [ 352.369357][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 352.371213][ T7] device veth0_vlan left promiscuous mode [ 352.378906][ T5] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 352.399508][ T1477] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 352.409357][ T5] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 352.427852][ T5] usb 5-1: config 0 descriptor?? [ 352.654142][ T1291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 352.662281][ T1291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 352.709658][ T1291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 352.718154][ T1291] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 352.726260][ T1291] bridge0: port 1(bridge_slave_0) entered blocking state [ 352.733162][ T1291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 352.741964][ T1291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 352.750608][ T24] audit: type=1400 audit(1725032230.370:3766): avc: denied { bind } for pid=7260 comm="syz.4.1837" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 352.750913][ T1291] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 352.779025][ T7303] netlink: 240 bytes leftover after parsing attributes in process `syz.4.1837'. [ 352.863987][ T1477] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 352.902479][ T1477] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 352.946185][ T1477] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.009441][ T1291] bridge0: port 2(bridge_slave_1) entered blocking state [ 353.016423][ T1291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 353.028484][ T1477] usb 3-1: config 0 descriptor?? [ 353.039311][ T487] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 353.048531][ T1291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 353.056766][ T1291] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 353.077126][ T1291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 353.090339][ T1477] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 353.092432][ T1291] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 353.123790][ T7281] device veth0_vlan entered promiscuous mode [ 353.137321][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 353.147727][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 353.158675][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 353.168321][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 353.195873][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 353.209738][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 353.223656][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 353.235305][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 353.243886][ T7281] device veth1_macvtap entered promiscuous mode [ 353.259615][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 353.267378][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 353.276101][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 354.179807][ T487] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 354.192725][ T487] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 354.246992][ T7317] netlink: 'syz.3.1851': attribute type 27 has an invalid length. [ 354.277621][ T7317] bridge0: port 2(bridge_slave_1) entered disabled state [ 354.284670][ T7317] bridge0: port 1(bridge_slave_0) entered disabled state [ 354.299250][ T24] audit: type=1326 audit(1725032231.920:3767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7316 comm="syz.3.1851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe655043ef9 code=0x7ffc0000 [ 354.514469][ T7321] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 354.603593][ T7321] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 354.611979][ T7321] EXT4-fs (loop3): orphan cleanup on readonly fs [ 354.618296][ T7321] EXT4-fs error (device loop3): ext4_free_blocks:5688: comm syz.3.1851: Freeing blocks not in datazone - block = 0, count = 4096 [ 354.638873][ T7321] EXT4-fs (loop3): Remounting filesystem read-only [ 354.645617][ T7321] EXT4-fs (loop3): 1 orphan inode deleted [ 354.651290][ T7321] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,barrier=0x0000000000000004,lazytime,init_itable=0x0000000000007ab4,jqfmt=vfsv0, [ 354.734304][ T5] usbhid 5-1:0.0: can't add hid device: -71 [ 354.740405][ T5] usbhid: probe of 5-1:0.0 failed with error -71 [ 354.747549][ T5] usb 5-1: USB disconnect, device number 43 [ 354.800218][ T7320] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 354.807892][ T7320] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 354.818862][ T7320] F2FS-fs (loop1): Found nat_bits in checkpoint [ 354.856561][ T7320] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 354.870643][ T7320] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 354.877573][ T7320] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 354.948881][ T7320] attempt to access beyond end of device [ 354.948881][ T7320] loop1: rw=2049, want=78792, limit=40427 [ 355.019744][ T7336] xt_bpf: check failed: parse error [ 355.149276][ T5] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 355.368324][ T304] usb 3-1: USB disconnect, device number 52 [ 355.463647][ T7281] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 355.463657][ T7281] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 355.471314][ T7281] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 355.734071][ T7] device bridge_slave_1 left promiscuous mode [ 355.771060][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 355.778485][ T7] device bridge_slave_0 left promiscuous mode [ 355.790736][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 355.799952][ T7] device veth1_macvtap left promiscuous mode [ 355.805902][ T7] device veth0_vlan left promiscuous mode [ 356.166517][ T5] usb 5-1: config 1 has an invalid descriptor of length 95, skipping remainder of the config [ 356.176639][ T5] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 356.198553][ T24] kauditd_printk_skb: 39 callbacks suppressed [ 356.198567][ T24] audit: type=1400 audit(1725032233.810:3807): avc: denied { ioctl } for pid=7357 comm="syz.1.1861" path="socket:[47831]" dev="sockfs" ino=47831 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 356.319473][ T5] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 356.328444][ T5] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 356.337114][ T5] usb 5-1: SerialNumber: syz [ 356.470388][ T7369] netlink: 'syz.1.1865': attribute type 4 has an invalid length. [ 356.790871][ T5] usb 5-1: 0:2 : does not exist [ 356.884359][ T24] audit: type=1400 audit(1725032234.500:3808): avc: denied { setopt } for pid=7378 comm="syz.3.1868" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 356.939502][ T15] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 357.031011][ T7325] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue [ 357.041201][ T7325] ext4 filesystem being mounted at /82/file0 supports timestamps until 2038 (0x7fffffff) [ 357.299457][ T15] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 357.312207][ T15] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 357.321249][ T15] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 357.350070][ T6327] usb 5-1: USB disconnect, device number 44 [ 357.548862][ T15] usb 3-1: config 0 descriptor?? [ 357.594970][ T15] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 358.269447][ T15] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 358.459416][ T506] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 358.629785][ T15] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 358.640014][ T15] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 358.648943][ T15] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.718650][ T15] snd-usb-audio: probe of 5-1:27.0 failed with error -2 [ 358.918130][ T15] usb 5-1: USB disconnect, device number 45 [ 358.924094][ T506] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 359.204141][ T506] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 359.217101][ T506] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 359.226051][ T506] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.257094][ T506] usb 2-1: config 0 descriptor?? [ 359.934621][ T24] audit: type=1326 audit(1725032237.550:3809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7420 comm="syz.4.1879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecf36e0ef9 code=0x7ffc0000 [ 359.959100][ T24] audit: type=1326 audit(1725032237.550:3810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7420 comm="syz.4.1879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fecf36e0ef9 code=0x7ffc0000 [ 359.982670][ T24] audit: type=1326 audit(1725032237.550:3811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7420 comm="syz.4.1879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fecf36e0f33 code=0x7ffc0000 [ 360.006330][ T24] audit: type=1326 audit(1725032237.550:3812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7420 comm="syz.4.1879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fecf36df9df code=0x7ffc0000 [ 360.029822][ T24] audit: type=1326 audit(1725032237.550:3813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7420 