last executing test programs: 8.698447098s ago: executing program 4 (id=1095): syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000340)={[{@nojournal_checksum}, {@nombcache}, {@barrier}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@usrquota}, {@noauto_da_alloc}]}, 0xfe, 0x55a, &(0x7f0000000a00)="$eJzs3U1rG0cfAPD/ynLenycOhEB7KIYcmpJGju2+pNBDeixtaKC9p8LemGA5CpYcYjfQ5NBceimhUEoDpR+g9x5Dv0Ch3yHQBkIJpj304rLyylFiyVIcxVai3w82mdldeXY0+x9mNBIbwNAaz/4pRLwSEd8kEYdbjhUjPzi+ft7qw+sz2ZbE2tqnfyWR5Pua5yf5/webmWLEr19FnCxsLre2vDJfrlTSxTw/UV+4MlFbXjl1aaE8l86ll6emp8+8PT313rvv9K2ub5z/5/tP7n545uvjq9/9fP/I7STOxqH8WGs9nsGN1sx4jOfvyWicfeLEyT4UNkiS3b4AtmUkj/PRyPqAwzGSRz3w8vsyItaAIZWIfxhSzXFAc27fp3nwC+PBB+sToM31L65/NhL7GnOjA6vJYzOjbL471ofyszJ++fPO7WyL/n0OAdDVjZsRcbpY3Nz/JXn/t32nezjnyTL0f7Bz7mbjnzfbjX8KG+OfaDP+Odgmdreje/wX7vehmI6y8d/7bce/G4tWYyN57n+NMd9ocvFSJc36tv9HxIkY3Zvlt1rPObN6b63TsdbxX7Zl5TfHgvl13C/uffw1s+V6+Vnq3OrBzYhX245/k432T9q0f/Z+nO+xjGPpndc6Hete/+dr7aeI19u2/6MVrWTr9cmJxv0w0bwrNvv71rHfOpW/2/XP2v/A1vUfS1rXa2tPX8aP+/5NOx3b7v2/J/mskd6T77tWrtcXJyP2JB9v3j/16LXNfPP8rP4njm/d/7W7//dHxOc91v/W0VsdTx2E9p99qvZ/+sS9j774oVP5vbX/W43UiXxPL/1frxf4LO8dAAAAAAAADJpCRByKpFDaSBcKpdL69zuOxoFCpVqrn7xYXbo8G43fyo7FaKG50n245fsQk/n3YZv5qSfy0xFxJCK+HdnfyJdmqpXZ3a48AAAAAAAAAAAAAAAAAAAADIiDHX7/n/ljZLevDnjutnjk9+87eR3Azuv6yP9+POkJGEhd4x94aYl/GF7iH4aX+IfhJf5heIl/GF7iH4aX+AcAAAAAAAAAAAAAAAAAAAAAAAAAAIC+On/uXLatrT68PpPlZ68uL81Xr56aTWvzpYWlmdJMdfFKaa5anaukpZnqQre/V6lWr0xOxdK1iXpaq0/UllcuLFSXLtcvXFooz6UX0tEdqRUAAAAAAAAAAAAAAAAAAAC8WGrLK/PlSiVdlJDYVqI4GJch0efEVr1Gcec6KAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACIiP8CAAD//wTEOXk=") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, 0x0, &(0x7f0000000100)='syzkaller\x00'}, 0x90) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r3) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r4 = inotify_init1(0x0) fcntl$setown(r4, 0x8, 0xffffffffffffffff) fcntl$getownex(r4, 0x10, &(0x7f0000000140)={0x0, 0x0}) r6 = syz_open_procfs(r5, &(0x7f0000000600)='fd/4\x00') ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f0000000380)=0x4000) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 7.722657711s ago: executing program 4 (id=1099): r0 = socket(0x28, 0x5, 0x0) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r1, 0x0) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) r2 = accept4$unix(r1, 0x0, 0x0, 0x800) recvfrom$unix(r2, &(0x7f0000000140)=""/248, 0xfe82, 0x0, 0x0, 0x0) 7.693163933s ago: executing program 4 (id=1100): r0 = socket(0x11, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'gre0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, 0x0}}], 0x2, 0x0) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000480)=ANY=[], 0xdd12}], 0x1}, 0x0) 7.654896116s ago: executing program 4 (id=1101): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000640)=ANY=[@ANYBLOB="1201000000000010c41090ea40000000000109022400010000000009040000010301000009210000000122050009058103"], 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x2, 0xc}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000300000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f00000004c0)=ANY=[@ANYBLOB="000027000000f2"], 0x0, 0x0, 0x0, 0x0}, 0x0) 6.873356385s ago: executing program 1 (id=1103): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x9e, 0x17, 0x36, 0x10, 0x17ef, 0x721e, 0xde06, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6}}]}}]}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) syz_usb_control_io(r0, 0x0, &(0x7f0000000680)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="000004000000f82710e0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 6.243316662s ago: executing program 0 (id=1115): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/14, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1a10716, &(0x7f0000000580)={[{@prjquota}, {@mblk_io_submit}, {@grpjquota_path}, {@resuid}, {@prjquota}, {@usrjquota}, {@usrjquota}, {@inode_readahead_blks}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}]}, 0xff, 0x46d, &(0x7f0000001bc0)="$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") syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000540)='ns/pid\x00') sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1010008}, 0xc, &(0x7f00000005c0)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x4000081}, 0x20008051) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket(0x29, 0x80803, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0x10) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002600)=ANY=[@ANYBLOB="1c0000005e00010200"/20, @ANYRES32=0x0, @ANYBLOB="05000002"], 0x1c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r5}, 0x10) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 5.418117164s ago: executing program 0 (id=1116): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, 0x0, &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000001b40), 0x1, 0x0) writev(r2, &(0x7f0000004340)=[{&(0x7f0000002080)="4f7f61bfe7ec271202403a540b524a03bda1e44111dd69d3924090d27ac2f6b2c654d94690a10a33d0", 0x29}], 0x1) 5.310465362s ago: executing program 0 (id=1117): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getrlimit(0xf, &(0x7f0000000340)) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0xfffffffc}, 0x48) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000040)=@newae={0x88, 0x1e, 0x1, 0x0, 0x0, {{@in6=@private0}, @in6=@private2}, [@policy_type={0xa}, @replay_val={0x10}, @user_kmaddress={0x2c, 0x13, {@in=@empty, @in=@dev}}]}, 0x88}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000004c0)=ANY=[], 0x5c, 0x0) tgkill(r0, r0, 0x3) mkdir(&(0x7f0000000080)='./file1\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', &(0x7f0000000140)='system.posix_acl_default\x00', &(0x7f0000000580)=ANY=[@ANYBLOB="0200000001000000014c560004008acc0000000010000000000000002000000000000000"], 0x24, 0x2) syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000980)='./file1\x00', 0x280809a, &(0x7f0000000f40)=ANY=[], 0xd, 0x2b2, &(0x7f00000006c0)="$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") r4 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) r5 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) write$9p(r4, &(0x7f0000001400)="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", 0x400) sendfile(r4, r5, 0x0, 0xe066) sendfile(r4, r5, 0x0, 0xffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) unshare(0x22020600) recvfrom$inet6(0xffffffffffffffff, &(0x7f00000008c0)=""/91, 0x5b, 0x40000001, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b708"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)) 4.956782818s ago: executing program 4 (id=1118): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1e7d, 0x2d5a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000080000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r2}, 0x10) syz_usb_control_io(r0, &(0x7f0000000580)={0x2c, &(0x7f0000000340)={0x0, 0x0, 0x5, {0x5, 0x0, "0f6364"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 4.831314408s ago: executing program 1 (id=1122): unshare(0x22020600) r0 = syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000ac0)='./file2\x00', 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x1, 0x5511, &(0x7f0000015b80)="$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") r1 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000240)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r2, &(0x7f0000000380)='./bus\x00') setns(r1, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 4.546777899s ago: executing program 1 (id=1123): preadv(0xffffffffffffffff, 0x0, 0x0, 0x147, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001440)={{0x12, 0x1, 0x0, 0xab, 0xd1, 0xa0, 0x40, 0x77b, 0x2226, 0xca8b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3a, 0x92, 0xf8}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 4.495263002s ago: executing program 0 (id=1124): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/14, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1a10716, &(0x7f0000000580)={[{@prjquota}, {@mblk_io_submit}, {@grpjquota_path}, {@resuid}, {@prjquota}, {@usrjquota}, {@usrjquota}, {@inode_readahead_blks}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}]}, 0xff, 0x46d, &(0x7f0000001bc0)="$eJzs289vVEUcAPDve7sFBGUrIgqCVNGk8UdLCyoHE6PRxIMmJnrAY20LQRZqaE2ENFqNwaMh8W48mvgXePJk1JOJVzyaGBKixAT04pq3+17pLrullYXddD+fZGFm3+zMfPvevJ2d2Q1gYI1k/yQRd0fExYioNLLNBUYa/127sjj995XF6SRqtTf/SOrlrl5ZnK7litdty+scTSPST5O8kRhaWe382XMnp6rV2TN5fnzh1Hvj82fPPX3i1NTx2eOzpyePHDl8aOK5ZyefadPr3y6sN84svqt7Ppzbu/vVty+8Pn30wjs/fpP1d9e+xvEsjvXWeTMjWeB/Nv42rcce73ZjPfZv7XqcSbnXvWGtShFRzgfnxahEKa6fvEq88klPOwfcVtk9e3Pnw0s1YANLotc9AHqjeKPPPv8Wjzs09egLl19sfADK4r6WPxpHypE2Pho1L1x02UhEHF3658vsES3rELU26wYAALfqu2z+81S7+V8au1aU257vDQ1HxL0RsSMi7ouInRFxf0S97AMR8WCnhjpMokZa8jfOP9NL/zu4Ncjmf8/ne1vN87+0KDJcynP31OMfSo6dqM4ezP8mozG0OctPtKu8qOLlXz7v1P7K+V/2yNov5oJ5JZfKjQW6LcUzM1MLU92alF7+OGJPuV38yfJOQBIRuyNiz/qq3l4kTjzx9d5OhW4e/yq6sM9U+6qoZHEpWuIvJKvvT45vierswfHiqrjRTz+ff6NT+7cUfxdk539r8/XfUqLyV7Jyv3Z++cALa23j/K+fdfxMWV779b8su/43JW/V93Q35c99MLWwcGYiYlPyWj3f9Pzk9dcW+aJ8Fv/ogfbjf0f+miz+hyIiu4j3RcTDEbE/P3ePRMSjEXFglfh/eOmxdzsd64fzP9P2/rd8/Q83n//1J0onv/+2U/tru/8drqdG82fq97+b6Nyd4jbacjUDAADABpbWvxufpGPL6TQdG2t8h39nbE2rc/MLTx6be//0TOM79MMxlBYrXZUV66ETyVJeYyM/ma8VF8cP5evGX5TuqufHpueqMz2OHQbdtg7jP/N7qde9A247v9eCwdU6/tMe9QO487z/w+Ay/mFwGf8wuNqN/49a8vYCYCOqVXrdA6B3zP9hcBn/MLiMfxhIt/K7/tuVKK/y632JfklE2hfd6JvE/j4aTeUujO4e35gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC65L8AAAD///Uk+Ss=") syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000540)='ns/pid\x00') sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1010008}, 0xc, &(0x7f00000005c0)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x4000081}, 0x20008051) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket(0x29, 0x80803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002600)=ANY=[@ANYBLOB="1c0000005e00010200"/20, @ANYRES32=0x0], 0x1c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r5}, 0x10) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 3.637771827s ago: executing program 0 (id=1128): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7", @ANYRES32=r0, @ANYBLOB="0000000000000000b70400000800000085000000950000009500060000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f00000003c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x300001a, &(0x7f0000000500)=ANY=[], 0x1, 0x2b6, &(0x7f00000000c0)="$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") write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000003c0)='net/igmp6\x00') r6 = socket$inet6(0xa, 0x2, 0x3a) r7 = creat(&(0x7f0000000340)='./file0\x00', 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r8, 0x0) r9 = socket$netlink(0x10, 0x3, 0x4) writev(r9, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a09000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="747661ab733d66712c7266646e6f3dd450831baaea81e5a04c4befd82361d3c4630cec9f052c", @ANYRESHEX=r7, @ANYBLOB=',wfdno=', @ANYRESHEX=r9, @ANYBLOB=',\x00']) socket$packet(0x11, 0x2, 0x300) sendmmsg$inet6(r6, &(0x7f00000000c0)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000140)="8000102e7777d401", 0x8}], 0x1, &(0x7f00000007c0)=ANY=[@ANYBLOB="24000000000000002900000032000000ff020000000000000000000000000001", @ANYRES32=0x0, @ANYBLOB="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"], 0x28}}], 0x1, 0x0) read$FUSE(r5, &(0x7f00000039c0)={0x2020}, 0x205d) 2.767945532s ago: executing program 4 (id=1132): r0 = syz_usb_connect$uac1(0x0, 0xad, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9b, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@extension_unit={0x9, 0x24, 0x8, 0x0, 0x0, 0x0, 'LX'}, @mixer_unit={0x6, 0x24, 0x4, 0x0, 0x0, 'R'}, @selector_unit={0x7, 0x24, 0x5, 0x0, 0x0, "53f1"}, @selector_unit={0xb, 0x24, 0x5, 0x0, 0x0, "133b9bda531c"}, @selector_unit={0x9, 0x24, 0x5, 0x0, 0x5, "96efc359"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x7f, 0x2, 0x0, 0x1, "8b7e", "8e"}, @as_header={0x7}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x81}}}}}}}]}}, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000001100)={0x14, 0x0, &(0x7f0000001040)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io(r0, &(0x7f00000021c0)={0x2c, 0x0, &(0x7f0000002080)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 2.767440522s ago: executing program 0 (id=1133): r0 = syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x1c}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, &(0x7f0000000a40)=ANY=[@ANYBLOB="200c1a000000affc065a22590a200a18e16ebc3729b1d3e0d884a603da"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 2.688027838s ago: executing program 2 (id=1134): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x804810, &(0x7f0000000a40), 0x26, 0x756, &(0x7f00000002c0)="$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") chdir(&(0x7f0000000240)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000a80)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r1, 0x40806685, &(0x7f0000000a80)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.607736314s ago: executing program 2 (id=1135): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./bus\x00', 0x400e, &(0x7f0000000280)={[{@i_version}, {@nobh}, {@data_err_ignore}, {@nolazytime}, {@init_itable_val={'init_itable', 0x3d, 0x4}}, {@acl}]}, 0x1, 0x42f, &(0x7f0000000940)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf09000000000000550901000000000095000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x25, 0x0, &(0x7f0000000140)="b9ff03076804268cb89e14f088a847e0ffff2000000000000000ac141416e0885a049a1794", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r1, 0x8983, &(0x7f0000000300)={0x6, 'gre0\x00', {0x1}, 0x8}) r2 = gettid() r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r3) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r4 = inotify_init1(0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$int_in(r6, 0x5421, &(0x7f0000000240)=0x2) connect$vsock_stream(r6, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) fcntl$setown(r4, 0x8, 0xffffffffffffffff) fcntl$getownex(r4, 0x10, &(0x7f0000000140)={0x0, 0x0}) r8 = syz_open_procfs(r7, &(0x7f0000000600)='fd/4\x00') ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r8, 0xc0185879, &(0x7f0000000180)={@id={0x2, 0x0, @auto="ffee8e7268b4d909e4003f00"}}) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x4, @tid=r2}, &(0x7f00000002c0)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r9 = socket$inet6(0xa, 0x80002, 0x88) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f0000000380)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x33}, 0x0, @in=@loopback}}, 0xe8) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x11, &(0x7f0000001240)={[{@noblock_validity}, {@stripe={'stripe', 0x3d, 0x2}}, {@norecovery}, {@nolazytime}, {@abort}]}, 0x1, 0x60b, &(0x7f0000001b40)="$eJzs3c9vFGUfAPDvTH/Svu/bQt6oeJAmxkCitLSAIcZEejcEf/wDlRZCKJS0NbFIQkn0aLx4MPHkQfwvlMSb8eDVgxdPhoQYw0EMkTWznSnb7e7SX9sp3c8nWTrPzHaeZ5Z++33m6TMzAXSskeyfNOJwRFxPIoZqtnVHvnFk5X0P/rx5IXslUam890cSN28ly7X7SvKvg/k3/zMUyc9pxKGu9fUuLN24MjU7OzOfl8cWr14fW1i6cfzy1alLM5dmrk28PnHm9KnTZ8ZPbOv4ehqs++arR8n4t7+eS+JsPM7blh1X/fv6tlVz9pmNRGXFw9r12ed6Zpv73iv+Gip+Tp5I6lewZ13M4zaLk+djKLpq/jeH4tN3Sm0c0FaVJIocBXScpEn8/zjZ6jdDf9vaA+yWoh9QnNs3Og9eL21zrwTYDfcnVwakVmK/JyKK+O9eGRuM/urYwMCDZM04TxIR2xuZW5HV8dMP5z7JXtFkHA5oj+XbxSh3ff5PqrE5HP3V0sCDdG38L1cqad4TyNa/u8X6R+rK4h92z/LtiHghz/+9seH4T/PYLeL/gy3WL/4BAAAAAABg59ydjIjXGs3/S1fn//Q2mP8zGBFnd6D+p//9L72XLyQ7UB1Q4/5kxJsN5/+uzvEd7spL/63OB+hJLl6enTkREf+LiGPR05eVx+v2WztD+Phnh75sVn/t/L/sldVfzAXM93Svu+5C3OmpxantHjcQcf92xIvV+b9H8jVr5/9k+T9pkP+z+L6+wToOvXLnfLNtT49/oF0qX0ccbZj/n3S3k9b35xir9gfGil7Bei99/Pl3zeoX/1CeLP8PtI7/vqT2fj0Lm9t/b0ScXOquNNu+1f5/b/J+V7H/zEdTi4vz4xG9ydvr109srs2wXxXxUMRLFv/HXm49/rfa/6+JwwMRsbzBOp97PPhbs23yP5Qni//p1vl/eG3+3/zCxJ3h75vVf35D+f9UNacfy9cY/4Na6+/HsdEALaW5AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPCMSyPiP5Gko6vLaTo6GjEYEf+PgXR2bmHx1YtzH16bzrZVn/+fFk/6HVopJ8Xz/4dryhN15ZMRcTAivug6UC2PXpibnS774AEAAAAAAAAAAAAAAAAAAGCPGKxe81/pq7/+P/N7V9mtA9quO/8q3qHzdG/5Oyt9O9oQYNdtPf6BZ1h2zr+J+O9pZ1uAEjSP/4ePKlW72hxgF+n/Q+faYvz7cwHsA/I/dKoNjun1t7sdQBnkfwAAAAAA2FcOHrn7SxIRy28cqL4yvfk2k/1hf0vLbgBQGnN4oXN1z5XdAqAszvGBZHXp74YX+zef/Z+0p0EAAAAAAAAAAAAAwDpHD7v+HzpV6+v/ze2H/azF9f+Ngt/tAmAfaf7oD7kf9jvn+MDTsr3r/wEAAAAAAAAAAABgD+i/cWVqdnZmfmHp2Vt4a280Y3MLy1N7ohmbWKjcimj9nsftqb0nIvbKhzC/kLVmt+oqbsFR4iGX/HsJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABY9W8AAAD//yF2IgQ=") 2.485885014s ago: executing program 2 (id=1136): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getrlimit(0xf, &(0x7f0000000340)) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0xfffffffc}, 0x48) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000040)=@newae={0x88, 0x1e, 0x1, 0x0, 0x0, {{@in6=@private0}, @in6=@private2}, [@policy_type={0xa}, @replay_val={0x10}, @user_kmaddress={0x2c, 0x13, {@in=@empty, @in=@dev}}]}, 0x88}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000004c0)=ANY=[], 0x5c, 0x0) tgkill(r0, r0, 0x3) mkdir(&(0x7f0000000080)='./file1\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', &(0x7f0000000140)='system.posix_acl_default\x00', &(0x7f0000000580)=ANY=[@ANYBLOB="0200000001000000014c560004008acc0000000010000000000000002000000000000000"], 0x24, 0x2) syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000980)='./file1\x00', 0x280809a, &(0x7f0000000f40)=ANY=[], 0xd, 0x2b2, &(0x7f00000006c0)="$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") r4 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) r5 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) write$9p(r4, &(0x7f0000001400)="3b27a4b46ee92b4a59073c369a5e19f9db153c4fdbc76aa2a4bb9f3e5e1aa197a9e97d1016c01813792e50c2692c175aad715d110a892949ccc6e2e54c2d5c8f0b7932b69797f217168b0c1feb128ae34f0daf487a70b5c117acd43725fe17993634f1695dabd7f998cd55e9d5bd911e86aa7a4ad75a574bb96951d6018b25d942a9544bca1ebb0e8d10c092cdcb85797673972099e4041aaf8d636f66cb1103ef2050ad28fabaed33d6927889d97f4b5ce0de71d3fd832980f4f088d0d824e20549b4bbd906ffa51ce9de54d779eb4de462faac20a3ab0ed9934373ca22cea5454f4c2a740cd461e39956bb5f98df2aebc60cf32623adbffbcc378fa7250b6a3fc863dadcf6d4f8b855c4e70f0796eee6218445dad2811dd6b540ff52efa2f167dd9c1b8b016268d37db430983fefc0645d20614c8df2eb0872c58e09664e672b0b6a9970fec199257e1c606ec3e364c66a0f4d258c74accd43b987c756d602fd8787fed3aa43fd8d84e9656d4a413fa9a423bc54b873583d6d497005e54712fafc71384988d80134fbf84f53fdd74b354848006b8b5b67e7cc5a472475d3ae545ca1fcf7628b873e31ba83a98a7ad5b0cfbe9711b517a9a1388ad0efa2a3b4e22152021d631b731e2e100a9831111db7acce948bb5deeea260463c140ac929e77c58402776caf85d4569a75dde2f64c4491508afb541ed9b2c81fc95c06706235f383e31cf662c95b1e49cfd94871e22720a41535756e419b271276941692bd023dd9c9dbec4f7db1e5c00d8b3be7b8e826a6aadd001edd0dfeb00f8048442b5c48456fd642e629dcb2ff55592665ff491cd832672ce4d999da186db2c3a1f8b6b1f7d3750d7cdb3097954e6e14fb2183ad662c63d4ce8b82dc2487f0fe2ea2827b53a7c6dcced878d2fb29c1d3ff583570e7bc172d1a5c716e0447cb08ce3c468ffdf975da372f3f3eb455aaf5822bc04a51b6cad24a2331369df81c123b009a2381b42e9aeb077f621608d81c12a5f5c6c295d74afd4dd5c051296be0b54c70bf899b347c36bff62f313079983409d7f9cf1242c917985c1b5d0736fe21f8514f63d0369a374c42da40bd5140bc3e602d00c3cb4f8e621863ab47422778d67d72de34753fd72cef80649a1548e4e8dcbcffe4054cc9d8a1f922623a75904cbdaacde768131e587269a4a99d82f7009c1b8ab79aa232a2fd45ad71b603803123f6ba979fa6a87525884b08d721a21400fb1f950b96ead82f408cc4388d3b78fb456616429a520656d5e5a876fd04748498902c86f58d45f4c1b3919eb846a00edf07e7a830bf723e4774f085f15534dd3b5246c0c0970b5ad7bb39b30b156a9430378c5b0aab1261c78d72ac301cd552d5e8dd4b642ec1dc0672745d593bb26d095b5b23576e3cfd6ab580f6e09419d0f0c64250fafaa3759aa1888da48d8", 0x400) sendfile(r4, r5, 0x0, 0xe066) sendfile(r4, r5, 0x0, 0xffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) unshare(0x22020600) recvfrom$inet6(0xffffffffffffffff, &(0x7f00000008c0)=""/91, 0x5b, 0x40000001, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b708"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)) 2.089942303s ago: executing program 3 (id=1137): unshare(0x2040400) r0 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000540)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) unshare(0x2000400) fsmount(r0, 0x0, 0x0) 2.089482443s ago: executing program 3 (id=1138): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x9d, 0x10001, 0x9, 0x1}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='mm_page_alloc\x00', r2}, 0x10) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r0, &(0x7f0000000080), 0x0}, 0x20) 2.089085203s ago: executing program 3 (id=1139): syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000340)={[{@nojournal_checksum}, {@nombcache}, {@barrier}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@usrquota}, {@noauto_da_alloc}]}, 0xfe, 0x55a, &(0x7f0000000a00)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e00000000000000001801", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, 0x0, &(0x7f0000000100)='syzkaller\x00'}, 0x90) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r3) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r4 = inotify_init1(0x0) fcntl$setown(r4, 0x8, 0xffffffffffffffff) fcntl$getownex(r4, 0x10, &(0x7f0000000140)={0x0, 0x0}) r6 = syz_open_procfs(r5, &(0x7f0000000600)='fd/4\x00') ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f0000000380)=0x4000) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 1.759844038s ago: executing program 1 (id=1140): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/14, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1a10716, &(0x7f0000000580)={[{@prjquota}, {@mblk_io_submit}, {@grpjquota_path}, {@resuid}, {@prjquota}, {@usrjquota}, {@usrjquota}, {@inode_readahead_blks}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}]}, 