last executing test programs: 2m19.840200827s ago: executing program 4 (id=26): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x2000c0, &(0x7f0000000180)={[{@auto_da_alloc_val}]}, 0x1, 0x54e, &(0x7f0000000600)="$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") io_setup(0x9, &(0x7f00000001c0)=0x0) r1 = open(&(0x7f0000000000)='./file1\x00', 0x40000, 0x60) io_submit(r0, 0x1, &(0x7f0000000340)=[&(0x7f00000000c0)={0x25, 0xe7030003, 0x18, 0x8, 0x0, r1, 0x0, 0x0, 0x800000000004007}]) 2m19.578162831s ago: executing program 4 (id=29): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) io_setup(0x8, &(0x7f0000004200)=0x0) io_pgetevents(r0, 0x3, 0x3, &(0x7f0000000440)=[{}, {}, {}], &(0x7f00000004c0)={0x0, 0x3938700}, 0x0) 2m19.481224223s ago: executing program 4 (id=31): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0xbe, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) keyctl$clear(0x3, 0xfffffffffffffffd) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)=@generic={&(0x7f00000000c0)='./file0\x00', 0x0, 0x8}, 0x18) r6 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) fcntl$dupfd(r6, 0x406, r6) unlinkat(r6, 0x0, 0x200) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newsa={0x1d0, 0x10, 0x10, 0x0, 0x0, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}}, {@in, 0x0, 0x32}, @in6=@loopback, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x91, 0x2, {{'cbc(aes)\x00'}, 0x248, "321823741dcaf6ad0464a2dbb1abdb67a6ef11bbf40007dee5f90fe0c74539419b336c5c6edae74d8138849ce59d0f3202762bc53566eadd242a7b8593cddead1bdf39608e766237ba"}}, @algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}}}]}, 0x1d0}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x4050}, 0x4000050) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x28}}, 0x0) 2m18.577882117s ago: executing program 4 (id=36): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000340)='./file0\x00', 0x800f00, &(0x7f0000000200)={[{@usrjquota}, {@nolazytime}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xffff}}, {@minixdf}, {@resgid}, {@grpquota}, {@usrjquota}, {@journal_dev={'journal_dev', 0x3d, 0xdcc}}]}, 0x3, 0x464, &(0x7f0000000880)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, 0x0) 2m18.483569618s ago: executing program 4 (id=37): openat$ptmx(0xffffffffffffff9c, 0x0, 0x2101, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x100}) r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x4, 0x7, 0x3c5b, 0x1, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0x1addf466, 0x4, 0x7, 0x3, 0x9, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e8, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0x4000000b, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x7, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x2, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x9, 0x7fff, 0xffff, 0xa620, 0x1, 0x5, 0x1, 0x624d8fb2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0x0, 0xfffff000, 0x10000, 0x3, 0x7e, 0x9, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x2, 0x5, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) sched_setscheduler(0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_socket_connect_nvme_tcp() sendmsg$nl_xfrm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000700)=@newsa={0x154, 0x10, 0x713, 0x0, 0x0, {{@in=@multicast1, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4d6, 0x32}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0x2, 0x4}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @encap={0x1c, 0x4, {0x2, 0x0, 0x0, @in=@broadcast}}]}, 0x154}, 0x1, 0x0, 0x0, 0x24008808}, 0x0) ppoll(&(0x7f00000000c0)=[{}], 0x1, 0x0, 0x0, 0x0) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) readv(r5, &(0x7f0000000500)=[{&(0x7f0000001800)=""/154, 0x9a}], 0x1) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x8, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r6, &(0x7f0000000300), &(0x7f0000000000)=""/10, 0x2}, 0x20) 2m18.382875819s ago: executing program 4 (id=39): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000040)=0x3, 0x4) syz_emit_ethernet(0x82, &(0x7f0000000040)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x48, 0x3a, 0x0, @private1, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @private0, [@hopopts={0x3a, 0x1, '\x00', [@calipso={0x7, 0x8}]}]}}}}}}}, 0x0) recvmmsg(r0, &(0x7f0000002780)=[{{0x0, 0xfffffffffffffde1, 0x0}}], 0x1, 0x2140, 0x0) 2m18.35128371s ago: executing program 32 (id=39): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000040)=0x3, 0x4) syz_emit_ethernet(0x82, &(0x7f0000000040)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x48, 0x3a, 0x0, @private1, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @private0, [@hopopts={0x3a, 0x1, '\x00', [@calipso={0x7, 0x8}]}]}}}}}}}, 0x0) recvmmsg(r0, &(0x7f0000002780)=[{{0x0, 0xfffffffffffffde1, 0x0}}], 0x1, 0x2140, 0x0) 42.62293893s ago: executing program 5 (id=827): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) bind$bt_hci(r1, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) 42.554701641s ago: executing program 5 (id=828): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r2}, 0x18) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000300)={0x2c, r1, 0x1, 0x0, 0x0, {0x1c}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}]}]}, 0x2c}}, 0x4000000) 42.554176811s ago: executing program 5 (id=829): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xff}, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6}]}) fsopen(0x0, 0x0) ptrace(0x10, r0) ptrace$setsig(0x4203, r0, 0x5, &(0x7f0000000140)={0x3, 0x4, 0xfffffff7}) sched_setscheduler(0x0, 0x2, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x79902000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prlimit64(r1, 0x4, 0x0, 0x0) r4 = epoll_create1(0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x20) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) r6 = syz_open_procfs(0x0, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, r6) setsockopt$inet6_IPV6_DSTOPTS(r5, 0x29, 0x3b, &(0x7f00000000c0)=ANY=[@ANYBLOB="210200000000000019d82ee3894bf9d2ee570af23b646510eaa5df036f4348c322457ebb177bb61c"], 0xfffffffffffffdcf) lgetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)=@random={'btrfs.', '(.\xa5.\x00'}, &(0x7f0000000180)=""/28, 0x1c) socket$nl_xfrm(0x10, 0x3, 0x6) close_range(r4, 0xffffffffffffffff, 0x0) 41.503195957s ago: executing program 5 (id=837): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./file1\x00', 0x101880a, &(0x7f0000005a80)=ANY=[@ANYBLOB="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"], 0x1, 0x550b, &(0x7f0000000540)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000180)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000040)=ANY=[], 0x835, 0x2) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0xd4, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './file0'}}], [], 0x2c}) 40.738702978s ago: executing program 5 (id=858): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x8, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x22, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x49) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000200)={0x0, 0xf0, &(0x7f0000001b40)={&(0x7f0000000480)={0x1c, r1, 0x62c21a4ade68aba1, 0x0, 0x0, {{0x32}, {@val={0x8, 0x117, 0x56}, @void, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x0) 38.973826836s ago: executing program 5 (id=875): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r1}, 0x18) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 38.893751597s ago: executing program 33 (id=875): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r1}, 0x18) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 5.25405721s ago: executing program 2 (id=1345): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x43}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000080), 0x10010) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000005, 0x10012, r0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) 5.178146751s ago: executing program 2 (id=1351): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000020000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000003}) link(&(0x7f0000001240)='./file0\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 4.60299562s ago: executing program 2 (id=1354): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = eventfd2(0x1, 0x1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)={0x0, r1}) close(r0) 4.436389762s ago: executing program 2 (id=1356): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x5, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb8af, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) syz_emit_ethernet(0x86, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) ioctl$F2FS_IOC_SEC_TRIM_FILE(0xffffffffffffffff, 0x4018f514, 0x0) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000000200)=ANY=[@ANYBLOB="696f636861720065743d6d6163677265656b2c066d61736b3d30303030303030303030303030303030303030303030352c6e616d65636173653d312c7569643d", @ANYRESHEX=0x0, @ANYBLOB="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"], 0x1, 0x1528, &(0x7f00000014c0)="$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") r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r5}, 0x10) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r6, 0x0, 0x0) setsockopt$inet_group_source_req(r3, 0x0, 0x2e, &(0x7f0000000100)={0x4, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x22}}}}, 0x108) r7 = socket$netlink(0x10, 0x3, 0x0) writev(r7, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007208", 0x39}], 0x1) close(r3) writev(r7, &(0x7f00000000c0)=[{&(0x7f0000000040)="3900000013000318680907070000000f0000ff3f04000000170a001700000000040037000d000300013325", 0x2b}], 0x1) 3.172593252s ago: executing program 1 (id=1360): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000100)='io_uring_register\x00', r0}, 0x10) r1 = syz_io_uring_setup(0x371d, &(0x7f0000000440)={0x0, 0x0, 0x400, 0xa, 0xffffff}, &(0x7f0000000380), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x2000000, 0x0) 3.013907464s ago: executing program 1 (id=1361): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000340)={r0, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 3.013743574s ago: executing program 1 (id=1362): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) 2.961321055s ago: executing program 1 (id=1364): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x42, &(0x7f0000000040), 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000013c0)=ANY=[@ANYBLOB="1800000500000000009abf5f0347a67c776d4f328fc9c16d000012000800"/40], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001440)={{}, 0x0, &(0x7f0000001400)=r4}, 0xffc2) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000014c0)={0x18, 0xc, &(0x7f0000001580)=ANY=[@ANYRESDEC=r0], &(0x7f0000001480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r5}, 0x10) syz_read_part_table(0x5c0, &(0x7f0000000000)="$eJzs27+KJFUUB+BfVXdXdYNLa2KoDZsYuYHxsKOyOywYLIKZoKmJiGAgKFONookamRj4AptMIBgZD6IvIMIwBoJmIgZq4Fyp/jc1YySNqPB9QXHuufeccxuqwwr/b2U+SkbXkuO6rrbx/I9k+dLTSbtYrSebfH/ghQd37t5b3K+aXa5KfuqSetOnfzTJY7vGWWyiL8b58MHR+x99/FaTLt35cZJPky4p7fZqq9p80vzl0r9V2+b8u564tq52j16XhzNdRbeyectGq3TaPmre23v+ycHp8nYflPXQWXM5Pcnh1dN1jm+uo0l+vsikXuy2Nm/T7fX1rmqTUspk0Gb7L5gMpj315XfHWTbrndGgtnc2S147e/7JatADAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID/nrKxWhzmkWlSJeN+9dkzVbc+NF5nnm3G6/Xvw6L9nByczt959/U6bx688s2rb39/9OP0lySj3Dp6qLTt7tzLaQdV46S+SPLobN/5Zdv2jReH6UWW+ermt4/Xo5Qyv8xPqv75edLluctaAAAAAAAAAAAAAAAAAAAA2NOdu/cW9+vZ9uv6epsvmSbVtQ/cy6+llMOU5kp2luTr81RJfkiphltNMr+RpP2gyWajS0q5Mf3nfhF/x58BAAD//++eW/s=") r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r7, &(0x7f0000000280)={0xa, 0x6e26, 0x1, @mcast1, 0x8}, 0x1c) ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f00000083c0)={{0x1}}) r8 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x25a5, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r6, 0x40505412, 0x0) read(r6, &(0x7f00000003c0)=""/4096, 0x1000) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r6, 0x54a2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) ioperm(0x0, 0x2, 0x2) setuid(0xee01) epoll_create1(0x80000) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f00000001c0)='./bus\x00', 0x1000000, &(0x7f00000005c0)=ANY=[], 0x1, 0x1272, &(0x7f0000002880)="$eJzs3U1rY1UcB+B/2vR1bFJ1HJ0B8aAbRYjTLly5KTIDYkGpdkAF4Y5NNTRtShMKEXHqypXgxxB16U4Qv0A3blwLgkg3LmchXmmTcSZN2tFOm8rwPJt7OOf87jm3t1y44Rzu3itfrq+tNiurWStGCoUobo5F8XaKFCMxGh078cKNn395+q133n19YXHx2lJK1xfenns5pVR65of3Pvn22R9bF258V/p+InZn39/7Y/7X3Uu7l/f++iZqzVRrpo1GK2XpZqPRym7Wq2ml1lyrpPRmvZo1q2myO8bd9tV6Y3OznbKNlZnpza1qs5myjXZaq7ZTq5BaW+2UfZjVNlKlUkkz08GDWP76dp7nEXk+FuOR53k+FdNxIR6JmShFOWbj0XgsHo+L8URciifjqbh80Ou85w0AAAAAAAAAAAAAAAAAAAAPl/vs/y/07/+fOO8pAwAAAAAAAAAAAAAAAAAAwEPn8P7/YoTv/wMAAAAAAAAAAAAAAAAAAMCQ3ef7/4f2/79o/z8AAAAAAAAAAAAAAAAAAACchcnOYSmlyYj1z7eXt5c7x079wmrUoh7VuBrl+DMOdv93dMrXX1u8djUdmI2X1m9187e2l0d783Nj5ZgtDMzPdfKpNz8R0/fm56McFwePPz8wPxnPP7ef/6yTr0Q5fvogGlGPlYhC9+oP8p/OpfTqG4tTvfkr+/2ONHrGtwUAAABOUyX9o//9fafbaWB7p6n7fp66PQvH/D5w6P28GFeK53XV3NFsf7yW1evVrRMWxo8+z3hvzVS354nHKkRE1hMvTf+2tH/Kk07+1AqjQx107Pg+D3BPo/g/+GOeQuH3r+6pmYxuoRRDGX2k+4+e1fefn/8uFTt5fqYTGx/UNHFc6uhnRuGMn0kMz92bft4zAQAAAAAAAAAA4L8YuPpvKiL61gN+1FdzZ3l4b7z/zEeP/sUQrhAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4G924FgAAAAAQJi/dRodGwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB8FQAA//+6H8Xv") r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$binfmt_script(r9, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r9, 0x0) 2.858522846s ago: executing program 2 (id=1366): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448de, &(0x7f00000007c0)) 2.65869538s ago: executing program 6 (id=1371): unshare(0x2040400) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r0, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x11, 0x10, &(0x7f0000002e00), &(0x7f0000001000), 0x8, 0xa0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r0, 0xe8, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 2.6434088s ago: executing program 6 (id=1372): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) io_getevents(0x0, 0x0, 0x0, 0x0, 0x0) 2.61392999s ago: executing program 6 (id=1374): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000004080)={{r0}, &(0x7f0000004000), &(0x7f0000004040)}, 0x20) getgroups(0x0, 0x0) 2.581672881s ago: executing program 6 (id=1375): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x1, 0x0, &(0x7f0000000000)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xb3, &(0x7f0000000140)=""/179, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000001240)=ANY=[@ANYBLOB='1-8:5/', @ANYBLOB='b'], 0x31) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r3, &(0x7f0000002540)=@abs, 0x6e) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) socket$inet6_udplite(0xa, 0x2, 0x88) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e0001007769726567756172640000000400028008000a00b8"], 0x40}}, 0x0) write$UHID_INPUT(r6, &(0x7f0000001040)={0xf, {"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", 0x1000}}, 0x96d) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x16d281, 0x0) write$binfmt_aout(r9, &(0x7f0000000380)=ANY=[], 0xff2e) ioctl$TCSETS(r9, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "a05c7b5d3cd1b0f200002000fdf700071400"}) syz_open_pts(r9, 0x0) 2.575959331s ago: executing program 0 (id=1376): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x5, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb8af, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) syz_emit_ethernet(0x86, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) ioctl$F2FS_IOC_SEC_TRIM_FILE(0xffffffffffffffff, 0x4018f514, 0x0) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000000200)=ANY=[@ANYBLOB="696f636861720065743d6d6163677265656b2c066d61736b3d30303030303030303030303030303030303030303030352c6e616d65636173653d312c7569643d", @ANYRESHEX=0x0, @ANYBLOB="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"], 0x1, 0x1528, &(0x7f00000014c0)="$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") r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r5}, 0x10) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r6, 0x0, 0x0) setsockopt$inet_group_source_req(r3, 0x0, 0x2e, &(0x7f0000000100)={0x4, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x22}}}}, 0x108) r7 = socket$netlink(0x10, 0x3, 0x0) writev(r7, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007208", 0x39}], 0x1) close(r3) writev(r7, &(0x7f00000000c0)=[{&(0x7f0000000040)="3900000013000318680907070000000f0000ff3f04000000170a001700000000040037000d000300013325", 0x2b}], 0x1) 2.495938982s ago: executing program 1 (id=1377): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x4) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000300)={0x1, r1}) close(r0) 1.250925971s ago: executing program 6 (id=1378): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x10) tgkill(0x0, 0x0, 0x17) 1.198818372s ago: executing program 1 (id=1380): r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x8}, {0xd}, {0x6, 0x24, 0x1a, 0x0, 0x8}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x0, 0x0, 0x0, 0x40}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x0, 0x0, 0x20}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0xffd, 0xa, 0x4000, 0x0, 0xfffc, 0x0, 0x804, 0x0, 0x5, 0x7}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 1.182327302s ago: executing program 6 (id=1381): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0xf, {[@global=@item_4={0x3, 0x1, 0x2, "2f007f9e"}, @local=@item_4={0x3, 0x2, 0x0, "af13a13f"}, @main=@item_4={0x3, 0x0, 0x8, "b775e7cd"}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGFIELDINFO(r1, 0xc038480a, &(0x7f0000000040)={0x2, 0x0, 0x79, 0xf56, 0xd, 0x2, 0x3, 0xff, 0x8, 0x6, 0x10000, 0x4, 0x8, 0x9}) 1.142074753s ago: executing program 0 (id=1383): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000180)="63eced8e46dcd5837fa70bfb5700", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.080561204s ago: executing program 0 (id=1385): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f00000002c0)={[{@noauto_da_alloc}, {@jqfmt_vfsold}, {@noquota}, {@norecovery}, {}]}, 0x1, 0x4be, &(0x7f0000000540)="$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") getegid() chmod(&(0x7f0000000100)='./file2\x00', 0x1db) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='./file2\x00') mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1) 1.070544174s ago: executing program 3 (id=1386): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x2c, r2, 0x1, 0x70bd2a, 0x0, {0x1b}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}]}]}, 0x2c}}, 0x0) 1.046786174s ago: executing program 3 (id=1387): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x42, &(0x7f0000000040), 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000013c0)=ANY=[@ANYBLOB="1800000500000000009abf5f0347a67c776d4f328fc9c16d000012000800"/40], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001440)={{}, 0x0, &(0x7f0000001400)=r4}, 0xffc2) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000014c0)={0x18, 0xc, &(0x7f0000001580)=ANY=[@ANYRESDEC=r0], &(0x7f0000001480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r5}, 0x10) syz_read_part_table(0x5c0, &(0x7f0000000000)="$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") r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r7, &(0x7f0000000280)={0xa, 0x6e26, 0x1, @mcast1, 0x8}, 0x1c) ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f00000083c0)={{0x1}}) r8 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x25a5, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r6, 0x40505412, 0x0) read(r6, &(0x7f00000003c0)=""/4096, 0x1000) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r6, 0x54a2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) ioperm(0x0, 0x2, 0x2) setuid(0xee01) epoll_create1(0x80000) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f00000001c0)='./bus\x00', 0x1000000, &(0x7f00000005c0)=ANY=[], 0x1, 0x1272, &(0x7f0000002880)="$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") r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$binfmt_script(r9, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r9, 0x0) 723.323649ms ago: executing program 2 (id=1388): r0 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}]}}]}}, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello') 653.79024ms ago: executing program 0 (id=1389): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) pivot_root(&(0x7f0000000100)='./file0\x00', &(0x7f0000000080)='.