last executing test programs: 5.346494106s ago: executing program 2 (id=838): r0 = syz_open_procfs(0x0, &(0x7f0000000100)='coredump_filter\x00') lseek(r0, 0x0, 0x3) 5.257122833s ago: executing program 2 (id=850): r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000040)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x8, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbe, &(0x7f0000000100)=[{}, {}], 0x10, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x89, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) r1 = syz_usb_connect$cdc_ncm(0x0, 0x6e, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f00000007c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x401}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000080)='./file2\x00', 0x100080d, &(0x7f0000000a80)=ANY=[@ANYRES32=0x0, @ANYBLOB="de60d8dc536d5258d6a94ad55604a34dc65b7ef79c1a1754e4cadfe21823d0c10a15d53dba5f2d2bc67ef2477d0412534e2f5151c7a60c8f5d6c634d173fecb5de9207a7090d302229cd3f210d34e4584c824c9dda7d35e0d7a06cd667bf9cced32944ca27d8a80e62cf6310db869ee250fb65467e3b11ad5042d600c6b8f18454d57df621e578fef0a3a93c14609231", @ANYRES8, @ANYRESDEC, @ANYBLOB="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", @ANYRESOCT, @ANYRESOCT=0x0, @ANYRES32, @ANYRESDEC, @ANYRESOCT, @ANYRES64, @ANYRES8, @ANYBLOB="3dea3f"], 0xff, 0x1fc, &(0x7f0000002c80)="$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") stat(&(0x7f0000005280)='./file0\x00', 0x0) dup(0xffffffffffffffff) syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000071122700000000009500c9df00000000de54efd337d35285c161c5277edb8ebb15b58f91a5ee2dfc464680aaeda509f80db720be849cfad349052a513d731f3e1ab1616de782ebeab3fad78b022a9488de94c51041787406824c841f2e132d053e63230d79544561215df07865865ca3b1d4cd0ca39c621b8bcb16c583a7d45d18615d25d7189e29edf825cc4555d6357089204333610ca3ad8e0bd555a1a819abd1c3df59e861ad355c8b4c483a06d01b"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) r3 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r3, &(0x7f0000000000)={0x18, 0x2, {0x0, @dev={0xac, 0x14, 0x14, 0x11}}}, 0x1e) connect$pptp(r3, &(0x7f0000000040)={0x18, 0x2, {0x0, @multicast1}}, 0x1e) syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000380)={0x14, &(0x7f00000006c0)={0x40, 0xd, 0xae, {0xae, 0x6, "173f3627f5404b6e6b6c7a5fe4db5a83630cce986a9b1b8a213f109c098e8fa8145a0c4d58bc15a92772afcb3cfa4d7e2a7522c1533c1654ae91d1ed9de1c4490488ed11953d195bfb6fd8238a0181bbcfe27e1ecaa79793ff27645914aaafa1312a1815193dcd7af2a7e1384c1c2b6a67c06d1bfd5e0591667a0e0cde45d7c90c09c32d950001ec07e82416c5f44e5e3746131bdd4e6fc9fcf839363c206f78edd1af9a3f17023f88442593"}}, &(0x7f0000000340)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000009c0)={0x44, &(0x7f0000000840)={0x20, 0x15, 0x98, "84bc90b51cd0cb9125a6e7ba8536532aa552e796d0962066dee140dc9098b68befdd1267ba1f3eb407d3414e363973a826bb58e6efa2124724fd15d9afcd8dc6ac33773032108a40e2ffca9b1cf6684a798b15c0a0e93352db7d01990f426d36904824d54395d1de1f39c411d16c7ff82b9709c5fa556c756296de1b1eb5c358f36ef7a5742a2f18151234126a99b7bdf4488555dff410dd"}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0x1}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0x7f}, &(0x7f0000000500)={0x20, 0x80, 0x1c, {0x7, 0x8a, 0x2, 0x3, 0x5, 0x1, 0x80, 0xa455, 0x400, 0xb6, 0xffff, 0x8}}, &(0x7f0000000640)={0x20, 0x85, 0x4, 0xffffffc0}, &(0x7f0000000900)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000940)={0x20, 0x87, 0x2, 0x3bf3}, &(0x7f0000000980)={0x20, 0x89, 0x2}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000080000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0}, 0x90) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) writev(r5, &(0x7f0000000680)=[{&(0x7f00000002c0)="2614", 0xf00}], 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000000)={0x1, 0x40, 0xeb, 0x101, 0x1a, "3e450f5726b4412a3327c17f177f7b72f19409"}) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x9, 0x28011, r0, 0x0) 5.060170459s ago: executing program 1 (id=855): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xf, 0x11012, r2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents64(r3, &(0x7f0000002f40)=""/4098, 0x1002) 5.038122891s ago: executing program 1 (id=857): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000107d1ece71000000000001090224000100000000090400000203000000092100000001220b00090581030000000000"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000240)={0x0, 0x22, 0x10, {[@main=@item_012={0x2, 0x0, 0x0, '\x00<'}, @main=@item_4={0x3, 0x0, 0xa, "225aa4c5"}, @main=@item_012={0x2, 0x0, 0xc, "a914"}, @global=@item_4={0x3, 0x1, 0x9, "1634bf9e"}]}}, 0x0}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x80, 0x1, 0x0, '\x00', 0x0, r1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000400)='block_split\x00', r3}, 0x10) r4 = getpid() process_vm_readv(r4, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0}) write(r5, &(0x7f0000000000)="fa", 0xfffffdef) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r6, &(0x7f0000000000), 0x248800) r7 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_getroute={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x2}}, 0x1c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='ext4_unlink_enter\x00', r6}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000008"], 0x0) 4.534187172s ago: executing program 2 (id=861): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={0x0, 0x0, 0x26}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000280), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r0, 0x0) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000200)='./file0\x00', 0x10814, &(0x7f0000001600)=ANY=[@ANYBLOB='umask=00000000000000000000000,flush,nodots,dots,gid=', @ANYRESHEX, @ANYBLOB="00006b746769643d0092", @ANYRESHEX=0x0, @ANYBLOB="1500bba7d41fabba4332de3ca642acf6f8de847e3f21783608008708a887d30aaf0a14b0691d48445fe3b4d1ddde1b81337b2c3b5f88535d7f6fa931b84783704494cebe49ca9f6269b05edde0246c360d0566b4056f0f02ccab035d3d0a5cde0b31bd424949fe23c0a0a25691738006c5c6acdf101fecdb4f79abdfb95c6afaea03dd5903b5240565f31504c207a9a2aa6c8108fb973081e90412a3c6cfa3b2513693727fad9acd8108acb8b90fab033c9dac0dc3e5a61c513e7b5edc5d76320f0e54045ea2b7b8fb1f78d3d346e26ee5ed6926cea1ffe0a14885c0fbb126973ee4"], 0x5, 0x1fa, &(0x7f0000000500)="$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") ioctl$FS_IOC_SETFLAGS(r0, 0xc0189436, &(0x7f0000000140)) 4.374929485s ago: executing program 2 (id=869): syz_mount_image$exfat(&(0x7f0000006c00), &(0x7f0000001b40)='./file0\x00', 0x208008de, &(0x7f0000001b80)=ANY=[@ANYBLOB='utf8,errors=continue,namecase=1,utf8,gid=', @ANYRESHEX=0x0, @ANYBLOB=',umask=00000000000000000000077,umask=00000000000000000005676,uid=', @ANYRESHEX=0x0, @ANYBLOB=',gid=', @ANYRESHEX=0x0, @ANYBLOB="2c000ca8768ddddc191573cbd33da79641936c9de64e264f331d1b50f4c4f54702f51dcbddb39c14c19175f07a639bb65ea608fbf6fadf5d8da30ace1281bed3e61b084526e10dbe921dad84fbcabc5791f52445cb76b789ed377aa0cd17309c4df04d525e8af05fb246b33836d90656cd2daa991b916be40df3bd607ae5672e1bb90730d0ff03000000000000c5f0cf287ea707c1fc66165f74e7d8a78c37a4b86907cec1df06da3611f616718d88770a2520ceb039bc06ef4d1183"], 0x1, 0x1503, &(0x7f0000000580)="$eJzs3AuYj1XXMPC99t43Y5L+TXIY9trr5p8G2yRJDgk5JEmSJDklJCZJEhJDTklDEnKcJIchJIdpTBrn8yHnpMkjTZKE5BT2d+np/Tzv0/O+fe9X3+e93lm/69qXvdz/tf7rnjXX3Pf9v66Z73uOqtu8Xq2mRCT+FPj7P8lCiBghxDAhxA1CiEAIUTGuYtyV4/kUJP+5N2F/rUfTrnUH7Fri+eduPP/cjeefu/H8czeef+7G88/deP65G8+fsdxs+5yiN/LKvYs//8/N+Pr/P0hOuclfbyx3c6//QgrPP3fj+eduPP/cjeefu/H8czee//98Nf+TYzz/3I3nz1hudq0/f+Z1bde1/v5jjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMZY7nPNXaSHEv+2vdV+MMcYYY4wxxhj76/i817oDxhhjjDHGGGOM/b8HQgoltAhEHpFXxIh8IlZcJ/KL60UBcYOIiBtFnLhJFBQ3i0KisCgiiop4UUwUF0agsIJEKEqIkiIqbhGlxK0iQZQWZURZ4UQ5kShuE+XF7aKCuENUFHeKSuIuUVlUEVVFNXG3qC7uETVETVFL3Ctqizqirqgn7hP1xf2igXhANBQPikbiIdFYPCyaiEdEU/GoaCYeE83F46KFeEK0FK1Ea9FGtP2/yn9Z9BWviH6iv0gWA8RA8aoYJAaLIWKoGCZeE8PF62KEeEOkiJFilHhTjBZviTHibTFWjBPjxTtigpgoJonJYoqYKlLFu2KaeE9MF++LGWKmmCVmizQxR8wVH4h5Yr5YID4UC8VHYpFYLJaIpSJdfCwyxDKRKT4Ry8WnIkusECvFKrFarBFrxTqxXmwQG8UmsVlsEVvFNrFdfCZ2iJ1il9gt9oi9Yp/4XOwXX4gD4kuRLb76L+af/af8XiBAgAQJGjTkgTwQAzEQC7GQH/JDASgAEYhAHMRBQSgIhaAQFIEiEA/xUByKAwICAUEJKAFRiEIpKAUJkABloAw4cJAIiVAebocKUAEqQkWoBJWgMlSBKlANqkF1qA41oAbUglpQG2pDXagL98F9cD80gAbQEBpCI2gEjaExNIEm0BSaQjNoBs2hObSAFtASWkJraA1toS20g3bQHtpDR+gInaATdIbOkARJ0BW6QjfoBt2hO/SAHtATekIv6A294WV4GV6BV6A/1JYDYCAMhEEwCIbAUBgKr8FweB1ehzcgBUbCKHgT3oS3YAycgbEwDsbDeKguJ8IkmAwkp0IqpMI0mAbTYTrMgJkwE2ZDGsyBuTAX5sF8mA8fwkL4CD6CxbAYlkI6pEMGLINMyITlcBayYAWshFWwGtbAalgH62EdbIRNsBG2wBbYBtvgM/gMdsJO2A27YS/shc/hc/gCvoAUyIZsOAgH4RAcgsNwGHIgB47AETgKR+EYHIPjcBxOwEk4BSfhNJyGM3AWzsE5uAAX4CK8GP9ts72lN6QIeYWWWuaReWSMjJGxMlbml/llAVlARmRExsk4WVAWlIVkIVlEFpHxMl4Wl8UlSpQkQ1lClogRQshSspRMkAmyjCwjnXQyUSbK8rK8rCAryIryTllJ3iUryyqyg6smq8nqsqOrIWvKWrKWrC3ryLqynqwn68v6soFsIBvKhrKRbCQby4dlEzkAhsCj8spkmsuR0EKOgpaylWwt28i34EnZTo6B9rKD7CifluNgLHSW7VySfFZ2lZOgm3xeToYXZA85FXrKl2Qv2Vv2kS/LvrK96yf7yxkwQA6Us2GQHCyHyKFyHtSRVyZWV74hU+RIOUq+KZfCW3KMfFuOlePkePmOnCAnyklyspwip8pU+a6cJt+T0+X7coacKWfJ2TJNzpFz5QdynpwvF8gP5UL5kVwkF8slcqlMlx/LDLlMZspP5HL5qcySK+RKuUqulmvkWrlOrpcb5Ea5SW6WW+RWuU1ul5/JHXKn3CV3yz1yr9wnP5f75RfygPxSZsuv5EH5N3lIfi0Py29kjvxWHpHfyaPye3lM/iCPyx/lCXlSnpI/ydPyZ3lGnpXn5Hl5Qf4iL8pL8rL0UihQUimlVaDyqLwqRuVTseo6lV9drwqoG1RE3aji1E2qoLpZFVKFVRFVVMWrYqq4MgqVVaRCVUKVVFF1iyqlblUJqrQqo8oqp8qpRHWbKq9uVxXUHaqiulNVUnepyqqKqqqqqbtVdXWPqqFqqlrqXlVb1VF1VT11n6qv7lcN1AOqoXpQNVIPqcbqYdVEPaKaqkdVM/WYaq4eVy3UE6qlaqVaqzaqrXpStVNPqfaqg+qonlad1DOqs+qiktSzqqt6TnVTz6vu6gXVQ72oeqqXVC/VW/VRl9Rl5VU/1V8lqwFqoHpVDVKD1RA1VA1Tr6nh6nU1Qr2hUtRINUq9qUart9QY9bYaq8ap8eodNUFNVJPUZDVFTVWp6l01Tb2npqv31Qw1U81Ss1WamqOG/FZpwT/lD/jtqvuP+e/9i/wRv777NrVdfaZ2qJ1ql9qt9qi9ap/ap/ar/eqAOqCyVbY6qA6qQ+qQOqwOqxyVo46oI+qoOqqOqWPquDquTqiT6rz6SZ1WP6sz6qw6q86rC+qCuvjb10Bo0FIrrXWg8+i8Okbn07H6Op1fX68L6Bt0RN+o4/RNuqC+WRfShXURXVTH62K6uDYatdWkQ11Cl9RRfYsupW/VCbq0LqPLaqfL6UR925/O/6P+2uq2up1up9vr9rqj7qg76U66s+6sk3SS7qq76m66m+6uu+seuofuqXvqXrqX7qP76L66r+6n++lknawH6lf1ID1YD9FD9TD9mh6uh+sReoRO0Sl6lB6lR+vReoweo8fqsXq8Hq8n6Al6kp6kp+gpOlWn6ml6mp6up+sZeoaepWfpNJ2m5+q5ep6epxfoBXqhXqgX6UV6iV6i03W6ztAZOlNn6uV6uc7SK/QKvUqv0mv0Gr1Or9Mb9Aa9SW/SW/QWnaW36+16h96hd+ldeo/eo/fpfXq/3q8P6AM6W2frg/qgPqQP6cP6sM7ROfqIPqKP6qP6mD424Lg+rk/oE/qUPqVP69P6jD6jz+lz+oK+oC/qi/qyvnzlti+QgQx0oIM8QZ4gJogJYoPYIH+QPygQFAgiQSSIC+KCgsHNQaGgcFAkKBrEB8WC4oEJMLABBWFQIigZRINbglLBrUFCUDooE5QNXFAuSAxuC8oHtwcVgjuCisGdQaXgrqByUCWoGlQL7g6qB/cENYKaQa3g3qB2UCeoG9QL7gvqB/cHDYIHgobBg0Gj4KGgcfBw0CR4JGgaPBo0Cx4LmgePBy2CJ4KWQaugddAmaPuX1vf+TOGnXD/T3ySbAWagedUMMoPNEDPUDDOvmeHmdTPCvGFSzEgzyrxpRpu3zBjzthlrxpnx5h0zwUw0k8xkM8VMNanmXTPNvGemm/fNDDPTzDKzTZqZY+aaD8w8M98sMB+aheYjs8gsNkvMUpNuPjYZZpnJNJ+Y5eZTk2VWmJVmlVlt1py/UQiz3mwwG80ms9lsMVvNNrPdfGZ2mJ1ml9lt9pi9Zp/53Ow3X5gD5kuTbb4yB83fzCHztTlsvjE55ltzxHxnjprvzTHzgzlufjQnzElzyvxkTpufzRlz1pwz580F84u5aC6Zy8Zfubm/cnlHjRrzYB6MwRiMxVjMj/mxABbACEYwDuOwIBbEQlgIi2ARjMd4LI7F8QpCwhJYAqMYxVJYChMwActgGXToMBETsTyWxwpYAStiRayElbAyVsaqWBXvxrvxHrwHa2JNvBfvxTpYB+thPayP9bEBNsCG2BAbYSNsjI2xCTbBptgUm2EzbI7NsQW2wJbYEltja2yLbbEdtsP22B47YkfshJ2wM3bGJEzCrtgVu2E37I7dsQf2wJ7YE3thL+yDfbAv9sV+2A+TMRkH4kAchINwCA7BYTgMh+NwHIEjMAVTcBSOwtE4GsfgGByL43A8voMTcCJOwsk4BadiKqbiNJyG03E6zsAZOAtnYRqm4Vyci/NwHi7ABbgQF+IiXIRLcAmmYzpmYAZmYiYux+WYhVm4ElfialyNa3Etrsf1uBE34mbcjFtxK27H7bgDd+Au3IV7cA/uw324H/fjATyA2ZiNB/EgHsJDeBgPYw7m4BE8gkfxKB7DY3gcj+MJPIGn8BSextN4Bs/gOTyHF/AXvIiX8DJ6jLFSxNrrbH57vS1gb7AxNp/9x7iILWrjbTFb3BpbyBb+dzFaaxNsaVvGlrXOlrOJ9rbfxZVtFVvVVrN32+r2Hlvjd3F9e79tYB+wDe2Dtp6977c4769xI/uQbWwft03sE7apbWWb2Ta2uX3ctrBP2Ja2lW1t29hO9hnb2XaxSfZZ29U+97s4wy6z6+0Gu9FusvvtF/acPW+P2u/tBfuL7Wf722H2NTvcvm5H2Ddsih35u3i8fcdOsBPtJDvZTrFTfxfPsrNtmp1j59oP7Dw7/3dxuv3YLrSZdpFdbJfYpb/GV3rKtJ/Y5fZTm2VX2JV2lV1t19i1dt3/7nWV3WK32m12n/3c7rA77S672+6xe3+Nr5zHAfulzbZf2SP2O3vIfm0P22M2x377a3zl/I7ZH+xx+6M9YU/aU/Yne9r+bM/Ys7+e/5Vz/8lespett4KAJCnSFFAeyksxlI9i6TrKT9dTAbqBInQjxdFNVJBupkJUmIpQUYqnYlScDCFZIgqpBJWkKN1CpehWSqDSVIbKkqNylEi3UXm6nSrQHVSR7qRKdBdVpipUlarR3VSd7qEaVJNq0b1Um+pQXapH91F9up8a0APUkB6kRvQQNaaHqQk9Qk3pUWpGj1Fzepxa0BPUklpRa2pDbelJakdPUXvqQB3paepEz1Bn6kJJ9Cx1peeoGz1P3ekF6kEvUk96iXpRb+pDL1NfeoX6UX9KpgE0kF6lQTSYhtBQGkav0XB6nUbQG5RCI2kUvUmj6S0aQ2/TWBpH4+kdmkATaRJNpik0lVLpXTqb3qXIlXu9GTSTZtFsSqM5NJc+oHk0nxbQh7SQPqJFtJiW0FJKp48pg5ZRJn1Cy+lTyqIVtJJW0WpaQ2tpHa2nDbSRNtFm2kJbaRttp89oB+2kXbSb9tBe2kef0376gg7Ql5RNX9FB+hsdoq/pMH1DOfQtHaHv6Ch9T8foBzpOP9IJOkmn6Cc6TT/TGTpL5+g8XaBf6CJdosvkSYQQylCFOgzCPGHeMCbMF8aG14X5w+vDAuENYSS8MYwLbwoLhjeHhcLCYZGwaBgfFguLhybE0IYUhmGJsGQYDW8JS4W3hglh6bBMWDZ0YbkwMbwtLB/eHlYI7wgrhneGlcK7wsphlfDxB6uFd4fVw3vCGmHNsFZ4b1g7rBPWDeuF94X1w/vDBuEDYcPwwbBC+FDYOHw4bBI+EjYNHw2bhY+FzcPHwxbhE2HLsFXYOmwTtg2fDNuFT4Xtww5hx/DpsFP4TNg57BImhc+GXcPn/vB4cjggHBi+Gr4aev+AWhJdGk2PfhzNiC6LZkY/iS6PfhrNiq6Iroyuiq6Oromuja6Lro9uiG6Mbopujm6Jbo1ui3pfL69w4KRTTrvA5XF5XYzL52LddS6/u94VcDe4iLvRxbmbXEF3syvkCrsirqiLd8VccWccOuvIha6EK+mi7hZXyt3qElxpV8aVdc6Vc4mujWvr2rp27inX3nVwHd3T7mn3jHvGdXFd3LOuq3vOdXPPu+7uBdfDvehedC+5Xq636+Nedn3dK66f6++SXbIb6Aa6QW6QG+KGuGFumBvuhrsRboRLcSlulBvlRrvRbowb48a6sW68G+8muAlukpvkprgpLtWlumlumpvuprsZboab5Wa5NJfm5rq5bp6b5xa4BW5hwkK3yC1yS9wSl+7SXYbLcJku0y13y12Wy3Ir3Uq32q12a91at96tdxvdRrfZbXZb3Va33W13O9wOt8vtcnvcHrfP7XP73X53wB1w2S7bHXQH3SF3yB1237gc96074r5zR9337pj7wR13P7oT7qQ75X5yp93P7ow768658+6C+8VddJfcZeddauTdyLTIe5HpkfcjMyIzI7MisyNpkTmRuZEPIvMi8yMLIh9GFkY+iiyKLI4siSyNpEc+jmRElkUyI59Elkc+jWRFVkRWRlZFVkfWRLwvtiP0JXxJH/W3+FL+Vp/gS/syvqx3vpxP9Lf58v52X8Hf4Sv6O30lf5ev7Kv4qv4J39K38q19G9/WP+nb+ad8e9/Bd/RP+07+Gd/Zd/FJ/lnf1T/nu/nnfXf/gu/hX/Q9/Uu+l+/t+/iXfV//iu/n+/tkP8AP9K/6QX6wH+KH+mH+NT/cv+5H+Dd8ih/pR/k3/Wj/lh/j3/Zj/Tg/3r/jJ/iJfpKf7Kf4qT7Vv+un+ff8dP++n+Fn+ll+tk/zc/xc/4Gf5+f7Bf5Dv9B/5Bf5xX6JX+rT/cc+wy/zmf4Tv9x/6rP8Cr/Sr/Kr/Rq/1q/z6/0Gv9Fv8pv9Fr/Vb/Pb/Wd+h9/pd/ndfo/f6/f5z/1+/4U/4L/02f4rf9D/zR/yX/vD/huf47/1R/x3/qj/3h/zP/jj/kd/wp/0p/xP/rT/2Z/xZ/05f95f8L/4i/6Sv8y/s8YYY4wx9n9E/cHxAf/i/+Rv64qBQojrdxbN+eeamwv9fT9YxneKCCGe7d/z0X9btWsnJyf/9tosJYKSi4UQkav5ecTVeIXoKJ4RSaKDKP8v+xsse1+gP6gfvVOI2KuVfxUr/rn+7f9B/SefHp9RKTwX95/UXyxEQsmrOfnE1fhq/Qr/Qf3C7f6g/3xfpwrR/h9y8our8dX6ieIp8ZxI+nevZIwxxhhjjDHG/m6wrNr9j56frzyfx+urOXnF1fiPns8ZY4wxxhhjjDF27b3Qu0+XJ5OSOnTnzZ/Y1Pjv0QZvePOXba71TybGGGOMMcbYX+3qTf+17oQxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGMu9/n/8ObFrfY6MMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcbYtfa/AgAA///mJjhh") truncate(&(0x7f0000000000)='./file1\x00', 0x2ba4) openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x40200, 0xf3) pipe2$9p(0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = inotify_init() inotify_add_watch(r2, &(0x7f0000000000)='.\x00', 0x84000176) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000001c0)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={0x0}, 0x10) syz_usb_connect(0x0, 0x10b, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000b24b4a10e60407007501000005010902240001010000000904000002ccb8280009050b02000000000009058a02"], 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0x0, 0x8, 0x1}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) getsockname$packet(r3, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000040)=0x35) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r1, r6, 0x25, 0x11, @void}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r5}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x8, 0xc0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000080)='kfree\x00'}, 0x10) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='attr/keycreate\x00') socket$igmp(0x2, 0x3, 0x2) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$nfc_llcp(r7, 0x6, 0x7, 0x0, 0x2000e881) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f00000004c0), 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r8}, 0x10) 2.33552045s ago: executing program 2 (id=902): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x800, &(0x7f00000006c0)=ANY=[@ANYBLOB='dmask=00000000000000000000001,uid=', @ANYRES8, @ANYBLOB="2c696f636861727365743d63703934392c696f636861727365743d63703836322c7569643ddc654d", @ANYRESHEX, @ANYBLOB=',errors=remount-ro,gid=', @ANYRESHEX, @ANYBLOB="2c6572726f72733d72656d6f756e742d726f2c646973636172642c6572726f72733d636f6e74696e75652c009efc2fc3867ba7d6f0e030d94b28925c72f8443e739b65b5369d38d1fe638b7512f0c3bfdea6b14c64eb19be8d0eb1798ea448da65e107b884ef2b96a0a7c30961de8e809f78fa06ade5556980fa06147dd48a0119b94779243f215814e98c67459c6a1e5975945120653ec9d9f6359e4f75327ad5b1b11b1c3662be6f26f9eb8ed96665db514896577f90765e435972bc8c81b69db20d023955c6c8516150112f89120a87ddd270c807eefa2cf6f98b0bc7c836d3538e767115aa0765ac4c0054"], 0x5, 0x1510, &(0x7f00000037c0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mount$overlay(0x20000000, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir, 0x5c}], [], 0x2e}) 2.254684447s ago: executing program 2 (id=904): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES16], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000280)={'tunl0\x00', &(0x7f0000000200)=@ethtool_eeprom={0x19}}) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000580)={0x0, 0x1, 0x0, &(0x7f0000000100)=""/47, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x0, 0x0, &(0x7f0000000500)=""/69, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000016c0)) ioctl$VHOST_SET_LOG_BASE(r1, 0x4008af00, &(0x7f00000000c0)) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000180)) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000040)=0x1) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f00000001c0)={0x1}) syz_usb_control_io$hid(r0, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0xf, {[@local=@item_4={0x3, 0x2, 0x0, 'WNib'}, @local=@item_4={0x3, 0x2, 0x0, "f85edaca"}, @main=@item_4={0x3, 0x0, 0xb}]}}, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r3 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGCOLLECTIONINDEX(r3, 0xc018480d, &(0x7f0000000000)) 