0xff, 0x46d, &(0x7f0000001bc0)="$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") syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000540)='ns/pid\x00') sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1010008}, 0xc, &(0x7f00000005c0)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x4000081}, 0x20008051) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket(0x29, 0x80803, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0x10) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002600)=ANY=[@ANYBLOB="1c0000005e00010200"/20, @ANYRES32=0x0, @ANYBLOB="05000002"], 0x1c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r5}, 0x10) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 1.622668838s ago: executing program 2 (id=1141): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./bus\x00', 0x400e, &(0x7f0000000280)={[{@i_version}, {@nobh}, {@data_err_ignore}, {@nolazytime}, {@init_itable_val={'init_itable', 0x3d, 0x4}}, {@acl}]}, 0x1, 0x42f, &(0x7f0000000940)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf09000000000000550901000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00'}, 0x90) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x13, 0x0, &(0x7f0000000140)="b9ff03076804268cb89e14f088a847e0ffff20", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r1, 0x8983, &(0x7f0000000300)={0x6, 'gre0\x00', {0x1}, 0x8}) r2 = gettid() r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r3) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r4 = inotify_init1(0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$int_in(r6, 0x5421, &(0x7f0000000240)=0x2) connect$vsock_stream(r6, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) fcntl$setown(r4, 0x8, 0xffffffffffffffff) fcntl$getownex(r4, 0x10, &(0x7f0000000140)={0x0, 0x0}) r8 = syz_open_procfs(r7, &(0x7f0000000600)='fd/4\x00') ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r8, 0xc0185879, &(0x7f0000000180)={@id={0x2, 0x0, @auto="ffee8e7268b4d909e4003f00"}}) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x4, @tid=r2}, &(0x7f00000002c0)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r9 = socket$inet6(0xa, 0x80002, 0x88) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f0000000380)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x33}, 0x0, @in=@loopback}}, 0xe8) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x11, &(0x7f0000001240)={[{@noblock_validity}, {@stripe={'stripe', 0x3d, 0x2}}, {@norecovery}, {@nolazytime}, {@abort}]}, 0x1, 0x60b, &(0x7f0000001b40)="$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") 1.45955969s ago: executing program 2 (id=1142): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e85"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) pread64(r3, &(0x7f0000000300)=""/150, 0x96, 0x0) 1.20029471s ago: executing program 3 (id=1143): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70400000800000085000000950000009500060000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x300001a, &(0x7f0000000500)=ANY=[], 0x1, 0x2b6, &(0x7f00000000c0)="$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") write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000003c0)='net/igmp6\x00') r6 = socket$inet6(0xa, 0x2, 0x3a) r7 = creat(&(0x7f0000000340)='./file0\x00', 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r8, 0x0) r9 = socket$netlink(0x10, 0x3, 0x4) writev(r9, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a09000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="747661ab733d66712c7266646e6f3dd450831baaea81e5a04c4befd82361d3c4630cec9f052c", @ANYRESHEX=r7, @ANYBLOB=',wfdno=', @ANYRESHEX=r9, @ANYBLOB=',\x00']) socket$packet(0x11, 0x2, 0x300) sendmmsg$inet6(r6, &(0x7f00000000c0)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000140)="8000102e7777d401", 0x8}], 0x1, &(0x7f00000007c0)=ANY=[@ANYBLOB="24000000000000002900000032000000ff020000000000000000000000000001", @ANYRES32=0x0, @ANYBLOB="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"], 0x28}}], 0x1, 0x0) read$FUSE(r5, &(0x7f00000039c0)={0x2020}, 0x205d) 907.070212ms ago: executing program 1 (id=1144): syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000340)={[{@nojournal_checksum}, {@nombcache}, {@barrier}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@usrquota}, {@noauto_da_alloc}]}, 0xfe, 0x55a, &(0x7f0000000a00)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, 0x0, &(0x7f0000000100)='syzkaller\x00'}, 0x90) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r3) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r4 = inotify_init1(0x0) fcntl$setown(r4, 0x8, 0xffffffffffffffff) fcntl$getownex(r4, 0x10, &(0x7f0000000140)={0x0, 0x0}) r6 = syz_open_procfs(r5, &(0x7f0000000600)='fd/4\x00') ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 607.555514ms ago: executing program 2 (id=1145): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCSREPORT(r1, 0x81044804, &(0x7f0000000400)={0x1}) syz_usb_control_io(r0, &(0x7f00000002c0)={0x18, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0003"], 0x0, 0x0, 0x0}, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) 345.225094ms ago: executing program 3 (id=1146): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./bus\x00', 0x400e, &(0x7f0000000280)={[{@i_version}, {@nobh}, {@data_err_ignore}, {@nolazytime}, {@init_itable_val={'init_itable', 0x3d, 0x4}}, {@acl}]}, 0x1, 0x42f, &(0x7f0000000940)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf09000000000000550901000000000095000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x25, 0x0, &(0x7f0000000140)="b9ff03076804268cb89e14f088a847e0ffff2000000000000000ac141416e0885a049a1794", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r1, 0x8983, &(0x7f0000000300)={0x6, 'gre0\x00', {0x1}, 0x8}) r2 = gettid() r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r3) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r4 = inotify_init1(0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$int_in(r6, 0x5421, &(0x7f0000000240)=0x2) connect$vsock_stream(r6, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) fcntl$setown(r4, 0x8, 0xffffffffffffffff) fcntl$getownex(r4, 0x10, &(0x7f0000000140)={0x0, 0x0}) r8 = syz_open_procfs(r7, &(0x7f0000000600)='fd/4\x00') ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r8, 0xc0185879, &(0x7f0000000180)={@id={0x2, 0x0, @auto="ffee8e7268b4d909e4003f00"}}) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x4, @tid=r2}, &(0x7f00000002c0)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r9 = socket$inet6(0xa, 0x80002, 0x88) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f0000000380)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x33}, 0x0, @in=@loopback}}, 0xe8) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x11, &(0x7f0000001240)={[{@noblock_validity}, {@stripe={'stripe', 0x3d, 0x2}}, {@norecovery}, {@nolazytime}, {@abort}]}, 0x1, 0x60b, &(0x7f0000001b40)="$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") 226.682632ms ago: executing program 3 (id=1147): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000001c0000000000004b64ffec850000007d000000850000000f000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x8020480) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x4, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000a9f850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) fallocate(r4, 0xd4d35557cd302b26, 0x6, 0xdfc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='netlink_extack\x00', r5}, 0xb3) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@getnexthop={0x18, 0x64, 0xb0d, 0x0, 0x0, {0x3, 0x0, 0x0, 0x2}}, 0x18}}, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount$9p_virtio(0x0, &(0x7f0000000100)='./file0/../file0/file0/file0\x00', 0x0, 0x0, 0x0) read$FUSE(r7, &(0x7f000000e280)={0x2020, 0x0, 0x0}, 0x2020) mknod$loop(&(0x7f00000002c0)='./file0/../file0/file0\x00', 0x0, 0x0) write$FUSE_INIT(r7, &(0x7f0000000380)={0x50, 0x0, r8}, 0x50) syz_fuse_handle_req(r7, &(0x7f0000008280)="03680f2a20da68ab7a58c28b635d19c32b6efabb6ae3b5eee5a74d8943c613539e166c8baef50500824343a2f05093a5c21f746caefe9f9bccd83cca0fc28da20e2706308c61398dfce5f54ea9f266791ba29a4c7da158637def8b816aa296815ff13c06d632df45feaec1fd272ec1b510eaf58fe6b26cc36df3ecc0f5b1f258a190304e2519dd39ba9f5bc1788926ced5202e3b1e3afa16ae0b5d66dc05b36d3a00f72e5f318f8bdfc7eddc94238c50031d0657a22445ad0b3b90a86b086eed837a00bf0a3888bf61b4db57d6d8d6b286bbb13ba3b246def60ac34241eb843f89fe77d7e3e52573e90d791f21d4a8dfcc24ba95db60e2135634c02bd4b14535285df4fbe381ec036d876c4c8057c79371fa9717414590890e182a7b9e0ab927812083acf0d04e04c20c0555c8ceedc5bcf9b0e814be6eca98ce7b2f9f17d098bea541b75a1617c09fa99902ad746811f89a1fc5e6a80d77528247d6c104395715d2c9f9102f070a295f20c4307b9e848d3928b50985bfa2486893139761925b8fab96d26291243db23c4fd4d96864f4db860731a4e3e10b52d8d0487f5a8536cb4507dbdc111570ad0321b918edbc52807c2e0676d3257553702d9c1bd6741e9cd5cdeb3b8f636b6eb02a3b0066d7f677d586de5018850000f000ab3960f6656fb98039ceb6400d0299c356fc22b7298ed157c667bed5563fac2192a8ff7706a9e58d9d2f92632d6b25d8b090642e3f323bf7ff4d8264617a43a97099dd7347fbe3b1c439737913f17eff57f3e1ff4fdac374fb554e9a6a1ff32daa69507698d660d8d5f591801d8e4a9309342c3dc84966dbfcd2652800200bcb0dde9d456b7a07c5409f4f5387d0150daa34dbc865c6108d34dcc51eedb277e9638b43ce3c9afac5d7aa0f8542e58b0a84632a07557b041845d0012cf016ef065f97660b731ce1b79493de71def047277a3ae6d4a0d86591847d3475926039848c5baf6e1b43bc83053855182423156e54cadc8c85089265b49da853d15e5a701fedf2bf7986a723abf72e513fa05cb178345f2fcc859df49e74c8ccef196000a05cb090f22986ffb6f8f74ab41d2d88b6b535507a23b03d2fc2743f6f69fbcd43b8ff52b1ba32fa0137d542c515569b7f486f8ffa02ad1f54767f51701eb4c141437720884d529a57e17bc2837799124f7f112f42bd90f5b435d7a5d7524f7667bb7a6266263e62bf7ebf6896888d584c65a530b766111f078630d8629ffa91acb5ed02498549bd7e042acae0fab7ccb23278088a364be3da9619d91e1061bbaa9b33c3c5fbbcbc725ce8c2cc9ab0f2b4d30078040d3ca79d3ca056c360381ee87e743dea73a25ea2b4843f9ef280feb507f933fb556c718d8bf8f8618db72805b65d381b319f65c745c1e5060dae2f498852e79aff8dd9c88fd939a31871a430d3ba96fb118c79d1b08a397af23b1a188d1802106f588c768a1e6c9d244ac9a38d2a54ed50f19b78bf25e0ae1f9337ceaa8ff5ca8640104b19bcd643b51501d4e03ed5ffb383e7ed0ab78d540ae10bbd64fba1af59a4190215b7d10230992bbb4ff618d8284a2e2446990511fc2bff07cce9ba94a11d3db041e220e3d931fdf129d8ec2c9b17d6587a0044c9e09f52848db43ddc0df94513cc9e94e9d427623502a910deea0f21d86b16366769a46bf0d6d9fc0d2cd6b98ed885e9e2d765bdd051196bf20bd27c46ec902726d96de352c346d904fa00d63b67d272f116dce489f9d636cef61b441b9c113addec983b8b2fbdb2b32049e436c972b2fcf5140dc7b094c5047cb6226da700b72aeb3febdf16a75b6f61a311f606251c99b377c775c8fb3446ccf25dc4cca24290b3939f948019b05c80b5a6382112f63e0990b324c16a087c72aaec08796afc769f678e3634100a5a9da8215cb5d7a6a6b50a81676ef4edca35595b11f9606bef2fb84fe1f0a0703c886579f09986086f0dca6eb8061f9a74c79c1f758684a7363974b14561b9d2efdaba6c4cd8cb70627da1e195fcae3d8b2fa751278e8f220c83e677e14731eccd6fe0c357b011ed88b6df0c266b383f224b8e95384e401b717030b1227582d0d1042bd90377c4f2c7206a19983fc5905e4eb87edb6532b26ca9e28e160202606d19d9f5da34762f4b3fa842d7bff382ad70dcbc411f8b3e4cace8c8e0c72898d24023545e0dfdc4176209276a535491ce11c045c57b45c40f19b12dcf6ffbf78ab23e7fe9bdc404cf47db9855f2b835e1fce57debfa071803ec38da3c77a904080a4c737ce2b20e14e8449762f1ca0b1ce71779d2e6ee5299e1cf230e8070045c23c1d0e52f66fe9039f95cdc0b448dc12d24de39157934270345991948fce921b5d8e739315cc75d4b3b49928437b88672c1a7770365207b43895f45909d5d972f48aa66de609152a5afa2c7d75f0a14189d0409f0b623eab3b6e7d81025cde140893ed71b6f24f5a36d21dafb62af6be9da845403bc8ed36672efa74d7da19d5794cb4b79fa1c86940b1890c012e14b7c3bb261f16bdd99efaa9819b0bc00af842a6b94c6086d15b16ab81af9331ba3a5bd6941ef35239e85455ceab02c598ccee8fbad97ed37daebfe3b26a5a6c9eda5f65a1cfaf7a1f1688267c812a56c552ae11b465dac030e18f9008ad03cad80bf2cb91a7d99dcfa54d323ae0a4c3a6dc0f80d7ff703870610a945eb0ab5b6d14e81869c8872f6b123d98edcf6bba10d76d35cff4b0bb73db8b6695a8351785bcba1e160a42ed367c4da727da38f91562e941e5c4fa90cd585c5f1cd3a7d6892f18a5aa3c74a4fc00bf5909267489b937a928d9d8ff92530b5226eedf8ab9a957e5ffec45bc3a55e6955b38393ce52892655265d1f741e0b744808eb568a08d145a8bc5ada9b079f6d0bec5fc2ace0502b3f926372dff49478fbd10451f0de4b3d1a63b9d4e17ade45628d2e9dca041fcf7fc1e105e1fc44089fde9caf418ba8454dc361df4a59e1bd79143d280613e3c79ad18e922a43e199aa5927bb9553dd31e6223ad19bf8aff6e1dac8b3680feea3138bc61742b03f047b3d77039c1a4c2d05bd89c4bc12a1b83d78b4e7023f690fce6a44608c423d8cbc2e80942b9d9df2f4bf5606640fa47692f3e003885983a73e1dc313b243bbab5c3c6348afab796da766044ba142eda5a9d3713e3eda8c54c1708909c5da89ba67d29cd7f409c9b759cba316c42028754e3cb6eae2cc4f6d66982f212320f199b2e837bb4c54c54bcdcd2ac240ef6295d38e9889b4213819ef0f9aba6ceead4e0fd2c4becdc1f8ee3049831996c9a74a5fd4e12a1fd21ed47cf27e29f9d61e4b673d88914c36eefa53d3c49d94b463b7f8462c1951dfe33c10993d5cfcd0ededd50ad55009528f1e79fbc2fa70c3338b32c40ae3bb45d7079c7ae8433fb1aa19affbd3fbce0cb5ab0d557afb3be036856066eea45c28e93528b35477fc97fe9ff3641e5bb0f0e46069eb653c027daabff38541250081c77e0e3a1d030a73289e771cc41db10819af60599b5df0ad978fcf0b46af821c6b717b265e07d3a85397ea94de26f510290ddb5df8fcff76fe624843c8577802809c145916afce01d9dfdfa8bf07633e98f14fc73d5ef58ae5cb0c308bc74ca38259692a1cd4cf16752786a1c816f24612c27393d7e40a2df9a3dfa23a0c59613c8a7ccdd97c3fc67ecab94dcd8cc4b4517ed2414d41ce574074ffebd156e3d65c4421b0f339bc9f29abbfe49db62122248cf96b74d9639b3ef9d935cd81315a7ecfb0dc6ea1ee053c2e5c3615fbc10782f16a564fcabe1df70da7de989e00eedc346cef5b5cf880e9d563fc15302f056d37f98a939fd1dd5478b4318c256e93b77e31f87d8f7fe31755191b40d778ddb2ada1480bb9fcb96a09783fcf2c2c9fac2c3a2771dd0e2fb113cd460ee2c9cf4a712f04eb1b1a746091109f7ce0655e1ff7781fbe853e3d03bb91c9d8f4f416f5745c6b607bbf72786bd3c0ac4761e6e6d70f12dbefa1b13542086f793b72c6102ac06e75be17bdbb1efbf7e007f07f9bd433fd9d9cbf93e760757b792f15231895561fe49d9d683ccc066f38af581422b71702627162c0f0f35c36a61eaaa92129114b7334281e35fd39576e51d8593c149c9326e0c710ea4dcc9ef39a432a48ae1834f5046b954f9c033d6035cde0dbffe3e97f48a1dc695f4b2f6fe5d4eee83008318def105c37e11c9015670f13417ed036e68f6fbfca2a8289829677feb23079f3f2ee53b26e491924fefc1c50e54f288a8c4b6ba6d319054c3a9e39e14bba81b423acbd44b51279bbea6b0bb2047325837ce8b2191454f52ffa2cd04abe89e3de5bc102e9fdf740d3efd975bc9503af796e6aeee711ef8797de5d507a964730aa70cb9d3840054d4e1ffc57de378b511f7649666a54a6b3d91ed517198d76322bf99d13bef530a43ed3f13196bf2def6dcfb39f76471c75c5779bedf105717e546057fb478bfd24e8fdf3c12d028b542d1f424a9d45bb9e026e6098eb1cb0a77378300ec1b4c9f006aa4dfb7fb5c57cf1b035cbe96009ead1ca25ea1e5fae40312a4e9fe250684a1c8653bb303209e0fc6a498f3a08f6c5b946378a349f3aea45104a2badb8a45f500bb4f0f6cd620ce794e0f390e1cb7f2f1fc0039f4250a577544a6862b47bf89eea3a8c1516b7a9dd111c2ca719190e8feb1a7079e9fdfdb8224dc50791c986825469c087c8f081616edaa4193e161281aa68b7286a364cbb336b2459f0892e57c40afcfda7d16ea1877efb4e4b0d4b5c31e8cba15066903d3a91bdc7fb64452fb9843436110596f0b038da167a86f97d32c807270a1c994fe88e2517e11bdd210dd982d3c8158459440108308a936c9d2370b9d157c3f9caec36ff05bc40b37f095edf33bf4fad440f38c3f52129456936c07014140be5618f4e9d07b66679238023390cd676b1a3a28d0e90d5ad9ef13a31fcdc5a435454309367c437424e340a1f91c6483bce1026d85a16fb854252ea4ede39a4e69702ecff76432de508e064eda0df9f263a25c0f626d1c1ffaa6783be2975451ee936cc2178648935a924f6fb2db2f8ba34e348920d903114520918cc6872b842e3744fc18d1363583a107ec7b89c7792c0d8069e12f873f6d668f6fdeb47b72986914e45c2b061c5c936c73c9bcf1475ea0d25edaad21cf193405c8acef3bff4e4f1b2b321d70dba59e856a8849c2bba9508bad775370669b2bb7f5e53181af8bff525e13a4935d7e28b997b4ff15da9e36f1353a154ab701ad15420786daaf27ba7e122f7b825c668185b685630420378b4142ec4e4242c2cf0bf6e143f7e55cb12fb9dd59a8df9959ce4fc5fff68ae7174977a31ad7fd644bc94a20bae76f0af474034990fdfec8ceca0e6cd93fe21d84837b7e9d74c17b6d3054f0c008ee05764745fd8773a0c1c31bb3eef5b7e261b54805b5c805a4eeef05c812fcdede200442e7340c63490645ebd09c235d5c52a785542526edfe3875ad08267faed1d0a15236f00c6736b94c1a3821302ff610697ad7becdbc96f54b55138b585cd122e0d5aeaf43c9ba373e8aa1c1297e3415552cc57cd60ee1f3c04500ed0eed37775c873de3066c034c176c67c5bfbe9899a47732030855781341374641da058eee61d01d11b9db8f19fd4558957897340e32cdfbc39713f1f439be0638f614cdb5361433a45a6ff024e39c94141dc5403af101404ce5f2efa97b90d9ecdb7c361785dab977feded32554d1a74d5cbfe2435be7f0329ba382455c2ac11fbe29fe3826796d4bea03dc53a37f63f5be2773f83faf282f0ae24d9fe5762b71b499fd37b4ce7e71f93c3a983f80fed477708bbf2261c89893c4b76e34fac9b42671b6cc81678cc867f53e8c3ec47716206212743ca0c4941c2c61ed3177fccf85921e998d2b826df751173944bb07eeaae4001f677a0687a2550eeac8bb5128ecad9c7b6a514596a30b8292fbacc09ab488193507b6785d7a35c979db774b2c413246f1ae88d35d1914b20b8fb501034321642fb0b0baba3378e4c31fb5e247c177e573295df0194462b99079a436400ba1be2e30d39b8714c0fb2bdcd981d5a5cd514f8d4f14e4e0437108630355d8f2b60a6d18cb14ceb2b5d0704aa6e93e180bd79cb17e176bc4f81a03db12a03413de6189896955bb9e3cc69b6f9a50a7eda3742527f98c71d7ea8ba75e253c2b783f7104813c619949e6a0765179b1b9cbe68b703335ab5986928d86384357a2f4189f4b4ffcd61a3d29709bbc93b5371f0e7798cb72ae4c17bcee24f8e566f2777803c3d182d15a63ac40063f0ccdf4bd790404524eae02eafb6b54c699578486490033f0be866c74a134083003d330498658ba973ea674c4a0ff158403987b4c4752b07c8637a119b019fd5093406960144445056f6ffe73eda0235dc1871bb6058d4a9feecac628265689d58a81453d33290ab56eb691f3180d0288449f41844e56f5c6cf522d4a5866b24fb9552fde71946c4d25dcceaa41cfddb5a33c51c54c0a0a5abd31be8fb6ec53c1d14ba648e183979dbd0db01b9e51ba3803be7e7d3dee752668367264c783f74838121797ae5706ef3aa460682d1bf55808c70e69ae29d7683368470d08e7e9a1095305dce250b5b4bd48c02e098d241b1089736e8306a737e3a1a93e554cc3ab24672b8c74bfb8825004ca869e347f873de14575493836662ad741d79269904f905d7df64d0581ab8d76ee51a32d72ccb719f3a25c0a856b5bd2b2a1269e208d70c32e1d5ad0dfdc0ef43f0230e95eb85871eb4d6033abbf0be7025382d878eeaeea73c94270e79bd5757dc1bac95236a62545cd467830b12dcc30d7cc81e889d360d073db40058e9a1c7b41fc53e67740bc984132a1452cf7d000378f14ef93a7eb0dc9bacf23584ad6761139576607f8214757f71fc47b2944127116ca3e83b9d9643bce8d7bb44b4d16b5d5cff70a9e1114cd920b6fc1f409672648ad56ac3136ef0a314adb458faf3d3f171cb2fc513d76e43e6bda2f1a68e6fcf4a4ecbe6bc87716e2a82ea0c4657983ca0caaf8d75fdf5b0d7930e4f3e95eb1271485f938e7ad2bf0c97b7c11745de45518a1e3a74341968588558e7197b407d24eda0671ee28f219e4c5f809a7ea6f9f5b9705f4634a96112eb262bd5967db5237285b865d3f64516495ea6d1ec20dbed7af02362370bcc98671a61241fa1ef5b3095609d66ecc16010f6f67a280d1c6d215ec224ead17d68bbc9bc64b363b5be9b479b7aa2cbc8587a6b48cf653fde7a262a11ab3a10356f55f122310feac77c32ce0994d6e8a70f1c53331cb473a8e29427322fb6da292c4443b1678877f1c981fa05fbdef96520e5895aeb2a3a8e62652f9d8830c3b144b9598873e2ef41b7ade943807766877d609972cca74855eaedce07cda35b50557de96e736ca3107c154d31aeee78db214687b9964517bcd2c6c9ec047514b45c831aee4588166dc3ec9ab36bd1033e74b3d02d731c5bd84f659fa9fe55cac08c12cb999a2e64fac52f6cb7d1fffbf45d9a1126787d0060fd1be563ccbc278ac97dab0c1bee664675f273f5fa429bdc24b21ff1cf0a3ad3c687fb07ffd88bad6ab6c6b422a43b77ff76f96bf405c07f8a667bb8ff54d6714aaa21ceba2e78ce03146b2ab9f49e6d65081119b8e7cf3843e91349790d2b975c9f9c305df0ab4f2b1b2f30f629313cc66a325e4037f38f29842ee5781ba73d2f30f506cf7ff2237a72b4075aefa32cdd5ba0ae4e65cb6fa47a3e06f0d5f684b7172d6b58f5f7d783c4122db4f4b8b4f9d3296c9d115f432710c29d40dfca0010ecbe2f42fac899911d65c84f08aaa1923c8add5af518286211db14e1187a8839f3b2ae8bd914eafc16a576bbe3eba6271a4c5b3170c3f543761f11f1326a05c575bde1b5c6afd3876bea4fbb649071a95caf74de9f7b3421803ec351f934b8d0932ce72a13abf3627d9a396c10875fc167ef1ae98ff92af9ca366033c99d30306fd540a09d67d26ab192504e7c09f9e4d06287a2b1748f1761ba3c16d9d08be7562b7351c4b4679f5d4b38681bfd86c7f2003a9749b20b602112a95803469f5d252c564912b55c4bf3409298dbd066d877cc70a89b484b9ee6bb836c9acd1e53086c4be85e9a3bc5969c7016db9c72b68620c241409d06f4d7f72fe2289c9b4921055922783b8b886bc22926b7d194820af2b90e3c60e87e1a7851f38a970c07c1da120d1da75de2bb994ff7d05a313522373326f160914a0400711e0439d694f5221afe8cc118722ce4927e9543e61a12a76bcf2da1d01a0f258095d32063387349b4e9f253d8b73c6e834b6866f8a56b4797b92d521fa732aa0d55c8e9d6c56011ee6fb450853dc564d18e97c463609c27a63f9c91c46d7bd80ace4edc0615ca342f43ca3b3d0cc36ed52b7d1f457e5b4b26b5eca0d91abe4f1a42a2eec40ec2faff1222f71dc226d6344e947b45155691205c09913fc3c6ab3fe76f4d1b11fa45869e20694b5f0a1074780a07332764212533b797dd24d8df157d4172f91253b77eb2ec90c8222307ed59136463057b7f469116086410b7503b44cef401c47811c1390060da5b3321d34096b67468a7702978d98d4bd721c18a25ed541249638e90281dc8e3565dc33e66d7b832a9bd62c02c5ed0e92935c92472499653d2d842ea6697c733ee80d775884074b3a0c250a4aa021bb6ea93514f9cc5f09feb5719d270cd184e364ca966f1416e10f111bc425f32a993fc5cd75503f99d89d91d7ddc6dee70193057cb946e5fbf8663c53e12cebffe5dbd4a86bfcf5f35f0d8aa43763a60e00356b4f8bc2bca01b02cfddde38f0c4df1e7f98709fdebc5abb5eb9631bdc3dbfcf15517fabcf16931eb7381e83713b081ad1947274d4896ee8953d772e9e71f363b6f1147317bc739ec128e4ec865f8f0ea34cd5ff19fb2c28931d2c85846735358504ae9161535cd7890e8b95c814cfec116b78e6d0eb5097cd4f35888121452e27391d865c15f0b986925d0d0c623bcbb4d8ca66603720253af17853967ea5954eb5ef0dc43de185ec4925026c680464e66d1caff1f4c7c757bd55ec2515ffe7183e3481ff6f626c2228a3fc3d15f63e4bfbec76a2a170206142cbbcf204a1cbfe0ee56eb47dfb79c80894c0a0fbf8a2955d861678fc2f8f9ad7a28052197b5992bced1273658da5b1f42fca48c80883600c24d8515a0c7113deb4c97df918ab64bca16a0c14f2547dc91d5ce4f884978c95fe54899f77ffc20a2c4b27350bc451bef72a46d8e144ad57a8d5f8ac039f58b8a53ea1f3fd5fce612a171bf82ba17c0681cf46ce5c8181a522ed2e986361903903159643046c7be1787dac6ccab09d18a30997541dc6e9efa260f1ff0392bc1890f19d8bb725f4fe7d8bc618f46e0c23be6b9ca67777dd3f5a89b41ccfb11a526a3bed045a2906f86cc5186a1db7a70391261b694b423e5a44d374f9d3720330e083574083f8950b2b35c8bb5b6c0a7fe259f235dc1c069d4581a9f0a7451890561a0829bb290de6aefe4d243ae0b00ca61a1dc4262bb4951242b21d88148eb7b6a9718d6433274f2b3c9bcdbb6d5df67b48ff42692d8cd7f4b7f41728de68ea1ce0f3e4a2843c5b9ffc43f69b8a0445dce44081f5b443a327084b0d00d07cbdbbfd2da5d67bf8d4bb4ee408d17eeee48b61decd06bd3dac9a1adbeb069b49ec96608b9179bb3af4c10f2ade6778b31fd4c22c2961cb949a64e9a8a4879c550f8d8783064cb304511e40e2e562ba83c08ba8ae011a784ed9db03db5527a7aae222c856c8df0a94f9c4def0f94244c5b8e3db9f39dbd337928e24d9d8562f231fea72116c01089163d2c5f4ca17faab20b73c9957fa1a9af20837a804870034d4e64281125b070d8ee0dbf05f95e5fb079e2a57e9af977222e90b664189114dccbca81ee58b7de90a813768a2049052b339a608d3e9966bdb3b584291fbf7694a7d1dea7f72ca604894e6cca5d326ed5e48c15eff5e6a8cc11c40f84ca920d79a5c55d07001909bf6338921c656a39d59d03f62bb5b8870189f0416ec8c317b03ccdcbbeb3e1a9bf2661813f4966b57eb56a2757de5f7745851b5f7bf75e41eb1646e61a41923c5c0e58c2ea478d95b5c39c450744aea0aad3706fce684cb7338ff3dacab60e8d968f0e6fc070693ae3ca16996b34a50afb7e6e377546ae28dc8de7a2ea3a657b4b0003a91a488e347c61971d62f32eaf843d4d4c4f86cc4033c1244c8408def09188dde509c629323f34072f9089a3846680894e8b000a03865438b2ea212b68fdef7f17583f92014eef2c8115a37c9c82dee06213c1407c1433690f68cdc8e91971104039dfe06774b946f43b68b7957a5ca3ee763eafbb7437850eb0a285c413bcf6965232d593d8da47a2a06abc635ae38e596a9dae55b43f341bcc6fe72d79b453ac1c259da37f64cbc1f1508caf280aa6a3f4cd2ff5564cc5a8727f222431454a5ac93398a29fb95b4e057686cd6fcd920992f74e5870749676a36e043bec5fc1b0fce5563affe9addfaa3689e857383ccd1f2924080449d2cfb006e855570b711c1dedd1df2629afaa3806f4ae229a9a8ef1940ddf2c55dac7812d2374c0684b7ba27b2f0849ee4c055d2b8ccc8e41c593378340d7546bb974bc8032f220b37099e3b04c6591c40d2c50a855a491e03c1c9cbb32c400f6104341262d92daaf3e2c04936cf28788fdff8e0a77770a9deb9089a9e32eb5d9e2581aecd98f83881ca8e7d49e603556dc03a9aa19a8f3a4735aaee347b25ea35b36fa57484c0b6d591979b4a3da894fa0c15966d6a5e02e397cccdb9c314b504372b81ef6913877767001263c05dae362b49e5928ef36f554ce245b4111486417634f1e7f4530a760ae6ffd3123f5736ac12c5bf506c5dca03079c0fd0776cdb56c938cdf480fb9b97b1685dfa3be6f712aae107e2dda726bec137b2ebdf56c0fcaecca4350bd7b5c84d57f29c2a2c99ae10c30cece4831d71ae4ee3362983cc816bb6cb9225b9db08503a1be23a26a0425a8628a2e718feae5df91d829f27966f766b623a0a4958a57642aefae259713733670d5b1d027fb8eb2d0d3a0b4acd482076dfa09ffe883f556b2db2262bc0872e1bd713f100dd7a8a8f2d725b46e09c625d513179872bbcc9a41e596a18b2471d977f4ca2bebd06cdaba31b70ef25e098f214fef16f16f725cad4311eb91457fdb70b471eddb65ecafb1e2b03c5ff21356241e3cab2c8ba601f9ef1aec9006b7cd0b81da29be01cb4c1d52e563298e373013886ebb1889bd5616647c6c418ea6bc1f3c0853b65cae48467b35f08318e3a9d034af7224cc3520ab1ece7751ba15407298b21e4f84ef7c23d7993739403d4f116cba2d0ae2d4003a28334c461c734d4555105b986ad0af28aac36c753ab52b91b7e23ae3ab07d3b170fe53a2249efe5b65463a3f237cec72091b04005f95a15ae595191ba39d0ae1d91d8e00b132ae9339884bc57bbb79978a308e1c31c5f213b092f380a7ba58f55869e9c29a5a6e7a7aa4f8d58e5787cc05e5", 