last executing test programs: 1m8.39635119s ago: executing program 2 (id=517): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200010, &(0x7f0000000300)={[{@user_xattr}, {@nombcache}, {@dioread_lock}, {@norecovery}, {@jqfmt_vfsold}, {@lazytime}, {@init_itable_val={'init_itable', 0x3d, 0x5}}, {@usrquota}, {@errors_continue}]}, 0xfe, 0x55d, &(0x7f0000000980)="$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") r0 = open(&(0x7f00000001c0)='./file1\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x13, r0, 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f0000000340)='\b', 0x1}, {&(0x7f00000011c0)='(', 0x1}], 0x2, 0x0, 0x0, 0x0) 1m8.316192261s ago: executing program 2 (id=519): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x10, @mcast2}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000580)='B\v', 0x2}], 0x1}}], 0x1, 0x400c404) sendmmsg$inet6(r0, &(0x7f00000055c0)=[{{0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000c00)='s', 0x1}], 0x1}}], 0x1, 0x84) 1m8.290850572s ago: executing program 2 (id=520): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000006c0)={0x1, &(0x7f0000000500)=[{0x6, 0x43, 0x0, 0x7fff0000}]}) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) wait4(r0, 0x0, 0x0, 0x0) 1m8.269134822s ago: executing program 2 (id=522): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./file2\x00', 0x1010051, &(0x7f0000000240)={[{@debug}, {@inlinecrypt}, {@noblock_validity}, {@dioread_lock}, {@nouid32}, {@resuid}]}, 0x1, 0x550, &(0x7f00000002c0)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000040)='./file0\x00') bpf$OBJ_GET_MAP(0x7, &(0x7f0000000880)=@generic={&(0x7f0000000840)='./file2/../file0\x00', 0x0, 0x10}, 0x18) 1m8.076476656s ago: executing program 2 (id=527): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x48e02, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'nicvf0\x00', 0x6201}) io_setup(0x1, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f0000000440)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x2, r0, &(0x7f0000000100)="00030000", 0x4, 0x8000}]) 1m7.179731243s ago: executing program 4 (id=547): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000240)={'wg1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000000c0)=ANY=[@ANYBLOB="24000000180083ad0400000000000000020000000000fe020c00000008000400", @ANYRES32=r1], 0x24}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="24000000180083ad0400000000000000020000000000fe020c000c"], 0x24}}, 0x0) 1m7.149003104s ago: executing program 4 (id=549): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000107d1eb42d00000000000109022400010000002209040000010300020009210000000122040009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000000)={0x3b, 0x0, 0x2, 0x6}, 0x8) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 1m6.930581868s ago: executing program 2 (id=556): lsetxattr$security_ima(0x0, 0x0, 0x0, 0x0, 0x3) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e21, 0xfffffff8, @ipv4={'\x00', '\xff\xff', @local}, 0x7}, 0x1c) setsockopt$inet6_buf(r0, 0x29, 0x6, 0x0, 0x0) 1m6.899749699s ago: executing program 32 (id=556): lsetxattr$security_ima(0x0, 0x0, 0x0, 0x0, 0x3) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e21, 0xfffffff8, @ipv4={'\x00', '\xff\xff', @local}, 0x7}, 0x1c) setsockopt$inet6_buf(r0, 0x29, 0x6, 0x0, 0x0) 1m5.421333627s ago: executing program 4 (id=587): bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r0}, 0x18) syz_clone(0xc0001480, 0x0, 0x0, 0x0, 0x0, 0x0) 1m5.295244159s ago: executing program 4 (id=594): syz_mount_image$exfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x2008802, &(0x7f00000001c0)=ANY=[@ANYBLOB='allow_utime=00000000000000000006605,errors=remount-ro,uid=', @ANYRESHEX=0xee00, @ANYBLOB="2c696f636861727365743d69736f383835392d1e2c6e616d65636173653d312c6b6565705f6c6173745f646f74732c6769643d", @ANYRESHEX=0xee01, @ANYBLOB=',dmask=00000000000000000000001,errors=remount-ro,iocharset=cp1255,\x00'], 0x1, 0x1532, &(0x7f0000000940)="$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") syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x404, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) 1m5.169121211s ago: executing program 4 (id=597): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000005400010026bd7000fbdbdf2507000000", @ANYRES32=r2, @ANYBLOB="20000100", @ANYRES32=r2, @ANYBLOB="03020400ff"], 0x38}, 0x1, 0x0, 0x0, 0xa1}, 0x20040040) 1m5.042593744s ago: executing program 4 (id=601): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'wg0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3000000010000100000004000120000000000000", @ANYRES32=r2, @ANYBLOB="30000000000000000800168004001180050011"], 0x30}, 0x1, 0x0, 0x0, 0x40091}, 0x4000014) 1m5.012439874s ago: executing program 33 (id=601): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'wg0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3000000010000100000004000120000000000000", @ANYRES32=r2, @ANYBLOB="30000000000000000800168004001180050011"], 0x30}, 0x1, 0x0, 0x0, 0x40091}, 0x4000014) 48.481965761s ago: executing program 3 (id=1044): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000100)={0x1, &(0x7f0000000140)=[{0x6, 0x3, 0xfc, 0x4000000}]}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f00000000c0)={'veth0_to_team\x00'}) 48.429684032s ago: executing program 3 (id=1046): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='kfree\x00', r0}, 0x18) r1 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) 48.401955153s ago: executing program 3 (id=1048): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="120100009e173610ef171e7206de010203030902120001010000000904"], 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000003000083850000002d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) syz_clone(0xe200, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 46.881929862s ago: executing program 3 (id=1071): syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./file1\x00', 0x810, &(0x7f0000000340)=ANY=[@ANYRES32=0x0, @ANYRES16], 0x1, 0x261, &(0x7f0000000380)="$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") r0 = syz_open_dev$loop(&(0x7f0000000180), 0x75d, 0x2480) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xd, "fee8a2ab78fc17c2d1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f30600300000300", [0xfffffffffffffffd]}}) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, 0xffffffffffffffff) 46.750273165s ago: executing program 3 (id=1072): r0 = socket$inet6(0xa, 0x3, 0x8) recvfrom(r0, 0x0, 0x0, 0x40000100, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000040)=0x8, 0x4) setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f00000001c0)=0x100, 0x4) sendmmsg$inet6(r0, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='$\x00'], 0x28}}], 0x1, 0x0) 46.620022047s ago: executing program 3 (id=1074): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x5, 0x4, 0x8, 0xc}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xd, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_selinux(r2, &(0x7f00000000c0), &(0x7f0000000040)='system_u:object_r:dhcp_state_t:s0\x00', 0x1e, 0x0) 46.575443358s ago: executing program 34 (id=1074): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x5, 0x4, 0x8, 0xc}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xd, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_selinux(r2, &(0x7f00000000c0), &(0x7f0000000040)='system_u:object_r:dhcp_state_t:s0\x00', 0x1e, 0x0) 23.186451766s ago: executing program 6 (id=1482): r0 = syz_usb_connect$hid(0x0, 0x6c, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000040b827ed0100000000000109022400010000000009040000010300000009210000200122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x8, "9c21ae2a"}]}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, &(0x7f0000000180)={0x20, 0x16, 0x4, "37d11131"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 19.356765439s ago: executing program 6 (id=1508): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) timer_create(0x0, 0x0, &(0x7f0000000240)=0x0) timer_delete(r1) 19.31136966s ago: executing program 6 (id=1512): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000a850000000f000000850000009e00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000000c0)='sched_switch\x00', r0}, 0x10) r1 = timerfd_create(0x8, 0x80000) timerfd_settime(r1, 0x0, &(0x7f0000007000)={{0x0, 0x4}, {0x0, 0x989680}}, 0x0) readv(r1, &(0x7f0000000a40)=[{&(0x7f0000000cc0)=""/53, 0x35}], 0x1) 19.278813751s ago: executing program 6 (id=1515): getpid() syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000003980)='./file1\x00', 0x0, &(0x7f0000000380)={[{@sys_tz}, {@namecase}, {@gid}, {@iocharset={'iocharset', 0x3d, 'cp932'}}, {@dmask={'dmask', 0x3d, 0x71c7}}, {@umask={'umask', 0x3d, 0x1558}}, {@gid}, {@errors_remount}, {@keep_last_dots}, {@dmask={'dmask', 0x3d, 0x3}}, {@iocharset={'iocharset', 0x3d, 'cp852'}}, {}, {@fmask={'fmask', 0x3d, 0x5}}], [{@smackfsdef={'smackfsdef', 0x3d, 'iocharset'}}, {@subj_user}]}, 0x1, 0x1524, &(0x7f0000002280)="$eJzs3AuYTlXbOPD7XmvtMSbpaZLDsNa6N09yWCZJckiSQ5IkSZJTQtIkryQkhpyShiQkhyE5DCE5TEwa5/P5kJAkTZKE5JSs/yX8vb31fu/7fm/f67u+uX/XtS/rfva+1773cz+HvbeZ+a7zkBqNalZtQETwb8GL/yQDQCwADACA6wAgAICy8WXjL6zPKTH539sJ+3M9kna1K2BXE/c/e+P+Z2/c/+yN+5+9cf+zN+5/9sb9z964/4xlZ5umFbiel+y78P3/7Iy///8PySo15qs1pW7sAhDzz6Zw/7M37v//WcE/sxH3P3vj/mdXsVe7APa/AL//s4Mcf3cN9z974/4zlp1d7fvPV3uBSPZ+Dq72648xxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGWPZw2l+hAODy+GrXxRhjjDHGGGOMsT+Pz3G1K2CMMcYYY4wxxtj/PAQBEhQEEAM5IBZyQhwIALgWcsN1EIHrIR5ugDxwI+SFfJAfCkACFIRCoMGABYIQCkMRiMJNUBRuhmJQHEpASXBQChLhFigNt0IZuA3Kwu1QDu6A8lABKkIluBMqw11QBe6GqnAPVIPqUANqwr1QC+6D2nA/1IEHoC48CPXgIagPD0MDeAQawqPQCB6DxvA4NIGm0AyaQ4v/Vv5L0B1ehh7QE5KhF/SGV6AP9IV+0B8GwKswEF6DQfA6pMBgGAJvwFB4E4bBWzAcRsBIeBtGwTswGsbAWBgHqTAeJsC7MBHeg0kwGabAVEiDaTAd3ocZMBNmwQcwGz6EOTAX5sF8SIePYAEshAz4GBbBJ5AJi2EJLIVlsBxWwEpYBathDayFdbAeNsBG2ASbYQtshW2wHXbAp7ATPoNdsBv2wOewF774F/NP/U1+FwQEFChQocIYjMFYjMU4jMNcmAtzY26MYATjMR7zYB7Mi3kxP+bHBEzAQlgIDRokJCyMhTGKUSyKRbEYFsMSWAIdOkzERCyNt2IZLINlsSyWw3JYHitgBayElbAyVsYqWAWrYlWshtWwBtbAe/Fe7IW1sTbWwTpYF+tevj2FDbABNsSG2AgbYWNsjE2wCTbDZtgCW2BLbImtsBW2wTbYFttiO2yHSZiE7bE9dsAO2BE7YifshJ2xM3bBrtg166UcgC/jy9gTq4le2Bt7Yx9MydEP+2N/fBUH4mv4Gr6OKTgYh+Ab+Aa+icPwJA7HETgSR2Jl8Q6OxjFIYhymYipOwAk4ESfiJJyMk3EqpuE0nI7TcQbOxJn4Ac7GD/FDnItzcT6mYzouwIWYgRm4CE9hJi7GJbgUl+FyXIYrcRWuxDW4FtfgelyPG3EjbsbNuBW34nbcjp+iAsDPcDfuxhTci3txH+7D/bgfD+ABzMIsPIgH8RAewsN4GI/gETyKx/A4HsMTeAJP4ik8jafxLJ7Fc/hCwjcNPy2+OgXEBUooESNiRKyIFXEiTuQSuURukVtERETEi3iRR+QReUVekV/kFwkiQRQShYQRRpAIYwBAREVUFBVFRTFRTJQQJYQTTiSKRFFalBZlRBlRVtwuyok7RHlRQbR2lUQlUVm0cVXE3aKqqCqqieqihqgpaopaopaoLWqLOqKOqCvqinriIVFf9MJ++Ii40JlGYjA2FkOwiWgq5KVPsJZiGLYSrUUb8ZQYgcOxnWjpksSzor0YjR3EX8QYfF50EuOws3hRdBFdRTfxkuguWrkeoqeYhL1EbzEV+4i+op/oL2ZgdfEBzs5ZQ7wuUsRgMUS8Iebjm2KYeEsMFyPESPG2GCXeEaPFGDFWjBOpYryYIN4VE8V7YpKYLKaIqSJNTBPTxftihpgpZokPxGzxoZgj5op5Yr5IFx+JBWKhyBAfi0XiE5EpFoslYqlYJpaLFWKlWCVWizVirVgn1osNYqPYJDaLLWKr2Ca2ix3iU7FTfCZ2id1ij/hc7BVfiH3iS7FffCUOiK9FlvhGHBTfikPiO3FYfC+OiB/EUXFMHBc/ihPiJ3FSnBKnxRlxVvwszolfxHnhBUiUQkqpZCBjZA4ZK3PKOHmNzCWDS8/u9TJe3iDzyBtlXplP5pcFZIIsKAtJLY20kmQoC8siMipvkkXlzbKYLC5LyJLSyVIyUd4iS8tbZRl5mywrb5fl5B2yvKwgK8pK8k5ZWd4lIXJxH9VkdVlD1pT3ymS4T9aW98s68gFZVz4o68mHZH35sGwgH5EN5aOykXxMNpaPyyayqWwmm8sW8gnZUj4pW8nWso18SraVT8t28hmZJJ+V7aW/9BJ5XnaSL8jO8kXZRXaV3eQv8rz0sofsKaEXyN7yFdlH9pX9ZH85QL4qB8rX5CD5ukyRg+UQ+YYcKt+Uw+RbcrgcIUfKt+Uo+Y4cLcfIsXKcTJXj5QT5rpwo35OT5GQ5RU6VaXKa7HdppllS/sP8d/8gf9Cve98oN8nNcovcKrfJ7XKH/FTulDvlLrlL7pF75F65V+6T++R+uV8ekAdklsySB+VBeUgekoflYXlEHpFH5TF5Rv4oT8if5El5Sp6SZ+RZeVaeu/QcgEIllFRKBSpG5VCxKqeKU9eoXOpalVtdpyLqehWvblB51I0qr8qn8qsCKkEVVIWUVkZZRSpUhVURFVU34aUXjCqhSiqnSqlEdcu/kq+KqptVMVX8N/mX60v+O/W1UC1US9VStVKtVBvVRrVVbVU71U4lqSTVXrVXHVQH1VF1VJ1UJ9VZdVZdVBfVTXVT3VV31UP1UMkqWfVWr6g+qq/qp/qrAepVNVANVIPUIJWiUtQQNUQNVUPVMDVMDVfD1Ug1Uo1So9RoNVqNVWNVqkpVE9QENVFNVJPUJDVFTVFpKk1NV9PVDDVDzVKz1Gw1W81Rc9Q8NU+lq3S1QC1QGSpDLVKLVKZarBarpWqpWq6Wq5VqpVqtVqu1aq1ar9arTLVJbVJb1Ba1TW1TO9QOtVPtVLvULrVH7VF71V61T+1T+9V+dUAdUFkqSx1UB9UhdUgdVofVEXVEHVVH1XF1XJ1QJ9RJdVKdVqfVWXVWnVPn1Hl1/sJpXyACEahABTFBTBAbxAZxQVyQK8gV5A5yB5EgEsQH8UGe4MYgb5AvyB8UCBKCgkGhQAcmsIG41PRocFNQNLg5KBYUD0oEJQMXlAoSg1uC0sGtQZngtqBscHtQLrgjKB9UCCoGlYI7g8rBXUGV4O6ganBPUC2oHtQIagb3BrWC+4Lawf1BneCBoG7wYFAveCioHzwcNAgeCRoGjwaNgseCxsHjQZOgadAsaB60+FPn9/5kviddD91TJ+teurd+RffRfXU/3V8P0K/qgfo1PUi/rlP0YD1Ev6GH6jf1MP2WHq5H6JH6bT1Kv6NH6zF6rB6nU/V4PUG/qyfq9/QkPVlP0VN1mp6mp+v39Qw9U8/SH+jZ+kM9R8/V8/R8na4/0gv0Qp2hP9aL9Cc6Uy/WS/RSvUwv1yv0Sr1Kr9Zr9Fq9Tq/XG/RGvUlv1lv0Vr1Nb9c79Kd6p/5M79K79R79ud6rv9D79Jd6v/5KH9Bf6yz9jT6ov9WH9Hf6sP5eH9E/6KP6mD6uf9Qn9E/6pD6lT+sz+qz+WZ/Tv+jz2l84ub/w9W6UUSbGxJhYE2viTJzJZXKZ3Ca3iZiIiTfxJo/JY/KavCa/yW8STIIpZAqZC8iQKWwKm6iJmqKmqClmipkSpoRxxplEk2hKm9KmjCljypqyppwpZ8qb8qaiqWjuNHeau8xd5m5zt7nH3GOqm+qmpqlpaplaprapbeqYOqauqWvqmXqmvqlvGpgGpqFpaBqZRqaxaWyamCammWlmWpgWpqVpaVqZVqaNaWPamramnWlnkkySaW/amw6mg+loOppOppPpbDqbLqaL6Wa6me6mu+lhephkk2x6m96mj+lj+pl+ZoAZYAaagWaQGWRSTIoZYoaYoWaoGWaGmeFmhBl54UTVvGNGmzFmrBlnUk2qmWAmmIlmoplkJpkpZopJM2lmupluZpgZZpaZZWab2WaOmWPmmXkm3aSbBWaByTAZZpFZZDJNpllilphlZplZYVaYVWaVWWPWmHWwzmwwG8wms8lsMVvMNrPN7DA7zE6z0+wyu8wes8fsNXvNPrPP7Df7zQFzwGSZLHPQHDSHzCFz2Bw2R8wRc9QcNcfNcXPCnDAnzUlz2pw2Z02+S9+X3sTanDbOXmNz2Wttbnud/ds4vy1gE2xBW8hqm9fm+01srLXFbHFbwpa0zpayifaW38XlbQVb0Vayd9rK9i5b5XdxLXufrW3vt3XsA7amvfc3cV37oK1nH7P1EQFsU9vQNreN7GO2sX3cNrFNbTPb3La1T9t29hmbZJ+17e1zv4sX2IV2lV1t19i1dpfdbU/bM/aQ/c6etT/bHranHWBftQPta3aQfd2m2MG/i0fat+0o+44dbcfYsXbc7+IpdqpNs9PsdPu+nWFn/i5Otx/Z2TbDzrFz7Tw7/9f4Qk0Z9mO7yH5iM20AS+xSu8wutyvsyv9f61K73m6wG+1O+5ndYrfabXa73XH5RNjutnvs53av/cIetN/a/fYre8Aetln2m1/jC8d32H5vj9gf7FF7zB63P9oT9id1OfvCsf9of7HnrbdASECSFAUUQzkolnJSHF1Duehayk3XUYSup3i6gfLQjZSX8lF+KkAJVJAKkSZDlohCKkxFKEo30eXySlBJclSKEukWKk23Uhm6jcrS7VSO7qDyVIEqUiW6kyrTXVSF7qaqdA9Vo+pUg2rSvVSL7qPadD/VoQeoLj1I9eghqk8PUwN6hBrSo9SIHqPG9Dg1oabUjJpTC3qCWtKT1IpaUxt6itrS09SOnqEkepba03PUgf5CHel56kQvUGd6kbpQV+pGL1F3epl6UE9Kpl7Um16hPtSX+lF/GkCv0kB6jQbR65RCg2kIvUFD6U0aRm/RcBpBI+ltGkXv0GgaQ2NpHKXSeJpA79JEeo8m0WSaQlMpjabRdHqfZtBMmkUf0Gz6kObQXJpH8ymdPqIFtJAy6GNaRJ9QJi2mJbSUltFyWkEraRWtpjW0ltbRetpAG2kTbaYttJW20XbaQZ/STvqMdtFu2kOf0176gvbRl7SfvqID9DVl0Td0kL6lQ/QdHabvfU/6gY7SMTpOP9IJ+olO0ik6TWfoLP1M5+gXOk+eIMRQhDJUYRDGhDnC2DBnGBdeE+YKrw1zh9eFkfD6MD68IcwT3hjmDfOF+cMCYUJYMCwU6tCENqQwDAuHRcJoeFNYNLw5LBYWD0uEJUMXlgoTw1vC0uGtYZnwtrBseHtYLrwjLB9WCB97oFJ4Z1g5vCusEt4dVg3vCauF1cMaYc3w3rBWeF9YO7w/rBM+EJYJHwzrhQ+F9cOHwwbhI2HD8NGwUfhY2Dh8PGwSNg2bhc3DFuETYcvwybBV2DpsEz4Vtg2fDtuFz4RJ4bNh+/C5X9c/uPDvr08Oe4W9w1fCV0Lv75fzovOj6dGPoguiC6MZ0Y+ji6KfRDOji6NLokujy6LLoyuiK6Oroquja6Jro+ui66Mbohuj3tfMAQ6dcNIpF7gYl8PFupwuzl3jcrlrXW53nYu46128u8HlcTe6vC6fy+8KuARX0BVy2hlnHbnQFXZFXNTd5Iq6m10xV9yVcCWdc6VcomvuWrgWrqV70rVyrV0b95R7yj3tnnbPuGfcs669e851cH9xHd3zrpN7wb3gXnRdXFfXzb3kurvxuS++J5Ndb9fb9XF9XD/Xzw1wA9xAN9ANcoNciktxQ9wQN9QNdcPcMDfcDXcj3Ug3yo1yo91oN9aNdaku1U1wE9xEN9FNcpPcFDfFpbk0N91NdzPcDFd55sW9zHFz3Dw3z6W7dLfAXThnzHCL3CKX6TLdErfELXPL3Aq3wq1yq9wat8atc+vcBrfBbXKb3Ba3xW1z29wOt8PtdDvdLn/dxUndXrfP7XP73X53wH3tstw37qD71h1y37nD7nt3xP3gjrpj7rj70Z1wP7mT7pQ77c64s+5nd8794s4771Ij4yMTIu9GJkbei0yKTI5MiUyNpEWmRaZH3o/MiMyMzIp8EJkd+TAyJzI3Mi8yP5Ie+SiyILIwkhH5OLIo8kkkM7I4siSyNLIssjzifcEtoS/si/iov8kX9Tf7Yr64L+FLeudL+UR/iy/tb/Vl/G2+rL/dl/N3+PK+gq/oH/dNfFPfzDf3LfwTvqV/0rfyrX0b/5Rv65/27fwzPsk/69v753wH/xff0T/vO/kXfGf/ou/iu/pu/iXf3b/se/iePtn38r39K76P7+v7+f5+gH/VD/Sv+UH+dZ/iB/sh/g0/1L/ph/m3/HA/wo+MeduPunyJDON8qh/vJ/h3/UT/np/kJ/spfqpP89P8dP++n+Fn+ln+Az/bf+jn+Ll+np/v0/1HfoFf6DP8x36R/8Rn+sWXbyr7FX6lX+VX+zV+rV/n1/sNfqPf5Df7LX6r3+a3+x3+U7/Tf+Z3+d1+j//c7/Vf+H3+S7/ff+UP+K99lv/GH/Tf+kP+O3/Yf++P+B/8UX/MH/c/+hP+J3/Sn/Kn/Rl/1v/sz/lf/Hn+nTXGGGOMsX/K+CtD8ds1F2/n9/qDHPFXG/cGgGu3Fsj66/UXzijX5b047isS2kYA4NmenR+5vFSrlpycfGnbTAlBkbkAl/8n6IIYuBIvhjbwNCRBayj9h/X3FV3P0j+YP3o7QNxf5cTClfjK/F8CYPIfzP/EUyMXlAtPx/8X888FKFbkSk5OuBIvhja/3l9pDWX+Tv35Wv6D+nN+lQrQ6q9ycsGV+Er9ifAkPAdJv9mSMcYYY4wxxhi7qK+o2PHy9efln/j8o+vzBHUlJwdcif/R9TljjDHGGGOMMcauvue7dnvmiaSk1h3/9UGV/1bWPz1oDP9TM/PgDwfeA1x+RAHAvzkhwIWB/E8exeb/yL5SLr11/nbVsjM+gP8drfwzBlf5g4kxxhhjjDH2p7ty0v/bx9XVKogxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGMuG/hN/TuxqHyNjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDF2tf2/AAAA//9IVQM5") mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x80, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) 19.190785042s ago: executing program 6 (id=1520): r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file2\x00', 0xc0ed4040, &(0x7f00000000c0)={[{@noblock_validity}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x100000}}, {@journal_dev={'journal_dev', 0x3d, 0x714}}, {@grpid}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}, {@nolazytime}, {@jqfmt_vfsv1}]}, 0xf5, 0x47a, &(0x7f0000000ac0)="$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") mount$tmpfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='mode<00000000000000000005217,']) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='debugfs\x00', 0x0, &(0x7f0000000100)) 19.098535174s ago: executing program 6 (id=1522): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_PUBL_GET(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x480100}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24000080}, 0x4004080) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0700000000000000000005000000180001801400020073797a5f74756e0000000000000000000c00038004000380040001"], 0x38}}, 0x0) 19.050663115s ago: executing program 35 (id=1522): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_PUBL_GET(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x480100}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24000080}, 0x4004080) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0700000000000000000005000000180001801400020073797a5f74756e0000000000000000000c00038004000380040001"], 0x38}}, 0x0) 3.150345409s ago: executing program 8 (id=1803): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x10, 0x4, 0x4, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000380)={r0, 0x22, &(0x7f0000000500)={0x0, 0x0}}, 0x27) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000240)={r1, 0x2, 0x8}, 0xc) bpf$BPF_GET_PROG_INFO(0x4, &(0x7f0000000000)={r2, 0xe0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8, 0x0, 0x0}}, 0x10) 2.980110993s ago: executing program 8 (id=1805): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{r0}, &(0x7f0000000540), &(0x7f0000000580)='%pS \x00'}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x18) pause() 2.103131529s ago: executing program 8 (id=1824): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x20780, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) fstatfs(0xffffffffffffffff, 0x0) 2.018339451s ago: executing program 8 (id=1826): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="28010000100007000000000200000000ff020000000000000000000000000001e00000020000000000000000000000004e200000000000000000000002000000", @ANYRES32, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc00000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000700000000000000000000000000000000000400fdffffffe80a000000000000000000000a000200700000000000000014000e00fe8000000000000000000000000000bb24000900b4000000"], 0x128}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000700)=@newsa={0x10c, 0x1a, 0x7, 0x0, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in=@multicast2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x300, 0x3, 0x2, 0xfeffff7f00000000}, {0x0, 0x200000, 0x7, 0xfffffffffffffffd}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @XFRMA_IF_ID={0x8, 0x1f, 0x3}]}, 0x10c}}, 0x0) 2.001824131s ago: executing program 7 (id=1827): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x17, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000070000000000000003000000791908000000000095"], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x28}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x15, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x26) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x34, &(0x7f0000000300)=r0, 0x4) 1.983145572s ago: executing program 8 (id=1828): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x40f00, 0x60, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x94) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x700, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="adffa88800000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2], 0x44}}, 0x8000) 1.973317742s ago: executing program 5 (id=1829): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000380)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000000a40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x143042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0x40305829, &(0x7f0000000000)={0x17c04, 0xffffffffffffffff, 0x1, 0xc73f, 0x81, 0x1}) 1.951092883s ago: executing program 7 (id=1830): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000008020000d9"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, 0x0, 0x0, 0x1) 1.846572835s ago: executing program 7 (id=1831): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000090003206d0414c34000ffff000109022400010400a000090400"], 0x0) 1.785179846s ago: executing program 5 (id=1832): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x7, 0x100) ioctl$MON_IOCX_GET(r0, 0x400c9206, &(0x7f0000000340)={0x0, 0x0}) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000000)=""/23, 0x17}], 0x1, 0x100, 0x2) syz_open_dev$usbfs(&(0x7f00000000c0), 0x205, 0x8401) 1.780719786s ago: executing program 8 (id=1833): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00220f000000560900a1004daf25cee2d5d1c1"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000240), 0x0, 0x0) ioctl$HIDIOCGCOLLECTIONINDEX(r1, 0x40184810, &(0x7f0000000040)={0x2, 0x100, 0x0, 0x2, 0x4, 0x1}) 1.675789438s ago: executing program 5 (id=1834): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) r2 = epoll_create1(0x0) flistxattr(r2, 0x0, 0x0) 1.612062289s ago: executing program 5 (id=1835): syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000140)='./file0\x00', 0x2008408, &(0x7f0000000000)=ANY=[@ANYRES32=0x0], 0x41, 0x24c, &(0x7f00000007c0)="$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") madvise(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x64) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffff0001}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000001c0)='mm_collapse_huge_page\x00', r0}, 0x18) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) 1.611662239s ago: executing program 5 (id=1836): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={0x0, 0x4c}, 0x1, 0x0, 0x0, 0x22004014}, 0x800) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000000c401"]) 1.52343035s ago: executing program 5 (id=1837): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040080010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001440)={0x24, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x5, "741cb976"}]}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0003560000000003"], 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000880)={0x24, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="00031200"], 0x0, 0x0}, 0x0) 1.011234611s ago: executing program 0 (id=1845): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x2, 0x5505, &(0x7f0000002480)="$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") r0 = open(&(0x7f0000000040)='./file2\x00', 0x141042, 0x70) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x42) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc4}}) fallocate(r0, 0x3, 0x0, 0x2328) 820.308134ms ago: executing program 1 (id=1849): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x6, 0xfffffffffffffffd, &(0x7f00000000c0)=0xfffffffffffffee3) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = socket(0x11, 0x2, 0x0) setsockopt(r0, 0x107, 0xd, &(0x7f00000000c0)="0000e20085c75c11a92614431ea3b121", 0x10) 804.815754ms ago: executing program 1 (id=1850): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)={0x34, r1, 0x603, 0x70bd2f, 0x25dfdbf8, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}]}, 0x34}}, 0x480d0) 789.465725ms ago: executing program 1 (id=1851): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x8101, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000040)={0x0, &(0x7f0000000440)=[@code={0xa, 0x58, {"2e40dfb30080000067f2466d2e2e65f20f2a1266baf80cb8f4ecc88eef66bafc0cb800980000eff3670f0766b852000f00d80f20e035010000000f22e00f07c4c2fd253746f7df"}}], 0x58}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 693.028017ms ago: executing program 0 (id=1852): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000001300)=@newtaction={0x88c, 0x30, 0x12f, 0x0, 0x4, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0xffffffff, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x2, 0x2, 0x0, 0x0, 