909.542326ms ago: executing program 4 (id=932): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0xc0010006}]}) 818.642183ms ago: executing program 4 (id=934): timer_create(0x2, 0x0, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{}, {0x0, 0x3938700}}, 0x0) timer_gettime(0x0, &(0x7f0000000080)) 763.516478ms ago: executing program 4 (id=938): connect$inet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0xecf86c37d53048fb) write$binfmt_elf64(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="7f454c4600000000000000000000000003003e000000000000000000000000004000e7ffffffffffffff000000000000000000000000380001"], 0x78) close(r0) execve(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) 763.013578ms ago: executing program 4 (id=939): syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x8000, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000c80)='kmem_cache_free\x00', r3}, 0x10) r4 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) symlinkat(&(0x7f0000000040)='./file0\x00', r4, &(0x7f0000000080)='./file0\x00') 698.228003ms ago: executing program 3 (id=940): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f0000000240)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80}}, {@stripe={'stripe', 0x3d, 0x4000}}, {@errors_remount}, {@max_batch_time={'max_batch_time', 0x3d, 0x4}}]}, 0x3, 0x43a, &(0x7f0000000340)="$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") r0 = open(&(0x7f0000000140)='./file1\x00', 0x141042, 0x0) fallocate(r0, 0x8, 0x0, 0x10000) 691.788643ms ago: executing program 4 (id=941): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x3, 0x0, &(0x7f00000000c0)='syzkaller\x00'}, 0x90) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000140)={0x0, 0x0}) r3 = syz_open_procfs(r2, &(0x7f0000000600)='fd/4\x00') ioctl$EXT4_IOC_GROUP_EXTEND(r3, 0x4030582a, &(0x7f0000000240)) 593.710342ms ago: executing program 4 (id=942): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = dup2(r0, r0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r7, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r7, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c0000001000370400"/20, @ANYRES32=r8, @ANYBLOB="0b120500000000001c0012800b00010069703667726500000c00028008000100", @ANYRES32=r8, @ANYBLOB], 0x3c}}, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000500)={@local, @random="f368656e065b", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, @time_exceeded={0x4, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @dev}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x90) 557.064085ms ago: executing program 0 (id=944): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffea4, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r2 = gettid() rt_sigtimedwait(&(0x7f0000000200)={[0x7fffffff]}, 0x0, 0x0, 0x8) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x5, 0x4, @tid=r2}, &(0x7f0000000300)) timer_settime(0x0, 0x3, &(0x7f000004a000)={{0x0, 0x1}, {0x7, 0xe4c}}, 0x0) 524.807787ms ago: executing program 3 (id=945): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000007c0)=ANY=[@ANYBLOB="78130000100013070000000000000000fe8000000000000000000000000000bb00000000000000000000ffff0a01010100000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ac1414bb000000000000000000000000000000003c0000002001000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000000000000000000000000000000000000000a00000000000000000000003401110000000000000000000000000000000000ac1414bb000000000000000000000000e0000002000000000000000000000000000000000000000000000000000000002b040000043500000a000a00ffffffff000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000001fe80000000000000000000000000001c3c0300000000000002000200ac1414bb000000000000000000000000ff02000000000000000000000000000100000000000000000000000000000000640101000000000000000000000000006c0300000335000002000200ac1414aa000000000000000000000000fc01000000000000000000000000000000000000000000000000000000000000fc00000000000000000000000000000050000000073500000a000a00c40002"], 0x1378}}, 0x0) 451.612743ms ago: executing program 0 (id=946): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000a80), r1) sendmsg$IEEE802154_SCAN_REQ(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)={0x1c, r2, 0x1d, 0x0, 0x0, {}, [@IEEE802154_ATTR_SCAN_TYPE={0x5}]}, 0x1c}}, 0x0) 428.406495ms ago: executing program 1 (id=947): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000001600000000000000ae330018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='tlb_flush\x00', r1}, 0x10) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) mremap(&(0x7f0000097000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f0000bff000/0x400000)=nil) 182.445895ms ago: executing program 0 (id=948): open(&(0x7f0000000100)='./file0\x00', 0x80ff, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='system.posix_acl_access\x00', &(0x7f00000003c0), 0x24, 0x0) listxattr(&(0x7f0000001e80)='./file0\x00', 0x0, 0x2) 182.209125ms ago: executing program 3 (id=949): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0xc0010006}]}) 171.436786ms ago: executing program 1 (id=950): connect$inet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0xecf86c37d53048fb) write$binfmt_elf64(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="7f454c4600000000000000000000000003003e000000000000000000000000004000e7ffffffffffffff000000000000000000000000380001"], 0x78) close(r0) execve(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) 156.114097ms ago: executing program 0 (id=951): timer_create(0x2, 0x0, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{}, {0x0, 0x3938700}}, 0x0) timer_gettime(0x0, &(0x7f0000000080)) 142.151128ms ago: executing program 1 (id=952): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x3, 0x0, &(0x7f00000000c0)='syzkaller\x00'}, 0x90) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000140)={0x0, 0x0}) r3 = syz_open_procfs(r2, &(0x7f0000000600)='fd/4\x00') ioctl$EXT4_IOC_GROUP_EXTEND(r3, 0x4030582a, &(0x7f0000000240)) 122.51213ms ago: executing program 0 (id=953): lchown(0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0x7, &(0x7f0000000240)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) futex(&(0x7f00000004c0), 0x5, 0x0, 0x0, &(0x7f0000000080), 0x9bfffffe) 49.241585ms ago: executing program 0 (id=954): socket$nl_route(0x10, 0x3, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001500100000f4ffffffffffff17000000ff00000000000000"], 0x1c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0xffffffffffffffc2, &(0x7f0000000280)=0x666) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x0, 0xfff, 0x7}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000200)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="3c020000", @ANYRES16=r5, @ANYBLOB="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", @ANYRES32=r6], 0x23c}}, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x89f1, &(0x7f0000000900)={'ip6tnl0\x00', @random='\f\x00\x00 \x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 38.471237ms ago: executing program 3 (id=955): r0 = io_uring_setup(0x669, &(0x7f00000002c0)) setresuid(0xffffffffffffffff, 0xffffffffffffffff, 0xee01) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) setresuid(0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 24.453138ms ago: executing program 3 (id=956): signalfd(0xffffffffffffffff, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0xce) 11.321039ms ago: executing program 3 (id=957): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000107d1ece71000000000001090224000100000000090400000203000000092100000001220b00090581030000000000"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000240)={0x0, 0x22, 0x10, {[@main=@item_012={0x2, 0x0, 0x0, '\x00<'}, @main=@item_4={0x3, 0x0, 0xa, "225aa4c5"}, @main=@item_012={0x2, 0x0, 0xc, "a914"}, @global=@item_4={0x3, 0x1, 0x9, "1634bf9e"}]}}, 0x0}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x80, 0x1, 0x0, '\x00', 0x0, r1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000400)='block_split\x00', r3}, 0x10) r4 = getpid() process_vm_readv(r4, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0}) write(r5, &(0x7f0000000000)="fa", 0xfffffdef) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r6, &(0x7f0000000000), 0x248800) r7 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_getroute={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x2}}, 0x1c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='ext4_unlink_enter\x00', r6}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000008"], 0x0) 0s ago: executing program 1 (id=958): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x16, 0x3, &(0x7f0000000000)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0x92}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) kernel console output (not intermixed with test programs): ffffffff8458b38f RBX: 0000000000000100 RCX: ffff8881003a0000 [ 73.398210][ C0] RDX: 0000000000000101 RSI: 0000000000000100 RDI: 0000000000000000 [ 73.406031][ C0] RBP: ffffc90000007bd0 R08: ffffffff8458b28b R09: ffffed10259262cb [ 73.413843][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff88812c931500 [ 73.421645][ C0] R13: ffff88812c9317f0 R14: dffffc0000000000 R15: 1ffff110259262a2 [ 73.429459][ C0] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 73.438212][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 73.444649][ C0] CR2: 0000000000000000 CR3: 00000001217c5000 CR4: 00000000003506b0 [ 73.452618][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 73.460420][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 73.468228][ C0] Call Trace: [ 73.471334][ C0] [ 73.474037][ C0] ? show_regs+0x58/0x60 [ 73.478116][ C0] ? __warn+0x160/0x3d0 [ 73.482087][ C0] ? inet_sock_destruct+0x63f/0x750 [ 73.487152][ C0] ? report_bug+0x4d5/0x7d0 [ 73.491459][ C0] ? inet_sock_destruct+0x63f/0x750 [ 73.496521][ C0] ? handle_bug+0x41/0x70 [ 73.500663][ C0] ? exc_invalid_op+0x1b/0x50 [ 73.505193][ C0] ? asm_exc_invalid_op+0x1b/0x20 [ 73.510039][ C0] ? inet_sock_destruct+0x53b/0x750 [ 73.515103][ C0] ? inet_sock_destruct+0x63f/0x750 [ 73.520111][ C0] ? inet_sock_destruct+0x63f/0x750 [ 73.525169][ C0] ? inet_sock_destruct+0x63f/0x750 [ 73.530176][ C0] ? sk_destruct+0xd0/0xd0 [ 73.534446][ C0] inet6_sock_destruct+0x1d/0x20 [ 73.539196][ C0] ? ipv6_mod_enabled+0x30/0x30 [ 73.543914][ C0] __sk_destruct+0x56/0x5c0 [ 73.548223][ C0] ? sk_destruct+0xd0/0xd0 [ 73.552502][ C0] rcu_do_batch+0x518/0xb70 [ 73.556825][ C0] ? rcu_core+0xf10/0xf10 [ 73.561021][ C0] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 73.566626][ C0] ? swake_up_one_online+0x6b/0x110 [ 73.571701][ C0] ? rcu_report_qs_rnp+0x37e/0x390 [ 73.576717][ C0] rcu_core+0x4ee/0xf10 [ 73.580738][ C0] ? rcu_cpu_kthread_park+0x90/0x90 [ 73.585739][ C0] ? sched_clock+0x9/0x10 [ 73.589927][ C0] ? sched_clock_cpu+0x71/0x2b0 [ 73.594589][ C0] rcu_core_si+0x9/0x10 [ 73.598611][ C0] __do_softirq+0x1d8/0x661 [ 73.602920][ C0] ? irqtime_account_irq+0xdc/0x260 [ 73.607995][ C0] __irq_exit_rcu+0x50/0xf0 [ 73.612295][ C0] irq_exit_rcu+0x9/0x10 [ 73.616411][ C0] sysvec_apic_timer_interrupt+0x9a/0xc0 [ 73.621842][ C0] [ 73.624738][ C0] [ 73.627559][ C0] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 73.633332][ C0] RIP: 0010:delay_tsc+0x74/0xe0 [ 73.638061][ C0] Code: 00 e8 60 f8 56 fc 65 8b 05 71 08 0a 7b 85 c0 74 2f f3 90 bf 01 00 00 00 e8 a9 f6 56 fc e8 54 34 02 00 41 39 c7 75 20 0f 01 f9 <66> 90 48 89 d3 48 c1 e3 20 48 09 c3 4c 29 e3 49 39 de 77 be eb 23 [ 73.657499][ C0] RSP: 0018:ffffc90000137b80 EFLAGS: 00000246 [ 73.663383][ C0] RAX: 00000000a8299ddb RBX: 00000000000014db RCX: 0000000000000000 [ 73.671170][ C0] RDX: 0000000000000026 RSI: ffffffff85c9e060 RDI: ffffffff85c9e020 [ 73.679017][ C0] RBP: ffffc90000137ba0 R08: ffffffff8275ab0a R09: fffff52000026f79 [ 73.686821][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: 00000026a8298822 [ 73.694628][ C0] R13: 0000000000002a1e R14: 0000000000002af9 R15: 0000000000000000 [ 73.702530][ C0] ? _find_next_bit+0x2a/0x130 [ 73.707141][ C0] __const_udelay+0x5e/0x70 [ 73.711527][ C0] __udelay+0x10/0x20 [ 73.715299][ C0] try_check_zero+0x42c/0x450 [ 73.719839][ C0] process_srcu+0x1e4/0x1360 [ 73.724236][ C0] ? __kasan_check_write+0x14/0x20 [ 73.729211][ C0] ? _raw_spin_lock_irq+0xa5/0x1b0 [ 73.734131][ C0] ? _raw_spin_lock_irqsave+0x210/0x210 [ 73.739553][ C0] ? __schedule+0xcaf/0x1550 [ 73.743936][ C0] ? pwq_dec_nr_in_flight+0x191/0x3d0 [ 73.749176][ C0] process_one_work+0x73d/0xcb0 [ 73.753835][ C0] worker_thread+0xa60/0x1260 [ 73.758398][ C0] kthread+0x26d/0x300 [ 73.762248][ C0] ? worker_clr_flags+0x1a0/0x1a0 [ 73.767285][ C0] ? kthread_blkcg+0xd0/0xd0 [ 73.771660][ C0] ret_from_fork+0x1f/0x30 [ 73.775952][ C0] [ 73.778779][ C0] ---[ end trace 0000000000000000 ]--- [ 73.785734][ T295] lua 0003:1E7D:2C2E.0007: unknown main item tag 0x0 [ 73.792267][ T295] lua 0003:1E7D:2C2E.0007: unknown main item tag 0x0 [ 73.800634][ T295] lua 0003:1E7D:2C2E.0007: unknown main item tag 0x0 [ 73.807177][ T295] lua 0003:1E7D:2C2E.0007: unknown main item tag 0x0 [ 73.813682][ T295] lua 0003:1E7D:2C2E.0007: unknown main item tag 0x0 [ 73.821615][ T295] lua 0003:1E7D:2C2E.0007: unknown main item tag 0x0 [ 73.828153][ T295] lua 0003:1E7D:2C2E.0007: unknown main item tag 0x0 [ 73.835732][ T295] lua 0003:1E7D:2C2E.0007: hidraw0: USB HID v0.00 Device [HID 1e7d:2c2e] on usb-dummy_hcd.0-1/input0 [ 73.859326][ T1188] IPv6: addrconf: prefix option has invalid lifetime [ 74.023272][ T1197] overlayfs: conflicting lowerdir path [ 74.450348][ T295] usb 1-1: USB disconnect, device number 3 [ 74.601395][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 74.601412][ T28] audit: type=1326 audit(1720489387.792:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1209 comm="syz.3.274" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdbb0975bd9 code=0x0 [ 74.687254][ T1211] process 'syz.1.273' launched './file0' with NULL argv: empty string added [ 74.724930][ T28] audit: type=1400 audit(1720489387.899:290): avc: denied { execute_no_trans } for pid=1206 comm="syz.1.273" path="/9/file0" dev="tmpfs" ino=62 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 75.014579][ T736] EXT4-fs (loop4): unmounting filesystem. [ 75.633306][ T1226] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.717308][ T1231] IPv6: addrconf: prefix option has invalid lifetime [ 75.805745][ T1240] loop3: detected capacity change from 0 to 256 [ 75.851270][ T1240] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 75.866900][ T1240] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe622a5da, utbl_chksum : 0xe619d30d) [ 76.209898][ T1245] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1245 comm=syz.4.285 [ 76.224456][ T1245] netlink: 12 bytes leftover after parsing attributes in process `syz.4.285'. [ 76.231210][ T28] audit: type=1400 audit(1720489389.541:291): avc: denied { write } for pid=1239 comm="syz.3.284" name="/" dev="loop3" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 76.255678][ T28] audit: type=1400 audit(1720489389.551:292): avc: denied { add_name } for pid=1239 comm="syz.3.284" name="memory.events" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 76.448740][ T28] audit: type=1400 audit(1720489389.551:293): avc: denied { associate } for pid=1239 comm="syz.3.284" name="memory.events" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 76.497445][ T1250] loop1: detected capacity change from 0 to 256 [ 76.525734][ T28] audit: type=1400 audit(1720489389.551:294): avc: denied { append } for pid=1239 comm="syz.3.284" path="/9/file0/memory.events" dev="loop3" ino=1048630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 76.549846][ T28] audit: type=1400 audit(1720489389.551:295): avc: denied { map } for pid=1239 comm="syz.3.284" path="/9/file0/memory.events" dev="loop3" ino=1048630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 76.581917][ T1255] loop3: detected capacity change from 0 to 128 [ 76.644411][ T19] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 76.695885][ T1265] IPv6: addrconf: prefix option has invalid lifetime [ 76.809165][ T28] audit: type=1326 audit(1720489390.163:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1271 comm="syz.2.295" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa364975bd9 code=0x0 [ 76.887118][ T315] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 76.938537][ T1275] KVM: debugfs: duplicate directory 1275-4 [ 76.980291][ T19] usb 1-1: New USB device found, idVendor=14cd, idProduct=6116, bcdDevice= 1.60 [ 76.989775][ T19] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.002115][ T19] usb 1-1: config 0 descriptor?? [ 77.036818][ T19] ums-cypress 1-1:0.0: USB Mass Storage device detected [ 77.119996][ T315] usb 4-1: Using ep0 maxpacket: 16 [ 77.268801][ T315] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 77.280151][ T315] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 77.290905][ T315] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 77.300541][ T315] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.323712][ T315] usb 4-1: config 0 descriptor?? [ 77.804182][ T315] lua 0003:1E7D:2C2E.0008: unknown main item tag 0x0 [ 77.814417][ T315] lua 0003:1E7D:2C2E.0008: unknown main item tag 0x0 [ 77.821555][ T315] lua 0003:1E7D:2C2E.0008: unknown main item tag 0x0 [ 77.828426][ T315] lua 0003:1E7D:2C2E.0008: unknown main item tag 0x0 [ 77.835479][ T315] lua 0003:1E7D:2C2E.0008: unknown main item tag 0x0 [ 77.842344][ T315] lua 0003:1E7D:2C2E.0008: unknown main item tag 0x0 [ 77.849378][ T315] lua 0003:1E7D:2C2E.0008: unknown main item tag 0x0 [ 77.901263][ T315] lua 0003:1E7D:2C2E.0008: hidraw0: USB HID v0.00 Device [HID 1e7d:2c2e] on