0x2000, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90}, 0x0, 0x0, 0x0, 0x0}) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xb81, 0xc}, 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r9}, &(0x7f0000000440), &(0x7f0000000480)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r10}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="180100001700200000000000a54b0001850000007500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x4, &(0x7f0000000240)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r11, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfcd7, 0x0, 0x0}, 0x3) syz_fuse_handle_req(r7, &(0x7f00000061c0)="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", 0x2000, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001100)={0x90, 0x0, 0xcb8, {0x0, 0x0, 0x0, 0x6, 0x0, 0x0, {0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000}}}, 0x0, 0x0, 0x0, 0x0}) 0s ago: executing program 1 (id=1148): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f00000069c0)=ANY=[@ANYBLOB="6c617a7974696d652c6e6f696e6c696e655f78617474722c6c617a7974696d652c6e6f626172726965722c6163746976655f6c6f67733d342c757365725f78617474722c6d6f64653d6c66732c616c6c6f635f6d6f64653d64656661756c742c00be9ee044c45511e65887f6fac9eba6d787c3684a836f23dbf8ad3dd5931c08b4d8bde7e8acbbf3bf3326f2faa5952a332ad2ced40c98a2affa2dad4d623f9ff3ffa81e45095548ab6200f069d0f63d20fd71d3043b0dd5c4cf9785f3f531abc19bc1678f5e0b33006bd1049ca45fd8500d67a5aa6e1c23d900000000007867738729e703bb122283fb2fae9813a0cfefcdf3dc968af1cf80e96649d943198a96d9b1af9c91506b30922be8537f54e65cf60c6b6a5798955796aea325770d6ccc93a95fad93b2c7bad114fcbc55036a301c23b07073c71555791db8919235022bb0ee4294211ab9b43f3fbedecd223722d937aa22b31e2e9c97e5ea94e4ab83d4e5811c7556813c334aec856af0a0c12b3c93ba5aa906c6e2268a0c6cbbb13f496d87c608604eb02b2c031d5ae40c75"], 0x1, 0x5511, &(0x7f0000006b80)="$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") sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000000), 0x651, 0x0) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) bpf$MAP_CREATE(0x141e000000000000, &(0x7f00000000c0)=@base={0x6, 0x4, 0x6c03, 0xee}, 0x48) kernel console output (not intermixed with test programs): ected capacity change from 0 to 2048 [ 150.535313][ T2896] EXT4-fs: Ignoring removed orlov option [ 150.546972][ T2898] loop0: detected capacity change from 0 to 512 [ 150.553556][ T2898] EXT4-fs: Ignoring removed i_version option [ 150.553587][ T2898] EXT4-fs: Ignoring removed nobh option [ 150.565016][ T2898] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 150.584234][ T2896] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 150.607192][ T2898] EXT4-fs (loop0): 1 truncate cleaned up [ 150.620519][ T2907] SELinux: failed to load policy [ 150.623270][ T2898] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 150.642193][ T2896] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 150.657314][ T2905] loop4: detected capacity change from 0 to 512 [ 150.663563][ T2905] EXT4-fs: Ignoring removed mblk_io_submit option [ 150.694202][ T2913] loop3: detected capacity change from 0 to 1024 [ 150.711245][ T2896] EXT4-fs (loop2): Remounting filesystem read-only [ 150.715999][ T2905] EXT4-fs error (device loop4): ext4_find_inline_data_nolock:164: inode #12: comm syz.4.739: inline data xattr refers to an external xattr inode [ 150.732602][ T2905] EXT4-fs error (device loop4): ext4_orphan_get:1401: comm syz.4.739: couldn't read orphan inode 12 (err -117) [ 150.732719][ T2913] EXT4-fs: Mount option(s) incompatible with ext2 [ 150.751041][ T2905] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 150.766046][ T293] EXT4-fs (loop2): unmounting filesystem. [ 150.806825][ T361] EXT4-fs (loop0): unmounting filesystem. [ 150.855779][ T2920] loop2: detected capacity change from 0 to 1024 [ 150.876772][ T2920] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 150.928005][ T789] EXT4-fs (loop4): unmounting filesystem. [ 151.098967][ T2926] netlink: 2 bytes leftover after parsing attributes in process `syz.0.746'. [ 151.126951][ T2926] fuse: Unknown parameter 'use00000000000000000000' [ 151.859954][ T411] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 152.033396][ T2920] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 152.064848][ T2920] EXT4-fs (loop2): shut down requested (0) [ 152.078062][ T293] EXT4-fs (loop2): unmounting filesystem. [ 152.295321][ T2941] netlink: 2 bytes leftover after parsing attributes in process `syz.0.748'. [ 152.536813][ T2941] fuse: Unknown parameter '00000000000000000000011' [ 152.671214][ T2943] netlink: 2 bytes leftover after parsing attributes in process `syz.3.750'. [ 152.681221][ T2943] fuse: Unknown parameter 'group_id00000000000000000000' [ 153.287997][ T2945] loop4: detected capacity change from 0 to 256 [ 153.635433][ T411] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 153.723967][ T2952] loop0: detected capacity change from 0 to 1024 [ 153.736215][ T2953] loop3: detected capacity change from 0 to 512 [ 153.741107][ T411] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 153.742488][ T2953] EXT4-fs: Ignoring removed i_version option [ 153.759048][ T2953] EXT4-fs: Ignoring removed nobh option [ 153.764741][ T2953] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 153.774621][ T411] usb 2-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 153.785907][ T411] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.788346][ T2952] EXT4-fs: Mount option(s) incompatible with ext2 [ 153.801938][ T411] usb 2-1: config 0 descriptor?? [ 153.803536][ T2956] loop4: detected capacity change from 0 to 512 [ 153.816832][ T2956] EXT4-fs: Ignoring removed mblk_io_submit option [ 153.823852][ T2953] EXT4-fs (loop3): 1 truncate cleaned up [ 153.824943][ T2956] EXT4-fs error (device loop4): ext4_find_inline_data_nolock:164: inode #12: comm syz.4.754: inline data xattr refers to an external xattr inode [ 153.830046][ T2953] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 153.843993][ T411] usb 2-1: can't set config #0, error -71 [ 153.858111][ T2956] EXT4-fs error (device loop4): ext4_orphan_get:1401: comm syz.4.754: couldn't read orphan inode 12 (err -117) [ 153.928152][ T411] usb 2-1: USB disconnect, device number 10 [ 153.934652][ T2956] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 153.950128][ T2963] loop2: detected capacity change from 0 to 512 [ 153.967993][ T2963] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 153.976882][ T2963] ext4 filesystem being mounted at /116/bus supports timestamps until 2038 (0x7fffffff) [ 154.523511][ T28] audit: type=1400 audit(1725542056.386:329): avc: denied { read write } for pid=2961 comm="syz.2.755" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 154.559748][ T28] audit: type=1400 audit(1725542056.416:330): avc: denied { open } for pid=2961 comm="syz.2.755" path="/116/bus/file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 154.562805][ T2963] EXT4-fs (loop2): shut down requested (1) [ 154.637203][ T789] EXT4-fs (loop4): unmounting filesystem. [ 154.638913][ T28] audit: type=1400 audit(1725542056.496:331): avc: denied { ioctl } for pid=2961 comm="syz.2.755" path="/116/bus/file2" dev="loop2" ino=16 ioctlcmd=0x660f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 154.668001][ T293] EXT4-fs (loop2): unmounting filesystem. [ 154.717341][ T294] EXT4-fs (loop3): unmounting filesystem. [ 154.724667][ T2977] loop2: detected capacity change from 0 to 256 [ 154.761882][ T2985] loop3: detected capacity change from 0 to 256 [ 154.769589][ T2977] FAT-fs (loop2): Directory bread(block 64) failed [ 154.775431][ T2985] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 154.776051][ T411] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 154.795903][ T2977] FAT-fs (loop2): Directory bread(block 65) failed [ 154.802334][ T2977] FAT-fs (loop2): Directory bread(block 66) failed [ 154.808663][ T2977] FAT-fs (loop2): Directory bread(block 67) failed [ 154.814925][ T2977] FAT-fs (loop2): Directory bread(block 68) failed [ 154.821275][ T2977] FAT-fs (loop2): Directory bread(block 69) failed [ 154.828172][ T2977] FAT-fs (loop2): Directory bread(block 70) failed [ 154.834524][ T2977] FAT-fs (loop2): Directory bread(block 71) failed [ 154.841240][ T2977] FAT-fs (loop2): Directory bread(block 72) failed [ 154.847821][ T2977] FAT-fs (loop2): Directory bread(block 73) failed [ 154.866868][ T324] kworker/u4:3: attempt to access beyond end of device [ 154.866868][ T324] loop2: rw=1, sector=1224, nr_sectors = 4 limit=256 [ 154.899064][ T2991] loop4: detected capacity change from 0 to 256 [ 154.900812][ T2992] syz.2.762[2992] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 154.905337][ T2992] syz.2.762[2992] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 154.976374][ T2994] syz.3.759: attempt to access beyond end of device [ 154.976374][ T2994] loop3: rw=0, sector=184, nr_sectors = 120 limit=256 [ 155.148706][ T28] audit: type=1400 audit(1725542057.016:332): avc: denied { watch } for pid=2989 comm="syz.4.764" path="/156/file0/bus" dev="proc" ino=4026531855 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 155.195364][ T6] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 155.225267][ T411] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 155.231081][ T3007] loop2: detected capacity change from 0 to 1024 [ 155.236126][ T411] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 155.242864][ T3007] EXT4-fs: Mount option(s) incompatible with ext2 [ 155.254951][ T411] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.266985][ T411] usb 2-1: config 0 descriptor?? [ 155.695607][ T6] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 155.707909][ T6] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 155.717701][ T6] usb 1-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00 [ 155.726895][ T6] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.738243][ T3018] loop3: detected capacity change from 0 to 512 [ 155.741832][ T6] usb 1-1: config 0 descriptor?? [ 155.744537][ T3018] EXT4-fs: Ignoring removed mblk_io_submit option [ 155.757451][ T3018] EXT4-fs error (device loop3): ext4_find_inline_data_nolock:164: inode #12: comm syz.3.774: inline data xattr refers to an external xattr inode [ 155.772188][ T3018] EXT4-fs error (device loop3): ext4_orphan_get:1401: comm syz.3.774: couldn't read orphan inode 12 (err -117) [ 155.783909][ T3018] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 155.793533][ T411] keytouch 0003:0926:3333.000E: fixing up Keytouch IEC report descriptor [ 155.838412][ T411] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.000E/input/input12 [ 156.108463][ T325] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 156.114255][ T411] keytouch 0003:0926:3333.000E: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 156.202839][ T1042] usb 2-1: USB disconnect, device number 11 [ 156.256829][ T6] itetech 0003:258A:6A88.000F: unknown main item tag 0x0 [ 156.264104][ T6] itetech 0003:258A:6A88.000F: hidraw0: USB HID v0.00 Device [HID 258a:6a88] on usb-dummy_hcd.0-1/input0 [ 156.351952][ T3030] netlink: 2 bytes leftover after parsing attributes in process `syz.2.777'. [ 156.366049][ T3030] fuse: Unknown parameter 'user_i00000000000000000000' [ 156.502163][ T6] usb 1-1: USB disconnect, device number 11 [ 156.586583][ T294] EXT4-fs (loop3): unmounting filesystem. [ 156.617244][ T3036] loop3: detected capacity change from 0 to 256 [ 156.637731][ T3038] loop3: detected capacity change from 0 to 512 [ 156.656503][ T3038] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 156.665274][ T3038] ext4 filesystem being mounted at /172/file1 supports timestamps until 2038 (0x7fffffff) [ 156.675274][ T325] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 156.692626][ T294] EXT4-fs (loop3): unmounting filesystem. [ 156.693557][ T325] usb 5-1: New USB device found, idVendor=056a, idProduct=0016, bcdDevice= 0.00 [ 156.707214][ T325] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.722150][ T325] usb 5-1: config 0 descriptor?? [ 156.745323][ T3044] loop3: detected capacity change from 0 to 256 [ 156.759341][ T3044] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 156.771714][ T325] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 156.952441][ T28] audit: type=1400 audit(1725542058.816:333): avc: denied { read } for pid=3046 comm="syz.1.784" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 156.985499][ T3049] loop1: detected capacity change from 0 to 1024 [ 156.992400][ T3049] EXT4-fs: Mount option(s) incompatible with ext2 [ 157.018099][ T3051] loop0: detected capacity change from 0 to 512 [ 157.024414][ T3051] EXT4-fs: Ignoring removed i_version option [ 157.030880][ T3051] EXT4-fs: Ignoring removed nobh option [ 157.065096][ T3051] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 157.080859][ T3051] EXT4-fs (loop0): 1 truncate cleaned up [ 157.086599][ T3051] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 157.192856][ T361] EXT4-fs (loop0): unmounting filesystem. [ 157.417947][ T3059] loop2: detected capacity change from 0 to 256 [ 157.552800][ T3062] loop1: detected capacity change from 0 to 128 [ 157.563800][ T3064] loop3: detected capacity change from 0 to 2048 [ 157.572493][ T3062] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 157.582682][ T3062] ext4 filesystem being mounted at /156/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 157.627929][ T325] usb 5-1: USB disconnect, device number 8 [ 157.641289][ T292] EXT4-fs (loop1): unmounting filesystem. [ 157.669100][ T3064] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 157.677704][ T3064] ext4 filesystem being mounted at /174/file0 supports timestamps until 2038 (0x7fffffff) [ 157.697481][ T3064] fs-verity: sha512 using implementation "sha512-avx2" [ 157.711323][ T294] EXT4-fs (loop3): unmounting filesystem. [ 157.735631][ T3077] loop3: detected capacity change from 0 to 1024 [ 157.742175][ T3077] EXT4-fs: Ignoring removed orlov option [ 157.748120][ T3077] EXT4-fs (loop3): Test dummy encryption mode enabled [ 157.756379][ T3077] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 157.771714][ T3077] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 157.836956][ T3082] netlink: 2 bytes leftover after parsing attributes in process `syz.1.793'. [ 157.850661][ T3082] fuse: Unknown parameter '00000000000000000000011' [ 158.143911][ T6] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 158.163068][ T294] EXT4-fs (loop3): unmounting filesystem. [ 158.546764][ T3089] netlink: 2 bytes leftover after parsing attributes in process `syz.3.795'. [ 158.556103][ T3089] fuse: Unknown parameter 'user_id00000000000000000000' [ 158.564256][ T3091] netlink: 2 bytes leftover after parsing attributes in process `syz.2.797'. [ 158.573579][ T3091] fuse: Bad value for 'fd' [ 158.800676][ T28] audit: type=1400 audit(1725542060.666:334): avc: denied { read write } for pid=3093 comm="syz.1.798" name="uhid" dev="devtmpfs" ino=175 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 158.802494][ T1042] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 158.831489][ T28] audit: type=1400 audit(1725542060.666:335): avc: denied { open } for pid=3093 comm="syz.1.798" path="/dev/uhid" dev="devtmpfs" ino=175 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 158.854585][ T1042] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 158.854798][ T28] audit: type=1326 audit(1725542060.696:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3093 comm="syz.1.798" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb4b217cef9 code=0x0 [ 158.861918][ T325] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 158.892147][ T1042] hid-generic 0000:0000:0000.0010: hidraw0: HID v0.00 Device [syz0] on syz1 [ 158.995219][ T6] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 159.004728][ T6] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 159.014278][ T6] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 159.050974][ T3097] loop3: detected capacity change from 0 to 1024 [ 159.057694][ T3097] EXT4-fs: Mount option(s) incompatible with ext2 [ 159.086558][ T3099] loop2: detected capacity change from 0 to 256 [ 159.095388][ T3099] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 159.185263][ T6] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 159.194133][ T6] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.201955][ T6] usb 1-1: Product: syz [ 159.206012][ T6] usb 1-1: Manufacturer: syz [ 159.210345][ T6] usb 1-1: SerialNumber: syz [ 159.379079][ T3102] syz.2.800: attempt to access beyond end of device [ 159.379079][ T3102] loop2: rw=0, sector=184, nr_sectors = 120 limit=256 [ 159.663520][ T325] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 159.791487][ T6] hub 1-1:1.0: bad descriptor, ignoring hub [ 159.849697][ T325] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 159.862310][ T6] hub: probe of 1-1:1.0 failed with error -5 [ 159.868469][ T325] usb 5-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 159.877354][ T325] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.887101][ T325] usb 5-1: config 0 descriptor?? [ 159.916107][ T6] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 12 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 159.984928][ T3108] netlink: 8 bytes leftover after parsing attributes in process `syz.1.801'. [ 159.997656][ T3108] loop1: detected capacity change from 0 to 256 [ 160.312834][ T3112] loop3: detected capacity change from 0 to 2048 [ 160.325845][ T6] usb 1-1: USB disconnect, device number 12 [ 160.332255][ T3117] loop2: detected capacity change from 0 to 512 [ 160.333830][ T6] usblp0: removed [ 160.349688][ T3112] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 160.350221][ T3117] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 160.358022][ T3112] ext4 filesystem being mounted at /178/file0 supports timestamps until 2038 (0x7fffffff) [ 160.366738][ T3117] ext4 filesystem being mounted at /132/bus supports timestamps until 2038 (0x7fffffff) [ 160.400135][ T294] EXT4-fs (loop3): unmounting filesystem. [ 160.409183][ T293] EXT4-fs (loop2): unmounting filesystem. [ 160.431676][ T3126] loop2: detected capacity change from 0 to 512 [ 160.447653][ T3126] EXT4-fs: Ignoring removed i_version option [ 160.457295][ T3126] EXT4-fs: Ignoring removed nobh option [ 160.462986][ T3126] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 160.474370][ T3126] EXT4-fs (loop2): 1 truncate cleaned up [ 160.512932][ T3135] loop3: detected capacity change from 0 to 512 [ 160.531979][ T3135] EXT4-fs: Ignoring removed i_version option [ 160.538137][ T3135] EXT4-fs: Ignoring removed nobh option [ 160.543894][ T3135] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 160.555182][ T3135] EXT4-fs (loop3): 1 truncate cleaned up [ 160.604129][ T325] sony 0003:054C:0268.0011: hiddev96,hidraw0: USB HID v80.00 Device [HID 054c:0268] on usb-dummy_hcd.4-1/input0 [ 160.630021][ T325] sony 0003:054C:0268.0011: failed to claim input [ 160.695537][ T3145] loop2: detected capacity change from 0 to 1024 [ 160.708224][ T3145] EXT4-fs: Mount option(s) incompatible with ext2 [ 160.769739][ T3151] xt_hashlimit: size too large, truncated to 1048576 [ 160.930549][ T3155] syz.2.814[3155] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 160.930876][ T3155] syz.2.814[3155] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 161.045230][ T411] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 161.185332][ T325] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 161.315158][ T411] usb 1-1: Using ep0 maxpacket: 16 [ 161.405174][ T1040] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 161.435159][ T325] usb 2-1: Using ep0 maxpacket: 16 [ 161.435218][ T411] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 161.450922][ T411] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 161.460500][ T411] usb 1-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 161.469344][ T411] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.477703][ T411] usb 1-1: config 0 descriptor?? [ 161.585192][ T325] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 161.594098][ T3159] loop2: detected capacity change from 0 to 256 [ 161.600813][ T3159] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 161.611376][ T3159] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 161.621938][ T3159] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 161.638402][ T28] audit: type=1400 audit(1725542063.506:337): avc: denied { mounton } for pid=3158 comm="syz.2.819" path="/136/file0/file0" dev="loop2" ino=1048716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 161.639540][ T3159] 9pnet: p9_errstr2errno: server reported unknown error œæçæŒÎœNí” [ 161.684726][ T3161] loop2: detected capacity change from 0 to 512 [ 161.696829][ T3161] ext4 filesystem being mounted at /137/bus supports timestamps until 2038 (0x7fffffff) [ 161.710007][ T28] audit: type=1400 audit(1725542063.576:338): avc: denied { setattr } for pid=3160 comm="syz.2.820" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 161.742382][ T3165] loop2: detected capacity change from 0 to 512 [ 161.748670][ T3165] EXT4-fs: Ignoring removed i_version option [ 161.754555][ T3165] EXT4-fs: Ignoring removed nobh option [ 161.760280][ T3165] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 161.771373][ T3165] EXT4-fs (loop2): 1 truncate cleaned up [ 161.776956][ T325] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 161.785299][ T1040] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 161.787000][ T325] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.797035][ T1040] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 161.813945][ T325] usb 2-1: Product: syz [ 161.814191][ T1040] usb 4-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 161.819252][ T325] usb 2-1: Manufacturer: syz [ 161.827035][ T1040] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.841257][ T325] usb 2-1: SerialNumber: syz [ 161.856207][ T325] usb 2-1: config 0 descriptor?? [ 161.859417][ T1040] usb 4-1: config 0 descriptor?? [ 161.861178][ T6] usb 5-1: USB disconnect, device number 9 [ 161.887141][ T3169] loop4: detected capacity change from 0 to 512 [ 161.895970][ T325] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 161.897307][ T3169] EXT4-fs: Ignoring removed i_version option [ 161.909577][ T3169] EXT4-fs: Ignoring removed nobh option [ 161.914041][ T325] usb 2-1: Detected FT232R [ 161.917097][ T3169] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 161.930958][ T3169] EXT4-fs (loop4): 1 truncate cleaned up [ 161.967421][ T411] hid-multitouch 0003:1FD2:6007.0012: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.0-1/input0 [ 162.032536][ T789] EXT4-fs unmount: 9 callbacks suppressed [ 162.032548][ T789] EXT4-fs (loop4): unmounting filesystem. [ 162.103425][ T3179] loop2: detected capacity change from 0 to 512 [ 162.109643][ T325] ftdi_sio ttyUSB0: Unable to read latency timer: -121 [ 162.113026][ T3179] EXT4-fs: Ignoring removed i_version option [ 162.122283][ T3179] EXT4-fs: Ignoring removed nobh option [ 162.128077][ T3179] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 162.144547][ T3179] EXT4-fs (loop2): 1 truncate cleaned up [ 162.150137][ T3179] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 162.203520][ T3182] netlink: 8 bytes leftover after parsing attributes in process `syz.4.824'. [ 162.226123][ T3182] loop4: detected capacity change from 0 to 256 [ 162.414557][ T6] usb 1-1: USB disconnect, device number 13 [ 162.420787][ T325] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 162.435578][ T1040] hid (null): report_id 0 is invalid [ 162.443080][ T1040] logitech-hidpp-device 0003:046D:C086.0013: unknown main item tag 0x0 [ 162.451706][ T1040] logitech-hidpp-device 0003:046D:C086.0013: unknown main item tag 0x2 [ 162.455206][ T325] ftdi_sio 2-1:0.0: GPIO initialisation failed: -71 [ 162.460763][ T28] audit: type=1400 audit(1725542064.326:339): avc: denied { unlink } for pid=84 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 162.488648][ T325] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 162.488885][ T1040] logitech-hidpp-device 0003:046D:C086.0013: report_id 0 is invalid [ 162.502619][ T325] usb 2-1: USB disconnect, device number 12 [ 162.510984][ T1040] logitech-hidpp-device 0003:046D:C086.0013: item 0 1 1 8 parsing failed [ 162.524170][ T325] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 162.533684][ T1040] logitech-hidpp-device 0003:046D:C086.0013: hidpp_probe:parse failed [ 162.533720][ T1040] logitech-hidpp-device: probe of 0003:046D:C086.0013 failed with error -22 [ 162.572347][ T325] ftdi_sio 2-1:0.0: device disconnected [ 162.596445][ T293] EXT4-fs (loop2): unmounting filesystem. [ 162.672559][ T1040] usb 4-1: USB disconnect, device number 8 [ 162.713554][ T3188] loop2: detected capacity change from 0 to 1024 [ 162.720285][ T3188] EXT4-fs: Mount option(s) incompatible with ext2 [ 163.065435][ T3194] loop4: detected capacity change from 0 to 512 [ 163.072989][ T3194] EXT4-fs: Ignoring removed mblk_io_submit option [ 163.175636][ T3194] EXT4-fs error (device loop4): ext4_find_inline_data_nolock:164: inode #12: comm syz.4.828: inline data xattr refers to an external xattr inode [ 163.190212][ T28] audit: type=1400 audit(1725542065.046:340): avc: denied { create } for pid=3196 comm="syz.0.829" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 163.198769][ T3194] EXT4-fs error (device loop4): ext4_orphan_get:1401: comm syz.4.828: couldn't read orphan inode 12 (err -117) [ 163.220978][ T3194] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 163.228450][ T3200] loop0: detected capacity change from 0 to 1024 [ 163.245585][ T3200] EXT4-fs: Mount option(s) incompatible with ext2 [ 163.281931][ T3202] loop1: detected capacity change from 0 to 512 [ 163.288612][ T3202] EXT4-fs (loop1): Test dummy encryption mode enabled [ 163.296323][ T3202] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 163.306538][ T3202] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.831: bg 0: block 425: padding at end of block bitmap is not set [ 163.320795][ T3202] EXT4-fs (loop1): Remounting filesystem read-only [ 163.627413][ T3209] syz.0.830[3209] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 163.627795][ T3209] syz.0.830[3209] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 163.693839][ T292] EXT4-fs (loop1): unmounting filesystem. [ 163.863662][ T3213] loop3: detected capacity change from 0 to 1024 [ 163.870830][ T3213] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (29950!=20869) [ 163.880777][ T3213] EXT4-fs (loop3): invalid journal inode [ 163.886918][ T3213] EXT4-fs (loop3): can't get journal size [ 163.892918][ T3213] EXT4-fs error (device loop3): ext4_protect_reserved_inode:182: inode #2: comm syz.3.834: blocks 48-48 from inode overlap system zone [ 163.908490][ T3213] EXT4-fs (loop3): failed to initialize system zone (-117) [ 163.916281][ T789] EXT4-fs (loop4): unmounting filesystem. [ 163.916887][ T3213] EXT4-fs (loop3): mount failed [ 163.941267][ T3220] loop4: detected capacity change from 0 to 512 [ 163.947623][ T3220] EXT4-fs: Ignoring removed i_version option [ 163.953473][ T3220] EXT4-fs: Ignoring removed nobh option [ 163.959262][ T3220] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 163.970508][ T3220] EXT4-fs (loop4): 1 truncate cleaned up [ 163.976017][ T3220] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 164.094222][ T789] EXT4-fs (loop4): unmounting filesystem. [ 164.169179][ T3227] loop4: detected capacity change from 0 to 2048 [ 164.185452][ T3229] loop3: detected capacity change from 0 to 256 [ 164.308086][ T3227] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 164.325244][ T3230] loop0: detected capacity change from 0 to 256 [ 164.354833][ T6] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 164.367030][ T3230] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 164.379442][ T789] EXT4-fs (loop4): unmounting filesystem. [ 164.544069][ T3237] syz.0.838: attempt to access beyond end of device [ 164.544069][ T3237] loop0: rw=0, sector=184, nr_sectors = 120 limit=256 [ 164.672809][ T3238] netlink: 8 bytes leftover after parsing attributes in process `syz.4.839'. [ 164.685078][ T3238] loop4: detected capacity change from 0 to 256 [ 164.994193][ T3245] loop3: detected capacity change from 0 to 1024 [ 165.001507][ T3245] EXT4-fs: Mount option(s) incompatible with ext2 [ 165.165587][ T3247] syz.3.840[3247] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 165.165752][ T3247] syz.3.840[3247] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 165.420076][ T6] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 165.442064][ T6] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 165.453259][ T6] usb 3-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 165.454828][ T3249] loop0: detected capacity change from 0 to 1024 [ 165.466742][ T3251] loop4: detected capacity change from 0 to 1024 [ 165.474455][ T6] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.474893][ T3249] EXT4-fs: Mount option(s) incompatible with ext2 [ 165.487862][ T6] usb 3-1: config 0 descriptor?? [ 165.493508][ T3251] EXT4-fs (loop4): Test dummy encryption mode enabled [ 165.501324][ T3251] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 165.510095][ T411] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 165.522855][ T789] EXT4-fs (loop4): unmounting filesystem. [ 165.597516][ T3256] loop4: detected capacity change from 0 to 8192 [ 165.668962][ T3258] syz.0.842[3258] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 165.669295][ T3258] syz.0.842[3258] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 165.896174][ T3261] loop4: detected capacity change from 0 to 16 [ 165.913797][ T3261] erofs: (device loop4): mounted with root inode @ nid 36. [ 165.922775][ T3261] syz.4.846: attempt to access beyond end of device [ 165.922775][ T3261] loop4: rw=524288, sector=8, nr_sectors = 32 limit=16 [ 165.936170][ T3261] syz.4.846: attempt to access beyond end of device [ 165.936170][ T3261] loop4: rw=524288, sector=16, nr_sectors = 32 limit=16 [ 165.974619][ T3266] loop4: detected capacity change from 0 to 512 [ 165.982991][ T6] sony 0003:054C:0268.0014: hiddev96,hidraw0: USB HID v80.00 Device [HID 054c:0268] on usb-dummy_hcd.2-1/input0 [ 165.985299][ T411] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 165.999164][ T6] sony 0003:054C:0268.0014: failed to claim input [ 166.006509][ T3266] EXT4-fs: Ignoring removed i_version option [ 166.017909][ T3266] EXT4-fs: Ignoring removed nobh option [ 166.023377][ T411] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 166.036115][ T411] usb 2-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 166.046240][ T411] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.057640][ T3266] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 166.079516][ T3268] loop3: detected capacity change from 0 to 256 [ 166.170763][ T411] usb 2-1: config 0 descriptor?? [ 166.196170][ T3266] EXT4-fs (loop4): 1 truncate cleaned up [ 166.201709][ T3266] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 166.205206][ T6] usb 3-1: USB disconnect, device number 10 [ 166.284280][ T789] EXT4-fs (loop4): unmounting filesystem. [ 166.473616][ T3278] loop0: detected capacity change from 0 to 256 [ 166.760501][ T3283] loop2: detected capacity change from 0 to 128 [ 166.764734][ T3284] loop3: detected capacity change from 0 to 256 [ 166.773051][ T3283] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 166.783015][ T411] isku 0003:1E7D:319C.0015: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.1-1/input0 [ 166.784347][ T3283] ext4 filesystem being mounted at /144/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 166.831297][ T3284] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 166.856066][ T293] EXT4-fs (loop2): unmounting filesystem. [ 166.893748][ T3287] loop2: detected capacity change from 0 to 256 [ 166.916095][ T3289] loop2: detected capacity change from 0 to 512 [ 166.922344][ T3289] EXT4-fs: Ignoring removed i_version option [ 166.928290][ T3289] EXT4-fs: Ignoring removed nobh option [ 166.933845][ T3289] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 166.949522][ T3289] EXT4-fs (loop2): 1 truncate cleaned up [ 166.955342][ T3289] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 167.016374][ T3293] syz.3.853: attempt to access beyond end of device [ 167.016374][ T3293] loop3: rw=0, sector=184, nr_sectors = 120 limit=256 [ 167.230636][ T3297] loop0: detected capacity change from 0 to 1024 [ 167.246589][ T3297] EXT4-fs: Mount option(s) incompatible with ext2 [ 167.316214][ T293] EXT4-fs (loop2): unmounting filesystem. [ 167.328460][ T3302] loop2: detected capacity change from 0 to 128 [ 167.335720][ T3302] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 167.477050][ T3303] loop4: detected capacity change from 0 to 256 [ 167.580573][ T3305] syz.0.857[3305] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 167.580652][ T3305] syz.0.857[3305] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 167.921461][ T3309] loop2: detected capacity change from 0 to 1024 [ 167.934352][ T3308] loop3: detected capacity change from 0 to 1024 [ 167.945039][ T325] usb 2-1: USB disconnect, device number 13 [ 167.950863][ T3309] EXT4-fs: Mount option(s) incompatible with ext2 [ 167.960507][ T3308] EXT4-fs: Ignoring removed nobh option [ 167.966730][ T3308] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 167.996392][ T3308] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 168.023413][ T294] EXT4-fs (loop3): unmounting filesystem. [ 168.540906][ T3321] loop3: detected capacity change from 0 to 256 [ 168.856376][ T3326] loop2: detected capacity change from 0 to 256 [ 168.875751][ T3326] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 168.898634][ T28] audit: type=1400 audit(1725542070.766:341): avc: denied { execute } for pid=3325 comm="syz.2.865" path="/149/file1/bus" dev="loop2" ino=1048734 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 168.955495][ T6] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 168.990402][ T3324] loop0: detected capacity change from 0 to 40427 [ 169.011474][ T3335] loop3: detected capacity change from 0 to 1024 [ 169.023948][ T3324] F2FS-fs (loop0): invalid crc value [ 169.037346][ T3324] F2FS-fs (loop0): Found nat_bits in checkpoint [ 169.037550][ T3335] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 169.077817][ T3324] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 169.089259][ T294] EXT4-fs (loop3): unmounting filesystem. [ 169.146413][ T3342] loop2: detected capacity change from 0 to 256 [ 169.354138][ T3324] syz.0.864: attempt to access beyond end of device [ 169.354138][ T3324] loop0: rw=2049, sector=45096, nr_sectors = 112 limit=40427 [ 169.373432][ T361] syz-executor: attempt to access beyond end of device [ 169.373432][ T361] loop0: rw=2049, sector=45208, nr_sectors = 16 limit=40427 [ 169.386527][ T3346] loop3: detected capacity change from 0 to 2048 [ 169.393659][ T3346] EXT4-fs: Ignoring removed orlov option [ 169.406560][ T3346] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 169.418781][ T28] audit: type=1400 audit(1725542071.286:342): avc: denied { execute } for pid=3345 comm="syz.3.870" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 169.444037][ T324] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 169.458752][ T28] audit: type=1400 audit(1725542071.286:343): avc: denied { execute_no_trans } for pid=3345 comm="syz.3.870" path="/file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 169.459033][ T324] EXT4-fs (loop3): Remounting filesystem read-only [ 169.488783][ T294] EXT4-fs (loop3): unmounting filesystem. [ 169.525281][ T6] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 169.541224][ T6] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 169.560941][ T6] usb 5-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 169.573085][ T6] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.582074][ T6] usb 5-1: config 0 descriptor?? [ 169.588208][ T3354] loop0: detected capacity change from 0 to 512 [ 169.594520][ T3354] EXT4-fs: Ignoring removed nomblk_io_submit option [ 169.601425][ T3354] EXT4-fs (loop0): Test dummy encryption mode enabled [ 169.609058][ T3354] EXT4-fs error (device loop0): ext4_orphan_get:1396: inode #17: comm syz.0.871: iget: bogus i_mode (0) [ 169.620222][ T3354] EXT4-fs error (device loop0): ext4_orphan_get:1401: comm syz.0.871: couldn't read orphan inode 17 (err -117) [ 169.633263][ T3354] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 169.693656][ T3358] loop3: detected capacity change from 0 to 256 [ 169.778024][ T28] audit: type=1400 audit(1725542071.646:344): avc: denied { watch } for pid=3353 comm="syz.0.871" path="/161/bus/file0" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 169.903819][ T361] EXT4-fs error (device loop0): ext4_readdir:260: inode #2: block 13: comm syz-executor: path /161/bus: bad entry in directory: rec_len % 4 != 0 - offset=92, inode=0, rec_len=127, size=1024 fake=0 [ 169.924133][ T361] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2810: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 169.944337][ T361] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm syz-executor: bg 0: block 7: invalid block bitmap [ 169.957511][ T361] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6173: Corrupt filesystem [ 169.968432][ T361] EXT4-fs error (device loop0): ext4_readdir:260: inode #2: block 13: comm syz-executor: path /161/bus: bad entry in directory: rec_len % 4 != 0 - offset=92, inode=0, rec_len=127, size=1024 fake=0 [ 169.987906][ T361] EXT4-fs error (device loop0): ext4_readdir:260: inode #2: block 13: comm syz-executor: path /161/bus: bad entry in directory: rec_len % 4 != 0 - offset=92, inode=0, rec_len=127, size=1024 fake=0 [ 170.150487][ T3365] fuse: Bad value for 'user_id' [ 170.515366][ T6] sony 0003:054C:0268.0016: hiddev96,hidraw0: USB HID v80.00 Device [HID 054c:0268] on usb-dummy_hcd.4-1/input0 [ 170.528269][ T6] sony 0003:054C:0268.0016: failed to claim input [ 170.533726][ T361] EXT4-fs error (device loop0): ext4_readdir:260: inode #2: block 13: comm syz-executor: path /161/bus: bad entry in directory: rec_len % 4 != 0 - offset=92, inode=0, rec_len=127, size=1024 fake=0 [ 170.559012][ T3364] netlink: 2 bytes leftover after parsing attributes in process `syz.1.874'. [ 170.568748][ T361] EXT4-fs error (device loop0): ext4_readdir:260: inode #2: block 13: comm syz-executor: path /161/bus: bad entry in directory: rec_len % 4 != 0 - offset=92, inode=0, rec_len=127, size=1024 fake=0 [ 170.593696][ T3369] loop3: detected capacity change from 0 to 1024 [ 170.599940][ T28] audit: type=1400 audit(1725542072.456:345): avc: denied { mounton } for pid=3370 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 170.619325][ T361] EXT4-fs error (device loop0): ext4_readdir:260: inode #2: block 13: comm syz-executor: path /161/bus: bad entry in directory: rec_len % 4 != 0 - offset=92, inode=0, rec_len=127, size=1024 fake=0 [ 170.624383][ T3369] EXT4-fs: Mount option(s) incompatible with ext2 [ 170.643513][ T361] EXT4-fs error (device loop0): ext4_readdir:260: inode #2: block 13: comm syz-executor: path /161/bus: bad entry in directory: rec_len % 4 != 0 - offset=92, inode=0, rec_len=127, size=1024 fake=0 [ 170.668992][ T361] EXT4-fs error (device loop0): ext4_readdir:260: inode #2: block 13: comm syz-executor: path /161/bus: bad entry in directory: rec_len % 4 != 0 - offset=92, inode=0, rec_len=127, size=1024 fake=0 [ 170.702221][ T3370] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.719951][ T3370] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.727337][ T3370] device bridge_slave_0 entered promiscuous mode [ 170.734138][ T3370] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.741048][ T3370] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.754542][ T3370] device bridge_slave_1 entered promiscuous mode [ 170.774801][ T3375] netlink: 8 bytes leftover after parsing attributes in process `syz.1.881'. [ 170.848976][ T3370] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.855842][ T3370] bridge0: port 2(bridge_slave_1) entered forwarding state [ 170.862883][ T3370] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.869723][ T3370] bridge0: port 1(bridge_slave_0) entered forwarding state [ 171.007036][ T411] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.065027][ T411] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.107803][ T361] EXT4-fs (loop0): unmounting filesystem. [ 171.130141][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 171.137590][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 