comm="syz.4.1879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fecf36e0f87 code=0x7ffc0000 [ 360.031316][ T7421] exfat: Bad value for 'allow_utime' [ 360.056251][ T24] audit: type=1326 audit(1725032237.550:3814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7420 comm="syz.4.1879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fecf36df890 code=0x7ffc0000 [ 360.081343][ T24] audit: type=1326 audit(1725032237.550:3815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7420 comm="syz.4.1879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fecf36e0afb code=0x7ffc0000 [ 360.104481][ T24] audit: type=1326 audit(1725032237.580:3816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7420 comm="syz.4.1879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fecf36dfb8a code=0x7ffc0000 [ 360.142238][ T7421] incfs_lookup_dentry err:-14 [ 360.146787][ T7421] incfs: Can't find or create .incomplete dir in ./file0 [ 360.154551][ T7421] incfs: mount failed -14 [ 360.181279][ T7405] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 360.190258][ T7405] ext4 filesystem being mounted at /7/file0 supports timestamps until 2038 (0x7fffffff) [ 360.238978][ T486] usb 3-1: USB disconnect, device number 53 [ 360.239803][ T7405] EXT4-fs error (device loop1): ext4_search_dir:1520: inode #2: block 3: comm syz.1.1875: bad entry in directory: rec_len is smaller than minimal - offset=16444, inode=113, rec_len=0, size=2048 fake=0 [ 360.365712][ T7430] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 360.460927][ T506] usbhid 2-1:0.0: can't add hid device: -71 [ 360.467195][ T506] usbhid: probe of 2-1:0.0 failed with error -71 [ 360.477092][ T506] usb 2-1: USB disconnect, device number 43 [ 361.416871][ T7281] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 3: comm syz-executor: path /7/file0: bad entry in directory: rec_len is smaller than minimal - offset=60, inode=113, rec_len=0, size=2048 fake=0 [ 361.438774][ T7281] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 12: comm syz-executor: path /7/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 361.464280][ T7281] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 13: comm syz-executor: path /7/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 361.549248][ T7281] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 14: comm syz-executor: path /7/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 361.570730][ T7281] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 15: comm syz-executor: path /7/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 361.591426][ T7281] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 16: comm syz-executor: path /7/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0 [ 361.620592][ T7469] fuse: Bad value for 'user_id' [ 361.648581][ T24] kauditd_printk_skb: 63 callbacks suppressed [ 361.648600][ T24] audit: type=1400 audit(1725032239.260:3880): avc: denied { bind } for pid=7467 comm="syz.0.1895" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 361.759712][ T1271] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 361.790171][ T7281] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 17: comm syz-executor: path /7/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 361.816513][ T7468] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=9814 sclass=netlink_audit_socket pid=7468 comm=syz.0.1895 [ 361.820270][ T7281] EXT4-fs error (device loop1): ext4_map_blocks:600: inode #2: block 18: comm syz-executor: lblock 23 mapped to illegal pblock 18 (length 1) [ 361.846685][ T7281] EXT4-fs error (device loop1): ext4_search_dir:1520: inode #2: block 3: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=16444, inode=113, rec_len=0, size=2048 fake=0 [ 362.051671][ T7483] bridge0: port 1(bridge_slave_0) entered blocking state [ 362.058604][ T7483] bridge0: port 1(bridge_slave_0) entered disabled state [ 362.066261][ T7483] device bridge_slave_0 entered promiscuous mode [ 362.073334][ T7483] bridge0: port 2(bridge_slave_1) entered blocking state [ 362.080435][ T7483] bridge0: port 2(bridge_slave_1) entered disabled state [ 362.087658][ T7483] device bridge_slave_1 entered promiscuous mode [ 362.170853][ T7488] IPv6: NLM_F_CREATE should be specified when creating new route [ 362.230080][ T1271] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 362.268870][ T1271] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 362.368225][ T7483] bridge0: port 2(bridge_slave_1) entered blocking state [ 362.375137][ T7483] bridge0: port 2(bridge_slave_1) entered