last executing test programs: 2m39.62144088s ago: executing program 32 (id=150): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000d7c900000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000880)=""/166}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r1}, 0x10) fstatfs(0xffffffffffffffff, 0x0) 2m33.018574923s ago: executing program 5 (id=367): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) syslog(0x2, &(0x7f0000000440)=""/176, 0xb0) 2m32.954626278s ago: executing program 5 (id=372): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 2m32.93039501s ago: executing program 5 (id=375): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 2m32.876982934s ago: executing program 5 (id=378): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000440)='./file0/file0\x00', &(0x7f0000000040)='./file0/../file0/file0\x00', 0x0, 0x8b101a, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f00000001c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x103) 2m32.860075946s ago: executing program 5 (id=380): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x25c, &(0x7f0000000440)=@framed={{0x18, 0x2}, [@printk={@ld}, @call={0x85, 0x0, 0x0, 0x7}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000000000000600850000009e"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffd1b}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='rss_stat\x00', r0}, 0x10) syz_clone(0x60000400, 0x0, 0x0, 0x0, 0x0, 0x0) 2m32.782977512s ago: executing program 5 (id=383): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000004503"]) 2m32.726788447s ago: executing program 33 (id=383): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000004503"]) 2m24.832794394s ago: executing program 1 (id=589): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000100)='io_uring_register\x00', r0}, 0x10) r1 = io_uring_setup(0x3452, &(0x7f0000000080)={0x0, 0xffffefff, 0x18, 0x2}) io_uring_register$IORING_UNREGISTER_RING_FDS(r1, 0x15, &(0x7f00000062c0)=[{0x0, 0x0, 0x0, &(0x7f0000000680), 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0}], 0x2) 2m24.832358093s ago: executing program 1 (id=590): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x0) accept4$bt_l2cap(r0, 0x0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f00000000c0)=0x4, 0x4) 2m23.988100481s ago: executing program 1 (id=608): r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 2m22.916580568s ago: executing program 1 (id=628): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x1000400, &(0x7f00000005c0)={[{@abort}, {@errors_remount}]}, 0x3, 0x44f, &(0x7f0000000600)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3853008, 0x0, 0x1, 0x0, 0x0) lsetxattr$security_selinux(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500), &(0x7f0000000540)='system_u:object_r:systemd_logger_exec_t:s0\x00', 0x2b, 0x1) setxattr$trusted_overlay_origin(&(0x7f0000000180)='./file0\x00', &(0x7f0000000000), &(0x7f0000000b40), 0xfe1c, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000080)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@index_on}]}) 2m22.76237825s ago: executing program 1 (id=634): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1400c, &(0x7f0000000680)={[{@test_dummy_encryption}, {@init_itable}, {@noload}]}, 0x3, 0x470, &(0x7f0000001240)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f0000000000)='./file0\x00', 0x1222068, &(0x7f0000000bc0)=ANY=[], 0x1, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) 2m22.64006098s ago: executing program 1 (id=639): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$ITER_CREATE(0xb, 0x0, 0x0) syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000055bed4002000000000000000301090238"], 0x0) 2m22.63975897s ago: executing program 34 (id=639): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$ITER_CREATE(0xb, 0x0, 0x0) syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000055bed4002000000000000000301090238"], 0x0) 2m13.111199609s ago: executing program 3 (id=878): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc) 2m13.09143473s ago: executing program 3 (id=880): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0xfffffffffffffffc}, 0x18) futex(0xfffffffffffffffc, 0x9, 0x0, 0x0, 0x0, 0x43000000) 2m13.050574444s ago: executing program 3 (id=881): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x180, 0x4, 0x28}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000050000850000001b000000b7000000000000009500"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x18) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x4000, 0x0) 2m12.963071731s ago: executing program 3 (id=884): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(0x0, 0x0, 0x0, 0x2125099, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) umount2(&(0x7f0000000080)='./file0/../file0\x00', 0x0) 2m12.902126685s ago: executing program 3 (id=886): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000006c0)="ed", 0x1}, {&(0x7f0000000200)="b5", 0x1}, {&(0x7f0000000340)='.', 0x1}, {&(0x7f0000000140)='U', 0x1}, {&(0x7f0000000180)="f3", 0x1}], 0x5}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000580)="f1", 0x1}, {&(0x7f0000000c80)='a', 0x1}, {&(0x7f0000000b40)='M', 0x1}, {&(0x7f0000000d80)='o', 0x1}, {&(0x7f0000000e80)='\b', 0x1}], 0xa6}, 0x70040000}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000380)="bb", 0x1}, {&(0x7f00000007c0)="a1", 0x1}, {&(0x7f0000000800)='s', 0x1}, {&(0x7f00000009c0)='\\', 0x1}], 0x4}}, {{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000440)="88", 0x1}, {&(0x7f0000000840)="e5", 0x1}, {&(0x7f0000001040)="96", 0x1}], 0x3}}], 0x4, 0x4048841) 2m12.827594212s ago: executing program 3 (id=888): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f00000003c0)={[{@inlinecrypt}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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") mkdir(&(0x7f0000000140)='./control\x00', 0x5) r0 = inotify_init1(0x800) inotify_add_watch(r0, &(0x7f0000000180)='./control\x00', 0xa4000960) rmdir(&(0x7f0000000100)='./control\x00') 2m12.785300795s ago: executing program 35 (id=888): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f00000003c0)={[{@inlinecrypt}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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") mkdir(&(0x7f0000000140)='./control\x00', 0x5) r0 = inotify_init1(0x800) inotify_add_watch(r0, &(0x7f0000000180)='./control\x00', 0xa4000960) rmdir(&(0x7f0000000100)='./control\x00') 1m50.575346166s ago: executing program 0 (id=1454): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x2, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) 1m50.566065717s ago: executing program 0 (id=1455): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='ns\x00') fchdir(r0) r1 = inotify_init1(0x800) inotify_add_watch(r1, &(0x7f0000000100)='./cgroup\x00', 0x24000042) close(r1) 1m50.557147717s ago: executing program 0 (id=1456): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0xffff, 0x0, @mcast2, 0x7}, 0x1c) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x9, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) sendmmsg$inet(r0, &(0x7f0000008b80)=[{{0x0, 0x0, 0x0}}], 0x1a000, 0x40000) 1m50.461866665s ago: executing program 0 (id=1457): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1400c, &(0x7f0000000680)={[{@test_dummy_encryption}, {@init_itable}, {@noload}]}, 0x3, 0x470, &(0x7f0000001240)="$eJzs3MtvG1UXAPAzkzj98qUloZRXyyNQEBWPpGkLdMECEEgsioQEC1haSVqVpi1qjESrSKQsygohJPaIJf8CK9ggxAqJLexRpQp1Q8vKaOyZxHZsp2nsuMW/n+T23Hn43uOZa9+ZayeAoTWd/ZNE7I6I3yNisl5s3mC6/t+N6yvzN6+vzCdRrb77V1Lb7u/rK/PFpsV+E42FSOJAm3qXL146U15aWryQl2crZz+aXb546YXTZ8unFk8tnjty/Pixo3Mvv3TkxZ7kORFpHr31wVdvn/iiKf+WPHpkutvKp6vVHlc3WHsa4tEBtoOtGcmPV6nW/ydjpOHoTcabn60VPh1QA4G+qVar1YnOq1erwH9YEs1lXR6GRfFBX1z/trsOfrVvo4/Bu/Za/QIoy/tG/qivGV27Y1Bqub7tpemIeH/1n2+yR/TnPgQAQJMfsvHP89loZ2U+G3usjz/SeKBhu3vyuaGpiLg3IvZGxH1xLvZFxP0RtW0fjIiHtlh/6yTJxvFPevW2ErtF2fjvlXxuq3n8V4z+YmokL+2p5V9KTp5eWjycvyaHorQrK891qePHN377stO6xvFf9sjqL8aCeTuuju5q3mehXClvJ+dG1y5H7B9tl3+yNhOQRMTDEbG/3ROkm9dx+tnvHum0bvP8u+jBRFP124hn6sd/NVryLyTd5ydn/xdLi4dni7Nio19+vfJOp/q3lX8PZMf//23P/7X8p5LG+drlrddx5Y/PO17TTJfyYAvn/2q5Uh5L3qvFY/myT8qVyoW5iLHkRL3RjcuPrO9blIvts/wPHWzf//fG+itxICKyk/jRiHgsIh7Pj90TEfFkRBzskv/Prz/1Yeuy8SL/O+D4L2zp+K8HY9G6pH0wcuan75sqnVoP8/xvdn//O1aLDuVLbuX971badXtnMwAAANx90ojYHUk6sxan6cxM/Tv8+yLSpfPLledOnv/43EL9NwJTUUqLO12TDfdD5/LL+nr5ckTUv1pQrD8aae2+8dcj47XyzPz5pYVBJw9DbqJD/8/8OTLo1gF95wdbMLz0fxheXft/aefaAey8Df2/a5/f1de2ADurzef/+CDaAey8duN/f+8HhkNL/zftB0PE/X8YXvo/DC/9H4bS8nhs/iP5rkHxTLe5+2bBZMR2WziYIEp3RDP6FkTa9yrG+ntq9S1I7sI2bwgG954EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQS/8GAAD//3hZ0MA=") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f0000000000)='./file0\x00', 0x1222068, &(0x7f0000000bc0)=ANY=[], 0x1, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x4000) 1m50.200530096s ago: executing program 0 (id=1458): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r0}, 0x18) r1 = io_uring_setup(0x7d2e, &(0x7f0000002380)={0x0, 0xffffffff, 0x1046}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r1, 0x13, 0x0, 0x2) 1m50.058107647s ago: executing program 0 (id=1459): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f00000001c0), 0x1, 0x4bc, &(0x7f0000000a40)="$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") r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x10) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0xc, r0, 0x0, 0x0, 0x0, 0xfffffffffdffffff}) 1m50.057825848s ago: executing program 36 (id=1459): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f00000001c0), 0x1, 0x4bc, &(0x7f0000000a40)="$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") r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x10) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0xc, r0, 0x0, 0x0, 0x0, 0xfffffffffdffffff}) 1m19.549880586s ago: executing program 9 (id=2272): r0 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) readv(r1, &(0x7f0000000340)=[{&(0x7f00000002c0)=""/2, 0x2}], 0x1) 1m18.701637194s ago: executing program 9 (id=2316): r0 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) write$selinux_access(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a6870647077645f657865635f742073797374656d5f753a73797374656d5f723afaffffffffffffff3a73302030"], 0x56) 1m18.677498866s ago: executing program 9 (id=2318): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000001000000b7080000000000007b"], 0x0, 0x2}, 0x94) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414aa0000000003"], 0x1c) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x10001}}}}}, 0x0) 1m18.654219618s ago: executing program 9 (id=2320): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nodelalloc}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x5}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000200)='./bus\x00', 0x283016, 0x0, 0x11, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0/file1\x00', &(0x7f0000000080), 0x100000, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) setxattr$security_capability(&(0x7f0000000240)='./file0/file1\x00', &(0x7f0000000280), 0x0, 0x0, 0x0) 1m18.370164761s ago: executing program 9 (id=2328): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xc5c, &(0x7f00000005c0)={[{@barrier_val={'barrier', 0x3d, 0x101}}, {@errors_remount}]}, 0x3, 0x445, &(0x7f0000000b00)="$eJzs28+PE1UcAPDvTLeLCLgr4g9+qKto3PhjlwVUDh7UaOIBExM96HGzuxCksIZdEyFEwRg8GWPi3Xj0X/CkF2M8mXjVuyEhhgvgqWbaGbYtbdktLUX6+SQD78282fe+nXnte/PaAEbWVPZPErE1Iv6MiIl6trnAVP2/q5fPLly7fHYhiWr13X+SWrkrl88uFEWL87bkmek0Iv0iid1t6l05feb4fKWydCrPz66e+Gh25fSZF46dmD+6dHTp5P5Dhw4emHv5pf0v9iXOrE1Xdn26vGfnWx988/bhr5rib4mjT6a6HXy6Wu1zdcO1rSGdjA2xIWxIKSKyy1Wu9f+JKMXaxZuINz8fauOAgapWq9UtnQ+fqwJ3sSSa87o8jIrigz6b/xZb6yDg1cENP4bu0mv1CVAW99V8qx8ZizQvU26Z3/bTVES8f+7f77ItBvMcAgCgyU/Z+Of5duO/NB5qKHdfvjY0GRH3R8T2iHggInZExIMRtbIPR8QjG6y/dZHkxvFPerGnwNYpG/+9kq9tNY//itFfTJby3LZa/OXkyLHK0r78NZmO8qYsP9eljp/f+OPrTscax3/ZltVfjAXzdlwc29R8zuL86vytxNzo0vmIXWPt4k+urwQkEbEzInb1WMexZ3/Y0+nYzePvog/rTNXvI56pX/9z0RJ/Iem+Pjl7T1SW9s0Wd8WNfvv9wjud6r+l+Psgu/73tr3/r8c/mTSu165svI4Lf33ZcU7T6/0/nrxXS4/n+z6ZX109NRcxnhyuN7px//61c4t8UT6Lf3pv+/6/PdZeid0Rkd3Ej0bEYxHxeN72JyLiyYjY2yX+X19/6sPe4x+sLP7FDV3/tcR4tO5pnygd/+XHpkonb4j/Wvfrf7CWms73rOf9bz3t6u1uBgAAgP+fNCK2RpLOXE+n6cxM/fvyOyLSyvLK6nNHlj8+uVj/jcBklNPiSddEw/PQuXxaX8+fj4j6VwuK4wfy58bfljbX8jMLy5XFYQcPI25Lh/6f+bs07NYBA+f3WjC69H8YXfo/jC79H0ZXm/6/eRjtAG6/dp//nw2hHcDt19L/LfvBCDH/h9Gl/8Po0v9hJK1sjpv/SL5rovhLPZ5+1yaifEc0Y2CJSO+IZkgMKDHc9yUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIB++S8AAP///fHg0g==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./file1\x00', 0x183042, 0x15) mount$bind(&(0x7f0000000080)='./file1\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x1000, 0x0) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c) unlink(&(0x7f0000000080)='./file1\x00') 1m17.574378445s ago: executing program 9 (id=2338): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0xb30, 0x0, 0x0, 0x40f00, 0x49, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) utime(0x0, 0x0) 1m17.564314955s ago: executing program 37 (id=2338): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0xb30, 0x0, 0x0, 0x40f00, 0x49, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) utime(0x0, 0x0) 3.288170265s ago: executing program 4 (id=4609): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/net/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd1l,'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xd0100, 0xf4) getdents64(r1, &(0x7f0000000f80)=""/4096, 0x1000) 3.255438027s ago: executing program 4 (id=4610): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='consume_skb\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, &(0x7f0000004340)=[{&(0x7f0000000f00)="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", 0xd4d}], 0x1}, 0x0) 3.209395081s ago: executing program 4 (id=4611): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000006c0f00000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) syz_usb_connect$cdc_ecm(0x3, 0x4d, &(0x7f0000000400)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x5, 0xb0, 0x1, [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x2, 0x6, 0x0, 0x5, {{0x5}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x9, 0x3, 0x4}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x5, 0x9, 0xd}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x2, 0x6, 0x6}}}}}]}}]}}, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0}) mount$overlay(0x0, 0x0, 0x0, 0x8, 0x0) 2.575081272s ago: executing program 8 (id=4638): sched_setaffinity(0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000f0000000000000c00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000200b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1400000004000000040000000200020000000000", @ANYRES32, @ANYBLOB="00000000ffffffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000002"], 0x50) 2.528939146s ago: executing program 8 (id=4640): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x1, 0x65, 0x8}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002ac0)={0x1a, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r3}, 0x10) 2.502640569s ago: executing program 8 (id=4641): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x82042, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x2, 0x2, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, [@sadb_key={0x1, 0x8}]}, 0x18}, 0x1, 0x7}, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000000000071000040"]) 2.415665066s ago: executing program 8 (id=4648): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100), 0x2, 0x500, &(0x7f0000000500)="$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") mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x85) 2.347927161s ago: executing program 8 (id=4650): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 2.287194666s ago: executing program 6 (id=4652): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 2.183274764s ago: executing program 6 (id=4653): r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00'}, 0x10) r2 = dup3(r0, r1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$MON_IOCG_STATS(r2, 0xc0109207, &(0x7f0000000180)) 2.134169028s ago: executing program 6 (id=4654): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00220f000000560900a1004daf25cee2d5d1c1"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000240), 0x0, 0x0) ioctl$HIDIOCGUCODE(r1, 0xc018480d, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, 0x0) 1.777852817s ago: executing program 4 (id=4658): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x7c, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000001c0)={{0xeeee8000, 0x80a0000, 0xd, 0x8, 0x3, 0xd2, 0x40, 0x7, 0x0, 0x2e, 0x19, 0x9}, {0x5000, 0x2, 0xf, 0x0, 0x40, 0x7, 0x7f, 0x6, 0x5, 0xa9, 0x3, 0x6}, {0x3000, 0xdddd0000, 0x8, 0x5, 0x0, 0x7, 0x0, 0x9, 0x0, 0xa7, 0x8, 0x81}, {0x80a0000, 0x100000, 0xa, 0x6, 0x1, 0x2, 0x1, 0xf8, 0x6, 0xa, 0xe, 0xf1}, {0x4000, 0x2000, 0xc, 0x3, 0x15, 0x2, 0xab, 0x7f, 0x1, 0x83, 0xf7, 0x3}, {0x1000, 0x80a0000, 0xe, 0xa0, 0xb1, 0x8, 0x1, 0xa0, 0x80, 0xf, 0x1, 0x7}, {0x8080000, 0x1000, 0xb, 0x5, 0x0, 0x5, 0x4, 0x3, 0x5, 0x81, 0x3, 0x70}, {0x100000, 0xeeef0000, 0xd, 0x5, 0xf, 0x7, 0x1, 0x34, 0x2, 0x8, 0xf0, 0x9}, {0xeeef0000, 0x30}, {0xdddd0000, 0x7}, 0x80040030, 0x0, 0x6000, 0x2066, 0x6, 0x0, 0x3000, [0x6800000000000000, 0xd, 0x5e, 0x3]}) 1.726579611s ago: executing program 2 (id=4661): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0600000004000000040000000907"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fsetxattr$system_posix_acl(r2, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f00000004c0)=ANY=[@ANYBLOB="02"], 0xfe44, 0x0) 1.697662063s ago: executing program 4 (id=4662): r0 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r0, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x3d10, 0x4) sendto$inet6(r0, &(0x7f0000000000)="8d", 0x1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=""/117, 0x75}, 0x7}], 0x1, 0x2123, 0x0) 1.697220403s ago: executing program 2 (id=4663): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100), 0x2, 0x500, &(0x7f0000000500)="$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") mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x85) 1.127243969s ago: executing program 2 (id=4665): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) setsockopt$inet_pktinfo(r0, 0x0, 0x8, 0x0, 0x0) 870.16053ms ago: executing program 4 (id=4668): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000023106a053103000000000001090224000100007e1109040002010300010009210000000122f80409058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000540)={0x44, &(0x7f0000000280)={0x0, 0x0, 0x57, "7cea0dba0dc3d47398a5ef7addcf25272804618f3084b46b6bf432d761d49e39781882ba0f74e73af1ee960c33501da214404171c6acaad69a9eab2d664c7c4d99d4759cea1826628f40a4a4eeacbeaa627ed1f261a9b7"}, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x83, 0x1, '.'