\x00') 563.026152ms ago: executing program 3 (id=1390): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000002ac0)=ANY=[@ANYBLOB="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"/3593], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x9, 0x2, 0x56d, 0x3, 0x2, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001f80), 0xfffffffb, r1}, 0x38) 451.340543ms ago: executing program 0 (id=1391): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x4) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000300)={0x1, r1}) close(r0) 432.336284ms ago: executing program 0 (id=1392): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x68, r1, 0x200, 0x70bd26, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x23}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_FAMILY={0x6}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x26}]}, 0x68}, 0x1, 0x0, 0x0, 0x10001}, 0x40000) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x2, 0x0, 0xf0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) rt_sigaction(0x19, 0x0, 0x0, 0x8, &(0x7f0000000280)) socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000), 0x4) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) syz_open_dev$tty20(0xc, 0x4, 0x1) mremap(&(0x7f000040b000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f00004b3000/0x4000)=nil) 371.005625ms ago: executing program 3 (id=1393): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) lsetxattr$trusted_overlay_origin(0x0, 0x0, 0x0, 0x0, 0x1) 344.875815ms ago: executing program 3 (id=1394): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x80, &(0x7f0000000240), 0x1, 0x50d, &(0x7f0000000980)="$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") 0s ago: executing program 3 (id=1395): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x42, &(0x7f0000000040), 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000013c0)=ANY=[@ANYBLOB="1800000500000000009abf5f0347a67c776d4f328fc9c16d000012000800"/40], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001440)={{}, 0x0, &(0x7f0000001400)=r4}, 0xffc2) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000014c0)={0x18, 0xc, &(0x7f0000001580)=ANY=[@ANYRESDEC=r0], &(0x7f0000001480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r5}, 0x10) syz_read_part_table(0x5c0, &(0x7f0000000000)="$eJzs27+KJFUUB+BfVXdXdYNLa2KoDZsYuYHxsKOyOywYLIKZoKmJiGAgKFONookamRj4AptMIBgZD6IvIMIwBoJmIgZq4Fyp/jc1YySNqPB9QXHuufeccxuqwwr/b2U+SkbXkuO6rrbx/I9k+dLTSbtYrSebfH/ghQd37t5b3K+aXa5KfuqSetOnfzTJY7vGWWyiL8b58MHR+x99/FaTLt35cZJPky4p7fZqq9p80vzl0r9V2+b8u564tq52j16XhzNdRbeyectGq3TaPmre23v+ycHp8nYflPXQWXM5Pcnh1dN1jm+uo0l+vsikXuy2Nm/T7fX1rmqTUspk0Gb7L5gMpj315XfHWTbrndGgtnc2S147e/7JatADAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID/nrKxWhzmkWlSJeN+9dkzVbc+NF5nnm3G6/Xvw6L9nByczt959/U6bx688s2rb39/9OP0lySj3Dp6qLTt7tzLaQdV46S+SPLobN/5Zdv2jReH6UWW+ermt4/Xo5Qyv8xPqv75edLluctaAAAAAAAAAAAAAAAAAAAA2NOdu/cW9+vZ9uv6epsvmSbVtQ/cy6+llMOU5kp2luTr81RJfkiphltNMr+RpP2gyWajS0q5Mf3nfhF/x58BAAD//++eW/s=") r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r7, &(0x7f0000000280)={0xa, 0x6e26, 0x1, @mcast1, 0x8}, 0x1c) ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f00000083c0)={{0x1}}) r8 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x25a5, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r6, 0x40505412, 0x0) read(r6, &(0x7f00000003c0)=""/4096, 0x1000) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r6, 0x54a2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) ioperm(0x0, 0x2, 0x2) setuid(0xee01) epoll_create1(0x80000) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f00000001c0)='./bus\x00', 0x1000000, &(0x7f00000005c0)=ANY=[], 0x1, 0x1272, &(0x7f0000002880)="$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") r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$binfmt_script(r9, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r9, 0x0) kernel console output (not intermixed with test programs): rface descriptor's value: 1 [ 96.050814][ T423] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 55360, setting to 64 [ 96.072969][ T423] usb 6-1: New USB device found, idVendor=0125, idProduct=a4a1, bcdDevice= 0.40 [ 96.106034][ T305] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 96.167827][ T28] audit: type=1326 audit(1747752017.395:2734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1905 comm="syz.1.520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7022b8e969 code=0x7ffc0000 [ 96.222387][ T1917] netlink: 104 bytes leftover after parsing attributes in process `syz.3.523'. [ 96.298465][ T305] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 96.337415][ T423] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.345550][ T423] usb 6-1: Product: syz [ 96.349795][ T423] usb 6-1: Manufacturer: syz [ 96.352609][ T28] audit: type=1326 audit(1747752017.395:2735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1905 comm="syz.1.520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7022b8e969 code=0x7ffc0000 [ 96.354421][ T423] usb 6-1: SerialNumber: syz [ 96.358574][ T423] cdc_ncm 6-1:1.0: skipping garbage [ 96.378416][ T305] usb 3-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 96.393220][ T28] audit: type=1326 audit(1747752017.395:2736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1905 comm="syz.1.520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f7022b8e969 code=0x7ffc0000 [ 96.407187][ T305] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.424746][ T28] audit: type=1326 audit(1747752017.395:2737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1905 comm="syz.1.520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7022b8e969 code=0x7ffc0000 [ 96.453246][ T28] audit: type=1326 audit(1747752017.395:2738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1905 comm="syz.1.520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7022b8e969 code=0x7ffc0000 [ 96.454137][ T305] usb 3-1: config 0 descriptor?? [ 96.483179][ T28] audit: type=1326 audit(1747752017.395:2739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1905 comm="syz.1.520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7022b8e969 code=0x7ffc0000 [ 96.508843][ T28] audit: type=1326 audit(1747752017.395:2740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1905 comm="syz.1.520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7022b8e969 code=0x7ffc0000 [ 96.532985][ T1902] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 96.988664][ T1932] syz.3.528[1932] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 96.988760][ T1932] syz.3.528[1932] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 97.025694][ T1936] loop3: detected capacity change from 0 to 128 [ 97.036754][ T1934] loop1: detected capacity change from 0 to 2048 [ 97.052833][ T1936] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 97.061757][ T1936] ext4 filesystem being mounted at /126/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 97.084478][ T287] EXT4-fs (loop3): unmounting filesystem. [ 97.096377][ T1934] loop1: p3 < > p4 < > [ 97.100745][ T1934] loop1: partition table partially beyond EOD, truncated [ 97.108814][ T1934] loop1: p3 start 4284289 is beyond EOD, truncated [ 97.216094][ T305] hid-generic 0003:04F3:0755.000E: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.2-1/input0 [ 97.300010][ T1946] loop0: detected capacity change from 0 to 1024 [ 97.319015][ T1946] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 97.347247][ T284] EXT4-fs (loop0): unmounting filesystem. [ 97.452261][ T304] usb 3-1: USB disconnect, device number 8 [ 97.581717][ T1958] loop0: detected capacity change from 0 to 256 [ 97.589014][ T1958] exfat: Unknown parameter 'iochar' [ 97.977860][ T1958] netlink: 5 bytes leftover after parsing attributes in process `syz.0.535'. [ 98.138192][ T306] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 98.205975][ T423] cdc_ncm 6-1:1.0: bind() failure [ 98.311846][ T423] cdc_ncm: probe of 6-1:1.1 failed with error -71 [ 98.377036][ T423] cdc_mbim: probe of 6-1:1.1 failed with error -71 [ 98.395285][ T423] usb 6-1: USB disconnect, device number 9 [ 98.545788][ T1969] loop2: detected capacity change from 0 to 1024 [ 98.852607][ T1969] EXT4-fs: Ignoring removed oldalloc option [ 98.870289][ T1969] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 98.982081][ T285] EXT4-fs (loop2): unmounting filesystem. [ 99.078489][ T1981] loop5: detected capacity change from 0 to 128 [ 99.111896][ T1981] FAT-fs (loop5): error, invalid FAT chain (i_pos 548, last_block 8) [ 99.120076][ T1981] FAT-fs (loop5): Filesystem has been set read-only [ 99.127032][ T1981] FAT-fs (loop5): error, corrupted file size (i_pos 548, 522) [ 99.503978][ T1990] netlink: 16 bytes leftover after parsing attributes in process `syz.5.545'. [ 99.525652][ T1992] loop3: detected capacity change from 0 to 1024 [ 99.538660][ T1997] loop5: detected capacity change from 0 to 1024 [ 99.542023][ T1992] EXT4-fs: dax option not supported [ 99.557441][ T1997] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 99.613800][ T2001] loop3: detected capacity change from 0 to 1024 [ 99.620733][ T2001] EXT4-fs: Ignoring removed oldalloc option [ 99.627364][ T2001] EXT4-fs: Ignoring removed orlov option [ 99.638672][ T2001] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 99.674254][ T28] kauditd_printk_skb: 188 callbacks suppressed [ 99.674272][ T28] audit: type=1400 audit(1747752020.925:2929): avc: denied { write } for pid=1996 comm="syz.5.547" name="bus" dev="loop5" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 99.706065][ T28] audit: type=1400 audit(1747752020.925:2930): avc: denied { rename } for pid=1996 comm="syz.5.547" name="file1" dev="loop5" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 99.706870][ T2001] EXT4-fs error (device loop3): mb_free_blocks:1815: group 0, inode 18: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 99.728604][ T28] audit: type=1400 audit(1747752020.925:2931): avc: denied { reparent } for pid=1996 comm="syz.5.547" name="file1" dev="loop5" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 99.753630][ T2001] EXT4-fs (loop3): Remounting filesystem read-only [ 99.773420][ T28] audit: type=1400 audit(1747752020.925:2932): avc: denied { add_name } for pid=1996 comm="syz.5.547" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 99.795438][ T414] EXT4-fs (loop5): unmounting filesystem. [ 99.807207][ T305] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 99.890394][ T2010] input: syz1 as /devices/virtual/input/input14 [ 100.011789][ T2015] loop0: detected capacity change from 0 to 256 [ 100.019728][ T2015] exfat: Unknown parameter 'iochar' [ 100.058586][ T2015] netlink: 5 bytes leftover after parsing attributes in process `syz.0.550'. [ 100.074084][ T305] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 100.188181][ T305] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 100.296342][ T305] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 100.374872][ T287] EXT4-fs (loop3): unmounting filesystem. [ 100.381340][ T305] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.504283][ T305] usb 2-1: config 0 descriptor?? [ 100.772055][ T2017] loop3: detected capacity change from 0 to 2048 [ 101.107144][ T2017] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 101.151012][ T305] usb 2-1: string descriptor 0 read error: -71 [ 101.234655][ T305] usb 2-1: USB disconnect, device number 11 [ 101.258332][ T2017] ext4 filesystem being mounted at /131/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 101.277169][ T2025] loop0: detected capacity change from 0 to 1024 [ 101.304136][ T2025] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 101.319948][ T2025] ext4 filesystem being mounted at /92/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 101.331366][ T2017] fs-verity: sha512 using implementation "sha512-avx2" [ 101.354007][ T2025] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 101.376494][ T287] EXT4-fs (loop3): unmounting filesystem. [ 101.405355][ T2025] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 65 with error 28 [ 101.424054][ T2025] EXT4-fs (loop0): This should not happen!! Data will be lost [ 101.424054][ T2025] [ 101.460883][ T2025] EXT4-fs (loop0): Total free blocks count 0 [ 101.467872][ T2025] EXT4-fs (loop0): Free/Dirty block details [ 101.476401][ T2025] EXT4-fs (loop0): free_blocks=4293918720 [ 101.482509][ T2025] EXT4-fs (loop0): dirty_blocks=80 [ 101.488486][ T2025] EXT4-fs (loop0): Block reservation details [ 101.494640][ T2025] EXT4-fs (loop0): i_reserved_data_blocks=5 [ 101.551348][ T284] EXT4-fs (loop0): unmounting filesystem. [ 101.585395][ T2037] loop0: detected capacity change from 0 to 128 [ 101.830361][ T28] audit: type=1326 audit(1747752022.915:2933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2031 comm="syz.3.557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff92e18e969 code=0x7ffc0000 [ 101.979357][ T28] audit: type=1326 audit(1747752022.915:2934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2031 comm="syz.3.557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff92e18e969 code=0x7ffc0000 [ 102.041478][ T2044] loop0: detected capacity change from 0 to 512 [ 102.074116][ T2044] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 102.091580][ T2044] EXT4-fs (loop0): shut down requested (1) [ 102.108677][ T2044] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=12 [ 102.116603][ T28] audit: type=1326 audit(1747752022.975:2935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2031 comm="syz.3.557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7ff92e18e969 code=0x7ffc0000 [ 102.141748][ T28] audit: type=1326 audit(1747752022.975:2936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2031 comm="syz.3.557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff92e18e969 code=0x7ffc0000 [ 102.152164][ T2044] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=12 [ 102.165533][ T28] audit: type=1326 audit(1747752022.975:2937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2031 comm="syz.3.557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff92e18e969 code=0x7ffc0000 [ 102.508019][ T28] audit: type=1326 audit(1747752022.985:2938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2031 comm="syz.3.557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff92e18e969 code=0x7ffc0000 [ 102.533816][ T2044] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=12 [ 102.550891][ T2044] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=12 [ 102.565987][ T2044] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=12 [ 102.598716][ T284] EXT4-fs (loop0): unmounting filesystem. [ 102.606968][ T2013] loop5: detected capacity change from 0 to 131072 [ 102.632982][ T2013] F2FS-fs (loop5): Test dummy encryption mode enabled [ 102.676783][ T2013] F2FS-fs (loop5): invalid crc value [ 102.684113][ T2040] loop2: detected capacity change from 0 to 40427 [ 102.717924][ T2013] F2FS-fs (loop5): Found nat_bits in checkpoint [ 102.719466][ T2053] loop0: detected capacity change from 0 to 2048 [ 102.726929][ T2040] F2FS-fs (loop2): Wrong SSA boundary, start(3584) end(4096) blocks(0) [ 102.752664][ T2040] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 102.761348][ T2040] F2FS-fs (loop2): fault_type options not supported [ 102.766914][ T2053] loop0: p3 < > p4 < > [ 102.769676][ T2040] F2FS-fs (loop2): Image doesn't support compression [ 102.772311][ T2053] loop0: partition table partially beyond EOD, truncated [ 102.789254][ T2053] loop0: p3 start 4284289 is beyond EOD, truncated [ 102.798153][ T2013] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 103.085639][ T2040] F2FS-fs (loop2): invalid crc value [ 103.104715][ T2040] F2FS-fs (loop2): Found nat_bits in checkpoint [ 103.198334][ T2040] F2FS-fs (loop2): Start checkpoint disabled! [ 103.205629][ T2040] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 103.213459][ T2040] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 103.285411][ T2067] loop1: detected capacity change from 0 to 256 [ 103.293262][ T2067] exfat: Unknown parameter 'iochar' [ 103.338987][ T2067] netlink: 5 bytes leftover after parsing attributes in process `syz.1.565'. [ 104.019246][ T2069] fuse: Bad value for 'fd' [ 104.254390][ T8] kworker/u4:0: attempt to access beyond end of device [ 104.254390][ T8] loop2: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 104.412592][ T2092] loop5: detected capacity change from 0 to 2048 [ 104.511240][ T2092] loop5: p3 < > p4 < > [ 104.515454][ T2092] loop5: partition table partially beyond EOD, truncated [ 104.526105][ T2092] loop5: p3 start 4284289 is beyond EOD, truncated [ 104.546249][ T102] loop5: p3 < > p4 < > [ 104.550568][ T102] loop5: partition table partially beyond EOD, truncated [ 104.566052][ T102] loop5: p3 start 4284289 is beyond EOD, truncated [ 104.575988][ T39] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 104.755975][ T39] usb 1-1: Using ep0 maxpacket: 16 [ 104.776704][ T39] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 104.844270][ T28] kauditd_printk_skb: 174 callbacks suppressed [ 104.844295][ T28] audit: type=1326 audit(1747752026.095:3113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2091 comm="syz.5.578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfb3f8e969 code=0x7ffc0000 [ 104.896628][ T28] audit: type=1326 audit(1747752026.145:3114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2091 comm="syz.5.578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfb3f8e969 code=0x7ffc0000 [ 104.908285][ T39] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.928492][ T39] usb 1-1: Product: syz [ 104.932775][ T39] usb 1-1: Manufacturer: syz [ 104.937922][ T28] audit: type=1326 audit(1747752026.195:3115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2091 comm="syz.5.578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fcfb3f8e969 code=0x7ffc0000 [ 104.962310][ T39] usb 1-1: SerialNumber: syz [ 104.971952][ T39] usb 1-1: config 0 descriptor?? [ 104.980512][ T39] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 104.984716][ T2086] loop3: detected capacity change from 0 to 40427 [ 104.990123][ T39] usb 1-1: Detected FT232H [ 105.003727][ T2086] F2FS-fs (loop3): Small segment_count (9 < 1 * 24) [ 105.009190][ T28] audit: type=1326 audit(1747752026.195:3116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2091 comm="syz.5.578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfb3f8e969 code=0x7ffc0000 [ 105.018963][ T2086] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 105.063134][ T28] audit: type=1326 audit(1747752026.195:3117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2091 comm="syz.5.578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfb3f8e969 code=0x7ffc0000 [ 105.076774][ T2086] F2FS-fs (loop3): Found nat_bits in checkpoint [ 105.087123][ T28] audit: type=1326 audit(1747752026.195:3118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2091 comm="syz.5.578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fcfb3f8d2d0 code=0x7ffc0000 [ 105.116585][ T28] audit: type=1326 audit(1747752026.195:3119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2091 comm="syz.5.578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fcfb3f90197 code=0x7ffc0000 [ 105.132614][ T2086] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 105.141437][ T28] audit: type=1326 audit(1747752026.195:3120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2091 comm="syz.5.578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fcfb3f8e969 code=0x7ffc0000 [ 105.147637][ T2086] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 105.171909][ T28] audit: type=1326 audit(1747752026.195:3121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2091 comm="syz.5.578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fcfb3f90197 code=0x7ffc0000 [ 105.251292][ T39] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 105.306274][ T287] syz-executor: attempt to access beyond end of device [ 105.306274][ T287] loop3: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 105.323686][ T28] audit: type=1326 audit(1747752026.195:3122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2091 comm="syz.5.578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fcfb3f8d5ca code=0x7ffc0000 [ 105.447209][ T2123] loop1: detected capacity change from 0 to 256 [ 105.474153][ T2123] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x46ae1815, utbl_chksum : 0xe619d30d) [ 106.016129][ T2123] exFAT-fs (loop1): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 106.317064][ T39] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 106.577047][ T2146] loop3: detected capacity change from 0 to 256 [ 106.585132][ T2146] exfat: Unknown parameter 'iochar' [ 106.920592][ T2146] netlink: 5 bytes leftover after parsing attributes in process `syz.3.587'. [ 108.154394][ T1401] usb 1-1: USB disconnect, device number 12 [ 108.172486][ T1401] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 108.492609][ T1401] ftdi_sio 1-1:0.0: device disconnected [ 109.074694][ T2174] loop1: detected capacity change from 0 to 1024 [ 109.101125][ T1401] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 109.144963][ T2174] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 109.150623][ T2184] loop2: detected capacity change from 0 to 512 [ 109.178976][ T2184] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 109.286010][ T1401] usb 1-1: Using ep0 maxpacket: 16 [ 109.316297][ T1401] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 109.432395][ T2184] EXT4-fs (loop2): 1 truncate cleaned up [ 109.453620][ T2184] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 109.478926][ T1401] usb 1-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 109.521402][ T1401] usb 1-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 109.531733][ T1401] usb 1-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 109.535188][ T285] EXT4-fs (loop2): unmounting filesystem. [ 109.543269][ T1401] usb 1-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 109.568300][ T1401] usb 1-1: config 1 interface 0 has no altsetting 0 [ 109.575101][ T1401] usb 1-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 109.595948][ T1401] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.624799][ T1401] ums-sddr09 1-1:1.0: USB Mass Storage device detected [ 109.724337][ T2202] SELinux: policydb table sizes (8,-2145189879) do not match mine (8,9) [ 109.739263][ T286] EXT4-fs (loop1): unmounting filesystem. [ 109.745770][ T2202] SELinux: failed to load policy [ 109.767335][ T2206] raw_sendmsg: syz.3.614 forgot to set AF_INET. Fix it! [ 109.821462][ T1401] scsi host1: usb-storage 1-1:1.0 [ 110.306370][ T28] kauditd_printk_skb: 118 callbacks suppressed [ 110.306389][ T28] audit: type=1326 audit(1747752031.105:3241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2216 comm="syz.1.617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7022b8e969 code=0x7ffc0000 [ 110.325327][ T6] usb 1-1: USB disconnect, device number 13 [ 110.365325][ T28] audit: type=1326 audit(1747752031.215:3242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2203 comm="syz.2.612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f359018e969 code=0x7ffc0000 [ 110.367966][ T2217] loop1: detected capacity change from 0 to 2048 [ 110.390322][ T28] audit: type=1326 audit(1747752031.225:3243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2203 comm="syz.2.612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f359018e969 code=0x7ffc0000 [ 110.419725][ T28] audit: type=1326 audit(1747752031.225:3244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2203 comm="syz.2.612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f359018e969 code=0x7ffc0000 [ 110.443616][ T28] audit: type=1326 audit(1747752031.225:3245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2203 comm="syz.2.612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f359018e969 code=0x7ffc0000 [ 110.468015][ T28] audit: type=1326 audit(1747752031.235:3246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2203 comm="syz.2.612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f359018e969 code=0x7ffc0000 [ 110.491615][ T2217] loop1: p3 < > p4 < > [ 110.495034][ T28] audit: type=1326 audit(1747752031.235:3247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2203 comm="syz.2.612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f359018e969 code=0x7ffc0000 [ 110.496185][ T2217] loop1: partition table partially beyond EOD, [ 110.519445][ T28] audit: type=1326 audit(1747752031.235:3248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2203 comm="syz.2.612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f359018e969 code=0x7ffc0000 [ 110.525853][ T2217] truncated [ 110.550105][ T28] audit: type=1326 audit(1747752031.235:3249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2203 comm="syz.2.612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f359018e969 code=0x7ffc0000 [ 110.577379][ T28] audit: type=1326 audit(1747752031.245:3250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2203 comm="syz.2.612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f359018e969 code=0x7ffc0000 [ 110.602885][ T2217] loop1: p3 start 4284289 is beyond EOD, truncated [ 110.645972][ T1401] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 110.738958][ T2238] overlayfs: upper fs does not support file handles, falling back to index=off. [ 110.748564][ T2238] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 110.850753][ T1401] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 110.861003][ T1401] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 110.870160][ T1401] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 110.880744][ T1401] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.221055][ T1401] usb 6-1: config 0 descriptor?? [ 112.545644][ T1401] usb 6-1: string descriptor 0 read error: -71 [ 112.589123][ T1401] usb 6-1: USB disconnect, device number 10 [ 112.607121][ T2275] netlink: 136 bytes leftover after parsing attributes in process `syz.3.638'. [ 112.626409][ T2275] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 112.687062][ T2279] random: crng reseeded on system resumption [ 112.694680][ T2271] loop1: detected capacity change from 0 to 2048 [ 112.716486][ T2271] loop1: p3 < > p4 < > [ 112.720701][ T2271] loop1: partition table partially beyond EOD, truncated [ 112.749260][ T2271] loop1: p3 start 4284289 is beyond EOD, truncated [ 113.278597][ T2305] binder: 2304:2305 ioctl 4018620d 0 returned -22 [ 113.684007][ T2316] loop3: detected capacity change from 0 to 256 [ 113.800598][ T2323] loop0: detected capacity change from 0 to 2048 [ 114.828565][ T2323] loop0: p3 < > p4 < > [ 114.952327][ T2323] loop0: partition table partially beyond EOD, truncated [ 114.969990][ T2323] loop0: p3 start 4284289 is beyond EOD, truncated [ 114.982483][ T2331] loop1: detected capacity change from 0 to 2048 [ 114.998458][ T102] loop0: p3 < > p4 < > [ 115.002693][ T102] loop0: partition table partially beyond EOD, truncated [ 115.010332][ T102] loop0: p3 start 4284289 is beyond EOD, truncated [ 115.085005][ T2331] loop1: p3 < > p4 < > [ 115.092235][ T2331] loop1: partition table partially beyond EOD, truncated [ 115.100386][ T2331] loop1: p3 start 4284289 is beyond EOD, truncated [ 115.246138][ T2361] loop3: detected capacity change from 0 to 16 [ 115.253216][ T2361] erofs: (device loop3): mounted with root inode @ nid 36. [ 115.255738][ T2361] erofs: (device loop3): z_erofs_readahead: readahead error at page 2 @ nid 89 [ 115.257919][ T47] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress 6887 in[4096, 0] out[8192] [ 115.320681][ T28] kauditd_printk_skb: 545 callbacks suppressed [ 115.320699][ T28] audit: type=1326 audit(1747752036.575:3796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2330 comm="syz.1.660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f7022b85927 code=0x7ffc0000 [ 115.354915][ T2366] loop3: detected capacity change from 0 to 512 [ 115.365022][ T2366] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 115.375755][ T28] audit: type=1326 audit(1747752036.575:3797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2330 comm="syz.1.660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7022b2ab39 code=0x7ffc0000 [ 115.400288][ T28] audit: type=1326 audit(1747752036.575:3798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2330 comm="syz.1.660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7022b8e969 code=0x7ffc0000 [ 115.424779][ T28] audit: type=1326 audit(1747752036.575:3799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2330 comm="syz.1.660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7022b8e969 code=0x7ffc0000 [ 115.449384][ T28] audit: type=1326 audit(1747752036.585:3800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2330 comm="syz.1.660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f7022b85927 code=0x7ffc0000 [ 115.473974][ T2366] EXT4-fs (loop3): 1 truncate cleaned up [ 115.479948][ T2366] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 115.488828][ T28] audit: type=1326 audit(1747752036.585:3801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2330 comm="syz.1.660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7022b2ab39 code=0x7ffc0000 [ 115.512836][ T28] audit: type=1326 audit(1747752036.585:3802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2330 comm="syz.1.660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7022b8e969 code=0x7ffc0000 [ 115.536465][ T304] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 115.544090][ T28] audit: type=1326 audit(1747752036.595:3803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2330 comm="syz.1.660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f7022b85927 code=0x7ffc0000 [ 115.567525][ T28] audit: type=1326 audit(1747752036.595:3804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2330 comm="syz.1.660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7022b2ab39 code=0x7ffc0000 [ 115.567723][ T2334] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 115.591362][ T28] audit: type=1326 audit(1747752036.595:3805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2330 comm="syz.1.660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7022b8e969 code=0x7ffc0000 [ 115.625418][ T287] EXT4-fs (loop3): unmounting filesystem. [ 115.681156][ T2380] loop5: detected capacity change from 0 to 128 [ 115.697437][ T2380] FAT-fs (loop5): Directory bread(block 32) failed [ 115.705305][ T2380] FAT-fs (loop5): Directory bread(block 33) failed [ 115.715868][ T2380] FAT-fs (loop5): Directory bread(block 34) failed [ 115.725455][ T2380] FAT-fs (loop5): Directory bread(block 35) failed [ 115.733153][ T2380] FAT-fs (loop5): Directory bread(block 36) failed [ 115.740766][ T2380] FAT-fs (loop5): Directory bread(block 37) failed [ 115.747821][ T2380] FAT-fs (loop5): Directory bread(block 38) failed [ 115.754475][ T2380] FAT-fs (loop5): Directory bread(block 39) failed [ 115.761394][ T2380] FAT-fs (loop5): Directory bread(block 40) failed [ 115.768121][ T304] usb 3-1: Using ep0 maxpacket: 16 [ 115.773608][ T2380] FAT-fs (loop5): Directory bread(block 41) failed [ 115.783416][ T304] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 115.809399][ T304] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.835964][ T304] usb 3-1: Product: syz [ 115.840435][ T304] usb 3-1: Manufacturer: syz [ 115.845068][ T304] usb 3-1: SerialNumber: syz [ 115.852000][ T304] r8152-cfgselector 3-1: config 0 descriptor?? [ 115.898149][ T2334] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 115.923322][ T2390] loop1: detected capacity change from 0 to 256 [ 115.931679][ T2390] exfat: Unknown parameter 'iochar' [ 116.000625][ T2390] netlink: 5 bytes leftover after parsing attributes in process `syz.1.681'. [ 116.068339][ T2334] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 116.200889][ T2334] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 116.221533][ T2380] syz.5.680: attempt to access beyond end of device [ 116.221533][ T2380] loop5: rw=0, sector=4108, nr_sectors = 4 limit=128 [ 116.268118][ T2334] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 116.300036][ T2380] FAT-fs (loop5): Filesystem has been set read-only [ 116.357643][ T2334] usb 1-1: SerialNumber: syz [ 116.382948][ T2380] FAT-fs (loop5): error, fat_free_clusters: deleting FAT entry beyond EOF [ 117.210448][ T2399] loop5: detected capacity change from 0 to 2048 [ 117.334824][ T2334] usb 1-1: 0:2 : does not exist [ 117.346698][ T2399] loop5: p3 < > p4 < > [ 117.351111][ T2399] loop5: partition table partially beyond EOD, truncated [ 117.366928][ T2399] loop5: p3 start 4284289 is beyond EOD, truncated [ 117.406351][ T2334] usb 1-1: USB disconnect, device number 14 [ 117.717804][ T306] udevd[306]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 117.757280][ T2412] loop1: detected capacity change from 0 to 512 [ 117.791807][ T304] r8152-cfgselector 3-1: Unknown version 0x0000 [ 117.798314][ T304] r8152-cfgselector 3-1: bad CDC descriptors [ 117.805184][ T304] r8152-cfgselector 3-1: Unknown version 0x0000 [ 117.813458][ T304] r8152-cfgselector 3-1: USB disconnect, device number 9 [ 117.837916][ T2412] EXT4-fs error (device loop1): ext4_orphan_get:1400: inode #15: comm syz.1.691: casefold flag without casefold feature [ 117.851117][ T2412] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.691: couldn't read orphan inode 15 (err -117) [ 117.863783][ T2412] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 117.887678][ T286] EXT4-fs (loop1): unmounting filesystem. [ 118.645961][ T821] usb 6-1: new full-speed USB device number 11 using dummy_hcd [ 118.681436][ T2443] loop3: detected capacity change from 0 to 512 [ 118.688536][ T2443] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 118.700710][ T2443] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2186: inode #15: comm syz.3.702: corrupted in-inode xattr [ 118.714336][ T2443] EXT4-fs (loop3): Remounting filesystem read-only [ 118.728657][ T2443] EXT4-fs (loop3): 1 truncate cleaned up [ 118.734731][ T2443] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 119.143590][ T287] EXT4-fs (loop3): unmounting filesystem. [ 119.157053][ T821] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 119.169974][ T821] usb 6-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 119.179503][ T821] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.575745][ T821] usb 6-1: config 0 descriptor?? [ 119.586606][ T2435] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 119.695145][ T2469] loop3: detected capacity change from 0 to 2048 [ 119.746272][ T2469] loop3: p3 < > p4 < > [ 119.750727][ T2469] loop3: partition table partially beyond EOD, truncated [ 119.773853][ T2469] loop3: p3 start 4284289 is beyond EOD, truncated [ 119.938997][ T102] loop3: p3 < > p4 < > [ 119.948958][ T102] loop3: partition table partially beyond EOD, truncated [ 119.967520][ T102] loop3: p3 start 4284289 is beyond EOD, truncated [ 119.974742][ T2474] loop0: detected capacity change from 0 to 1024 [ 119.996941][ T2474] EXT4-fs (loop0): Test dummy encryption mode enabled [ 120.025672][ T2474] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 120.060825][ T2474] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 120.081803][ T284] EXT4-fs (loop0): unmounting filesystem. [ 120.139384][ T821] hid-generic 0003:04F3:0755.000F: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.5-1/input0 [ 120.340995][ T2489] loop1: detected capacity change from 0 to 256 [ 120.349007][ T2489] exfat: Unknown parameter 'iochar' [ 120.397913][ T2489] netlink: 9 bytes leftover after parsing attributes in process `syz.1.713'. [ 120.408416][ T2489] device 30ªX¹¦D entered promiscuous mode [ 120.792784][ T24] usb 6-1: USB disconnect, device number 11 [ 121.430151][ T28] kauditd_printk_skb: 318 callbacks suppressed [ 121.430170][ T28] audit: type=1326 audit(1747752042.285:4124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2490 comm="syz.0.716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce73b8e969 code=0x7ffc0000 [ 121.476052][ T28] audit: type=1326 audit(1747752042.285:4125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2490 comm="syz.0.716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce73b8e969 code=0x7ffc0000 [ 121.569284][ T28] audit: type=1326 audit(1747752042.285:4126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2490 comm="syz.0.716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7fce73b8e969 code=0x7ffc0000 [ 121.610356][ T28] audit: type=1326 audit(1747752042.285:4127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2490 comm="syz.0.716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce73b8e969 code=0x7ffc0000 [ 121.702468][ T28] audit: type=1326 