171.148843][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 171.157381][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 171.165384][ T65] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.172225][ T65] bridge0: port 1(bridge_slave_0) entered forwarding state [ 171.187982][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 171.196556][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 171.204596][ T65] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.211462][ T65] bridge0: port 2(bridge_slave_1) entered forwarding state [ 171.225934][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 171.233959][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 171.241746][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 171.250229][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 173.001655][ T411] usb 5-1: USB disconnect, device number 10 [ 173.021169][ T3388] loop4: detected capacity change from 0 to 2048 [ 173.036175][ T3388] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 173.044476][ T3388] ext4 filesystem being mounted at /174/file0 supports timestamps until 2038 (0x7fffffff) [ 173.070818][ T325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 173.079686][ T325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 173.102525][ T3370] device veth0_vlan entered promiscuous mode [ 173.111448][ T1040] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 173.121137][ T1040] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 173.129714][ T789] EXT4-fs (loop4): unmounting filesystem. [ 173.164479][ T3396] loop3: detected capacity change from 0 to 1024 [ 173.173424][ T3370] device veth1_macvtap entered promiscuous mode [ 173.180750][ T3396] EXT4-fs: Mount option(s) incompatible with ext2 [ 173.229373][ T3385] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.236350][ T3385] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.244042][ T3385] device bridge_slave_0 entered promiscuous mode [ 173.250738][ T412] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 173.258561][ T412] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 173.265804][ T412] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 173.273689][ T412] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 173.281638][ T412] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 173.295391][ T3385] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.302249][ T3385] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.311573][ T3385] device bridge_slave_1 entered promiscuous mode [ 173.385246][ T295] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 173.424933][ T412] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 173.443018][ T412] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 173.453750][ T412] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 173.463726][ T412] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 173.498771][ T524] device bridge_slave_1 left promiscuous mode [ 173.507441][ T524] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.517466][ T524] device bridge_slave_0 left promiscuous mode [ 173.523469][ T524] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.530937][ T524] device veth1_macvtap left promiscuous mode [ 173.536846][ T524] device veth0_vlan left promiscuous mode [ 173.685932][ T3385] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.692804][ T3385] bridge0: port 2(bridge_slave_1) entered forwarding state [ 173.699910][ T3385] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.706699][ T3385] bridge0: port 1(bridge_slave_0) entered forwarding state [ 173.730918][ T3409] loop4: detected capacity change from 0 to 256 [ 173.733476][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 173.744912][ T65] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.752272][ T65] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.829158][ T3411] loop2: detected capacity change from 0 to 256 [ 173.848453][ T295] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 173.904397][ T295] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 173.914849][ T295] usb 2-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 173.925236][ T295] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.952415][ T325] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 173.957971][ T295] usb 2-1: config 0 descriptor?? [ 173.961057][ T325] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.971881][ T325] bridge0: port 1(bridge_slave_0) entered forwarding state [ 173.972250][ T3413] loop4: detected capacity change from 0 to 512 [ 173.979107][ T325] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 173.991840][ T3413] EXT4-fs: Ignoring removed i_version option [ 173.993160][ T325] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.000614][ T3413] EXT4-fs: Ignoring removed nobh option [ 174.005472][ T325] bridge0: port 2(bridge_slave_1) entered forwarding state [ 174.011353][ T3413] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 174.031651][ T3413] EXT4-fs (loop4): 1 truncate cleaned up [ 174.037194][ T3413] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 174.037562][ T412] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 174.066428][ T1040] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 174.075452][ T1040] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 174.085242][ T3385] device veth0_vlan entered promiscuous mode [ 174.096164][ T1040] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 174.103839][ T1040] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 174.114219][ T3385] device veth1_macvtap entered promiscuous mode [ 174.160448][ T1040] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 174.172760][ T1040] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 174.181615][ T1040] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 174.189832][ T3418] loop3: detected capacity change from 0 to 16 [ 174.190488][ T1040] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 174.196499][ T3418] erofs: (device loop3): mounted with root inode @ nid 36. [ 174.208378][ T1040] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 174.219022][ T789] EXT4-fs (loop4): unmounting filesystem. [ 174.228546][ T1040] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 174.237246][ T1040] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 174.246479][ T1040] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 174.254583][ T1040] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 174.282019][ T3424] loop0: detected capacity change from 0 to 1024 [ 174.288731][ T3424] EXT4-fs: Mount option(s) incompatible with ext2 [ 174.453514][ T295] isku 0003:1E7D:319C.0017: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.1-1/input0 [ 174.525930][ T3428] syz.0.884[3428] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 174.526011][ T3428] syz.0.884[3428] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 174.887470][ T1040] usb 2-1: USB disconnect, device number 14 [ 174.901868][ T3431] loop2: detected capacity change from 0 to 1024 [ 174.914557][ T3431] EXT4-fs: Mount option(s) incompatible with ext2 [ 174.965219][ T65] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 175.294864][ T3437] loop0: detected capacity change from 0 to 512 [ 175.316023][ T3437] EXT4-fs error (device loop0): ext4_find_inline_data_nolock:164: inode #12: comm syz.0.898: inline data xattr refers to an external xattr inode [ 175.331754][ T3437] EXT4-fs error (device loop0): ext4_orphan_get:1401: comm syz.0.898: couldn't read orphan inode 12 (err -117) [ 175.346048][ T3437] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 175.365908][ T3385] EXT4-fs (loop0): unmounting filesystem. [ 175.379173][ T3441] loop0: detected capacity change from 0 to 512 [ 175.396636][ T3441] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 175.405550][ T3441] ext4 filesystem being mounted at /2/file0 supports timestamps until 2038 (0x7fffffff) [ 175.468436][ T3445] loop4: detected capacity change from 0 to 256 [ 175.654645][ T28] audit: type=1400 audit(1725542077.516:346): avc: denied { name_bind } for pid=3447 comm="syz.1.900" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 175.675910][ T524] device bridge_slave_1 left promiscuous mode [ 175.680153][ C0] TCP: request_sock_TCP: Possible SYN flooding on port 2. Dropping request. Check SNMP counters. [ 175.683961][ T524] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.692338][ T28] audit: type=1400 audit(1725542077.546:347): avc: denied { setattr } for pid=3440 comm="syz.0.899" path="/2/file0/hugetlb.2MB.rsvd.usage_in_bytes" dev="loop0" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 175.724454][ T524] device bridge_slave_0 left promiscuous mode [ 175.730791][ T524] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.738907][ T524] device veth1_macvtap left promiscuous mode [ 175.741038][ T3441] EXT4-fs error (device loop0): ext4_do_update_inode:5212: inode #20: comm syz.0.899: corrupted inode contents [ 175.744786][ T524] device veth0_vlan left promiscuous mode [ 175.756716][ T3441] EXT4-fs error (device loop0): ext4_dirty_inode:6074: inode #20: comm syz.0.899: mark_inode_dirty error [ 175.761987][ T65] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 175.773861][ T3441] EXT4-fs error (device loop0): ext4_do_update_inode:5212: inode #20: comm syz.0.899: corrupted inode contents [ 175.783770][ T65] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 175.804715][ T65] usb 4-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 175.821075][ T65] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.821522][ T3441] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2955: inode #20: comm syz.0.899: mark_inode_dirty error [ 175.837381][ T65] usb 4-1: config 0 descriptor?? [ 175.843118][ T3441] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2958: inode #20: comm syz.0.899: mark inode dirty (error -117) [ 175.858247][ T3441] EXT4-fs warning (device loop0): ext4_evict_inode:299: xattr delete (err -117) [ 175.876345][ T3451] loop2: detected capacity change from 0 to 128 [ 175.893206][ T3385] EXT4-fs (loop0): unmounting filesystem. [ 175.898816][ T28] audit: type=1400 audit(1725542077.756:348): avc: denied { watch } for pid=3450 comm="syz.2.901" path="/2/file0/file0" dev="loop2" ino=1048749 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 175.955581][ T3455] loop2: detected capacity change from 0 to 1024 [ 175.976910][ T3455] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 176.034759][ T3370] EXT4-fs (loop2): unmounting filesystem. [ 176.063994][ T3460] loop2: detected capacity change from 0 to 1024 [ 176.083542][ T3460] EXT4-fs: Mount option(s) incompatible with ext2 [ 176.085014][ T3462] loop0: detected capacity change from 0 to 512 [ 176.098599][ T3462] EXT4-fs: Ignoring removed i_version option [ 176.104529][ T3462] EXT4-fs: Ignoring removed nobh option [ 176.110588][ T3462] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 176.121409][ T3462] EXT4-fs (loop0): 1 truncate cleaned up [ 176.128091][ T3462] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 176.224036][ T3466] loop4: detected capacity change from 0 to 256 [ 176.378128][ T3385] EXT4-fs (loop0): unmounting filesystem. [ 176.551028][ T3480] loop0: detected capacity change from 0 to 512 [ 176.559498][ T65] sony 0003:054C:0268.0018: hiddev96,hidraw0: USB HID v80.00 Device [HID 054c:0268] on usb-dummy_hcd.3-1/input0 [ 176.571339][ T3480] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm syz.0.911: bg 0: block 5: invalid block bitmap [ 176.571878][ T65] sony 0003:054C:0268.0018: failed to claim input [ 176.584295][ T3480] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6173: Corrupt filesystem [ 176.599550][ T3480] EXT4-fs error (device loop0): ext4_clear_blocks:883: inode #13: comm syz.0.911: attempt to clear invalid blocks 9508352 len 1 [ 176.615372][ T3480] EXT4-fs (loop0): 1 orphan inode deleted [ 176.621013][ T3480] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 176.652337][ T3483] loop4: detected capacity change from 0 to 256 [ 176.792974][ T3385] EXT4-fs (loop0): unmounting filesystem. [ 176.808169][ T3488] loop0: detected capacity change from 0 to 1024 [ 176.814780][ T3488] EXT4-fs: Mount option(s) incompatible with ext2 [ 177.454484][ T3496] loop4: detected capacity change from 0 to 512 [ 177.461696][ T3496] EXT4-fs: Ignoring removed mblk_io_submit option [ 177.481556][ T3496] EXT4-fs error (device loop4): ext4_find_inline_data_nolock:164: inode #12: comm syz.4.915: inline data xattr refers to an external xattr inode [ 177.496623][ T3496] EXT4-fs error (device loop4): ext4_orphan_get:1401: comm syz.4.915: couldn't read orphan inode 12 (err -117) [ 177.508578][ T3496] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 177.548993][ T3507] loop2: detected capacity change from 0 to 512 [ 177.570247][ T3507] EXT4-fs: Ignoring removed mblk_io_submit option [ 177.575465][ T3508] loop1: detected capacity change from 0 to 512 [ 177.578293][ T3507] EXT4-fs error (device loop2): ext4_find_inline_data_nolock:164: inode #12: comm syz.2.920: inline data xattr refers to an external xattr inode [ 177.583027][ T3508] EXT4-fs: Ignoring removed i_version option [ 177.603131][ T3508] EXT4-fs: Ignoring removed nobh option [ 177.607047][ T3507] EXT4-fs error (device loop2): ext4_orphan_get:1401: comm syz.2.920: couldn't read orphan inode 12 (err -117) [ 177.611883][ T3508] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 177.620544][ T3507] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 177.631169][ T3508] EXT4-fs (loop1): 1 truncate cleaned up [ 177.643859][ T3508] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 177.859653][ T65] usb 4-1: USB disconnect, device number 9 [ 177.892526][ T3515] netem: change failed [ 178.167688][ T3524] loop0: detected capacity change from 0 to 1024 [ 178.180219][ T3524] EXT4-fs: Mount option(s) incompatible with ext2 [ 178.208472][ T292] EXT4-fs (loop1): unmounting filesystem. [ 178.317406][ T789] EXT4-fs (loop4): unmounting filesystem. [ 178.628933][ T3535] loop1: detected capacity change from 0 to 256 [ 179.149587][ T3370] EXT4-fs (loop2): unmounting filesystem. [ 179.281448][ T3540] loop2: detected capacity change from 0 to 512 [ 179.345930][ T3540] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 179.354731][ T3540] ext4 filesystem being mounted at /9/bus supports timestamps until 2038 (0x7fffffff) [ 179.366212][ T3540] xt_CT: You must specify a L4 protocol and not use inversions on it [ 179.377075][ T3370] EXT4-fs (loop2): unmounting filesystem. [ 179.385198][ T65] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 179.394591][ T3551] loop2: detected capacity change from 0 to 1024 [ 179.401354][ T3551] EXT4-fs: Mount option(s) incompatible with ext2 [ 179.504962][ T3552] netlink: 2 bytes leftover after parsing attributes in process `syz.4.929'. [ 179.528753][ T3552] fuse: Bad value for 'fd' [ 179.925198][ T923] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 179.932614][ T6] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 180.025191][ T65] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 180.036032][ T65] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 255, changing to 11 [ 180.047171][ T65] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 59391, setting to 1024 [ 180.058455][ T65] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 180.067321][ T65] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.095219][ T3522] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 180.156090][ T3561] loop4: detected capacity change from 0 to 512 [ 180.162406][ T3561] EXT4-fs: Ignoring removed mblk_io_submit option [ 180.170435][ T3561] EXT4-fs error (device loop4): ext4_find_inline_data_nolock:164: inode #12: comm syz.4.936: inline data xattr refers to an external xattr inode [ 180.175190][ T923] usb 2-1: Using ep0 maxpacket: 32 [ 180.188344][ T3561] EXT4-fs error (device loop4): ext4_orphan_get:1401: comm syz.4.936: couldn't read orphan inode 12 (err -117) [ 180.201838][ T3561] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 180.295240][ T6] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 180.306305][ T923] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 180.501319][ T412] usb 4-1: USB disconnect, device number 10 [ 180.531696][ T923] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 180.540436][ T6] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 180.550125][ T923] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 180.557545][ T3568] loop2: detected capacity change from 0 to 512 [ 180.558919][ T6] usb 1-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 180.573851][ T923] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 180.583315][ T923] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 180.586736][ T3568] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 180.592930][ T6] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.602180][ T3568] ext4 filesystem being mounted at /12/file0 supports timestamps until 2038 (0x7fffffff) [ 180.609751][ T923] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 180.632282][ T923] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 180.641367][ T6] usb 1-1: config 0 descriptor?? [ 180.646234][ T923] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.659436][ T923] usb 2-1: config 0 descriptor?? [ 180.667651][ T3370] EXT4-fs (loop2): unmounting filesystem. [ 180.826147][ T3574] loop2: detected capacity change from 0 to 256 [ 181.030744][ T923] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 15 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 181.042050][ T789] EXT4-fs (loop4): unmounting filesystem. [ 181.049867][ T923] usb 2-1: USB disconnect, device number 15 [ 181.062102][ T923] usblp0: removed [ 181.187820][ T6] sony 0003:054C:0268.0019: hiddev96,hidraw0: USB HID v80.00 Device [HID 054c:0268] on usb-dummy_hcd.0-1/input0 [ 181.736861][ T3582] loop4: detected capacity change from 0 to 256 [ 181.744616][ T3583] loop3: detected capacity change from 0 to 256 [ 182.385443][ T6] sony 0003:054C:0268.0019: failed to claim input [ 182.406873][ T6] usb 1-1: USB disconnect, device number 14 [ 182.431441][ T3589] loop2: detected capacity change from 0 to 1024 [ 182.505433][ T3589] EXT4-fs: Mount option(s) incompatible with ext2 [ 182.653667][ T3602] netlink: 2 bytes leftover after parsing attributes in process `syz.1.945'. [ 182.678820][ T3602] fuse: Bad value for 'fd' [ 183.193342][ T3608] loop3: detected capacity change from 0 to 512 [ 183.214092][ T3608] EXT4-fs: Ignoring removed mblk_io_submit option [ 183.225461][ T3610] loop0: detected capacity change from 0 to 1024 [ 183.238889][ T3610] EXT4-fs: Ignoring removed nomblk_io_submit option [ 183.246231][ T3608] EXT4-fs error (device loop3): ext4_find_inline_data_nolock:164: inode #12: comm syz.3.950: inline data xattr refers to an external xattr inode [ 183.262524][ T3608] EXT4-fs error (device loop3): ext4_orphan_get:1401: comm syz.3.950: couldn't read orphan inode 12 (err -117) [ 183.313479][ T3608] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 183.327553][ T3601] loop4: detected capacity change from 0 to 40427 [ 183.341229][ T3610] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a002c018, mo2=0002] [ 183.349374][ T3610] System zones: 0-1, 3-12 [ 183.354194][ T3610] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 183.370496][ T3610] EXT4-fs (loop0): re-mounted. Quota mode: none. [ 183.382516][ T3601] F2FS-fs (loop4): Found nat_bits in checkpoint [ 183.427110][ T3601] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 183.466569][ T3625] netlink: 2 bytes leftover after parsing attributes in process `syz.1.952'. [ 183.475963][ T3617] fuse: Bad value for 'rootmode' [ 183.520739][ T3385] EXT4-fs (loop0): unmounting filesystem. [ 183.648162][ T3630] loop2: detected capacity change from 0 to 256 [ 183.805270][ T1040] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 183.967426][ T3636] loop4: detected capacity change from 0 to 512 [ 183.986183][ T3636] EXT4-fs error (device loop4): ext4_orphan_get:1422: comm syz.4.956: bad orphan inode 15 [ 183.996579][ T3636] ext4_test_bit(bit=14, block=5) = 0 [ 184.001717][ T3636] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 184.028390][ T3636] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 7987 vs 220 free clusters [ 184.043034][ T3636] EXT4-fs error (device loop4): ext4_free_inode:355: comm syz.4.956: bit already cleared for inode 13 [ 184.045157][ T6] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 184.064071][ T789] EXT4-fs (loop4): unmounting filesystem. [ 184.075247][ T1040] usb 2-1: Using ep0 maxpacket: 16 [ 184.083898][ T294] EXT4-fs (loop3): unmounting filesystem. [ 184.127495][ T3643] loop3: detected capacity change from 0 to 512 [ 184.136593][ T3643] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 184.151554][ T3643] EXT4-fs (loop3): 1 truncate cleaned up [ 184.157282][ T3643] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 184.194205][ T294] EXT4-fs (loop3): unmounting filesystem. [ 184.300175][ T3653] loop4: detected capacity change from 0 to 256 [ 184.407851][ T3654] netlink: 2 bytes leftover after parsing attributes in process `syz.3.962'. [ 184.421628][ T3654] fuse: Bad value for 'fd' [ 184.705212][ T1040] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 184.714136][ T1040] usb 2-1: New USB device strings: Mfr=1, Product=121, SerialNumber=1 [ 184.722091][ T1040] usb 2-1: Product: syz [ 184.726094][ T1040] usb 2-1: Manufacturer: syz [ 184.730494][ T1040] usb 2-1: SerialNumber: syz [ 184.735399][ T6] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 184.738425][ T1040] r8152-cfgselector 2-1: config 0 descriptor?? [ 