usb-dummy_hcd.3-1/input0 [ 78.012379][ T315] usb 4-1: USB disconnect, device number 4 [ 78.288579][ T28] audit: type=1400 audit(1720489391.751:297): avc: denied { getattr } for pid=1305 comm="syz.4.304" name="/" dev="incremental-fs" ino=157 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 78.879980][ T1310] loop4: detected capacity change from 0 to 256 [ 78.988549][ T311] usb 1-1: USB disconnect, device number 4 [ 79.054287][ T28] audit: type=1326 audit(1720489392.577:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1318 comm="syz.2.308" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa364975bd9 code=0x0 [ 79.057769][ T1317] loop3: detected capacity change from 0 to 512 [ 79.094203][ T1317] ext4: Unknown parameter 'nouser_xattr' [ 79.128360][ T1317] loop3: detected capacity change from 0 to 256 [ 79.159261][ T1317] exfat: Unknown parameter '0xffffffffffffffff01777777777777777777777' [ 79.561038][ T1326] KVM: debugfs: duplicate directory 1326-4 [ 80.089357][ T1354] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.260784][ T315] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 80.389750][ T1360] netlink: 12 bytes leftover after parsing attributes in process `syz.2.323'. [ 80.448717][ T1369] loop4: detected capacity change from 0 to 512 [ 80.448718][ T1367] netlink: 96 bytes leftover after parsing attributes in process `syz.2.326'. [ 80.448978][ T1369] ext4: Unknown parameter 'nouser_xattr' [ 80.506238][ T1369] loop4: detected capacity change from 0 to 256 [ 80.512724][ T1369] exfat: Unknown parameter '0xffffffffffffffff01777777777777777777777' [ 80.531615][ T315] usb 2-1: Using ep0 maxpacket: 16 [ 80.633067][ T28] audit: type=1400 audit(1720489394.261:299): avc: denied { sqpoll } for pid=1373 comm="syz.2.329" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 80.652195][ T315] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 80.663942][ T315] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 80.674144][ T315] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 80.980155][ T28] audit: type=1400 audit(1720489394.337:300): avc: denied { getopt } for pid=1373 comm="syz.2.329" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 81.002801][ T1378] loop2: detected capacity change from 0 to 256 [ 81.008994][ T315] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.026171][ T315] usb 2-1: config 0 descriptor?? [ 81.049652][ T1383] tap0: tun_chr_ioctl cmd 1074025677 [ 81.055564][ T1383] tap0: linktype set to 804 [ 81.272835][ T1389] loop0: detected capacity change from 0 to 512 [ 81.315302][ T1389] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 81.426000][ T311] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 81.492362][ T1389] EXT4-fs error (device loop0): ext4_orphan_get:1396: inode #15: comm syz.0.333: casefold flag without casefold feature [ 81.507546][ T1389] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: inode #12: comm syz.0.333: missing EA_INODE flag [ 81.520301][ T1389] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.333: error while reading EA inode 12 err=-117 [ 81.534858][ T1389] EXT4-fs (loop0): 1 orphan inode deleted [ 81.540521][ T1389] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 81.597348][ T1393] netlink: 12 bytes leftover after parsing attributes in process `syz.4.334'. [ 81.614181][ T315] lua 0003:1E7D:2C2E.0009: unknown main item tag 0x0 [ 81.632797][ T315] lua 0003:1E7D:2C2E.0009: unknown main item tag 0x0 [ 81.644053][ T315] lua 0003:1E7D:2C2E.0009: unknown main item tag 0x0 [ 81.650949][ T315] lua 0003:1E7D:2C2E.0009: unknown main item tag 0x0 [ 81.657560][ T315] lua 0003:1E7D:2C2E.0009: unknown main item tag 0x0 [ 81.666431][ T315] lua 0003:1E7D:2C2E.0009: unknown main item tag 0x0 [ 81.673288][ T315] lua 0003:1E7D:2C2E.0009: unknown main item tag 0x0 [ 81.683630][ T315] lua 0003:1E7D:2C2E.0009: hidraw0: USB HID v0.00 Device [HID 1e7d:2c2e] on usb-dummy_hcd.1-1/input0 [ 81.715923][ T28] audit: type=1400 audit(1720489395.431:301): avc: denied { connect } for pid=1401 comm="syz.2.338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 81.735326][ T28] audit: type=1400 audit(1720489395.431:302): avc: denied { write } for pid=1401 comm="syz.2.338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 81.855270][ T311] usb 4-1: device descriptor read/64, error -71 [ 81.867855][ T1405] loop4: detected capacity change from 0 to 256 [ 82.081051][ T733] EXT4-fs (loop0): unmounting filesystem. [ 82.102715][ T28] audit: type=1400 audit(1720489395.753:303): avc: denied { unmount } for pid=733 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 82.122597][ T28] audit: type=1400 audit(1720489395.764:304): avc: denied { unlink } for pid=733 comm="syz-executor" name="bus" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 82.126832][ T24] usb 2-1: USB disconnect, device number 3 [ 82.247171][ T311] usb 4-1: device descriptor read/64, error -71 [ 82.791520][ T1415] tap0: tun_chr_ioctl cmd 1074025677 [ 82.801987][ T1415] tap0: linktype set to 804 [ 82.813190][ T1419] loop2: detected capacity change from 0 to 512 [ 82.819894][ T1419] ext4: Unknown parameter 'nouser_xattr' [ 82.829012][ T1419] loop2: detected capacity change from 0 to 256 [ 82.835396][ T1419] exfat: Unknown parameter '0xffffffffffffffff01777777777777777777777' [ 82.880561][ T1421] syz_tun: refused to change device tx_queue_len [ 82.886716][ T1421] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 83.005885][ T1430] netlink: 96 bytes leftover after parsing attributes in process `syz.1.349'. [ 83.029109][ T311] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 83.334883][ T1441] loop1: detected capacity change from 0 to 128 [ 83.341346][ T24] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 83.349306][ T28] audit: type=1400 audit(1720489397.180:305): avc: denied { mounton } for pid=1440 comm="syz.1.352" path="/19/file0/file0/bus" dev="loop1" ino=1048653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=file permissive=1 [ 83.374556][ T311] usb 4-1: device descriptor read/64, error -71 [ 83.393362][ T1044] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 0, start 00007361) [ 83.404734][ T1044] FAT-fs (loop1): Filesystem has been set read-only [ 83.413276][ T1044] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 0, start 00007361) [ 83.494941][ T1443] loop4: detected capacity change from 0 to 512 [ 83.512656][ T1443] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 83.650083][ T1443] EXT4-fs error (device loop4): ext4_orphan_get:1396: inode #15: comm syz.4.351: casefold flag without casefold feature [ 83.663726][ T1443] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: inode #12: comm syz.4.351: missing EA_INODE flag [ 83.677644][ T1443] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.351: error while reading EA inode 12 err=-117 [ 83.690867][ T1443] EXT4-fs (loop4): 1 orphan inode deleted [ 83.696508][ T1443] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 83.840987][ T311] usb 4-1: device descriptor read/64, error -71 [ 83.847281][ T24] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 26 [ 83.961120][ T24] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 83.981478][ T311] usb usb4-port1: attempt power cycle [ 84.008586][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 84.050993][ T1459] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.161915][ T1453] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.178396][ T736] EXT4-fs (loop4): unmounting filesystem. [ 84.184402][ T1453] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.196009][ T1453] device bridge_slave_0 entered promiscuous mode [ 84.206985][ T1453] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.218636][ T1453] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.230416][ T1453] device bridge_slave_1 entered promiscuous mode [ 84.312685][ T24] usb 1-1: SerialNumber: syz [ 84.339145][ T1461] syz_tun: refused to change device tx_queue_len [ 84.345442][ T1461] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 84.406659][ T1453] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.413536][ T1453] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.420631][ T1453] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.427410][ T1453] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.449634][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 84.458042][ T6] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.465552][ T6] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.476527][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 84.484573][ T19] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.491463][ T19] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.507101][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 84.515137][ T6] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.522035][ T6] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.529776][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 84.537684][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 84.546308][ T794] device bridge_slave_1 left promiscuous mode [ 84.552364][ T794] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.559732][ T794] device bridge_slave_0 left promiscuous mode [ 84.565741][ T794] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.573674][ T794] device veth1_macvtap left promiscuous mode [ 84.579695][ T794] device veth0_vlan left promiscuous mode [ 84.641496][ T19] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 84.656453][ T1437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 84.667914][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 84.675836][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 84.683923][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 84.688031][ T311] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 84.693352][ T1453] device veth0_vlan entered promiscuous mode [ 84.712598][ T1453] device veth1_macvtap entered promiscuous mode [ 84.720292][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 84.728912][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 84.740556][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 84.758713][ T1437] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 84.772987][ T1437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 84.781135][ T1437] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 84.789667][ T1437] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 84.827346][ T28] audit: type=1400 audit(1720489398.768:306): avc: denied { append } for pid=1473 comm="syz.2.363" name="001" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 84.850545][ T1474] loop2: detected capacity change from 0 to 1024 [ 84.858045][ T1474] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 84.867340][ T1474] EXT4-fs (loop2): orphan cleanup on readonly fs [ 84.874519][ T19] usb 5-1: Using ep0 maxpacket: 16 [ 84.879847][ T1474] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.363: bg 0: block 10: padding at end of block bitmap is not set [ 84.894833][ T1474] Quota error (device loop2): write_blk: dquota write failed [ 84.902055][ T1474] Quota error (device loop2): find_free_dqentry: Can't write quota data block 5 [ 84.912115][ T1474] EXT4-fs error (device loop2): ext4_free_blocks:6208: comm syz.2.363: Freeing blocks not in datazone - block = 0, count = 4096 [ 84.925665][ T1474] EXT4-fs (loop2): 1 truncate cleaned up [ 84.940360][ T1474] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 84.954189][ T311] usb 4-1: device descriptor read/8, error -71 [ 84.961867][ T24] cdc_ether 1-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.0-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 84.986596][ T19] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 84.997510][ T19] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 85.007510][ T19] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 85.016554][ T19] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.033663][ T19] usb 5-1: config 0 descriptor?? [ 85.055774][ T1474] syz.2.363 (1474) used greatest stack depth: 19784 bytes left [ 85.064837][ T922] EXT4-fs (loop2): unmounting filesystem. [ 85.095581][ T1486] loop2: detected capacity change from 0 to 256 [ 85.102615][ T1486] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 85.131830][ T1486] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 85.146790][ T1435] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.155387][ T1435] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.189224][ T1435] loop0: detected capacity change from 0 to 512 [ 85.226257][ T1435] EXT4-fs error (device loop0): __ext4_fill_super:5386: inode #2: comm syz.0.350: casefold flag without casefold feature [ 85.239412][ T1435] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 85.271298][ T1435] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 85.279788][ T311] usb 4-1: device descriptor read/8, error -71 [ 85.299529][ T1505] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 85.310137][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 85.310152][ T28] audit: type=1400 audit(1720489399.283:309): avc: denied { mount } for pid=1432 comm="syz.0.350" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 85.372704][ T1505] exFAT-fs (loop1): unable to read boot sector [ 85.447638][ T1505] exFAT-fs (loop1): failed to read boot sector [ 85.494334][ T1505] exFAT-fs (loop1): failed to recognize exfat type [ 85.573514][ T311] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 85.625222][ T19] lua 0003:1E7D:2C2E.000A: unknown main item tag 0x0 [ 85.643241][ T19] lua 0003:1E7D:2C2E.000A: unknown main item tag 0x0 [ 85.650033][ T19] lua 0003:1E7D:2C2E.000A: unknown main item tag 0x0 [ 85.656594][ T19] lua 0003:1E7D:2C2E.000A: unknown main item tag 0x0 [ 85.664877][ T19] lua 0003:1E7D:2C2E.000A: unknown main item tag 0x0 [ 85.664903][ T19] lua 0003:1E7D:2C2E.000A: unknown main item tag 0x0 [ 85.664924][ T19] lua 0003:1E7D:2C2E.000A: unknown main item tag 0x0 [ 85.687676][ T19] lua 0003:1E7D:2C2E.000A: hidraw0: USB HID v0.00 Device [HID 1e7d:2c2e] on usb-dummy_hcd.4-1/input0 [ 85.713371][ T19] usb 5-1: USB disconnect, device number 6 [ 85.778530][ T311] usb 4-1: device descriptor read/8, error -71 [ 85.943196][ T1515] loop2: detected capacity change from 0 to 128 [ 86.013217][ T922] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 0, start 00007361) [ 86.024850][ T922] FAT-fs (loop2): Filesystem has been set read-only [ 86.031548][ T922] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 0, start 00007361) [ 86.049019][ T311] usb 4-1: device descriptor read/8, error -71 [ 86.161303][ T311] usb usb4-port1: unable to enumerate USB device [ 86.194336][ T1517] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.201543][ T1517] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.209050][ T1517] device bridge_slave_0 entered promiscuous mode [ 86.220007][ T1517] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.228403][ T1517] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.237730][ T1517] device bridge_slave_1 entered promiscuous mode [ 86.298521][ T1517] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.305475][ T1517] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.312593][ T1517] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.319354][ T1517] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.352455][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 86.360487][ T311] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.368012][ T311] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.389413][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 86.397744][ T311] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.404630][ T311] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.406504][ T1527] loop4: detected capacity change from 0 to 1024 [ 86.411945][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 86.426401][ T311] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.433287][ T311] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.440943][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 86.447911][ T1527] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 86.457687][ T1527] EXT4-fs (loop4): orphan cleanup on readonly fs [ 86.465553][ T1437] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 86.466173][ T1527] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.377: bg 0: block 10: padding at end of block bitmap is not set [ 86.488682][ T1527] Quota error (device loop4): write_blk: dquota write failed [ 86.496106][ T1527] Quota error (device loop4): find_free_dqentry: Can't write quota data block 5 [ 86.507794][ T1527] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 86.517798][ T1527] EXT4-fs error (device loop4): ext4_free_blocks:6208: comm syz.4.377: Freeing blocks not in datazone - block = 0, count = 4096 [ 86.532483][ T1527] EXT4-fs (loop4): 1 truncate cleaned up [ 86.538460][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 86.538692][ T1527] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 86.560411][ T1437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 86.569842][ T1517] device veth0_vlan entered promiscuous mode [ 86.576947][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 86.592045][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 86.632576][ T1517] device veth1_macvtap entered promiscuous mode [ 86.642072][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 86.665453][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 86.689280][ T1437] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 86.709605][ T1527] syz.4.377 (1527) used greatest stack depth: 18824 bytes left [ 86.724668][ T736] EXT4-fs (loop4): unmounting