audit(1747752042.285:4128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2490 comm="syz.0.716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce73b8e969 code=0x7ffc0000 [ 121.735790][ T2503] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 121.740244][ T28] audit: type=1326 audit(1747752042.285:4129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2490 comm="syz.0.716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fce73b8e969 code=0x7ffc0000 [ 122.090283][ T28] audit: type=1326 audit(1747752042.285:4130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2490 comm="syz.0.716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce73b8e969 code=0x7ffc0000 [ 122.117598][ T28] audit: type=1326 audit(1747752042.285:4131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2490 comm="syz.0.716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce73b8e969 code=0x7ffc0000 [ 122.153470][ T28] audit: type=1326 audit(1747752042.285:4132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2490 comm="syz.0.716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fce73b8e969 code=0x7ffc0000 [ 122.220772][ T28] audit: type=1326 audit(1747752042.285:4133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2490 comm="syz.0.716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce73b8e969 code=0x7ffc0000 [ 123.015614][ T2523] loop5: detected capacity change from 0 to 256 [ 123.023843][ T2523] exfat: Unknown parameter 'iochar' [ 123.071087][ T2523] netlink: 5 bytes leftover after parsing attributes in process `syz.5.725'. [ 123.576025][ T24] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 123.848199][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 123.866618][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 123.885833][ T24] usb 2-1: New USB device found, idVendor=046d, idProduct=c534, bcdDevice= 0.00 [ 123.896009][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.916227][ T24] usb 2-1: config 0 descriptor?? [ 124.184087][ T2549] cgroup: Unknown subsys name '¬§@﬽æì¦4*oäÂÒ£hÓîºoþüíUÜ' [ 124.336969][ T24] logitech-djreceiver 0003:046D:C534.0010: collection stack underflow [ 124.359178][ T24] logitech-djreceiver 0003:046D:C534.0010: item 0 4 0 12 parsing failed [ 124.376403][ T24] logitech-djreceiver 0003:046D:C534.0010: logi_dj_probe: parse failed [ 124.399743][ T24] logitech-djreceiver: probe of 0003:046D:C534.0010 failed with error -22 [ 124.538339][ T2585] loop3: detected capacity change from 0 to 2048 [ 124.553184][ T821] usb 2-1: USB disconnect, device number 12 [ 124.577255][ T2585] loop3: p3 < > p4 < > [ 124.581942][ T2585] loop3: partition table partially beyond EOD, truncated [ 124.589284][ T2593] loop0: detected capacity change from 0 to 2048 [ 124.589846][ T2585] loop3: p3 start 4284289 is beyond EOD, truncated [ 124.615441][ T102] loop3: p3 < > p4 < > [ 124.620084][ T102] loop3: partition table partially beyond EOD, truncated [ 124.627777][ T102] loop3: p3 start 4284289 is beyond EOD, truncated [ 124.636598][ T2593] loop0: p3 < > p4 < > [ 124.640995][ T2593] loop0: partition table partially beyond EOD, truncated [ 124.649197][ T2593] loop0: p3 start 4284289 is beyond EOD, truncated [ 125.219483][ T2609] netlink: 44 bytes leftover after parsing attributes in process `syz.1.763'. [ 125.228557][ T2609] netlink: 43 bytes leftover after parsing attributes in process `syz.1.763'. [ 125.239215][ T2609] netlink: 'syz.1.763': attribute type 6 has an invalid length. [ 125.253293][ T2609] netlink: 'syz.1.763': attribute type 5 has an invalid length. [ 125.261461][ T2609] netlink: 43 bytes leftover after parsing attributes in process `syz.1.763'. [ 125.536016][ T304] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 125.777398][ T304] usb 6-1: config 0 has no interfaces? [ 125.784943][ T304] usb 6-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 125.815939][ T304] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.824101][ T304] usb 6-1: Product: syz [ 125.835948][ T304] usb 6-1: Manufacturer: syz [ 125.840619][ T304] usb 6-1: SerialNumber: syz [ 125.859839][ T304] r8152-cfgselector 6-1: config 0 descriptor?? [ 126.966000][ T304] usb 6-1: USB disconnect, device number 12 [ 127.166011][ T28] kauditd_printk_skb: 429 callbacks suppressed [ 127.166041][ T28] audit: type=1400 audit(1747752048.415:4563): avc: denied { create } for pid=2660 comm="syz.3.779" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 127.203703][ T28] audit: type=1400 audit(1747752048.415:4564): avc: denied { write } for pid=2660 comm="syz.3.779" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 127.339299][ T28] audit: type=1326 audit(1747752048.595:4565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2666 comm="syz.3.783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff92e18e969 code=0x7ffc0000 [ 127.393781][ T28] audit: type=1326 audit(1747752048.595:4566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2666 comm="syz.3.783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff92e18e969 code=0x7ffc0000 [ 127.456023][ T28] audit: type=1326 audit(1747752048.595:4567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2666 comm="syz.3.783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7ff92e18e969 code=0x7ffc0000 [ 127.543376][ T2686] loop2: detected capacity change from 0 to 1024 [ 127.580224][ T28] audit: type=1326 audit(1747752048.595:4568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2666 comm="syz.3.783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff92e18e969 code=0x7ffc0000 [ 127.645458][ T28] audit: type=1326 audit(1747752048.595:4569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2666 comm="syz.3.783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff92e18e969 code=0x7ffc0000 [ 127.687554][ T2686] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 127.743996][ T28] audit: type=1326 audit(1747752048.615:4570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2666 comm="syz.3.783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff92e18e969 code=0x7ffc0000 [ 127.786353][ T2680] loop3: detected capacity change from 0 to 40427 [ 127.793380][ T28] audit: type=1326 audit(1747752048.615:4571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2666 comm="syz.3.783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff92e18e969 code=0x7ffc0000 [ 127.797592][ T2680] F2FS-fs (loop3): LFS is not compatible with checkpoint=disable [ 127.816845][ T28] audit: type=1326 audit(1747752048.615:4572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2666 comm="syz.3.783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff92e18e969 code=0x7ffc0000 [ 127.870572][ T285] EXT4-fs (loop2): unmounting filesystem. [ 129.165923][ T304] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 129.367380][ T304] usb 2-1: unable to get BOS descriptor or descriptor too short [ 129.381096][ T304] usb 2-1: not running at top speed; connect to a high speed hub [ 129.410477][ T304] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 129.429319][ T304] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 130.517192][ T304] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 130.536406][ T304] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.554754][ T304] usb 2-1: Product: syz [ 130.559181][ T304] usb 2-1: Manufacturer: syz [ 130.563876][ T304] usb 2-1: SerialNumber: syz [ 130.662863][ T2780] loop0: detected capacity change from 0 to 2048 [ 130.719887][ T2780] loop0: p3 < > p4 < > [ 130.721919][ T2791] syz.2.830[2791] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 130.724148][ T2780] loop0: partition table partially beyond EOD, [ 130.724156][ T2791] syz.2.830[2791] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 130.768206][ T2780] truncated [ 130.790907][ T2780] loop0: p3 start 4284289 is beyond EOD, truncated [ 130.816095][ T102] loop0: p3 < > p4 < > [ 130.822777][ T102] loop0: partition table partially beyond EOD, truncated [ 130.830397][ T102] loop0: p3 start 4284289 is beyond EOD, truncated [ 130.841162][ T304] usb 2-1: cannot find UAC_HEADER [ 130.903549][ T304] snd-usb-audio: probe of 2-1:1.0 failed with error -22 [ 130.926524][ T304] usb 2-1: USB disconnect, device number 13 [ 131.086049][ T821] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 131.136287][ T306] udevd[306]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 131.612532][ T2334] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 131.662062][ T2334] hid-generic 0000:0000:0000.0011: hidraw0: HID v0.00 Device [syz0] on syz1 [ 131.676912][ T2813] loop1: detected capacity change from 0 to 1024 [ 131.687827][ T2813] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 131.698713][ T821] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 131.712647][ T821] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 131.722447][ T821] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 131.735294][ T286] EXT4-fs (loop1): unmounting filesystem. [ 131.753532][ T2817] fido_id[2817]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 131.769761][ T821] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 131.778138][ T821] usb 3-1: SerialNumber: syz [ 131.839225][ T2825] netlink: 28 bytes leftover after parsing attributes in process `syz.3.838'. [ 131.988439][ T821] usb 3-1: 0:2 : does not exist [ 132.008420][ T821] usb 3-1: USB disconnect, device number 10 [ 132.035821][ T2844] input: syz1 as /devices/virtual/input/input15 [ 132.057329][ T2819] loop5: detected capacity change from 0 to 40427 [ 132.064680][ T2819] F2FS-fs (loop5): fault_injection options not supported [ 132.106008][ T2819] F2FS-fs (loop5): invalid crc value [ 132.128531][ T2819] F2FS-fs (loop5): Found nat_bits in checkpoint [ 132.214204][ T2819] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 132.240929][ T28] kauditd_printk_skb: 245 callbacks suppressed [ 132.240945][ T28] audit: type=1400 audit(1747752053.495:4818): avc: denied { setattr } for pid=2818 comm="syz.5.837" name="file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 132.289176][ T28] audit: type=1400 audit(1747752053.525:4819): avc: denied { mounton } for pid=2818 comm="syz.5.837" path="/155/file1/file0" dev="loop5" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 132.314001][ T414] F2FS-fs (loop5): access invalid blkaddr:2816 [ 132.316493][ T28] audit: type=1400 audit(1747752053.535:4820): avc: denied { remove_name } for pid=2818 comm="syz.5.837" name="#3" dev="loop5" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 132.320485][ T414] CPU: 1 PID: 414 Comm: syz-executor Not tainted 6.1.134-syzkaller-00022-gb07be5e5113b #0 [ 132.342747][ T28] audit: type=1400 audit(1747752053.535:4821): avc: denied { rename } for pid=2818 comm="syz.5.837" name="#3" dev="loop5" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 132.352103][ T414] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 132.352135][ T414] Call Trace: [ 132.352142][ T414] [ 132.352152][ T414] __dump_stack+0x21/0x24 [ 132.374250][ T28] audit: type=1400 audit(1747752053.535:4822): avc: denied { unlink } for pid=2818 comm="syz.5.837" name="#3" dev="loop5" ino=25 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 132.383836][ T414] dump_stack_lvl+0xee/0x150 [ 132.383871][ T414] ? __cfi_dump_stack_lvl+0x8/0x8 [ 132.387516][ T28] audit: type=1400 audit(1747752053.535:4823): avc: denied { unlink } for pid=2818 comm="syz.5.837" name="#4" dev="loop5" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 132.390218][ T414] ? __cfi_f2fs_get_dnode_of_data+0x10/0x10 [ 132.446839][ T338] udevd[338]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 132.447867][ T414] dump_stack+0x15/0x24 [ 132.473776][ T414] __f2fs_is_valid_blkaddr+0xda6/0x1460 [ 132.479367][ T414] f2fs_is_valid_blkaddr+0x23/0x30 [ 132.484595][ T414] f2fs_map_blocks+0xc93/0x3a60 [ 132.489578][ T414] ? sched_clock_cpu+0x6e/0x250 [ 132.494457][ T414] ? __cfi_f2fs_map_blocks+0x10/0x10 [ 132.499775][ T414] ? xas_start+0x317/0x3e0 [ 132.504213][ T414] ? xas_load+0x39e/0x3b0 [ 132.508565][ T414] ? xa_load+0xad/0xd0 [ 132.512648][ T414] f2fs_mpage_readpages+0xa3a/0x1b70 [ 132.517941][ T414] ? cgroup_rstat_updated+0xf5/0x370 [ 132.523285][ T414] ? dquot_release_reservation_block+0xa0/0xa0 [ 132.529467][ T414] ? cgroup_rstat_updated+0xf5/0x370 [ 132.534911][ T414] ? xas_nomem+0x6b/0x1f0 [ 132.539355][ T414] f2fs_readahead+0xfc/0x240 [ 132.542441][ T28] audit: type=1326 audit(1747752053.755:4824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2868 comm="syz.3.857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff92e18e969 code=0x7ffc0000 [ 132.543994][ T414] ? __cfi_f2fs_readahead+0x10/0x10 [ 132.570279][ T28] audit: type=1326 audit(1747752053.755:4825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2868 comm="syz.3.857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff92e18e969 code=0x7ffc0000 [ 132.572508][ T414] read_pages+0x1b0/0xdd0 [ 132.572541][ T414] ? __cfi___filemap_add_folio+0x10/0x10 [ 132.597121][ T28] audit: type=1326 audit(1747752053.755:4826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2868 comm="syz.3.857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7ff92e18e969 code=0x7ffc0000 [ 132.600272][ T414] ? page_cache_ra_unbounded+0x720/0x720 [ 132.606361][ T28] audit: type=1326 audit(1747752053.755:4827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2868 comm="syz.3.857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff92e18e969 code=0x7ffc0000 [ 132.629254][ T414] ? folio_add_lru+0x260/0x390 [ 132.629288][ T414] ? filemap_add_folio+0x105/0x150 [ 132.637399][ T2875] netlink: 24 bytes leftover after parsing attributes in process `syz.2.859'. [ 132.658392][ T414] page_cache_ra_unbounded+0x5d1/0x720 [ 132.658430][ T414] ? __kernel_text_address+0xd/0x30 [ 132.658459][ T414] ? __cfi_page_cache_ra_unbounded+0x10/0x10 [ 132.658485][ T414] page_cache_ra_order+0x36a/0xb70 [ 132.699643][ T414] ? __cfi_native_flush_tlb_one_user+0x10/0x10 [ 132.705830][ T414] ? memcg_rstat_updated+0x56/0x110 [ 132.711198][ T414] ? __kasan_check_read+0x11/0x20 [ 132.716449][ T414] ? __cfi_page_cache_ra_order+0x10/0x10 [ 132.722341][ T414] ondemand_readahead+0x817/0xdb0 [ 132.727414][ T414] ? get_delayacct_enabled+0x19/0x30 [ 132.732742][ T414] ? page_cache_sync_ra+0x490/0x490 [ 132.738061][ T414] page_cache_sync_ra+0x41b/0x490 [ 132.743293][ T414] f2fs_readdir+0x444/0x940 [ 132.747904][ T414] ? cgroup_rstat_updated+0xf5/0x370 [ 132.753212][ T414] ? __cfi_f2fs_readdir+0x10/0x10 [ 132.758346][ T414] ? handle_mm_fault+0x17be/0x2640 [ 132.763674][ T414] ? down_read_killable+0xb6/0x100 [ 132.768845][ T414] ? __cfi_down_read_killable+0x10/0x10 [ 132.774935][ T414] ? fsnotify_perm+0x269/0x5b0 [ 132.779778][ T414] ? security_file_permission+0x94/0xb0 [ 132.785692][ T414] iterate_dir+0x271/0x610 [ 132.790224][ T414] ? __cfi_f2fs_readdir+0x10/0x10 [ 132.795300][ T414] __se_sys_getdents64+0xe5/0x240 [ 132.800495][ T414] ? __x64_sys_getdents64+0x90/0x90 [ 132.805720][ T414] ? __cfi_filldir64+0x10/0x10 [ 132.810502][ T414] ? do_user_addr_fault+0x9ac/0x1050 [ 132.815798][ T414] ? debug_smp_processor_id+0x17/0x20 [ 132.821193][ T414] __x64_sys_getdents64+0x7b/0x90 [ 132.826334][ T414] x64_sys_call+0x15c/0x9a0 [ 132.831012][ T414] do_syscall_64+0x4c/0xa0 [ 132.835545][ T414] ? clear_bhb_loop+0x15/0x70 [ 132.840455][ T414] ? clear_bhb_loop+0x15/0x70 [ 132.845243][ T414] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 132.851194][ T414] RIP: 0033:0x7fcfb3fc12d3 [ 132.855619][ T414] Code: c1 66 0f 1f 44 00 00 48 83 c4 08 48 89 ef 5b 5d e9 52 3e f8 ff 66 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 a8 ff ff ff f7 d8 [ 132.875234][ T414] RSP: 002b:00007ffdf993fe08 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9 [ 132.883645][ T414] RAX: ffffffffffffffda RBX: 00005555825224e0 RCX: 00007fcfb3fc12d3 [ 132.891610][ T414] RDX: 0000000000008000 RSI: 00005555825224e0 RDI: 0000000000000005 [ 132.899627][ T414] RBP: 00005555825224b4 R08: 0000000000000000 R09: 0000000000000000 [ 132.907652][ T414] R10: 0000000000001000 R11: 0000000000000293 R12: ffffffffffffffa8 [ 132.915721][ T414] R13: 0000000000000010 R14: 00005555825224b0 R15: 00007ffdf99420c0 [ 132.924063][ T414] [ 132.931059][ T414] F2FS-fs (loop5): access invalid blkaddr:2816 [ 132.940468][ T414] CPU: 0 PID: 414 Comm: syz-executor Not tainted 6.1.134-syzkaller-00022-gb07be5e5113b #0 [ 132.950596][ T414] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 132.960760][ T414] Call Trace: [ 132.964189][ T414] [ 132.967227][ T414] __dump_stack+0x21/0x24 [ 132.972109][ T414] dump_stack_lvl+0xee/0x150 [ 132.976836][ T414] ? __cfi_dump_stack_lvl+0x8/0x8 [ 132.979440][ T2882] loop0: detected capacity change from 0 to 128 [ 132.981890][ T414] ? __cfi_f2fs_get_dnode_of_data+0x10/0x10 [ 132.994134][ T414] dump_stack+0x15/0x24 [ 132.998323][ T414] __f2fs_is_valid_blkaddr+0xda6/0x1460 [ 133.003959][ T414] f2fs_is_valid_blkaddr+0x23/0x30 [ 133.009360][ T414] f2fs_map_blocks+0xc93/0x3a60 [ 133.014242][ T414] ? sched_clock_cpu+0x6e/0x250 [ 133.019208][ T414] ? __cfi_f2fs_map_blocks+0x10/0x10 [ 133.024520][ T414] ? xas_start+0x317/0x3e0 [ 133.029050][ T414] ? xas_load+0x39e/0x3b0 [ 133.033469][ T414] ? xa_load+0xad/0xd0 [ 133.037671][ T414] f2fs_mpage_readpages+0xa3a/0x1b70 [ 133.042977][ T414] ? cgroup_rstat_updated+0xf5/0x370 [ 133.048277][ T414] ? dquot_release_reservation_block+0xa0/0xa0 [ 133.054462][ T414] ? cgroup_rstat_updated+0xf5/0x370 [ 133.060118][ T414] ? xas_nomem+0x6b/0x1f0 [ 133.064446][ T414] f2fs_readahead+0xfc/0x240 [ 133.069157][ T414] ? __cfi_f2fs_readahead+0x10/0x10 [ 133.074542][ T414] read_pages+0x1b0/0xdd0 [ 133.079059][ T414] ? __cfi___filemap_add_folio+0x10/0x10 [ 133.084871][ T414] ? page_cache_ra_unbounded+0x720/0x720 [ 133.090501][ T414] ? folio_add_lru+0x260/0x390 [ 133.095268][ T414] ? filemap_add_folio+0x105/0x150 [ 133.100383][ T414] page_cache_ra_unbounded+0x5d1/0x720 [ 133.105845][ T414] ? __kernel_text_address+0xd/0x30 [ 133.111146][ T414] ? __cfi_page_cache_ra_unbounded+0x10/0x10 [ 133.117212][ T414] page_cache_ra_order+0x36a/0xb70 [ 133.122322][ T414] ? __cfi_native_flush_tlb_one_user+0x10/0x10 [ 133.128472][ T414] ? memcg_rstat_updated+0x56/0x110 [ 133.133671][ T414] ? __kasan_check_read+0x11/0x20 [ 133.138701][ T414] ? __cfi_page_cache_ra_order+0x10/0x10 [ 133.144337][ T414] ondemand_readahead+0x817/0xdb0 [ 133.149445][ T414] ? get_delayacct_enabled+0x19/0x30 [ 133.154833][ T414] ? page_cache_sync_ra+0x490/0x490 [ 133.160125][ T414] page_cache_sync_ra+0x41b/0x490 [ 133.165162][ T414] f2fs_readdir+0x444/0x940 [ 133.169690][ T414] ? cgroup_rstat_updated+0xf5/0x370 [ 133.175092][ T414] ? __cfi_f2fs_readdir+0x10/0x10 [ 133.180157][ T414] ? handle_mm_fault+0x17be/0x2640 [ 133.185286][ T414] ? down_read_killable+0xb6/0x100 [ 133.190396][ T414] ? __cfi_down_read_killable+0x10/0x10 [ 133.196115][ T414] ? fsnotify_perm+0x269/0x5b0 [ 133.200878][ T414] ? security_file_permission+0x94/0xb0 [ 133.206525][ T414] iterate_dir+0x271/0x610 [ 133.210971][ T414] ? __cfi_f2fs_readdir+0x10/0x10 [ 133.216006][ T414] __se_sys_getdents64+0xe5/0x240 [ 133.221237][ T414] ? __x64_sys_getdents64+0x90/0x90 [ 