184.746164][ T6] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 184.761680][ T6] usb 1-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 184.770488][ T6] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.778316][ T325] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 184.786127][ T6] usb 1-1: config 0 descriptor?? [ 184.980647][ T3657] loop4: detected capacity change from 0 to 1024 [ 184.988378][ T3657] EXT4-fs: Mount option(s) incompatible with ext2 [ 185.025196][ T325] usb 3-1: Using ep0 maxpacket: 32 [ 185.225275][ T1040] r8152-cfgselector 2-1: Unknown version 0x0000 [ 185.234071][ T1040] r8152-cfgselector 2-1: USB disconnect, device number 16 [ 185.336475][ T325] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 185.348884][ T325] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 185.359429][ T6] sony 0003:054C:0268.001A: hiddev96,hidraw0: USB HID v80.00 Device [HID 054c:0268] on usb-dummy_hcd.0-1/input0 [ 185.371079][ T6] sony 0003:054C:0268.001A: failed to claim input [ 185.475191][ T325] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 185.484036][ T325] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 185.492277][ T325] usb 3-1: Product: syz [ 185.496212][ T325] usb 3-1: Manufacturer: syz [ 185.500893][ T412] usb 1-1: USB disconnect, device number 15 [ 185.505297][ T923] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 185.535825][ T325] hub 3-1:4.0: USB hub found [ 185.745156][ T923] usb 4-1: Using ep0 maxpacket: 32 [ 185.795286][ T325] hub 3-1:4.0: config failed, hub has too many ports! (err -19) [ 185.902997][ T3666] netlink: 2 bytes leftover after parsing attributes in process `syz.1.965'. [ 185.916889][ T3666] fuse: Bad value for 'rootmode' [ 186.065334][ T923] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 186.076338][ T28] audit: type=1400 audit(1725542087.936:349): avc: denied { write } for pid=3667 comm="syz.4.966" name="hwrng" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 186.101508][ T923] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 186.112569][ T923] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 186.121433][ T923] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.139538][ T923] usb 4-1: config 0 descriptor?? [ 186.155204][ T3659] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 186.175644][ T923] hub 4-1:0.0: USB hub found [ 186.182609][ T325] usb 3-1: USB disconnect, device number 11 [ 186.206907][ T3671] loop0: detected capacity change from 0 to 512 [ 186.217338][ T3671] EXT4-fs: Ignoring removed mblk_io_submit option [ 186.243497][ T3671] EXT4-fs error (device loop0): ext4_find_inline_data_nolock:164: inode #12: comm syz.0.967: inline data xattr refers to an external xattr inode [ 186.258194][ T3671] EXT4-fs error (device loop0): ext4_orphan_get:1401: comm syz.0.967: couldn't read orphan inode 12 (err -117) [ 186.270195][ T3671] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 186.395195][ T923] hub 4-1:0.0: 2 ports detected [ 186.688255][ T3682] loop1: detected capacity change from 0 to 512 [ 186.701335][ T3682] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 186.746921][ T3682] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1086: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 186.789027][ T3682] EXT4-fs (loop1): 1 truncate cleaned up [ 186.794899][ T3682] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 186.835686][ T3682] xt_hashlimit: size too large, truncated to 1048576 [ 186.855732][ T3688] loop2: detected capacity change from 0 to 2048 [ 186.905178][ T923] hub 4-1:0.0: set hub depth failed [ 186.916753][ T3688] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 186.948531][ T923] usb 4-1: USB disconnect, device number 11 [ 186.963619][ T28] audit: type=1400 audit(1725542088.826:350): avc: denied { read } for pid=3687 comm="syz.2.972" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 187.046041][ T3370] EXT4-fs error (device loop2): ext4_map_blocks:607: inode #2: block 16: comm syz-executor: lblock 0 mapped to illegal pblock 16 (length 1) [ 187.081510][ T28] audit: type=1400 audit(1725542088.856:351): avc: denied { mounton } for pid=3687 comm="syz.2.972" path="/19/file1/bus" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 187.236034][ T3697] loop0: detected capacity change from 0 to 256 [ 187.415250][ T411] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 187.578111][ T3703] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.583285][ T3709] loop3: detected capacity change from 0 to 1024 [ 187.585316][ T3703] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.598471][ T3703] device bridge_slave_0 entered promiscuous mode [ 187.605341][ T3709] EXT4-fs: Mount option(s) incompatible with ext2 [ 187.612778][ T3703] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.619681][ T3703] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.629329][ T3703] device bridge_slave_1 entered promiscuous mode [ 187.686209][ T411] usb 5-1: Using ep0 maxpacket: 16 [ 187.759692][ T3711] fuse: Bad value for 'rootmode' [ 187.801809][ T3710] netlink: 2 bytes leftover after parsing attributes in process `syz.1.979'. [ 187.843177][ T3703] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.850036][ T3703] bridge0: port 2(bridge_slave_1) entered forwarding state [ 187.857213][ T3703] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.864088][ T3703] bridge0: port 1(bridge_slave_0) entered forwarding state [ 187.901689][ T3714] syz.3.980[3714] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 187.901761][ T3714] syz.3.980[3714] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 188.128629][ T412] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 188.146836][ T411] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 188.153038][ T3716] loop0: detected capacity change from 0 to 16 [ 188.155726][ T411] usb 5-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 188.172018][ T412] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.174123][ T3716] erofs: (device loop0): mounted with root inode @ nid 36. [ 188.179515][ T411] usb 5-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 188.195716][ T411] usb 5-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 188.195813][ T412] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.212293][ T411] usb 5-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 188.221799][ T411] usb 5-1: config 1 interface 0 has no altsetting 0 [ 188.228557][ T411] usb 5-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 188.237660][ T411] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.249622][ T1040] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 188.258688][ T1040] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.265542][ T1040] bridge0: port 1(bridge_slave_0) entered forwarding state [ 188.274124][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 188.282282][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 188.290610][ T6] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.297448][ T6] bridge0: port 2(bridge_slave_1) entered forwarding state [ 188.305943][ T411] ums-sddr09 5-1:1.0: USB Mass Storage device detected [ 188.319674][ T923] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 188.327599][ T923] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 188.335793][ T923] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 188.343991][ T923] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 188.360124][ T923] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 188.368801][ T923] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 188.380749][ T3703] device veth0_vlan entered promiscuous mode [ 188.389791][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 188.397874][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 188.399898][ T3728] loop1: detected capacity change from 0 to 512 [ 188.412440][ T3728] EXT4-fs: Ignoring removed mblk_io_submit option [ 188.421013][ T3728] EXT4-fs error (device loop1): ext4_find_inline_data_nolock:164: inode #12: comm syz.1.987: inline data xattr refers to an external xattr inode [ 188.436086][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 188.443293][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 188.445362][ T3728] EXT4-fs error (device loop1): ext4_orphan_get:1401: comm syz.1.987: couldn't read orphan inode 12 (err -117) [ 188.462211][ T43] device bridge_slave_1 left promiscuous mode [ 188.470208][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.477933][ T43] device bridge_slave_0 left promiscuous mode [ 188.483850][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.491921][ T43] device veth1_macvtap left promiscuous mode [ 188.497785][ T43] device veth0_vlan left promiscuous mode [ 188.575184][ T411] scsi host1: usb-storage 5-1:1.0 [ 188.910383][ T3703] device veth1_macvtap entered promiscuous mode [ 188.918904][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 188.927219][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 188.935211][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 188.943625][ T923] usb 5-1: USB disconnect, device number 11 [ 188.957722][ T412] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 188.966050][ T412] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 188.995154][ T412] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 189.013771][ T412] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 189.114769][ T3737] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.121705][ T3737] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.128947][ T3737] device bridge_slave_0 entered promiscuous mode [ 189.135942][ T3737] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.142796][ T3737] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.213331][ T3745] loop2: detected capacity change from 0 to 256 [ 189.435803][ T3737] device bridge_slave_1 entered promiscuous mode [ 189.544737][ T412] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 189.562822][ T412] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 189.579656][ T1040] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 189.591738][ T1040] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 189.600135][ T1040] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.606994][ T1040] bridge0: port 1(bridge_slave_0) entered forwarding state [ 189.615154][ T1040] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 189.623452][ T1040] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 189.632808][ T1040] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.639663][ T1040] bridge0: port 2(bridge_slave_1) entered forwarding state [ 189.665858][ T411] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 189.673425][ T411] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 189.681270][ T411] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 189.694579][ T3737] device veth0_vlan entered promiscuous mode [ 189.705038][ T412] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 189.713309][ T412] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 189.721080][ T412] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 189.728585][ T412] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 189.736504][ T28] audit: type=1400 audit(1725542091.596:352): avc: denied { write } for pid=3755 comm="syz.4.994" path="socket:[27628]" dev="sockfs" ino=27628 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 189.761782][ T3735] loop3: detected capacity change from 0 to 131072 [ 189.771270][ T3737] device veth1_macvtap entered promiscuous mode [ 189.778900][ T411] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 189.785069][ T3735] F2FS-fs (loop3): Found nat_bits in checkpoint [ 189.794568][ T412] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 189.803014][ T412] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 189.827792][ T1040] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 189.834695][ T3762] loop0: detected capacity change from 0 to 512 [ 189.837456][ T3735] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 189.862796][ T3762] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038 (0x7fffffff) [ 189.927339][ T43] device bridge_slave_1 left promiscuous mode [ 189.933293][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.946929][ T43] device bridge_slave_0 left promiscuous mode [ 189.952940][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.960965][ T43] device veth1_macvtap left promiscuous mode [ 189.968848][ T43] device veth0_vlan left promiscuous mode [ 189.993718][ T3775] loop2: detected capacity change from 0 to 1024 [ 190.003481][ T3775] EXT4-fs: Mount option(s) incompatible with ext2 [ 190.022424][ T3776] loop0: detected capacity change from 0 to 512 [ 190.035594][ T3776] EXT4-fs: Ignoring removed mblk_io_submit option [ 190.054609][ T3776] EXT4-fs error (device loop0): ext4_find_inline_data_nolock:164: inode #12: comm syz.0.1000: inline data xattr refers to an external xattr inode [ 190.069606][ T3776] EXT4-fs error (device loop0): ext4_orphan_get:1401: comm syz.0.1000: couldn't read orphan inode 12 (err -117) [ 190.158774][ T3778] syz.2.999[3778] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 190.158861][ T3778] syz.2.999[3778] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 190.219743][ T3781] loop2: detected capacity change from 0 to 1024 [ 190.284658][ T1040] usb 2-1: config 0 has an invalid interface number: 18 but max is 0 [ 190.351754][ T3781] EXT4-fs: Mount option(s) incompatible with ext2 [ 190.362187][ T1040] usb 2-1: config 0 has no interface number 0 [ 190.379440][ T1040] usb 2-1: config 0 interface 18 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 190.391459][ T1040] usb 2-1: config 0 interface 18 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 190.485502][ T1040] usb 2-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.10 [ 190.496640][ T1040] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 190.514671][ T1040] usb 2-1: Manufacturer: syz [ 190.520793][ T1040] usb 2-1: config 0 descriptor?? [ 190.524884][ T3789] netlink: 9 bytes leftover after parsing attributes in process `syz.4.1003'. [ 190.534740][ T3789] device gretap0 entered promiscuous mode [ 190.544633][ T3789] netlink: 5 bytes leftover after parsing attributes in process `syz.4.1003'. [ 190.553458][ T3789] device gretap0 left promiscuous mode [ 190.984022][ T3795] loop3: detected capacity change from 0 to 256 [ 191.342554][ T1040] input: syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.18/0003:054C:03D5.001B/input/input13 [ 191.453473][ T3804] loop2: detected capacity change from 0 to 256 [ 191.667852][ T1042] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 191.676515][ T1040] sony 0003:054C:03D5.001B: input,hidraw0: USB HID v0.00 Joystick [syz] on usb-dummy_hcd.1-1/input18 [ 191.696904][ T1040] usb 2-1: USB disconnect, device number 17 [ 191.767634][ T3810] loop3: detected capacity change from 0 to 256 [ 191.783966][ T3810] FAT-fs (loop3): Directory bread(block 64) failed [ 191.790355][ T3810] FAT-fs (loop3): Directory bread(block 65) failed [ 191.805012][ T3810] FAT-fs (loop3): Directory bread(block 66) failed [ 191.811657][ T3810] FAT-fs (loop3): Directory bread(block 67) failed [ 191.818169][ T3810] FAT-fs (loop3): Directory bread(block 68) failed [ 191.824548][ T3810] FAT-fs (loop3): Directory bread(block 69) failed [ 191.830889][ T3810] FAT-fs (loop3): Directory bread(block 70) failed [ 191.837240][ T3810] FAT-fs (loop3): Directory bread(block 71) failed [ 191.843537][ T3810] FAT-fs (loop3): Directory bread(block 72) failed [ 191.849920][ T3810] FAT-fs (loop3): Directory bread(block 73) failed [ 191.900681][ T3812] loop3: detected capacity change from 0 to 1024 [ 191.919727][ T3812] EXT4-fs: Mount option(s) incompatible with ext2 [ 192.120881][ T3814] syz.3.1011[3814] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 192.121175][ T3814] syz.3.1011[3814] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 192.324336][ T1042] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 192.342457][ T3818] loop2: detected capacity change from 0 to 512 [ 192.346932][ T1042] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 192.362564][ T1042] usb 5-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 192.371683][ T1042] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.389234][ T1042] usb 5-1: config 0 descriptor?? [ 192.390293][ T3818] EXT4-fs: Ignoring removed mblk_io_submit option [ 192.401809][ T3818] EXT4-fs error (device loop2): ext4_find_inline_data_nolock:164: inode #12: comm syz.2.1012: inline data xattr refers to an external xattr inode [ 192.416685][ T3818] EXT4-fs error (device loop2): ext4_orphan_get:1401: comm syz.2.1012: couldn't read orphan inode 12 (err -117) [ 192.428574][ T3818] EXT4-fs mount: 9 callbacks suppressed [ 192.428588][ T3818] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 192.472633][ T3822] loop0: detected capacity change from 0 to 1024 [ 192.496015][ T3822] EXT4-fs error (device loop0): __ext4_fill_super:5386: inode #2: comm syz.0.1014: casefold flag without casefold feature [ 192.508830][ T3822] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 192.518628][ T3822] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 192.533487][ T3737] EXT4-fs (loop0): unmounting filesystem. [ 192.547151][ T28] audit: type=1400 audit(1725542094.416:353): avc: denied { ioctl } for pid=3825 comm="syz.0.1015" path="/dev/binderfs/binder0" dev="binder" ino=13 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 192.547183][ T3826] binder: 3825:3826 ioctl c0306201 200001c0 returned -14 [ 192.655657][ T295] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 192.836186][ T3832] loop0: detected capacity change from 0 to 1024 [ 192.845529][ T3832] EXT4-fs: Mount option(s) incompatible with ext2 [ 192.906436][ T1042] hid-steam 0003:28DE:1142.001C: unknown main item tag 0x0 [ 192.914580][ T1042] hid-steam 0003:28DE:1142.001C: unknown main item tag 0x0 [ 192.921891][ T1042] hid-steam 0003:28DE:1142.001C: unknown main item tag 0x0 [ 192.929144][ T1042] hid-steam 0003:28DE:1142.001C: unknown main item tag 0x0 [ 193.021361][ T3836] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1018'. [ 193.048079][ T3836] fuse: Invalid rootmode [ 193.341861][ T1042] hid-steam 0003:28DE:1142.001C: unknown main item tag 0x0 [ 193.352848][ T3703] EXT4-fs (loop2): unmounting filesystem. [ 193.365838][ T295] usb 2-1: Using ep0 maxpacket: 32 [ 193.381801][ T3839] syz.0.1017[3839] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 193.382140][ T3839] syz.0.1017[3839] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 193.535375][ T295] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 193.542237][ T1042] hid-steam 0003:28DE:1142.001C: hidraw0: USB HID v0.40 Device [HID 28de:1142] on usb-dummy_hcd.4-1/input0 [ 193.564722][ T295] usb 2-1: New USB device found, idVendor=d5ff, idProduct=0066, bcdDevice=d8.b0 [ 193.569030][ T1042] usb 5-1: USB disconnect, device number 12 [ 193.614938][ T295] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.623644][ T295] usb 2-1: config 0 descriptor?? [ 193.848781][ T3843] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1019'. [ 193.862641][ T3843] fuse: Unknown parameter 'fd00000000000000000000011' [ 193.906330][ T295] usb 2-1: bad CDC descriptors [ 193.929104][ T3847] loop0: detected capacity change from 0 to 512 [ 193.943363][ T3847] EXT4-fs error (device loop0): ext4_orphan_get:1422: comm syz.0.1021: bad orphan inode 15 [ 193.953492][ T3847] ext4_test_bit(bit=14, block=18) = 1 [ 193.959135][ T3847] is_bad_inode(inode)=0 [ 193.963151][ T3847] NEXT_ORPHAN(inode)=1023 [ 193.967646][ T3847] max_ino=32 [ 193.970867][ T3847] i_nlink=0 [ 193.974189][ T3847] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2926: inode #15: comm syz.0.1021: corrupted xattr block 19 [ 193.986687][ T3847] EXT4-fs warning (device loop0): ext4_evict_inode:299: xattr delete (err -117) [ 193.995750][ T3847] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 194.004105][ T3847] ext4 filesystem being mounted at /8/bus supports timestamps until 2038 (0x7fffffff) [ 194.021405][ T3847] EXT4-fs error (device loop0): ext4_find_dest_de:2112: inode #2: block 3: comm syz.0.1021: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=4096 fake=0 [ 194.088480][ T295] usb 2-1: USB disconnect, device number 18 [ 194.106178][ T3853] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1020'. [ 194.119830][ T3853] fuse: Unknown parameter '00000000000000000000011' [ 194.218178][ T3737] EXT4-fs (loop0): unmounting filesystem. [ 194.629404][ T3866] loop4: detected capacity change from 0 to 256 [ 195.087318][ T3865] loop0: detected capacity change from 0 to 256 [ 195.391166][ T3872] loop3: detected capacity change from 0 to 1024 [ 195.396036][ T3875] loop4: detected capacity change from 0 to 512 [ 195.403624][ T3875] EXT4-fs: Ignoring removed mblk_io_submit option [ 195.406730][ T3872] EXT4-fs: Mount option(s) incompatible with ext2 [ 195.417829][ T3875] EXT4-fs error (device loop4): ext4_find_inline_data_nolock:164: inode #12: comm syz.4.1029: inline data xattr refers to an external xattr inode [ 195.439620][ T3875] EXT4-fs error (device loop4): ext4_orphan_get:1401: comm syz.4.1029: couldn't read orphan inode 12 (err -117) [ 195.481904][ T3875] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 195.534360][ T3882] loop0: detected capacity change from 0 to 1024 [ 195.595454][ T3882] EXT4-fs: Mount option(s) incompatible with ext2 [ 195.619084][ T3888] syz.3.1028[3888] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 195.619405][ T3888] syz.3.1028[3888] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 196.482534][ T789] EXT4-fs (loop4): unmounting filesystem. [ 