filesystem. [ 86.778792][ T1545] loop2: detected capacity change from 0 to 512 [ 86.786634][ T28] audit: type=1400 audit(1720489400.871:310): avc: denied { mounton } for pid=1544 comm="syz.2.384" path="/1/bus" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 86.793971][ T1547] netlink: 'syz.4.385': attribute type 11 has an invalid length. [ 86.817979][ T1545] EXT4-fs: Ignoring removed i_version option [ 86.827223][ T1545] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 86.850121][ T1545] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 86.876459][ T1545] EXT4-fs (loop2): 1 truncate cleaned up [ 86.883643][ T1545] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 86.893753][ T1545] EXT4-fs (loop2): unmounting filesystem. [ 86.925773][ T6] usb 1-1: USB disconnect, device number 5 [ 87.316537][ T28] audit: type=1400 audit(1720489401.428:311): avc: denied { unmount } for pid=1517 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 87.330083][ T6] cdc_ether 1-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.0-1, CDC Ethernet Device [ 87.441499][ T733] EXT4-fs (loop0): unmounting filesystem. [ 87.492128][ T1565] loop2: detected capacity change from 0 to 1024 [ 87.508009][ T1565] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 87.543120][ T1565] EXT4-fs (loop2): orphan cleanup on readonly fs [ 87.553737][ T1565] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.392: bg 0: block 10: padding at end of block bitmap is not set [ 87.573581][ T1575] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 87.577528][ T1565] Quota error (device loop2): write_blk: dquota write failed [ 87.584172][ T1575] exFAT-fs (loop0): unable to read boot sector [ 87.596090][ T1575] exFAT-fs (loop0): failed to read boot sector [ 87.602117][ T1575] exFAT-fs (loop0): failed to recognize exfat type [ 87.620000][ T1565] Quota error (device loop2): find_free_dqentry: Can't write quota data block 5 [ 87.629557][ T1565] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 87.639357][ T1565] EXT4-fs error (device loop2): ext4_free_blocks:6208: comm syz.2.392: Freeing blocks not in datazone - block = 0, count = 4096 [ 87.697091][ T1565] EXT4-fs (loop2): 1 truncate cleaned up [ 87.714040][ T1565] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 87.728680][ T10] device bridge_slave_1 left promiscuous mode [ 87.761106][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.788036][ T10] device bridge_slave_0 left promiscuous mode [ 87.811165][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.838269][ T10] device veth1_macvtap left promiscuous mode [ 87.854813][ T10] device veth0_vlan left promiscuous mode [ 87.924237][ T1598] loop1: detected capacity change from 0 to 4096 [ 87.951220][ T1598] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 87.972232][ T28] audit: type=1400 audit(1720489402.147:312): avc: denied { execute } for pid=1597 comm="syz.1.399" path="/16/file0/bus" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 88.009916][ T1453] EXT4-fs (loop1): unmounting filesystem. [ 88.047883][ T1604] loop1: detected capacity change from 0 to 512 [ 88.054448][ T1604] EXT4-fs: Ignoring removed i_version option [ 88.060800][ T1604] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 88.072691][ T1604] EXT4-fs (loop1): 1 truncate cleaned up [ 88.078285][ T1604] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 88.089249][ T1604] EXT4-fs (loop1): unmounting filesystem. [ 88.123165][ T1517] EXT4-fs (loop2): unmounting filesystem. [ 88.319725][ T1626] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.628187][ T1628] loop1: detected capacity change from 0 to 4096 [ 88.631325][ T1630] loop4: detected capacity change from 0 to 1024 [ 88.649573][ T1630] EXT4-fs: Ignoring removed orlov option [ 88.658293][ T1628] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 88.672005][ T1630] EXT4-fs (loop4): Test dummy encryption mode enabled [ 88.695891][ T1630] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 88.740918][ T1453] EXT4-fs (loop1): unmounting filesystem. [ 88.794224][ T1638] loop1: detected capacity change from 0 to 512 [ 88.810736][ T1638] EXT4-fs: Ignoring removed i_version option [ 88.836474][ T1638] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 88.860164][ T1638] EXT4-fs (loop1): 1 truncate cleaned up [ 88.869619][ T1638] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 88.889272][ T1638] EXT4-fs (loop1): unmounting filesystem. [ 89.017909][ T736] EXT4-fs (loop4): unmounting filesystem. [ 89.149716][ T1662] loop0: detected capacity change from 0 to 256 [ 89.268314][ T1668] loop4: detected capacity change from 0 to 512 [ 89.278319][ T1668] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 89.363908][ T1662] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 89.396318][ T1668] EXT4-fs error (device loop4): ext4_orphan_get:1396: inode #15: comm syz.4.422: casefold flag without casefold feature [ 89.409811][ T1668] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: inode #12: comm syz.4.422: missing EA_INODE flag [ 89.423634][ T1668] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.422: error while reading EA inode 12 err=-117 [ 89.437917][ T1668] EXT4-fs (loop4): 1 orphan inode deleted [ 89.443600][ T1668] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 89.664182][ T1681] netlink: 'syz.0.429': attribute type 1 has an invalid length. [ 89.671783][ T1681] netlink: 4 bytes leftover after parsing attributes in process `syz.0.429'. [ 89.919801][ T736] EXT4-fs (loop4): unmounting filesystem. [ 89.940769][ T1698] loop4: detected capacity change from 0 to 512 [ 89.947246][ T1698] EXT4-fs: Ignoring removed i_version option [ 89.953094][ T1698] ext2: Unknown parameter 'noacl' [ 89.973583][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 89.973610][ T28] audit: type=1400 audit(1720489404.293:323): avc: denied { map } for pid=1697 comm="syz.4.434" path="/52/bus" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 90.140216][ T1712] netlink: 'syz.0.441': attribute type 1 has an invalid length. [ 90.147924][ T1712] netlink: 4 bytes leftover after parsing attributes in process `syz.0.441'. [ 90.217913][ T1715] loop1: detected capacity change from 0 to 256 [ 90.234191][ T856] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 90.325343][ T1715] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 90.449149][ T1719] loop0: detected capacity change from 0 to 256 [ 90.578639][ T856] usb 5-1: Using ep0 maxpacket: 8 [ 90.714818][ T856] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 90.740350][ T856] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 90.761422][ T856] usb 5-1: New USB device found, idVendor=056a, idProduct=4135, bcdDevice= 0.cc [ 90.784777][ T856] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.811324][ T856] usb 5-1: config 0 descriptor?? [ 90.847661][ T28] audit: type=1400 audit(1720489405.227:324): avc: denied { create } for pid=1723 comm="syz.1.445" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 90.889980][ T28] audit: type=1400 audit(1720489405.259:325): avc: denied { read } for pid=1723 comm="syz.1.445" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 90.953441][ T1722] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.960367][ T1722] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.969469][ T1722] device bridge_slave_0 entered promiscuous mode [ 90.978960][ T1722] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.986167][ T1722] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.993754][ T1722] device bridge_slave_1 entered promiscuous mode [ 91.151366][ T28] audit: type=1400 audit(1720489405.559:326): avc: denied { bind } for pid=1740 comm="syz.0.451" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 91.172793][ T1741] tipc: Failed to remove unknown binding: 66,1,1/0:3664688098/3664688100 [ 91.182010][ T1743] netlink: 'syz.2.452': attribute type 1 has an invalid length. [ 91.182859][ T1741] tipc: Failed to remove unknown binding: 66,1,1/0:3664688098/3664688100 [ 91.189525][ T1743] netlink: 4 bytes leftover after parsing attributes in process `syz.2.452'. [ 91.198320][ T28] audit: type=1400 audit(1720489405.559:327): avc: denied { setopt } for pid=1740 comm="syz.0.451" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 91.231088][ T1741] tipc: Failed to remove unknown binding: 66,1,1/0:3664688098/3664688100 [ 91.238330][ T1745] loop2: detected capacity change from 0 to 1024 [ 91.265026][ T1745] EXT4-fs error (device loop2): __ext4_fill_super:5386: inode #2: comm syz.2.453: casefold flag without casefold feature [ 91.288664][ T1745] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 91.302468][ T1745] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 91.308710][ T856] wacom 0003:056A:4135.000B: Unknown device_type for 'HID 056a:4135'. Ignoring. [ 91.322020][ T1517] EXT4-fs (loop2): unmounting filesystem. [ 91.373867][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 91.381741][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 91.400769][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 91.409325][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 91.426099][ T315] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.433022][ T315] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.434762][ T311] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 91.441519][ T28] audit: type=1400 audit(1720489405.784:328): avc: denied { read } for pid=1755 comm="syz.2.456" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 91.492454][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 91.495574][ T856] usb 5-1: USB disconnect, device number 7 [ 91.508727][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 91.527755][ T315] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.534767][ T315] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.613253][ T1763] loop0: detected capacity change from 0 to 256 [ 91.658791][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 91.667521][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 91.686431][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 91.698021][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 91.706914][ T311] usb 2-1: Using ep0 maxpacket: 16 [ 91.712565][ T794] device bridge_slave_1 left promiscuous mode [ 91.721644][ T794] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.734828][ T794] device bridge_slave_0 left promiscuous mode [ 91.744008][ T794] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.762044][ T794] device veth1_macvtap left promiscuous mode [ 91.769130][ T794] device veth0_vlan left promiscuous mode [ 91.827836][ T311] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 91.847566][ T311] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 91.865806][ T311] usb 2-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 91.884617][ T311] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.895841][ T311] usb 2-1: config 0 descriptor?? [ 91.935678][ T1722] device veth0_vlan entered promiscuous mode [ 91.942872][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 91.951397][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 91.958976][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 91.975937][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 91.985586][ T1722] device veth1_macvtap entered promiscuous mode [ 91.997792][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 92.011233][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 92.829232][ T28] audit: type=1400 audit(1720489406.707:329): avc: denied { map } for pid=1766 comm="syz.3.444" path="socket:[23374]" dev="sockfs" ino=23374 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 92.855168][ T28] audit: type=1400 audit(1720489406.718:330): avc: denied { read } for pid=1766 comm="syz.3.444" path="socket:[23374]" dev="sockfs" ino=23374 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 92.922211][ T1787] loop2: detected capacity change from 0 to 1024 [ 92.940358][ T1787] EXT4-fs error (device loop2): __ext4_fill_super:5386: inode #2: comm syz.2.466: casefold flag without casefold feature [ 92.956631][ T1787] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 92.970521][ T1787] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 92.984407][ T6] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 92.985895][ T1792] usb usb8: usbfs: process 1792 (syz.3.464) did not claim interface 0 before use [ 93.106180][ T1737] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 93.177444][ T1737] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 93.238958][ T1517] EXT4-fs (loop2): unmounting filesystem. [ 93.252485][ T311] hid-generic 0003:0158:0100.000C: unknown main item tag 0x1 [ 93.265110][ T1797] loop0: detected capacity change from 0 to 512 [ 93.272971][ T311] hid-generic 0003:0158:0100.000C: unexpected long global item [ 93.280835][ T311] hid-generic: probe of 0003:0158:0100.000C failed with error -22 [ 93.283902][ T1797] EXT4-fs error (device loop0): ext4_ext_check_inode:520: inode #15: comm syz.0.469: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 24833, max 4(4), depth 0(0) [ 93.306353][ T1797] EXT4-fs error (device loop0): ext4_orphan_get:1401: comm syz.0.469: couldn't read orphan inode 15 (err -117) [ 93.309042][ T28] audit: type=1400 audit(1720489407.877:331): avc: denied { mount } for pid=1800 comm="syz.2.470" name="/" dev="configfs" ino=12522 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 93.318480][ T1797] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 93.349613][ T1797] ext4 filesystem being mounted at /76/file2 supports timestamps until 2038 (0x7fffffff) [ 93.373623][ T28] audit: type=1400 audit(1720489407.909:332): avc: denied { mounton } for pid=1800 comm="syz.2.470" path="/21/file0" dev="configfs" ino=12522 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 93.376567][ T1803] loop2: detected capacity change from 0 to 512 [ 93.403143][ T1803] EXT4-fs (loop2): Encoding requested by superblock is unknown [ 93.444433][ T315] usb 2-1: USB disconnect, device number 4 [ 93.450193][ T6] usb 5-1: Using ep0 maxpacket: 16 [ 93.622322][ T1811] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=1811 comm=syz.0.469 [ 93.860018][ T6] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 93.870871][ T6] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 93.882097][ T6] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 93.891545][ T6] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.900350][ T6] usb 5-1: config 0 descriptor?? [ 94.114971][ T1818] overlayfs: missing 'lowerdir' [ 94.195442][ T733] EXT4-fs (loop0): unmounting filesystem. [ 94.497336][ T1824] loop1: detected capacity change from 0 to 256 [ 94.518769][ T1824] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 94.588016][ T6] cp2112 0003:10C4:EA90.000D: unknown main item tag 0x0 [ 94.594915][ T6] cp2112 0003:10C4:EA90.000D: unknown main item tag 0x0 [ 94.620736][ T6] cp2112 0003:10C4:EA90.000D: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 94.672940][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 94.672958][ T28] audit: type=1400 audit(1720489409.336:336): avc: denied { create } for pid=1828 comm="syz.1.478" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 94.716164][ T1831] loop3: detected capacity change from 0 to 1024 [ 94.755320][ T1831] EXT4-fs error (device loop3): __ext4_fill_super:5386: inode #2: comm syz.3.479: casefold flag without casefold feature [ 94.773296][ T28] audit: type=1400 audit(1720489409.379:337): avc: denied { write } for pid=1828 comm="syz.1.478" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 94.782232][ T6] cp2112 0003:10C4:EA90.000D: error requesting version [ 94.810872][ T1831] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 94.826367][ T1831] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 94.832011][ T6] cp2112: probe of 0003:10C4:EA90.000D failed with error -32 [ 94.867848][ T1722] EXT4-fs (loop3): unmounting filesystem. [ 94.897074][ T315] usb 5-1: USB disconnect, device number 8 [ 94.926679][ T1846] loop3: detected capacity change from 0 to 512 [ 94.958006][ T1846] EXT4-fs (loop3): Encoding requested by superblock is unknown [ 95.155447][ T1851] usb usb8: usbfs: process 1851 (syz.3.485) did not claim interface 0 before use [ 95.623318][ T1853] loop2: detected capacity change from 0 to 512 [ 95.645588][ T1853] EXT4-fs error (device loop2): ext4_ext_check_inode:520: inode #15: comm syz.2.486: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 24833, max 4(4), depth 0(0) [ 95.689149][ T1844] loop1: detected capacity change from 0 to 40427 [ 95.699299][ T1853] EXT4-fs error (device loop2): ext4_orphan_get:1401: comm syz.2.486: couldn't read orphan inode 15 (err -117) [ 95.711010][ T1844] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 95.718862][ T1853] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 95.727164][ T1844] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 95.743002][ T1853] ext4 filesystem being mounted at /26/file2 supports timestamps until 2038 (0x7fffffff) [ 95.753764][ T1844] F2FS-fs (loop1): invalid crc value [ 95.764702][ T1844] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 39874397669) [ 95.779237][ T1844] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 96.028181][ T1864] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=1864 comm=syz.2.486 [ 96.844881][ T1517] EXT4-fs (loop2): unmounting filesystem. [ 96.903138][ T1844] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 96.926468][ T1844] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 96.969296][ T28] audit: type=1400 audit(1720489411.793:338): avc: denied { setattr } for pid=1843 