133.226548][ T414] ? __cfi_filldir64+0x10/0x10 [ 133.231722][ T414] ? do_user_addr_fault+0x9ac/0x1050 [ 133.237103][ T414] ? debug_smp_processor_id+0x17/0x20 [ 133.242490][ T414] __x64_sys_getdents64+0x7b/0x90 [ 133.247555][ T414] x64_sys_call+0x15c/0x9a0 [ 133.252084][ T414] do_syscall_64+0x4c/0xa0 [ 133.256511][ T414] ? clear_bhb_loop+0x15/0x70 [ 133.261366][ T414] ? clear_bhb_loop+0x15/0x70 [ 133.266140][ T414] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 133.272213][ T414] RIP: 0033:0x7fcfb3fc12d3 [ 133.276627][ T414] Code: c1 66 0f 1f 44 00 00 48 83 c4 08 48 89 ef 5b 5d e9 52 3e f8 ff 66 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 a8 ff ff ff f7 d8 [ 133.296419][ T414] RSP: 002b:00007ffdf993fe08 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9 [ 133.304887][ T414] RAX: ffffffffffffffda RBX: 00005555825224e0 RCX: 00007fcfb3fc12d3 [ 133.312858][ T414] RDX: 0000000000008000 RSI: 00005555825224e0 RDI: 0000000000000005 [ 133.320840][ T414] RBP: 00005555825224b4 R08: 0000000000000000 R09: 0000000000000000 [ 133.328848][ T414] R10: 0000000000001000 R11: 0000000000000293 R12: ffffffffffffffa8 [ 133.336915][ T414] R13: 0000000000000010 R14: 00005555825224b0 R15: 00007ffdf99420c0 [ 133.345176][ T414] [ 133.349189][ T414] syz-executor: attempt to access beyond end of device [ 133.349189][ T414] loop5: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 133.365074][ T2882] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 133.373922][ T2882] ext4 filesystem being mounted at /141/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 133.412365][ T284] EXT4-fs (loop0): unmounting filesystem. [ 133.423992][ T2334] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 133.574606][ T1960] kworker/u4:5: attempt to access beyond end of device [ 133.574606][ T1960] loop5: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 133.635629][ T1960] tipc: Left network mode [ 133.687695][ T2334] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 134.015472][ T2334] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 134.094836][ T2334] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 134.249830][ T2334] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 134.270344][ T2334] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.293799][ T2334] usb 2-1: config 0 descriptor?? [ 134.620717][ T2927] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.627984][ T2927] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.635662][ T2927] device bridge_slave_0 entered promiscuous mode [ 134.642990][ T2927] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.650473][ T2927] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.658385][ T2927] device bridge_slave_1 entered promiscuous mode [ 134.716891][ T1960] device bridge_slave_1 left promiscuous mode [ 134.723756][ T1960] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.732766][ T2334] plantronics 0003:047F:FFFF.0012: No inputs registered, leaving [ 134.741290][ T1960] device bridge_slave_0 left promiscuous mode [ 134.749155][ T2334] plantronics 0003:047F:FFFF.0012: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 134.754194][ T1960] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.776386][ T1960] device veth1_macvtap left promiscuous mode [ 134.782571][ T1960] device veth0_vlan left promiscuous mode [ 134.874168][ T305] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 134.959160][ T201] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 134.967462][ T201] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 134.976901][ T201] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 134.985673][ T201] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 134.994312][ T201] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.997575][ T2911] usb 2-1: USB disconnect, device number 14 [ 135.001452][ T201] bridge0: port 1(bridge_slave_0) entered forwarding state [ 135.021560][ T201] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 135.029837][ T201] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 135.038662][ T201] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 135.047512][ T201] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.054649][ T201] bridge0: port 2(bridge_slave_1) entered forwarding state [ 135.063926][ T201] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 135.073686][ T201] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 135.088370][ T305] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 135.090897][ T201] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 135.099490][ T305] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 135.117248][ T201] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 135.118184][ T305] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.126186][ T201] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 135.134393][ T305] usb 3-1: config 0 descriptor?? [ 135.143037][ T201] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 135.154204][ T2927] device veth0_vlan entered promiscuous mode [ 135.166697][ T201] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 135.176681][ T2927] device veth1_macvtap entered promiscuous mode [ 135.188272][ T201] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 135.199585][ T201] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 135.554855][ T305] keytouch 0003:0926:3333.0013: fixing up Keytouch IEC report descriptor [ 135.578641][ T305] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0013/input/input17 [ 135.659168][ T305] keytouch 0003:0926:3333.0013: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 135.786209][ T2911] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 136.067388][ T2911] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 136.078666][ T2911] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 136.088868][ T2911] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 136.103351][ T2911] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 136.113025][ T2911] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.126090][ T2911] usb 2-1: config 0 descriptor?? [ 136.314823][ T305] usb 3-1: USB disconnect, device number 11 [ 136.356560][ T2998] loop6: detected capacity change from 0 to 256 [ 136.368937][ T2998] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 136.538850][ T2911] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 136.549798][ T2911] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 136.571831][ T2911] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 136.579710][ T2911] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 136.587510][ T2911] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 136.595075][ T2911] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 136.602870][ T2911] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 136.610816][ T2911] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 136.619277][ T2911] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 136.627320][ T2911] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 136.634918][ T2911] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 136.642941][ T2911] plantronics 0003:047F:FFFF.0014: No inputs registered, leaving [ 136.657074][ T2911] plantronics 0003:047F:FFFF.0014: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 137.237547][ T3018] loop3: detected capacity change from 0 to 2048 [ 137.239112][ T3020] loop2: detected capacity change from 0 to 512 [ 137.251496][ T3020] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 137.266424][ T3018] loop3: p3 < > p4 < > [ 137.268357][ T3020] EXT4-fs error (device loop2): ext4_quota_enable:6976: comm syz.2.914: Bad quota inum: 29696, type: 1 [ 137.270736][ T3018] loop3: partition table partially beyond EOD, truncated [ 137.282140][ T3020] EXT4-fs warning (device loop2): ext4_enable_quotas:7024: Failed to enable quota tracking (type=1, err=-117, ino=29696). Please run e2fsck to fix. [ 137.290696][ T3018] loop3: p3 start 4284289 is beyond EOD, truncated [ 137.306564][ T3020] EXT4-fs (loop2): mount failed [ 137.315285][ T28] kauditd_printk_skb: 427 callbacks suppressed [ 137.315305][ T28] audit: type=1326 audit(1747752058.565:5255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3017 comm="syz.3.913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=262 compat=0 ip=0x7ff92e18d17a code=0x7ffc0000 [ 137.317664][ T304] usb 2-1: USB disconnect, device number 15 [ 137.324747][ T28] audit: type=1326 audit(1747752058.585:5256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3017 comm="syz.3.913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=262 compat=0 ip=0x7ff92e18d17a code=0x7ffc0000 [ 137.376652][ T28] audit: type=1326 audit(1747752058.585:5257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3017 comm="syz.3.913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=262 compat=0 ip=0x7ff92e18d17a code=0x7ffc0000 [ 137.400607][ T28] audit: type=1326 audit(1747752058.585:5258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3017 comm="syz.3.913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=262 compat=0 ip=0x7ff92e18d17a code=0x7ffc0000 [ 137.424821][ T28] audit: type=1326 audit(1747752058.585:5259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3017 comm="syz.3.913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=266 compat=0 ip=0x7ff92e18dee7 code=0x7ffc0000 [ 137.477458][ T28] audit: type=1326 audit(1747752058.585:5260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3017 comm="syz.3.913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=262 compat=0 ip=0x7ff92e18d17a code=0x7ffc0000 [ 137.502654][ T28] audit: type=1326 audit(1747752058.585:5261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3017 comm="syz.3.913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=262 compat=0 ip=0x7ff92e18d17a code=0x7ffc0000 [ 137.526371][ T28] audit: type=1326 audit(1747752058.585:5262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3017 comm="syz.3.913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=262 compat=0 ip=0x7ff92e18d17a code=0x7ffc0000 [ 137.551005][ T28] audit: type=1326 audit(1747752058.585:5263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3017 comm="syz.3.913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7ff92e18d5ca code=0x7ffc0000 [ 137.575034][ T28] audit: type=1326 audit(1747752058.585:5264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3017 comm="syz.3.913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff92e18e969 code=0x7ffc0000 [ 137.776315][ T3046] loop2: detected capacity change from 0 to 2048 [ 137.797260][ T3046] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 137.806109][ T3046] ext4 filesystem being mounted at /178/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 137.819185][ T3046] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.923: bg 0: block 137: padding at end of block bitmap is not set [ 137.836063][ T3046] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 137.898559][ T3049] loop3: detected capacity change from 0 to 256 [ 137.906560][ T3049] exfat: Unknown parameter 'iochar' [ 137.953835][ T3046] fs-verity (loop2, inode 13): Error -28 writing Merkle tree block 1 [ 137.985092][ T3049] netlink: 5 bytes leftover after parsing attributes in process `syz.3.918'. [ 137.997155][ T338] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 138.024486][ T3046] fs-verity (loop2, inode 13): Error -28 building Merkle tree [ 138.379053][ T285] EXT4-fs (loop2): unmounting filesystem. [ 138.698818][ T3056] loop0: detected capacity change from 0 to 2048 [ 138.712211][ T24] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 138.726794][ T24] hid-generic 0000:0000:0000.0015: hidraw0: HID v0.00 Device [syz1] on syz0 [ 138.746276][ T3056] loop0: p3 < > p4 < > [ 138.750766][ T3056] loop0: partition table partially beyond EOD, truncated [ 138.807079][ T3056] loop0: p3 start 4284289 is beyond EOD, truncated [ 138.931408][ T3064] loop2: detected capacity change from 0 to 2048 [ 138.986452][ T3064] loop2: p3 < > p4 < > [ 138.990688][ T3064] loop2: partition table partially beyond EOD, truncated [ 139.014340][ T3064] loop2: p3 start 4284289 is beyond EOD, truncated [ 139.469883][ T3113] loop2: detected capacity change from 0 to 2048 [ 139.536592][ T3118] loop6: detected capacity change from 0 to 512 [ 139.546347][ T3113] loop2: p3 < > p4 < > [ 139.550579][ T3113] loop2: partition table partially beyond EOD, truncated [ 139.571153][ T3113] loop2: p3 start 4284289 is beyond EOD, truncated [ 139.578317][ T3118] journal_path: Lookup failure for './file0' [ 139.584509][ T3118] EXT4-fs: error: could not find journal device path [ 140.659212][ T3137] input: syz0 as /devices/virtual/input/input18 [ 140.786116][ T3140] loop1: detected capacity change from 0 to 2048 [ 140.827429][ T3140] loop1: p3 < > p4 < > [ 140.842183][ T3140] loop1: partition table partially beyond EOD, truncated [ 140.891792][ T3140] loop1: p3 start 4284289 is beyond EOD, truncated [ 140.937799][ T3157] loop2: detected capacity change from 0 to 128 [ 140.955767][ T102] loop1: p3 < > p4 < > [ 140.960331][ T102] loop1: partition table partially beyond EOD, truncated [ 140.973597][ T102] loop1: p3 start 4284289 is beyond EOD, truncated [ 141.011213][ T3157] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 141.068273][ T3157] ext4 filesystem being mounted at /182/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 141.169686][ T3157] EXT4-fs warning (device loop2): verify_group_input:151: Cannot add at group 3 (only 1 groups) [ 141.188679][ T285] EXT4-fs (loop2): unmounting filesystem. [ 141.324687][ T3182] loop2: detected capacity change from 0 to 7 [ 141.740060][ T3190] loop0: detected capacity change from 0 to 2048 [ 141.764058][ T3190] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 141.800198][ T3190] ext4 filesystem being mounted at /162/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 141.840539][ T284] EXT4-fs (loop0): unmounting filesystem. [ 141.899969][ T3207] loop6: detected capacity change from 0 to 2048 [ 141.941682][ T3207] loop6: p3 < > p4 < > [ 141.946489][ T3207] loop6: partition table partially beyond EOD, truncated [ 141.954314][ T3207] loop6: p3 start 4284289 is beyond EOD, truncated [ 141.981200][ T3211] process 'syz.1.983' launched './file0' with NULL argv: empty string added [ 142.173893][ T3225] syz.1.989[3225] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 142.173975][ T3225] syz.1.989[3225] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 142.190385][ T3227] loop2: detected capacity change from 0 to 512 [ 142.256787][ T3227] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 142.287349][ T3227] EXT4-fs (loop2): 1 truncate cleaned up [ 142.364000][ T3227] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 142.399561][ T285] EXT4-fs (loop2): unmounting filesystem. [ 142.518647][ T28] kauditd_printk_skb: 756 callbacks suppressed [ 142.518693][ T28] audit: type=1326 audit(1747752063.775:6021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3238 comm="syz.6.992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f773798e969 code=0x7ffc0000 [ 142.532243][ T3239] loop6: detected capacity change from 0 to 2048 [ 142.567714][ T28] audit: type=1326 audit(1747752063.775:6022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3238 comm="syz.6.992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f773798e969 code=0x7ffc0000 [ 142.592627][ T28] audit: type=1326 audit(1747752063.775:6023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3238 comm="syz.6.992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f773798e969 code=0x7ffc0000 [ 142.618676][ T28] audit: type=1326 audit(1747752063.775:6024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3238 comm="syz.6.992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f773798e969 code=0x7ffc0000 [ 142.646226][ T3239] loop6: p3 < > p4 < > [ 142.665274][ T3239] loop6: partition table partially beyond EOD, truncated [ 142.691021][ T28] audit: type=1326 audit(1747752063.775:6025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3238 comm="syz.6.992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f773798e969 code=0x7ffc0000 [ 142.716398][ T3239] loop6: p3 start 4284289 is beyond EOD, truncated [ 143.001338][ T28] audit: type=1326 audit(1747752063.775:6026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3238 comm="syz.6.992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f773798e969 code=0x7ffc0000 [ 143.026104][ T28] audit: type=1326 audit(1747752063.775:6027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3238 comm="syz.6.992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f773798e969 code=0x7ffc0000 [ 143.320700][ T28] audit: type=1326 audit(1747752063.775:6028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3238 comm="syz.6.992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f773798e969 code=0x7ffc0000 [ 143.486234][ T28] audit: type=1326 audit(1747752063.775:6029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3238 comm="syz.6.992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f773798e969 code=0x7ffc0000 [ 143.523907][ T28] audit: type=1326 audit(1747752063.775:6030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3238 comm="syz.6.992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f773798e969 code=0x7ffc0000 [ 143.832487][ T3278] loop0: detected capacity change from 0 to 128 [ 143.870009][ T3278] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 143.879021][ T3278] ext4 filesystem being mounted at /169/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 143.907829][ T3278] syz.0.1008 (pid 3278) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 143.995544][ T284] EXT4-fs (loop0): unmounting filesystem. [ 144.041414][ T3296] loop0: detected capacity change from 0 to 2048 [ 144.066992][ T3296] loop0: p3 < > p4 < > [ 144.072304][ T3296] loop0: partition table partially beyond EOD, truncated [ 144.080406][ T3296] loop0: p3 start 4284289 is beyond EOD, truncated [ 144.099947][ T102] loop0: p3 < > p4 < > [ 144.104263][ T102] loop0: partition table partially beyond EOD, truncated [ 144.111468][ T102] loop0: p3 start 4284289 is beyond EOD, truncated [ 144.396819][ T3307] loop0: detected capacity change from 0 to 256 [ 144.409527][ T3307] FAT-fs (loop0): Directory bread(block 64) failed [ 144.416691][ T3307] FAT-fs (loop0): Directory bread(block 65) failed [ 144.423553][ T3307] FAT-fs (loop0): Directory bread(block 66) failed [ 144.430439][ T3307] FAT-fs (loop0): Directory bread(block 67) failed [ 144.437326][ T3307] FAT-fs (loop0): Directory bread(block 68) failed [ 144.444045][ T3307] FAT-fs (loop0): Directory bread(block 69) failed [ 144.450978][ T3307] FAT-fs (loop0): Directory bread(block 70) failed [ 144.457935][ T3307] FAT-fs (loop0): Directory bread(block 71) failed [ 144.464794][ T3307] FAT-fs (loop0): Directory bread(block 72) failed [ 144.472343][ T3307] FAT-fs (loop0): Directory bread(block 73) failed [ 144.495260][ T3307] syz.0.1017: attempt to access beyond end of device [ 144.495260][ T3307] loop0: rw=2049, sector=1888, nr_sectors = 8 limit=256 [ 145.063521][ T8] kworker/u4:0: attempt to access beyond end of device [ 145.063521][ T8] loop0: rw=1, sector=1224, nr_sectors = 608 limit=256 [ 145.096663][ T8] kworker/u4:0: attempt to access beyond end of device [ 145.096663][ T8] loop0: rw=1, sector=1864, nr_sectors = 24 limit=256 [ 145.131004][ T8] kworker/u4:0: attempt to access beyond end of device [ 145.131004][ T8] loop0: rw=1, sector=1896, nr_sectors = 3216 limit=256 [ 145.148116][ T8] kworker/u4:0: attempt to access beyond end of device [ 145.148116][ T8] loop0: rw=1, sector=5112, nr_sectors = 2488 limit=256 [ 145.230126][ T8] kworker/u4:0: attempt to access beyond end of device [ 145.230126][ T8] loop0: rw=1, sector=7600, nr_sectors = 2528 limit=256 [ 145.248131][ T8] kworker/u4:0: attempt to access beyond end of device [ 145.248131][ T8] loop0: rw=1, sector=10128, nr_sectors = 2784 limit=256 [ 145.266943][ T8] kworker/u4:0: attempt to access beyond end of device [ 145.266943][ T8] loop0: rw=1, sector=12912, nr_sectors = 4120 limit=256 [ 145.344458][ T8] kworker/u4:0: attempt to access beyond end of device [ 145.344458][ T8] loop0: rw=1, sector=17032, nr_sectors = 14680 limit=256 [ 145.366551][ T8] kworker/u4:0: attempt to access beyond end of device [ 145.366551][ T8] loop0: rw=1, sector=31712, nr_sectors = 2088 limit=256 [ 145.721376][ T3334] loop6: detected capacity change from 0 to 256 [ 145.729323][ T3334] exfat: Unknown parameter 'iochar' [ 145.768615][ T3334] netlink: 5 bytes leftover after parsing attributes in process `syz.6.1026'. [ 147.595473][ T3378] random: crng reseeded on system resumption [ 147.734189][ T3382] loop0: detected capacity change from 0 to 1024 [ 147.772065][ T3382] EXT4-fs: Ignoring removed orlov option [ 147.787216][ T3382] EXT4-fs: Ignoring removed nomblk_io_submit option [ 147.818429][ T305] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 147.826851][ T305] hid-generic 0000:0000:0000.0016: hidraw0: HID v0.00 Device [syz1] on syz0 [ 147.855302][ T3382] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 147.866966][ T3387] fido_id[3387]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 147.896191][ T3346] loop3: detected capacity change from 0 to 131072 [ 147.903471][ T3346] F2FS-fs (loop3): Wrong CP boundary, start(512) end(1536) blocks(0) [ 147.912501][ T3346] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 147.919568][ T28] kauditd_printk_skb: 255 callbacks suppressed [ 147.919587][ T28] audit: type=1400 audit(1747752069.175:6283): avc: denied { setattr } for pid=3381 comm="syz.0.1040" name="file0" dev="loop0" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 147.922438][ T3346] F2FS-fs (loop3): invalid crc value [ 147.956691][ T284] EXT4-fs (loop0): unmounting filesystem. [ 147.958652][ T3346] F2FS-fs (loop3): Found nat_bits in checkpoint [ 148.009088][ T3346] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 148.016648][ T3346] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 148.049636][ T3346] F2FS-fs (loop3): checksum invalid, nid = 4, ino_of_node = 4, 8e2acc4a vs. 159afe7 [ 148.061783][ T3346] F2FS-fs (loop3): checksum invalid, nid = 4, ino_of_node = 4, 8e2acc4a vs. 159afe7 [ 148.072948][ T28] audit: type=1400 audit(1747752069.335:6284): avc: denied { transition } for pid=3399 comm="syz.2.1045" path="/197/file0" dev="tmpfs" ino=1044 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process permissive=1 [ 148.121959][ T28] audit: type=1400 audit(1747752069.355:6285): avc: denied { entrypoint } for pid=3399 comm="syz.2.1045" path="/197/file0" dev="tmpfs" ino=1044 scontext=system_u:object_r:hugetlbfs_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 148.156073][ T28] audit: type=1400 audit(1747752069.355:6286): avc: denied { noatsecure } for pid=3399 comm="syz.2.1045" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process permissive=1 [ 148.188473][ T28] audit: type=1326 audit(1747752069.415:6287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3405 comm="syz.1.1048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7022b8e969 code=0x7ffc0000 [ 148.195135][ T3406] loop1: detected capacity change from 0 to 2048 [ 148.213249][ T28] audit: type=1326 audit(1747752069.415:6288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3405 comm="syz.1.1048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f7022b8e969 code=0x7ffc0000 [ 148.243073][ T28] audit: type=1326 audit(1747752069.415:6289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3405 comm="syz.1.1048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7022b8e969 code=0x7ffc0000 [ 148.266910][ T28] audit: type=1326 audit(1747752069.415:6290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3405 comm="syz.1.1048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f7022b8e969 code=0x7ffc0000 [ 148.290933][ T28] audit: type=1326 audit(1747752069.415:6291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3405 comm="syz.1.1048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7022b8e969 code=0x7ffc0000 [ 148.315987][ T1401] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 148.316674][ T28] audit: type=1326 audit(1747752069.415:6292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3405 comm="syz.1.1048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7022b8e969 code=0x7ffc0000 [ 148.349565][ T3406] loop1: p3 < > p4 < > [ 148.353866][ T3406] loop1: partition table partially beyond EOD, truncated [ 148.366952][ T3406] loop1: p3 start 4284289 is beyond EOD, truncated [ 148.412264][ T102] loop1: p3 < > p4 < > [ 148.419569][ T102] loop1: partition table partially beyond EOD, truncated [ 148.440071][ T102] loop1: p3 start 4284289 is beyond EOD, truncated [ 148.498950][ T1401] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 148.515622][ T1401] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 148.527835][ T1401] usb 1-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 148.550334][ T1401] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.563770][ T1401] usb 1-1: config 0 descriptor?? [ 149.108017][ T3440] loop1: detected capacity change from 0 to 512 [ 149.118955][ T3440] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 149.130206][ T3440] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1061'. [ 149.306826][ T3452] loop1: detected capacity change from 0 to 2048 [ 149.331554][ T3452] loop1: p3 < > p4 < > [ 149.346235][ T3452] loop1: partition table partially beyond EOD, truncated [ 149.353533][ T3452] loop1: p3 start 4284289 is beyond EOD, truncated [ 149.492381][ T3466] input: syz0 as /devices/virtual/input/input19 [ 149.588488][ T3468] SELinux: ebitmap start bit (16779520) is beyond the end of the bitmap (1472) [ 149.617811][ T1401] usb 1-1: USB disconnect, device number 15 [ 149.618810][ T3468] SELinux: failed to load policy [ 149.666401][ T821] hid-generic 0000:0004:0000.0018: unknown main item tag 0x0 [ 149.677579][ T821] hid-generic 0000:0004:0000.0018: unknown main item tag 0x0 [ 149.685117][ T821] hid-generic 0000:0004:0000.0018: unknown main item tag 0x0 [ 149.693680][ T821] hid-generic 0000:0004:0000.0018: hidraw0: HID v0.00 Device [syz0] on syz1 [ 149.744655][ T3480] fido_id[3480]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 149.905994][ T304] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 150.315929][ T304] usb 7-1: Using ep0 maxpacket: 32 [ 150.322571][ T304] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 150.333749][ T304] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 150.343855][ T304] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 150.353351][ T304] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.746013][ T304] usb 7-1: config 0 descriptor?? [ 152.320391][ T3525] loop3: detected capacity change from 0 to 256 [ 152.484275][ T304] savu 0003:1E7D:2D5A.0019: hiddev96,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.6-1/input0 [ 152.514915][ T3542] loop0: detected capacity change from 0 to 2048 [ 152.566234][ T3542] loop0: p3 < > p4 < > [ 152.570447][ T3542] loop0: partition table partially beyond EOD, truncated [ 152.587838][ T3542] loop0: p3 start 4284289 is beyond EOD, truncated [ 152.767987][ T1401] usb 7-1: USB disconnect, device number 2 [ 152.984455][ T3572] loop1: detected capacity change from 0 to 2048 [ 153.023897][ T3572] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 153.114043][ T286] EXT4-fs (loop1): unmounting filesystem. [ 153.151573][ T304] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 153.566739][ T28] kauditd_printk_skb: 350 callbacks suppressed [ 153.566889][ T28] audit: type=1326 audit(1747752074.745:6643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3591 comm="syz.1.1120" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7022b8e969 code=0x0 [ 153.695958][ T304] usb 4-1: Using ep0 maxpacket: 16 [ 153.702592][ T304] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 153.718475][ T304] usb 4-1: New USB device found, idVendor=0b57, idProduct=2bbd, bcdDevice=e7.cc [ 153.728170][ T304] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.736644][ T304] usb 4-1: Product: syz [ 153.741154][ T304] usb 4-1: Manufacturer: syz [ 153.745828][ T304] usb 4-1: SerialNumber: syz [ 153.752125][ T304] usb 4-1: config 0 descriptor?? [ 153.759266][ T304] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 153.794890][ T3616] loop2: detected capacity change from 0 to 1024 [ 153.801804][ T3616] EXT4-fs: Ignoring removed nobh option [ 153.808109][ T3616] EXT4-fs: Ignoring removed bh option [ 153.814069][ T3616] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 153.838113][ T3616] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 153.868164][ T285] EXT4-fs (loop2): unmounting filesystem. [ 153.885315][ T3621] tmpfs: Unknown parameter 'fow' [ 153.905975][ T1401] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 153.922029][ T304] hid-generic FFFC:0003:0000.001A: unknown main item tag 0x0 [ 153.930865][ T304] hid-generic FFFC:0003:0000.001A: unknown main item tag 0x0 [ 153.939349][ T304] hid-generic FFFC:0003:0000.001A: unknown main item tag 0x0 [ 153.947960][ T304] hid-generic FFFC:0003:0000.001A: unknown main item tag 0x0 [ 153.955695][ T304] hid-generic FFFC:0003:0000.001A: unknown main item tag 0x0 [ 153.971051][ T304] hid-generic FFFC:0003:0000.001A: unknown main item tag 0x0 [ 153.980990][ T3500] usb 4-1: USB disconnect, device number 9 [ 153.989200][ T304] hid-generic FFFC:0003:0000.001A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 154.065757][ T3634] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 154.066644][ T3628] fido_id[3628]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 154.076676][ T3634] SELinux: failed to load policy [ 154.096091][ T1401] usb 7-1: Using ep0 maxpacket: 16 [ 154.102400][ T1401] usb 7-1: config 0 interface 0 has no altsetting 0 [ 154.117376][ T1401] usb 7-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 154.141434][ T1401] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.168758][ T1401] usb 7-1: Product: syz [ 154.173080][ T1401] usb 7-1: Manufacturer: syz [ 154.177865][ T1401] usb 7-1: SerialNumber: syz [ 154.186815][ T1401] r8152-cfgselector 7-1: config 0 descriptor?? [ 154.232437][ T28] audit: type=1326 audit(1747752075.485:6644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3640 comm="syz.0.1139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce73b8e969 code=0x7ffc0000 [ 154.256164][ T28] audit: type=1326 audit(1747752075.485:6645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3640 comm="syz.0.1139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce73b8e969 code=0x7ffc0000 [ 154.256522][ T3641] loop0: detected capacity change from 0 to 2048 [ 154.287828][ T28] audit: type=1326 audit(1747752075.485:6646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3640 comm="syz.0.1139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fce73b8e969 code=0x7ffc0000 [ 154.312340][ T28] audit: type=1326 audit(1747752075.485:6647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3640 comm="syz.0.1139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce73b8e969 code=0x7ffc0000 [ 154.338440][ T3641] loop0: p3 < > p4 < > [ 154.342751][ T3641] loop0: partition table partially beyond EOD, truncated [ 154.350306][ T28] audit: type=1326 audit(1747752075.485:6648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3640 comm="syz.0.1139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce73b8e969 code=0x7ffc0000 [ 154.374658][ T3641] loop0: p3 start 4284289 is beyond EOD, truncated [ 154.394850][ T102] loop0: p3 < > p4 < > [ 154.403009][ T102] loop0: partition table partially beyond EOD, truncated [ 154.410604][ T102] loop0: p3 start 4284289 is beyond EOD, truncated [ 154.423451][ T28] audit: type=1326 audit(1747752075.485:6649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3640 comm="syz.0.1139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fce73b8e969 code=0x7ffc0000 [ 154.447959][ T28] audit: type=1326 audit(1747752075.485:6650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3640 comm="syz.0.1139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce73b8e969 code=0x7ffc0000 [ 154.471977][ T745] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 154.480059][ T28] audit: type=1326 audit(1747752075.485:6651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3640 comm="syz.0.1139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce73b8e969 code=0x7ffc0000 [ 154.504383][ T28] audit: type=1326 audit(1747752075.485:6652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3640 comm="syz.0.1139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fce73b8e969 code=0x7ffc0000 [ 154.603253][ T1401] r8152-cfgselector 7-1: Unknown version 0x0000 [ 154.612468][ T1401] r8152-cfgselector 7-1: bad CDC descriptors [ 154.626479][ T1401] r8152-cfgselector 7-1: Unknown version 0x0000 [ 154.639562][ T1401] r8152-cfgselector 7-1: USB disconnect, device number 3 [ 154.675956][ T745] usb 2-1: Using ep0 maxpacket: 32 [ 154.682247][ T745] usb 2-1: config 1 has an invalid interface number: 242 but max is 0 [ 154.700054][ T745] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 154.741578][ T745] usb 2-1: config 1 has no interface number 0 [ 154.748225][ T745] usb 2-1: config 1 interface 242 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 154.762513][ T745] usb 2-1: config 1 interface 242 has no altsetting 0 [ 154.787665][ T745] usb 2-1: New USB device found, idVendor=2eca, idProduct=c101, bcdDevice= 7.df [ 154.808580][ T745] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.822859][ T745] usb 2-1: Product: syz [ 154.831443][ T745] usb 2-1: Manufacturer: syz [ 154.836936][ T745] usb 2-1: SerialNumber: syz [ 155.317893][ T745] aqc111: probe of 2-1:1.242 failed with error -22 [ 155.396093][ T3695] loop6: detected capacity change from 0 to 1024 [ 155.402981][ T3695] EXT4-fs: Ignoring removed nobh option [ 155.409476][ T3695] EXT4-fs: Ignoring removed bh option [ 155.419014][ T3695] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 155.453121][ T3695] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 155.495311][ T2927] EXT4-fs (loop6): unmounting filesystem. [ 155.502061][ T3705] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 155.512506][ T3705] SELinux: failed to load policy [ 155.529727][ T3707] loop6: detected capacity change from 0 to 512 [ 155.555584][ T3707] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 155.559040][ T3711] loop2: detected capacity change from 0 to 512 [ 155.579676][ T3711] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 155.599080][ T3707] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #11: comm syz.6.1166: invalid indirect mapped block 4294967295 (level 1) [ 155.603443][ T3711] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 155.614214][ T3707] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #11: comm syz.6.1166: invalid indirect mapped block 4294967295 (level 1) [ 155.622825][ T3711] ext4 filesystem being mounted at /232/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 155.643843][ T3707] EXT4-fs (loop6): 2 truncates cleaned up [ 155.655429][ T3707] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 155.727382][ T2927] EXT4-fs (loop6): unmounting filesystem. [ 155.794217][ T285] EXT4-fs (loop2): unmounting filesystem. [ 155.988729][ T1401] kernel write not supported for file bpf-prog (pid: 1401 comm: kworker/1:7) [ 156.031762][ T3757] overlayfs: missing 'lowerdir' [ 156.061948][ T3761] loop0: detected capacity change from 0 to 2048 [ 156.085723][ T3766] loop2: detected capacity change from 0 to 1024 [ 156.114516][ T3761] loop0: p3 < > p4 < > [ 156.120235][ T3770] syz.6.1191[3770] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 156.120334][ T3770] syz.6.1191[3770] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 156.132477][ T3761] loop0: partition table partially beyond EOD, [ 156.147285][ T3766] EXT4-fs (loop2): Test dummy encryption mode enabled [ 156.161165][ T3761] truncated [ 156.166611][ T3766] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 156.171083][ T3761] loop0: p3 start 4284289 is beyond EOD, truncated [ 156.195350][ T285] EXT4-fs (loop2): unmounting filesystem. [ 156.274817][ T102] loop0: p3 < > p4 < > [ 156.279201][ T102] loop0: partition table partially beyond EOD, truncated [ 156.286603][ T102] loop0: p3 start 4284289 is beyond EOD, truncated [ 156.390589][ T3781] loop6: detected capacity change from 0 to 40427 [ 156.402083][ T3781] F2FS-fs (loop6): fault_injection options not supported [ 156.410082][ T3781] F2FS-fs (loop6): invalid crc value [ 156.457633][ T3781] F2FS-fs (loop6): Found nat_bits in checkpoint [ 156.493877][ T3788] loop2: detected capacity change from 0 to 2048 [ 156.502185][ T3781] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 156.526826][ T3788] loop2: p3 < > p4 < > [ 156.531127][ T3788] loop2: partition table partially beyond EOD, truncated [ 156.547727][ T3788] loop2: p3 start 4284289 is beyond EOD, truncated [ 156.689571][ T3794] fuse: Invalid user_id [ 156.715153][ T3796] loop0: detected capacity change from 0 to 2048 [ 156.741101][ T3796] Alternate GPT is invalid, using primary GPT. [ 156.750955][ T3800] loop6: detected capacity change from 0 to 2048 [ 156.757619][ T3796] loop0: p1 p2 p3 [ 156.796208][ T3800] loop6: p3 < > p4 < > [ 156.800533][ T3800] loop6: partition table partially beyond EOD, truncated [ 156.813524][ T306] udevd[306]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 156.818655][ T338] udevd[338]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 156.826795][ T337] udevd[337]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 156.845298][ T3800] loop6: p3 start 4284289 is beyond EOD, truncated [ 156.856347][ T102] loop6: p3 < > p4 < > [ 156.860700][ T102] loop6: partition table partially beyond EOD, truncated [ 156.868249][ T102] loop6: p3 start 4284289 is beyond EOD, truncated [ 156.884430][ T337] udevd[337]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 156.884458][ T338] udevd[338]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 156.896467][ T306] udevd[306]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 