0x7}}}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x80000000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x6e, 0x0, 0x2, 0x4, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa3, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8, 0xffffffff, 0x3, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xb, 0x0, 0x4, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffff35, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x40001000, 0x0, 0xb8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xfffffffd, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x5, 0x5, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x3, 0x0, 0x1]}, @TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x0, 0x5, 0x0, 0x2, 0xb, 0xfffffffb, 0x0, 0x7, 0x401, 0x1, 0xffff8000, 0x90, 0x9fd, 0x2, 0xb8, 0xca2, 0x6, 0x3c, 0x7, 0x1, 0xa89c, 0x400, 0xc, 0x492217a0, 0x80000007, 0x5, 0x1, 0x1ff, 0xe5, 0x2f, 0xd, 0x3, 0xa, 0x3, 0x1, 0x9, 0x11, 0x9, 0x6, 0x3ff, 0x7, 0xd, 0x3, 0xc0000, 0x8, 0x8, 0xffffff40, 0x100, 0x3, 0x5, 0x7, 0xe0b2, 0xfffffffe, 0x8fb, 0x84, 0x9, 0x4, 0x9, 0x80000001, 0x6, 0x0, 0x8, 0x800, 0x9, 0x1, 0x100, 0x401, 0x8, 0x3, 0xb5, 0x10001, 0x4, 0x4, 0x7f, 0x0, 0x8, 0x2, 0x7f, 0x80000001, 0x2, 0x4, 0x0, 0x4, 0x8000, 0x0, 0x9, 0x80, 0x7, 0xe9, 0x1, 0x0, 0x7, 0xeb22, 0xd, 0x8000, 0xfffffff7, 0x0, 0x4, 0x3ff, 0x400000, 0x10, 0x5, 0x3, 0x10000, 0x5, 0x1, 0x0, 0x2, 0x7, 0x5, 0x6, 0x5, 0x4, 0x2, 0x81, 0x0, 0x10, 0x6, 0x7fff, 0x800, 0xfffffff4, 0x10000, 0x5, 0x8, 0xba, 0x4, 0x89, 0x2, 0x6, 0x100, 0x9, 0xffffa3e0, 0xfffffffe, 0xff, 0x1, 0x2, 0xf, 0x24b9, 0x3a, 0xe01, 0x1, 0x6430, 0xd, 0x8, 0x0, 0x3, 0x7eb7, 0x3, 0x0, 0x200, 0xfffffeff, 0x9, 0xff, 0xa, 0x6, 0x7, 0x100, 0x1, 0x3, 0x100, 0xb, 0x8, 0x101, 0x6, 0x2, 0xfffffc00, 0x81, 0x81, 0x200, 0x80000001, 0x1, 0x1, 0x9, 0x7, 0x4, 0xb, 0x80, 0x0, 0x0, 0x1, 0x5, 0x2, 0x65, 0x4, 0xfffffa0c, 0x3, 0x0, 0x4, 0x4, 0x35bc0, 0x9, 0xfffffffa, 0x7, 0x5, 0x3, 0x5, 0x9, 0x8, 0x28, 0x2, 0x5, 0x10001, 0x2, 0xf, 0x0, 0x1, 0x40000723, 0x0, 0xe, 0xe, 0x4, 0x6, 0x7, 0x200, 0xfffffbff, 0x7, 0x3, 0x8, 0x5, 0xffffffff, 0x2, 0x7f, 0x2, 0x80000001, 0x0, 0x9, 0xf, 0xfffffffe, 0x928, 0x4, 0x2, 0x5, 0xd1b, 0xb87, 0x3, 0x8d8d, 0x55, 0x101, 0x8, 0x64e8, 0x8, 0x82c, 0x772, 0x80a, 0xfff, 0x6, 0x3f7, 0x4, 0x8, 0x8, 0x1, 0x5d, 0x9, 0xd, 0x80]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x88c}}, 0x0) 680.313827ms ago: executing program 1 (id=1853): syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 656.337897ms ago: executing program 1 (id=1854): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000a00)=@newtaction={0x88c, 0x30, 0xffff, 0xfffffffe, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1000, 0xffff, 0xd, 0x81, 0x7, 0x6, 0x7, 0x9, 0x4, 0x4, 0x6, 0x3, 0x5, 0x3, 0x6, 0x6, 0xffff, 0x6, 0x4, 0x6, 0x0, 0x20, 0xb, 0x5, 0x5, 0x2, 0x62, 0x9, 0xfffffff8, 0x6338, 0x70, 0x7, 0x9, 0x8, 0x9, 0x7, 0x80000000, 0x7, 0xfff, 0x2, 0x9, 0xfffffff9, 0x6, 0xfffffffe, 0x600000, 0x6, 0x1, 0x8, 0x1, 0xbc0, 0x9bf1, 0x5, 0x2, 0x0, 0xe, 0x9, 0x1ff, 0xb9, 0xc741, 0x6, 0x5, 0x1, 0xed, 0x1, 0x8001, 0xb, 0x5b96, 0xffff, 0x2, 0x20000000, 0xff, 0x1, 0x4, 0x9, 0x401, 0x2, 0x1000, 0x101, 0x50, 0x4, 0x2, 0x1, 0x5, 0x5, 0x7, 0x8a6b, 0xfffffbff, 0x4, 0x2, 0x1, 0x5, 0x6, 0x2, 0x5, 0xffffffff, 0x80, 0x8, 0x0, 0x9, 0xfffffff4, 0x3b96, 0xfffff800, 0x8, 0x3, 0xf, 0xf8b, 0x10001, 0x3, 0x2, 0xa78, 0x3, 0xcb0, 0x6, 0x9, 0x9, 0x0, 0x7, 0x7fffffff, 0x7, 0x9, 0x0, 0x40, 0x8, 0x8, 0x5, 0x8c, 0xaa93, 0x800, 0x3, 0x9, 0x10001, 0x9, 0x1, 0xd12, 0x0, 0x23487474, 0x3cd2, 0xec19, 0x7, 0x5, 0x5, 0xb1, 0x2, 0x6, 0x9, 0x2, 0xaa83, 0x40, 0xff, 0x9, 0x9, 0x1, 0x5, 0x0, 0x2, 0x1, 0x4, 0x9, 0x4, 0x2, 0x7, 0xffffffff, 0x1, 0xd76a, 0x6, 0xfffffff6, 0x4, 0x1, 0xfffffffd, 0xfffffffc, 0x50, 0x7359, 0x8, 0x7, 0xb, 0xa, 0x2d5, 0x6, 0xf, 0x1, 0x773a, 0x6b7b, 0x10001, 0x3, 0x4, 0x5, 0x7, 0x4, 0x800, 0x2, 0x5, 0x0, 0x6, 0x3ff, 0x9, 0x5, 0x5, 0x0, 0x7, 0x8, 0xffff, 0x3, 0x4, 0xa, 0xae2b, 0x1, 0x6, 0x1a71, 0x0, 0x10001000, 0x0, 0x3, 0x7, 0x1, 0x1, 0x3c34, 0x6, 0x10000, 0x5, 0x7fff, 0x0, 0x8, 0x3, 0x3, 0xc, 0x100, 0x0, 0x2, 0x3, 0x5, 0xc8, 0x557c, 0x9, 0x8, 0x0, 0x3, 0x80, 0x8000, 0x7bc, 0x1, 0x8, 0x6, 0xe, 0x5, 0xfff, 0x9, 0x5, 0x279, 0x8000, 0x8, 0x9, 0x1, 0x80000000, 0x4, 0x9, 0x1ff]}, @TCA_POLICE_RATE={0x404, 0x2, [0x2, 0x9, 0xd, 0x7, 0x9, 0x6, 0x0, 0x4, 0x81, 0x1, 0x100, 0x7, 0x3f, 0x3, 0x8, 0x9, 0x2, 0x6, 0x6dbf, 0x8, 0x5, 0x12c, 0x3, 0x5, 0x5, 0x7, 0x100, 0x7, 0x8, 0x9, 0x0, 0x3, 0xffffffff, 0x200, 0xfffffffe, 0x328d, 0xfffffe01, 0x9, 0x8, 0x3, 0xffff8000, 0x4f, 0x0, 0xd, 0x3, 0x8000, 0x2, 0x17, 0x88, 0x8, 0xc, 0xffff, 0x0, 0x3, 0x2, 0x42f, 0xffffff2c, 0x5, 0xbd, 0xe0, 0x6, 0xc26, 0x8e, 0x6, 0x3, 0xe, 0x1, 0x800, 0x1bf, 0x4, 0x5, 0x4, 0x8, 0x7ce7c36c, 0x3, 0x1eb, 0x10001, 0x8, 0x5102, 0x6ce, 0x6, 0x79, 0x2, 0x5, 0xfffffff9, 0x2, 0x4e30, 0x6, 0x6, 0x2, 0x90, 0x2, 0x2, 0xc80e, 0x4, 0x5, 0x450, 0xe0, 0x9, 0x5, 0xd, 0x5, 0x5, 0x9, 0x1045800, 0x0, 0xffffffde, 0x6a4, 0x5, 0x9, 0x6, 0x1f, 0xb89, 0x6, 0x7, 0x1ff, 0x6, 0xfffff77b, 0x3, 0xffffffff, 0xfffff400, 0x6, 0x6, 0x8, 0x9, 0x2, 0x7, 0x401, 0xa7d, 0x6, 0xfffff9f3, 0x1, 0x9, 0x1, 0xb4, 0x2, 0xc, 0x8, 0x7, 0x0, 0x5891, 0x8, 0x3, 0xb, 0x0, 0x8, 0xb, 0x0, 0xff, 0x4f, 0x8, 0x33f, 0x70fc7f4f, 0x0, 0x4, 0x0, 0xc, 0x9, 0x5, 0x6, 0x3, 0x2, 0x1, 0x0, 0x2c46512a, 0x7, 0x2640, 0x0, 0x10000, 0x0, 0x9, 0x3, 0x6, 0x7fffffff, 0xdc, 0x80000000, 0x26, 0xbb16, 0x4f7, 0x9, 0xbd1, 0x44, 0xffffff7f, 0xa3, 0x1, 0x4, 0x0, 0x3, 0x2, 0x5, 0x0, 0x9, 0x4, 0x4b, 0x1, 0x8000, 0x2, 0x4, 0x2e4, 0xc7, 0x4, 0x4, 0x4, 0x81, 0xff, 0x6, 0x1, 0x10, 0x6, 0x9, 0x1, 0x4e2, 0x100, 0x7, 0x3ff, 0x10000, 0x4, 0x1, 0x101, 0x800, 0x101, 0x5, 0x6, 0x9, 0x6, 0x101, 0x9, 0x9, 0x6, 0x800, 0x101, 0xf07, 0x0, 0x2, 0x81, 0x6, 0x80000001, 0x8, 0x2, 0xee8, 0x1ff, 0x81, 0x24000, 0x6, 0x2, 0x2, 0x2, 0x10, 0x8001, 0xa, 0x8, 0x200, 0x6, 0x9, 0x8001, 0x2]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x4, 0x4, 0x2, 0x7, {0x3, 0x2, 0x4, 0x40, 0x6, 0x1ff}, {0x2, 0x0, 0x2, 0xcd4, 0x9, 0x8}, 0x0, 0x7ff}}]]}, {0xcfe0f6cd7cd6d6c2}, {0xc}, {0xc}}}]}]}, 0x88c}, 0x1, 0x0, 0x0, 0x8000}, 0x4) 648.605887ms ago: executing program 0 (id=1855): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x19}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) syz_mount_image$erofs(&(0x7f00000000c0), &(0x7f0000000140)='./bus\x00', 0x406, &(0x7f0000000080)=ANY=[], 0xfd, 0x1fa, &(0x7f0000000380)="$eJzsmT9v00AYxp87X5y0ICQWBhaQqESRWsd2AHVhKF8ApJZ/GxE1VcFtUOqBVkIQsbDwMfgKDJ06sLGxwgBISAxkZD50vrfOUbshbYMy9P1JuTy+e/2+dxffEykBwzAnlu/ffn99e3NheQ7AacygTv0/vUGMdOK/NEh8fvdh48yLnf35TKywcnfUOewueshIa621OzZD78uQhb4DiSuk70EgIP0QEndJJxB4QPqJoztTJNIkeNRJVx6vpUlomsg0sWlabn0FoN8TWAHQoPkJZ3xza/tpO02T7n5R03t1SkNVQlG+qphhe6cA1V+UuOHsn/kM7r953TPXe3sTOvsXQSIi3YLAEukF1BEEgXkE7JY46z+vBvm9UdZ/FHGrNp48Pqw4Oz8seG4stY4ofACTq35o0fur5+XE53MsIZyeKSPMgS56zvV3Ppbv+vHPzGrUo14WF//XSu3xBHl2KebT9PFK+GQClTED/zSWe9nxJwVV+EczW3/W3Nzanl9bb68mq8lGHLeuh1fD8FrczL3ZtkP8r5H707STv3ZArC98FGNZNzLXp5Bl3fh527SO4y697/zKw2TufxKzl+xt5lHJl12vriHoZb8HjZr1Dpw8wzAMwzAMwzAMwzAMwzDMobgAkf8KSn9Uaa3xyo5ol/h23vcnAAD//7uwT0A=") 625.119688ms ago: executing program 0 (id=1856): io_setup(0x2278, &(0x7f0000000180)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000000)={0x0, 0xea60}, 0x10) io_submit(r0, 0x2, &(0x7f0000000140)=[&(0x7f00000001c0)={0x0, 0x4, 0x0, 0x0, 0x0, r1, &(0x7f0000000200)="bc", 0x1, 0x0, 0x0, 0x2}, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x5, 0x0, r1, 0x0, 0x0, 0x700}]) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 554.497589ms ago: executing program 1 (id=1857): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000400)='signal_generate\x00', r1}, 0x18) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 537.640639ms ago: executing program 36 (id=1857): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000400)='signal_generate\x00', r1}, 0x18) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 535.17928ms ago: executing program 7 (id=1859): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000008500000050000000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'xfrm0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="10030600e0ff020004004788aa96a13bb100001100007fca1a00", 0x10608, 0x0, &(0x7f0000000140)={0x11, 0x0, r1}, 0x14) 522.69779ms ago: executing program 7 (id=1860): syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000040), 0x0}, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x5, 0x0, 0x0, {}, {0x77359400}, {}, 0x2, @can={{}, 0x0, 0x0, 0x0, 0x0, "3fd31340e92c4bb8"}}, 0x48}, 0x300}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x5, 0x0, 0x0, {0x0, 0x2710}, {0x77359400}, {}, 0x2, @can={{}, 0x0, 0x2, 0x0, 0x0, "3fd31340e92c4bb8"}}, 0x38}, 0x300}, 0x8040) 478.186751ms ago: executing program 0 (id=1861): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6_vti0\x00', 0x0}) r2 = gettid() r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010000304f9ffbffffedbdf2500007400", @ANYRES32=r1, @ANYBLOB="049c01000750050008001300", @ANYRES32=r2, @ANYBLOB="1400030076"], 0x3c}, 0x1, 0x0, 0x0, 0x4802}, 0x42850) 390.499492ms ago: executing program 0 (id=1862): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340)}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000380)="05804ae0ff1f0006d758e60803dc", 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x4c, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r1, 0x0, 0x6}, 0x21) close(0xffffffffffffffff) 0s ago: executing program 7 (id=1863): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000000)='./bus\x00', 0x2008002, &(0x7f0000000400)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1000}}, {@nodiscard}, {@quota}]}, 0x1, 0x56f, &(0x7f00000004c0)="$eJzs3c9vHFcdAPDvjH82SesEeoAKSIBCQFHW8aaNql5aLiBUVUJUHBCH1Ngby2Q3G7LrUptIuH8DSCBxgj+BAxIHpJ44wIkjEgdAlANSgYgqRuph0MyO1669Jou93m12Px9pMj/ezHzf283Me367Oy+AiXUpIrYjYjYiXo+IhXJ7Uk7xcmfK93v44P7KzoP7K0lk2Wv/TIr0fFtxwHy5f0ScLc85HxFf/0rEt5PDcVubW7eX6/XavXJ9sd24u9ja3Lq63lheq63V7lSrN5ZuXHvh+vPVgZX1YuMX7355/ZVv/PpXn3zn99tf/H6erXNlWrccA9Yp+kw3Tm46Il45jWAjMFXOZ0ecD44njYiPRMRniut/IaaK/50AwDjLsoXIFvavAwDjLi36wJK0EhFpWjYCKp0+vKfjTFpvttpXbjU37qx2+srOx0x6a71eu3Zh7o/fLXaeSfL1pSKtSC/WqwfWr0fEhYj40dwTxXplpVlfHU2TBwAm3tn99X9EvDeXppVKX4f2+FQPAHhszI86AwDA0Kn/AWDyqP8BYPL0Uf+XH/Zvn3peAIDh6O/vf9/3A4Bxov8fACaP+h8AJsrXXn01n7Kd8vnXq29sbtxuvnF1tda6XWlsrFRWmvfuVtaazbXimT2NR52v3mzeXXouNt5cbNda7cXW5tbNRnPjTvtm8Vzvm7WZoZQKAPhfLlx8+w9JRGy/+EQxxb6xHNTVMN7SAe4FPF6mTnKwBgI81oz2BZOrryq8aCT89tTzAoxGzx/3zPdc/KCf/B9BfM8IPlQuf7z//n9jPMN4OdCz/342qowAQ3e8/v+XBp4PYPiO3f//58HmAxi+LEsOjvk/200CAMbSCb7Cl/1gUI0QYKQe9XDPgXz+DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGPmXER8J5K0UowFnub/ppVKxJMRcT5mklvr9dq1iHgqLkbEzFy+vrR78HujzTsAcFzp35Ny/K/LC8+eO5g6m/xnrphHxPd++tqP31xut+8t5dv/1d0+tzt8WHXvuBOMKwgA9O+v/exU1N/Vcr60t/3hg/sru9Mp5vGQd7/UHXx0ZefB/WLqpExHlmVZxHzRljjz7ySmy2PmI+KZiJgaQPzttyLiY73KnxR9I+fLkU/3x48y9pNDjZ9+IH5apHXm+cv30QHkBSbN2/n95+Ve118al4p57+t/vrhDnVxx/5uP2L337eyLP11GmuoRP7/mL/Ub47nffPXQxmyhk/ZWxDPTveIn3fjJEfGf7TP+nz7xqR++dERa9rOIy9E7/v5Yi+3G3cXW5tbV9cbyWm2tdqdavbF049oL15+vLhZ91Iu7PdWH/ePFK08dlbe8/GeOiN95588eKP9s99jP9Vn+n7//+rc+vbc6dzD+Fz7b+/1/uojY+/XP68TP9xl/+cwvjxy+O4+/ekT5H/X+X+kz/jt/21rtc1cAYAham1u3l+v12r0TLeR/hQ7iPIcW8iz2t/Nuc/FkQf8SxcLey5JEEsc+4UzvpLwx1tfhp/WqnvrCdLetONgzfzM/45CLkw68FMdZiPPlwsNhBR3dPQkYjr2LPiJ+N+rcAAAAAAAAAAAAAAAAvQzjN0yjLiMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADj678BAAD//2PAxWs=") kernel console output (not intermixed with test programs): out journal. Quota mode: none. [ 71.793349][ T1716] EXT4-fs (loop5): unmounting filesystem. [ 71.987724][ T578] hid-multitouch 0003:1FD2:6007.0014: item fetching failed at offset 1/5 [ 72.006635][ T578] hid-multitouch: probe of 0003:1FD2:6007.0014 failed with error -22 [ 72.084546][ T334] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 72.101815][ T3087] loop1: detected capacity change from 0 to 512 [ 72.126009][ T3087] EXT4-fs: Ignoring removed nobh option [ 72.142444][ T3087] EXT4-fs warning (device loop1): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 72.154758][ T295] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 72.171740][ T3087] EXT4-fs warning (device loop1): dx_probe:881: Enable large directory feature to access it [ 72.185104][ T3087] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.1102: Corrupt directory, running e2fsck is recommended [ 72.204337][ T578] usb 1-1: USB disconnect, device number 10 [ 72.216283][ T3087] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 72.224960][ T3087] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2195: inode #15: comm syz.1.1102: corrupted in-inode xattr [ 72.242728][ T3087] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.1102: couldn't read orphan inode 15 (err -117) [ 72.255179][ T3087] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 72.278921][ T3087] EXT4-fs warning (device loop1): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 72.290571][ T3087] EXT4-fs warning (device loop1): dx_probe:881: Enable large directory feature to access it [ 72.302654][ T3087] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.1102: Corrupt directory, running e2fsck is recommended [ 72.305577][ T334] usb 6-1: config index 0 descriptor too short (expected 19492, got 36) [ 72.327512][ T334] usb 6-1: config 0 has too many interfaces: 36, using maximum allowed: 32 [ 72.327542][ T3087] EXT4-fs warning (device loop1): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 72.336532][ T334] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 36 [ 72.348218][ T295] usb 8-1: Using ep0 maxpacket: 16 [ 72.360102][ T334] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 72.367512][ T3087] EXT4-fs warning (device loop1): dx_probe:881: Enable large directory feature to access it [ 72.380472][ T3095] EXT4-fs warning (device loop1): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 72.383366][ T3087] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.1102: Corrupt directory, running e2fsck is recommended [ 72.395814][ T334] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 72.408522][ T295] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 72.417783][ T3095] EXT4-fs warning (device loop1): dx_probe:881: Enable large directory feature to access it [ 72.429384][ T295] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 72.439508][ T334] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 72.461666][ T295] usb 8-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 72.461853][ T3095] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.1102: Corrupt directory, running e2fsck is recommended [ 72.483676][ T295] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.483976][ T334] usb 6-1: New USB device found, idVendor=046d, idProduct=c225, bcdDevice= 0.00 [ 72.492999][ T3096] EXT4-fs warning (device loop1): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 72.500885][ T334] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.524755][ T295] usb 8-1: config 0 descriptor?? [ 72.525061][ T334] usb 6-1: config 0 descriptor?? [ 72.569758][ T282] EXT4-fs (loop1): unmounting filesystem. [ 72.656618][ T3101] loop1: detected capacity change from 0 to 128 [ 72.672556][ T3101] FAT-fs (loop1): error, invalid FAT chain (i_pos 548, last_block 8) [ 72.680852][ T3101] FAT-fs (loop1): Filesystem has been set read-only [ 72.817164][ T3114] loop1: detected capacity change from 0 to 512 [ 72.828278][ T3114] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.1113: invalid indirect mapped block 4294967295 (level 1) [ 72.843413][ T3114] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.1113: invalid indirect mapped block 4294967295 (level 1) [ 72.845396][ T681] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 72.865885][ T3114] EXT4-fs (loop1): 2 truncates cleaned up [ 72.871778][ T3114] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 72.903265][ T3114] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm syz.1.1113: bg 0: block 5: invalid block bitmap [ 72.925908][ T282] EXT4-fs (loop1): unmounting filesystem. [ 72.943791][ T334] lg-g15 0003:046D:C225.0016: unknown main item tag 0x0 [ 72.951029][ T334] lg-g15 0003:046D:C225.0016: unknown main item tag 0x0 [ 72.951298][ T295] konepure 0003:1E7D:2DB4.0015: unknown main item tag 0x0 [ 72.958416][ T334] lg-g15 0003:046D:C225.0016: unknown main item tag 0x0 [ 72.969351][ T295] konepure 0003:1E7D:2DB4.0015: unknown main item tag 0x0 [ 72.980979][ T334] lg-g15 0003:046D:C225.0016: unknown main item tag 0x0 [ 72.989130][ T334] lg-g15 0003:046D:C225.0016: hidraw0: USB HID v1.01 Device [HID 046d:c225] on usb-dummy_hcd.5-1/input0 [ 72.994776][ T295] konepure 0003:1E7D:2DB4.0015: unknown main item tag 0x0 [ 73.006563][ T3121] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1116'. [ 73.019756][ T295] konepure 0003:1E7D:2DB4.0015: unknown main item tag 0x0 [ 73.049472][ T3124] loop0: detected capacity change from 0 to 2048 [ 73.056862][ T295] konepure 0003:1E7D:2DB4.0015: hidraw1: USB HID v0.00 Device [HID 1e7d:2db4] on usb-dummy_hcd.7-1/input0 [ 73.077614][ T3124] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 73.084369][ T681] usb 7-1: Using ep0 maxpacket: 16 [ 73.112479][ T681] usb 7-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice=29.82 [ 73.132622][ T284] EXT4-fs (loop0): unmounting filesystem. [ 73.154711][ T681] usb 7-1: New USB device strings: Mfr=83, Product=5, SerialNumber=10 [ 73.162927][ T681] usb 7-1: Product: syz [ 73.193993][ T39] usb 6-1: USB disconnect, device number 6 [ 73.198342][ T681] usb 7-1: Manufacturer: syz [ 73.214412][ T681] usb 7-1: SerialNumber: syz [ 73.220443][ T295] usb 8-1: USB disconnect, device number 2 [ 73.242326][ T681] usb 7-1: config 0 descriptor?? [ 73.260739][ T681] usb 7-1: selecting invalid altsetting 1 [ 73.270781][ T681] snd-usb-audio: probe of 7-1:0.0 failed with error -22 [ 73.340667][ T336] udevd[336]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 73.464778][ T295] usb 7-1: USB disconnect, device number 6 [ 73.564295][ T334] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 73.575945][ T3152] serio: Serial port ptm0 [ 73.722188][ T3154] loop5: detected capacity change from 0 to 512 [ 73.746697][ T3154] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 73.747924][ T334] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 73.757381][ T3154] ext4 filesystem being mounted at /136/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 73.789670][ T334] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 73.803954][ T1716] EXT4-fs (loop5): unmounting filesystem. [ 73.809976][ T334] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 73.825082][ T334] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 73.846882][ T334] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 73.855990][ T334] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 73.864144][ T334] usb 1-1: Manufacturer: syz [ 73.873352][ T334] usb 1-1: config 0 descriptor?? [ 73.932230][ T3172] loop5: detected capacity change from 0 to 256 [ 73.961162][ T3174] loop7: detected capacity change from 0 to 1024 [ 73.976297][ T3174] EXT4-fs: Ignoring removed orlov option [ 73.979791][ T3172] bio_check_eod: 18965 callbacks suppressed [ 73.979810][ T3172] syz.5.1137: attempt to access beyond end of device [ 73.979810][ T3172] loop5: rw=2049, sector=256, nr_sectors = 4 limit=256 [ 74.005242][ T3177] input: syz0 as /devices/virtual/input/input10 [ 74.007110][ T3174] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 74.060919][ T2972] EXT4-fs (loop7): unmounting filesystem. [ 74.089462][ T3185] loop5: detected capacity change from 0 to 512 [ 74.107247][ T3185] EXT4-fs: Ignoring removed i_version option [ 74.114681][ T3185] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 74.156665][ T3185] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 74.165772][ T3185] ext4 filesystem being mounted at /143/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 74.197625][ T3185] EXT4-fs error (device loop5): ext4_do_update_inode:5256: inode #2: comm syz.5.1142: corrupted inode contents [ 74.209773][ T3185] EXT4-fs (loop5): Remounting filesystem read-only [ 74.216388][ T3185] EXT4-fs error (device loop5): ext4_dirty_inode:6121: inode #2: comm syz.5.1142: mark_inode_dirty error [ 74.228650][ T3185] EXT4-fs (loop5): Remounting filesystem read-only [ 74.235327][ T3185] EXT4-fs error (device loop5): ext4_do_update_inode:5256: inode #2: comm syz.5.1142: corrupted inode contents [ 74.247939][ T3185] EXT4-fs (loop5): Remounting filesystem read-only [ 74.254683][ T3185] EXT4-fs error (device loop5): __ext4_ext_dirty:202: inode #2: comm syz.5.1142: mark_inode_dirty error [ 74.280377][ T3185] EXT4-fs (loop5): Remounting filesystem read-only [ 74.295079][ T334] appleir 0003:05AC:8243.0017: unknown main item tag 0x0 [ 74.302661][ T334] appleir 0003:05AC:8243.0017: No inputs registered, leaving [ 74.304287][ T295] usb 7-1: new full-speed USB device number 7 using dummy_hcd [ 74.313818][ T334] appleir 0003:05AC:8243.0017: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 74.319487][ T1716] EXT4-fs (loop5): unmounting filesystem. [ 74.338561][ T3190] loop7: detected capacity change from 0 to 40427 [ 74.350707][ T3190] F2FS-fs (loop7): fault_injection options not supported [ 74.359806][ T3190] F2FS-fs (loop7): invalid crc value [ 74.393046][ T3190] F2FS-fs (loop7): Found nat_bits in checkpoint [ 74.470639][ T778] Bluetooth: hci0: Frame reassembly failed (-84) [ 74.495481][ T295] usb 7-1: config index 0 descriptor too short (expected 19492, got 36) [ 74.504702][ T295] usb 7-1: config 0 has too many interfaces: 36, using maximum allowed: 32 [ 74.509455][ T3190] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 74.513340][ T295] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 36 [ 74.513382][ T295] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 74.541541][ T295] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 74.551346][ T295] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 74.564686][ T295] usb 7-1: New USB device found, idVendor=046d, idProduct=c225, bcdDevice= 0.00 [ 74.569006][ T3190] syz.7.1144: attempt to access beyond end of device [ 74.569006][ T3190] loop7: rw=2049, sector=77824, nr_sectors = 256 limit=40427 [ 74.573793][ T295] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.597656][ T1421] usb 1-1: USB disconnect, device number 11 [ 74.605870][ T2972] syz-executor: attempt to access beyond end of device [ 74.605870][ T2972] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 74.620564][ T295] usb 7-1: config 0 descriptor?? [ 74.846232][ T28] kauditd_printk_skb: 2072 callbacks suppressed [ 74.846246][ T28] audit: type=1400 audit(1758608446.636:2722): avc: denied { create } for pid=3222 comm="syz.7.1157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 74.881849][ T3225] loop7: detected capacity change from 0 to 512 [ 74.888761][ T3225] EXT4-fs: Ignoring removed mblk_io_submit option [ 74.895515][ T3225] EXT4-fs: Ignoring removed mblk_io_submit option [ 74.904787][ T3225] EXT4-fs (loop7): Test dummy encryption mode enabled [ 74.911607][ T3225] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 74.923235][ T3225] EXT4-fs (loop7): 1 truncate cleaned up [ 74.929092][ T3225] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 74.943004][ T3225] fscrypt: AES-256-XTS using blk-crypto-fallback [ 75.034349][ T295] lg-g15 0003:046D:C225.0018: unknown main item tag 0x0 [ 75.041434][ T295] lg-g15 0003:046D:C225.0018: unknown main item tag 0x0 [ 75.048688][ T295] lg-g15 0003:046D:C225.0018: unknown main item tag 0x0 [ 75.055892][ T295] lg-g15 0003:046D:C225.0018: unknown main item tag 0x0 [ 75.063668][ T295] lg-g15 0003:046D:C225.0018: hidraw0: USB HID v1.01 Device [HID 046d:c225] on usb-dummy_hcd.6-1/input0 [ 75.203570][ T3233] loop0: detected capacity change from 0 to 128 [ 75.229248][ T3233] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 75.244758][ T3233] ext4 filesystem being mounted at /173/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 75.259404][ T334] usb 7-1: USB disconnect, device number 7 [ 75.295246][ T284] EXT4-fs (loop0): unmounting filesystem. [ 75.584087][ T295] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 75.624129][ T39] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 75.752813][ T2972] EXT4-fs (loop7): unmounting filesystem. [ 75.765076][ T295] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 75.768905][ T28] audit: type=1400 audit(1758608447.556:2723): avc: denied { setopt } for pid=3239 comm="syz.7.1163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 75.777155][ T295] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 75.811695][ T295] usb 1-1: New USB device found, idVendor=5543, idProduct=0003, bcdDevice= 0.00 [ 75.824511][ T39] usb 2-1: Using ep0 maxpacket: 8 [ 75.826866][ T295] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.836947][ T39] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 75.838600][ T295] usb 1-1: config 0 descriptor?? [ 75.846744][ T39] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.861038][ T39] usb 2-1: config 0 descriptor?? [ 76.068196][ T39] asix 2-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 76.077886][ T578] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 76.114140][ T1421] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 76.255339][ T295] uclogic 0003:5543:0003.0019: unknown main item tag 0x0 [ 76.262415][ T295] uclogic 0003:5543:0003.0019: unknown main item tag 0x0 [ 76.265117][ T578] usb 7-1: config 160 has an invalid interface number: 200 but max is 0 [ 76.269948][ T295] uclogic 0003:5543:0003.0019: unknown main item tag 0x0 [ 76.278091][ T578] usb 7-1: config 160 has no interface number 0 [ 76.285322][ T295] uclogic 0003:5543:0003.0019: unknown main item tag 0x0 [ 76.291466][ T578] usb 7-1: config 160 interface 200 has no altsetting 0 [ 76.298575][ T295] uclogic 0003:5543:0003.0019: unknown main item tag 0x0 [ 76.307180][ T578] usb 7-1: New USB device found, idVendor=21bb, idProduct=2070, bcdDevice=87.0b [ 76.312900][ T295] uclogic 0003:5543:0003.0019: No inputs registered, leaving [ 76.321627][ T578] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.330442][ T1421] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 76.337136][ T578] usb 7-1: Product: syz [ 76.348216][ T295] uclogic 0003:5543:0003.0019: hidraw0: USB HID v0.00 Device [HID 5543:0003] on usb-dummy_hcd.0-1/input0 [ 76.352273][ T578] usb 7-1: Manufacturer: syz [ 76.363600][ T1421] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 76.368428][ T578] usb 7-1: SerialNumber: syz [ 76.381488][ T1421] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 76.395538][ T1421] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 76.404637][ T1421] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.413426][ T1421] usb 8-1: config 0 descriptor?? [ 76.462945][ T334] usb 1-1: USB disconnect, device number 12 [ 76.503976][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 76.613079][ T578] usb 7-1: MIDIStreaming interface descriptor not found [ 76.624683][ T578] usb 7-1: USB disconnect, device number 8 [ 76.821823][ T1421] plantronics 0003:047F:FFFF.001A: No inputs registered, leaving [ 76.831439][ T1421] plantronics 0003:047F:FFFF.001A: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 76.844856][ T444] udevd[444]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:160.200/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 76.912313][ T39] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 76.922548][ T39] asix: probe of 2-1:0.0 failed with error -71 [ 76.929748][ T39] usb 2-1: USB disconnect, device number 10 [ 76.977911][ T3250] loop0: detected capacity change from 0 to 512 [ 76.997197][ T3250] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 77.006250][ T3250] ext4 filesystem being mounted at /175/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 77.036264][ T284] EXT4-fs (loop0): unmounting filesystem. [ 77.065516][ T3255] netlink: 27 bytes leftover after parsing attributes in process `syz.0.1168'. [ 77.094569][ T287] usb 8-1: USB disconnect, device number 3 [ 77.162814][ T3264] netlink: 212 bytes leftover after parsing attributes in process `syz.0.1172'. [ 77.185921][ T3266] loop0: detected capacity change from 0 to 512 [ 77.206013][ T3266] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 77.218029][ T3266] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 77.231220][ T3266] EXT4-fs (loop0): 1 truncate cleaned up [ 77.237071][ T3266] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 77.259298][ T284] EXT4-fs (loop0): unmounting filesystem. [ 77.418245][ T3275] loop0: detected capacity change from 0 to 40427 [ 77.431548][ T3275] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 77.439379][ T3275] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 77.459317][ T3275] F2FS-fs (loop0): invalid crc value [ 77.464989][ T3282] loop1: detected capacity change from 0 to 256 [ 77.473857][ T3282] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 77.484817][ T3282] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 77.496605][ T3282] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 77.510028][ T3275] F2FS-fs (loop0): Found nat_bits in checkpoint [ 77.563846][ T295] usb 7-1: new full-speed USB device number 9 using dummy_hcd [ 77.572417][ T3275] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 77.592015][ T3275] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 77.682490][ T3303] loop7: detected capacity change from 0 to 1024 [ 77.694833][ T28] audit: type=1400 audit(1758608449.487:2724): avc: denied { write } for pid=3304 comm="syz.1.1189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 77.747804][ T3303] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 77.757199][ T3303] ext4 filesystem being mounted at /21/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 77.775190][ T295] usb 7-1: unable to get BOS descriptor or descriptor too short [ 77.790368][ T295] usb 7-1: not running at top speed; connect to a high speed hub [ 77.805519][ T43] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 77.821664][ T43] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 319 with max blocks 1 with error 28 [ 77.822538][ T284] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 77.834427][ T43] EXT4-fs (loop7): This should not happen!! Data will be lost [ 77.834427][ T43] [ 77.842100][ T284] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 77.852043][ T284] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 77.853467][ T43] EXT4-fs (loop7): Total free blocks count 0 [ 77.862241][ T295] usb 7-1: config 5 has 1 interface, different from the descriptor's value: 2 [ 77.867668][ T43] EXT4-fs (loop7): Free/Dirty block details [ 77.888169][ T43] EXT4-fs (loop7): free_blocks=4293918720 [ 77.893937][ T43] EXT4-fs (loop7): dirty_blocks=16 [ 77.894158][ T295] usb 7-1: config 5 interface 0 has no altsetting 0 [ 77.899070][ T43] EXT4-fs (loop7): Block reservation details [ 77.899083][ T43] EXT4-fs (loop7): i_reserved_data_blocks=1 [ 77.900104][ T2972] EXT4-fs (loop7): unmounting filesystem. [ 77.910833][ T284] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 77.923892][ T284] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 77.931641][ T284] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 77.942663][ T284] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 77.951916][ T295] usb 7-1: New USB device found, idVendor=0582, idProduct=0074, bcdDevice=2a.70 [ 77.971801][ T295] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.994487][ T28] audit: type=1400 audit(1758608449.787:2725): avc: denied { unmount } for pid=1716 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 77.999474][ T295] usb 7-1: Product: syz [ 78.038584][ T295] usb 7-1: Manufacturer: syz [ 78.060817][ T295] usb 7-1: SerialNumber: syz [ 78.214629][ T3327] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1194'. [ 78.265270][ T3331] loop0: detected capacity change from 0 to 512 [ 78.275874][ T3331] EXT4-fs: Ignoring removed i_version option [ 78.278029][ T295] rndis_host 7-1:5.0: skipping garbage [ 78.296655][ T295] usb 7-1: bad CDC descriptors [ 78.303438][ T295] usb 7-1: USB disconnect, device number 9 [ 78.313480][ T3331] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 78.342545][ T284] EXT4-fs (loop0): unmounting filesystem. [ 78.354107][ T1421] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 78.429803][ T3345] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 78.443302][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 78.460348][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 78.470815][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 78.479285][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 78.487970][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 78.496557][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 78.505574][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 78.514204][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 78.576994][ T3353] bridge0: port 3(vlan2) entered blocking state [ 78.583548][ T3353] bridge0: port 3(vlan2) entered disabled state [ 78.590127][ T1421] usb 6-1: Using ep0 maxpacket: 32 [ 78.596999][ T1421] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 78.605608][ T1421] usb 6-1: config 0 has no interface number 0 [ 78.624830][ T1421] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 78.635858][ T1421] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.644254][ T1421] usb 6-1: Product: syz [ 78.648524][ T1421] usb 6-1: Manufacturer: syz [ 78.653169][ T1421] usb 6-1: SerialNumber: syz [ 78.684262][ T1421] usb 6-1: config 0 descriptor?? [ 78.691329][ T1421] smsc95xx v2.0.0 [ 78.776632][ T3357] loop7: detected capacity change from 0 to 40427 [ 78.785577][ T3357] F2FS-fs (loop7): fault_injection options not supported [ 78.792778][ T3357] F2FS-fs (loop7): fault_type options not supported [ 78.800750][ T3357] F2FS-fs (loop7): invalid crc value [ 78.818354][ T3357] F2FS-fs (loop7): Found nat_bits in checkpoint [ 78.853527][ T3366] netlink: 212 bytes leftover after parsing attributes in process `syz.6.1215'. [ 78.865770][ T3357] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 78.919683][ T3369] loop6: detected capacity change from 0 to 1024 [ 78.926965][ T3369] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 78.930989][ T2972] syz-executor: attempt to access beyond end of device [ 78.930989][ T2972] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 78.939356][ T3369] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 78.963638][ T3369] JBD2: no valid journal superblock found [ 78.975179][ T3369] EXT4-fs (loop6): error loading journal [ 79.055193][ T28] audit: type=1400 audit(1758608450.847:2726): avc: denied { setopt } for pid=3373 comm="syz.7.1218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 79.085340][ T3369] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1216'. [ 79.089823][ T28] audit: type=1400 audit(1758608450.877:2727): avc: denied { nlmsg_read } for pid=3368 comm="syz.6.1216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 79.329667][ T28] audit: type=1400 audit(1758608451.117:2728): avc: denied { remount } for pid=3392 comm="syz.7.1227" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 79.424358][ T6] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 79.446628][ T3402] loop7: detected capacity change from 0 to 128 [ 79.455447][ T3402] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 79.477329][ T3402] FAT-fs (loop7): FAT read failed (blocknr 128) [ 79.517792][ T3406] loop7: detected capacity change from 0 to 512 [ 79.524996][ T3406] EXT4-fs: Ignoring removed oldalloc option [ 79.533116][ T3406] EXT4-fs error (device loop7): ext4_xattr_inode_iget:400: comm syz.7.1233: Parent and EA inode have the same ino 15 [ 79.546031][ T3406] EXT4-fs (loop7): 1 orphan inode deleted [ 79.551854][ T3406] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 79.566075][ T3406] EXT4-fs error (device loop7): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz.7.1233: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0 [ 79.586079][ T295] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 79.596094][ T2972] EXT4-fs (loop7): unmounting filesystem. [ 79.624631][ T6] usb 7-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 79.634873][ T6] usb 7-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 79.645247][ T6] usb 7-1: config 1 interface 0 has no altsetting 0 [ 79.655263][ T6] usb 7-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 79.664427][ T6] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.672618][ T6] usb 7-1: Product: syz [ 79.677079][ T6] usb 7-1: Manufacturer: syz [ 79.681712][ T6] usb 7-1: SerialNumber: syz [ 79.687343][ T3382] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 79.694594][ T3382] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 79.702400][ T1421] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000034: -71 [ 79.713245][ T1421] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_DATA [ 79.722690][ T1421] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 79.733615][ T1421] smsc95xx: probe of 