comm="syz.1.484" name="file0" dev="loop1" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 96.991008][ T1882] loop2: detected capacity change from 0 to 1024 [ 97.067728][ T1889] overlayfs: missing 'lowerdir' [ 97.201740][ T1882] EXT4-fs error (device loop2): __ext4_fill_super:5386: inode #2: comm syz.2.494: casefold flag without casefold feature [ 97.341698][ T1882] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 97.355449][ T1882] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 97.392577][ T1517] EXT4-fs (loop2): unmounting filesystem. [ 97.542661][ T1900] loop2: detected capacity change from 0 to 256 [ 97.550008][ T1900] exfat: Deprecated parameter 'namecase' [ 97.556295][ T1900] exfat: Deprecated parameter 'utf8' [ 97.587788][ T312] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 97.711771][ T1900] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfc6d8, utbl_chksum : 0xe619d30d) [ 97.879108][ T28] audit: type=1400 audit(1720489412.780:339): avc: denied { relabelfrom } for pid=1901 comm="syz.4.501" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 97.901792][ T28] audit: type=1400 audit(1720489412.790:340): avc: denied { relabelto } for pid=1901 comm="syz.4.501" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 97.933964][ T312] usb 4-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x7F, skipping [ 97.956350][ T312] usb 4-1: config 1 interface 1 altsetting 1 has an invalid endpoint with address 0xEE, skipping [ 98.016947][ T24] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 98.356481][ T312] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 98.365415][ T312] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.397942][ T312] usb 4-1: Product: syz [ 98.403971][ T1918] loop2: detected capacity change from 0 to 1024 [ 98.404352][ T312] usb 4-1: Manufacturer: syz [ 98.416998][ T312] usb 4-1: SerialNumber: syz [ 98.428748][ T1918] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 98.439938][ T1918] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 98.473086][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 98.479701][ T1517] EXT4-fs (loop2): unmounting filesystem. [ 98.484912][ T1925] loop0: detected capacity change from 0 to 1024 [ 98.502696][ T1925] EXT4-fs error (device loop0): __ext4_fill_super:5386: inode #2: comm syz.0.510: casefold flag without casefold feature [ 98.515665][ T1925] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 98.525686][ T1925] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 98.545190][ T733] EXT4-fs (loop0): unmounting filesystem. [ 98.585151][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 98.596780][ T24] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 98.769940][ T24] usb 2-1: New USB device found, idVendor=104d, idProduct=3006, bcdDevice=a0.cd [ 98.786294][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.794566][ T24] usb 2-1: Product: syz [ 98.798548][ T24] usb 2-1: Manufacturer: syz [ 98.803652][ T24] usb 2-1: SerialNumber: syz [ 98.824913][ T24] usb 2-1: config 0 descriptor?? [ 98.845878][ T6] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 98.874545][ T24] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 98.882250][ T24] ftdi_sio ttyUSB0: unknown device type: 0xa0cd [ 99.068277][ T295] usb 2-1: USB disconnect, device number 5 [ 99.074691][ T6] usb 1-1: Using ep0 maxpacket: 16 [ 99.080088][ T295] ftdi_sio 2-1:0.0: device disconnected [ 99.098155][ T315] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 99.172331][ T1953] loop2: detected capacity change from 0 to 512 [ 99.185949][ T1953] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e01c, mo2=0002] [ 99.191444][ T6] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 99.193895][ T1953] System zones: 1-12 [ 99.209805][ T6] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 99.219537][ T6] usb 1-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 99.219595][ T1953] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.520: bg 0: block 361: padding at end of block bitmap is not set [ 99.228373][ T6] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.232853][ T6] usb 1-1: config 0 descriptor?? [ 99.255560][ T1953] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6168: Corrupt filesystem [ 99.267361][ T1953] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #13: comm syz.2.520: attempt to clear invalid blocks 33619980 len 1 [ 99.280910][ T1953] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.520: invalid indirect mapped block 1819239214 (level 0) [ 99.294974][ T1953] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.520: invalid indirect mapped block 1819239214 (level 1) [ 99.309017][ T1953] EXT4-fs (loop2): 1 orphan inode deleted [ 99.314601][ T1953] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 99.329921][ T28] audit: type=1400 audit(1720489414.325:341): avc: denied { mounton } for pid=1949 comm="syz.2.520" path="/proc/92/task" dev="proc" ino=24688 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 99.442481][ T315] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 99.453224][ T315] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 99.462803][ T315] usb 5-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.00 [ 99.471602][ T315] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.480112][ T315] usb 5-1: config 0 descriptor?? [ 99.574516][ T312] cdc_ncm 4-1:1.0: bind() failure [ 99.588454][ T1960] loop1: detected capacity change from 0 to 1024 [ 99.591877][ T312] cdc_ncm: probe of 4-1:1.1 failed with error -71 [ 99.611402][ T1960] EXT4-fs error (device loop1): __ext4_fill_super:5386: inode #2: comm syz.1.523: casefold flag without casefold feature [ 99.620158][ T312] cdc_mbim: probe of 4-1:1.1 failed with error -71 [ 99.624239][ T1960] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 99.631530][ T312] usb 4-1: USB disconnect, device number 9 [ 99.646992][ T1960] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 99.668259][ T1453] EXT4-fs (loop1): unmounting filesystem. [ 99.723014][ T1938] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.733141][ T1938] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.736955][ T28] audit: type=1400 audit(1720489414.765:342): avc: denied { bind } for pid=1967 comm="syz.1.525" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 99.763926][ T6] hid-generic 0003:0158:0100.000E: unknown main item tag 0x1 [ 99.772483][ T6] hid-generic 0003:0158:0100.000E: unexpected long global item [ 99.780950][ T6] hid-generic: probe of 0003:0158:0100.000E failed with error -22 [ 99.833225][ T1517] EXT4-fs (loop2): unmounting filesystem. [ 99.848107][ T28] audit: type=1400 audit(1720489414.883:343): avc: denied { mounton } for pid=1972 comm="syz.2.527" path="/proc/96/cgroup" dev="proc" ino=24730 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 99.920274][ T315] logitech-djreceiver 0003:046D:C71B.000F: unknown main item tag 0x0 [ 99.928212][ T315] logitech-djreceiver 0003:046D:C71B.000F: unknown main item tag 0x0 [ 99.936080][ T315] logitech-djreceiver 0003:046D:C71B.000F: unknown main item tag 0x0 [ 99.944029][ T315] logitech-djreceiver 0003:046D:C71B.000F: unknown main item tag 0x0 [ 99.951921][ T315] logitech-djreceiver 0003:046D:C71B.000F: unknown main item tag 0x0 [ 99.965926][ T315] logitech-djreceiver 0003:046D:C71B.000F: unknown main item tag 0x0 [ 99.974252][ T315] logitech-djreceiver 0003:046D:C71B.000F: unknown main item tag 0x0 [ 100.067552][ T313] usb 1-1: USB disconnect, device number 6 [ 100.109103][ T315] usb 5-1: USB disconnect, device number 9 [ 100.168828][ T311] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 100.626156][ T311] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 100.637289][ T311] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 100.647025][ T311] usb 2-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 100.655973][ T311] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.664577][ T311] usb 2-1: config 0 descriptor?? [ 101.224963][ T315] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 101.244610][ T311] hid-led 0003:27B8:01ED.0010: item fetching failed at offset 3/5 [ 101.254928][ T311] hid-led: probe of 0003:27B8:01ED.0010 failed with error -22 [ 101.262561][ T2001] loop3: detected capacity change from 0 to 1024 [ 101.279548][ T2001] EXT4-fs error (device loop3): __ext4_fill_super:5386: inode #2: comm syz.3.535: casefold flag without casefold feature [ 101.292413][ T2001] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 101.302334][ T2001] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 101.317811][ T1722] EXT4-fs (loop3): unmounting filesystem. [ 101.446434][ T315] usb 3-1: Using ep0 maxpacket: 32 [ 101.558262][ T315] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 101.576364][ T315] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 101.598709][ T312] usb 2-1: USB disconnect, device number 6 [ 101.683640][ T2023] loop0: detected capacity change from 0 to 512 [ 101.705632][ T2023] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 101.719976][ T2023] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities [ 101.744642][ T315] usb 3-1: New USB device found, idVendor=104d, idProduct=3006, bcdDevice=a0.cd [ 101.754707][ T315] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.762670][ T315] usb 3-1: Product: syz [ 101.774012][ T2023] netlink: 16 bytes leftover after parsing attributes in process `syz.0.542'. [ 101.783174][ T315] usb 3-1: Manufacturer: syz [ 101.790624][ T2023] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 101.806219][ T315] usb 3-1: SerialNumber: syz [ 101.811550][ T315] usb 3-1: config 0 descriptor?? [ 101.820935][ T28] audit: type=1400 audit(1720489417.007:344): avc: denied { setopt } for pid=2021 comm="syz.0.542" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 101.856944][ T315] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 101.864619][ T315] ftdi_sio ttyUSB0: unknown device type: 0xa0cd [ 102.047731][ T313] usb 3-1: USB disconnect, device number 5 [ 102.053989][ T313] ftdi_sio 3-1:0.0: device disconnected [ 102.509026][ T28] audit: type=1400 audit(1720489417.651:345): avc: denied { mount } for pid=2029 comm="syz.1.544" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 102.689190][ T2045] netlink: 72 bytes leftover after parsing attributes in process `syz.4.550'. [ 102.716891][ T2045] xt_hashlimit: invalid rate [ 102.891917][ T2035] loop3: detected capacity change from 0 to 40427 [ 103.105518][ T28] audit: type=1400 audit(1720489417.439:346): avc: denied { unmount } for pid=1453 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 103.194559][ T2035] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 103.211128][ T2035] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 103.220360][ T2035] F2FS-fs (loop3): invalid crc value [ 103.229273][ T2035] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 39874397669) [ 103.243624][ T2035] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 103.272995][ T2035] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 103.279973][ T2035] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 103.329681][ T315] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 103.459832][ T313] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 103.739191][ T313] usb 2-1: Using ep0 maxpacket: 8 [ 103.758563][ T2078] usb usb8: usbfs: process 2078 (syz.0.557) did not claim interface 0 before use [ 103.851216][ T313] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 103.874715][ T315] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 103.940867][ T315] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 103.950660][ T315] usb 3-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 103.959565][ T315] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.968147][ T315] usb 3-1: config 0 descriptor?? [ 103.972225][ T313] usb 2-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 103.994406][ T313] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 104.018455][ T313] usb 2-1: SerialNumber: syz [ 104.033874][ T313] usb 2-1: config 0 descriptor?? [ 104.084715][ T313] usb 2-1: Found UVC 0.00 device (05ac:8501) [ 104.094388][ T313] uvcvideo 2-1:0.0: Entity type for entity Output 255 was not initialized! [ 104.119456][ T313] usb 2-1: Failed to create links for entity 255 [ 104.137692][ T313] usb 2-1: Failed to register entities (-22). [ 104.319774][ T313] usb 2-1: USB disconnect, device number 7 [ 104.430401][ T315] hid-led 0003:27B8:01ED.0011: item fetching failed at offset 3/5 [ 104.448389][ T315] hid-led: probe of 0003:27B8:01ED.0011 failed with error -22 [ 104.598819][ T2091] netlink: 'syz.0.563': attribute type 3 has an invalid length. [ 104.685483][ T2103] loop3: detected capacity change from 0 to 16 [ 104.692207][ T2103] erofs: (device loop3): mounted with root inode @ nid 36. [ 104.732973][ T6] usb 3-1: USB disconnect, device number 6 [ 104.829700][ T295] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 104.866977][ T315] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 104.978872][ T313] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 105.243311][ T313] usb 4-1: Using ep0 maxpacket: 32 [ 105.361333][ T313] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 105.376867][ T313] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 105.379871][ T295] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 105.398371][ T313] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 105.398464][ T295] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 105.417278][ T315] usb 1-1: Using ep0 maxpacket: 32 [ 105.420935][ T313] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.422527][ T295] usb 5-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 105.447997][ T313] usb 4-1: config 0 descriptor?? [ 105.451166][ T295] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.463646][ T295] usb 5-1: config 0 descriptor?? [ 105.529043][ T315] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 105.557213][ T313] hub 4-1:0.0: USB hub found [ 105.557462][ T315] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 105.812757][ T28] audit: type=1400 audit(1720489419.246:347): avc: denied { write } for pid=2112 comm="syz.2.571" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 105.855057][ T313] hub 4-1:0.0: 1 port detected [ 105.981419][ T2118] loop1: detected capacity change from 0 to 256 [ 105.995032][ T28] audit: type=1400 audit(1720489419.622:348): avc: denied { watch watch_reads } for pid=2117 comm="syz.1.572" path="/52/file0" dev="loop1" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 106.061551][ T315] usb 1-1: New USB device found, idVendor=104d, idProduct=3006, bcdDevice=a0.cd [ 106.072682][ T295] lg-g15 0003:046D:C222.0012: unknown main item tag 0x0 [ 106.083986][ T295] lg-g15 0003:046D:C222.0012: hidraw0: USB HID v0.00 Device [HID 046d:c222] on usb-dummy_hcd.4-1/input0 [ 106.095278][ T315] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.103608][ T315] usb 1-1: Product: syz [ 106.114721][ T315] usb 1-1: Manufacturer: syz [ 106.119410][ T315] usb 1-1: SerialNumber: syz [ 106.128332][ T315] usb 1-1: config 0 descriptor?? [ 106.165663][ T315] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 106.173450][ T315] ftdi_sio ttyUSB0: unknown device type: 0xa0cd [ 106.259303][ T469] usb 5-1: USB disconnect, device number 10 [ 106.326358][ T2128] netlink: 'syz.2.575': attribute type 3 has an invalid length. [ 106.369131][ T313] usb 1-1: USB disconnect, device number 7 [ 106.394452][ T313] ftdi_sio 1-1:0.0: device disconnected [ 106.516947][ T528] hub 4-1:0.0: activate --> -90 [ 106.809861][ T313] usb 4-1: USB disconnect, device number 10 [ 106.815842][ T528] hub 4-1:0.0: hub_ext_port_status failed (err = -71) [ 106.852856][ T295] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 108.288052][ T2162] netlink: 'syz.0.586': attribute type 3 has an invalid length. [ 108.686992][ T295] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 108.697792][ T295] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 108.707372][ T295] usb 3-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 108.717540][ T295] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.726485][ T295] usb 3-1: config 0 descriptor?? [ 108.838318][ T2168] loop4: detected capacity change from 0 to 40427 [ 108.852875][ T2168] F2FS-fs (loop4): Found nat_bits in checkpoint [ 108.889674][ T2168] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 108.908954][ T28] audit: type=1400 audit(1720489422.210:349): avc: denied { rename } for pid=2167 comm="syz.4.589" name="file0" dev="loop4" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 108.910203][ T2176] f2fs_ckpt-7:4: attempt to access beyond end of device [ 108.910203][ T2176] loop4: rw=2049, sector=45096, nr_sectors = 24 limit=40427 [ 109.023879][ T315] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 109.182755][ T2187] overlayfs: missing 'lowerdir' [ 109.918433][ T295] hid-led 0003:27B8:01ED.0013: item fetching failed at offset 3/5 [ 109.928492][ T295] hid-led: probe of 0003:27B8:01ED.0013 failed with error -22 [ 109.932442][ T28] audit: type=1400 audit(1720489423.304:350): avc: denied { setattr } for pid=2191 comm="syz.0.595" path="socket:[25275]" dev="sockfs" ino=25275 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 109.950226][ T2197] futex_wake_op: syz.3.597 tries to shift op by 32; fix this program [ 109.960147][ T28] audit: type=1400 audit(1720489423.315:351): avc: denied { create } for pid=2191 comm="syz.0.595" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 110.039539][ T469] usb 3-1: USB disconnect, device number 7 [ 110.058256][ T2203] netlink: 4 bytes leftover after parsing attributes in