}, &(0x7f00000004c0)={0x20, 0x84, 0x1, "ac"}, &(0x7f0000000500)={0x20, 0x85, 0x3, "919f77"}}) write(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2002, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x1e, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) 541.690506ms ago: executing program 7 (id=4681): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) msync(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1) 540.805656ms ago: executing program 7 (id=4682): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa) sendmsg$nl_route_sched(r1, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000000140)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{}, 0x3, r3}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 527.562378ms ago: executing program 7 (id=4683): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002200)='./file0\x00', 0x0, &(0x7f00000020c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f0000006180)="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", 0x2000, &(0x7f0000001ec0)={&(0x7f0000001580)={0x50, 0x0, 0x3, {0x7, 0x29, 0x9f53, 0x10100008, 0x691a, 0x48e, 0x1000, 0x8, 0x0, 0x0, 0x80, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=@known='system.posix_acl_default\x00', 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r1, 0xffffffffffffffff, 0x0) 447.194134ms ago: executing program 6 (id=4684): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000f00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r0}, &(0x7f0000000200), &(0x7f0000000280)=r1}, 0x20) socket$nl_route(0x10, 0x3, 0x0) 438.447795ms ago: executing program 6 (id=4685): socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'veth0\x00'}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r0, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={r0, &(0x7f0000000080), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000b40)={r0, &(0x7f0000000a80), 0x0}, 0x20) 418.013206ms ago: executing program 6 (id=4686): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x20) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x0, 0x3) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000800, &(0x7f0000000040)={0x2, 0x3, @remote}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @random="5a01f3c2f136", @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @random="43b1849c32a1", @remote, @local, @remote}}}}, 0x0) 417.388457ms ago: executing program 7 (id=4687): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f00000022c0)={{0x0, 0x0, 0x80, {0x0, 0x80af000}}, "cdb372b4dfe02964a59572ecc37526989e90f15cc175ae8c93ae45591f356c6884a1eb49a1ccc74c2260aded1979bfd746a27408d1220c39493a1d3b65f5306464393183b3b654e5237f83855fde05bc36e88baa2c07c6acd1e5d8c2b3736f1ec8fb98c1b5c20bae0c02c146f4182375c277e8647f577021416f8ba515ffa35cddd261d521df3e841a9179cda39879511c2e9ab06778ce9ffa6f2c9370d7af33bc74d16360a42aa2ced6433463ef4bbed671371e8eba18f2aa913f65ff1b5b35c7c67638ba4aaa64a717f556fe32f70ab1f227b75eaace9c63811a4abc99987e6c8964cfac90a0ca3384510dc63e3e3935540ce749bfa6a8785ee00fe862262ce28ff980e350a64be310b5f576ccfb5a2ba166b324b4bbe9f23030a79f16f20258d077d87f7b1e5b8ca402ce6e51b3236729fde5e6f96d7a94c8db3cc00fdab35e2544ebb424632bb9d82cbfb21146bfeb80e5f5e26ed89a6c521920b5c02cd9cf8063e1ef18919946124f64f749f5c2e3d603af2b7a2d2d24acb6ebe5f47b988dc50e690d9aea44fece3a353bae1b80dcae49c8cb6443978623b0ec80cd0feb0a134a51fdd2b1912a45c6ca41414273268c676bbef4ab3e2f7ac5e061d6dcf0041af2cc971a27b616444ae913033933ed4b1d89b96c8ee9edc86ee12d5917695796906d4822fb3a931df763e3a8e8893ae4749765bdbae4377ce47fb5e26890cb5178c03dd0df248bf35caf84f3cea3d778086065dbb0cd51ea04f28dd6ce80820fda0ffa3f33d38adb2d68d41db8ab27d4cad8b7abb026827738fb9c59d043199cd27c2bdf9711acb36926c730e216de7ad2de0326676916586ec8325f4b13735e34c4d60bd27e2fde3edc95dc59cb69c1dc25569da425488b6b6e9a63b17964ce1fa57bf2c7508ed199cf64a5cbc23b01cdf08b1ad4337f1b0aa02a6c137fb90e32fd7e204966170aa80fca868a45d496be7758c47f83760208793eb1600b6ebf4d1d2dcaa2b741f1c0b9f8844b9e68ec7f7123083c6926a1e95fe9b75f16064f213f69f8f1a97b66961279a6aa3498f146f7e517c2f5a9c0b0673b93dca4fe0c48d53c8f5f89bb7ab0476e00a13e020370077a55c28abccb585bcbdf29966a4db1c3ab0f3f58e54640032484e08072aac638b9c9dc9655a525e9016d9b24358ba477695875e3abd484ff3adb92069825841c3bd1870f708cc25288ee5cc4a6d7fab62eaa724a7acb4ee5952db977b4da11597891f5c5af6086ddf387deb19ce0995ba175f830c94b5adac04d8618a262b3059fe96d5b18690e5adf3e592ae77fed8214ef468d0cacdbbdb1712cff009e03146b57bab5b8302a5ed0f75f59c63877ad8fea5ec596c667ffc2337343e1726e79985bf7c663f8dca6ae731dd96486568d0c0e4c3a3860d7250e04373cc55018eda3ac9077cd2c5317df8992b548e34344ca97a9ed3b6f8bf1a97e060231657706c9e8ce8f03805b111d4bf1a559f4cf0822a20cd9ce06b56c5f051317e187d76a303af82d2053286d5d3cee381602170f5bb4036fb34c080992e9f7d509aa230935233dac608f533ae2a26c5e5710e6c2ed1bf61303cc3c47465791333dae385f91de77c3357fbedbbb64ae3b868ee90b98ab647fa0dcc85bfbab33058667b95106519c7ba80246f73391919fb575dedfe436fb190e828fd58ac25537a4ba5ef0a97c595ce67a740d1cfd84a05d3462d9203dd6ea94f60dc03a29c3c81aa25dce4b330fa7500234016373add8120018ea6b5fac8597fcc8404c793658db3277e2a7e042cb56420002922183f14af74d970dec12a781763c1d9d69cf664b065a9b09491b1ff043e9c9a2098975c17e82a5d06b9f1081c43a539669e95991d866f3105e0b327ab8659e23bf1b196603c7406221e47494b765a114077187295dfafc261ea9ad3064b3449c6e8ef5e2517f609995adf82710d6c23a83e06f61c8186017afa6b2de5b28082770edfc81ee72e46fd1365d0a7583e3609ce420e54cc7a2d57542b924c6c5c9c896d068912adf22a97b3547502d0181d2c69729c539921ab16c466ba6d1d518c3e787fb0e9f708c9a1bc6d428355f0a3bd574397a6f8eda6a1503854a1bd4004719db60a9b3fefe434464d9f2aaddf44ee98c503ac606b7d4d8bac4efa557a77fa5a31ed8c8b48cd1ee6e4e7731ffb273bf21838f4e0cb8eec8a2cbd8acd40c15fcc3959ec3b4ea86680fb1e65743acfc164c6ae830f81a00c83102085d6ae8c7b4424ee0e86673015d98449252de73a25bfbe1697ff06aecf299b2a0e7ce452ba6bcba6b6da2c494cf0ce51cbb555cc2a371bf5a595748486825b0798221f40d2c29396431d13a03248874b893c7880d3b87cf845858a31f68fe57b032e3e0204fd4fb23fd5b2357d8e4f6052dd058b3bf6cd913b4341446e62895d6a367e4233e25ef3aabfb7f35a7804938e3181b6f551ac4a947ff016a12dffb53e7101b6ee911fac7637b2786cf95a4611376d0ac7b1e61c763040550e0c00ddb39a11086e08941c518a5ebedcff2c9477f7be26ad4dc48d837b85d082b4a54c8ec3f1caff75f7fb8f1282df6c5b336c2e56c0f35d9c5dd38fc91001e950f5fb41b58a620a9ee5e6b001a637aad4ec9ffd09eb762fd0d1d8058ca0e544329ee8693547095264c46d9b716fe56ff991b28dc056caefb0d08c0c509ab0eafeffc280684f8654b18323eddff28b4e778a674b4d5b85df786bb12ca24e1980e56032d1d32eb472954eed24b99bbc404dc920e16d4f8e792d6fe581efa82420085955ab9716dc642b44e2a9215cdaaf3df4fa5ad66a26804ad87b7520c132fdb595ea560eb408b5d519cb31c2c6ed2a16fe971d7ca71b7530af7478f06509cc988b96b27dd3e667ce4b08ca685ae818527103addba74d71d094e7a58325658343b989a1d973fc9f1cfebe848c35279cfff728928f77af22430daee46cc9242fa4afe5197e6b42811396f9136fbd545826e020a910fa790acf9292472b7ee3b34723d6f56781d5c061be6e535e49bfcc292a1208645c730b6aadc94e56f05c6f8ca71c7fde81b687190accb75b08f131d61d6536cb3810eb2b6006336f700f1e6ea8104de9c9c6c9f4566a3783d253e3153e9550b91d547430bbe6dc23d31b930692f2a2c5b009fa44c416bfbe28e524ee6a2d0b016331037010fa882db5d35cfa359d1c7a173cf913e11b8888d0f37b75011f26ce9f97b132dd6f50cbf4bd7d1f9201c55ade10bdb4e2df4a3b35d2980bf8ee63b8091fed356f764c0bbcc95a91afeb4a2c1deb3fc0c44fa76d768fed87d737bb3380794e4b67932e7492e654cca53599a446664031ef83e6a6d5362d89eac11c767932f477201d2953b4bb6058f4a3baca2968719edbf41ca5da5be2efeb9bceb38e2f1394ff41d9e93ecc746175b8e5fa2f5bf903663cebc1266ca7a2f8c57340c1ef42e4fc8a85d76ce24237d16f1ac13d32bfd1121017e9a72ad3fb0e952a296ff9a79bdc5be6d8691696720d97daa7c27fb9489e47584c00c854779de5980490afbacad0d0774a7f13e424b0ea955a87b7e296a40eca7ab8f45ae76170da77fff6b554c50dcdc6a261e8ebb7d2f24583023d001ff218ec7844fb4640736f04e9f7d968aa74bef26f65eae961a4857a946d3b221818a798d65bf74f8c0ac1b4529e36183c49606890643573722d467f4c464e68069955e561ccfd4423c2a240cfbb96efb668844ba0a1ceb910ad4ef06cd0f13f7ffa85744bdd0dd16ca27f62179b3916868187421b6d9f9c698d6542a02d4c124373ce0f10cbbc6b9a18385d99519f06a24aa9a4f5560157880233ee8352f2e9de0ffa333bb50932587a70153a37f25263693b86dd6a61f7d1f40cac0f205b65fa2faa3098254fb084160c271addea6711ecae589870450b941db419bb27c8b597982b704ba0ea0189e7b5cd6b72e3529cd77e4a79c752f2f7af6aa43ec9eb0bbefc91a02a85871771189c1f9a0742e8e6fc2d71575e20631dee592f0ed44c9d8f6a22e7d7844445066ca5e8bb97dd5c2ca0365d7c33563ceca884e8e14ba21733c4d2415c1be9369298fbd616fd792bd767555aa2deec8f45e92e10fcc88079cf0093ca2e38adc797845548005a0660b5cbf6423d966ebdccb6ce9d5d476bfd562dff0dd1f8e576d424c0f5cbfe68a3a571e860e5665861a133bc8eb3d9838e9a88f18edb12dfec18a488ad1177ca22f6f763beee9c1e0dd61344997dbbc6de56800f15d2b04a4d83a0b79adb12c54aa7c418d8fd0c96b5797a003b8313d14093fdadd4b530233dd1176e86090e0cc5401d6f98529de8bb6094b8e2f02b53f562a4c115655dc2619811d8caade655b767a5d4fac6c10784bf5bb06e9f535fd1304f383e39bbc5ce58a5f2f9deb9af1d6df6b491fbcbb9053f9bc73da0ae2e815ae72aff41c71ab7adc71074dfa6906724f18b74a344f7911994ee8ee843fd991de053dd9fae152d02b4fe0818c6313aee7df2f32009221f6c2d0ef9b53b7c2e795d64dcae34e5fab88e6b112b935fa836c6868f72077c57a42a940d3c0a667f3d0b674a3de2aa8c3443748c3a5ac949f72ed49220a9cbf0896794f58e12b74a1d7c7bbf8bec7d8aa055855c34a6c25d6fddd22a73725ca3daf8e357b8173508be65d329a4b97820cdb1c7a98d222a839b4da2a33ac687ab4004f5e1d90be7dad53a50ab4d6bc04135e0a9f31af27dc75eae3b9e7fd7459455a4cdd7faf94c5fe701d66d2006719b9acb72db3c89ca61bddea7c0be7ec769ec1cbfae11a77f36a59966f042e5dd32ece56932b083f0cb68c92194c6a4ca0267186b5f3ebaa25f63b6a1b60a2a5c78b9b5b488962b2ce4854b51ab2bc001231b6be3fcdc5563b0950165da87745e387c1205ba818287a8cebfaae10ff461c2933d775c6cddaa936d1907e29b5b4e1ef0a000aafab5363dd692560a291a71f06552647144cac4884a8ae8f2dade616384eeafa54f84737d1613beb945faaa4a316ee2e2a3a094187b5edba42358e930c89bfeaf4620bada8aa6d6c8800d1b19548a308b8310a0b51c8ccc7db60aa2a04fd8b21769a32eded238f93f476b69a6548a8a17aee1d0c4476db41e4eba24d9351d3f98fac043f423ffead379b6cbfb05aaf705ff0dca6e5f6ba36d00d1bc98714a92c8ac1e7cbf441521c98e2b913dd7a5d8595e0479537029de96e2991652243fe3093594720a0538b1687711bf0bc46a1453ebe60c5d33bd798b66f19e69c90e55c2b68b62d1a759a3519630798dd4434fa658b013e28fe9befca82abc1f89a3b246f2fd44df84f88dab2792fc67b3ef2ef8eef84e441e2a7ff5a83e3784a5636a7d4775f5b3063d8e190bfcedcd8083d864d0cbb2fcca7af05cee2be552d89c801e760348dadf01ee4dbb9fb09d5b6c993ab9ac9ff7d5e1e104ab3a894f6cc9067ad64c5a97d3e12efd17820b3c07e4ce302a20fd4c5b5de8752bc4e609fbe9e6cebe713f309229883790ab6dffc22864f7b02fd9026a07299f8cf1e799acdd448428199165abf20eee23988cfcad773c7bc483f941f994c07f255e6cd72e7198f34bcbcbd801abb84e6e383d7bf6e217ee0281f4691beba5d17ef8bd59d7474540dda647ca3bdb8e280a2e6b7a7688bc677a25b2186b1e59e637737366733d75f02a597b7cabb18e75a1722d2327f4f2f101955ca88636ae97d5740ba61d7867c5141becd39f7fc5abb5b9614040995046c2ab369ac46c18159d5a3569df964e69e7686471ac756bf0515fee78904fe8fcec2096b5f3e", "8f9bea13d6c1793efefda669a3bfc1a1f2d2afea1c14a5b35aac4a522cce409cb88f5802ab78a0dc4ad9e13501a073e6fc60f1778eecc8a6f5299ba9f7dcdab9079dc269bb0d7bb287afa53a930cfb99ca80b3c23dd58d7a4d8ceadf2787fc4f8c638dcd55f8e962ef362db8ae2d407ea8f04c151b89947d52c901335b5ca070883017289368b02ae4676286906bf2f984ae3b2f4ce4d345ea814a725ef388f09b6b6dcc519515885e6e5062d9cd7e801d8a14b1c5b86c404a3bcfb968a48710eb7c451630b0e3895739f51e1379f25a9848fd01021cc53ab10691091090b2cad44133a51465c16c2257cdde467cdae5616e809ad2f3ca71a0b4ae46b5b62142b1d6f782c4286dbea20f02bae71821c1c956172806c55069c3e33f8811a31a44856a1d0521c3e81c12b6dcae2b0e5f006a9468614031c6ad977aa589e4076f55a5528d7b408fd429da83d78bc7dbb794b4117379334fb9167b872d0459a457ae425f768052a583f23ff60a29f11659756f40240b1939fb8b72c3fbe3963680fdcc09900ab387757c9146d223ccdfd5aa26682d39aee3e4b327748d02f82964c117fd480804952654de00db09934cd5c1786b35453f18515ec8f28ee9aee0bfd367eafdfccb54ed29fd08bbea75ed8b6a93c23cb337ae900ba89dcbb3d87191e1e56de67175572aa09f2eaa4fc1f31055b08ce99c30dadc63c743de7fc3e5e0511c98d6b37132f66f09577f6a5f9d113865830876d2f33887136d976525d195790184b7eeaf82169128911c37856b5e75db9999269b252f12d07c62236fac6835a3c13261c527d03d33df946ddfa40c85548ddb9179cf5d963246e215fa0f76472f9f24493aad8db71422f1d1c31a454980f2499294f858de9e8a4937f832b21104c843d084ba15466453f9fd830a1d7d5dbe801ef67c2d6ba52cefcaffa798dd47e9d1e94729956b62ccaf200ff3c32e41cabf86de920f74e1c9e00391909b622505388a3d297b4095f5aa3c17ef5e68c4b3ff18855fd13ff2fe3b1746155d149baaead01ce8d975730b235b1fca6a158f219d3256489d1421e9a008434ae4acc01e583a3145633bd217a6b74d4165fddc31499b6bde7341aad811e80ee6aefdb5aa993926b57d90c0098babdf172c2ec2fe85ba0b75bdc898ba9a2dc7383533b70f3eae8c5c91526a9d5aa99f4a91c9a4235b05558f9871f1e2254a2300e7bd5b4c0fa0bae78e00a53400ca2d1bd03f9d47c82a0e8a17519b53ab0274dd5fcab49ef76a567c156b947b38744657321da66d2983024a67adc00adcde04f35fc2cfeb39c0adcaa508ee7cb8b7a6b73b4deeba620538003f11f390d108c466a2058db84b122b62844f6aebf2d119ea050ba34a1152c439b4ee0491d9417398ec2b7154bdb39ffadb6385c52108f61cc0847cc8e499b3009b00ea000d1c84848c8213d82aa2c87d9c7b15fdf23454190b5c18f563985383a42c2d600155970c15cde8da2d14ef5908704966c286d59a5141bff15ed1e8b7c1252d8cbd641c70f8129ca870fa1235155cf642095b20d88de5c0a0ac6e8969c05996481d1e8e7f9cae627ad6cd374bffa2c8714c84e735384c4064c2e194f26ea16d3d99259cc394d2c4553578ad251c3fe2b88b316dd3533b644ec59390868fe5e7f79fa721ae8dd5ded8ceefaad3879b8c5577bb831079b44fab7db38f0b61d74ed192b2c61cfe6bed13049db2c6b85434e46194230ab022f7d74be00a844023b0e33cbf1d2b4d0ad3e61b950cd9801941fd8e5d4b90154ae9f173b42fcd658190758f21af8ff9086d4eb12bc3496bfecd99211c1048b3ce4dd25f0934d7f17d45f50084c4ef7c31625080a1c1cec43922d89d1945f675d980e8f2b374c198fb6e857d099c33aeececaac17ab9c12c343051e7dd2f8786883339dbc643af493745974a4da505844e0419dbddb4eca492713d006a5ff47d78dfac1642acab8caa7bda595b6b9532edf6da9ee99711822fabf8e8783dc8f156d1490f40ed6aedb4f97ce55269a2070b4aa3fc51ef22d9fa8342a03ef1b27831f83ade237f4344797eb29f9bbc6aced4005f4b379a1e0b060b4f9cbfce975b9bb2b53e1228c91753a7dfe6d67282d565c1ef42a15c1ff0d49f1128694336eaa277fd691de0748740241edb9250ab53e53523b2217fd4d554fe482c35d8ebdce8c2d053ea2b035a5e8f9ea2e683b24e418698e48b6bb8275c6938c61a6fcafb1f7c73a344db76bdc8cafb1a07000000e62e3d9b92ad50241ec0908d73255cb72ab5d144757a55c116343e6e6c61bb0999615ddca343e02a5e3438cc9f66b1619c4467b12e615918d2f27392977775c165530dc0059bb41bd6103e612ef5bcd7f2df54ab86a05836b0bb685c05e935da8dfe4144217603c6e4f703d8062af788c7acf61285baaf7c7043a0602fbe8d61daabcf07156f7ee60debca3787d1f4b60f39c341df2908bf7944a5753883626920f1e82eeb374409fa0b331053a9c6bd3ab48682d228ec04d7cb3eb94917d00bc97b46ec14f1681013969cda5ea2c95fa390b3d6422ce0ac242690fbf352d757c9fbc66d06b0e4578e43f032c5f033d54618d178ef0fabdb00108d23cae66bd4ce059709b01e5b8ffec5595865a1c77c0bd8a1f2cb5f13d2b49450b23d021f64247966fd07bee6538fb0565b7eb41489566bc066107a345d705335bc918fe2e3c4edc50872fd25933aaa908cd78eec4e414d46c035c734af8a5b8d47fe62a4a9c49da0cf6547cc8d6702a2468c8d6fbe0ec7d90888d0bf3a0c7c42507d0baf458ce087d4c7725f42edad430abf233b064186c111b4c1fc2861e74426a31d04e2ade9d7acd8f0ac376b712d1eb20175b93b6900291b5625f90276f0857af6b0d108ddb0d772f501e687196c7caafc90010403596a6b5735e28ec6363896c8719e6002dcea716038e7b773c250c98aae730a7f39d995d0c737ff6e29c7a548c69896355b73d50eff7f7a1238f66601d10e4ccc6fb5e924a59bb41da1eba811f5acb22e8bc3719f3568d0fdc0868b29df0727f5cd50290a1845e22d523cde3002560fef504bd2c9a291c7a81a4f2b5b8a015f379009e3e8baed5d35c4a03e09afd37d7fe9d86e86eb53701ae8016d5a19ce5e96e11549ba09e3c2a6700ea84796091f6ca47d4c68fb1e6f4448e1b72f6d4b8af491b635208b31356140db8134e5a1594e47c7ad68dcd2399f49731c60f5f6c101955d4c31275df3d4ce3207e8dc03b87cae229f1f1d09f0064ef7b0727f787efef0369222717129287a9b3a375e6aadd40b6fdaea3d43cd59febe098b7f80d72343bb147a20b22b5de8fbd32bf4ce64f3ad2510dad9c243327e7c706b06004d1cb82edcc113d74bb9cb820e360c9a8992b884a65234b93250f7ff8e7271983c6505cdf0524b5a8e60f8b3d86281a903ee62d3010d62a788d360182c1106486ee1673f5b7da5a2a154cbe53697305907f64140283f78b9b3b78d2a420586bbac1f72b4388258a0e7c1cc26048cbf3e47c593e9d3300e98931801efc3bdd0ed74e0d3b4f881c66b71a401d9719a1231394ffd04b35bb3c5dcc5ee18696e8327ef9f0f7d8ee218662ec6e747d5c009ba9462d0fba519be8f5f951a5bc077a6eaca928536f35e5929863357cc025fb80c5806d3b7a9f2645e1f6d3239bf763e9ff16fe6bf30d6139f2a117fa1db0d6d2c6aaecf1cacc1b28b24587c9bfd48e52f37651cc97c35d3dc3834b7f973213d0edefdf42a239da89bf1b735767f9e38119de3fd24dbdb34c38068888dc8ff11d19b1950772e283903ce51b1c13e86d58b283dc8f8a3c9456115b19a0561f3aa9c7eca553c4e5bfc20b5da4b32e607a57c2577ab2a65cedb2dd754a2363b37b138ea37e2e3546eea289da7475850e393e7331416bcf4ec75f0c6e654df1fc513e0dcc52ba57e9a128d148cf42d35fb9c7168c959e1ed6e4811fba1662c22194101a6d8787e037a35888117c854a2ef8f605076771ab5aefc8135cfa4c2a25680c6566e0fd19eee7cc86ece140efb6fab4200eabc09d834239abf5f48b46ea51797ee393693270da94c3e73859c01d1042e2eff0b1c4ed41ea560f38b8483d94b9dace687bbe8993fc4e2872b686bf299bb0dce34874d940fd2c36b5270aedd09e5e5a952d70f191e011c7e269219477fe8f5ded564f14fda6461b64d84ec32543a7ed663d8d27d8b8893942e0b7167f3f7b936f8f1fe623248d9815c5969f3a22f0fdefb527d9a870d7ece5430a9adcfee9eef05d235a0c87989965b20bad18c96d696e817c95693fec426ff81f1250e81c244058722243cb3e2df722ac46554a368a90a81206628fcc889cca832a8d4ed20188db0005b1b1c494e3dcce0622dd72ee35f4b4ac447909937bf67807344f5a629230752645aee6c70a885a80ea0e491fdef70648bfa0060ad78b122f2cc0637feb6c5754073d71326bb5a5c0b8c9890fffab1360d647d3a7b4e4bfb29c3162f311d7a1a41c3c5f739542ec723fff2c1e086dd79b1f22f3ff5a512e7ec7dfa54cc6883ae22b949139b1f029f8674ea97c5fb8125a3dafebddd524acdd1618c9f9b9fdf0ea659c4bd4b8da12cae75d1f5ae611b8fa7fd23ff0ff7dcf8a10540120d03d72db15d0775075c1c30ba7e6a07ee6633fa6fa396ca3a5799a7905db5d49e8e8ce00eb7a9af5f2c60749bc28c4b188054e21f44f28d2d1258326ae27a1b14d4704ffb93ff506bbf07e0e4e1bf2502fce11eeb83b9c491a68db0744a61ec449f5338c0b40d77ed16de2d935320bbd2cea2a164f26e7b619ddd81448009adeadfdcdead9df5a1c6da9aca64f373dfaf7cb940aac9f5eedb7a5d49eb74dc0e0819b05f328e9a4ddf3ef0a27cf01a853e02bc69970a32930c48509d726600dc7ee95e119d4cb28f87aa13b7ff846c338b5f9090586ff7bd983721d4a4b5a2e9a3e1495644483bf14861d524196f0d73265688794d6b3b4ce8b3f994c56a82a02a35aeaf9f79c08f5280a6ba0187eae965e412f14cb379869c997564b0a37349dc535882d5d4054d18bf44cbfccbdb8b377761096c974b3dde6a9dc767937bc3430a7fb614671e73ea867b4cd499f2581766510ad70811cda49b69b5afd380ae2ad43281e6640d4f20b2615f3c0b20f7d45c69a9cbbe7933776e07043b141664c059f1c6de17d44eed8b6242d6e8e8b3b86cff4306a9657e6d6f0c429f52138c6c5f7d155bc713432ca75bbf77c3a2c06e546474a7c327d10c46be64e6729643a9455420c48677a23c92f05e3e56f70100000000000000600739cd068305bb6aea50d5d1042f821e78f2942d603c46a1e4541756bac183b640935dffe8309e3e90a170ca3d126375a0177b1d94b72b622607af60a2cfb9b63464689237fcdbb752e89335aa96c615a59e39fcd89a3a39445e78fb5dd4912b16850863305496ca80974c3d39892a255f9a26b438662e6bc67e1d5115acff5bee940368df7e182ac1cc24331adb6e155ecfa1257d2f47a6b959f2bcf2dfbf86613c7761746ed85fd7e2a3c7c8602ee5143b100bd0a5026146becd255004fd8728bcfad605fad03e754ff1245e7716884e7e6898158ca4e9ba58cf09d8afe65fc18c2529b43a14e7eb7451b8072d68124be7b9133301d840191435de4704e2dda8ccfa87013f733aa10431faf7e46be7a391809af91e5e98d63c80a13c4b4fbb95b44ae5540f62f43036daef02b5dd404c0b08d46fa66fbdf0b4ed839494aa4c85194dac555e4061481c6717a3306700"}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe3000/0x18000)=nil, &(0x7f0000001200)=[@textreal={0x8, 0x0}], 0x1, 0x60, &(0x7f0000001240)=[@cr4={0x1, 0x2000}], 0x1) 283.458957ms ago: executing program 7 (id=4688): mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x1004002, 0x0) chdir(&(0x7f00000001c0)='./bus\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) renameat2(r0, &(0x7f0000000140)='./file0\x00', r0, &(0x7f0000000200)='./bus/file0\x00', 0x0) 283.277277ms ago: executing program 7 (id=4689): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x40000000, 0x0) 274.312708ms ago: executing program 8 (id=4690): socket$nl_generic(0x10, 0x3, 0x10) unshare(0x22020400) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_setup(0x7ff, &(0x7f0000000100)=0x0) r2 = eventfd2(0x8, 0x0) io_submit(r1, 0x1, &(0x7f0000000000)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x1, r0, 0x0, 0x0, 0x0, 0x0, 0x1, r2}]) 260.950949ms ago: executing program 2 (id=4691): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet6(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r2}, 0x10) sendto$inet6(r1, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) 162.592127ms ago: executing program 2 (id=4692): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e24, @multicast1}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0xf00) 0s ago: executing program 2 (id=4693): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x10) getrlimit(0xd, 0x0) process_mrelease(0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.874030][ T293] usb 5-1: Product: syz [ 124.878014][ T1737] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.880074][ T293] usb 5-1: Manufacturer: syz [ 124.887002][ T28] kauditd_printk_skb: 63 callbacks suppressed [ 124.887017][ T28] audit: type=1326 audit(126.062:2395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6714 comm="syz.7.2718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef3818ebe9 code=0x7ffc0000 [ 124.893040][ T293] usb 5-1: SerialNumber: syz [ 124.897700][ T28] audit: type=1326 audit(126.062:2396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6714 