6-1:0.67 failed with error -71 [ 79.744552][ T1421] usb 6-1: USB disconnect, device number 7 [ 79.773548][ T295] usb 2-1: Using ep0 maxpacket: 32 [ 79.781368][ T295] usb 2-1: New USB device found, idVendor=17cc, idProduct=1020, bcdDevice=16.7b [ 79.791266][ T295] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.799499][ T295] usb 2-1: Product: syz [ 79.811531][ T295] usb 2-1: Manufacturer: syz [ 79.831472][ T3420] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1238'. [ 79.832782][ T295] usb 2-1: SerialNumber: syz [ 79.861903][ T295] usb 2-1: config 0 descriptor?? [ 79.909868][ T3427] loop7: detected capacity change from 0 to 2048 [ 79.925923][ T3427] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 79.949429][ T2972] EXT4-fs (loop7): unmounting filesystem. [ 79.989193][ T3433] loop7: detected capacity change from 0 to 512 [ 80.004566][ T3433] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 80.036161][ T28] audit: type=1400 audit(1758608451.827:2729): avc: denied { write } for pid=3432 comm="syz.7.1243" name="/" dev="overlay" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 80.058704][ T28] audit: type=1400 audit(1758608451.827:2730): avc: denied { add_name } for pid=3432 comm="syz.7.1243" name="file1" dev="overlay" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 80.074081][ T295] snd-usb-audio: probe of 2-1:0.0 failed with error -71 [ 80.081417][ T28] audit: type=1400 audit(1758608451.827:2731): avc: denied { link } for pid=3432 comm="syz.7.1243" name="file1" dev="overlay" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 80.109802][ T295] usb 2-1: USB disconnect, device number 11 [ 80.113738][ T28] audit: type=1400 audit(1758608451.827:2732): avc: denied { link } for pid=3432 comm="syz.7.1243" name="file1" dev="loop7" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 80.139783][ T28] audit: type=1400 audit(1758608451.877:2733): avc: denied { read } for pid=3435 comm="syz.0.1254" name="msr" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 80.162721][ T28] audit: type=1400 audit(1758608451.877:2734): avc: denied { open } for pid=3435 comm="syz.0.1254" path="/dev/cpu/0/msr" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 80.164377][ T2972] EXT4-fs (loop7): unmounting filesystem. [ 80.241284][ T3440] loop0: detected capacity change from 0 to 512 [ 80.252431][ T3440] EXT4-fs: Ignoring removed i_version option [ 80.278221][ T3440] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 80.344103][ T284] EXT4-fs (loop0): unmounting filesystem. [ 80.450618][ T3438] loop7: detected capacity change from 0 to 40427 [ 80.467482][ T3438] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12 [ 80.481796][ T3438] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 80.598613][ T3438] F2FS-fs (loop7): invalid crc value [ 80.674624][ T3438] F2FS-fs (loop7): Found nat_bits in checkpoint [ 80.740667][ T6] (unnamed net_device) (uninitialized): Assigned a random MAC address: 2a:47:b1:84:f0:82 [ 80.760367][ T3598] SELinux: security_context_str_to_sid (r) failed with errno=-22 [ 80.765479][ T6] rtl8150 7-1:1.0: eth1: rtl8150 is detected [ 80.777790][ T6] usb 7-1: USB disconnect, device number 10 [ 80.805197][ T3438] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 80.813398][ T3438] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 80.860801][ T3604] overlayfs: failed to set xattr on upper [ 80.972382][ T2972] F2FS-fs (loop7): invalid namelen(0), ino:0, run fsck to fix. [ 80.972406][ T2972] F2FS-fs (loop7): invalid namelen(0), ino:0, run fsck to fix. [ 80.990160][ T2972] F2FS-fs (loop7): invalid namelen(0), ino:0, run fsck to fix. [ 81.417806][ T28] audit: type=1400 audit(1758608453.207:2735): avc: denied { map } for pid=3658 comm="syz.7.1262" path="socket:[30616]" dev="sockfs" ino=30616 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 81.525359][ T3681] loop5: detected capacity change from 0 to 256 [ 81.563183][ T28] audit: type=1400 audit(1758608453.347:2736): avc: denied { mount } for pid=3686 comm="syz.0.1285" name="/" dev="configfs" ino=7595 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 81.564639][ T39] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 81.587199][ T28] audit: type=1400 audit(1758608453.357:2737): avc: denied { search } for pid=3686 comm="syz.0.1285" name="/" dev="configfs" ino=7595 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 81.593884][ T578] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 81.616835][ T28] audit: type=1400 audit(1758608453.357:2738): avc: denied { write } for pid=3686 comm="syz.0.1285" name="/" dev="configfs" ino=7595 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 81.803282][ T39] usb 7-1: Using ep0 maxpacket: 32 [ 81.808501][ T578] usb 2-1: Using ep0 maxpacket: 32 [ 81.814993][ T39] usb 7-1: config 0 has an invalid interface number: 67 but max is 0 [ 81.823127][ T39] usb 7-1: config 0 has no interface number 0 [ 81.829277][ T578] usb 2-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 81.842104][ T578] usb 2-1: config 0 interface 0 has no altsetting 0 [ 81.848822][ T578] usb 2-1: New USB device found, idVendor=04fc, idProduct=05d8, bcdDevice= 0.00 [ 81.857918][ T578] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.867303][ T39] usb 7-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 81.876517][ T578] usb 2-1: config 0 descriptor?? [ 81.881613][ T39] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.889669][ T39] usb 7-1: Product: syz [ 81.894550][ T39] usb 7-1: Manufacturer: syz [ 81.899192][ T39] usb 7-1: SerialNumber: syz [ 81.904534][ T39] usb 7-1: config 0 descriptor?? [ 81.910554][ T39] smsc95xx v2.0.0 [ 81.933315][ T295] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 82.114400][ T295] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 82.125579][ T295] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 82.135431][ T295] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 82.144609][ T295] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.153576][ T295] usb 1-1: config 0 descriptor?? [ 82.159986][ T295] hub 1-1:0.0: USB hub found [ 82.297080][ T578] sunplus 0003:04FC:05D8.001B: hidraw0: USB HID v0.02 Device [HID 04fc:05d8] on usb-dummy_hcd.1-1/input0 [ 82.312282][ T39] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 82.323335][ T39] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 82.367044][ T295] hub 1-1:0.0: 1 port detected [ 82.499722][ T578] usb 2-1: USB disconnect, device number 12 [ 82.551392][ T3705] loop5: detected capacity change from 0 to 512 [ 82.560385][ T3707] binder: 3706:3707 ioctl c018620c 200000000080 returned -1 [ 82.570742][ T295] hub 1-1:0.0: hub_hub_status failed (err = -71) [ 82.586046][ T3705] EXT4-fs: Ignoring removed mblk_io_submit option [ 82.592611][ T295] hub 1-1:0.0: config failed, can't get hub status (err -71) [ 82.601159][ T3705] EXT4-fs: Ignoring removed mblk_io_submit option [ 82.608858][ T3705] EXT4-fs (loop5): Test dummy encryption mode enabled [ 82.613679][ T295] usbhid 1-1:0.0: can't add hid device: -71 [ 82.616830][ T3705] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 82.623015][ T295] usbhid: probe of 1-1:0.0 failed with error -71 [ 82.633992][ T3705] EXT4-fs (loop5): 1 truncate cleaned up [ 82.644017][ T3705] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 82.701813][ T3717] loop7: detected capacity change from 0 to 512 [ 82.703862][ T295] usb 1-1: USB disconnect, device number 13 [ 82.718169][ T3717] EXT4-fs error (device loop7): ext4_orphan_get:1400: inode #15: comm syz.7.1297: casefold flag without casefold feature [ 82.733910][ T39] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 82.749043][ T39] smsc95xx: probe of 7-1:0.67 failed with error -71 [ 82.754584][ T3717] EXT4-fs error (device loop7): ext4_orphan_get:1405: comm syz.7.1297: couldn't read orphan inode 15 (err -117) [ 82.757649][ T39] usb 7-1: USB disconnect, device number 11 [ 82.787044][ T3717] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 82.811909][ T2972] EXT4-fs (loop7): unmounting filesystem. [ 83.193095][ T578] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 83.394204][ T578] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 83.419096][ T578] usb 8-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 83.440586][ T578] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.455842][ T578] usb 8-1: config 0 descriptor?? [ 83.463312][ T1716] EXT4-fs (loop5): unmounting filesystem. [ 83.781527][ T3779] loop0: detected capacity change from 0 to 512 [ 83.813132][ T3779] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 83.827948][ T3779] ext4 filesystem being mounted at /211/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 83.843112][ T3779] EXT4-fs error (device loop0): ext4_do_update_inode:5256: inode #2: comm syz.0.1324: corrupted inode contents [ 83.855474][ T3779] EXT4-fs error (device loop0): ext4_dirty_inode:6121: inode #2: comm syz.0.1324: mark_inode_dirty error [ 83.870919][ T3779] EXT4-fs error (device loop0): ext4_do_update_inode:5256: inode #2: comm syz.0.1324: corrupted inode contents [ 83.885714][ T578] usbhid 8-1:0.0: can't add hid device: -71 [ 83.901970][ T578] usbhid: probe of 8-1:0.0 failed with error -71 [ 83.912912][ T284] EXT4-fs (loop0): unmounting filesystem. [ 83.943641][ T578] usb 8-1: USB disconnect, device number 4 [ 84.225841][ T3813] loop6: detected capacity change from 0 to 1024 [ 84.236196][ T6] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 84.244921][ T3813] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 84.259019][ T3813] EXT4-fs (loop6): orphan cleanup on readonly fs [ 84.267104][ T3813] EXT4-fs error (device loop6): ext4_free_blocks:6205: comm syz.6.1338: Freeing blocks not in datazone - block = 0, count = 4096 [ 84.280757][ T3813] EXT4-fs (loop6): 1 orphan inode deleted [ 84.286862][ T3813] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 84.315284][ T1853] EXT4-fs (loop6): unmounting filesystem. [ 84.347392][ T3816] kvm: MWAIT instruction emulated as NOP! [ 84.353066][ T295] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 84.424135][ T6] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 84.435306][ T6] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 84.436005][ T3824] loop6: detected capacity change from 0 to 512 [ 84.454360][ T6] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 84.473942][ T6] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.474220][ T3824] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 84.482059][ T6] usb 1-1: Product: syz [ 84.496745][ T6] usb 1-1: Manufacturer: syz [ 84.501580][ T6] usb 1-1: SerialNumber: syz [ 84.506949][ T3824] EXT4-fs (loop6): 1 truncate cleaned up [ 84.513244][ T3824] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 84.529422][ T3829] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3829 comm=syz.5.1344 [ 84.534322][ T295] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 84.553727][ T1853] EXT4-fs (loop6): unmounting filesystem. [ 84.558390][ T6] cdc_mbim 1-1:1.0: skipping garbage [ 84.579268][ T295] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 84.590879][ T295] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 84.600529][ T295] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 84.621901][ T295] usb 2-1: SerialNumber: syz [ 84.634232][ T334] hid-generic 0000:FFFFFFFF:0000.001C: unknown main item tag 0x0 [ 84.642654][ T334] hid-generic 0000:FFFFFFFF:0000.001C: unknown main item tag 0x0 [ 84.650720][ T334] hid-generic 0000:FFFFFFFF:0000.001C: unknown main item tag 0x0 [ 84.658747][ T334] hid-generic 0000:FFFFFFFF:0000.001C: unknown main item tag 0x0 [ 84.666736][ T334] hid-generic 0000:FFFFFFFF:0000.001C: unknown main item tag 0x0 [ 84.674633][ T334] hid-generic 0000:FFFFFFFF:0000.001C: unknown main item tag 0x0 [ 84.682423][ T334] hid-generic 0000:FFFFFFFF:0000.001C: unknown main item tag 0x0 [ 84.690308][ T334] hid-generic 0000:FFFFFFFF:0000.001C: unknown main item tag 0x0 [ 84.698091][ T334] hid-generic 0000:FFFFFFFF:0000.001C: unknown main item tag 0x0 [ 84.705852][ T334] hid-generic 0000:FFFFFFFF:0000.001C: unknown main item tag 0x0 [ 84.713790][ T334] hid-generic 0000:FFFFFFFF:0000.001C: unknown main item tag 0x0 [ 84.715313][ T3797] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 84.721535][ T334] hid-generic 0000:FFFFFFFF:0000.001C: unknown main item tag 0x0 [ 84.736459][ T334] hid-generic 0000:FFFFFFFF:0000.001C: unknown main item tag 0x0 [ 84.744265][ T334] hid-generic 0000:FFFFFFFF:0000.001C: unknown main item tag 0x0 [ 84.752016][ T334] hid-generic 0000:FFFFFFFF:0000.001C: unknown main item tag 0x0 [ 84.759788][ T334] hid-generic 0000:FFFFFFFF:0000.001C: unknown main item tag 0x0 [ 84.767654][ T334] hid-generic 0000:FFFFFFFF:0000.001C: unknown main item tag 0x0 [ 84.775434][ T334] hid-generic 0000:FFFFFFFF:0000.001C: unknown main item tag 0x0 [ 84.783202][ T334] hid-generic 0000:FFFFFFFF:0000.001C: unknown main item tag 0x0 [ 84.791029][ T334] hid-generic 0000:FFFFFFFF:0000.001C: unknown main item tag 0x0 [ 84.798815][ T334] hid-generic 0000:FFFFFFFF:0000.001C: unknown main item tag 0x0 [ 84.806588][ T334] hid-generic 0000:FFFFFFFF:0000.001C: unknown main item tag 0x0 [ 84.814361][ T334] hid-generic 0000:FFFFFFFF:0000.001C: unknown main item tag 0x0 [ 84.822121][ T334] hid-generic 0000:FFFFFFFF:0000.001C: unknown main item tag 0x0 [ 84.829888][ T334] hid-generic 0000:FFFFFFFF:0000.001C: unknown main item tag 0x0 [ 84.837656][ T334] hid-generic 0000:FFFFFFFF:0000.001C: unknown main item tag 0x0 [ 84.845468][ T334] hid-generic 0000:FFFFFFFF:0000.001C: unknown main item tag 0x0 [ 84.845619][ T295] usb 2-1: 0:2 : does not exist [ 84.853243][ T334] hid-generic 0000:FFFFFFFF:0000.001C: unknown main item tag 0x0 [ 84.853267][ T334] hid-generic 0000:FFFFFFFF:0000.001C: unknown main item tag 0x0 [ 84.861644][ T295] usb 2-1: USB disconnect, device number 13 [ 84.865888][ T334] hid-generic 0000:FFFFFFFF:0000.001C: unknown main item tag 0x0 [ 84.865914][ T334] hid-generic 0000:FFFFFFFF:0000.001C: unknown main item tag 0x0 [ 84.895146][ T334] hid-generic 0000:FFFFFFFF:0000.001C: unknown main item tag 0x0 [ 84.911742][ T334] hid-generic 0000:FFFFFFFF:0000.001C: hidraw0: HID v0.00 Device [sy] on syz0 [ 85.001536][ T3845] fido_id[3845]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 85.041743][ T3850] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1352'. [ 85.094551][ T445] udevd[445]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 85.221803][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 85.221819][ T28] audit: type=1400 audit(1758608457.007:2745): avc: denied { read } for pid=3857 comm="syz.5.1356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 85.248986][ T681] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 85.332431][ T28] audit: type=1400 audit(1758608457.117:2746): avc: denied { connect } for pid=3865 comm="syz.7.1361" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 85.333402][ T3519] tipc: Subscription rejected, illegal request [ 85.352335][ T3797] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 85.366020][ T6] cdc_mbim 1-1:1.0: setting tx_max = 48 [ 85.372348][ T6] cdc_mbim 1-1:1.0: cdc-wdm0: USB WDM device [ 85.381960][ T6] cdc_mbim 1-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.0-1, CDC MBIM, 52:17:c6:87:98:35 [ 85.464562][ T681] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 85.483919][ T681] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 85.504059][ T681] usb 7-1: New USB device found, idVendor=0457, idProduct=ffff, bcdDevice= 0.00 [ 85.520843][ T681] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.537151][ T681] usb 7-1: config 0 descriptor?? [ 85.591850][ T295] usb 1-1: USB disconnect, device number 14 [ 85.603592][ T295] cdc_mbim 1-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.0-1, CDC MBIM [ 85.726180][ T28] audit: type=1400 audit(1758608457.517:2747): avc: denied { read write } for pid=3903 comm="syz.1.1370" name="vhost-vsock" dev="devtmpfs" ino=268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 85.779018][ T28] audit: type=1400 audit(1758608457.547:2748): avc: denied { open } for pid=3903 comm="syz.1.1370" path="/dev/vhost-vsock" dev="devtmpfs" ino=268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 85.822859][ T6] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 85.838613][ T28] audit: type=1400 audit(1758608457.547:2749): avc: denied { ioctl } for pid=3903 comm="syz.1.1370" path="/dev/vhost-vsock" dev="devtmpfs" ino=268 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 85.882790][ T28] audit: type=1400 audit(1758608457.628:2750): avc: denied { getopt } for pid=3919 comm="syz.1.1372" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 85.893986][ T3920] loop1: detected capacity change from 0 to 256 [ 85.924547][ T3920] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3ec, utbl_chksum : 0xe619d30d) [ 85.951172][ T681] hid-generic 0003:0457:FFFF.001D: unknown main item tag 0x0 [ 85.965600][ T681] hid-generic 0003:0457:FFFF.001D: unknown main item tag 0x0 [ 85.990384][ T681] hid-generic 0003:0457:FFFF.001D: hidraw0: USB HID v0.00 Device [HID 0457:ffff] on usb-dummy_hcd.6-1/input0 [ 86.053831][ T6] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 86.064147][ T6] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 86.083132][ T6] usb 8-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 86.102445][ T6] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 86.110536][ T6] usb 8-1: SerialNumber: syz [ 86.130202][ T28] audit: type=1400 audit(1758608457.918:2751): avc: denied { write } for pid=3929 comm="syz.1.1376" name="binder1" dev="binder" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 86.161837][ T295] usb 7-1: USB disconnect, device number 12 [ 86.264629][ T28] audit: type=1326 audit(1758608458.058:2752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3936 comm="syz.0.1379" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f964298eec9 code=0x0 [ 86.363981][ T6] usb 8-1: 0:2 : does not exist [ 86.379649][ T6] usb 8-1: USB disconnect, device number 5 [ 86.439742][ T28] audit: type=1400 audit(1758608458.228:2753): avc: denied { bind } for pid=3951 comm="syz.5.1385" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 86.563325][ T3965] loop1: detected capacity change from 0 to 512 [ 86.570728][ T3965] EXT4-fs: Ignoring removed mblk_io_submit option [ 86.577483][ T3965] EXT4-fs: Ignoring removed mblk_io_submit option [ 86.585224][ T3965] EXT4-fs (loop1): Test dummy encryption mode enabled [ 86.592082][ T3965] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 86.603640][ T336] udevd[336]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 86.620869][ T3965] EXT4-fs (loop1): 1 truncate cleaned up [ 86.626603][ T3965] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 86.716233][ T3970] I/O error, dev loop13, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 86.726807][ T3970] FAT-fs (loop13): unable to read boot sector [ 86.767885][ T3972] netlink: 140 bytes leftover after parsing attributes in process `syz.6.1393'. [ 87.139590][ T3989] loop0: detected capacity change from 0 to 512 [ 87.146625][ T3989] EXT4-fs: Ignoring removed nobh option [ 87.154654][ T3989] EXT4-fs (loop0): orphan cleanup on readonly fs [ 87.161062][ T3989] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -13 [ 87.169995][ T3989] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 87.190804][ T3989] EXT4-fs error (device loop0): ext4_clear_blocks:883: inode #13: comm syz.0.1401: attempt to clear invalid blocks 2 len 1 [ 87.204169][ T3989] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.1401: invalid indirect mapped block 1819239214 (level 0) [ 87.205920][ T3992] xt_hashlimit: size too large, truncated to 1048576 [ 87.218405][ T39] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 87.237942][ T3989] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.1401: invalid indirect mapped block 1819239214 (level 1) [ 87.252915][ T3989] EXT4-fs (loop0): 1 truncate cleaned up [ 87.259549][ T3989] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 87.282289][ T3989] EXT4-fs (loop0): re-mounted. Quota mode: writeback. [ 87.412604][ T39] usb 8-1: Using ep0 maxpacket: 16 [ 87.418999][ T39] usb 8-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 87.464353][ T39] usb 8-1: config 0 interface 0 has no altsetting 0 [ 87.478749][ T39] usb 8-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 87.504177][ T39] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.524569][ T39] usb 8-1: config 0 descriptor?? [ 87.725400][ T28] audit: type=1400 audit(1758608459.518:2754): avc: denied { relabelfrom } for pid=4006 comm="syz.0.1408" name="NETLINK" dev="sockfs" ino=33254 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 87.934165][ T295] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 87.952819][ T39] lenovo 0003:17EF:6047.001E: unknown main item tag 0x0 [ 87.959836][ T39] lenovo 0003:17EF:6047.001E: unknown main item tag 0x0 [ 87.967022][ T39] lenovo 0003:17EF:6047.001E: unknown main item tag 0x0 [ 87.974048][ T39] lenovo 0003:17EF:6047.001E: unknown main item tag 0x0 [ 87.981036][ T39] lenovo 0003:17EF:6047.001E: unknown main item tag 0x0 [ 87.989163][ T39] lenovo 0003:17EF:6047.001E: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.7-1/input0 [ 88.123690][ T295] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 88.134681][ T295] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 88.145528][ T295] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 88.157056][ T295] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 88.164386][ T39] usb 8-1: USB disconnect, device number 6 [ 88.166241][ T295] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.180030][ T295] usb 6-1: Product: syz [ 88.184272][ T295] usb 6-1: Manufacturer: syz [ 88.188889][ T295] usb 6-1: SerialNumber: syz [ 88.232497][ T1442] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 88.412466][ T1442] usb 7-1: Using ep0 maxpacket: 32 [ 88.418757][ T1442] usb 7-1: config 0 has an invalid interface number: 230 but max is 0 [ 88.427377][ T1442] usb 7-1: config 0 has no interface number 0 [ 88.433570][ T1442] usb 7-1: config 0 interface 230 has no altsetting 0 [ 88.441754][ T1442] usb 7-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 88.450857][ T1442] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.458926][ T1442] usb 7-1: Product: syz [ 88.463180][ T1442] usb 7-1: Manufacturer: syz [ 88.467798][ T1442] usb 7-1: SerialNumber: syz [ 88.473226][ T1442] usb 7-1: config 0 descriptor?? [ 88.479164][ T1442] ums-usbat 7-1:0.230: USB Mass Storage device detected [ 88.487085][ T1442] ums-usbat 7-1:0.230: Quirks match for vid 0781 pid 0005: 1 [ 88.821035][ T4034] loop1: detected capacity change from 0 to 512 [ 88.831713][ T4034] EXT4-fs (loop1): Test dummy encryption mode enabled [ 88.839307][ T4034] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 88.850502][ T4034] EXT4-fs (loop1): 1 truncate cleaned up [ 89.158196][ T4048] loop1: detected capacity change from 0 to 512 [ 89.165083][ T4048] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 89.197683][ T295] cdc_ncm 6-1:1.0: bind() failure [ 89.211184][ T295] cdc_ncm: probe of 6-1:1.1 failed with error -71 [ 89.221147][ T295] cdc_mbim: probe of 6-1:1.1 failed with error -71 [ 89.229714][ T295] usb 6-1: USB disconnect, device number 8 [ 89.474343][ T4055] loop0: detected capacity change from 0 to 1024 [ 89.507615][ T4060] 9pnet: p9_errstr2errno: server reported unknown error @cF S+ [ 89.553345][ T4066] loop0: detected capacity change from 0 to 512 [ 89.562894][ T4066] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 89.580789][ T4066] EXT4-fs (loop0): 1 orphan inode deleted [ 89.587851][ T4066] EXT4-fs (loop0): 1 truncate cleaned up [ 89.598114][ T4066] input: syz1 as /devices/virtual/input/input11 [ 89.695487][ T4078] loop0: detected capacity change from 0 to 8192 [ 89.745443][ T4078] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 89.766155][ T4078] FAT-fs (loop0): Filesystem has been set read-only [ 91.045298][ T4082] overlayfs: failed to create directory ./bus/work (errno: 22); mounting read-only [ 92.095704][ T1442] ums-usbat: probe of 7-1:0.230 failed with error -5 [ 92.106963][ T1442] usb 7-1: USB disconnect, device number 13 [ 92.217037][ T4112] loop0: detected capacity change from 0 to 256 [ 92.217866][ T4111] device bridge0 entered promiscuous mode [ 92.244478][ T4112] FAT-fs (loop0): Directory bread(block 64) failed [ 92.251011][ T4111] bridge0: port 3(macsec1) entered blocking state [ 92.251034][ T4111] bridge0: port 3(macsec1) entered disabled state [ 92.266546][ T4111] device bridge0 left promiscuous mode [ 92.280029][ T4112] FAT-fs (loop0): Directory