process `syz.0.595'. [ 110.067921][ T315] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 110.079032][ T315] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 110.088833][ T315] usb 2-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 110.098548][ T315] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.110177][ T315] usb 2-1: config 0 descriptor?? [ 110.186960][ T2208] netlink: 'syz.4.598': attribute type 3 has an invalid length. [ 110.567090][ T315] lg-g15 0003:046D:C222.0014: unknown main item tag 0x0 [ 110.597439][ T315] lg-g15 0003:046D:C222.0014: hidraw0: USB HID v0.00 Device [HID 046d:c222] on usb-dummy_hcd.1-1/input0 [ 110.783871][ T315] usb 2-1: USB disconnect, device number 8 [ 111.717607][ T28] audit: type=1400 audit(1720489425.214:352): avc: denied { bind } for pid=2225 comm="syz.4.603" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 111.983317][ T2229] loop4: detected capacity change from 0 to 40427 [ 112.068150][ T28] audit: type=1326 audit(1720489425.600:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2239 comm="syz.1.608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8260775bd9 code=0x7ffc0000 [ 112.108193][ T28] audit: type=1326 audit(1720489425.621:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2239 comm="syz.1.608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8260775bd9 code=0x7ffc0000 [ 112.131417][ T28] audit: type=1326 audit(1720489425.621:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2239 comm="syz.1.608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8260775bd9 code=0x7ffc0000 [ 112.133195][ T2229] F2FS-fs (loop4): Found nat_bits in checkpoint [ 112.164114][ T28] audit: type=1326 audit(1720489425.621:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2239 comm="syz.1.608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8260775bd9 code=0x7ffc0000 [ 112.192285][ T28] audit: type=1326 audit(1720489425.621:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2239 comm="syz.1.608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8260775bd9 code=0x7ffc0000 [ 112.225439][ T28] audit: type=1326 audit(1720489425.621:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2239 comm="syz.1.608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f8260775bd9 code=0x7ffc0000 [ 112.249142][ T28] audit: type=1326 audit(1720489425.621:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2239 comm="syz.1.608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8260775bd9 code=0x7ffc0000 [ 112.273350][ T28] audit: type=1326 audit(1720489425.621:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2239 comm="syz.1.608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8260775bd9 code=0x7ffc0000 [ 112.342439][ T28] audit: type=1326 audit(1720489425.621:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2239 comm="syz.1.608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f8260775bd9 code=0x7ffc0000 [ 112.592637][ T2229] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 112.668373][ T2238] f2fs_ckpt-7:4: attempt to access beyond end of device [ 112.668373][ T2238] loop4: rw=2049, sector=45096, nr_sectors = 24 limit=40427 [ 113.160624][ T2261] loop0: detected capacity change from 0 to 40427 [ 113.180861][ T295] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 113.188308][ T2261] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 113.197585][ T2261] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 113.206771][ T2261] F2FS-fs (loop0): invalid crc value [ 113.213946][ T2261] F2FS-fs (loop0): Found nat_bits in checkpoint [ 113.270672][ T2261] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 113.277904][ T2261] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 113.824735][ T43] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 113.983972][ T43] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 114.245803][ T2287] loop3: detected capacity change from 0 to 128 [ 115.071268][ T295] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 115.101093][ T295] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 115.110876][ T295] usb 3-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 115.119731][ T295] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.128506][ T295] usb 3-1: config 0 descriptor?? [ 115.160364][ T565] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 115.588199][ T295] hid-led 0003:27B8:01ED.0015: item fetching failed at offset 3/5 [ 115.629841][ T295] hid-led: probe of 0003:27B8:01ED.0015 failed with error -22 [ 116.060530][ T2316] loop4: detected capacity change from 0 to 16 [ 116.119725][ T2316] erofs: (device loop4): mounted with root inode @ nid 36. [ 116.154099][ T2297] loop1: detected capacity change from 0 to 40427 [ 116.177474][ T2297] F2FS-fs (loop1): Found nat_bits in checkpoint [ 116.518246][ T295] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 116.545410][ T2297] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 116.571975][ T2297] syz.1.622: attempt to access beyond end of device [ 116.571975][ T2297] loop1: rw=2049, sector=45096, nr_sectors = 128 limit=40427 [ 116.591684][ T1453] syz-executor: attempt to access beyond end of device [ 116.591684][ T1453] loop1: rw=2049, sector=45224, nr_sectors = 8 limit=40427 [ 116.750924][ T295] usb 5-1: Using ep0 maxpacket: 32 [ 117.061459][ T28] kauditd_printk_skb: 53 callbacks suppressed [ 117.069974][ T28] audit: type=1400 audit(1720489430.900:415): avc: denied { map } for pid=2341 comm="syz.0.636" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=25568 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 117.153565][ T295] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 118.038722][ T28] audit: type=1400 audit(1720489430.900:416): avc: denied { write } for pid=2341 comm="syz.0.636" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=25568 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 118.055434][ T295] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 118.072459][ T295] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 118.083006][ T295] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.091921][ T295] usb 5-1: config 0 descriptor?? [ 118.133026][ T2353] netlink: 'syz.0.639': attribute type 4 has an invalid length. [ 118.145628][ T2353] netlink: 'syz.0.639': attribute type 17 has an invalid length. [ 118.153774][ T2353] device lo entered promiscuous mode [ 118.159987][ T2353] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 118.168599][ T295] hub 5-1:0.0: USB hub found [ 118.187482][ T2352] device lo left promiscuous mode [ 118.244934][ T313] usb 3-1: USB disconnect, device number 8 [ 118.298599][ T2368] loop2: detected capacity change from 0 to 512 [ 118.328043][ T2368] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 118.415707][ T2370] loop1: detected capacity change from 0 to 128 [ 118.544398][ T295] hub 5-1:0.0: 1 port detected [ 118.561203][ T2369] netlink: 4 bytes leftover after parsing attributes in process `syz.0.641'. [ 118.610284][ T2368] Quota error (device loop2): do_check_range: Getting block 4 out of range 1-0 [ 118.619241][ T2368] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 118.628692][ T2368] Quota error (device loop2): do_check_range: Getting block 4 out of range 1-0 [ 118.637562][ T2368] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 118.647069][ T2368] Quota error (device loop2): do_check_range: Getting block 4 out of range 1-0 [ 118.655961][ T2368] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 118.665245][ T2368] EXT4-fs (loop2): 1 orphan inode deleted [ 118.670899][ T2368] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 118.696607][ T2368] Quota error (device loop2): do_check_range: Getting block 4 out of range 1-0 [ 118.705501][ T2368] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 118.807314][ T2368] EXT4-fs error (device loop2): ext4_lookup:1859: inode #2: comm syz.2.645: deleted inode referenced: 12 [ 118.818665][ T2368] EXT4-fs (loop2): Remounting filesystem read-only [ 118.841813][ T1517] EXT4-fs (loop2): unmounting filesystem. [ 118.856245][ T2376] loop2: detected capacity change from 0 to 256 [ 118.909743][ T2378] loop3: detected capacity change from 0 to 16 [ 118.953327][ T2378] erofs: (device loop3): mounted with root inode @ nid 36. [ 119.039419][ T2389] netlink: 'syz.0.651': attribute type 4 has an invalid length. [ 119.049923][ T2389] netlink: 'syz.0.651': attribute type 17 has an invalid length. [ 119.057671][ T2389] device lo entered promiscuous mode [ 119.065010][ T2388] device lo left promiscuous mode [ 119.500306][ T295] hub 5-1:0.0: activate --> -90 [ 119.528552][ T2408] loop3: detected capacity change from 0 to 256 [ 120.263011][ T2414] loop2: detected capacity change from 0 to 128 [ 120.598564][ T2419] loop1: detected capacity change from 0 to 16 [ 120.606357][ T2421] netlink: 'syz.3.663': attribute type 4 has an invalid length. [ 120.611312][ T2419] erofs: (device loop1): mounted with root inode @ nid 36. [ 120.623901][ T2280] usb 5-1: USB disconnect, device number 11 [ 120.639423][ T295] hub 5-1:0.0: hub_ext_port_status failed (err = -71) [ 120.647434][ T2421] netlink: 'syz.3.663': attribute type 17 has an invalid length. [ 120.661226][ T2421] device lo entered promiscuous mode [ 120.667549][ T2421] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 120.678403][ T2420] device lo left promiscuous mode [ 120.711823][ T2425] netlink: 4 bytes leftover after parsing attributes in process `syz.0.662'. [ 120.760322][ T2435] loop2: detected capacity change from 0 to 256 [ 120.977443][ T2455] netlink: 'syz.1.677': attribute type 4 has an invalid length. [ 121.002472][ T2455] netlink: 'syz.1.677': attribute type 17 has an invalid length. [ 121.010660][ T2455] device lo entered promiscuous mode [ 121.018955][ T2455] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 121.062491][ T2457] loop2: detected capacity change from 0 to 256 [ 121.069956][ T2457] exfat: Deprecated parameter 'namecase' [ 121.075833][ T2457] exfat: Deprecated parameter 'utf8' [ 121.085368][ T2454] device lo left promiscuous mode [ 121.168641][ T2280] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 121.189445][ T2457] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfc6d8, utbl_chksum : 0xe619d30d) [ 121.360945][ T2460] loop1: detected capacity change from 0 to 512 [ 121.373327][ T2461] loop0: detected capacity change from 0 to 16 [ 121.373368][ T2460] EXT4-fs (loop1): ea_inode feature is not supported for Hurd [ 121.429373][ T2461] erofs: (device loop0): mounted with root inode @ nid 36. [ 121.514297][ T2280] usb 5-1: Using ep0 maxpacket: 16 [ 121.598449][ T2473] loop3: detected capacity change from 0 to 256 [ 121.625861][ T2280] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 121.636638][ T2280] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 121.646270][ T2280] usb 5-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 121.655201][ T2280] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.669430][ T2280] usb 5-1: config 0 descriptor?? [ 121.728392][ T39] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 121.751597][ T2483] netlink: 'syz.3.688': attribute type 4 has an invalid length. [ 121.769578][ T2483] netlink: 'syz.3.688': attribute type 17 has an invalid length. [ 121.785536][ T2483] device lo entered promiscuous mode [ 121.794814][ T2482] device lo left promiscuous mode [ 121.961463][ T39] usb 1-1: Using ep0 maxpacket: 32 [ 122.035496][ T2504] loop3: detected capacity change from 0 to 512 [ 122.072846][ T39] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 122.090625][ T2504] EXT4-fs error (device loop3): ext4_orphan_get:1396: inode #15: comm syz.3.697: casefold flag without casefold feature [ 122.107404][ T39] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 122.138833][ T2440] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.156647][ T39] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 122.166816][ T2440] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.179818][ T2504] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: inode #12: comm syz.3.697: missing EA_INODE flag [ 122.228275][ T39] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.233961][ T2280] hid-generic 0003:0158:0100.0016: unknown main item tag 0x1 [ 122.246226][ T2504] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.697: error while reading EA inode 12 err=-117 [ 122.250976][ T2280] hid-generic 0003:0158:0100.0016: unexpected long global item [ 122.269645][ T39] usb 1-1: config 0 descriptor?? [ 122.289997][ T2504] EXT4-fs (loop3): 1 orphan inode deleted [ 122.292865][ T2280] hid-generic: probe of 0003:0158:0100.0016 failed with error -22 [ 122.306338][ T2504] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 122.325509][ T39] hub 1-1:0.0: USB hub found [ 122.343074][ T1722] EXT4-fs (loop3): unmounting filesystem. [ 122.426017][ T2512] loop3: detected capacity change from 0 to 256 [ 122.442542][ T2280] usb 5-1: USB disconnect, device number 12 [ 122.514812][ T2513] loop1: detected capacity change from 0 to 256 [ 122.521248][ T2513] exfat: Deprecated parameter 'namecase' [ 122.526755][ T2513] exfat: Deprecated parameter 'utf8' [ 122.564321][ T2513] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfc6d8, utbl_chksum : 0xe619d30d) [ 122.644389][ T39] hub 1-1:0.0: 1 port detected [ 123.090400][ T2518] loop2: detected capacity change from 0 to 2048 [ 123.126933][ T2518] loop2: p1 < > p4 [ 123.131129][ T2518] loop2: p4 size 8388608 extends beyond EOD, truncated [ 123.171992][ T2530] loop1: detected capacity change from 0 to 512 [ 123.178902][ T2530] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 123.193251][ T2530] __quota_error: 6 callbacks suppressed [ 123.193268][ T2530] Quota error (device loop1): do_check_range: Getting block 4 out of range 1-0 [ 123.207549][ T2530] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 123.217321][ T2530] Quota error (device loop1): do_check_range: Getting block 4 out of range 1-0 [ 123.226232][ T2530] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 123.235640][ T2530] Quota error (device loop1): do_check_range: Getting block 4 out of range 1-0 [ 123.244514][ T2530] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 123.254046][ T2530] EXT4-fs (loop1): 1 orphan inode deleted [ 123.259700][ T2530] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 123.278691][ T2530] Quota error (device loop1): do_check_range: Getting block 4 out of range 1-0 [ 123.287694][ T2530] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 123.354563][ T2530] EXT4-fs error (device loop1): ext4_lookup:1859: inode #2: comm syz.1.707: deleted inode referenced: 12 [ 123.366053][ T2530] EXT4-fs (loop1): Remounting filesystem read-only [ 123.393889][ T1453] EXT4-fs (loop1): unmounting filesystem. [ 123.408646][ T2537] loop1: detected capacity change from 0 to 512 [ 123.424185][ T2537] EXT4-fs error (device loop1): ext4_orphan_get:1396: inode #15: comm syz.1.708: casefold flag without casefold feature [ 123.437998][ T2537] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: inode #12: comm syz.1.708: missing EA_INODE flag [ 123.450566][ T2537] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.708: error while reading EA inode 12 err=-117 [ 123.463887][ T2537] EXT4-fs (loop1): 1 orphan inode deleted [ 123.469445][ T2537] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 123.483257][ T28] audit: type=1400 audit(1720489437.842:423): avc: denied { ioctl } for pid=2541 comm="syz.2.709" path="pid:[4026532296]" dev="nsfs" ino=4026532296 ioctlcmd=0xf509 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 123.513199][ T1453] EXT4-fs (loop1): unmounting filesystem. [ 123.560770][ T2544] device dummy0 entered promiscuous mode [ 123.582480][ T2547] loop1: detected capacity change from 0 to 256 [ 123.610596][ T39] hub 1-1:0.0: activate --> -90 [ 123.825740][ T313] usb 1-1: USB disconnect, device number 8 [ 123.843528][ T39] hub 1-1:0.0: hub_ext_port_status failed (err = -71) [ 123.901951][ T2549] loop1: detected capacity change from 0 to 40427 [ 123.942627][ T2549] F2FS-fs (loop1): invalid crc value [ 123.951208][ T2549] F2FS-fs (loop1): Found nat_bits in checkpoint [ 124.060069][ T2557] loop3: detected capacity change from 0 to 256 [ 124.067494][ T2557] exfat: Deprecated parameter 'namecase' [ 124.073725][ T2557] exfat: Deprecated parameter 'utf8' [ 124.090097][ T2557] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfc6d8, utbl_chksum : 0xe619d30d) [ 124.151673][ T2549] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 124.432604][ T1453] syz-executor: attempt to access beyond end of device [ 124.432604][ T1453] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 124.459076][ T2560] loop2: detected capacity change from 0 to 256 [ 124.753746][ T2578] loop2: detected capacity change from 0 to 512 [ 125.009142][ T2578] EXT4-fs (loop2): 1 orphan inode deleted [ 125.023595][ T2578] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 125.072819][ T2578] ext4 filesystem being mounted at /72/file1 supports timestamps until 2038 (0x7fffffff) [ 125.187794][ T28] audit: type=1400 audit(1720489439.676:424): avc: denied { sys_module } for pid=2600 comm="syz.0.729" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 125.188238][ T2601] Invalid ELF header magic: != ELF [ 125.277100][ T2605] syz.2.723[2605] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 125.277624][ T2605] syz.2.723[2605] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 125.626028][ T2608] loop1: detected capacity change from 0 to 512 [ 125.649345][ T2608] EXT4-fs: Ignoring removed i_version option [ 125.655664][ T2608] ext2: Unknown parameter 'noacl' [ 125.669953][ T1517] EXT4-fs