comm="syz.7.2718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef3818ebe9 code=0x7ffc0000 [ 124.948454][ T1737] usb 9-1: Product: syz [ 124.952727][ T1737] usb 9-1: Manufacturer: syz [ 124.958352][ T1737] usb 9-1: SerialNumber: syz [ 124.963839][ T28] audit: type=1326 audit(126.072:2397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6714 comm="syz.7.2718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fef3818ebe9 code=0x7ffc0000 [ 124.988150][ T6690] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 124.995435][ T28] audit: type=1326 audit(126.072:2398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6714 comm="syz.7.2718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef3818ebe9 code=0x7ffc0000 [ 125.019374][ T28] audit: type=1326 audit(126.072:2399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6714 comm="syz.7.2718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef3818ebe9 code=0x7ffc0000 [ 125.042916][ T28] audit: type=1326 audit(126.122:2400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6714 comm="syz.7.2718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fef3818ebe9 code=0x7ffc0000 [ 125.066201][ T28] audit: type=1326 audit(126.122:2401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6714 comm="syz.7.2718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef3818ebe9 code=0x7ffc0000 [ 125.089742][ T28] audit: type=1326 audit(126.122:2402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6714 comm="syz.7.2718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef3818ebe9 code=0x7ffc0000 [ 125.112921][ T28] audit: type=1326 audit(126.122:2403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6714 comm="syz.7.2718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fef3818ebe9 code=0x7ffc0000 [ 125.144212][ T6719] loop6: detected capacity change from 0 to 16 [ 125.160737][ T28] audit: type=1326 audit(126.122:2404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6714 comm="syz.7.2718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef3818ebe9 code=0x7ffc0000 [ 125.160848][ T6719] erofs: (device loop6): mounted with root inode @ nid 36. [ 125.167023][ T6683] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 125.199499][ T6690] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 125.209139][ T6690] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 125.226703][ T6719] erofs: (device loop6): erofs_fill_dentries: bogus dirent @ nid 36 [ 125.333083][ T6731] loop7: detected capacity change from 0 to 8192 [ 125.348609][ T6731] loop7: p1 p2 p4 < > [ 125.352730][ T6731] loop7: partition table partially beyond EOD, truncated [ 125.362098][ T6731] loop7: p1 start 16777216 is beyond EOD, truncated [ 125.369229][ T6731] loop7: p2 size 515840 extends beyond EOD, truncated [ 125.376865][ T6731] loop7: p4 start 16777216 is beyond EOD, truncated [ 125.486642][ T6737] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2729'. [ 125.568874][ T6745] bridge0: port 3(vlan2) entered blocking state [ 125.575326][ T6745] bridge0: port 3(vlan2) entered disabled state [ 125.819292][ T6690] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 125.829639][ T6690] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 125.841342][ T6683] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 125.920173][ T6789] loop6: detected capacity change from 0 to 4096 [ 125.934797][ T6789] EXT4-fs error (device loop6): ext4_do_update_inode:5256: inode #15: comm syz.6.2753: corrupted inode contents [ 125.947240][ T6789] EXT4-fs error (device loop6): ext4_dirty_inode:6121: inode #15: comm syz.6.2753: mark_inode_dirty error [ 125.959222][ T6789] EXT4-fs error (device loop6): ext4_do_update_inode:5256: inode #15: comm syz.6.2753: corrupted inode contents [ 125.971485][ T6789] EXT4-fs error (device loop6): __ext4_ext_dirty:202: inode #15: comm syz.6.2753: mark_inode_dirty error [ 125.983879][ T6789] EXT4-fs error (device loop6): ext4_do_update_inode:5256: inode #15: comm syz.6.2753: corrupted inode contents [ 125.996385][ T6789] EXT4-fs error (device loop6): __ext4_ext_dirty:202: inode #15: comm syz.6.2753: mark_inode_dirty error [ 126.008285][ T6789] EXT4-fs error (device loop6): ext4_do_update_inode:5256: inode #15: comm syz.6.2753: corrupted inode contents [ 126.021132][ T6789] EXT4-fs error (device loop6): ext4_truncate:4314: inode #15: comm syz.6.2753: mark_inode_dirty error [ 126.032601][ T6789] EXT4-fs error (device loop6) in ext4_setattr:5660: Corrupt filesystem [ 126.041385][ T1737] cdc_ncm 9-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 126.042138][ T6791] EXT4-fs error (device loop6): ext4_do_update_inode:5256: inode #15: comm syz.6.2753: corrupted inode contents [ 126.048111][ T1737] cdc_ncm 9-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 126.062447][ T293] cdc_ncm 5-1:1.0: bind() failure [ 126.082871][ T6794] netlink: 44 bytes leftover after parsing attributes in process `syz.7.2754'. [ 126.085424][ T293] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 126.099310][ T1737] cdc_ncm 9-1:1.0: setting rx_max = 2048 [ 126.105119][ T6794] netlink: 43 bytes leftover after parsing attributes in process `syz.7.2754'. [ 126.109688][ T293] cdc_ncm 5-1:1.1: bind() failure [ 126.114394][ T6794] netlink: 'syz.7.2754': attribute type 5 has an invalid length. [ 126.127365][ T6794] netlink: 43 bytes leftover after parsing attributes in process `syz.7.2754'. [ 126.198554][ T6804] hub 8-0:1.0: USB hub found [ 126.203786][ T6804] hub 8-0:1.0: 1 port detected crond[187]: time disparity of -29269103 minutes detected [ 126.229207][ T6807] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2760'. [ 126.238624][ T6807] device veth1_macvtap left promiscuous mode [ 126.247479][ T1737] cdc_ncm 9-1:1.0: setting tx_max = 88 [ 126.262133][ T1737] cdc_ncm 9-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.8-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 126.294303][ T1737] usb 9-1: USB disconnect, device number 14 [ 126.300759][ T1737] cdc_ncm 9-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.8-1, CDC NCM (NO ZLP) [ 126.320200][ T6811] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2762'. [ 126.329355][ T6811] netem: change failed [ 126.343332][ T60] usb 5-1: USB disconnect, device number 4 [ 126.378408][ T6815] netlink: 'syz.2.2764': attribute type 4 has an invalid length. [ 126.405422][ T6815] netlink: 'syz.2.2764': attribute type 4 has an invalid length. [ 126.641155][ T6845] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2777'. [ 126.807787][ T6857] loop6: detected capacity change from 0 to 256 [ 126.814755][ T6857] exfat: Deprecated parameter 'utf8' [ 126.822522][ T6857] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 126.954440][ T6876] sch_tbf: burst 3298 is lower than device lo mtu (11337746) ! [ 127.001620][ T6874] SELinux: failed to load policy [ 127.040539][ T6882] loop6: detected capacity change from 0 to 512 [ 127.076733][ T6882] EXT4-fs error (device loop6): ext4_orphan_get:1400: inode #15: comm syz.6.2794: iget: bad i_size value: 38620345925642 [ 127.106047][ T6871] loop8: detected capacity change from 0 to 40427 [ 127.108243][ T6882] EXT4-fs error (device loop6): ext4_orphan_get:1405: comm syz.6.2794: couldn't read orphan inode 15 (err -117) [ 127.125277][ T6871] F2FS-fs (loop8): Invalid log_blocksize (268), supports only 12 [ 127.136379][ T6871] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 127.155576][ T6871] F2FS-fs (loop8): invalid crc value [ 127.163694][ T6882] EXT4-fs error (device loop6): empty_inline_dir:1877: inode #12: block 7: comm syz.6.2794: bad entry in directory: rec_len % 4 != 0 - offset=4, inode=4278190093, rec_len=255, size=60 fake=0 [ 127.190908][ T6871] F2FS-fs (loop8): Found nat_bits in checkpoint [ 127.194759][ T6882] EXT4-fs warning (device loop6): empty_inline_dir:1884: bad inline directory (dir #12) - inode 4278190093, rec_len 255, name_len 0inline size 60 [ 127.228061][ T6871] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0 [ 127.228087][ T6871] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 127.272495][ T6895] loop6: detected capacity change from 0 to 2048 [ 127.310337][ T6895] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 127.310432][ T6895] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 4 with error 28 [ 127.310457][ T6895] EXT4-fs (loop6): This should not happen!! Data will be lost [ 127.310457][ T6895] [ 127.310470][ T6895] EXT4-fs (loop6): Total free blocks count 0 [ 127.310506][ T6895] EXT4-fs (loop6): Free/Dirty block details [ 127.310516][ T6895] EXT4-fs (loop6): free_blocks=66060288 [ 127.310527][ T6895] EXT4-fs (loop6): dirty_blocks=16 [ 127.310538][ T6895] EXT4-fs (loop6): Block reservation details [ 127.310547][ T6895] EXT4-fs (loop6): i_reserved_data_blocks=1 [ 127.311575][ T6895] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 127.311603][ T6895] EXT4-fs (loop6): This should not happen!! Data will be lost [ 127.311603][ T6895] [ 127.425648][ T60] hid-generic 0006:0004:0009.0023: unknown main item tag 0x0 [ 127.425676][ T60] hid-generic 0006:0004:0009.0023: unknown main item tag 0x0 [ 127.425697][ T60] hid-generic 0006:0004:0009.0023: unknown main item tag 0x0 [ 127.425715][ T60] hid-generic 0006:0004:0009.0023: unknown main item tag 0x0 [ 127.425734][ T60] hid-generic 0006:0004:0009.0023: unknown main item tag 0x0 [ 127.425752][ T60] hid-generic 0006:0004:0009.0023: unknown main item tag 0x0 [ 127.425770][ T60] hid-generic 0006:0004:0009.0023: unknown main item tag 0x0 [ 127.425789][ T60] hid-generic 0006:0004:0009.0023: unknown main item tag 0x0 [ 127.425808][ T60] hid-generic 0006:0004:0009.0023: unknown main item tag 0x0 [ 127.425829][ T60] hid-generic 0006:0004:0009.0023: unknown main item tag 0x0 [ 127.425848][ T60] hid-generic 0006:0004:0009.0023: unknown main item tag 0x0 [ 127.425867][ T60] hid-generic 0006:0004:0009.0023: unknown main item tag 0x0 [ 127.425885][ T60] hid-generic 0006:0004:0009.0023: unknown main item tag 0x0 [ 127.425903][ T60] hid-generic 0006:0004:0009.0023: unknown main item tag 0x0 [ 127.425929][ T60] hid-generic 0006:0004:0009.0023: unknown main item tag 0x0 [ 127.426029][ T60] hid-generic 0006:0004:0009.0023: unknown main item tag 0x0 [ 127.426048][ T60] hid-generic 0006:0004:0009.0023: unknown main item tag 0x0 [ 127.432557][ T60] hid-generic 0006:0004:0009.0023: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 127.481811][ T6913] fido_id[6913]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 127.574875][ T6922] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2805'. [ 127.575212][ T6922] device veth1_macvtap left promiscuous mode [ 127.856018][ T60] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 128.045986][ T60] usb 7-1: Using ep0 maxpacket: 16 [ 128.052730][ T60] usb 7-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 128.069736][ T60] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.093711][ T60] usb 7-1: config 0 descriptor?? [ 128.100356][ T6933] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6933 comm=syz.4.2811 [ 128.191992][ T6941] device bridge_slave_1 left promiscuous mode [ 128.198466][ T6941] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.207252][ T6941] device bridge_slave_0 left promiscuous mode [ 128.213666][ T6941] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.281543][ T6940] kvm [6939]: vcpu0, guest rIP: 0x9114 disabled perfctr wrmsr: 0xc2 data 0x5407 [ 128.296299][ T6940] kvm [6939]: vcpu0, guest rIP: 0x9114 disabled perfctr wrmsr: 0xc1 data 0x5b07 [ 128.308532][ T6924] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.326128][ T6924] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.352740][ T60] usbhid 7-1:0.0: can't add hid device: -71 [ 128.362343][ T60] usbhid: probe of 7-1:0.0 failed with error -71 [ 128.372459][ T60] usb 7-1: USB disconnect, device number 15 [ 128.603465][ T6957] __nla_validate_parse: 1 callbacks suppressed [ 128.603485][ T6957] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2819'. [ 128.629557][ T6957] device veth1_macvtap left promiscuous mode [ 131.322439][ T7001] loop7: detected capacity change from 0 to 2048 [ 131.391413][ T7001] EXT4-fs mount: 10 callbacks suppressed [ 131.391432][ T7001] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 131.496805][ T1862] EXT4-fs (loop7): unmounting filesystem. [ 131.626137][ T7042] netlink: 92 bytes leftover after parsing attributes in process `syz.7.2860'. [ 131.652074][ T7047] incfs: Options parsing error. -22 [ 131.659167][ T7047] incfs: mount failed -22 [ 131.705865][ T28] kauditd_printk_skb: 22 callbacks suppressed [ 131.705879][ T28] audit: type=1326 audit(132.872:2427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7053 comm="syz.8.2864" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f58fcf8ebe9 code=0x0 [ 131.903454][ T7082] netlink: 96 bytes leftover after parsing attributes in process `syz.7.2878'. [ 131.951896][ T28] audit: type=1400 audit(133.122:2428): avc: denied { mounton } for pid=7074 comm="syz.6.2873" path="/540/file0" dev="ramfs" ino=47997 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 132.001540][ T7093] netlink: 'syz.7.2881': attribute type 4 has an invalid length. [ 132.014131][ T7093] netlink: 'syz.7.2881': attribute type 4 has an invalid length. [ 132.550254][ T7099] netlink: 'syz.7.2893': attribute type 12 has an invalid length. [ 132.565418][ T7099] netlink: 'syz.7.2893': attribute type 29 has an invalid length. [ 132.573911][ T7099] netlink: 148 bytes leftover after parsing attributes in process `syz.7.2893'. [ 132.583403][ T7099] netlink: 51 bytes leftover after parsing attributes in process `syz.7.2893'. [ 132.660718][ T7110] loop7: detected capacity change from 0 to 512 [ 132.717552][ T7110] EXT4-fs error (device loop7): ext4_orphan_get:1400: inode #15: comm syz.7.2890: iget: bad i_size value: 38620345925642 [ 132.759118][ T28] audit: type=1400 audit(133.932:2429): avc: denied { mounton } for pid=7121 comm="syz.4.2896" path="/proc/208/cgroup" dev="proc" ino=48084 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 132.782380][ T7110] EXT4-fs error (device loop7): ext4_orphan_get:1405: comm syz.7.2890: couldn't read orphan inode 15 (err -117) [ 132.827109][ T7110] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 132.852857][ T28] audit: type=1400 audit(133.972:2430): avc: denied { remount } for pid=7121 comm="syz.4.2896" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 132.920797][ T7110] EXT4-fs error (device loop7): empty_inline_dir:1877: inode #12: block 7: comm syz.7.2890: bad entry in directory: rec_len % 4 != 0 - offset=4, inode=4278190093, rec_len=255, size=60 fake=0 [ 132.999083][ T7110] EXT4-fs warning (device loop7): empty_inline_dir:1884: bad inline directory (dir #12) - inode 4278190093, rec_len 255, name_len 0inline size 60 [ 133.065118][ T1862] EXT4-fs (loop7): unmounting filesystem. [ 133.506133][ T19] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 133.689873][ T7176] IPv6: sit1: Disabled Multicast RS [ 133.696016][ T19] usb 5-1: Using ep0 maxpacket: 16 [ 133.702746][ T19] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 133.731791][ T19] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 133.752468][ T19] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 133.781886][ T19] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.798478][ T19] usb 5-1: Product: syz [ 133.804986][ T19] usb 5-1: Manufacturer: syz [ 133.810965][ T19] usb 5-1: SerialNumber: syz [ 133.930349][ T7196] I/O error, dev loop15, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 133.940846][ T7196] FAT-fs (loop15): unable to read boot sector [ 134.001015][ T60] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 134.012340][ T60] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 134.025284][ T19] usb 5-1: 0:2 : does not exist [ 134.036109][ T60] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 134.043073][ T7210] loop6: detected capacity change from 0 to 128 [ 134.050246][ T60] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 134.058474][ T60] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 134.058716][ T28] audit: type=1400 audit(135.232:2431): avc: denied { connect } for pid=7201 comm="syz.2.2930" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 134.066283][ T60] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 134.093332][ T60] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 134.102323][ T19] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 134.110223][ T60] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 134.118215][ T60] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 134.126179][ T60] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 134.134362][ T60] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 134.144266][ T60] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 134.157646][ T19] usb 5-1: USB disconnect, device number 5 [ 134.165917][ T60] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 134.173454][ T60] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 134.181125][ T60] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 134.188725][ T60] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 134.196576][ T60] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 134.205505][ T60] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 134.213933][ T60] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 134.221627][ T60] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 134.230065][ T60] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 134.240179][ T60] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 134.256076][ T60] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 134.280763][ T60] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 134.288318][ T60] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 134.296061][ T60] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 134.303553][ T60] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 134.312433][ T60] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 134.321065][ T60] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 134.328974][ T60] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 134.336800][ T60] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 134.344255][ T60] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 134.353613][ T60] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 134.363237][ T60] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 134.370902][ T60] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 134.378558][ T60] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 134.386084][ T60] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 134.393941][ T60] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 134.401530][ T60] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 134.408974][ T60] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 134.416478][ T60] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 134.424003][ T60] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 134.431537][ T60] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 134.439660][ T60] hid-generic 0000:0000:0000.0024: hidraw0: HID v0.00 Device [syz0] on syz1 [ 134.456146][ T347] udevd[347]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 134.702766][ T7258] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2955'. [ 134.706347][ T7256] 9pnet: p9_errstr2errno: server reported unknown error Vå? ì [ 134.711906][ T7258] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2955'. [ 134.711928][ T7258] netlink: 2 bytes leftover after parsing attributes in process `syz.6.2955'. [ 134.807061][ T7268] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7268 comm=syz.6.2960 [ 134.905990][ T293] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 135.028475][ T7284] loop6: detected capacity change from 0 to 512 [ 135.095998][ T293] usb 8-1: Using ep0 maxpacket: 8 [ 135.102503][ T293] usb 8-1: config 179 has an invalid interface number: 65 but max is 0 [ 135.121104][ T293] usb 8-1: config 179 has no interface number 0 [ 135.128556][ T293] usb 8-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 135.140410][ T293] usb 8-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 135.152593][ T293] usb 8-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 135.164619][ T7284] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 135.164901][ T293] usb 8-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 135.183953][ T293] usb 8-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 135.197824][ T293] usb 8-1: config 179 interface 65 has no altsetting 0 [ 135.205508][ T293] usb 8-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 135.214804][ T293] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.226248][ T293] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:179.65/input/input25 [ 135.308993][ T1248] EXT4-fs (loop6): unmounting filesystem. [ 135.469635][ T19] usb 8-1: USB disconnect, device number 15 [ 135.469718][ C1] xpad 8-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 135.484803][ T19] xpad 8-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 135.605276][ T7304] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 135.636030][ T7304] SELinux: failed to load policy [ 135.857600][ T19] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 135.885158][ T19] hid-generic 0000:0000:0000.0025: hidraw0: HID v0.00 Device [syz1] on syz0 [ 135.980445][ T7327] loop4: detected capacity change from 0 to 512 [ 136.001831][ T7330] loop8: detected capacity change from 0 to 128 [ 136.015102][ T7327] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a803e028, mo2=0002] [ 136.042000][ T7327] System zones: 1-12 [ 136.052781][ T7327] EXT4-fs error (device loop4): ext4_get_branch:178: inode #11: block 33261: comm syz.4.2988: invalid block [ 136.065171][ T7327] EXT4-fs (loop4): Remounting filesystem read-only [ 136.075569][ T7327] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.2988: invalid indirect mapped block 8 (level 2) [ 136.109601][ T7330] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 136.135779][ T7327] EXT4-fs (loop4): Remounting filesystem read-only [ 136.142497][ T7327] EXT4-fs (loop4): 1 truncate cleaned up [ 136.166495][ T7327] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 136.231123][ T2457] EXT4-fs (loop8): unmounting filesystem. [ 136.251902][ T5844] EXT4-fs (loop4): unmounting filesystem. [ 136.411873][ T28] audit: type=1326 audit(137.582:2432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7360 comm="syz.6.3003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd11b78ebe9 code=0x7ffc0000 [ 136.412405][ T7362] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 136.447125][ T28] audit: type=1326 audit(137.582:2433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7360 comm="syz.6.3003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd11b78ebe9 code=0x7ffc0000 [ 136.500572][ T28] audit: type=1326 audit(137.652:2434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7360 comm="syz.6.3003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd11b78ebe9 code=0x7ffc0000 [ 136.564346][ T28] audit: type=1326 audit(137.652:2435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7360 comm="syz.6.3003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd11b78ebe9 code=0x7ffc0000 [ 136.607985][ T28] audit: type=1326 audit(137.652:2436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7360 comm="syz.6.3003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd11b78ebe9 code=0x7ffc0000 [ 136.847045][ C0] IPv4: Oversized IP packet from 127.0.0.1 [ 136.880357][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 136.880372][ T28] audit: type=1400 audit(138.052:2443): avc: denied { unmount } for pid=1862 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 136.941067][ T19] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 136.962554][ T7382] loop8: detected capacity change from 0 to 40427 [ 136.964041][ T19] hid-generic 0000:0000:0000.0026: hidraw0: HID v0.00 Device [syz1] on syz0 [ 136.979161][ T7382] F2FS-fs (loop8): Image doesn't support compression [ 136.996743][ T7382] F2FS-fs (loop8): invalid crc value [ 137.062639][ T7412] fido_id[7412]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 137.076132][ T7382] F2FS-fs (loop8): Found nat_bits in checkpoint [ 137.092061][ T7421] IPv6: ADDRCONF(NETDEV_CHANGE): ipip0: link becomes ready [ 137.169037][ T7427] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3029'. [ 137.186249][ T7382] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 137.186829][ T7427] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3029'. [ 137.229927][ T28] audit: type=1400 audit(138.402:2444): avc: denied { attach_queue } for pid=7425 comm="syz.7.3030" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 137.315339][ T7407] loop6: detected capacity change from 0 to 40427 [ 137.336179][ T7407] F2FS-fs (loop6): invalid crc value [ 137.344466][ T7438] loop7: detected capacity change from 0 to 128 [ 137.358241][ T7407] F2FS-fs (loop6): Found nat_bits in checkpoint [ 137.379145][ T7438] syz.7.3033: attempt to access beyond end of device [ 137.379145][ T7438] loop7: rw=2049, sector=138, nr_sectors = 112 limit=128 [ 137.406172][ T7407] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 137.426177][ T7438] syz.7.3033: attempt to access beyond end of device [ 137.426177][ T7438] loop7: rw=2049, sector=144, nr_sectors = 2 limit=128 [ 137.466163][ T7438] Buffer I/O error on dev loop7, logical block 72, lost async page write [ 137.505556][ T7442] syz.7.3033: attempt to access beyond end of device [ 137.505556][ T7442] loop7: rw=2049, sector=138, nr_sectors = 2 limit=128 [ 137.519812][ T7442] Buffer I/O error on dev loop7, logical block 69, lost async page write [ 137.591809][ T7407] syz.6.3021: attempt to access beyond end of device [ 137.591809][ T7407] loop6: rw=2049, sector=40424, nr_sectors = 8 limit=40427 [ 137.770778][ T7467] loop7: detected capacity change from 0 to 1024 [ 137.793842][ T7467] EXT4-fs: Ignoring removed mblk_io_submit option [ 137.816470][ T7467] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 137.847182][ T7467] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 137.870311][ T28] audit: type=1400 audit(139.042:2445): avc: denied { create } for pid=7466 comm="syz.7.3044" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=fifo_file permissive=1 [ 137.871601][ T7467] EXT4-fs (loop7): shut down requested (1) [ 137.943420][ T1862] EXT4-fs (loop7): unmounting filesystem. [ 137.959382][ T7473] binder: 7472:7473 ioctl c0306201 2000000003c0 returned -14 [ 138.089821][ T7492] netlink: 176 bytes leftover after parsing attributes in process `syz.8.3052'. [ 138.093962][ T7493] loop4: detected capacity change from 0 to 1024 [ 138.118511][ T7493] EXT4-fs: Ignoring removed nobh option [ 138.126522][ T7493] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 138.153329][ T7493] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c856c018, mo2=0102] [ 138.162881][ T7493] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 138.191317][ T7493] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:3841: comm syz.4.3054: Allocating blocks 497-513 which overlap fs metadata [ 138.213108][ T7491] EXT4-fs (loop4): pa ffff8881186ab348: logic 16, phys. 129, len 24 [ 138.213140][ T7491] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:4881: group 0, free 0, pa_free 1 [ 138.232744][ T5844] EXT4-fs (loop4): unmounting filesystem. [ 138.240945][ T28] audit: type=1400 audit(139.422:2446): avc: denied { getopt } for pid=7500 comm="syz.7.3057" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 138.289834][ T7505] tun0: tun_chr_ioctl cmd 1074025675 [ 138.289855][ T7505] tun0: persist disabled [ 138.440741][ T7515] loop7: detected capacity change from 0 to 256 [ 138.464393][ T28] audit: type=1326 audit(139.632:2447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7510 comm="syz.4.3072" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f236ff8ebe9 code=0x0 [ 138.514090][ T7519] 9pnet: p9_errstr2errno: server reported unknown error õ1 g;-‡ [ 138.786850][ T7526] loop7: detected capacity change from 0 to 1024 [ 138.787216][ T7526] EXT4-fs: Ignoring removed nobh option [ 138.787235][ T7526] EXT4-fs: Ignoring removed bh option [ 138.794425][ T7526] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 138.828603][ T7526] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 138.840378][ T7526] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:3841: comm syz.7.3068: Allocating blocks 385-513 which overlap fs metadata [ 138.844577][ T7526] EXT4-fs (loop7): pa ffff8881006ccbd0: logic 16, phys. 129, len 24 [ 138.844610][ T7526] EXT4-fs error (device loop7): ext4_mb_release_inode_pa:4881: group 0, free 0, pa_free 8 [ 138.863295][ T1862] EXT4-fs (loop7): unmounting filesystem. [ 138.928022][ T7534] loop8: detected capacity change from 0 to 256 [ 138.928590][ T7534] FAT-fs (loop8): bogus number of FAT sectors [ 138.928606][ T7534] FAT-fs (loop8): Can't find a valid FAT filesystem [ 138.978202][ T347] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 139.157009][ T39] usb 8-1: new full-speed USB device number 16 using dummy_hcd [ 139.244784][ T7556] xt_hashlimit: size too large, truncated to 1048576 [ 139.357157][ T39] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 139.371461][ T39] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 139.383166][ T39] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 139.406663][ T39] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.414951][ T39] usb 8-1: Product: syz [ 139.419283][ T39] usb 8-1: Manufacturer: syz [ 139.423967][ T39] usb 8-1: SerialNumber: syz [ 139.639127][ T39] usb 8-1: 0:2 : does not exist [ 139.646252][ T60] usb 9-1: new full-speed USB device number 15 using dummy_hcd [ 139.647218][ T39] usb 8-1: 5:0: failed to get current value for ch 0 (-22) [ 139.669063][ T39] usb 8-1: USB disconnect, device number 16 [ 139.827912][ T60] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 139.839273][ T60] usb 9-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 139.849461][ T60] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.861619][ T60] usb 9-1: config 0 descriptor?? [ 139.867235][ T6] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 139.875719][ T7577] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 139.886687][ T347] udevd[347]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 139.938016][ T28] audit: type=1400 audit(141.112:2448): avc: denied { audit_read } for pid=7599 comm="syz.2.3100" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 140.056051][ T6] usb 7-1: Using ep0 maxpacket: 16 [ 140.062511][ T6] usb 7-1: config 0 has an invalid interface number: 105 but max is 0 [ 140.071552][ T6] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 140.082995][ T6] usb 7-1: config 0 has no interface number 0 [ 140.093042][ T6] usb 7-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 140.102885][ T6] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.111463][ T6] usb 7-1: Product: syz [ 140.115759][ T6] usb 7-1: Manufacturer: syz [ 140.120959][ T6] usb 7-1: SerialNumber: syz [ 140.127155][ T6] usb 7-1: config 0 descriptor?? [ 140.293561][ T60] hid-generic 0003:04F3:0755.0027: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.8-1/input0 [ 140.333745][ T6] usb 7-1: Found UVC 0.00 device syz (046d:08d3) [ 140.341572][ T6] usb 7-1: No valid video chain found. [ 140.493207][ T6] usb 9-1: USB disconnect, device number 15 [ 140.535807][ T60] usb 7-1: USB disconnect, device number 16 [ 141.147477][ T8030] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 141.264254][ T8047] loop4: detected capacity change from 0 to 512 [ 141.859314][ T8047] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 142.231325][ T8047] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 142.417903][ T39] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 142.428757][ T8058] random: crng reseeded on system resumption [ 142.923884][ T28] audit: type=1400 audit(143.602:2449): avc: denied { write } for pid=8057 comm="syz.7.3123" name="snapshot" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 143.203336][ T28] audit: type=1400 audit(144.372:2450): avc: denied { write } for pid=8046 comm="syz.4.3120" name="/" dev="overlay" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 143.225061][ T28] audit: type=1400 audit(144.372:2451): avc: denied { add_name } for pid=8046 comm="syz.4.3120" name="cpuacct.usage_percpu" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 143.259746][ T5844] EXT4-fs (loop4): unmounting filesystem. [ 143.277830][ T39] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 143.291366][ T8068] syz.7.3128[8068] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 143.291441][ T8068] syz.7.3128[8068] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 143.303427][ T39] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 143.327848][ T8071] xt_hashlimit: size too large, truncated to 1048576 [ 143.351262][ T39] usb 7-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 143.371058][ T39] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.379705][ T28] audit: type=1400 audit(144.562:2452): avc: denied { sys_module } for pid=8074 comm="syz.7.3133" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 143.413308][ T39] usb 7-1: config 0 descriptor?? [ 143.438735][ T8080] loop8: detected capacity change from 0 to 1024 [ 143.457555][ T8082] loop4: detected capacity change from 0 to 128 [ 143.464705][ T8080] EXT4-fs: Ignoring removed nobh option [ 143.475482][ T8080] EXT4-fs: Ignoring removed bh option [ 143.536540][ T8080] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 143.581330][ T8084] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 143.593380][ T8084] IPv6: ADDRCONF(NETDEV_CHANGE): ipip0: link becomes ready [ 143.597761][ T8080] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 143.640302][ T8080] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:3841: comm syz.8.3134: Allocating blocks 385-513 which overlap fs metadata [ 143.665979][ T896] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 143.678558][ T8080] EXT4-fs (loop8): pa ffff8881186abf18: logic 16, phys. 129, len 24 [ 143.686980][ T8080] EXT4-fs error (device loop8): ext4_mb_release_inode_pa:4881: group 0, free 0, pa_free 8 [ 143.733314][ T2457] EXT4-fs (loop8): unmounting filesystem. [ 143.849127][ T8117] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3151'. [ 143.861576][ T896] usb 8-1: New USB device found, idVendor=0b95, idProduct=772b, bcdDevice=a2.4c [ 143.876205][ T896] usb 8-1: New USB device strings: Mfr=24, Product=2, SerialNumber=3 [ 143.898988][ T896] usb 8-1: Product: syz [ 143.903954][ T896] usb 8-1: Manufacturer: syz [ 143.909409][ T896] usb 8-1: SerialNumber: syz [ 143.918037][ T896] usb 8-1: config 0 descriptor?? [ 144.104346][ T8120] loop4: detected capacity change from 0 to 40427 [ 144.123153][ T8120] F2FS-fs (loop4): invalid crc value [ 144.157752][ T8120] F2FS-fs (loop4): Found nat_bits in checkpoint [ 144.199507][ T8120] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 144.265557][ T8150] overlayfs: failed to clone upperpath [ 144.332811][ T896] asix 8-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 144.359231][ T896] asix: probe of 8-1:0.0 failed with error -71 [ 144.378681][ T896] usb 8-1: USB disconnect, device number 17 [ 144.409419][ T8120] syz.4.3152: attempt to access beyond end of device [ 144.409419][ T8120] loop4: rw=2049, sector=40424, nr_sectors = 8 limit=40427 [ 144.646915][ T39] uclogic 0003:256C:006D.0028: failed retrieving string descriptor #100: -71 [ 144.659096][ T39] uclogic 0003:256C:006D.0028: failed retrieving pen parameters: -71 [ 144.673956][ T39] uclogic 0003:256C:006D.0028: failed probing pen v1 parameters: -71 [ 144.689129][ T39] uclogic 0003:256C:006D.0028: failed probing parameters: -71 [ 144.702646][ T39] uclogic: probe of 0003:256C:006D.0028 failed with error -71 [ 144.723448][ T39] usb 7-1: USB disconnect, device number 17 [ 144.946023][ T8181] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 145.181810][ T8191] random: crng reseeded on system resumption [ 145.258930][ T8187] loop7: detected capacity change from 0 to 40427 [ 145.276690][ T8187] F2FS-fs (loop7): invalid crc value [ 145.319995][ T8187] F2FS-fs (loop7): Found nat_bits in checkpoint [ 145.336034][ T6] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 145.363842][ T8187] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 145.470607][ T8215] netlink: 96 bytes leftover after parsing attributes in process `syz.6.3192'. [ 145.525972][ T6] usb 5-1: Using ep0 maxpacket: 32 [ 145.533832][ T6] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 145.586151][ T6] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 145.606106][ T6] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 145.615803][ T6] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.636608][ T6] usb 5-1: config 0 descriptor?? [ 145.683752][ T8187] syz.7.3179: attempt to access beyond end of device [ 145.683752][ T8187] loop7: rw=2049, sector=40424, nr_sectors = 8 limit=40427 [ 145.739912][ T8238] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3202'. [ 145.812170][ T8247] loop6: detected capacity change from 0 to 256 [ 145.834830][ T8247] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 145.987581][ T8255] device bridge0 entered promiscuous mode [ 145.996992][ T8255] device macsec1 entered promiscuous mode [ 146.050065][ T8264] netlink: 'syz.7.3214': attribute type 12 has an invalid length. [ 146.051527][ T6] savu 0003:1E7D:2D5A.0029: hiddev96,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.4-1/input0 [ 146.074236][ T8264] netlink: 'syz.7.3214': attribute type 29 has an invalid length. [ 146.092455][ T8264] netlink: 148 bytes leftover after parsing attributes in process `syz.7.3214'. [ 146.121899][ T8264] netlink: 'syz.7.3214': attribute type 1 has an invalid length. [ 146.146529][ T8264] netlink: 'syz.7.3214': attribute type 2 has an invalid length. [ 146.165627][ T8264] netlink: 39 bytes leftover after parsing attributes in process `syz.7.3214'. [ 146.336804][ T19] usb 5-1: USB disconnect, device number 6 [ 146.385214][ T8291] loop7: detected capacity change from 0 to 512 [ 146.392277][ T6] usb 9-1: new full-speed USB device number 16 using dummy_hcd [ 146.429588][ T8291] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 146.465703][ T7740] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 146.480891][ T7740] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 1 with error 28 [ 146.493827][ T7740] EXT4-fs (loop7): This should not happen!! Data will be lost [ 146.493827][ T7740] [ 146.503557][ T7740] EXT4-fs (loop7): Total free blocks count 0 [ 146.511249][ T7740] EXT4-fs (loop7): Free/Dirty block details [ 146.520134][ T7740] EXT4-fs (loop7): free_blocks=65280 [ 146.525450][ T7740] EXT4-fs (loop7): dirty_blocks=1 [ 146.538485][ T7740] EXT4-fs (loop7): Block reservation details [ 146.546415][ T7740] EXT4-fs (loop7): i_reserved_data_blocks=1 [ 146.561430][ T1862] EXT4-fs (loop7): unmounting filesystem. [ 146.577316][ T6] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 146.588551][ T6] usb 9-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 146.598222][ T6] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.611334][ T6] usb 9-1: config 0 descriptor?? [ 147.007307][ T8345] loop7: detected capacity change from 0 to 512 [ 147.026330][ T8345] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 147.037896][ T6] uclogic 0003:5543:0522.002A: unbalanced delimiter at end of report description [ 147.056301][ T6] uclogic 0003:5543:0522.002A: parse failed [ 147.066485][ T6] uclogic: probe of 0003:5543:0522.002A failed with error -22 [ 147.084042][ T8345] EXT4-fs (loop7): 1 truncate cleaned up [ 147.090331][ T8345] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 147.114133][ T1862] EXT4-fs (loop7): unmounting