196.658192][ T3900] loop3: detected capacity change from 0 to 1024 [ 196.685902][ T3903] loop4: detected capacity change from 0 to 512 [ 196.692223][ T3903] EXT4-fs: Ignoring removed mblk_io_submit option [ 196.698999][ T3900] EXT4-fs: Mount option(s) incompatible with ext2 [ 196.706234][ T3903] EXT4-fs error (device loop4): ext4_find_inline_data_nolock:164: inode #12: comm syz.4.1036: inline data xattr refers to an external xattr inode [ 196.721402][ T3903] EXT4-fs error (device loop4): ext4_orphan_get:1401: comm syz.4.1036: couldn't read orphan inode 12 (err -117) [ 196.786563][ T3909] syz.0.1031[3909] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 196.786884][ T3909] syz.0.1031[3909] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 196.920450][ T3910] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1037'. [ 196.962102][ T3910] fuse: Unknown parameter 'fd00000000000000000000011' [ 197.729289][ T3903] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 198.239839][ T3919] syz.3.1034[3919] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 198.240957][ T3919] syz.3.1034[3919] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 198.611205][ T789] EXT4-fs (loop4): unmounting filesystem. [ 198.676628][ T3926] loop1: detected capacity change from 0 to 512 [ 198.682907][ T3926] EXT4-fs: Ignoring removed i_version option [ 198.688756][ T3926] EXT4-fs: Ignoring removed nobh option [ 198.706082][ T3926] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 198.726856][ T3926] EXT4-fs (loop1): 1 truncate cleaned up [ 198.732367][ T3926] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 198.920255][ T3939] loop0: detected capacity change from 0 to 256 [ 199.048397][ T3941] loop4: detected capacity change from 0 to 256 [ 199.261848][ T3937] loop3: detected capacity change from 0 to 1024 [ 199.327444][ T3937] EXT4-fs: Mount option(s) incompatible with ext2 [ 199.376279][ T1230] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 199.398426][ T292] EXT4-fs (loop1): unmounting filesystem. [ 199.675437][ T3946] syz.3.1045[3946] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 199.675510][ T3946] syz.3.1045[3946] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 199.972662][ T6] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 199.992354][ T3949] loop0: detected capacity change from 0 to 1024 [ 200.006142][ T3949] EXT4-fs: Mount option(s) incompatible with ext2 [ 200.182329][ T3955] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1048'. [ 200.209618][ T3955] fuse: Unknown parameter '00000000000000000000011' [ 201.084229][ T3962] loop3: detected capacity change from 0 to 256 [ 201.094554][ T3962] FAT-fs (loop3): Directory bread(block 64) failed [ 201.100979][ T3962] FAT-fs (loop3): Directory bread(block 65) failed [ 201.107280][ T3962] FAT-fs (loop3): Directory bread(block 66) failed [ 201.113683][ T3962] FAT-fs (loop3): Directory bread(block 67) failed [ 201.122391][ T3962] FAT-fs (loop3): Directory bread(block 68) failed [ 201.130323][ T3962] FAT-fs (loop3): Directory bread(block 69) failed [ 201.138038][ T3962] FAT-fs (loop3): Directory bread(block 70) failed [ 201.142763][ T3965] loop1: detected capacity change from 0 to 512 [ 201.145086][ T3962] FAT-fs (loop3): Directory bread(block 71) failed [ 201.158475][ T3962] FAT-fs (loop3): Directory bread(block 72) failed [ 201.165917][ T3966] loop0: detected capacity change from 0 to 1024 [ 201.166312][ T3962] FAT-fs (loop3): Directory bread(block 73) failed [ 201.183654][ T3966] EXT4-fs: Mount option(s) incompatible with ext2 [ 201.194145][ T3965] EXT4-fs: Ignoring removed mblk_io_submit option [ 201.225826][ T3965] EXT4-fs error (device loop1): ext4_find_inline_data_nolock:164: inode #12: comm syz.1.1051: inline data xattr refers to an external xattr inode [ 201.240759][ T324] kworker/u4:3: attempt to access beyond end of device [ 201.240759][ T324] loop3: rw=1, sector=1224, nr_sectors = 128 limit=256 [ 201.246483][ T3965] EXT4-fs error (device loop1): ext4_orphan_get:1401: comm syz.1.1051: couldn't read orphan inode 12 (err -117) [ 201.257087][ T3970] loop4: detected capacity change from 0 to 1024 [ 201.272294][ T3965] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 201.287845][ T319] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 201.293099][ T3972] loop3: detected capacity change from 0 to 1024 [ 201.305354][ T3970] EXT4-fs: Mount option(s) incompatible with ext2 [ 201.325335][ T6] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 201.342547][ T3972] EXT4-fs: Mount option(s) incompatible with ext2 [ 201.348917][ T6] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 201.363438][ T6] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 201.376602][ T6] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 201.385477][ T6] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.397248][ T6] usb 3-1: config 0 descriptor?? [ 201.663950][ T3977] syz.0.1052[3977] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 201.664836][ T3977] syz.0.1052[3977] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 202.096782][ T3981] syz.3.1053[3981] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 202.107974][ T3981] syz.3.1053[3981] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 202.133502][ T3932] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 202.294654][ T3984] loop2: detected capacity change from 0 to 512 [ 202.301217][ T6] usb 3-1: can't set config #0, error -71 [ 202.331352][ T292] EXT4-fs (loop1): unmounting filesystem. [ 202.351503][ T3984] EXT4-fs: Ignoring removed mblk_io_submit option [ 202.399722][ T3984] EXT4-fs error (device loop2): ext4_find_inline_data_nolock:164: inode #12: comm syz.2.1055: inline data xattr refers to an external xattr inode [ 202.416087][ T3984] EXT4-fs error (device loop2): ext4_orphan_get:1401: comm syz.2.1055: couldn't read orphan inode 12 (err -117) [ 202.428489][ T3984] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 202.502809][ T6] usb 3-1: USB disconnect, device number 12 [ 202.552651][ T3992] loop1: detected capacity change from 0 to 1024 [ 202.581417][ T3992] EXT4-fs: Mount option(s) incompatible with ext2 [ 202.664762][ T4002] loop3: detected capacity change from 0 to 512 [ 202.684651][ T4002] EXT4-fs: Ignoring removed mblk_io_submit option [ 202.764911][ T3703] EXT4-fs (loop2): unmounting filesystem. [ 202.781690][ T4002] EXT4-fs error (device loop3): ext4_find_inline_data_nolock:164: inode #12: comm syz.3.1062: inline data xattr refers to an external xattr inode [ 202.815922][ T4002] EXT4-fs error (device loop3): ext4_orphan_get:1401: comm syz.3.1062: couldn't read orphan inode 12 (err -117) [ 202.846722][ T4002] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 202.858976][ T4011] loop0: detected capacity change from 0 to 256 [ 203.598154][ T294] EXT4-fs (loop3): unmounting filesystem. [ 203.666671][ T4004] loop4: detected capacity change from 0 to 256 [ 203.679995][ T28] audit: type=1400 audit(1725542105.546:354): avc: denied { append } for pid=4019 comm="syz.3.1065" name="001" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 203.710587][ T4022] loop0: detected capacity change from 0 to 512 [ 203.717069][ T4022] EXT4-fs: Ignoring removed i_version option [ 203.722896][ T4022] EXT4-fs: Ignoring removed nobh option [ 203.770888][ T4022] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 203.812317][ T4022] EXT4-fs (loop0): 1 truncate cleaned up [ 203.834492][ T4027] loop3: detected capacity change from 0 to 1024 [ 203.841168][ T4022] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 203.874058][ T4027] EXT4-fs: Mount option(s) incompatible with ext2 [ 204.040515][ T3737] EXT4-fs (loop0): unmounting filesystem. [ 204.186572][ T412] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 204.244367][ T4039] loop1: detected capacity change from 0 to 256 [ 204.431660][ T4041] loop0: detected capacity change from 0 to 256 [ 204.440788][ T4037] loop4: detected capacity change from 0 to 1024 [ 204.457026][ T4037] EXT4-fs: Mount option(s) incompatible with ext2 [ 204.505652][ T319] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 204.955428][ T4044] syz.4.1071[4044] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 204.955499][ T4044] syz.4.1071[4044] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 205.804529][ T412] usb 3-1: Using ep0 maxpacket: 16 [ 205.867548][ T4062] loop1: detected capacity change from 0 to 1024 [ 205.886260][ T4062] EXT4-fs: Mount option(s) incompatible with ext2 [ 205.903183][ T4065] loop3: detected capacity change from 0 to 512 [ 205.909502][ T4065] EXT4-fs: Ignoring removed i_version option [ 205.915508][ T4065] EXT4-fs: Ignoring removed nobh option [ 205.921155][ T4065] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 205.932266][ T4065] EXT4-fs (loop3): 1 truncate cleaned up [ 205.938859][ T4065] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 206.025798][ T4070] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1077'. [ 206.085379][ T412] usb 3-1: config 0 has no interfaces? [ 206.183753][ T4074] syz.1.1078[4074] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 206.184050][ T4074] syz.1.1078[4074] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 206.305584][ T412] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 206.326668][ T412] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.334664][ T412] usb 3-1: Product: syz [ 206.342497][ T412] usb 3-1: Manufacturer: syz [ 206.348157][ T412] usb 3-1: SerialNumber: syz [ 206.370548][ T412] r8152-cfgselector 3-1: config 0 descriptor?? [ 206.423255][ T294] EXT4-fs (loop3): unmounting filesystem. [ 206.582244][ T4079] loop3: detected capacity change from 0 to 256 [ 206.882213][ T4086] loop1: detected capacity change from 0 to 512 [ 206.891098][ T4086] EXT4-fs: Ignoring removed mblk_io_submit option [ 206.907923][ T4086] EXT4-fs error (device loop1): ext4_find_inline_data_nolock:164: inode #12: comm syz.1.1084: inline data xattr refers to an external xattr inode [ 206.929379][ T4086] EXT4-fs error (device loop1): ext4_orphan_get:1401: comm syz.1.1084: couldn't read orphan inode 12 (err -117) [ 206.941455][ T4086] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 207.041894][ T412] usb 3-1: USB disconnect, device number 13 [ 207.050132][ T4092] loop0: detected capacity change from 0 to 256 [ 207.341596][ T4097] loop4: detected capacity change from 0 to 256 [ 207.867728][ T292] EXT4-fs (loop1): unmounting filesystem. [ 207.960457][ T4106] device sit0 entered promiscuous mode [ 207.980504][ T4106] netlink: 'syz.1.1087': attribute type 1 has an invalid length. [ 207.988393][ T4106] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1087'. [ 208.062113][ T4109] loop3: detected capacity change from 0 to 256 [ 208.277957][ T4111] loop4: detected capacity change from 0 to 1024 [ 208.310165][ T4111] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 208.340858][ T789] EXT4-fs (loop4): unmounting filesystem. [ 208.371486][ T4128] loop4: detected capacity change from 0 to 1024 [ 208.378613][ T4128] EXT4-fs: Mount option(s) incompatible with ext2 [ 208.482650][ T4129] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1092'. [ 208.672270][ T4133] syz.4.1095[4133] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 208.672636][ T4133] syz.4.1095[4133] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 209.264624][ T4139] loop3: detected capacity change from 0 to 1024 [ 209.297297][ T4139] EXT4-fs: Mount option(s) incompatible with ext2 [ 209.314071][ T4140] loop2: detected capacity change from 0 to 512 [ 209.332467][ T4140] EXT4-fs: Ignoring removed mblk_io_submit option [ 209.348818][ T28] audit: type=1400 audit(1725542111.216:355): avc: denied { accept } for pid=4142 comm="syz.4.1099" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 209.364296][ T4140] EXT4-fs error (device loop2): ext4_find_inline_data_nolock:164: inode #12: comm syz.2.1097: inline data xattr refers to an external xattr inode [ 209.372051][ T28] audit: type=1400 audit(1725542111.216:356): avc: denied { read } for pid=4142 comm="syz.4.1099" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 209.387284][ T4140] EXT4-fs error (device loop2): ext4_orphan_get:1401: comm syz.2.1097: couldn't read orphan inode 12 (err -117) [ 209.459756][ T4149] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1096'. [ 209.473197][ T4149] fuse: Unknown parameter 'use00000000000000000000' [ 209.605673][ T28] audit: type=1400 audit(1725542111.476:357): avc: denied { write } for pid=4150 comm="syz.0.1102" name="uinput" dev="devtmpfs" ino=170 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 209.606360][ T4140] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 209.632022][ T4151] input: syz1 as /devices/virtual/input/input14 [ 210.189140][ T923] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 210.203637][ T3703] EXT4-fs (loop2): unmounting filesystem. [ 210.297818][ T4171] loop2: detected capacity change from 0 to 256 [ 210.312538][ T4171] FAT-fs (loop2): Directory bread(block 64) failed [ 210.319190][ T4171] FAT-fs (loop2): Directory bread(block 65) failed [ 210.325859][ T4171] FAT-fs (loop2): Directory bread(block 66) failed [ 210.332219][ T4171] FAT-fs (loop2): Directory bread(block 67) failed [ 210.338853][ T4171] FAT-fs (loop2): Directory bread(block 68) failed [ 210.345478][ T4171] FAT-fs (loop2): Directory bread(block 69) failed [ 210.351859][ T4171] FAT-fs (loop2): Directory bread(block 70) failed [ 210.358350][ T4171] FAT-fs (loop2): Directory bread(block 71) failed [ 210.364721][ T4171] FAT-fs (loop2): Directory bread(block 72) failed [ 210.371224][ T4171] FAT-fs (loop2): Directory bread(block 73) failed [ 210.389508][ T4162] loop0: detected capacity change from 0 to 40427 [ 210.399461][ T4162] F2FS-fs (loop0): invalid crc value [ 210.405821][ T4162] F2FS-fs (loop0): Found nat_bits in checkpoint [ 210.434972][ T4162] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 210.435169][ T923] usb 5-1: Using ep0 maxpacket: 16 [ 210.450827][ T4172] f2fs_ckpt-7:0: attempt to access beyond end of device [ 210.450827][ T4172] loop0: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 210.465227][ T4171] loop2: detected capacity change from 256 to 11 [ 210.468306][ T6] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 210.476273][ T4171] syz.2.1108: attempt to access beyond end of device [ 210.476273][ T4171] loop2: rw=2051, sector=1224, nr_sectors = 32 limit=11 [ 210.505223][ T412] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 210.565222][ T923] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 210.585179][ T923] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 210.603118][ T923] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 210.612609][ T923] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.628196][ T923] usb 5-1: config 0 descriptor?? [ 210.713503][ T4182] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.715248][ T6] usb 2-1: Using ep0 maxpacket: 16 [ 210.721007][ T4182] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.732574][ T4182] device bridge_slave_0 entered promiscuous mode [ 210.740371][ T4182] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.747266][ T4182] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.754277][ T4182] device bridge_slave_1 entered promiscuous mode [ 210.776867][ T4187] loop0: detected capacity change from 0 to 512 [ 210.783173][ T4187] EXT4-fs: Ignoring removed mblk_io_submit option [ 210.791346][ T4187] EXT4-fs error (device loop0): ext4_find_inline_data_nolock:164: inode #12: comm syz.0.1115: inline data xattr refers to an external xattr inode [ 210.807103][ T4187] EXT4-fs error (device loop0): ext4_orphan_get:1401: comm syz.0.1115: couldn't read orphan inode 12 (err -117) [ 210.819104][ T4187] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 210.869148][ T4182] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.876030][ T4182] bridge0: port 2(bridge_slave_1) entered forwarding state [ 210.883112][ T4182] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.889915][ T4182] bridge0: port 1(bridge_slave_0) entered forwarding state [ 210.911763][ T982] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 210.919348][ T982] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.926504][ T982] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.935527][ T412] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 210.946322][ T412] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 210.956644][ T982] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 210.964631][ T982] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.971504][ T982] bridge0: port 1(bridge_slave_0) entered forwarding state [ 210.979708][ T982] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 210.987719][ T982] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.994568][ T982] bridge0: port 2(bridge_slave_1) entered forwarding state [ 211.003543][ T982] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 211.011397][ T982] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 211.019192][ T6] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 211.043965][ T6] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.052347][ T4182] device veth0_vlan entered promiscuous mode [ 211.060255][ T6] usb 2-1: Product: syz [ 211.070514][ T6] usb 2-1: Manufacturer: syz [ 211.076335][ T4182] device veth1_macvtap entered promiscuous mode [ 211.082424][ T6] usb 2-1: SerialNumber: syz [ 211.093043][ T6] r8152-cfgselector 2-1: config 0 descriptor?? [ 211.096553][ T412] usb 4-1: New USB device found, idVendor=06cb, idProduct=73f4, bcdDevice= 0.00 [ 211.107942][ T412] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.109879][ T325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 211.118287][ T412] usb 4-1: config 0 descriptor?? [ 211.124322][ T923] cp2112 0003:10C4:EA90.001D: unexpected long global item [ 211.136691][ T325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 211.144823][ T325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 211.153238][ T923] cp2112 0003:10C4:EA90.001D: parse failed [ 211.158912][ T923] cp2112: probe of 0003:10C4:EA90.001D failed with error -22 [ 211.166742][ T325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 211.174604][ T325] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 211.183585][ T325] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 211.191085][ T325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 211.245994][ T324] device bridge_slave_1 left promiscuous mode [ 211.253817][ T324] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.261461][ T324] device bridge_slave_0 left promiscuous mode [ 211.267551][ T324] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.275178][ T324] device veth1_macvtap left promiscuous mode [ 211.281020][ T324] device veth0_vlan left promiscuous mode [ 211.330994][ T982] usb 5-1: USB disconnect, device number 13 [ 211.605208][ T6] r8152-cfgselector 2-1: Unknown version 0x0000 [ 211.611425][ T6] r8152-cfgselector 2-1: bad CDC descriptors [ 211.616201][ T412] itetech 0003:06CB:73F4.001E: unknown main item tag 0x0 [ 211.635788][ T6] r8152-cfgselector 2-1: Unknown version 0x0000 [ 211.642380][ T412] itetech 0003:06CB:73F4.001E: unknown main item tag 0x0 [ 211.646872][ T6] r8152-cfgselector 2-1: USB disconnect, device number 19 [ 211.649400][ T412] itetech 0003:06CB:73F4.001E: item fetching failed at offset 2/7 [ 211.664068][ T412] itetech: probe of 0003:06CB:73F4.001E failed with error -22 [ 211.675480][ T3737] EXT4-fs (loop0): unmounting filesystem. [ 211.689741][ T28] audit: type=1400 audit(1725542113.556:358): avc: denied { validate_trans } for pid=4196 comm="syz.0.1116" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 211.867286][ T4201] loop0: detected capacity change from 0 to 256 [ 212.126162][ T982] usb 4-1: USB disconnect, device number 12 [ 212.160930][ T4208] loop2: detected capacity change from 0 to 8192 [ 212.167996][ T4208] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 212.180416][ T28] audit: type=1400 audit(1725542114.046:359): avc: denied { ioctl } for pid=4207 comm="syz.2.1120" path="pid:[4026532288]" dev="nsfs" ino=4026532288 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 212.217831][ T4210] input: syz0 as /devices/virtual/input/input15 [ 212.326541][ T4212] loop1: detected capacity change from 0 to 40427 [ 212.334042][ T4212] F2FS-fs (loop1): invalid crc value [ 212.340729][ T4212] F2FS-fs (loop1): Found nat_bits in checkpoint [ 212.364284][ T4212] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 212.375514][ T28] audit: type=1400 audit(1725542114.246:360): avc: denied { create } for pid=4211 comm="syz.1.1122" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 212.395179][ T923] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 212.403826][ T4212] syz.1.1122: attempt to access beyond end of device [ 212.403826][ T4212] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 212.495172][ T321] usb 3-1: new low-speed USB device number 14 using dummy_hcd [ 212.574208][ T4221] loop0: detected capacity change from 0 to 512 [ 212.580706][ T4221] EXT4-fs: Ignoring removed mblk_io_submit option [ 212.588323][ T4221] EXT4-fs error (device loop0): ext4_find_inline_data_nolock:164: inode #12: comm syz.0.1124: inline data xattr refers to an external xattr inode [ 212.603075][ T4221] EXT4-fs error (device loop0): ext4_orphan_get:1401: comm syz.0.1124: couldn't read orphan inode 12 (err -117) [ 212.615311][ T4221] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 212.645182][ T923] usb 5-1: Using ep0 maxpacket: 16 [ 212.657768][ T4224] SELinux: Context system_u:object_r:ptchown_exec_t:s0 is not valid (left