error (device loop2): ext4_lookup:1859: inode #2: comm syz-executor: deleted inode referenced: 16 [ 125.691098][ T1517] EXT4-fs (loop2): Remounting filesystem read-only [ 125.698178][ T1517] EXT4-fs error (device loop2): ext4_lookup:1859: inode #2: comm syz-executor: deleted inode referenced: 16 [ 125.751203][ T2621] loop3: detected capacity change from 0 to 1024 [ 125.754311][ T2619] loop4: detected capacity change from 0 to 1024 [ 125.769313][ T1517] EXT4-fs (loop2): unmounting filesystem. [ 125.782783][ T2621] EXT4-fs: Ignoring removed orlov option [ 125.814418][ T2623] loop0: detected capacity change from 0 to 256 [ 125.821098][ T2623] exfat: Deprecated parameter 'namecase' [ 125.826607][ T2623] exfat: Deprecated parameter 'utf8' [ 125.845978][ T2621] EXT4-fs (loop3): Test dummy encryption mode enabled [ 125.879131][ T2623] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfc6d8, utbl_chksum : 0xe619d30d) [ 125.931429][ T2280] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 125.960249][ T2619] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 125.971875][ T2619] EXT4-fs (loop4): orphan cleanup on readonly fs [ 125.989558][ T2621] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 126.001542][ T2619] EXT4-fs error (device loop4): ext4_map_blocks:721: inode #3: block 3: comm syz.4.737: lblock 3 mapped to illegal pblock 3 (length 1) [ 126.085302][ T2619] EXT4-fs error (device loop4): ext4_map_blocks:607: inode #3: block 3: comm syz.4.737: lblock 3 mapped to illegal pblock 3 (length 1) [ 126.107072][ T2619] EXT4-fs error (device loop4): ext4_free_blocks:6208: comm syz.4.737: Freeing blocks not in datazone - block = 0, count = 4096 [ 126.120953][ T2619] EXT4-fs error (device loop4): ext4_map_blocks:607: inode #3: block 3: comm syz.4.737: lblock 3 mapped to illegal pblock 3 (length 1) [ 126.135252][ T2619] EXT4-fs (loop4): 1 orphan inode deleted [ 126.142285][ T2621] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 126.143288][ T2619] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 126.175502][ T1722] EXT4-fs (loop3): unmounting filesystem. [ 126.182987][ T2280] usb 2-1: Using ep0 maxpacket: 8 [ 126.195964][ T736] EXT4-fs (loop4): unmounting filesystem. [ 126.295132][ T2280] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 126.329661][ T2280] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 126.339645][ T2280] usb 2-1: New USB device found, idVendor=056a, idProduct=4135, bcdDevice= 0.cc [ 126.349115][ T2280] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.361494][ T2280] usb 2-1: config 0 descriptor?? [ 126.708415][ T2637] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.715525][ T2637] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.722810][ T2637] device bridge_slave_0 entered promiscuous mode [ 126.730825][ T2637] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.737910][ T2637] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.745492][ T2637] device bridge_slave_1 entered promiscuous mode [ 126.837022][ T2658] loop0: detected capacity change from 0 to 1024 [ 126.847531][ T2658] EXT4-fs: Ignoring removed orlov option [ 126.854655][ T2658] EXT4-fs (loop0): Test dummy encryption mode enabled [ 126.855031][ T794] device bridge_slave_1 left promiscuous mode [ 126.869122][ T794] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.876885][ T794] device bridge_slave_0 left promiscuous mode [ 126.883759][ T794] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.892291][ T794] device dummy0 left promiscuous mode [ 126.892692][ T2658] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 126.897552][ T794] device veth1_macvtap left promiscuous mode [ 126.917229][ T794] device veth0_vlan left promiscuous mode [ 126.956965][ T733] EXT4-fs (loop0): unmounting filesystem. [ 127.042691][ T2280] wacom 0003:056A:4135.0017: Unknown device_type for 'HID 056a:4135'. Ignoring. [ 127.061147][ T2669] device dummy0 entered promiscuous mode [ 127.093298][ T2678] loop0: detected capacity change from 0 to 256 [ 127.118230][ T2678] FAT-fs (loop0): Directory bread(block 64) failed [ 127.125165][ T2678] FAT-fs (loop0): Directory bread(block 65) failed [ 127.131540][ T2678] FAT-fs (loop0): Directory bread(block 66) failed [ 127.138443][ T2678] FAT-fs (loop0): Directory bread(block 67) failed [ 127.145054][ T2678] FAT-fs (loop0): Directory bread(block 68) failed [ 127.151727][ T2678] FAT-fs (loop0): Directory bread(block 69) failed [ 127.158526][ T2678] FAT-fs (loop0): Directory bread(block 70) failed [ 127.165153][ T2678] FAT-fs (loop0): Directory bread(block 71) failed [ 127.171760][ T2678] FAT-fs (loop0): Directory bread(block 72) failed [ 127.172013][ T1437] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 127.178187][ T2678] FAT-fs (loop0): Directory bread(block 73) failed [ 127.185558][ T1437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 127.219714][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 127.228150][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 127.235325][ T2156] usb 2-1: USB disconnect, device number 9 [ 127.236254][ T24] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.248468][ T24] bridge0: port 1(bridge_slave_0) entered forwarding state [ 127.256332][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 127.264611][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 127.272595][ T24] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.279453][ T24] bridge0: port 2(bridge_slave_1) entered forwarding state [ 127.287464][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 127.295506][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 127.318238][ T2637] device veth0_vlan entered promiscuous mode [ 127.337994][ T1437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 127.350797][ T1437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 127.364096][ T1437] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 127.398056][ T1437] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 127.405717][ T1437] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 127.421215][ T2637] device veth1_macvtap entered promiscuous mode [ 127.478357][ T857] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 127.520987][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 127.536097][ T1437] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 127.883453][ T2689] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.890357][ T2689] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.897788][ T2689] device bridge_slave_0 entered promiscuous mode [ 127.908544][ T2689] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.915483][ T2689] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.928132][ T2689] device bridge_slave_1 entered promiscuous mode [ 127.975359][ T2708] loop2: detected capacity change from 0 to 128 [ 128.012332][ T2708] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 128.029602][ T2708] ext4 filesystem being mounted at /1/mnt supports timestamps until 2038 (0x7fffffff) [ 128.062557][ T2637] EXT4-fs (loop2): unmounting filesystem. [ 128.071414][ T2718] loop1: detected capacity change from 0 to 1024 [ 128.128764][ T2718] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 128.144637][ T2718] ext4 filesystem being mounted at /95/file0 supports timestamps until 2038 (0x7fffffff) [ 128.171999][ T2718] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.772: inode #262275072: comm syz.1.772: iget: illegal inode # [ 128.185534][ T28] kauditd_printk_skb: 12 callbacks suppressed [ 128.185554][ T28] audit: type=1400 audit(1720489442.874:432): avc: denied { setattr } for pid=2717 comm="syz.1.772" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 128.229288][ T2689] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.236273][ T2689] bridge0: port 2(bridge_slave_1) entered forwarding state [ 128.264707][ T857] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.273915][ T2718] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.772: error while reading EA inode 262275072 err=-117 [ 128.297696][ T857] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 128.305522][ T857] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 128.318037][ T1453] EXT4-fs (loop1): unmounting filesystem. [ 128.327858][ T2712] loop4: detected capacity change from 0 to 40427 [ 128.339731][ T857] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 128.348405][ T857] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 128.363318][ T2712] F2FS-fs (loop4): invalid crc value [ 128.371720][ T2712] F2FS-fs (loop4): Found nat_bits in checkpoint [ 128.372870][ T857] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.384713][ T857] bridge0: port 1(bridge_slave_0) entered forwarding state [ 128.408902][ T857] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 128.417196][ T857] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.424093][ T857] bridge0: port 2(bridge_slave_1) entered forwarding state [ 128.468585][ T2689] device veth0_vlan entered promiscuous mode [ 128.484654][ T2730] device dummy0 entered promiscuous mode [ 128.485740][ T2712] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 128.499083][ T2280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 128.512279][ T2280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 128.523449][ T2280] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 128.530813][ T736] syz-executor: attempt to access beyond end of device [ 128.530813][ T736] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 128.885998][ T2280] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 128.893753][ T2280] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 128.901652][ T2280] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 128.953633][ T472] device bridge_slave_1 left promiscuous mode [ 128.959748][ T472] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.967304][ T472] device bridge_slave_0 left promiscuous mode [ 128.973325][ T472] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.981818][ T472] device veth1_macvtap left promiscuous mode [ 128.987831][ T472] device veth0_vlan left promiscuous mode [ 129.078247][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 129.078374][ T2748] loop0: detected capacity change from 0 to 1024 [ 129.086930][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 129.093601][ T2748] EXT4-fs: Ignoring removed orlov option [ 129.106719][ T2689] device veth1_macvtap entered promiscuous mode [ 129.117158][ T2748] EXT4-fs (loop0): Test dummy encryption mode enabled [ 129.134984][ T857] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 129.135688][ T2750] loop4: detected capacity change from 0 to 512 [ 129.143214][ T857] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 129.153815][ T2750] EXT4-fs: Ignoring removed i_version option [ 129.158735][ T2748] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 129.162619][ T2750] ext2: Unknown parameter 'noacl' [ 129.176228][ T857] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 129.214329][ T2280] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 129.223563][ T733] EXT4-fs (loop0): unmounting filesystem. [ 129.224204][ T2280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 129.303511][ T2764] loop0: detected capacity change from 0 to 1024 [ 129.343312][ T2764] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 129.354796][ T2764] ext4 filesystem being mounted at /155/file0 supports timestamps until 2038 (0x7fffffff) [ 129.372887][ T2764] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz.0.785: inode #262275072: comm syz.0.785: iget: illegal inode # [ 129.386551][ T2764] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.785: error while reading EA inode 262275072 err=-117 [ 129.418264][ T733] EXT4-fs (loop0): unmounting filesystem. [ 129.426853][ T2772] loop2: detected capacity change from 0 to 512 [ 129.461006][ T2774] loop0: detected capacity change from 0 to 256 [ 129.466474][ T2772] EXT4-fs (loop2): 1 orphan inode deleted [ 129.472750][ T2772] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 129.482145][ T2772] ext4 filesystem being mounted at /5/file1 supports timestamps until 2038 (0x7fffffff) [ 129.499918][ T2774] FAT-fs (loop0): Directory bread(block 64) failed [ 129.507375][ T2774] FAT-fs (loop0): Directory bread(block 65) failed [ 129.513842][ T2774] FAT-fs (loop0): Directory bread(block 66) failed [ 129.528008][ T2774] FAT-fs (loop0): Directory bread(block 67) failed [ 129.538415][ T2280] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 129.572945][ T2774] FAT-fs (loop0): Directory bread(block 68) failed [ 129.580377][ T2774] FAT-fs (loop0): Directory bread(block 69) failed [ 129.586799][ T2774] FAT-fs (loop0): Directory bread(block 70) failed [ 129.593106][ T2774] FAT-fs (loop0): Directory bread(block 71) failed [ 129.603677][ T2774] FAT-fs (loop0): Directory bread(block 72) failed [ 129.623863][ T2774] FAT-fs (loop0): Directory bread(block 73) failed [ 129.818849][ T2791] syz.2.788[2791] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 129.818951][ T2791] syz.2.788[2791] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 130.745995][ T2637] EXT4-fs error (device loop2): ext4_lookup:1859: inode #2: comm syz-executor: deleted inode referenced: 16 [ 130.771490][ T2637] EXT4-fs (loop2): Remounting filesystem read-only [ 130.777930][ T2637] EXT4-fs error (device loop2): ext4_lookup:1859: inode #2: comm syz-executor: deleted inode referenced: 16 [ 130.840488][ T2637] EXT4-fs (loop2): unmounting filesystem. [ 130.865615][ T2803] loop3: detected capacity change from 0 to 128 [ 130.871459][ T2280] usb 5-1: Using ep0 maxpacket: 8 [ 130.912567][ T2808] loop1: detected capacity change from 0 to 256 [ 130.919094][ T2806] netlink: 24 bytes leftover after parsing attributes in process `syz.0.803'. [ 130.941775][ T2808] FAT-fs (loop1): Directory bread(block 64) failed [ 130.950568][ T28] audit: type=1400 audit(1720489445.856:433): avc: denied { create } for pid=2809 comm="syz.0.805" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 130.952038][ T2808] FAT-fs (loop1): Directory bread(block 65) failed [ 130.983816][ T2808] FAT-fs (loop1): Directory bread(block 66) failed [ 130.990167][ T2808] FAT-fs (loop1): Directory bread(block 67) failed [ 131.021030][ T2808] FAT-fs (loop1): Directory bread(block 68) failed [ 131.037443][ T2808] FAT-fs (loop1): Directory bread(block 69) failed [ 131.042248][ T2280] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 131.044824][ T2808] FAT-fs (loop1): Directory bread(block 70) failed [ 131.057181][ T2280] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 131.070550][ T2280] usb 5-1: New USB device found, idVendor=056a, idProduct=4135, bcdDevice= 0.cc [ 131.084813][ T2280] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.096848][ T2280] usb 5-1: config 0 descriptor?? [ 131.102346][ T2808] FAT-fs (loop1): Directory bread(block 71) failed [ 131.109179][ T2808] FAT-fs (loop1): Directory bread(block 72) failed [ 131.115853][ T2808] FAT-fs (loop1): Directory bread(block 73) failed [ 131.135041][ T28] audit: type=1326 audit(1720489446.060:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2802 comm="syz.3.799" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f63fe775bd9 code=0x0 [ 131.207509][ T2822] loop0: detected capacity change from 0 to 128 [ 131.215228][ T2822] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 131.236045][ T2814] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.242975][ T2814] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.254994][ T2814] device bridge_slave_0 entered promiscuous mode [ 131.265119][ T2814] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.272275][ T2814] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.279696][ T2814] device bridge_slave_1 entered promiscuous mode [ 131.348916][ T2830] loop1: detected capacity change from 0 to 2048 [ 131.541395][ T2830] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 131.565890][ T2814] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.572817][ T2814] bridge0: port 2(bridge_slave_1) entered forwarding state [ 131.579887][ T2814] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.586681][ T2814] bridge0: port 1(bridge_slave_0) entered forwarding state [ 131.647718][ T2280] wacom 0003:056A:4135.0018: Unknown device_type for 'HID 056a:4135'. Ignoring. [ 131.661361][ T28] audit: type=1400 audit(1720489446.543:435): avc: denied { unlink } for pid=83 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 131.685252][ T2156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 131.695486][ T2156] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 131.704053][ T2156] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 131.717743][ T43] device bridge_slave_1 left promiscuous mode [ 131.724537][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.732591][ T43] device bridge_slave_0 left promiscuous mode [ 131.738647][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.761110][ T43] device veth1_macvtap left promiscuous mode [ 131.767411][ T43] device veth0_vlan left promiscuous mode [ 131.779303][ T295] usb 5-1: USB disconnect, device number 13 [ 131.867601][ T1453] EXT4-fs (loop1): unmounting filesystem. [ 131.897711][ T2156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 131.906218][ T2156] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 131.931137][ T2814] device veth0_vlan entered promiscuous mode [ 131.937331][ T2156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 131.945480][ T2156] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 131.953824][ T2156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 131.962292][ T2156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 