filesystem. [ 147.246072][ T19] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 147.254915][ T60] usb 9-1: USB disconnect, device number 16 [ 147.279126][ T8375] netlink: 88 bytes leftover after parsing attributes in process `syz.4.3261'. [ 147.288317][ T8375] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3261'. [ 147.446063][ T19] usb 7-1: Using ep0 maxpacket: 16 [ 147.452669][ T19] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 147.464289][ T19] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 147.474442][ T19] usb 7-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 147.484522][ T19] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.493833][ T19] usb 7-1: config 0 descriptor?? [ 147.706014][ T39] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 147.776847][ T8392] netlink: 224 bytes leftover after parsing attributes in process `syz.8.3268'. [ 147.786395][ T8392] netlink: 224 bytes leftover after parsing attributes in process `syz.8.3268'. [ 147.795771][ T8392] netlink: 38 bytes leftover after parsing attributes in process `syz.8.3268'. [ 147.841985][ T8398] loop8: detected capacity change from 0 to 512 [ 147.849445][ T8398] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 147.877971][ T8398] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 147.886051][ T39] usb 5-1: Using ep0 maxpacket: 8 [ 147.899265][ T39] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 147.899514][ T8398] EXT4-fs error (device loop8): __ext4_remount:6610: comm syz.8.3271: Abort forced by user [ 147.907679][ T39] usb 5-1: config 179 has no interface number 0 [ 147.918548][ T8398] EXT4-fs (loop8): re-mounted. Quota mode: writeback. [ 147.924746][ T39] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 147.932480][ T19] hid-multitouch 0003:1FD2:6007.002B: unknown main item tag 0x0 [ 147.942547][ T39] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 147.961877][ T39] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 147.963402][ T19] hid-multitouch 0003:1FD2:6007.002B: unknown main item tag 0x0 [ 147.973352][ T39] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 147.973388][ T39] usb 5-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 147.981830][ T19] hid-multitouch 0003:1FD2:6007.002B: unknown main item tag 0x0 [ 147.991532][ T39] usb 5-1: config 179 interface 65 has no altsetting 0 [ 148.005840][ T19] hid-multitouch 0003:1FD2:6007.002B: unknown main item tag 0x0 [ 148.012921][ T39] usb 5-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 148.032338][ T19] hid-multitouch 0003:1FD2:6007.002B: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.6-1/input0 [ 148.036483][ T39] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.077392][ T39] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input26 [ 148.095831][ T2457] EXT4-fs (loop8): unmounting filesystem. [ 148.171187][ T19] usb 7-1: USB disconnect, device number 18 [ 148.339706][ T39] usb 5-1: USB disconnect, device number 7 [ 148.345581][ C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 148.354507][ T39] xpad 5-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 148.614730][ T28] audit: type=1400 audit(149.782:2453): avc: denied { write } for pid=8474 comm="syz.2.3306" name="file0" dev="tmpfs" ino=3787 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 148.637254][ T28] audit: type=1400 audit(149.782:2454): avc: denied { open } for pid=8474 comm="syz.2.3306" path="/725/file0" dev="tmpfs" ino=3787 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 148.664063][ T28] audit: type=1400 audit(149.782:2455): avc: denied { ioctl } for pid=8474 comm="syz.2.3306" path="/725/file0" dev="tmpfs" ino=3787 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 148.715624][ T28] audit: type=1400 audit(149.882:2456): avc: denied { mounton } for pid=8483 comm="syz.6.3309" path=2F70726F632F313333312F6E65742F70666B6579202864656C6574656429 dev="proc" ino=4026532443 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 148.827133][ T8488] loop8: detected capacity change from 0 to 32768 [ 148.998476][ T8504] loop8: detected capacity change from 0 to 512 [ 149.296610][ T19] usb 9-1: new full-speed USB device number 17 using dummy_hcd [ 149.467372][ T8550] incfs: Options parsing error. -22 [ 149.472722][ T8550] incfs: mount failed -22 [ 149.489511][ T19] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 149.501372][ T19] usb 9-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 149.510744][ T19] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.519726][ T19] usb 9-1: config 0 descriptor?? [ 149.525126][ T8506] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 149.626840][ T8559] netem: change failed [ 149.716036][ T39] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 149.897193][ T39] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 149.908415][ T39] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 149.918386][ T39] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 149.931536][ T39] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 149.940791][ T39] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.943635][ T19] hid-generic 0003:04F3:0755.002C: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.8-1/input0 [ 149.952802][ T39] usb 5-1: config 0 descriptor?? [ 150.369316][ T39] plantronics 0003:047F:FFFF.002D: No inputs registered, leaving [ 150.380336][ T39] plantronics 0003:047F:FFFF.002D: hiddev96,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 150.474809][ T28] audit: type=1400 audit(151.642:2457): avc: denied { lock } for pid=8591 comm="syz.2.3354" path="socket:[52612]" dev="sockfs" ino=52612 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 150.541478][ T28] audit: type=1400 audit(151.712:2458): avc: denied { read } for pid=8600 comm="syz.2.3358" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 150.612098][ T8608] syz.7.3361[8608] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 150.612169][ T8608] syz.7.3361[8608] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 150.706953][ T39] usb 9-1: USB disconnect, device number 17 [ 150.946055][ T1737] usb 8-1: new full-speed USB device number 18 using dummy_hcd [ 151.127109][ T1737] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 151.138116][ T1737] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 7 [ 151.151240][ T1737] usb 8-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 151.160354][ T1737] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.169642][ T1737] usb 8-1: config 0 descriptor?? [ 151.175709][ T8614] raw-gadget.2 gadget.7: fail, usb_ep_enable returned -22 [ 151.385027][ T8614] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 151.394613][ T8614] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 151.405143][ T1737] usbhid 8-1:0.0: can't add hid device: -71 [ 151.411273][ T1737] usbhid: probe of 8-1:0.0 failed with error -71 [ 151.419463][ T1737] usb 8-1: USB disconnect, device number 18 [ 151.995489][ T8715] __nla_validate_parse: 2 callbacks suppressed [ 151.995503][ T8715] netlink: 51 bytes leftover after parsing attributes in process `syz.8.3409'. [ 152.010948][ T1737] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 152.011730][ T8716] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3404'. [ 152.058887][ T8722] loop8: detected capacity change from 0 to 512 [ 152.069021][ T8722] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 152.095567][ T8722] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 152.113796][ T2457] EXT4-fs (loop8): unmounting filesystem. [ 152.118606][ T8727] overlayfs: workdir and upperdir must reside under the same mount [ 152.149968][ T8731] loop7: detected capacity change from 0 to 16384 [ 152.206019][ T1737] usb 8-1: Using ep0 maxpacket: 32 [ 152.217815][ T1737] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 129, changing to 11 [ 152.243139][ T1737] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 7 [ 152.256464][ T1737] usb 8-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 152.281558][ T1737] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.297840][ T8731] I/O error, dev loop7, sector 5136 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 2 [ 152.308415][ T1737] usb 8-1: config 0 descriptor?? [ 152.323381][ T1737] hub 8-1:0.0: bad descriptor, ignoring hub [ 152.341395][ T1737] hub: probe of 8-1:0.0 failed with error -5 [ 152.436454][ T39] usb 5-1: USB disconnect, device number 8 [ 152.450122][ T8747] loop4: detected capacity change from 0 to 256 [ 152.539395][ T8751] loop6: detected capacity change from 0 to 1024 [ 152.593729][ T8751] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 152.650852][ T1248] EXT4-fs (loop6): unmounting filesystem. [ 152.710444][ T8757] hub 6-0:1.0: USB hub found [ 152.715214][ T8757] hub 6-0:1.0: 1 port detected [ 152.723431][ T1737] hid-multitouch 0003:0EEF:72C4.002E: hidraw0: USB HID v0.00 Device [HID 0eef:72c4] on usb-dummy_hcd.7-1/input0 [ 152.772900][ T8761] bridge0: port 3(syz_tun) entered blocking state [ 152.795760][ T8761] bridge0: port 3(syz_tun) entered disabled state [ 152.803401][ T8761] device syz_tun entered promiscuous mode [ 152.812343][ T8761] bridge0: port 3(syz_tun) entered blocking state [ 152.818870][ T8761] bridge0: port 3(syz_tun) entered forwarding state [ 152.829478][ T8761] device syz_tun left promiscuous mode [ 152.840998][ T8761] bridge0: port 3(syz_tun) entered disabled state [ 152.873938][ T8761] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 152.889547][ T8761] device bridge_slave_0 left promiscuous mode [ 152.902161][ T8761] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.920459][ T8761] device bridge_slave_1 left promiscuous mode [ 152.939445][ T8761] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.995848][ T8769] netlink: 64 bytes leftover after parsing attributes in process `syz.6.3430'. [ 153.067132][ T896] usb 8-1: USB disconnect, device number 19 [ 153.106036][ T39] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 153.120028][ T8776] loop6: detected capacity change from 0 to 1024 [ 153.147392][ T8776] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 153.296685][ T39] usb 5-1: Using ep0 maxpacket: 16 [ 153.310175][ T39] usb 5-1: config 0 has no interfaces? [ 153.315868][ T39] usb 5-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=56.88 [ 153.332161][ T39] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.356143][ T39] usb 5-1: config 0 descriptor?? [ 153.528416][ T8798] loop7: detected capacity change from 0 to 16 [ 153.556180][ T8798] erofs: (device loop7): mounted with root inode @ nid 36. [ 153.568650][ T8798] erofs: (device loop7): z_erofs_readahead: readahead error at page 2 @ nid 89 [ 153.581974][ T896] usb 5-1: USB disconnect, device number 9 [ 153.600312][ T8798] syz.7.3442: attempt to access beyond end of device [ 153.600312][ T8798] loop7: rw=524288, sector=524296, nr_sectors = 8 limit=16 [ 153.633496][ T8798] syz.7.3442: attempt to access beyond end of device [ 153.633496][ T8798] loop7: rw=0, sector=524296, nr_sectors = 8 limit=16 [ 153.662585][ T8798] syz.7.3442: attempt to access beyond end of device [ 153.662585][ T8798] loop7: rw=0, sector=524296, nr_sectors = 8 limit=16 [ 153.689134][ T8798] erofs: (device loop7): z_erofs_lz4_decompress_mem: failed to decompress -5 in[4096, 0] out[4100] [ 153.773419][ T8810] user requested TSC rate below hardware speed [ 154.042044][ T28] audit: type=1326 audit(155.212:2459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8835 comm="syz.8.3460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58fcf8ebe9 code=0x7ffc0000 [ 154.067686][ T28] audit: type=1326 audit(155.212:2460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8835 comm="syz.8.3460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f58fcf8ebe9 code=0x7ffc0000 [ 154.109517][ T28] audit: type=1326 audit(155.212:2461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8835 comm="syz.8.3460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58fcf8ebe9 code=0x7ffc0000 [ 154.145787][ T28] audit: type=1326 audit(155.212:2462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8835 comm="syz.8.3460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f58fcf8ebe9 code=0x7ffc0000 [ 154.195577][ T28] audit: type=1326 audit(155.212:2463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8835 comm="syz.8.3460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58fcf8ebe9 code=0x7ffc0000 [ 154.223494][ T28] audit: type=1326 audit(155.212:2464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8835 comm="syz.8.3460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f58fcf8ebe9 code=0x7ffc0000 [ 154.247087][ T1248] EXT4-fs (loop6): unmounting filesystem. [ 154.254820][ T28] audit: type=1326 audit(155.212:2465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8835 comm="syz.8.3460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58fcf8ebe9 code=0x7ffc0000 [ 154.330994][ T28] audit: type=1326 audit(155.212:2466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8835 comm="syz.8.3460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f58fcf8ebe9 code=0x7ffc0000 [ 154.355697][ T8865] loop6: detected capacity change from 0 to 256 [ 154.368264][ T8865] exFAT-fs (loop6): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 154.371195][ T28] audit: type=1326 audit(155.212:2467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8835 comm="syz.8.3460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58fcf8ebe9 code=0x7ffc0000 [ 154.414694][ T28] audit: type=1326 audit(155.212:2468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8835 comm="syz.8.3460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=281 compat=0 ip=0x7f58fcf8ebe9 code=0x7ffc0000 [ 154.646849][ T8893] fuse: Bad value for 'fd' [ 154.712282][ T8909] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 154.722841][ T8909] IPv6: ADDRCONF(NETDEV_CHANGE): ipip0: link becomes ready [ 154.766046][ T1737] usb 8-1: new full-speed USB device number 20 using dummy_hcd [ 154.896318][ T8935] SELinux: Context system_u:object_r:dhcpc_state_t:s0 is not valid (left unmapped). [ 154.926078][ T6] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 154.947040][ T1737] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 154.958322][ T1737] usb 8-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 154.968590][ T1737] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.985349][ T1737] usb 8-1: config 0 descriptor?? [ 155.026526][ T8946] SELinux: policydb magic number 0x80 does not match expected magic number 0xf97cff8c [ 155.036946][ T8946] SELinux: failed to load policy [ 155.066289][ T8948] netlink: 'syz.8.3513': attribute type 4 has an invalid length. [ 155.106070][ T6] usb 7-1: Using ep0 maxpacket: 16 [ 155.117385][ T6] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 155.128751][ T6] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 155.142266][ T6] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 155.151910][ T6] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.170353][ T6] usb 7-1: config 0 descriptor?? [ 155.231886][ T8967] netlink: 'syz.2.3518': attribute type 4 has an invalid length. [ 155.409348][ T1737] uclogic 0003:5543:0522.002F: unbalanced delimiter at end of report description [ 155.419217][ T1737] uclogic 0003:5543:0522.002F: parse failed [ 155.425634][ T1737] uclogic: probe of 0003:5543:0522.002F failed with error -22 [ 155.580414][ T6] HID 045e:07da: Invalid code 65791 type 1 [ 155.589005][ T6] input: HID 045e:07da as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:045E:07DA.0030/input/input27 [ 155.605819][ T6] microsoft 0003:045E:07DA.0030: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.6-1/input0 [ 155.618629][ T896] usb 8-1: USB disconnect, device number 20 [ 155.985355][ T896] usb 7-1: USB disconnect, device number 19 acpid: input device has been disconnected, fd 3 [ 158.625206][ T9099] netlink: 'syz.4.3581': attribute type 4 has an invalid length. [ 158.634021][ T9099] netlink: 'syz.4.3581': attribute type 4 has an invalid length. [ 158.681283][ T9106] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3593'. [ 158.893422][ T9128] loop4: detected capacity change from 0 to 256 [ 158.907519][ T9128] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d) [ 159.233052][ T9150] incfs: iterate_incfs_dir / -22 [ 159.238727][ T9150] incfs: iterate_incfs_dir / -22 [ 159.279967][ T9146] loop4: detected capacity change from 0 to 40427 [ 159.282998][ T9152] netlink: 'syz.7.3605': attribute type 12 has an invalid length. [ 159.294987][ T9146] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 159.302757][ T9146] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 159.312590][ T9152] netlink: 'syz.7.3605': attribute type 29 has an invalid length. [ 159.320757][ T9152] netlink: 148 bytes leftover after parsing attributes in process `syz.7.3605'. [ 159.330469][ T9146] F2FS-fs (loop4): invalid crc value [ 159.346929][ T9146] F2FS-fs (loop4): Found nat_bits in checkpoint [ 159.374974][ T9162] netlink: 96 bytes leftover after parsing attributes in process `syz.7.3608'. [ 159.400475][ T9146] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 159.407727][ T9146] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 159.424425][ T28] kauditd_printk_skb: 11 callbacks suppressed [ 159.424442][ T28] audit: type=1400 audit(673.594:2480): avc: denied { read } for pid=9166 comm="syz.8.3611" name="msr" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 159.465756][ T28] audit: type=1400 audit(673.594:2481): avc: denied { open } for pid=9166 comm="syz.8.3611" path="/dev/cpu/0/msr" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 159.495740][ T9169] loop6: detected capacity change from 0 to 1024 [ 159.805985][ T334] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 159.953816][ T9217] 9pnet: p9_errstr2errno: server reported unknown error 1844674 [ 159.987745][ T39] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 159.996912][ T334] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 160.013584][ T334] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 160.031372][ T334] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 160.047594][ T334] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 160.059474][ T334] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.069670][ T334] usb 7-1: config 0 descriptor?? [ 160.134067][ T9238] loop8: detected capacity change from 0 to 1024 [ 160.146196][ T9238] EXT4-fs: Ignoring removed nomblk_io_submit option [ 160.155031][ T9238] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 160.174079][ T9238] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 160.184138][ T39] usb 8-1: Using ep0 maxpacket: 16 [ 160.186123][ T9238] System zones: 0-1, 3-36 [ 160.193740][ T39] usb 8-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 160.195565][ T9238] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 160.204506][ T39] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.228841][ T9242] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 160.244876][ T39] usb 8-1: Product: syz [ 160.245839][ T2457] EXT4-fs (loop8): unmounting filesystem. [ 160.249819][ T39] usb 8-1: Manufacturer: syz [ 160.260988][ T39] usb 8-1: SerialNumber: syz [ 160.285483][ T39] usb 8-1: config 0 descriptor?? [ 160.292800][ T39] ftdi_sio 8-1:0.0: FTDI USB Serial Device converter detected [ 160.302681][ T39] usb 8-1: Detected FT-X [ 160.482606][ T334] plantronics 0003:047F:FFFF.0031: No inputs registered, leaving [ 160.491710][ T334] plantronics 0003:047F:FFFF.0031: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 160.511311][ T39] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 160.920580][ T39] ftdi_sio 8-1:0.0: GPIO initialisation failed: -71 [ 160.927903][ T39] usb 8-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 160.940633][ T39] usb 8-1: USB disconnect, device number 21 [ 160.947520][ T39] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 160.957183][ T39] ftdi_sio 8-1:0.0: device disconnected [ 161.068091][ T9305] loop8: detected capacity change from 0 to 512 [ 161.082305][ T9305] EXT4-fs error (device loop8): ext4_orphan_get:1400: inode #15: comm syz.8.3670: casefold flag without casefold feature [ 161.095708][ T9305] EXT4-fs error (device loop8): ext4_orphan_get:1405: comm syz.8.3670: couldn't read orphan inode 15 (err -117) [ 161.108215][ T9305] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 161.127242][ T2457] EXT4-fs (loop8): unmounting filesystem. [ 161.210517][ T9318] fuse: Bad value for 'fd' [ 161.257149][ T9326] loop8: detected capacity change from 0 to 512 [ 161.273454][ T9326] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 161.285750][ T9326] EXT4-fs (loop8): 1 truncate cleaned up [ 161.292225][ T9326] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 161.309865][ T9326] EXT4-fs (loop8): shut down requested (0) [ 161.323243][ T2457] EXT4-fs (loop8): unmounting filesystem. [ 161.708426][ T9373] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 161.806094][ T9386] netlink: 96 bytes leftover after parsing attributes in process `syz.4.3704'. [ 161.912098][ T9400] SELinux: ebitmap: start bit 0 comes after start bit 0 [ 161.920538][ T9400] SELinux: failed to load policy [ 162.346932][ T9432] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 162.362207][ T9432] FAT-fs (loop9): unable to read boot sector [ 162.437792][ T9443] loop4: detected capacity change from 0 to 16 [ 162.452341][ T9443] erofs: (device loop4): mounted with root inode @ nid 36. [ 162.490641][ T9443] erofs: (device loop4): z_erofs_do_map_blocks: invalid logical cluster 0 at nid 36 [ 162.501391][ T9447] futex_wake_op: syz.7.3734 tries to shift op by 32; fix this program [ 162.510982][ T9443] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -23 in[64, 4032] out[172] [ 162.531613][ T9443] erofs: (device loop4): z_erofs_read_folio: failed to read, err [-117] [ 162.564592][ T9443] erofs: (device loop4): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 162.614576][ T9457] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3739'. [ 162.616650][ T1737] usb 7-1: USB disconnect, device number 20 [ 162.721474][ T9467] loop7: detected capacity change from 0 to 16 [ 162.767264][ T9467] erofs: (device loop7): mounted with root inode @ nid 36. [ 162.767733][ T9469] loop8: detected capacity change from 0 to 1024 [ 162.821501][ T9469] EXT4-fs: Ignoring removed bh option [ 162.841034][ T9475] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3747'. [ 162.852745][ T9469] EXT4-fs error (device loop8): ext4_map_blocks:635: inode #3: block 2: comm +}[@: lblock 2 mapped to illegal pblock 2 (length 1) [ 162.867819][ T9469] Quota error (device loop8): qtree_write_dquot: dquota write failed [ 162.881907][ T9469] EXT4-fs error (device loop8): ext4_map_blocks:635: inode #3: block 48: comm +}[@: lblock 0 mapped to illegal pblock 48 (length 1) [ 162.898722][ T9469] Quota error (device loop8): v2_write_file_info: Can't write info structure [ 162.907847][ T9469] EXT4-fs error (device loop8): ext4_acquire_dquot:6801: comm +}[@: Failed to acquire dquot type 0 [ 162.919841][ T9469] EXT4-fs error (device loop8) in ext4_reserve_inode_write:5917: Corrupt filesystem [ 162.930457][ T9469] EXT4-fs error (device loop8): ext4_evict_inode:279: inode #11: comm +}[@: mark_inode_dirty error [ 162.946201][ T9469] EXT4-fs warning (device loop8): ext4_evict_inode:282: couldn't mark inode dirty (err -117) [ 162.959785][ T9469] EXT4-fs (loop8): 1 orphan inode deleted [ 162.968853][ T9469] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 162.980260][ T7921] EXT4-fs error (device loop8): ext4_map_blocks:635: inode #3: block 1: comm kworker/u4:313: lblock 1 mapped to illegal pblock 1 (length 1) [ 163.017417][ T7921] Quota error (device loop8): remove_tree: Can't read quota data block 1 [ 163.026480][ T7921] EXT4-fs error (device loop8): ext4_release_dquot:6837: comm kworker/u4:313: Failed to release dquot type 0 [ 163.039332][ T9469] EXT4-fs (loop8): unmounting filesystem. [ 163.045769][ T9469] EXT4-fs error (device loop8): __ext4_get_inode_loc:4509: comm +}[@: Invalid inode table block 1 in block_group 0 [ 163.059155][ T9469] EXT4-fs error (device loop8) in ext4_reserve_inode_write:5917: Corrupt filesystem [ 163.071587][ T9469] EXT4-fs error (device loop8): ext4_quota_off:7107: inode #3: comm +}[@: mark_inode_dirty error [ 163.155691][ T28] audit: type=1400 audit(677.324:2482): avc: denied { read } for pid=9487 comm="syz.6.3753" name="file0" dev="tmpfs" ino=3570 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 163.191489][ T28] audit: type=1326 audit(677.364:2483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9489 comm="syz.4.3754" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f236ff8ebe9 code=0x0 [ 163.198845][ T9484] SELinux: failed to load policy [ 163.603712][ T28] audit: type=1400 audit(677.774:2484): avc: denied { append } for pid=9541 comm="syz.6.3778" name="usbmon4" dev="devtmpfs" ino=171 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 163.605746][ T9521] loop7: detected capacity change from 0 to 40427 [ 163.635221][ T9521] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12 [ 163.643335][ T9521] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 163.652943][ T9521] F2FS-fs (loop7): invalid crc value [ 163.662975][ T9521] F2FS-fs (loop7): Found nat_bits in checkpoint [ 163.692970][ T9521] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 163.703490][ T9521] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 163.900371][ T9581] loop6: detected capacity change from 0 to 256 [ 163.910435][ T9581] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 163.922085][ T9581] exFAT-fs (loop6): Medium has reported failures. Some data may be lost. [ 163.935875][ T9581] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 163.953554][ T28] audit: type=1400 audit(678.124:2485): avc: denied { watch } for pid=9580 comm="syz.6.3794" path="/694/file0" dev="loop6" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 164.124005][ T9521] syz.7.3769: attempt to access beyond end of device [ 164.124005][ T9521] loop7: rw=2049, sector=40424, nr_sectors = 8 limit=40427 [ 164.306074][ T24] usb 5-1: new low-speed USB device number 10 using dummy_hcd [ 164.497657][ T24] usb 5-1: unable to get BOS descriptor or descriptor too short [ 164.506604][ T24] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 164.515562][ T24] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 164.526133][ T24] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 164.537386][ T24] usb 5-1: string descriptor 0 read error: -22 [ 164.543710][ T24] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 164.552890][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.562816][ T24] usb 5-1: 0:2 : does not exist [ 164.600887][ T9611] tipc: Started in network mode [ 164.605798][ T9611] tipc: Node identity ac1414bb, cluster identity 4711 [ 164.612809][ T9611] tipc: Enabling of bearer rejected, failed to enable media [ 164.653962][ T9617] xt_hashlimit: size too large, truncated to 1048576 [ 164.773261][ T24] usb 5-1: USB disconnect, device number 10 [ 164.816384][ T9629] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3816'. [ 164.884782][ T9640] virtiofs: Unknown parameter 'always' [ 164.890993][ T9640] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3821'. [ 164.915791][ T28] audit: type=1400 audit(679.084:2486): avc: denied { write } for pid=9642 comm="syz.8.3823" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 164.993491][ T9651] incfs: Options parsing error. -22 [ 164.999029][ T9651] incfs: mount failed -22 [ 165.018619][ T9655] tipc: Started in network mode [ 165.023593][ T9655] tipc: Node identity 4, cluster identity 4711 [ 165.029956][ T9655] tipc: Node number set to 4 [ 165.057517][ T9659] netlink: 80 bytes leftover after parsing attributes in process `syz.2.3830'. [ 165.067715][ T9659] netlink: 80 bytes leftover after parsing attributes in process `syz.2.3830'. [ 165.077876][ T9659] netlink: 80 bytes leftover after parsing attributes in process `syz.2.3830'. [ 165.170645][ T9675] tmpfs: Unknown parameter 'usrquota' [ 165.254472][ T9677] loop7: detected capacity change from 0 to 2048 [ 165.311321][ T9683] netlink: 96 bytes leftover after parsing attributes in process `syz.7.3841'. [ 165.391586][ T9697] syz_tun: refused to change device tx_queue_len [ 165.464451][ T9713] syz.7.3856[9713] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 165.464524][ T9713] syz.7.3856[9713] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 165.516026][ T19] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 165.632786][ T9719] loop7: detected capacity change from 0 to 40427 [ 165.642184][ T9719] F2FS-fs (loop7): Wrong segment_count / block_count (31 > 0) [ 165.650023][ T9719] F2FS-fs (loop7): Can't find valid F2FS filesystem in 2th superblock [ 165.660741][ T9719] F2FS-fs (loop7): invalid crc value [ 165.667128][ T9719] F2FS-fs (loop7): Found nat_bits in checkpoint [ 165.690467][ T9719] F2FS-fs (loop7): Try to recover 2th superblock, ret: 0 [ 165.697753][ T9719] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 165.707482][ T19] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 165.718524][ T19] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 165.724446][ T9719] syz.7.3858: attempt to access beyond end of device [ 165.724446][ T9719] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 165.728635][ T19] usb 9-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 165.743266][ T9719] syz.7.3858: attempt to access beyond end of device [ 165.743266][ T9719] loop7: rw=2049, sector=45128, nr_sectors = 8 limit=40427 [ 165.751512][ T19] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.775012][ T19] usb 9-1: config 0 descriptor?? [ 166.011311][ T9745] loop6: detected capacity change from 0 to 512 [ 166.038198][ T9745] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 166.055670][ T28] audit: type=1400 audit(680.224:2487): avc: denied { mounton } for pid=9744 comm="syz.6.3868" path="/705/file0/bus" dev="loop6" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 166.078542][ T28] audit: type=1400 audit(680.224:2488): avc: denied { read } for pid=9744 comm="syz.6.3868" name="file0" dev="overlay" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 166.102918][ T28] audit: type=1400 audit(680.284:2489): avc: denied { unlink } for pid=1248 comm="syz-executor" name="file0" dev="loop6" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 166.127086][ T1248] EXT4-fs (loop6): unmounting filesystem. [ 166.158926][ T9754] input: syz1 as /devices/virtual/input/input28 [ 166.331683][ T28] audit: type=1400 audit(680.504:2490): avc: denied { mount } for pid=9773 comm="syz.6.3880" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 166.390681][ T28] audit: type=1400 audit(680.524:2491): avc: denied { mounton } for pid=9773 comm="syz.6.3880" path="/712/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 166.414337][ T28] audit: type=1400 audit(680.524:2492): avc: denied { read } for pid=9773 comm="syz.6.3880" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 166.456100][ T28] audit: type=1400 audit(680.524:2493): avc: denied { open } for pid=9773 comm="syz.6.3880" path="/712/file0" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 166.516632][ T28] audit: type=1400 audit(680.654:2494): avc: denied { unmount } for pid=1248 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 166.566982][ T9785] loop4: detected capacity change from 0 to 512 [ 166.585541][ T9785] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 166.604716][ T9785] EXT4-fs (loop4): 1 truncate cleaned up [ 166.625230][ T9785] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 166.668744][ T19] usb 9-1: string descriptor 0 read error: -71 [ 166.683141][ T19] uclogic 0003:256C:006D.0032: failed retrieving string descriptor #200: -71 [ 166.695838][ T5844] EXT4-fs (loop4): unmounting filesystem. [ 166.701790][ T19] uclogic 0003:256C:006D.0032: failed retrieving pen parameters: -71 [ 166.710611][ T19] uclogic 0003:256C:006D.0032: failed probing pen v2 parameters: -71 [ 166.718936][ T19] uclogic 0003:256C:006D.0032: failed probing parameters: -71 [ 166.726615][ T19] uclogic: probe of 0003:256C:006D.0032 failed with error -71 [ 166.742361][ T28] audit: type=1400 audit(680.854:2495): avc: denied { read } for pid=9784 comm="syz.4.3894" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop4" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 166.832309][ T19] usb 9-1: USB disconnect, device number 18 [ 166.841149][ T9798] syz.4.3887[9798] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 166.841225][ T9798] syz.4.3887[9798] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 167.207350][ T9830] loop7: detected capacity change from 0 to 512 [ 167.288994][ T9833] loop8: detected capacity change from 0 to 512 [ 167.303172][ T9834] loop7: detected capacity change from 0 to 1024 [ 167.309961][ T9833] EXT4-fs (loop8): Test dummy encryption mode enabled [ 167.317056][ T9833] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 167.336667][ T9833] EXT4-fs error (device loop8): ext4_orphan_get:1426: comm syz.8.3905: bad orphan inode 131083 [ 167.355475][ T456] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 167.376347][ T9833] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 167.424005][ T2457] EXT4-fs (loop8): unmounting filesystem. [ 167.438132][ T9840] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 167.857082][ T9906] loop7: detected capacity change from 0 to 1024 [ 167.872106][ T9906] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 167.995998][ T6] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 168.076005][ T334] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 168.175999][ T6] usb 9-1: Using ep0 maxpacket: 16 [ 168.183929][ T6] usb 9-1: unable to get BOS descriptor or descriptor too short [ 168.193236][ T6] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 168.201682][ T6] usb 9-1: can't read configurations, error -71 [ 168.257136][ T334] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 168.268222][ T334] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 168.277672][ T334] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.291290][ T334] usb 5-1: config 0 descriptor?? [ 168.716265][ T334] lua 0003:1E7D:2C2E.0033: collection stack underflow [ 168.725702][ T334] lua 0003:1E7D:2C2E.0033: item 0 4 0 12 parsing failed [ 168.733399][ T334] lua 0003:1E7D:2C2E.0033: parse failed [ 168.739265][ T334] lua: probe of 0003:1E7D:2C2E.0033 failed with error -22 [ 168.896622][ T1862] EXT4-fs (loop7): unmounting filesystem. [ 168.917658][ T39] usb 5-1: USB disconnect, device number 11 [ 168.925366][ T9954] loop7: detected capacity change from 0 to 1024 [ 168.938318][ T9954] EXT4-fs: Ignoring removed nomblk_io_submit option [ 168.950063][ T9954] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 168.967916][ T9954] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 168.976390][ T9954] System zones: 0-1, 3-36 [ 168.981767][ T9954] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 169.022611][ T1862] EXT4-fs (loop7): unmounting filesystem. [ 169.248231][ T9976] loop7: detected capacity change from 0 to 40427 [ 169.263329][ T9976] F2FS-fs (loop7): fault_injection options not supported [ 169.277095][ T9976] F2FS-fs (loop7): invalid crc value [ 169.285730][ T9976] F2FS-fs (loop7): Found nat_bits in checkpoint [ 169.327251][ T9976] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 169.486544][ T1862] syz-executor: attempt to access beyond end of device [ 169.486544][ T1862] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 169.746534][T10051] binder: 10050:10051 ioctl c018620b 200000000000 returned -14 [ 169.819791][T10056] kvm [10055]: vcpu2, guest rIP: 0x9114 disabled perfctr wrmsr: 0xc2 data 0x7 [ 169.829005][T10056] kvm [10055]: vcpu2, guest rIP: 0x9114 disabled perfctr wrmsr: 0xc1 data 0x7 [ 169.929541][T10067] xt_hashlimit: size too large, truncated to 1048576 [ 169.946221][ T24] usb 7-1: new full-speed USB device number 21 using dummy_hcd [ 170.147143][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 170.158270][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 170.168554][ T24] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 170.177635][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.193303][ T24] usb 7-1: config 0 descriptor?? [ 170.228811][T10080] futex_wake_op: syz.8.4013 tries to shift op by 32; fix this program [ 170.497311][T10112] loop4: detected capacity change from 0 to 512 [ 170.504102][T10112] EXT4-fs: Ignoring removed i_version option [ 170.510910][T10112] EXT4-fs: Ignoring removed nobh option [ 170.527589][T10112] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 170.547592][ T5844] EXT4-fs (loop4): unmounting filesystem. [ 170.619609][ T24] savu 0003:1E7D:2D5A.0034: hiddev96,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.6-1/input0 [ 170.666393][ T1737] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 170.739536][T10139] syz.7.4039[10139] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 170.739601][T10139] syz.7.4039[10139] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 170.830789][ T334] usb 7-1: USB disconnect, device number 21 [ 170.866029][ T1737] usb 9-1: Using ep0 maxpacket: 32 [ 170.872585][ T1737] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 32, changing to 9 [ 170.895395][ T1737] usb 9-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 170.912375][ T1737] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.927886][T10167] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4051'. [ 170.937271][T10167] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4051'. [ 170.941175][ T1737] usb 9-1: config 0 descriptor?? [ 170.954145][ T1737] hub 9-1:0.0: USB hub found [ 170.974986][ T7679] Bluetooth: hci0: Frame reassembly failed (-84) [ 171.153087][ T1737] hub 9-1:0.0: 1 port detected [ 171.344053][T10181] xt_hashlimit: size too large, truncated to 1048576 [ 171.397317][T10182] loop6: detected capacity change from 0 to 128 [ 171.888594][T10208] loop4: detected capacity change from 0 to 512 [ 171.936654][T10208] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 171.962961][T10208] EXT4-fs error (device loop4): ext4_do_update_inode:5256: inode #2: comm syz.4.4068: corrupted inode contents [ 171.975482][T10208] EXT4-fs error (device loop4): ext4_dirty_inode:6121: inode #2: comm syz.4.4068: mark_inode_dirty error [ 171.988069][ T1737] hub 9-1:0.0: hub_ext_port_status failed (err = -71) [ 171.995779][ T1737] usb 9-1: USB disconnect, device number 21 [ 172.013429][T10208] EXT4-fs error (device loop4): ext4_do_update_inode:5256: inode #2: comm syz.4.4068: corrupted inode contents [ 172.031829][T10208] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #2: comm syz.4.4068: mark_inode_dirty error [ 172.050021][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 172.050037][ T28] audit: type=1400 audit(686.224:2499): avc: denied { create } for pid=10207 comm="syz.4.4068" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 172.079885][T10208] EXT4-fs error (device loop4): ext4_do_update_inode:5256: inode #2: comm syz.4.4068: corrupted inode contents [ 172.093940][T10208] EXT4-fs error (device loop4): ext4_dirty_inode:6121: inode #2: comm syz.4.4068: mark_inode_dirty error [ 172.109457][T10208] EXT4-fs error (device loop4): ext4_do_update_inode:5256: inode #2: comm syz.4.4068: corrupted inode contents [ 172.153146][ T5844] EXT4-fs (loop4): unmounting filesystem. [ 172.168079][T10221] loop6: detected capacity change from 0 to 1024 [ 172.196692][T10221] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 172.271509][ T28] audit: type=1400 audit(686.444:2500): avc: denied { mounton } for pid=10220 comm="syz.6.4073" path="/751/file0/file1" dev="loop6" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 172.379022][T10234] loop4: detected capacity