forwarding state [ 362.382219][ T7483] bridge0: port 1(bridge_slave_0) entered blocking state [ 362.388980][ T7483] bridge0: port 1(bridge_slave_0) entered forwarding state [ 362.396623][ T1271] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.415005][ T486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 362.422543][ T486] bridge0: port 1(bridge_slave_0) entered disabled state [ 362.430795][ T1271] usb 5-1: config 0 descriptor?? [ 362.436656][ T486] bridge0: port 2(bridge_slave_1) entered disabled state [ 362.447777][ T6327] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 362.456663][ T6327] bridge0: port 1(bridge_slave_0) entered blocking state [ 362.463534][ T6327] bridge0: port 1(bridge_slave_0) entered forwarding state [ 362.473923][ T1271] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 362.492835][ T486] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 362.501222][ T486] bridge0: port 2(bridge_slave_1) entered blocking state [ 362.508056][ T486] bridge0: port 2(bridge_slave_1) entered forwarding state [ 362.515691][ T486] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 362.523755][ T486] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 363.089859][ T486] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 363.098538][ T486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 363.134563][ T562] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 363.143090][ T562] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 363.153344][ T562] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 363.162130][ T562] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 363.181000][ T7483] device veth0_vlan entered promiscuous mode [ 363.207868][ T486] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 363.216694][ T486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 363.740691][ T7483] device veth1_macvtap entered promiscuous mode [ 363.753045][ T7501] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=7501 comm=syz.3.1905 [ 363.771890][ T562] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 363.783492][ T562] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 363.794343][ T562] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 363.830864][ T562] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 363.838959][ T562] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 364.050346][ T7] device bridge_slave_1 left promiscuous mode [ 364.056459][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 364.064227][ T7] device bridge_slave_0 left promiscuous mode [ 364.070494][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 364.078442][ T7] device veth1_macvtap left promiscuous mode [ 364.155043][ T7] device veth0_vlan left promiscuous mode [ 364.851107][ T6327] usb 5-1: USB disconnect, device number 46 [ 365.241743][ T7535] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 365.270008][ T7535] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 365.280518][ T7535] F2FS-fs (loop4): Found nat_bits in checkpoint [ 365.308211][ T7535] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 365.313796][ T7543] F2FS-fs (loop3): Unrecognized mount option "nomarrier" or missing value [ 365.333695][ T7535] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 365.334480][ T7557] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=7557 comm=syz.0.1922 [ 365.340821][ T7535] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 365.403792][ T7535] attempt to access beyond end of device [ 365.403792][ T7535] loop4: rw=2049, want=78792, limit=40427 [ 365.631654][ T7562] device veth0_vlan left promiscuous mode [ 365.637963][ T7562] device veth0_vlan entered promiscuous mode [ 365.659493][ T1271] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 365.797017][ T5803] f2fs_fill_dentries: 4 callbacks suppressed [ 365.797027][ T5803] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 365.803076][ T5803] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 365.810466][ T5803] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 365.817975][ T5803] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 365.825888][ T5803] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 365.834669][ T5803] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 365.844883][ T24] audit: type=1326 audit(1725032243.470:3881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7566 comm="syz.2.1926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3250ac8ef9 code=0x7ffc0000 [ 365.850594][ T5803] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 365.855589][ T24] audit: type=1326 audit(1725032243.480:3882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7566 comm="syz.2.1926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3250ac8ef9 code=0x7ffc0000 [ 365.935233][ T24] audit: type=1326 audit(1725032243.480:3883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7566 comm="syz.2.1926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3250ac8ef9 code=0x7ffc0000 [ 365.990278][ T24] audit: type=1326 audit(1725032243.480:3884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7566 comm="syz.2.1926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3250ac8ef9 code=0x7ffc0000 [ 366.013812][ T24] audit: type=1326 audit(1725032243.480:3885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7566 comm="syz.2.1926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3250ac8ef9 code=0x7ffc0000 [ 366.037471][ T24] audit: type=1326 audit(1725032243.480:3886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7566 comm="syz.2.1926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3250ac8ef9 code=0x7ffc0000 [ 366.061051][ T24] audit: type=1326 audit(1725032243.480:3887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7566 comm="syz.2.1926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3250ac8ef9 code=0x7ffc0000 [ 366.086475][ T24] audit: type=1326 audit(1725032243.480:3888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7566 comm="syz.2.1926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3250ac8ef9 code=0x7ffc0000 [ 366.110346][ T24] audit: type=1326 audit(1725032243.480:3889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7566 comm="syz.2.1926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3250ac7890 code=0x7ffc0000 [ 366.133819][ T1271] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 366.146184][ T1271] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 366.156237][ T1271] usb 1-1: New USB device found, idVendor=056a, idProduct=00d0, bcdDevice= 0.00 [ 366.165276][ T1271] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.177144][ T1271] usb 1-1: config 0 descriptor?? [ 366.749744][ T1271] usbhid 1-1:0.0: can't add hid device: -71 [ 366.756430][ T1271] usbhid: probe of 1-1:0.0 failed with error -71 [ 366.766339][ T24] kauditd_printk_skb: 19 callbacks suppressed [ 366.766365][ T24] audit: type=1400 audit(1725032244.380:3909): avc: denied { write } for pid=75 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 366.864227][ T24] audit: type=1400 audit(1725032244.410:3910): avc: denied { remove_name } for pid=75 comm="syslogd" name="messages" dev="tmpfs" ino=11 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 366.871146][ T1271] usb 1-1: USB disconnect, device number 44 [ 366.893709][ T24] audit: type=1400 audit(1725032244.410:3911): avc: denied { rename } for pid=75 comm="syslogd" name="messages" dev="tmpfs" ino=11 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 366.932287][ T24] audit: type=1400 audit(1725032244.410:3912): avc: denied { add_name } for pid=75 comm="syslogd" name="messages.0" dev="tmpfs" ino=10 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 366.954582][ T24] audit: type=1400 audit(1725032244.410:3913): avc: denied { unlink } for pid=75 comm="syslogd" name="messages.0" dev="tmpfs" ino=10 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 366.976741][ T24] audit: type=1400 audit(1725032244.420:3914): avc: denied { create } for pid=75 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 367.184736][ T7591] EXT4-fs (loop2): Unrecognized mount option "dont_hash" or missing value [ 369.123319][ T7652] EXT4-fs (loop3): Unrecognized mount option "obj_type=ext4" or missing value [ 369.170099][ T7658] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=7658 comm=syz.2.1953 [ 369.263106][ T7652] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1951'. [ 369.276920][ T7652] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7652 comm=syz.3.1951 [ 369.339406][ T1271] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 369.351847][ T7652] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 369.360695][ T7652] ext4 filesystem being mounted at /44/file0 supports timestamps until 2038 (0x7fffffff) [ 369.373121][ T7652] EXT4-fs error (device loop3) in ext4_do_update_inode:5275: error 27 [ 369.387727][ T7652] EXT4-fs error (device loop3): ext4_dirty_inode:6079: inode #2: comm syz.3.1951: mark_inode_dirty error [ 369.405570][ T7652] EXT4-fs error (device loop3) in ext4_do_update_inode:5275: error 27 [ 369.416676][ T7652] EXT4-fs error (device loop3): __ext4_ext_dirty:182: inode #2: comm syz.3.1951: mark_inode_dirty error [ 369.851435][ T7678] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 369.869441][ T1271] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 369.885390][ T1271] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 369.895316][ T1271] usb 2-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.00 [ 369.904436][ T1271] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 369.913933][ T1271] usb 2-1: config 0 descriptor?? [ 369.954733][ T24] audit: type=1326 audit(1725032247.570:3915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7682 comm="syz.3.1960" exe="/root/syz-executor" sig=9 arch=c000003e syscall=157 compat=0 ip=0x7fe655043ef9 code=0x0 [ 370.019896][ T7688] syz.3.1961[7688] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 370.019965][ T7688] syz.3.1961[7688] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 370.078715][ T7691] xt_bpf: check failed: parse error [ 370.151960][ T24] audit: type=1400 audit(1725032247.770:3916): avc: denied { transfer } for pid=7649 comm="syz.1.1946" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 370.152799][ T7650] binder: 7649:7650 ioctl c018620b 20000380 returned -14 [ 370.246284][ T7694] EXT4-fs (loop2): 1 orphan inode deleted [ 370.252068][ T7694] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 370.262932][ T7694] ext4 filesystem being mounted at /22/file1 supports timestamps until 2038 (0x7fffffff) [ 370.287592][ T24] audit: type=1400 audit(1725032247.900:3917): avc: denied { ioctl } for pid=7693 comm="syz.2.1963" path="/22/file1/memory.numa_stat" dev="loop2" ino=16 ioctlcmd=0x587d scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 370.312825][ T7694] EXT4-fs (loop2): shut down requested (0) [ 370.339417][ T1271] usbhid 2-1:0.0: can't add hid device: -71 [ 370.346443][ T1271] usbhid: probe of 2-1:0.0 failed with error -71 [ 370.353513][ T1271] usb 2-1: USB disconnect, device number 44 [ 370.580808][ T7676] F2FS-fs (loop4): Found nat_bits in checkpoint [ 370.650645][ T7676] F2FS-fs (loop4): Mounted with checkpoint version = 753bd00b [ 370.989454][ T1271] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 371.011953][ T7713] EXT4-fs (loop3): Test dummy encryption mode enabled [ 371.018772][ T7713] EXT4-fs (loop3): Test dummy encryption mode enabled [ 371.025492][ T7713] EXT4-fs (loop3): Ignoring removed orlov option [ 371.033915][ T7713] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,dioread_lock,test_dummy_encryption,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,max_batch_time=0x0000000000000000,data_err=abort,,errors=continue [ 371.358800][ T1271] usb 2-1: Using ep0 maxpacket: 16 [ 371.509503][ T1271] usb 2-1: config 0 has no interfaces? [ 371.516036][ T1271] usb 2-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 371.609404][ T1271] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.618140][ T1271] usb 2-1: config 0 descriptor?? [ 371.636710][ T24] audit: type=1400 audit(1725032249.250:3918): avc: denied { read } for pid=7733 comm="syz.4.1973" name="loop-control" dev="devtmpfs" ino=110 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 372.260325][ T7709] udc-core: couldn't find an available UDC or it's busy [ 372.268701][ T24] kauditd_printk_skb: 3 callbacks suppressed [ 372.268714][ T24] audit: type=1400 audit(1725032249.880:3922): avc: denied { rmdir } for pid=6872 comm="syz-executor" name="lost+found" dev="loop3" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 372.297089][ T7709] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 372.305144][ T24] audit: type=1400 audit(1725032249.920:3923): avc: denied { unlink } for pid=6872 comm="syz-executor" name="file0" dev="loop3" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 372.328843][ T24] audit: type=1400 audit(1725032249.950:3924): avc: denied { unlink } for pid=6872 comm="syz-executor" name="file1" dev="loop3" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 372.426195][ T7748] syz.2.1976[7748] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 372.426263][ T7748] syz.2.1976[7748] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 372.600775][ T24] audit: type=1400 audit(1725032250.220:3925): avc: denied { mount } for pid=7708 comm="syz.1.1965" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 372.705814][ T7756] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 372.714643][ T7756] ext4 filesystem being mounted at /103/file0 supports timestamps until 2038 (0x7fffffff) [ 372.727669][ T7756] EXT4-fs error (device loop4) in ext4_do_update_inode:5275: error 27 [ 372.737274][ T7756] EXT4-fs error (device loop4): ext4_dirty_inode:6079: inode #2: comm syz.4.1978: mark_inode_dirty error [ 372.749340][ T7756] EXT4-fs error (device loop4) in ext4_do_update_inode:5275: error 27 [ 372.757871][ T7756] EXT4-fs error (device loop4): __ext4_ext_dirty:182: inode #2: comm syz.4.1978: mark_inode_dirty error [ 372.878983][ T305] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 373.129381][ T305] usb 1-1: Using ep0 maxpacket: 16 [ 373.263718][ T305] usb 1-1: config 0 has no interfaces? [ 373.273697][ T305] usb 1-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 373.282981][ T305] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.292897][ T304] usb 2-1: USB disconnect, device number 45 [ 373.297026][ T305] usb 1-1: config 0 descriptor?? [ 373.298943][ T24] audit: type=1400 audit(1725032250.910:3926): avc: denied { unmount } for pid=7483 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 373.493934][ T7772] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 373.569310][ T7755] udc-core: couldn't find an available UDC or it's busy [ 373.576264][ T7755] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 373.966276][ T24] audit: type=1400 audit(1725032251.580:3927): avc: denied { read write } for pid=7771 comm="syz.1.1983" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 373.978219][ T1849] Bluetooth: hci0: Frame reassembly failed (-84) [ 374.025297][ T24] audit: type=1400 audit(1725032251.580:3928): avc: denied { open } for pid=7771 comm="syz.1.1983" path="/8/file0/file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 374.067862][ T24] audit: type=1400 audit(1725032251.580:3929): avc: denied { create } for pid=7771 comm="syz.1.1983" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 374.090564][ T24] audit: type=1400 audit(1725032251.580:3930): avc: denied { write } for pid=7771 comm="syz.1.1983" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 374.259743][ T7787] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7787 comm=syz.4.1985 [ 374.382939][ T7793] netlink: 'syz.2.1987': attribute type 13 has an invalid length. [ 374.416895][ T1291] usb 1-1: USB disconnect, device number 45 [ 375.149478][ T7803] syz.4.1990[7803] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 375.149524][ T7803] syz.4.1990[7803] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 375.866787][ T24] audit: type=1400 audit(1725032253.480:3931): avc: denied { ioctl } for pid=7816 comm="syz.0.1995" path="socket:[49777]" dev="sockfs" ino=49777 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 SYZFAIL: bad allocate request allocated=0 size=18446744073653374421/18446744073653374424 (errno 11: Resource temporarily unavailable) [ 375.990547][ T25] Bluetooth: hci0: command 0x1003 tx timeout [ 375.997396][ T3710] Bluetooth: hci0: sending frame failed (-49) [ 376.740094][ T1849] device bridge_slave_1 left promiscuous mode [ 376.746022][ T1849] bridge0: port 2(bridge_slave_1) entered disabled state [ 376.753317][ T1849] device bridge_slave_0 left promiscuous mode [ 376.759234][ T1849] bridge0: port 1(bridge_slave_0) entered disabled state [ 378.069562][ T25] Bluetooth: hci0: command 0x1001 tx timeout [ 378.075837][ T3710] Bluetooth: hci0: sending frame failed (-49) [ 378.270191][ T1849] device bridge_slave_1 left promiscuous mode [ 378.276215][ T1849] bridge0: port 2(bridge_slave_1) entered disabled state [ 378.283561][ T1849] device bridge_slave_0 left promiscuous mode [ 378.289565][ T1849] bridge0: port 1(bridge_slave_0) entered disabled state [ 378.297161][ T1849] device bridge_slave_1 left promiscuous mode [ 378.303165][ T1849] bridge0: port 2(bridge_slave_1) entered disabled state [ 378.310441][ T1849] device bridge_slave_0 left promiscuous mode [ 378.316353][ T1849] bridge0: port 1(bridge_slave_0) entered disabled state [ 378.324279][ T1849] device veth1_macvtap left promiscuous mode [ 378.330104][ T1849] device veth0_vlan left promiscuous mode [ 378.335764][ T1849] device veth1_macvtap left promiscuous mode [ 378.341630][ T1849] device veth0_vlan left promiscuous mode [ 380.149495][ T305] Bluetooth: hci0: command 0x1009 tx timeout [ 384.950081][ T1849] device bridge_slave_1 left promiscuous mode [ 384.956451][ T1849] bridge0: port 2(bridge_slave_1) entered disabled state [ 384.964150][ T1849] device bridge_slave_0 left promiscuous mode [ 384.970117][ T1849] bridge0: port 1(bridge_slave_0) entered disabled state [ 384.977614][ T1849] device veth1_macvtap left promiscuous mode [ 384.983460][ T1849] device veth0_vlan left promiscuous mode