131.972312][ T2156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 131.980127][ T2156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 132.009835][ T2156] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 132.017382][ T2156] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 132.066323][ T1437] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 132.074697][ T1437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 132.085646][ T28] audit: type=1400 audit(1720489447.079:436): avc: denied { append } for pid=2850 comm="syz.1.817" name="event2" dev="devtmpfs" ino=180 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 132.094790][ T2814] device veth1_macvtap entered promiscuous mode [ 132.153665][ T1437] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 132.154678][ T1437] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 132.155740][ T1437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 132.208639][ T1437] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 132.209771][ T1437] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 132.613613][ T2872] futex_wake_op: syz.2.823 tries to shift op by -1; fix this program [ 132.633635][ T2874] loop2: detected capacity change from 0 to 256 [ 132.643188][ T2874] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 132.661384][ T28] audit: type=1400 audit(1720489447.691:437): avc: denied { mounton } for pid=2873 comm="syz.2.824" path="/5/file1/bus" dev="loop2" ino=1048785 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 132.692216][ T2874] exFAT-fs (loop2): error, invalid access to FAT free cluster (entry 0x00000005) [ 132.706602][ T2814] exFAT-fs (loop2): error, invalid access to FAT free cluster (entry 0x00000005) [ 132.766305][ T2814] exFAT-fs (loop2): error, invalid access to FAT free cluster (entry 0x00000005) [ 132.905594][ T2888] netlink: 4 bytes leftover after parsing attributes in process `syz.0.831'. [ 132.964685][ T2893] loop0: detected capacity change from 0 to 16 [ 132.978348][ T2893] erofs: (device loop0): mounted with root inode @ nid 36. [ 132.991914][ T2893] erofs: (device loop0): z_erofs_pcluster_readmore: readmore error at page 0 @ nid 36 [ 133.001479][ T2893] erofs: (device loop0): z_erofs_read_folio: failed to read, err [-117] [ 133.010988][ T28] audit: type=1400 audit(1720489448.067:438): avc: denied { create } for pid=2892 comm="syz.0.833" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 133.030617][ T28] audit: type=1400 audit(1720489448.067:439): avc: denied { bind } for pid=2892 comm="syz.0.833" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 133.049732][ T28] audit: type=1400 audit(1720489448.077:440): avc: denied { connect } for pid=2892 comm="syz.0.833" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 133.069122][ T28] audit: type=1400 audit(1720489448.077:441): avc: denied { write } for pid=2892 comm="syz.0.833" name="ppp" dev="devtmpfs" ino=138 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 133.092659][ T2891] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.099620][ T2891] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.106862][ T2891] device bridge_slave_0 entered promiscuous mode [ 133.114364][ T2891] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.121263][ T2891] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.128791][ T2891] device bridge_slave_1 entered promiscuous mode [ 133.184894][ T2891] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.191782][ T2891] bridge0: port 2(bridge_slave_1) entered forwarding state [ 133.198881][ T2891] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.205669][ T2891] bridge0: port 1(bridge_slave_0) entered forwarding state [ 133.228585][ T857] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 133.236142][ T857] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.243560][ T857] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.254730][ T857] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 133.263332][ T857] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.270196][ T857] bridge0: port 1(bridge_slave_0) entered forwarding state [ 133.280177][ T857] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 133.288535][ T857] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.295425][ T857] bridge0: port 2(bridge_slave_1) entered forwarding state [ 133.315461][ T469] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 133.334628][ T2156] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 133.354848][ T857] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 133.368563][ T2156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 133.376954][ T2156] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 133.384535][ T2156] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 133.392778][ T2891] device veth0_vlan entered promiscuous mode [ 133.408109][ T2891] device veth1_macvtap entered promiscuous mode [ 133.417003][ T857] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 133.426339][ T794] device bridge_slave_1 left promiscuous mode [ 133.432326][ T794] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.439895][ T794] device bridge_slave_0 left promiscuous mode [ 133.446016][ T794] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.454595][ T794] device veth1_macvtap left promiscuous mode [ 133.460534][ T794] device veth0_vlan left promiscuous mode [ 134.462925][ T28] audit: type=1400 audit(1720489449.622:442): avc: denied { read } for pid=2914 comm="syz.0.841" name="loop-control" dev="devtmpfs" ino=113 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 134.487018][ T28] audit: type=1400 audit(1720489449.622:443): avc: denied { open } for pid=2914 comm="syz.0.841" path="/dev/loop-control" dev="devtmpfs" ino=113 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 134.511905][ T28] audit: type=1400 audit(1720489449.622:444): avc: denied { ioctl } for pid=2914 comm="syz.0.841" path="/dev/loop-control" dev="devtmpfs" ino=113 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 135.200992][ T2920] loop0: detected capacity change from 0 to 1024 [ 135.225558][ T2920] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 135.234146][ T2920] ext4 filesystem being mounted at /172/file0 supports timestamps until 2038 (0x7fffffff) [ 135.252347][ T2920] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz.0.843: inode #262275072: comm syz.0.843: iget: illegal inode # [ 135.266306][ T2920] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.843: error while reading EA inode 262275072 err=-117 [ 135.285652][ T733] EXT4-fs (loop0): unmounting filesystem. [ 135.388323][ T1437] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 135.397037][ T1437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 135.405769][ T1437] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 135.414048][ T1437] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 135.810879][ T2947] loop2: detected capacity change from 0 to 16 [ 135.838767][ T2947] erofs: (device loop2): mounted with root inode @ nid 36. [ 135.864089][ T2947] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 0 @ nid 36 [ 135.874103][ T2947] erofs: (device loop2): z_erofs_read_folio: failed to read, err [-117] [ 136.305161][ T1437] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 136.620990][ T2976] loop2: detected capacity change from 0 to 256 [ 136.690049][ T2997] loop2: detected capacity change from 0 to 256 [ 136.696580][ T2997] exfat: Deprecated parameter 'utf8' [ 136.701774][ T2997] exfat: Deprecated parameter 'namecase' [ 136.708018][ T2997] exfat: Deprecated parameter 'utf8' [ 136.716565][ T2997] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 136.731060][ T2997] exFAT-fs (loop2): error, tried to truncate zeroed cluster. [ 136.738522][ T1437] usb 2-1: Using ep0 maxpacket: 16 [ 136.738856][ T2997] exFAT-fs (loop2): error, tried to truncate zeroed cluster. [ 136.770923][ T28] audit: type=1400 audit(1720489452.101:445): avc: denied { watch watch_reads } for pid=2996 comm="syz.2.869" path="/3/file0" dev="loop2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 137.082623][ T3002] loop3: detected capacity change from 0 to 1024 [ 137.089286][ T3002] EXT4-fs: Ignoring removed orlov option [ 137.095507][ T3002] EXT4-fs (loop3): Test dummy encryption mode enabled [ 137.104418][ T3002] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 137.125029][ T2689] EXT4-fs (loop3): unmounting filesystem. [ 137.171931][ T1437] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 137.183291][ T1437] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 137.193078][ T1437] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 137.205870][ T1437] usb 2-1: New USB device found, idVendor=1e7d, idProduct=71ce, bcdDevice= 0.00 [ 137.215085][ T1437] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.225414][ T1437] usb 2-1: config 0 descriptor?? [ 137.320994][ T857] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 137.399134][ T3022] loop0: detected capacity change from 0 to 2048 [ 137.431025][ T3022] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 137.468942][ T3029] loop4: detected capacity change from 0 to 512 [ 137.499731][ T3029] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 137.512749][ T3029] EXT4-fs (loop4): 1 truncate cleaned up [ 137.518619][ T3029] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 137.543235][ T736] EXT4-fs (loop4): unmounting filesystem. [ 137.549087][ T857] usb 3-1: Using ep0 maxpacket: 16 [ 137.657237][ T857] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 137.673782][ T857] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 137.677571][ T1437] hid-generic 0003:1E7D:71CE.0019: unknown main item tag 0x0 [ 137.690827][ T857] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 137.706667][ T1437] hid-generic 0003:1E7D:71CE.0019: hidraw0: USB HID v0.00 Device [HID 1e7d:71ce] on usb-dummy_hcd.1-1/input0 [ 137.712501][ T857] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 0 [ 137.732154][ T733] EXT4-fs (loop0): unmounting filesystem. [ 137.748794][ T28] audit: type=1400 audit(1720489453.141:446): avc: denied { name_bind } for pid=3046 comm="syz.3.889" path="socket:[31064]" dev="sockfs" ino=31064 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 137.797210][ T28] audit: type=1400 audit(1720489453.206:447): avc: denied { bind } for pid=3051 comm="syz.3.891" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 137.816445][ T857] usb 3-1: New USB device found, idVendor=04e6, idProduct=0007, bcdDevice= 1.75 [ 137.825838][ T857] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=5 [ 137.833639][ T857] usb 3-1: SerialNumber: syz [ 137.838401][ T28] audit: type=1400 audit(1720489453.238:448): avc: denied { listen } for pid=3051 comm="syz.3.891" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 137.858482][ T3055] loop0: detected capacity change from 0 to 512 [ 137.866904][ T3055] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 137.877690][ T28] audit: type=1400 audit(1720489453.238:449): avc: denied { accept } for pid=3051 comm="syz.3.891" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 137.908727][ T857] usb-storage 3-1:1.0: USB Mass Storage device detected [ 137.922694][ T3055] EXT4-fs (loop0): 1 truncate cleaned up [ 137.928499][ T3055] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 137.937406][ T857] usb-storage 3-1:1.0: Quirks match for vid 04e6 pid 0007: 1 [ 138.047417][ T733] EXT4-fs (loop0): unmounting filesystem. [ 138.216428][ T857] scsi host1: usb-storage 3-1:1.0 [ 138.223221][ T857] usb 3-1: USB disconnect, device number 9 [ 138.268711][ T3066] loop0: detected capacity change from 0 to 16 [ 138.288798][ T3070] loop4: detected capacity change from 0 to 256 [ 138.288888][ T3066] erofs: (device loop0): mounted with root inode @ nid 36. [ 138.328576][ T3066] erofs: (device loop0): z_erofs_pcluster_readmore: readmore error at page 0 @ nid 36 [ 138.338233][ T3070] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 138.355581][ T3066] erofs: (device loop0): z_erofs_read_folio: failed to read, err [-117] [ 138.610980][ T3083] loop3: detected capacity change from 0 to 2048 [ 138.667724][ T3090] loop2: detected capacity change from 0 to 256 [ 138.677711][ T3092] loop4: detected capacity change from 0 to 512 [ 138.696711][ T3090] exfat: Bad value for 'uid' [ 138.706675][ T3083] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 138.765182][ T3092] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 138.784583][ T3092] ext4 filesystem being mounted at /132/file0 supports timestamps until 2038 (0x7fffffff) [ 138.840338][ T736] EXT4-fs (loop4): unmounting filesystem. [ 138.885759][ T3100] sch_tbf: peakrate 32 is lower than or equals to rate 957426116199811060 ! [ 139.054685][ T2280] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 139.124183][ T2689] EXT4-fs (loop3): unmounting filesystem. [ 139.161105][ T3117] loop3: detected capacity change from 0 to 256 [ 139.188716][ T3117] exfat: Deprecated parameter 'utf8' [ 139.199315][ T3117] exfat: Deprecated parameter 'namecase' [ 139.207248][ T3117] exfat: Deprecated parameter 'namecase' [ 139.212796][ T3117] exfat: Deprecated parameter 'utf8' [ 139.220877][ T3117] exFAT-fs (loop3): failed to load upcase table (idx : 0x00012153, chksum : 0xc3dffc2e, utbl_chksum : 0xe619d30d) [ 139.399565][ T2280] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 139.553773][ T2280] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 139.560707][ T3134] serio: Serial port pts0 [ 139.624226][ T2280] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 139.641495][ T2280] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.806065][ T2280] usb 3-1: config 0 descriptor?? [ 139.855628][ T3141] sch_fq: defrate 0 ignored. [ 139.911556][ T857] usb 2-1: USB disconnect, device number 10 [ 139.975807][ T3147] loop0: detected capacity change from 0 to 512 [ 139.985487][ T3147] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 140.000065][ T3147] EXT4-fs (loop0): 1 truncate cleaned up [ 140.006183][ T3147] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 140.017341][ T28] audit: type=1400 audit(1720489455.588:450): avc: denied { read write } for pid=3146 comm="syz.0.924" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 140.040248][ T28] audit: type=1400 audit(1720489455.609:451): avc: denied { open } for pid=3146 comm="syz.0.924" path="/198/file1/file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 140.094415][ T733] EXT4-fs (loop0): unmounting filesystem. [ 140.142441][ T3158] serio: Serial port pts0 [ 140.157771][ T3163] kvm [3162]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc0010006 data 0x0 [ 140.287732][ T2280] plantronics 0003:047F:FFFF.001A: No inputs registered, leaving [ 140.311462][ T2280] plantronics 0003:047F:FFFF.001A: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 140.384308][ T3187] loop3: detected capacity change from 0 to 512 [ 140.403021][ T3187] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 140.488594][ T3187] EXT4-fs (loop3): 1 truncate cleaned up [ 140.494162][ T3187] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 140.519192][ T2689] EXT4-fs (loop3): unmounting filesystem. [ 140.693613][ T3201] netlink: 4240 bytes leftover after parsing attributes in process `syz.3.945'. [ 140.878426][ T3208] kvm [3207]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc0010006 data 0x0 [ 140.931182][ T3218] futex_wake_op: syz.0.953 tries to shift op by -1; fix this program [ 140.978317][ T857] usb 3-1: USB disconnect, device number 10 SYZFAIL: proc resp pipe read failed n=-1 (errno 11: Resource temporarily unavailable) [ 141.553230][ T313] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 141.991905][ T8] device bridge_slave_1 left promiscuous mode [ 141.997838][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.005161][ T8] device bridge_slave_0 left promiscuous mode [ 142.011165][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.019054][ T8] device veth1_macvtap left promiscuous mode [ 142.024874][ T8] device veth0_vlan left promiscuous mode [ 142.841616][ T8] device bridge_slave_1 left promiscuous mode [ 142.847578][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.854920][ T8] device bridge_slave_0 left promiscuous mode [ 142.860893][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.868500][ T8] device bridge_slave_1 left promiscuous mode [ 142.874430][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.881901][ T8] device bridge_slave_0 left promiscuous mode [ 142.887948][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.895802][ T8] device bridge_slave_1 left promiscuous mode [ 142.901915][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.909270][ T8] device bridge_slave_0 left promiscuous mode [ 142.915366][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.923333][ T8] device bridge_slave_1 left promiscuous mode [ 142.929250][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.936582][ T8] device bridge_slave_0 left promiscuous mode [ 142.942532][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.950819][ T8] device dummy0 left promiscuous mode [ 142.956112][ T8] device veth1_macvtap left promiscuous mode [ 142.961905][ T8] device veth0_vlan left promiscuous mode [ 142.967731][ T8] device veth1_macvtap left promiscuous mode [ 142.973599][ T8] device veth0_vlan left promiscuous mode [ 142.979553][ T8] device veth1_macvtap left promiscuous mode [ 142.985379][ T8] device veth0_vlan left promiscuous mode [ 142.991483][ T8] device dummy0 left promiscuous mode [ 142.996671][ T8] device veth1_macvtap left promiscuous mode [ 143.002591][ T8] device veth0_vlan left promiscuous mode