change from 0 to 512 [ 172.428381][ T347] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 172.534123][T10238] loop8: detected capacity change from 0 to 4096 [ 172.560435][T10238] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 172.595034][ T2457] EXT4-fs (loop8): unmounting filesystem. [ 172.898878][T10259] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4088'. [ 172.910146][T10259] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4088'. [ 172.919412][T10259] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4088'. [ 172.928571][T10259] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4088'. [ 172.996121][ T3785] Bluetooth: hci0: command 0x1003 tx timeout [ 173.002302][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 173.016408][ T1248] EXT4-fs (loop6): unmounting filesystem. [ 173.037099][T10271] syz_tun: refused to change device tx_queue_len [ 173.056581][T10275] device bridge0 entered promiscuous mode [ 173.062562][T10275] device macsec0 entered promiscuous mode [ 173.069545][T10275] bridge0: port 1(macsec0) entered blocking state [ 173.076109][T10275] bridge0: port 1(macsec0) entered disabled state [ 173.087230][T10275] device bridge0 left promiscuous mode [ 173.192332][T10294] netlink: 24 bytes leftover after parsing attributes in process `syz.8.4104'. [ 173.667289][T10341] syz.8.4125[10341] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 173.667359][T10341] syz.8.4125[10341] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 173.836507][ T6] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 175.195257][T10365] fuse: Bad value for 'fd' [ 175.496712][T10411] 9pnet: p9_errstr2errno: server reported unknown error @íÎhQ$I¸ñº6‚}hñEÒŒ¸i) [ 175.601499][T10429] loop4: detected capacity change from 0 to 1024 [ 175.609634][T10429] EXT4-fs (loop4): Test dummy encryption mode enabled [ 175.620644][T10429] EXT4-fs error (device loop4): ext4_quota_enable:7005: comm syz.4.4165: Bad quota inum: 15, type: 0 [ 175.632239][T10429] EXT4-fs warning (device loop4): ext4_enable_quotas:7053: Failed to enable quota tracking (type=0, err=-117, ino=15). Please run e2fsck to fix. [ 175.647962][T10429] EXT4-fs (loop4): mount failed [ 175.792266][T10461] netlink: 96 bytes leftover after parsing attributes in process `syz.2.4178'. [ 175.857444][T10473] fuse: Bad value for 'fd' [ 176.048812][T10497] loop7: detected capacity change from 0 to 512 [ 176.107476][T10497] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 176.163856][T10497] EXT4-fs error (device loop7): ext4_do_update_inode:5256: inode #2: comm syz.7.4193: corrupted inode contents [ 176.184016][T10497] EXT4-fs error (device loop7): ext4_dirty_inode:6121: inode #2: comm syz.7.4193: mark_inode_dirty error [ 176.198611][T10497] EXT4-fs error (device loop7): ext4_do_update_inode:5256: inode #2: comm syz.7.4193: corrupted inode contents [ 176.213509][T10497] EXT4-fs error (device loop7): __ext4_ext_dirty:202: inode #2: comm syz.7.4193: mark_inode_dirty error [ 176.267905][T10497] EXT4-fs error (device loop7): ext4_do_update_inode:5256: inode #2: comm syz.7.4193: corrupted inode contents [ 176.307570][T10497] EXT4-fs error (device loop7): ext4_dirty_inode:6121: inode #2: comm syz.7.4193: mark_inode_dirty error [ 176.359626][T10497] EXT4-fs error (device loop7): ext4_do_update_inode:5256: inode #2: comm syz.7.4193: corrupted inode contents [ 176.381555][T10538] netlink: 96 bytes leftover after parsing attributes in process `syz.6.4211'. [ 176.391360][T10540] loop8: detected capacity change from 0 to 512 [ 176.392121][ T1862] EXT4-fs (loop7): unmounting filesystem. [ 176.430681][T10540] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e002c118, mo2=0002] [ 176.442903][T10540] System zones: 1-12 [ 176.451174][T10540] EXT4-fs error (device loop8): ext4_xattr_ibody_find:2195: inode #15: comm syz.8.4213: corrupted in-inode xattr [ 176.452780][T10548] loop6: detected capacity change from 0 to 512 [ 176.471373][T10540] EXT4-fs error (device loop8): ext4_orphan_get:1405: comm syz.8.4213: couldn't read orphan inode 15 (err -117) [ 176.472562][T10548] EXT4-fs: Ignoring removed oldalloc option [ 176.484624][T10540] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 176.512409][T10548] EXT4-fs (loop6): 1 truncate cleaned up [ 176.518556][T10548] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 176.539006][T10548] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #13: comm syz.6.4216: invalid indirect mapped block 234881024 (level 0) [ 176.553495][T10548] EXT4-fs (loop6): Remounting filesystem read-only [ 176.561331][ T2457] EXT4-fs (loop8): unmounting filesystem. [ 176.571373][ T1248] EXT4-fs (loop6): unmounting filesystem. [ 176.678522][T10569] loop8: detected capacity change from 0 to 512 [ 176.722216][T10569] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 176.756643][T10569] EXT4-fs error (device loop8): ext4_do_update_inode:5256: inode #2: comm syz.8.4225: corrupted inode contents [ 176.773755][T10569] EXT4-fs error (device loop8): ext4_dirty_inode:6121: inode #2: comm syz.8.4225: mark_inode_dirty error [ 176.816259][T10569] EXT4-fs error (device loop8): ext4_do_update_inode:5256: inode #2: comm syz.8.4225: corrupted inode contents [ 176.838713][T10569] EXT4-fs error (device loop8): __ext4_ext_dirty:202: inode #2: comm syz.8.4225: mark_inode_dirty error [ 176.870779][T10569] EXT4-fs error (device loop8): ext4_do_update_inode:5256: inode #2: comm syz.8.4225: corrupted inode contents [ 176.931884][T10569] EXT4-fs error (device loop8): ext4_dirty_inode:6121: inode #2: comm syz.8.4225: mark_inode_dirty error [ 176.974205][T10569] EXT4-fs error (device loop8): ext4_do_update_inode:5256: inode #2: comm syz.8.4225: corrupted inode contents [ 177.040893][T10595] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4236'. [ 177.050473][ T2457] EXT4-fs (loop8): unmounting filesystem. [ 177.081260][T10601] netlink: 'syz.8.4237': attribute type 4 has an invalid length. [ 177.397443][T10641] netlink: 'syz.4.4253': attribute type 4 has an invalid length. [ 177.441365][ T28] audit: type=1401 audit(691.614:2501): op=security_bounded_transition seresult=denied oldcontext=root:sysadm_r:sysadm_t newcontext=system_u:object_r:hugetlbfs_t [ 177.522929][T10648] loop7: detected capacity change from 0 to 256 [ 177.557423][T10648] FAT-fs (loop7): bogus number of FAT sectors [ 177.571674][T10648] FAT-fs (loop7): Can't find a valid FAT filesystem [ 177.673338][T10664] netlink: 'syz.6.4264': attribute type 4 has an invalid length. [ 177.717997][T10664] netlink: 'syz.6.4264': attribute type 4 has an invalid length. [ 178.053470][T10696] user requested TSC rate below hardware speed [ 178.069511][T10696] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3519115396 (14076461584 ns) > initial count (10188694344 ns). Using initial count to start timer. [ 178.118462][T10703] overlayfs: failed to clone upperpath [ 178.270083][T10722] overlayfs: failed to clone upperpath [ 178.292721][T10738] loop4: detected capacity change from 0 to 128 [ 178.566161][T10771] loop8: detected capacity change from 0 to 2048 [ 178.594526][T10771] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 178.630149][ T2457] EXT4-fs error (device loop8): ext4_validate_block_bitmap:438: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 178.645405][ T2457] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 178.684602][ T2457] EXT4-fs (loop8): unmounting filesystem. [ 178.741654][T10785] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4310'. [ 179.513403][T10809] syz.2.4320[10809] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 179.513472][T10809] syz.2.4320[10809] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 179.658268][T10833] loop8: detected capacity change from 0 to 128 [ 179.696055][T10833] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 179.708647][T10835] bridge0: port 3(vlan3) entered blocking state [ 179.716369][T10835] bridge0: port 3(vlan3) entered disabled state [ 179.731194][T10833] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 179.789944][ T7791] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 179.791512][T10808] loop4: detected capacity change from 0 to 40427 [ 179.812295][T10808] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 179.824699][T10808] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 179.866238][T10808] F2FS-fs (loop4): invalid crc value [ 179.903044][T10808] F2FS-fs (loop4): Found nat_bits in checkpoint [ 179.954121][T10808] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 179.966145][T10808] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 179.984827][ T103] udevd[103]: worker [347] terminated by signal 33 (Unknown signal 33) [ 180.000019][ T103] udevd[103]: worker [347] failed while handling '/devices/virtual/block/loop4' [ 180.125992][ T19] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 180.316243][ T19] usb 8-1: Using ep0 maxpacket: 8 [ 180.322684][ T19] usb 8-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 180.344497][ T19] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.376981][ T19] usb 8-1: config 0 descriptor?? [ 180.417839][T10889] loop6: detected capacity change from 0 to 32768 [ 180.435069][T10902] syz.2.4360[10902] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 180.435152][T10902] syz.2.4360[10902] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 180.478596][T10889] loop6: p1 p3 < > [ 180.584216][ T19] usb 8-1: string descriptor 0 read error: -71 [ 180.595998][ T19] usb 8-1: Found UVC 0.00 device (2833:0201) [ 180.613129][ T19] usb 8-1: No valid video chain found. [ 180.624041][ T19] usb 8-1: USB disconnect, device number 22 [ 180.633758][ T630] udevd[630]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 180.644689][ T625] udevd[625]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 180.941404][T10932] syz.4.4373[10932] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 180.941480][T10932] syz.4.4373[10932] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 180.975870][T10932] syz.4.4373[10932] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 181.006076][T10932] syz.4.4373[10932] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 181.167560][T10944] loop7: detected capacity change from 0 to 256 [ 181.214128][T10944] FAT-fs (loop7): bogus number of FAT sectors [ 181.227399][T10944] FAT-fs (loop7): Can't find a valid FAT filesystem [ 181.419612][T10957] netem: incorrect gi model size [ 181.424790][T10957] netem: change failed [ 181.454555][T10961] IPv6: ADDRCONF(NETDEV_CHANGE): syz_tun: link becomes ready [ 181.465607][T10961] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 181.473911][ T1737] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 181.490322][ T6] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 181.536994][T10967] SELinux: Context Ü is not valid (left unmapped). [ 181.656312][ T1737] usb 5-1: Using ep0 maxpacket: 16 [ 181.662960][ T1737] usb 5-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 181.689362][ T1737] usb 5-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 181.700985][ T1737] usb 5-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 181.716643][ T1737] usb 5-1: config 1 interface 0 has no altsetting 0 [ 181.736673][ T1737] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 181.755872][ T1737] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.770090][ T1737] usb 5-1: Product: syz [ 181.778437][ T1737] usb 5-1: Manufacturer: syz [ 181.784552][ T1737] usb 5-1: SerialNumber: syz [ 181.895448][T11017] syzkaller0: tun_chr_ioctl cmd 2147767517 [ 181.921720][T11019] block device autoloading is deprecated and will be removed. [ 181.987892][T11025] netlink: 'syz.2.4414': attribute type 4 has an invalid length. [ 182.000706][ T1737] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 12 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 182.029467][T11027] netlink: 96 bytes leftover after parsing attributes in process `syz.7.4415'. [ 182.039194][T11025] netlink: 'syz.2.4414': attribute type 4 has an invalid length. [ 182.092245][ T28] audit: type=1400 audit(696.264:2502): avc: denied { write } for pid=11030 comm="syz.2.4417" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 182.171657][T11037] syz.2.4420 (11037) used greatest stack depth: 20192 bytes left [ 182.244113][T11023] loop8: detected capacity change from 0 to 40427 [ 182.255347][T11023] F2FS-fs (loop8): Invalid log_blocksize (268), supports only 12 [ 182.266410][T11023] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 182.279764][T11023] F2FS-fs (loop8): invalid crc value [ 182.287450][T11023] F2FS-fs (loop8): Found nat_bits in checkpoint [ 182.322019][T11023] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0 [ 182.329714][T11023] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 182.337826][T10946] usblp0:failed reading printer status (-32) [ 182.351405][ T334] usb 5-1: USB disconnect, device number 12 [ 182.360755][ T334] usblp0: removed [ 182.381597][ T28] audit: type=1400 audit(696.554:2503): avc: denied { setopt } for pid=11062 comm="syz.2.4429" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 182.406890][ T28] audit: type=1400 audit(696.574:2504): avc: denied { getopt } for pid=11062 comm="syz.2.4429" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 182.667499][T11023] syz.8.4413: attempt to access beyond end of device [ 182.667499][T11023] loop8: rw=2049, sector=40424, nr_sectors = 8 limit=40427 [ 182.864312][T11076] overlayfs: failed to clone upperpath [ 182.952379][T11089] tmpfs: Unknown parameter 'nolazytimeÄ' [ 182.971223][T11095] loop7: detected capacity change from 0 to 1024 [ 182.984168][T11095] EXT4-fs: Ignoring removed nomblk_io_submit option [ 183.003254][T11095] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 183.051713][ T1862] EXT4-fs (loop7): unmounting filesystem. [ 183.392659][T11108] loop6: detected capacity change from 0 to 40427 [ 183.426461][T11108] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 183.446724][T11108] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 183.471687][T11108] F2FS-fs (loop6): invalid crc value [ 183.473250][ T28] audit: type=1400 audit(697.644:2505): avc: denied { write } for pid=11137 comm="syz.7.4461" name="ptp0" dev="devtmpfs" ino=264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 183.512890][T11108] F2FS-fs (loop6): Found nat_bits in checkpoint [ 183.566581][T11108] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 183.573919][ T3346] Bluetooth: hci0: sending frame failed (-49) [ 183.580127][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -49 [ 183.582326][T11108] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 183.682586][T11153] loop4: detected capacity change from 0 to 1024 [ 183.757831][T11153] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 183.801905][ T5844] EXT4-fs (loop4): unmounting filesystem. [ 184.101760][T11186] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 184.191027][T11195] netlink: 324 bytes leftover after parsing attributes in process `syz.4.4482'. [ 184.396075][ T334] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 184.441335][T11214] netlink: 32 bytes leftover after parsing attributes in process `syz.8.4491'. [ 184.455214][ T28] audit: type=1400 audit(698.624:2506): avc: denied { bind } for pid=11215 comm="syz.6.4492" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 184.481968][T11214] netlink: 32 bytes leftover after parsing attributes in process `syz.8.4491'. [ 184.514827][T11220] loop8: detected capacity change from 0 to 256 [ 184.587042][ T334] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 184.605980][ T334] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 184.626281][ T334] usb 8-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 184.671987][ T334] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 184.690351][ T334] usb 8-1: SerialNumber: syz [ 184.767756][T11218] loop6: detected capacity change from 0 to 40427 [ 184.801354][T11218] F2FS-fs (loop6): invalid crc value [ 184.840032][T11224] loop8: detected capacity change from 0 to 40427 [ 184.848511][T11218] F2FS-fs (loop6): Found nat_bits in checkpoint [ 184.860249][T11224] F2FS-fs (loop8): Invalid log_blocksize (268), supports only 12 [ 184.868684][T11224] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 184.878767][T11224] F2FS-fs (loop8): invalid crc value [ 184.899327][T11224] F2FS-fs (loop8): Found nat_bits in checkpoint [ 184.917215][T11243] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4502'. [ 184.917717][ T334] usb 8-1: 0:2 : does not exist [ 184.951607][ T334] usb 8-1: USB disconnect, device number 23 [ 184.981913][T11218] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 185.006351][T11224] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0 [ 185.013425][T11224] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 185.126536][ T1248] syz-executor: attempt to access beyond end of device [ 185.126536][ T1248] loop6: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 185.226198][ C0] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 185.361701][ T28] audit: type=1400 audit(699.534:2507): avc: denied { setattr } for pid=11276 comm="syz.6.4505" name="/" dev="configfs" ino=7961 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 185.523898][T11279] loop4: detected capacity change from 0 to 8192 [ 185.598150][T11279] loop4: p2 p3 p4[EZD] [ 185.604766][T11279] loop4: p3 start 360447 is beyond EOD, truncated [ 185.616379][T11279] loop4: p4 size 262912 extends beyond EOD, truncated [ 185.629397][T11288] SELinux: failed to load policy [ 185.703605][T11290] loop6: detected capacity change from 0 to 2048 [ 185.729979][T11294] input: syz1 as /devices/virtual/input/input29 [ 185.747271][T11290] Alternate GPT is invalid, using primary GPT. [ 185.761338][T11290] loop6: p1 p2 p3 [ 186.155962][T11312] loop7: detected capacity change from 0 to 40427 [ 186.164765][T11315] loop6: detected capacity change from 0 to 32768 [ 186.185752][T11312] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12 [ 186.202103][T11312] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 186.217321][T11312] F2FS-fs (loop7): invalid crc value [ 186.225223][T11315] loop6: p2 p3 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 p2 [ 186.254927][T11312] F2FS-fs (loop7): Found nat_bits in checkpoint [ 186.297920][T11331] loop4: detected capacity change from 0 to 8192 [ 186.532989][T11312] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 186.563971][T11312] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 186.920616][T11360] 9pnet: p9_errstr2errno: server reported unknown error syz0 [ 187.196801][ T456] udevd[456]: inotify_add_watch(7, /dev/loop6p23, 10) failed: No such file or directory [ 187.212808][T11338] udevd[11338]: inotify_add_watch(7, /dev/loop6p24, 10) failed: No such file or directory [ 187.224288][T11337] udevd[11337]: inotify_add_watch(7, /dev/loop6p26, 10) failed: No such file or directory [ 187.224310][T11341] udevd[11341]: inotify_add_watch(7, /dev/loop6p25, 10) failed: No such file or directory [ 187.236989][T11342] udevd[11342]: inotify_add_watch(7, /dev/loop6p27, 10) failed: No such file or directory [ 187.258886][ T625] udevd[625]: inotify_add_watch(7, /dev/loop6p28, 10) failed: No such file or directory [ 187.271433][ T630] udevd[630]: inotify_add_watch(7, /dev/loop6p29, 10) failed: No such file or directory [ 187.283197][T11340] udevd[11340]: inotify_add_watch(7, /dev/loop6p30, 10) failed: No such file or directory [ 187.294200][T11336] udevd[11336]: inotify_add_watch(7, /dev/loop6p31, 10) failed: No such file or directory [ 187.306306][T11339] udevd[11339]: inotify_add_watch(7, /dev/loop6p32, 10) failed: No such file or directory [ 187.575499][T11375] SELinux: ebitmap: start bit 0 comes after start bit 0 [ 187.600304][T11375] SELinux: failed to load policy [ 187.777595][T11387] loop4: detected capacity change from 0 to 1024 [ 187.828384][T11387] EXT4-fs: Ignoring removed orlov option [ 