157.144005][ T1401] usb 2-1: USB disconnect, device number 16 [ 158.328431][ T3829] loop6: detected capacity change from 0 to 128 [ 158.386847][ T3829] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 158.395770][ T3829] ext4 filesystem being mounted at /81/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 158.418742][ T2927] EXT4-fs (loop6): unmounting filesystem. [ 158.818362][ T3844] loop0: detected capacity change from 0 to 1024 [ 158.826263][ T3844] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 158.838283][ T3847] UHID_CREATE from different security context by process 187 (syz.6.1214), this is not allowed. [ 158.848998][ T3844] EXT4-fs error (device loop0): ext4_get_journal_inode:5710: inode #32: comm syz.0.1212: iget: special inode unallocated [ 158.881701][ T3844] EXT4-fs (loop0): no journal found [ 158.898126][ T3844] EXT4-fs (loop0): can't get journal size [ 158.920455][ T3844] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a800e12d, mo2=0002] [ 158.948439][ T3844] EXT4-fs error (device loop0): ext4_protect_reserved_inode:160: inode #32: comm syz.0.1212: iget: special inode unallocated [ 158.973361][ T3844] EXT4-fs (loop0): failed to initialize system zone (-117) [ 158.981137][ T3844] EXT4-fs (loop0): mount failed [ 159.101961][ T3869] loop3: detected capacity change from 0 to 1024 [ 159.108892][ T28] kauditd_printk_skb: 464 callbacks suppressed [ 159.108907][ T28] audit: type=1326 audit(1747752080.365:7117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3842 comm="syz.2.1213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f359018e969 code=0x7ffc0000 [ 159.257374][ T3869] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869) [ 159.295039][ T3873] loop0: detected capacity change from 0 to 128 [ 159.342763][ T3869] journal_init_common: Cannot get buffer for journal superblock [ 159.406046][ T3873] EXT4-fs (loop0): Test dummy encryption mode enabled [ 159.472152][ T28] audit: type=1326 audit(1747752080.445:7118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3861 comm="syz.6.1221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f773798e969 code=0x7ffc0000 [ 159.495937][ T28] audit: type=1326 audit(1747752080.445:7119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3861 comm="syz.6.1221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f773798e969 code=0x7ffc0000 [ 159.519725][ T28] audit: type=1326 audit(1747752080.455:7120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3861 comm="syz.6.1221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f773798e969 code=0x7ffc0000 [ 159.529084][ T3869] EXT4-fs (loop3): Could not load journal inode [ 159.543257][ T28] audit: type=1326 audit(1747752080.455:7121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3861 comm="syz.6.1221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f773798e969 code=0x7ffc0000 [ 159.573021][ T28] audit: type=1326 audit(1747752080.455:7122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3861 comm="syz.6.1221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f773798e969 code=0x7ffc0000 [ 159.596898][ T28] audit: type=1326 audit(1747752080.455:7123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3861 comm="syz.6.1221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f773798e969 code=0x7ffc0000 [ 159.597831][ T3873] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 159.620487][ T28] audit: type=1326 audit(1747752080.455:7124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3861 comm="syz.6.1221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f773798e969 code=0x7ffc0000 [ 159.620523][ T28] audit: type=1326 audit(1747752080.455:7125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3861 comm="syz.6.1221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f773798e969 code=0x7ffc0000 [ 159.676265][ T28] audit: type=1326 audit(1747752080.455:7126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3861 comm="syz.6.1221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f773798e969 code=0x7ffc0000 [ 159.718312][ T3873] ext4 filesystem being mounted at /216/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 159.752243][ T3873] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 159.787157][ T284] EXT4-fs (loop0): unmounting filesystem. [ 159.939638][ T3892] loop3: detected capacity change from 0 to 2048 [ 159.986887][ T3892] loop3: p3 < > p4 < > [ 159.994322][ T3892] loop3: partition table partially beyond EOD, truncated [ 160.021283][ T3892] loop3: p3 start 4284289 is beyond EOD, truncated [ 160.080357][ T3913] loop0: detected capacity change from 0 to 256 [ 160.117379][ T3913] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe55691ff, utbl_chksum : 0xe619d30d) [ 160.161905][ T3913] exFAT-fs (loop0): hint_cluster is invalid (4278190089) [ 160.186059][ T3913] exFAT-fs (loop0): error, failed to bmap (inode : ffff888133265db0 iblock : 8, err : -5) [ 160.198569][ T3913] exFAT-fs (loop0): Filesystem has been set read-only [ 160.205508][ T3913] exFAT-fs (loop0): error, invalid access to FAT (entry 0xff000008) [ 160.216886][ T3926] exFAT-fs (loop0): error, invalid access to FAT (entry 0xff000008) [ 160.225670][ T3926] exFAT-fs (loop0): error, failed to bmap (inode : ffff888133265db0 iblock : 8, err : -5) [ 160.238091][ T3926] exFAT-fs (loop0): error, invalid access to FAT (entry 0xff000008) [ 160.999169][ T3941] input: syz0 as /devices/virtual/input/input21 [ 161.369801][ T3948] input: syz0 as /devices/virtual/input/input22 [ 161.537814][ T316] hid-generic 0000:3000000:0000.001B: unknown main item tag 0x4 [ 161.545987][ T316] hid-generic 0000:3000000:0000.001B: unknown main item tag 0x2 [ 161.553769][ T316] hid-generic 0000:3000000:0000.001B: unknown main item tag 0x0 [ 161.561828][ T316] hid-generic 0000:3000000:0000.001B: unknown main item tag 0x0 [ 161.575950][ T316] hid-generic 0000:3000000:0000.001B: unknown main item tag 0x0 [ 161.596555][ T316] hid-generic 0000:3000000:0000.001B: unknown main item tag 0x0 [ 161.608998][ T316] hid-generic 0000:3000000:0000.001B: unknown main item tag 0x0 [ 161.621587][ T3968] random: crng reseeded on system resumption [ 161.628831][ T316] hid-generic 0000:3000000:0000.001B: unknown main item tag 0x0 [ 161.637002][ T316] hid-generic 0000:3000000:0000.001B: unknown main item tag 0x0 [ 162.050512][ T316] hid-generic 0000:3000000:0000.001B: unknown main item tag 0x0 [ 162.065916][ T316] hid-generic 0000:3000000:0000.001B: unknown main item tag 0x0 [ 162.073707][ T316] hid-generic 0000:3000000:0000.001B: unknown main item tag 0x0 [ 162.086009][ T316] hid-generic 0000:3000000:0000.001B: unknown main item tag 0x0 [ 162.095300][ T316] hid-generic 0000:3000000:0000.001B: unknown main item tag 0x0 [ 162.105000][ T316] hid-generic 0000:3000000:0000.001B: unknown main item tag 0x0 [ 162.114436][ T316] hid-generic 0000:3000000:0000.001B: unknown main item tag 0x0 [ 162.123193][ T316] hid-generic 0000:3000000:0000.001B: hidraw0: HID v0.00 Device [sy] on syz0 [ 162.182086][ T3979] loop3: detected capacity change from 0 to 1024 [ 162.194919][ T3976] fido_id[3976]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 162.226336][ T3979] EXT4-fs: Ignoring removed nomblk_io_submit option [ 162.287968][ T3979] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 162.309638][ T3979] EXT4-fs (loop3): shut down requested (2) [ 162.525632][ T287] EXT4-fs (loop3): unmounting filesystem. [ 162.673803][ T3990] input: syz0 as /devices/virtual/input/input23 [ 162.745044][ T3996] input: syz0 as /devices/virtual/input/input24 [ 162.760658][ T3994] loop3: detected capacity change from 0 to 2048 [ 162.792181][ T3994] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 162.801810][ T3994] ext4 filesystem being mounted at /300/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 162.829780][ T287] EXT4-fs (loop3): unmounting filesystem. [ 162.922170][ T4013] SELinux: ebitmap start bit (16779520) is beyond the end of the bitmap (1472) [ 162.935839][ T4013] SELinux: failed to load policy [ 163.375980][ T316] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 163.556489][ T4057] loop2: detected capacity change from 0 to 1024 [ 163.558809][ T316] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 163.563260][ T4057] EXT4-fs: Ignoring removed orlov option [ 163.582102][ T316] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 163.599495][ T316] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 163.612923][ T316] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 163.616072][ T4057] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 163.639433][ T316] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.647116][ T4057] EXT4-fs error (device loop2): ext4_check_all_de:666: inode #12: block 7: comm syz.2.1298: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=108 fake=0 [ 163.668232][ T1401] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 163.668257][ T316] usb 7-1: config 0 descriptor?? [ 163.695026][ T285] EXT4-fs (loop2): unmounting filesystem. [ 163.805575][ T4059] loop0: detected capacity change from 0 to 40427 [ 163.842896][ T4059] F2FS-fs (loop0): Found nat_bits in checkpoint [ 163.897528][ T4059] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 163.911550][ T4059] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 163.962292][ T284] syz-executor: attempt to access beyond end of device [ 163.962292][ T284] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 163.985934][ T1401] usb 4-1: Using ep0 maxpacket: 32 [ 163.992662][ T1401] usb 4-1: config 4 has an invalid interface number: 128 but max is 0 [ 164.001070][ T1401] usb 4-1: config 4 has no interface number 0 [ 164.020660][ T1401] usb 4-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 164.032908][ T1401] usb 4-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 164.044414][ T1401] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 164.073598][ T1401] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.091884][ T1401] hub 4-1:4.128: USB hub found [ 164.277481][ T316] plantronics 0003:047F:FFFF.001C: unknown main item tag 0x6 [ 164.285189][ T316] plantronics 0003:047F:FFFF.001C: No inputs registered, leaving [ 164.287906][ T1401] hub 4-1:4.128: 2 ports detected [ 164.299056][ T1401] hub 4-1:4.128: Using single TT (err -22) [ 164.305556][ T316] plantronics 0003:047F:FFFF.001C: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 164.446892][ T305] usb 7-1: USB disconnect, device number 4 [ 164.488722][ T1401] hub 4-1:4.128: hub_hub_status failed (err = -71) [ 164.495373][ T1401] hub 4-1:4.128: config failed, can't get hub status (err -71) [ 164.536523][ T1401] usb 4-1: USB disconnect, device number 10 [ 165.887624][ T28] kauditd_printk_skb: 275 callbacks suppressed [ 165.887641][ T28] audit: type=1400 audit(1747752087.145:7402): avc: denied { read write } for pid=2927 comm="syz-executor" name="loop6" dev="devtmpfs" ino=124 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 165.936745][ T28] audit: type=1400 audit(1747752087.145:7403): avc: denied { open } for pid=2927 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=124 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 165.988731][ T28] audit: type=1400 audit(1747752087.145:7404): avc: denied { ioctl } for pid=2927 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=124 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 166.085455][ T28] audit: type=1400 audit(1747752087.155:7405): avc: denied { watch } for pid=4108 comm="syz.6.1312" path="/101" dev="tmpfs" ino=538 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 166.126604][ T28] audit: type=1400 audit(1747752087.225:7406): avc: denied { read } for pid=4110 comm="syz.2.1315" name="kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 166.154039][ T28] audit: type=1400 audit(1747752087.225:7407): avc: denied { open } for pid=4110 comm="syz.2.1315" path="/dev/kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 166.183441][ T28] audit: type=1400 audit(1747752087.225:7408): avc: denied { create } for pid=4113 comm="syz.3.1316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 166.205155][ T28] audit: type=1400 audit(1747752087.235:7409): avc: denied { write } for pid=4113 comm="syz.3.1316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 166.342312][ T28] audit: type=1400 audit(1747752087.235:7410): avc: denied { bpf } for pid=4115 comm="syz.0.1317" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 166.506080][ T28] audit: type=1400 audit(1747752087.235:7411): avc: denied { ioctl } for pid=4110 comm="syz.2.1315" path="/dev/kvm" dev="devtmpfs" ino=83 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 166.550225][ T4132] loop1: detected capacity change from 0 to 2048 [ 166.583703][ T4141] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=none:owns=io+mem [ 166.616725][ T4132] loop1: p3 < > p4 < > [ 166.625985][ T4132] loop1: partition table partially beyond EOD, truncated [ 166.636230][ T4132] loop1: p3 start 4284289 is beyond EOD, truncated [ 166.686166][ T4156] device bridge0 entered promiscuous mode [ 166.710430][ T4155] device bridge0 left promiscuous mode [ 167.067503][ T4180] loop2: detected capacity change from 0 to 256 [ 167.076097][ T4180] exfat: Unknown parameter 'iochar' [ 167.131252][ T4180] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1339'. [ 167.141913][ T4180] device 30ªX¹¦D entered promiscuous mode [ 168.033008][ T4191] loop3: detected capacity change from 0 to 2048 [ 168.096919][ T4191] loop3: p3 < > p4 < > [ 168.101238][ T4191] loop3: partition table partially beyond EOD, truncated [ 168.110544][ T4191] loop3: p3 start 4284289 is beyond EOD, truncated [ 168.124520][ T4196] loop0: detected capacity change from 0 to 2048 [ 168.166438][ T4196] loop0: p3 < > p4 < > [ 168.170677][ T4196] loop0: partition table partially beyond EOD, truncated [ 168.188558][ T4196] loop0: p3 start 4284289 is beyond EOD, truncated [ 168.248208][ T102] loop0: p3 < > p4 < > [ 168.252535][ T102] loop0: partition table partially beyond EOD, truncated [ 168.280405][ T102] loop0: p3 start 4284289 is beyond EOD, truncated [ 168.728225][ T4205] loop6: detected capacity change from 0 to 40427 [ 168.747868][ T4205] F2FS-fs (loop6): Corrupted extension count (720933 + 1 > 64) [ 168.774577][ T4205] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 168.789184][ T4205] F2FS-fs (loop6): fault_injection options not supported [ 168.797711][ T4205] F2FS-fs (loop6): Image doesn't support compression [ 168.804960][ T4205] F2FS-fs (loop6): Image doesn't support compression [ 168.813139][ T4205] F2FS-fs (loop6): invalid crc value [ 168.820972][ T4205] F2FS-fs (loop6): Found nat_bits in checkpoint [ 168.953981][ T4205] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 168.961552][ T4205] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 168.976253][ T591] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 169.050108][ T4231] loop2: detected capacity change from 0 to 256 [ 169.058347][ T4231] exfat: Unknown parameter 'iochar' [ 170.049348][ T4223] sched: RT throttling activated [ 170.204794][ T338] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 170.232894][ T4228] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1356'. [ 170.254214][ T2927] syz-executor: attempt to access beyond end of device [ 170.254214][ T2927] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 170.306391][ T591] usb 4-1: Using ep0 maxpacket: 16 [ 170.315742][ T591] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 170.318037][ T4243] loop1: detected capacity change from 0 to 2048 [ 170.339528][ T591] usb 4-1: New USB device found, idVendor=046d, idProduct=c295, bcdDevice= 0.00 [ 170.387752][ T591] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.406226][ T4243] loop1: p3 < > p4 < > [ 170.410447][ T4243] loop1: partition table partially beyond EOD, truncated [ 170.420539][ T4243] loop1: p3 start 4284289 is beyond EOD, truncated [ 170.428057][ T591] usb 4-1: config 0 descriptor?? [ 170.433435][ T1960] Bluetooth: hci0: Frame reassembly failed (-84) [ 170.451428][ T102] loop1: p3 < > p4 < > [ 170.455664][ T102] loop1: partition table partially beyond EOD, truncated [ 170.462992][ T102] loop1: p3 start 4284289 is beyond EOD, truncated [ 170.580129][ T4260] loop0: detected capacity change from 0 to 256 [ 170.881939][ T4275] loop0: detected capacity change from 0 to 256 [ 170.889489][ T4275] exfat: Unknown parameter 'iochar' [ 171.786008][ T4278] netlink: 9 bytes leftover after parsing attributes in process `syz.0.1376'. [ 171.796366][ T4278] device gretap0 entered promiscuous mode [ 172.114865][ T591] usbhid 4-1:0.0: can't add hid device: -71 [ 172.120951][ T591] usbhid: probe of 4-1:0.0 failed with error -71 [ 172.135227][ T591] usb 4-1: USB disconnect, device number 11 [ 172.186548][ T4297] loop0: detected capacity change from 0 to 512 [ 172.199954][ T4297] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 172.218281][ T4297] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 172.219061][ T28] kauditd_printk_skb: 562 callbacks suppressed [ 172.219077][ T28] audit: type=1326 audit(1747752093.475:7974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4302 comm="syz.3.1387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff92e18e969 code=0x7ffc0000 [ 172.227462][ T4297] ext4 filesystem being mounted at /252/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 172.243897][ T28] audit: type=1326 audit(1747752093.495:7975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4302 comm="syz.3.1387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff92e18e969 code=0x7ffc0000 [ 172.271397][ T4304] loop3: detected capacity change from 0 to 2048 [ 172.294913][ T28] audit: type=1326 audit(1747752093.495:7976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4302 comm="syz.3.1387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7ff92e18e969 code=0x7ffc0000 [ 172.303994][ T4297] EXT4-fs error (device loop0): ext4_xattr_block_get:546: inode #15: comm syz.0.1385: corrupted xattr block 32 [ 172.322229][ T28] audit: type=1326 audit(1747752093.495:7977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4302 comm="syz.3.1387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff92e18e969 code=0x7ffc0000 [ 172.333642][ T4297] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 172.356509][ T24] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 172.365397][ T4297] EXT4-fs error (device loop0): ext4_xattr_block_get:546: inode #15: comm syz.0.1385: corrupted xattr block 32 [ 172.372922][ T1401] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 172.376212][ T28] audit: type=1326 audit(1747752093.495:7978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4302 comm="syz.3.1387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff92e18e969 code=0x7ffc0000 [ 172.386557][ T4297] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 172.392735][ T28] audit: type=1326 audit(1747752093.495:7979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4302 comm="syz.3.1387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7ff92e18e969 code=0x7ffc0000 [ 172.417893][ T4304] loop3: p3 < > p4 < > [ 172.435936][ T28] audit: type=1326 audit(1747752093.495:7980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4302 comm="syz.3.1387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff92e18e969 code=0x7ffc0000 [ 172.448688][ T4304] loop3: partition table partially beyond EOD, [ 172.452743][ T4248] Bluetooth: hci0: command 0x1003 tx timeout [ 172.476506][ T4304] truncated [ 172.482826][ T3560] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 172.489525][ T4304] loop3: p3 start 4284289 is beyond EOD, [ 172.493869][ T4247] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 172.500143][ T4304] truncated [ 172.505410][ T4305] EXT4-fs error (device loop0): __ext4_new_inode:1285: comm syz.0.1385: failed to insert inode 16: doubly allocated? [ 172.528333][ T102] loop3: p3 < > p4 < > [ 172.532585][ T102] loop3: partition table partially beyond EOD, truncated [ 172.538845][ T28] audit: type=1326 audit(1747752093.495:7981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4302 comm="syz.3.1387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff92e18e969 code=0x7ffc0000 [ 172.543026][ T102] loop3: p3 start 4284289 is beyond EOD, truncated [ 172.577218][ T28] audit: type=1326 audit(1747752093.495:7982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4302 comm="syz.3.1387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff92e18e969 code=0x7ffc0000 [ 172.602875][ T1401] usb 2-1: Using ep0 maxpacket: 8 [ 172.609250][ T28] audit: type=1326 audit(1747752093.495:7983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4302 comm="syz.3.1387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff92e18e969 code=0x7ffc0000 [ 172.626100][ T284] EXT4-fs (loop0): unmounting filesystem. [ 172.636292][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 172.651110][ T1401] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 172.662621][ T1401] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 172.672811][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 172.682994][ T1401] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 172.693925][ T24] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 172.707554][ T1401] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 172.717706][ T24] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 172.720946][ T338] udevd[338]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 172.728901][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.746691][ T1401] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 172.756410][ T24] usb 7-1: config 0 descriptor?? [ 172.761561][ T1401] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.771116][ T1401] usb 2-1: Product: syz [ 172.775439][ T1401] usb 2-1: Manufacturer: syz [ 172.780569][ T1401] usb 2-1: SerialNumber: syz [ 172.920123][ T4323] loop3: detected capacity change from 0 to 512 [ 172.938834][ T4323] EXT4-fs error (device loop3): ext4_do_update_inode:5226: inode #3: comm syz.3.1394: corrupted inode contents [ 172.951054][ T4323] EXT4-fs error (device loop3): ext4_dirty_inode:6091: inode #3: comm syz.3.1394: mark_inode_dirty error [ 172.963629][ T4323] EXT4-fs error (device loop3): ext4_do_update_inode:5226: inode #3: comm syz.3.1394: corrupted inode contents [ 172.976064][ T745] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 172.986224][ T4323] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #3: comm syz.3.1394: mark_inode_dirty error [ 173.013455][ T4323] EXT4-fs error (device loop3): ext4_acquire_dquot:6789: comm syz.3.1394: Failed to acquire dquot type 0 [ 173.048571][ T4323] EXT4-fs (loop3): 1 orphan inode deleted [ 173.055343][ T4323] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 173.066878][ T4323] ext4 filesystem being mounted at /327/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 173.178026][ T745] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 173.191431][ T201] EXT4-fs error (device loop3): ext4_release_dquot:6812: comm kworker/u4:3: Failed to release dquot type 1 [ 173.204957][ T24] plantronics 0003:047F:FFFF.001D: No inputs registered, leaving [ 173.214975][ T287] EXT4-fs (loop3): unmounting filesystem. [ 173.215617][ T24] plantronics 0003:047F:FFFF.001D: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 173.234386][ T745] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 173.248323][ T745] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 173.256821][ T745] usb 3-1: SerialNumber: syz [ 173.286016][ T4329] loop3: detected capacity change from 0 to 2048 [ 173.326297][ T4329] loop3: p3 < > p4 < > [ 173.330643][ T4329] loop3: partition table partially beyond EOD, truncated [ 173.338133][ T4329] loop3: p3 start 4284289 is beyond EOD, truncated [ 173.468556][ T305] ================================================================== [ 173.476679][ T305] BUG: KASAN: use-after-free in enqueue_timer+0xae/0x480 [ 173.483832][ T305] Write of size 8 at addr ffff8881189d8a00 by task kworker/1:3/305 [ 173.491748][ T305] [ 173.494083][ T305] CPU: 1 PID: 305 Comm: kworker/1:3 Not tainted 6.1.134-syzkaller-00022-gb07be5e5113b #0 [ 173.503900][ T305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 173.514085][ T305] Workqueue: usb_hub_wq hub_event [ 173.519171][ T305] Call Trace: [ 173.522644][ T305] [ 173.525774][ T305] __dump_stack+0x21/0x24 [ 173.530221][ T305] dump_stack_lvl+0xee/0x150 [ 173.534829][ T305] ? __cfi_dump_stack_lvl+0x8/0x8 [ 173.540030][ T305] ? enqueue_timer+0xae/0x480 [ 173.544706][ T305] print_address_description+0x71/0x210 [ 173.550259][ T305] print_report+0x4a/0x60 [ 173.554597][ T305] kasan_report+0x122/0x150 [ 173.559103][ T305] ? enqueue_timer+0xae/0x480 [ 173.563784][ T305] __asan_report_store8_noabort+0x17/0x20 [ 173.569500][ T305] enqueue_timer+0xae/0x480 [ 173.573997][ T305] __mod_timer+0x79f/0xb30 [ 173.578419][ T305] schedule_timeout+0x127/0x2e0 [ 173.583348][ T305] ? __cfi_schedule_timeout+0x10/0x10 [ 173.588893][ T305] ? __cfi_process_timeout+0x10/0x10 [ 173.594436][ T305] ? __cfi__raw_spin_lock+0x10/0x10 [ 173.599724][ T305] ? _raw_spin_lock+0x8e/0xe0 [ 173.604549][ T305] wait_for_common+0x354/0x620 [ 173.609350][ T305] ? usb_hcd_giveback_urb+0x351/0x410 [ 173.614731][ T305] ? wait_for_completion+0x20/0x20 [ 173.619842][ T305] ? usb_submit_urb+0x122d/0x1900 [ 173.624883][ T305] wait_for_completion_timeout+0xe/0x10 [ 173.630436][ T305] usb_start_wait_urb+0x166/0x2f0 [ 173.635739][ T305] ? usb_api_blocking_completion+0xb0/0xb0 [ 173.641641][ T305] ? usb_alloc_urb+0x44/0x140 [ 173.646319][ T305] ? __kasan_check_write+0x14/0x20 [ 173.651431][ T305] usb_control_msg+0x241/0x3f0 [ 173.656288][ T305] hub_ext_port_status+0x100/0x6b0 [ 173.661489][ T305] hub_event+0x7e6/0x4680 [ 173.665904][ T305] ? save_fpregs_to_fpstate+0x192/0x220 [ 173.671439][ T305] ? __cfi___switch_to+0x10/0x10 [ 173.676456][ T305] ? _raw_spin_unlock+0x4c/0x70 [ 173.681324][ T305] ? __cfi_hub_event+0x10/0x10 [ 173.686081][ T305] ? __schedule+0xb8f/0x14e0 [ 173.690667][ T305] ? __kasan_check_read+0x11/0x20 [ 173.695694][ T305] ? read_word_at_a_time+0x12/0x20 [ 173.700832][ T305] ? strscpy+0x9b/0x290 [ 173.704986][ T305] process_one_work+0x71f/0xc40 [ 173.709852][ T305] worker_thread+0xa29/0x11f0 [ 173.714534][ T305] kthread+0x281/0x320 [ 173.718617][ T305] ? __cfi_worker_thread+0x10/0x10 [ 173.723738][ T305] ? __cfi_kthread+0x10/0x10 [ 173.728321][ T305] ret_from_fork+0x1f/0x30 [ 173.732741][ T305] [ 173.736014][ T305] [ 173.738334][ T305] Allocated by task 4247: [ 173.742670][ T305] kasan_set_track+0x4b/0x70 [ 173.747268][ T305] kasan_save_alloc_info+0x25/0x30 [ 173.752375][ T305] __kasan_kmalloc+0x95/0xb0 [ 173.756952][ T305] __kmalloc+0xb1/0x1e0 [ 173.761099][ T305] hci_alloc_dev_priv+0x27/0x1bd0 [ 173.766121][ T305] hci_uart_tty_ioctl+0x3c8/0xa00 [ 173.771157][ T305] tty_ioctl+0x8ef/0xc60 [ 173.775471][ T305] __se_sys_ioctl+0x12f/0x1b0 [ 173.780250][ T305] __x64_sys_ioctl+0x7b/0x90 [ 173.784833][ T305] x64_sys_call+0x58b/0x9a0 [ 173.789340][ T305] do_syscall_64+0x4c/0xa0 [ 173.793778][ T305] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 173.799788][ T305] [ 173.802100][ T305] Freed by task 4247: [ 173.806144][ T305] kasan_set_track+0x4b/0x70 [ 173.810814][ T305] kasan_save_free_info+0x31/0x50 [ 173.815954][ T305] ____kasan_slab_free+0x132/0x180 [ 173.821093][ T305] __kasan_slab_free+0x11/0x20 [ 173.825938][ T305] slab_free_freelist_hook+0xc2/0x190 [ 173.831621][ T305] __kmem_cache_free+0xb7/0x1b0 [ 173.836568][ T305] kfree+0x6f/0xf0 [ 173.840355][ T305] hci_release_dev+0x13ad/0x1500 [ 173.845328][ T305] bt_host_release+0x82/0x90 [ 173.850004][ T305] device_release+0xa4/0x1d0 [ 173.854679][ T305] kobject_put+0x19d/0x280 [ 173.859185][ T305] put_device+0x1f/0x30 [ 173.863424][ T305] hci_dev_cmd+0x265/0x720 [ 173.867980][ T305] hci_sock_ioctl+0x41e/0x7f0 [ 173.872833][ T305] sock_do_ioctl+0x101/0x310 [ 173.877419][ T305] sock_ioctl+0x4d8/0x6e0 [ 173.881744][ T305] __se_sys_ioctl+0x12f/0x1b0 [ 173.886438][ T305] __x64_sys_ioctl+0x7b/0x90 [ 173.891045][ T305] x64_sys_call+0x58b/0x9a0 [ 173.895731][ T305] do_syscall_64+0x4c/0xa0 [ 173.900217][ T305] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 173.906347][ T305] [ 173.908926][ T305] Last potentially related work creation: [ 173.914767][ T305] kasan_save_stack+0x3a/0x60 [ 173.919659][ T305] __kasan_record_aux_stack+0xb6/0xc0 [ 173.925394][ T305] kasan_record_aux_stack_noalloc+0xb/0x10 [ 173.931763][ T305] insert_work+0x51/0x300 [ 173.936362][ T305] __queue_work+0x9b1/0xd30 [ 173.941249][ T305] queue_work_on+0xd2/0x140 [ 173.945930][ T305] __hci_cmd_sync_sk+0xa3e/0xcf0 [ 173.951235][ T305] hci_cmd_sync_status+0x53/0x120 [ 173.956742][ T305] hci_dev_cmd+0x628/0x720 [ 173.961347][ T305] hci_sock_ioctl+0x41e/0x7f0 [ 173.966307][ T305] sock_do_ioctl+0x101/0x310 [ 173.971009][ T305] sock_ioctl+0x4d8/0x6e0 [ 173.975384][ T305] __se_sys_ioctl+0x12f/0x1b0 [ 173.980346][ T305] __x64_sys_ioctl+0x7b/0x90 [ 173.985327][ T305] x64_sys_call+0x58b/0x9a0 [ 173.990352][ T305] do_syscall_64+0x4c/0xa0 [ 173.995026][ T305] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 174.001462][ T305] [ 174.003913][ T305] Second to last potentially related work creation: [ 174.010722][ T305] kasan_save_stack+0x3a/0x60 [ 174.015805][ T305] __kasan_record_aux_stack+0xb6/0xc0 [ 174.022408][ T305] kasan_record_aux_stack_noalloc+0xb/0x10 [ 174.028760][ T305] insert_work+0x51/0x300 [ 174.033216][ T305] __queue_work+0x9b1/0xd30 [ 174.037861][ T305] queue_work_on+0xd2/0x140 [ 174.042745][ T305] hci_cmd_timeout+0x191/0x200 [ 174.047954][ T305] process_one_work+0x71f/0xc40 [ 174.052997][ T305] worker_thread+0xa29/0x11f0 [ 174.057740][ T305] kthread+0x281/0x320 [ 174.061907][ T305] ret_from_fork+0x1f/0x30 [ 174.066400][ T305] [ 174.068818][ T305] The buggy address belongs to the object at ffff8881189d8000 [ 174.068818][ T305] which belongs to the cache kmalloc-8k of size 8192 [ 174.082951][ T305] The buggy address is located 2560 bytes inside of [ 174.082951][ T305] 8192-byte region [ffff8881189d8000, ffff8881189da000) [ 174.096408][ T305] [ 174.098794][ T305] The buggy address belongs to the physical page: [ 174.105193][ T305] page:ffffea0004627600 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1189d8 [ 174.115513][ T305] head:ffffea0004627600 order:3 compound_mapcount:0 compound_pincount:0 [ 174.123928][ T305] flags: 0x4000000000010200(slab|head|zone=1) [ 174.130106][ T305] raw: 4000000000010200 ffffea000461f000 dead000000000003 ffff888100043500 [ 174.139106][ T305] raw: 0000000000000000 0000000000020002 00000001ffffffff 0000000000000000 [ 174.147859][ T305] page dumped because: kasan: bad access detected [ 174.154455][ T305] page_owner tracks the page as allocated [ 174.160174][ T305] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d2000(__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 822, tgid 822 (syz.3.170), ts 54439278199, free_ts 54431496317 [ 174.181036][ T305] post_alloc_hook+0x1f5/0x210 [ 174.185822][ T305] prep_new_page+0x1c/0x110 [ 174.190454][ T305] get_page_from_freelist+0x2c6e/0x2ce0 [ 174.195998][ T305] __alloc_pages+0x19e/0x3a0 [ 174.200695][ T305] alloc_slab_page+0x6e/0xf0 [ 174.205744][ T305] new_slab+0x98/0x3d0 [ 174.209809][ T305] ___slab_alloc+0x6f6/0xb50 [ 174.214599][ T305] __slab_alloc+0x5e/0xa0 [ 174.219016][ T305] __kmem_cache_alloc_node+0x203/0x2c0 [ 174.224561][ T305] kmalloc_trace+0x29/0xb0 [ 174.228991][ T305] uhid_queue_event+0x5a/0x280 [ 174.234021][ T305] uhid_hid_stop+0x61/0x90 [ 174.238446][ T305] hid_device_remove+0x282/0x3b0 [ 174.243379][ T305] device_release_driver_internal+0x4a9/0x820 [ 174.249762][ T305] device_release_driver+0x19/0x20 [ 174.255147][ T305] bus_remove_device+0x2ee/0x350 [ 174.260270][ T305] page last free stack trace: [ 174.265030][ T305] free_unref_page_prepare+0x742/0x750 [ 174.270602][ T305] free_unref_page+0x8f/0x530 [ 174.275292][ T305] __free_pages+0x67/0x100 [ 174.279743][ T305] __free_slab+0xca/0x1a0 [ 174.284069][ T305] __unfreeze_partials+0x160/0x190 [ 174.289174][ T305] put_cpu_partial+0xa9/0x100 [ 174.293845][ T305] __slab_free+0x1c4/0x280 [ 174.298256][ T305] ___cache_free+0xbf/0xd0 [ 174.302952][ T305] qlist_free_all+0xc6/0x140 [ 174.307555][ T305] kasan_quarantine_reduce+0x14a/0x170 [ 174.313016][ T305] __kasan_slab_alloc+0x24/0x80 [ 174.317856][ T305] slab_post_alloc_hook+0x4f/0x2d0 [ 174.322966][ T305] kmem_cache_alloc+0x16e/0x330 [ 174.327838][ T305] getname_flags+0xb9/0x500 [ 174.332704][ T305] __se_sys_newfstatat+0xdf/0x380 [ 174.338153][ T305] __x64_sys_newfstatat+0x9b/0xb0 [ 174.343166][ T305] [ 174.345474][ T305] Memory state around the buggy address: [ 174.351113][ T305] ffff8881189d8900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 174.359176][ T305] ffff8881189d8980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 174.367264][ T305] >ffff8881189d8a00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 174.375640][ T305] ^ [ 174.379716][ T305] ffff8881189d8a80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 174.387775][ T305] ffff8881189d8b00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 174.395929][ T305] ================================================================== [ 174.403986][ T305] Disabling lock debugging due to kernel taint [ 174.411150][ T305] usb 7-1: USB disconnect, device number 5 [ 174.535949][ C1] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN [ 174.547702][ C1] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 174.556107][ C1] CPU: 1 PID: 0 Comm: swapper/1 Tainted: G B 6.1.134-syzkaller-00022-gb07be5e5113b #0 [ 174.567027][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 174.577096][ C1] RIP: 0010:__queue_work+0x575/0xd30 [ 174.582383][ C1] Code: 39 2b 0f 84 b9 00 00 00 e8 58 ce 28 00 4c 89 ff e8 30 8d a8 03 49 bc 00 00 00 00 00 fc ff df 4c 8b 6d d0 4c 89 e8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ef e8 ac 1f 6d 00 49 8b 7d 00 e8 13 89 [ 174.602165][ C1] RSP: 0018:ffffc900001b0c70 EFLAGS: 00010046 [ 174.608255][ C1] RAX: 0000000000000000 RBX: 000000007fffffff RCX: ffff8881003abcc0 [ 174.616250][ C1] RDX: 0000000000000100 RSI: 000000007fffffff RDI: 000000007fffffff [ 174.624326][ C1] RBP: ffffc900001b0d08 R08: fffffffffffffffb R09: 0000000000000007 [ 174.632308][ C1] R10: ffffed102313b139 R11: 1ffff1102313b139 R12: dffffc0000000000 [ 174.640367][ C1] R13: 0000000000000000 R14: ffff8881189d89c8 R15: 0000000000000008 [ 174.648426][ C1] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 174.657443][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 174.664023][ C1] CR2: 00007ff92e380178 CR3: 00000001212bb000 CR4: 00000000003506a0 [ 174.672167][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 174.680215][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 174.688360][ C1] Call Trace: [ 174.691639][ C1] [ 174.694477][ C1] delayed_work_timer_fn+0x61/0x80 [ 174.699595][ C1] ? __cfi_delayed_work_timer_fn+0x10/0x10 [ 174.705571][ C1] call_timer_fn+0x46/0x2a0 [ 174.710085][ C1] ? __cfi_delayed_work_timer_fn+0x10/0x10 [ 174.715901][ C1] __run_timers+0x667/0x9a0 [ 174.720774][ C1] ? calc_index+0x200/0x200 [ 174.725369][ C1] ? kvm_sched_clock_read+0x18/0x40 [ 174.730595][ C1] run_timer_softirq+0x6a/0xf0 [ 174.735373][ C1] handle_softirqs+0x1d7/0x600 [ 174.740137][ C1] ? irqtime_account_irq+0xc4/0x240 [ 174.745340][ C1] __irq_exit_rcu+0x52/0xf0 [ 174.750051][ C1] irq_exit_rcu+0x9/0x10 [ 174.754329][ C1] sysvec_apic_timer_interrupt+0xa9/0xc0 [ 174.760043][ C1] [ 174.762983][ C1] [ 174.765924][ C1] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 174.772259][ C1] RIP: 0010:default_idle+0xf/0x20 [ 174.777281][ C1] Code: e9 47 ff ff ff 00 00 cc cc 00 00 90 90 90 90 90 90 90 90 90 90 90 b8 0c 67 40 a5 55 48 89 e5 66 90 0f 00 2d 83 ba 56 00 fb f4 <5d> c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 90 90 90 90 90 [ 174.796968][ C1] RSP: 0018:ffffc90000147dd8 EFLAGS: 00000257 [ 174.803051][ C1] RAX: ffff8881f7100000 RBX: ffff8881003abcc0 RCX: c5237fdcad002100 [ 174.811021][ C1] RDX: 0000000000000001 RSI: ffffffff85a9f780 RDI: ffffffff85a9f740 [ 174.819083][ C1] RBP: ffffc90000147dd8 R08: dffffc0000000000 R09: ffffed103ee268ff [ 174.827175][ C1] R10: 0000000000000000 R11: ffffffff84ef7b70 R12: 0000000000000000 [ 174.835167][ C1] R13: 0000000000000000 R14: ffff8881003abcc0 R15: dffffc0000000000 [ 174.843164][ C1] ? __cfi_default_idle+0x10/0x10 [ 174.848297][ C1] arch_cpu_idle+0x1c/0x20 [ 174.852721][ C1] default_idle_call+0x71/0x1d0 [ 174.857573][ C1] do_idle+0x1a7/0x520 [ 174.861640][ C1] ? ct_irq_exit+0x9/0x10 [ 174.865976][ C1] ? idle_inject_timer_fn+0x60/0x60 [ 174.871201][ C1] cpu_startup_entry+0x43/0x60 [ 174.876053][ C1] start_secondary+0x119/0x120 [ 174.881002][ C1] secondary_startup_64_no_verify+0xce/0xdb [ 174.886914][ C1] [ 174.889949][ C1] Modules linked in: [ 174.893861][ C1] ---[ end trace 0000000000000000 ]--- [ 174.899664][ C1] RIP: 0010:__queue_work+0x575/0xd30 [ 174.905045][ C1] Code: 39 2b 0f 84 b9 00 00 00 e8 58 ce 28 00 4c 89 ff e8 30 8d a8 03 49 bc 00 00 00 00 00 fc ff df 4c 8b 6d d0 4c 89 e8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ef e8 ac 1f 6d 00 49 8b 7d 00 e8 13 89 [ 174.925612][ C1] RSP: 0018:ffffc900001b0c70 EFLAGS: 00010046 [ 174.931688][ C1] RAX: 0000000000000000 RBX: 000000007fffffff RCX: ffff8881003abcc0 [ 174.939777][ C1] RDX: 0000000000000100 RSI: 000000007fffffff RDI: 000000007fffffff [ 174.947746][ C1] RBP: ffffc900001b0d08 R08: fffffffffffffffb R09: 0000000000000007 [ 174.955984][ C1] R10: ffffed102313b139 R11: 1ffff1102313b139 R12: dffffc0000000000 [ 174.964118][ C1] R13: 0000000000000000 R14: ffff8881189d89c8 R15: 0000000000000008 [ 174.972364][ C1] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 174.981516][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 174.988105][ C1] CR2: 00007ff92e380178 CR3: 00000001212bb000 CR4: 00000000003506a0 [ 174.996084][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 175.004148][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 175.012120][ C1] Kernel panic - not syncing: Fatal exception in interrupt [ 175.019687][ C1] Kernel Offset: disabled [ 175.024018][ C1] Rebooting in 86400 seconds..