unmapped). [ 212.676037][ T28] audit: type=1400 audit(1725542114.526:361): avc: denied { relabelfrom } for pid=4223 comm="syz.3.1125" name="TCPv6" dev="sockfs" ino=29545 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 212.699300][ T28] audit: type=1400 audit(1725542114.536:362): avc: denied { relabelto } for pid=4223 comm="syz.3.1125" name="TCPv6" dev="sockfs" ino=29545 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=tcp_socket permissive=1 trawcon="system_u:object_r:ptchown_exec_t:s0" [ 212.735020][ T4228] loop3: detected capacity change from 0 to 512 [ 212.741365][ T4228] EXT4-fs: Ignoring removed mblk_io_submit option [ 212.750581][ T4228] EXT4-fs error (device loop3): ext4_find_inline_data_nolock:164: inode #12: comm syz.3.1127: inline data xattr refers to an external xattr inode [ 212.765443][ T412] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 212.773555][ T4228] EXT4-fs error (device loop3): ext4_orphan_get:1401: comm syz.3.1127: couldn't read orphan inode 12 (err -117) [ 212.878171][ T4228] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 212.919341][ T923] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 212.930107][ T923] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 212.939639][ T923] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 212.948599][ T923] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.957061][ T923] usb 5-1: config 0 descriptor?? [ 212.979287][ T321] usb 3-1: config index 0 descriptor too short (expected 1307, got 27) [ 212.987522][ T321] usb 3-1: config 0 has an invalid interface number: 0 but max is -1 [ 212.995541][ T321] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 213.004203][ T321] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 213.013997][ T321] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 213.165276][ T412] usb 2-1: New USB device found, idVendor=077b, idProduct=2226, bcdDevice=ca.8b [ 213.174194][ T412] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.182570][ T412] usb 2-1: config 0 descriptor?? [ 213.295245][ T321] usb 3-1: string descriptor 0 read error: -22 [ 213.301281][ T321] usb 3-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=c3.de [ 213.310268][ T321] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.318610][ T321] usb 3-1: config 0 descriptor?? [ 213.355526][ T321] hub 3-1:0.0: bad descriptor, ignoring hub [ 213.361300][ T321] hub: probe of 3-1:0.0 failed with error -5 [ 213.367717][ T321] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input16 [ 213.426067][ T3737] EXT4-fs (loop0): unmounting filesystem. [ 213.436589][ T923] savu 0003:1E7D:2D5A.001F: item fetching failed at offset 2/5 [ 213.444264][ T923] savu 0003:1E7D:2D5A.001F: parse failed [ 213.449988][ T923] savu: probe of 0003:1E7D:2D5A.001F failed with error -22 [ 213.598812][ T4237] loop0: detected capacity change from 0 to 256 [ 213.745046][ T295] usb 5-1: USB disconnect, device number 14 [ 213.762684][ T294] EXT4-fs (loop3): unmounting filesystem. [ 213.834336][ T321] usb 3-1: USB disconnect, device number 14 [ 213.922170][ T4239] xt_bpf: check failed: parse error [ 213.936278][ T4241] loop3: detected capacity change from 0 to 512 [ 213.942535][ T4241] EXT4-fs: Ignoring removed i_version option [ 213.948547][ T4241] EXT4-fs: Ignoring removed nobh option [ 213.954153][ T4241] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 213.965069][ T4241] EXT4-fs (loop3): 1 truncate cleaned up [ 213.970650][ T4241] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 214.039957][ T294] EXT4-fs (loop3): unmounting filesystem. [ 214.382964][ T4253] loop2: detected capacity change from 0 to 2048 [ 214.395389][ T412] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 214.396467][ T4253] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 214.405331][ T412] asix: probe of 2-1:0.0 failed with error -71 [ 214.413580][ T4253] ext4 filesystem being mounted at /4/file0 supports timestamps until 2038 (0x7fffffff) [ 214.420785][ T412] usb 2-1: USB disconnect, device number 20 [ 214.454111][ T4182] EXT4-fs (loop2): unmounting filesystem. [ 214.468595][ T4257] loop2: detected capacity change from 0 to 512 [ 214.474824][ T4257] EXT4-fs: Ignoring removed i_version option [ 214.480776][ T4257] EXT4-fs: Ignoring removed nobh option [ 214.486591][ T4257] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 214.497972][ T4257] EXT4-fs (loop2): 1 truncate cleaned up [ 214.503465][ T4257] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 214.535187][ T321] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 214.576245][ T4182] EXT4-fs (loop2): unmounting filesystem. [ 214.585209][ T411] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 214.743359][ T4262] loop2: detected capacity change from 0 to 256 [ 214.935287][ T321] usb 5-1: Using ep0 maxpacket: 16 [ 214.979909][ T4269] loop3: detected capacity change from 0 to 1024 [ 214.986629][ T4269] EXT4-fs: Mount option(s) incompatible with ext2 [ 215.085295][ T411] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 215.096188][ T321] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 215.106744][ T321] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 215.116135][ T411] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 215.126792][ T321] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 215.137454][ T411] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 215.148571][ T411] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 215.307409][ T4274] loop1: detected capacity change from 0 to 512 [ 215.313806][ T4274] EXT4-fs: Ignoring removed mblk_io_submit option [ 215.322578][ T4274] EXT4-fs error (device loop1): ext4_find_inline_data_nolock:164: inode #12: comm syz.1.1140: inline data xattr refers to an external xattr inode [ 215.337501][ T4274] EXT4-fs error (device loop1): ext4_orphan_get:1401: comm syz.1.1140: couldn't read orphan inode 12 (err -117) [ 215.349428][ T4274] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 215.448859][ T4277] loop2: detected capacity change from 0 to 512 [ 215.455705][ T4277] EXT4-fs: Ignoring removed i_version option [ 215.461676][ T4277] EXT4-fs: Ignoring removed nobh option [ 215.467597][ T4277] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 215.477381][ T411] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 215.478615][ T4277] EXT4-fs (loop2): 1 truncate cleaned up [ 215.486379][ T321] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 215.492916][ T4277] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 215.500929][ T411] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.516771][ T321] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.524583][ T321] usb 5-1: Product: syz [ 215.528769][ T411] usb 1-1: Product: syz [ 215.532941][ T321] usb 5-1: Manufacturer: syz [ 215.537537][ T411] usb 1-1: Manufacturer: syz [ 215.541978][ T321] usb 5-1: SerialNumber: syz [ 215.546552][ T411] usb 1-1: SerialNumber: syz [ 215.575280][ T4251] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 215.602847][ T4182] EXT4-fs (loop2): unmounting filesystem. [ 215.796656][ T4251] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 215.803668][ T4251] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 216.010924][ T4285] loop3: detected capacity change from 0 to 256 [ 216.018253][ T321] usb 5-1: 2:1 : format type 0 is detected, processed as PCM [ 216.156120][ T292] EXT4-fs (loop1): unmounting filesystem. [ 216.170348][ T4287] loop1: detected capacity change from 0 to 1024 [ 216.177157][ T4287] EXT4-fs: Mount option(s) incompatible with ext2 [ 216.327568][ T4290] syz.1.1144[4290] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 216.327922][ T4290] syz.1.1144[4290] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 216.665422][ T4251] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 216.683557][ T4251] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 216.722763][ T4294] loop3: detected capacity change from 0 to 512 [ 216.728905][ T1040] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 216.729063][ T4294] EXT4-fs: Ignoring removed i_version option [ 216.742092][ T4294] EXT4-fs: Ignoring removed nobh option [ 216.747961][ T4294] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 216.759048][ T4294] EXT4-fs (loop3): 1 truncate cleaned up [ 216.764513][ T4294] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 216.835093][ T294] EXT4-fs (loop3): unmounting filesystem. [ 216.915212][ T321] usb 5-1: 2:1: cannot get freq at ep 0x82 [ 216.920913][ T411] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 216.927571][ T411] cdc_ncm 1-1:1.0: setting rx_max = 16384 [ 216.948017][ T321] usb 5-1: USB disconnect, device number 15 [ 217.135287][ T411] cdc_ncm 1-1:1.0: setting tx_max = 16384 [ 217.147263][ T411] cdc_ncm 1-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 217.158144][ T1040] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 217.173622][ T4301] loop1: detected capacity change from 0 to 40427 [ 217.176937][ T28] audit: type=1400 audit(1725542119.036:363): avc: denied { read } for pid=140 comm="dhcpcd" name="n16" dev="tmpfs" ino=11328 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 217.181140][ T4301] F2FS-fs (loop1): Invalid SB checksum offset: 0 [ 217.206064][ T411] usb 1-1: USB disconnect, device number 16 [ 217.209573][ T4301] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 217.213583][ T1040] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 217.240040][ T411] cdc_ncm 1-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM (NO ZLP) [ 217.260525][ T28] audit: type=1400 audit(1725542119.036:364): avc: denied { open } for pid=140 comm="dhcpcd" path="/run/udev/data/n16" dev="tmpfs" ino=11328 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 217.262827][ T4301] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 217.283443][ T1040] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 217.308071][ T28] audit: type=1400 audit(1725542119.036:365): avc: denied { getattr } for pid=140 comm="dhcpcd" path="/run/udev/data/n16" dev="tmpfs" ino=11328 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 217.316412][ T4301] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 217.331261][ T1040] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 217.338486][ T4301] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 217.368811][ T321] ================================================================== [ 217.376786][ T321] BUG: KASAN: use-after-free in worker_thread+0xa36/0x1260 [ 217.383820][ T321] Read of size 8 at addr ffff888110420ce0 by task kworker/1:4/321 [ 217.391451][ T321] [ 217.393636][ T321] CPU: 1 PID: 321 Comm: kworker/1:4 Not tainted 6.1.93-syzkaller-00093-g03a4ae5d9982 #0 [ 217.403170][ T321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 217.413065][ T321] Workqueue: 0x0 (usb_hub_wq) [ 217.417667][ T321] Call Trace: [ 217.420791][ T321] [ 217.423566][ T321] dump_stack_lvl+0x151/0x1b7 [ 217.428084][ T321] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 217.433373][ T321] ? _printk+0xd1/0x111 [ 217.437367][ T321] ? __virt_addr_valid+0x242/0x2f0 [ 217.442314][ T321] print_report+0x158/0x4e0 [ 217.446654][ T321] ? __virt_addr_valid+0x242/0x2f0 [ 217.451603][ T321] ? kasan_complete_mode_report_info+0x90/0x1b0 [ 217.457675][ T321] ? worker_thread+0xa36/0x1260 [ 217.457978][ T28] audit: type=1400 audit(1725542119.326:366): avc: denied { create } for pid=4304 comm="dhcpcd-run-hook" name="resolv.conf.usb0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 217.462356][ T321] kasan_report+0x13c/0x170 [ 217.462380][ T321] ? worker_thread+0xa36/0x1260 [ 217.484573][ T28] audit: type=1400 audit(1725542119.326:367): avc: denied { write } for pid=4304 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.usb0.link" dev="tmpfs" ino=11344 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 217.488743][ T321] __asan_report_load8_noabort+0x14/0x20 [ 217.488763][ T321] worker_thread+0xa36/0x1260 [ 217.488785][ T321] kthread+0x26d/0x300 [ 217.488797][ T321] ? worker_clr_flags+0x1a0/0x1a0 [ 217.488817][ T321] ? kthread_blkcg+0xd0/0xd0 [ 217.488829][ T321] ret_from_fork+0x1f/0x30 [ 217.488845][ T321] [ 217.488850][ T321] [ 217.488852][ T321] Allocated by task 411: [ 217.488858][ T321] kasan_set_track+0x4b/0x70 [ 217.488873][ T321] kasan_save_alloc_info+0x1f/0x30 [ 217.488883][ T321] __kasan_kmalloc+0x9c/0xb0 [ 217.488896][ T321] __kmalloc_node+0xb4/0x1e0 [ 217.488910][ T321] kvmalloc_node+0x221/0x640 [ 217.488923][ T321] alloc_netdev_mqs+0x8c/0xf90 [ 217.488936][ T321] alloc_etherdev_mqs+0x36/0x40 [ 217.488949][ T321] usbnet_probe+0x207/0x27c0 [ 217.488961][ T321] usb_probe_interface+0x5b6/0xa90 [ 217.488972][ T321] really_probe+0x2b8/0x920 [ 217.488983][ T321] __driver_probe_device+0x1a0/0x310 [ 217.488994][ T321] driver_probe_device+0x54/0x3d0 [ 217.489004][ T321] __device_attach_driver+0x2e3/0x490 [ 217.489015][ T321] bus_for_each_drv+0x183/0x200 [ 217.489030][ T321] __device_attach+0x312/0x510 [ 217.489040][ T321] device_initial_probe+0x1a/0x20 [ 217.489050][ T321] bus_probe_device+0xbe/0x1e0 [ 217.489065][ T321] device_add+0xb60/0xf10 [ 217.489077][ T321] usb_set_configuration+0x190f/0x1e80 [ 217.489088][ T321] usb_generic_driver_probe+0x8b/0x150 [ 217.489103][ T321] usb_probe_device+0x144/0x260 [ 217.489112][ T321] really_probe+0x2b8/0x920 [ 217.489123][ T321] __driver_probe_device+0x1a0/0x310 [ 217.489133][ T321] driver_probe_device+0x54/0x3d0 [ 217.489144][ T321] __device_attach_driver+0x2e3/0x490 [ 217.489155][ T321] bus_for_each_drv+0x183/0x200 [ 217.489169][ T321] __device_attach+0x312/0x510 [ 217.489180][ T321] device_initial_probe+0x1a/0x20 [ 217.489190][ T321] bus_probe_device+0xbe/0x1e0 [ 217.489204][ T321] device_add+0xb60/0xf10 [ 217.489216][ T321] usb_new_device+0xf2f/0x1820 [ 217.489228][ T321] hub_event+0x2db1/0x4830 [ 217.489240][ T321] process_one_work+0x73d/0xcb0 [ 217.489254][ T321] worker_thread+0xa60/0x1260 [ 217.489267][ T321] kthread+0x26d/0x300 [ 217.489278][ T321] ret_from_fork+0x1f/0x30 [ 217.489288][ T321] [ 217.489291][ T321] Freed by task 411: [ 217.489296][ T321] kasan_set_track+0x4b/0x70 [ 217.489309][ T321] kasan_save_free_info+0x2b/0x40 [ 217.489318][ T321] ____kasan_slab_free+0x131/0x180 [ 217.489332][ T321] __kasan_slab_free+0x11/0x20 [ 217.489345][ T321] __kmem_cache_free+0x218/0x3b0 [ 217.489356][ T321] kfree+0x7a/0xf0 [ 217.489367][ T321] kvfree+0x35/0x40 [ 217.489379][ T321] netdev_freemem+0x3f/0x60 [ 217.489390][ T321] netdev_release+0x7f/0xb0 [ 217.489402][ T321] device_release+0x95/0x1c0 [ 217.489415][ T321] kobject_put+0x178/0x260 [ 217.489429][ T321] put_device+0x1f/0x30 [ 217.489440][ T321] free_netdev+0x393/0x480 [ 217.489452][ T321] usbnet_disconnect+0x245/0x390 [ 217.489464][ T321] usb_unbind_interface+0x1fa/0x8c0 [ 217.489477][ T321] device_release_driver_internal+0x53e/0x870 [ 217.489490][ T321] device_release_driver+0x19/0x20 [ 217.489499][ T321] bus_remove_device+0x2fa/0x360 [ 217.489511][ T321] device_del+0x663/0xe90 [ 217.489521][ T321] usb_disable_device+0x380/0x720 [ 217.489528][ T321] usb_disconnect+0x32a/0x890 [ 217.489538][ T321] hub_event+0x1ed8/0x4830 [ 217.489548][ T321] process_one_work+0x73d/0xcb0 [ 217.489559][ T321] worker_thread+0xd71/0x1260 [ 217.489570][ T321] kthread+0x26d/0x300 [ 217.489578][ T321] ret_from_fork+0x1f/0x30 [ 217.489587][ T321] [ 217.489589][ T321] Last potentially related work creation: [ 217.489592][ T321] kasan_save_stack+0x3b/0x60 [ 217.489603][ T321] __kasan_record_aux_stack+0xb4/0xc0 [ 217.489616][ T321] kasan_record_aux_stack_noalloc+0xb/0x10 [ 217.489623][ T321] insert_work+0x56/0x310 [ 217.489634][ T321] __queue_work+0x9b6/0xd70 [ 217.489644][ T321] queue_work_on+0x105/0x170 [ 217.489653][ T321] usbnet_link_change+0xeb/0x100 [ 217.489662][ T321] usbnet_probe+0x1dbe/0x27c0 [ 217.489672][ T321] usb_probe_interface+0x5b6/0xa90 [ 217.489680][ T321] really_probe+0x2b8/0x920 [ 217.489688][ T321] __driver_probe_device+0x1a0/0x310 [ 217.489696][ T321] driver_probe_device+0x54/0x3d0 [ 217.489705][ T321] __device_attach_driver+0x2e3/0x490 [ 217.489714][ T321] bus_for_each_drv+0x183/0x200 [ 217.489726][ T321] __device_attach+0x312/0x510 [ 217.489734][ T321] device_initial_probe+0x1a/0x20 [ 217.489742][ T321] bus_probe_device+0xbe/0x1e0 [ 217.489754][ T321] device_add+0xb60/0xf10 [ 217.489764][ T321] usb_set_configuration+0x190f/0x1e80 [ 217.489772][ T321] usb_generic_driver_probe+0x8b/0x150 [ 217.489784][ T321] usb_probe_device+0x144/0x260 [ 217.489792][ T321] really_probe+0x2b8/0x920 [ 217.489800][ T321] __driver_probe_device+0x1a0/0x310 [ 217.489813][ T321] driver_probe_device+0x54/0x3d0 [ 217.489822][ T321] __device_attach_driver+0x2e3/0x490 [ 217.489831][ T321] bus_for_each_drv+0x183/0x200 [ 217.489843][ T321] __device_attach+0x312/0x510 [ 217.489850][ T321] device_initial_probe+0x1a/0x20 [ 217.489859][ T321] bus_probe_device+0xbe/0x1e0 [ 217.489871][ T321] device_add+0xb60/0xf10 [ 217.489880][ T321] usb_new_device+0xf2f/0x1820 [ 217.489890][ T321] hub_event+0x2db1/0x4830 [ 217.489899][ T321] process_one_work+0x73d/0xcb0 [ 217.489910][ T321] worker_thread+0xa60/0x1260 [ 217.489921][ T321] kthread+0x26d/0x300 [ 217.489929][ T321] ret_from_fork+0x1f/0x30 [ 217.489938][ T321] [ 217.489940][ T321] The buggy address belongs to the object at ffff888110420000 [ 217.489940][ T321] which belongs to the cache kmalloc-4k of size 4096 [ 217.489948][ T321] The buggy address is located 3296 bytes inside of [ 217.489948][ T321] 4096-byte region [ffff888110420000, ffff888110421000) [ 217.489957][ T321] [ 217.489958][ T321] The buggy address belongs to the physical page: [ 217.489973][ T321] page:ffffea0004410800 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x110420 [ 217.489986][ T321] head:ffffea0004410800 order:3 compound_mapcount:0 compound_pincount:0 [ 217.489994][ T321] flags: 0x4000000000010200(slab|head|zone=1) [ 217.490007][ T321] raw: 4000000000010200 ffffea000443f000 dead000000000002 ffff888100043380 [ 217.490015][ T321] raw: 0000000000000000 0000000000040004 00000001ffffffff 0000000000000000 [ 217.490019][ T321] page dumped because: kasan: bad access detected [ 217.490026][ T321] page_owner tracks the page as allocated [ 217.490029][ T321] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d2a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 293, tgid 293 (syz-executor), ts 22060019615, free_ts 21912262929 [ 217.490051][ T321] post_alloc_hook+0x213/0x220 [ 217.490061][ T321] prep_new_page+0x1b/0x110 [ 217.490069][ T321] get_page_from_freelist+0x27ea/0x2870 [ 217.490078][ T321] __alloc_pages+0x3a1/0x780 [ 217.490087][ T321] alloc_slab_page+0x6c/0xf0 [ 217.490096][ T321] new_slab+0x90/0x3e0 [ 217.490105][ T321] ___slab_alloc+0x6f9/0xb80 [ 217.490114][ T321] __slab_alloc+0x5d/0xa0 [ 217.490122][ T321] __kmem_cache_alloc_node+0x1af/0x250 [ 217.490131][ T321] __kmalloc_node_track_caller+0xa2/0x1e0 [ 217.490142][ T321] __alloc_skb+0x125/0x2d0 [ 217.490152][ T321] rtmsg_ifinfo_build_skb+0x7f/0x180 [ 217.490162][ T321] rtmsg_ifinfo+0x78/0x120 [ 217.490171][ T321] __dev_notify_flags+0xdd/0x610 [ 217.490179][ T321] dev_change_flags+0xf0/0x1a0 [ 217.490188][ T321] do_setlink+0xdb8/0x4050 [ 217.490198][ T321] page last free stack trace: [ 217.490200][ T321] free_unref_page_prepare+0x83d/0x850 [ 217.490210][ T321] free_unref_page+0xb2/0x5c0 [ 217.490218][ T321] __free_pages+0x61/0xf0 [ 217.490226][ T321] __free_slab+0xce/0x1a0 [ 217.490235][ T321] __unfreeze_partials+0x165/0x1a0 [ 217.490245][ T321] put_cpu_partial+0xa9/0x100 [ 217.490254][ T321] __slab_free+0x1c8/0x280 [ 217.490263][ T321] ___cache_free+0xc6/0xd0 [ 217.490272][ T321] qlist_free_all+0xc5/0x140 [ 217.490280][ T321] kasan_quarantine_reduce+0x15a/0x180 [ 217.490289][ T321] __kasan_slab_alloc+0x24/0x80 [ 217.490300][ T321] slab_post_alloc_hook+0x53/0x2c0 [ 217.490309][ T321] __kmem_cache_alloc_node+0x191/0x250 [ 217.490318][ T321] kmalloc_trace+0x2a/0xa0 [ 217.490329][ T321] ____ip_mc_inc_group+0x215/0x8d0 [ 217.490341][ T321] ip_mc_up+0x10f/0x1e0 [ 217.490352][ T321] [ 217.490353][ T321] Memory state around the buggy address: [ 217.490358][ T321] ffff888110420b80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 217.490364][ T321] ffff888110420c00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 217.490370][ T321] >ffff888110420c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 217.490375][ T321] ^ [ 217.490380][ T321] ffff888110420d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 217.490386][ T321] ffff888110420d80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 217.490391][ T321] ================================================================== [ 217.490395][ T321] Disabling lock debugging due to kernel taint [ 217.566890][ T1040] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 217.566919][ T1040] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 217.566938][ T1040] usb 3-1: Manufacturer: syz [ 217.567602][ T1040] usb 3-1: config 0 descriptor?? [ 217.599179][ T28] audit: type=1400 audit(1725542119.326:368): avc: denied { append } for pid=4304 comm="dhcpcd-run-hook" name="resolv.conf.usb0.link" dev="tmpfs" ino=11344 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 218.085965][ T1040] appleir 0003:05AC:8243.0020: unknown main item tag 0x0 [ 218.087920][ T28] audit: type=1400 audit(1725542119.416:369): avc: denied { unlink } for pid=4320 comm="rm" name="resolv.conf.usb0.link" dev="tmpfs" ino=11344 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 218.096241][ T1040] appleir 0003:05AC:8243.0020: No inputs registered, leaving [ 218.453381][ T1040] appleir 0003:05AC:8243.0020: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 219.677083][ T1040] usb 3-1: USB disconnect, device number 15