187.840783][T11395] netlink: 'syz.7.4554': attribute type 6 has an invalid length. [ 187.886433][T11395] netlink: 'syz.7.4554': attribute type 7 has an invalid length. [ 187.894701][T11387] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 187.936059][T11395] netlink: 'syz.7.4554': attribute type 8 has an invalid length. [ 187.969211][T11387] EXT4-fs (loop4): unmounting filesystem. [ 188.274609][T11444] 9pnet: p9_errstr2errno: server reported unknown error ÿÿÿ [ 188.286271][ T28] audit: type=1400 audit(702.464:2508): avc: denied { getopt } for pid=11441 comm="syz.6.4585" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 188.515504][T11439] loop4: detected capacity change from 0 to 32768 [ 188.546901][T11439] loop4: p1 p3 < > [ 188.608300][ T335] printk: udevd: 223 output lines suppressed due to ratelimiting [ 188.609006][T11450] loop6: detected capacity change from 0 to 40427 [ 188.626300][T11450] F2FS-fs (loop6): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 188.634021][T11450] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 188.643038][T11450] F2FS-fs (loop6): invalid crc value [ 188.674324][T11450] F2FS-fs (loop6): Found nat_bits in checkpoint [ 188.761078][T11450] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 188.771538][T11450] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4 [ 188.830338][T11462] f2fs_ckpt-7:6: attempt to access beyond end of device [ 188.830338][T11462] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 188.850246][ T28] audit: type=1400 audit(703.024:2509): avc: denied { lock } for pid=11448 comm="syz.6.4589" path="/828/bus/file1" dev="loop6" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 188.878231][T11491] incfs: Options parsing error. -22 [ 188.890283][T11491] incfs: mount failed -22 [ 188.898198][ T28] audit: type=1400 audit(703.024:2510): avc: denied { link } for pid=11448 comm="syz.6.4589" name="file1" dev="loop6" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 188.912018][T11493] syz.8.4608[11493] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 188.927105][T11493] syz.8.4608[11493] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 189.076880][T11510] syz.8.4615[11510] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 189.088886][T11510] syz.8.4615[11510] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 189.268946][T11526] syz.8.4622[11526] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 189.280734][T11526] syz.8.4622[11526] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 189.292460][ T19] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 189.494766][T11550] xt_bpf: check failed: parse error [ 189.517311][ T19] usb 5-1: unable to get BOS descriptor or descriptor too short [ 189.536336][ T19] usb 5-1: config 1 interface 0 altsetting 8 bulk endpoint 0x82 has invalid maxpacket 1023 [ 189.537668][T11557] loop6: detected capacity change from 0 to 512 [ 189.555973][ T19] usb 5-1: config 1 interface 0 altsetting 8 bulk endpoint 0x3 has invalid maxpacket 16 [ 189.573234][T11557] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 189.575955][ T19] usb 5-1: config 1 interface 0 has no altsetting 0 [ 189.606161][T11557] EXT4-fs (loop6): 1 truncate cleaned up [ 189.612086][T11557] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 189.625533][ T19] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 189.636911][ T19] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.647689][ T19] usb 5-1: Product: syz [ 189.652015][ T19] usb 5-1: Manufacturer: syz [ 189.656988][ T19] usb 5-1: SerialNumber: syz [ 189.663318][T11503] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 189.676051][T11503] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 189.684286][ T1248] EXT4-fs (loop6): unmounting filesystem. [ 189.800421][T11584] loop8: detected capacity change from 0 to 512 [ 189.826558][T11584] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 189.866405][ T2457] EXT4-fs (loop8): unmounting filesystem. [ 189.886054][ T334] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 189.895491][ T19] cdc_ether: probe of 5-1:1.0 failed with error -71 [ 189.904130][ T19] usb 5-1: USB disconnect, device number 13 [ 190.086035][ T334] usb 8-1: Using ep0 maxpacket: 16 [ 190.092488][ T334] usb 8-1: config 0 has an invalid interface number: 105 but max is 0 [ 190.100995][ T334] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 190.111493][ T334] usb 8-1: config 0 has no interface number 0 [ 190.119305][ T334] usb 8-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 190.128447][ T334] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.136708][ T334] usb 8-1: Product: syz [ 190.141068][ T334] usb 8-1: Manufacturer: syz [ 190.145661][ T334] usb 8-1: SerialNumber: syz [ 190.150361][ T39] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 190.159130][ T334] usb 8-1: config 0 descriptor?? [ 190.316100][ T6] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 190.336028][ T39] usb 9-1: Using ep0 maxpacket: 32 [ 190.342363][ T39] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 190.353566][ T39] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 190.364081][ T39] usb 9-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 190.373386][ T334] usb 8-1: Found UVC 0.00 device syz (046d:08d3) [ 190.380118][ T39] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.388191][ T334] usb 8-1: No valid video chain found. [ 190.394971][ T39] usb 9-1: config 0 descriptor?? [ 190.400875][ T39] hub 9-1:0.0: USB hub found [ 190.517307][ T6] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 190.523325][T11618] overlayfs: failed to clone upperpath [ 190.528312][ T6] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 190.528340][ T6] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 190.528374][ T6] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 190.566866][ T6] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.577858][ T6] usb 7-1: config 0 descriptor?? [ 190.583524][ T19] usb 8-1: USB disconnect, device number 24 [ 190.602019][ T39] hub 9-1:0.0: 1 port detected [ 190.992327][ T6] plantronics 0003:047F:FFFF.0035: unknown main item tag 0xe [ 190.999821][ T6] plantronics 0003:047F:FFFF.0035: unknown main item tag 0x0 [ 191.007561][ T6] plantronics 0003:047F:FFFF.0035: No inputs registered, leaving [ 191.016307][ T6] plantronics 0003:047F:FFFF.0035: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 191.214778][ T39] hub 9-1:0.0: activate --> -90 [ 191.215516][T11626] loop7: detected capacity change from 0 to 40427 [ 191.226927][T11626] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12 [ 191.234695][T11626] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 191.245342][T11626] F2FS-fs (loop7): Found nat_bits in checkpoint [ 191.256978][ T896] usb 7-1: USB disconnect, device number 23 [ 191.275602][T11626] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 191.283101][T11626] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 191.323909][ T1862] F2FS-fs (loop7): invalid namelen(0), ino:0, run fsck to fix. [ 191.323942][ T1862] F2FS-fs (loop7): invalid namelen(0), ino:0, run fsck to fix. [ 191.331638][ T1862] F2FS-fs (loop7): invalid namelen(0), ino:0, run fsck to fix. [ 191.339418][ T1862] F2FS-fs (loop7): invalid namelen(0), ino:0, run fsck to fix. [ 191.347070][ T1862] F2FS-fs (loop7): invalid namelen(0), ino:0, run fsck to fix. [ 191.354735][ T1862] F2FS-fs (loop7): invalid namelen(0), ino:0, run fsck to fix. [ 191.362453][ T1862] F2FS-fs (loop7): invalid namelen(0), ino:0, run fsck to fix. [ 191.420579][ T39] hub 9-1:0.0: hub_ext_port_status failed (err = -71) [ 191.435780][ T24] usb 9-1: USB disconnect, device number 22 [ 191.594373][T11655] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11655 comm=syz.7.4677 [ 191.626176][ T334] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 191.644134][T11661] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4680'. [ 191.805961][ T334] usb 5-1: Using ep0 maxpacket: 16 [ 191.812430][ T334] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 191.824518][ T334] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 191.834466][ T334] usb 5-1: config 0 interface 0 has no altsetting 0 [ 191.841808][ T334] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 191.851392][ T334] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.860285][ T334] usb 5-1: config 0 descriptor?? [ 191.877216][ T28] audit: type=1400 audit(706.054:2511): avc: denied { rename } for pid=11680 comm="syz.7.4688" name="file0" dev="incremental-fs" ino=4246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 191.900911][ T28] audit: type=1400 audit(706.054:2512): avc: denied { reparent } for pid=11680 comm="syz.7.4688" name="file0" dev="incremental-fs" ino=4246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 191.933074][ T1862] ------------[ cut here ]------------ [ 191.939063][ T1862] WARNING: CPU: 1 PID: 1862 at fs/inode.c:332 drop_nlink+0xc5/0x110 [ 191.947516][ T1862] Modules linked in: [ 191.952079][ T1862] CPU: 1 PID: 1862 Comm: syz-executor Tainted: G W syzkaller #0 [ 191.953835][T11683] netlink: 96 bytes leftover after parsing attributes in process `syz.2.4691'. [ 191.961412][ T1862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 191.961439][ T1862] RIP: 0010:drop_nlink+0xc5/0x110 [ 191.961465][ T1862] Code: 1b 48 8d bb b8 04 00 00 be 08 00 00 00 e8 03 ea f0 ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 eb 8b ac ff <0f> 0b eb 86 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 5e ff ff ff 4c [ 191.961478][ T1862] RSP: 0018:ffffc90012dafc38 EFLAGS: 00010293 [ 191.961493][ T1862] RAX: ffffffff81c37b75 RBX: ffff8881330ecbd8 RCX: ffff88811a03e540 [ 191.961505][ T1862] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 191.961516][ T1862] RBP: ffffc90012dafc60 R08: 0000000000000004 R09: 0000000000000003 [ 191.961542][ T1862] R10: fffff520025b5f78 R11: 1ffff920025b5f78 R12: dffffc0000000000 [ 192.045956][ T1862] R13: 1ffff1102661d984 R14: ffff8881330ecc20 R15: 0000000000000000 [ 192.054018][ T1862] FS: 00005555746d1500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 192.063255][ T1862] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 192.070106][ T1862] CR2: 0000555557c464a8 CR3: 000000010f5b6000 CR4: 00000000003506a0 [ 192.078419][ T1862] Call Trace: [ 192.081726][ T1862] [ 192.084787][ T1862] shmem_rmdir+0x5b/0x90 [ 192.089322][ T1862] vfs_rmdir+0x393/0x500 [ 192.093574][ T1862] incfs_kill_sb+0x105/0x220 [ 192.098307][ T1862] deactivate_locked_super+0xb5/0x120 [ 192.103757][ T1862] deactivate_super+0xaf/0xe0 [ 192.108727][ T1862] cleanup_mnt+0x45f/0x4e0 [ 192.113257][ T1862] __cleanup_mnt+0x19/0x20 [ 192.117983][ T1862] task_work_run+0x1db/0x240 [ 192.122677][ T1862] ? __cfi_task_work_run+0x10/0x10 [ 192.127871][ T1862] ? __x64_sys_umount+0x125/0x160 [ 192.133006][ T1862] ? __cfi___x64_sys_umount+0x10/0x10 [ 192.138530][ T1862] exit_to_user_mode_loop+0x9b/0xb0 [ 192.143769][ T1862] exit_to_user_mode_prepare+0x5a/0xa0 [ 192.149585][ T1862] syscall_exit_to_user_mode+0x1a/0x30 [ 192.155066][ T1862] do_syscall_64+0x58/0xa0 [ 192.159641][ T1862] ? clear_bhb_loop+0x30/0x80 [ 192.164325][ T1862] ? clear_bhb_loop+0x30/0x80 [ 192.169178][ T1862] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 192.175189][ T1862] RIP: 0033:0x7fef3818ff17 [ 192.179842][ T1862] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 192.199866][ T1862] RSP: 002b:00007ffdd7d23138 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 192.208500][ T1862] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fef3818ff17 [ 192.216701][ T1862] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdd7d231f0 [ 192.224670][ T1862] RBP: 00007ffdd7d231f0 R08: 0000000000000000 R09: 0000000000000000 [ 192.232859][ T1862] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffdd7d24280 [ 192.240931][ T1862] R13: 00007fef38211c05 R14: 000000000002ee0e R15: 00007ffdd7d242c0 [ 192.249036][ T1862] [ 192.252145][ T1862] ---[ end trace 0000000000000000 ]--- [ 192.257873][ T1862] ================================================================== [ 192.266236][ T1862] BUG: KASAN: null-ptr-deref in ihold+0x20/0x60 [ 192.272628][ T1862] Write of size 4 at addr 0000000000000170 by task syz-executor/1862 [ 192.280696][ T1862] [ 192.283059][ T1862] CPU: 0 PID: 1862 Comm: syz-executor Tainted: G W syzkaller #0 [ 192.292244][ T1862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 192.302300][ T1862] Call Trace: [ 192.305568][ T1862] [ 192.308611][ T1862] __dump_stack+0x21/0x24 [ 192.312954][ T1862] dump_stack_lvl+0xee/0x150 [ 192.317546][ T1862] ? __cfi_dump_stack_lvl+0x8/0x8 [ 192.322588][ T1862] ? ihold+0x20/0x60 [ 192.326468][ T1862] ? ihold+0x20/0x60 [ 192.330437][ T1862] print_report+0x3d/0x60 [ 192.334753][ T1862] kasan_report+0x122/0x150 [ 192.339257][ T1862] ? ihold+0x20/0x60 [ 192.343138][ T1862] kasan_check_range+0x280/0x290 [ 192.348093][ T1862] __kasan_check_write+0x14/0x20 [ 192.353053][ T1862] ihold+0x20/0x60 [ 192.356793][ T1862] vfs_rmdir+0x25f/0x500 [ 192.361315][ T1862] incfs_kill_sb+0x105/0x220 [ 192.365897][ T1862] deactivate_locked_super+0xb5/0x120 [ 192.371348][ T1862] deactivate_super+0xaf/0xe0 [ 192.376125][ T1862] cleanup_mnt+0x45f/0x4e0 [ 192.380541][ T1862] __cleanup_mnt+0x19/0x20 [ 192.384945][ T1862] task_work_run+0x1db/0x240 [ 192.389619][ T1862] ? __cfi_task_work_run+0x10/0x10 [ 192.394750][ T1862] ? __x64_sys_umount+0x125/0x160 [ 192.399770][ T1862] ? __cfi___x64_sys_umount+0x10/0x10 [ 192.405175][ T1862] exit_to_user_mode_loop+0x9b/0xb0 [ 192.410496][ T1862] exit_to_user_mode_prepare+0x5a/0xa0 [ 192.415962][ T1862] syscall_exit_to_user_mode+0x1a/0x30 [ 192.421509][ T1862] do_syscall_64+0x58/0xa0 [ 192.426089][ T1862] ? clear_bhb_loop+0x30/0x80 [ 192.430763][ T1862] ? clear_bhb_loop+0x30/0x80 [ 192.435523][ T1862] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 192.441509][ T1862] RIP: 0033:0x7fef3818ff17 [ 192.446052][ T1862] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 192.465831][ T1862] RSP: 002b:00007ffdd7d23138 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 192.474442][ T1862] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fef3818ff17 [ 192.482577][ T1862] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdd7d231f0 [ 192.490539][ T1862] RBP: 00007ffdd7d231f0 R08: 0000000000000000 R09: 0000000000000000 [ 192.498501][ T1862] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffdd7d24280 [ 192.506464][ T1862] R13: 00007fef38211c05 R14: 000000000002ee0e R15: 00007ffdd7d242c0 [ 192.514703][ T1862] [ 192.517799][ T1862] ================================================================== [ 192.527720][ T1862] Disabling lock debugging due to kernel taint [ 192.533023][ T334] hid (null): unknown global tag 0xd [ 192.534014][ T1862] BUG: kernel NULL pointer dereference, address: 0000000000000170 [ 192.539805][ T334] hid (null): report_id 0 is invalid [ 192.547223][ T1862] #PF: supervisor write access in kernel mode [ 192.547237][ T1862] #PF: error_code(0x0002) - not-present page [ 192.547256][ T1862] PGD 125115067 P4D 125115067 PUD 0 [ 192.547278][ T1862] Oops: 0002 [#1] PREEMPT SMP KASAN [ 192.553379][ T334] hid (null): global environment stack underflow [ 192.558614][ T1862] CPU: 0 PID: 1862 Comm: syz-executor Tainted: G B W syzkaller #0 [ 192.558638][ T1862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 192.558647][ T1862] RIP: 0010:ihold+0x26/0x60 [ 192.558670][ T1862] Code: 33 36 7c df 55 48 89 e5 41 56 53 48 89 fb e8 51 83 ac ff 48 8d bb 70 01 00 00 be 04 00 00 00 e8 40 e1 f0 ff 41 be 01 00 00 00 44 0f c1 b3 70 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 41 [ 192.565397][ T334] hid (null): unknown global tag 0xe [ 192.569994][ T1862] RSP: 0018:ffffc90012dafc78 EFLAGS: 00010246 [ 192.570015][ T1862] RAX: ffff88811a03e500 RBX: 0000000000000000 RCX: ffff88811a03e540 [ 192.570025][ T1862] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 192.570034][ T1862] RBP: ffffc90012dafc88 R08: dffffc0000000000 R09: fffffbfff0f2d4fd [ 192.570046][ T1862] R10: fffffbfff0f2d4fd R11: 1ffffffff0f2d4fc R12: ffff8881330ecbe4 [ 192.570057][ T1862] R13: dffffc0000000000 R14: 0000000000000001 R15: 0000000000000000 [ 192.575979][ T334] hid (null): unknown global tag 0xc [ 192.581550][ T1862] FS: 00005555746d1500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 192.591460][ T334] hid (null): unknown global tag 0xd [ 192.601614][ T1862] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 192.601634][ T1862] CR2: 0000000000000170 CR3: 000000010f5b6000 CR4: 00000000003506b0 [ 192.601649][ T1862] DR0: 000000000000fffe DR1: 0000000000000003 DR2: 0000000000000e8f [ 192.601659][ T1862] DR3: 0000000000000007 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 192.601669][ T1862] Call Trace: [ 192.601675][ T1862] [ 192.601684][ T1862] vfs_rmdir+0x25f/0x500 [ 192.607430][ T334] hid (null): unknown global tag 0xd [ 192.626213][ T1862] incfs_kill_sb+0x105/0x220 [ 192.626244][ T1862] deactivate_locked_super+0xb5/0x120 [ 192.626263][ T1862] deactivate_super+0xaf/0xe0 [ 192.634542][ T334] hid (null): report_id 0 is invalid [ 192.637614][ T1862] cleanup_mnt+0x45f/0x4e0 [ 192.637640][ T1862] __cleanup_mnt+0x19/0x20 [ 192.637660][ T1862] task_work_run+0x1db/0x240 [ 192.777514][ T1862] ? __cfi_task_work_run+0x10/0x10 [ 192.782617][ T1862] ? __x64_sys_umount+0x125/0x160 [ 192.787632][ T1862] ? __cfi___x64_sys_umount+0x10/0x10 [ 192.793260][ T1862] exit_to_user_mode_loop+0x9b/0xb0 [ 192.798619][ T1862] exit_to_user_mode_prepare+0x5a/0xa0 [ 192.804075][ T1862] syscall_exit_to_user_mode+0x1a/0x30 [ 192.809609][ T1862] do_syscall_64+0x58/0xa0 [ 192.814014][ T1862] ? clear_bhb_loop+0x30/0x80 [ 192.818764][ T1862] ? clear_bhb_loop+0x30/0x80 [ 192.823424][ T1862] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 192.829314][ T1862] RIP: 0033:0x7fef3818ff17 [ 192.833720][ T1862] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 192.853498][ T1862] RSP: 002b:00007ffdd7d23138 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 192.861997][ T1862] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fef3818ff17 [ 192.870064][ T1862] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdd7d231f0 [ 192.878129][ T1862] RBP: 00007ffdd7d231f0 R08: 0000000000000000 R09: 0000000000000000 [ 192.886202][ T1862] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffdd7d24280 [ 192.894431][ T1862] R13: 00007fef38211c05 R14: 000000000002ee0e R15: 00007ffdd7d242c0 [ 192.902421][ T1862] [ 192.905431][ T1862] Modules linked in: [ 192.909336][ T1862] CR2: 0000000000000170 [ 192.913559][ T1862] ---[ end trace 0000000000000000 ]--- [ 192.919009][ T1862] RIP: 0010:ihold+0x26/0x60 [ 192.923500][ T1862] Code: 33 36 7c df 55 48 89 e5 41 56 53 48 89 fb e8 51 83 ac ff 48 8d bb 70 01 00 00 be 04 00 00 00 e8 40 e1 f0 ff 41 be 01 00 00 00 44 0f c1 b3 70 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 41 [ 192.943185][ T1862] RSP: 0018:ffffc90012dafc78 EFLAGS: 00010246 [ 192.949419][ T1862] RAX: ffff88811a03e500 RBX: 0000000000000000 RCX: ffff88811a03e540 [ 192.957397][ T1862] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 192.965442][ T1862] RBP: ffffc90012dafc88 R08: dffffc0000000000 R09: fffffbfff0f2d4fd [ 192.973688][ T1862] R10: fffffbfff0f2d4fd R11: 1ffffffff0f2d4fc R12: ffff8881330ecbe4 [ 192.981652][ T1862] R13: dffffc0000000000 R14: 0000000000000001 R15: 0000000000000000 [ 192.989633][ T1862] FS: 00005555746d1500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 192.998656][ T1862] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 193.005227][ T1862] CR2: 0000000000000170 CR3: 000000010f5b6000 CR4: 00000000003506b0 [ 193.013196][ T1862] DR0: 000000000000fffe DR1: 0000000000000003 DR2: 0000000000000e8f [ 193.021263][ T1862] DR3: 0000000000000007 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 193.029219][ T1862] Kernel panic - not syncing: Fatal exception [ 193.035563][ T1862] Kernel Offset: disabled [ 193.039874][ T1862] Rebooting in 86400 seconds..