bread(block 65) failed [ 92.286822][ T4112] FAT-fs (loop0): Directory bread(block 66) failed [ 92.293646][ T4112] FAT-fs (loop0): Directory bread(block 67) failed [ 92.300583][ T4112] FAT-fs (loop0): Directory bread(block 68) failed [ 92.301053][ T4116] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1454'. [ 92.307657][ T4112] FAT-fs (loop0): Directory bread(block 69) failed [ 92.323173][ T4112] FAT-fs (loop0): Directory bread(block 70) failed [ 92.340075][ T4112] FAT-fs (loop0): Directory bread(block 71) failed [ 92.348894][ T4112] FAT-fs (loop0): Directory bread(block 72) failed [ 92.356232][ T4112] FAT-fs (loop0): Directory bread(block 73) failed [ 92.404460][ T4112] syz.0.1452: attempt to access beyond end of device [ 92.404460][ T4112] loop0: rw=0, sector=1192, nr_sectors = 4 limit=256 [ 92.484224][ T4128] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1457'. [ 92.552771][ T4134] IPv6: sit1: Disabled Multicast RS [ 92.595940][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 92.595963][ T28] audit: type=1400 audit(1758608464.388:2759): avc: denied { write } for pid=4146 comm="syz.7.1468" name="random" dev="devtmpfs" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 92.718364][ T4153] loop6: detected capacity change from 0 to 1024 [ 92.821200][ T4166] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1474'. [ 92.841988][ T39] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 92.975793][ T4173] loop6: detected capacity change from 0 to 512 [ 92.999277][ T4173] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 93.017291][ T4173] EXT4-fs (loop6): 1 truncate cleaned up [ 93.043075][ T39] usb 6-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 93.052591][ T39] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.064119][ T39] usb 6-1: config 0 descriptor?? [ 93.451865][ T295] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 93.489388][ T4185] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 93.643031][ T295] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 93.654061][ T295] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 93.663890][ T295] usb 7-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 93.673017][ T295] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.682051][ T295] usb 7-1: config 0 descriptor?? [ 93.841826][ T681] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 93.907393][ T4197] loop1: detected capacity change from 0 to 1024 [ 93.918139][ T4197] EXT4-fs: Ignoring removed nobh option [ 93.924445][ T4197] EXT4-fs: Ignoring removed bh option [ 94.033044][ T681] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 94.043339][ T681] usb 8-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 94.054490][ T681] usb 8-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 94.071046][ T681] usb 8-1: config 0 interface 0 has no altsetting 0 [ 94.077750][ T681] usb 8-1: New USB device found, idVendor=0458, idProduct=5015, bcdDevice= 0.00 [ 94.087244][ T39] usb 6-1: Cannot set autoneg [ 94.087444][ T681] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.092293][ T39] MOSCHIP usb-ethernet driver: probe of 6-1:0.0 failed with error -71 [ 94.109100][ T681] usb 8-1: config 0 descriptor?? [ 94.110516][ T39] usb 6-1: USB disconnect, device number 9 [ 94.521094][ T681] kye 0003:0458:5015.0020: unknown main item tag 0x1 [ 94.528446][ T295] hid-led 0003:27B8:01ED.001F: hidraw0: USB HID v0.00 Device [HID 27b8:01ed] on usb-dummy_hcd.6-1/input0 [ 94.540264][ T681] kye 0003:0458:5015.0020: hidraw1: USB HID v0.04 Device [HID 0458:5015] on usb-dummy_hcd.7-1/input0 [ 94.552089][ T295] hid-led 0003:27B8:01ED.001F: ThingM blink(1) v1 initialized [ 94.560641][ T681] kye 0003:0458:5015.0020: tablet-enabling feature report not found [ 94.568768][ T681] kye 0003:0458:5015.0020: tablet enabling failed [ 94.695776][ T4216] loop5: detected capacity change from 0 to 1024 [ 94.730248][ T39] usb 7-1: USB disconnect, device number 14 [ 94.736849][ T681] usb 8-1: USB disconnect, device number 7 [ 94.754828][ T1716] EXT4-fs unmount: 15 callbacks suppressed [ 94.754841][ T1716] EXT4-fs (loop5): unmounting filesystem. [ 94.778119][ T4219] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 94.831716][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 94.831757][ T989] Bluetooth: hci0: command 0x1003 tx timeout [ 97.081417][ T287] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 97.130055][ T4257] loop6: detected capacity change from 0 to 256 [ 97.137344][ T4257] exfat: Deprecated parameter 'namecase' [ 97.161664][ T4257] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 97.191301][ T4261] serio: Serial port ttyS3 [ 97.223465][ T4267] loop7: detected capacity change from 0 to 256 [ 97.271490][ T287] usb 6-1: Using ep0 maxpacket: 32 [ 97.278290][ T287] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 97.291220][ T287] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 97.301412][ T287] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 97.310722][ T287] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.331885][ T287] usb 6-1: config 0 descriptor?? [ 97.523556][ T4274] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.530675][ T4274] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.538386][ T4274] device bridge_slave_0 entered promiscuous mode [ 97.553721][ T4274] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.560860][ T4274] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.568693][ T4274] device bridge_slave_1 entered promiscuous mode [ 97.599145][ T4280] loop7: detected capacity change from 0 to 512 [ 97.649715][ T4280] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 97.659621][ T4280] ext4 filesystem being mounted at /94/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 97.689879][ T4280] EXT4-fs warning (device loop7): verify_group_input:169: Last group not full [ 97.723172][ T2972] EXT4-fs (loop7): unmounting filesystem. [ 97.748905][ T4274] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.756041][ T4274] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.763376][ T4274] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.770510][ T4274] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.780508][ T287] savu 0003:1E7D:2D5A.0021: hiddev96,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.5-1/input0 [ 97.846307][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 97.858128][ T3504] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.873641][ T3504] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.882489][ T4296] loop7: detected capacity change from 0 to 1024 [ 97.890023][ T3519] device bridge_slave_1 left promiscuous mode [ 97.901435][ T3519] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.909708][ T4296] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 97.921645][ T3519] device bridge_slave_0 left promiscuous mode [ 97.927812][ T3519] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.936391][ T3519] device veth1_macvtap left promiscuous mode [ 97.942781][ T3519] device veth0_vlan left promiscuous mode [ 97.947886][ T4296] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 97.966923][ T4296] EXT4-fs error (device loop7): ext4_xattr_inode_iget:404: inode #11: comm syz.7.1529: missing EA_INODE flag [ 97.999332][ T4296] EXT4-fs (loop7): Remounting filesystem read-only [ 98.006172][ T4296] EXT4-fs error (device loop7): ext4_xattr_inode_iget:409: comm syz.7.1529: error while reading EA inode 11 err=-117 [ 98.035929][ T4296] EXT4-fs (loop7): Remounting filesystem read-only [ 98.042650][ T4271] loop1: detected capacity change from 0 to 131072 [ 98.052380][ T681] usb 6-1: USB disconnect, device number 10 [ 98.081156][ T2972] EXT4-fs (loop7): unmounting filesystem. [ 98.107436][ T4271] F2FS-fs (loop1): Found nat_bits in checkpoint [ 98.188200][ T4271] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 98.252806][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 98.265682][ T3504] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.272777][ T3504] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.291757][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 98.321559][ T3504] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.328635][ T3504] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.352592][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 98.378677][ T4314] loop7: detected capacity change from 0 to 40427 [ 98.381561][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 98.393366][ T4314] F2FS-fs (loop7): Wrong segment_count / block_count (31 > 0) [ 98.411329][ T4314] F2FS-fs (loop7): Can't find valid F2FS filesystem in 2th superblock [ 98.420835][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 98.429466][ T4314] F2FS-fs (loop7): heap/no_heap options were deprecated [ 98.432292][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 98.438095][ T4314] F2FS-fs (loop7): invalid crc value [ 98.468384][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 98.477659][ T4314] F2FS-fs (loop7): Found nat_bits in checkpoint [ 98.484356][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 98.506259][ T4271] F2FS-fs (loop1): lookup inode (7) has corrupted xattr [ 98.512741][ T4274] device veth0_vlan entered promiscuous mode [ 98.530898][ T4271] F2FS-fs (loop1): list inode (7) has corrupted xattr [ 98.537875][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 98.551615][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 98.571861][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 98.591765][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 98.601547][ T4314] F2FS-fs (loop7): Try to recover 2th superblock, ret: 0 [ 98.608613][ T4314] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 98.627840][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 98.639542][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 98.666369][ T4274] device veth1_macvtap entered promiscuous mode [ 98.668331][ T4316] loop0: detected capacity change from 0 to 40427 [ 98.688082][ T3553] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 98.695788][ T4316] F2FS-fs (loop0): heap/no_heap options were deprecated [ 98.703994][ T3553] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 98.712896][ T4316] F2FS-fs (loop0): invalid crc value [ 98.727424][ T3553] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 98.735963][ T4316] F2FS-fs (loop0): Found nat_bits in checkpoint [ 98.745214][ T3553] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 98.754879][ T2972] syz-executor: attempt to access beyond end of device [ 98.754879][ T2972] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 98.786762][ T4316] F2FS-fs (loop0): Start checkpoint disabled! [ 98.796683][ T3553] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 98.800108][ T4324] loop5: detected capacity change from 0 to 16 [ 98.805353][ T4316] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 98.820347][ T4324] erofs: (device loop5): mounted with root inode @ nid 36. [ 98.894664][ T4324] erofs: (device loop5): z_erofs_readahead: readahead error at page 2 @ nid 89 [ 98.925651][ T47] erofs: (device loop5): z_erofs_lz4_decompress_mem: failed to decompress 6887 in[4096, 0] out[8192] [ 98.937626][ T4324] erofs: (device loop5): z_erofs_lz4_decompress_mem: failed to decompress 6887 in[4096, 0] out[8192] [ 98.973225][ T4324] erofs: (device loop5): z_erofs_lz4_decompress_mem: failed to decompress 6887 in[4096, 0] out[8192] [ 99.011500][ T4324] erofs: (device loop5): z_erofs_lz4_decompress_mem: failed to decompress 6887 in[4096, 0] out[8192] [ 99.053234][ T4324] erofs: (device loop5): z_erofs_lz4_decompress_mem: failed to decompress 6887 in[4096, 0] out[8192] [ 99.084723][ T4324] erofs: (device loop5): z_erofs_lz4_decompress_mem: failed to decompress 6887 in[4096, 0] out[8192] [ 99.111533][ T4324] erofs: (device loop5): z_erofs_lz4_decompress_mem: failed to decompress 6887 in[4096, 0] out[8192] [ 99.172687][ T3562] kworker/u4:117: attempt to access beyond end of device [ 99.172687][ T3562] loop0: rw=1, sector=77824, nr_sectors = 1456 limit=40427 [ 99.210892][ T3562] kworker/u4:117: attempt to access beyond end of device [ 99.210892][ T3562] loop0: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 99.232329][ T4342] loop7: detected capacity change from 0 to 256 [ 99.275145][ T4342] exFAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 99.374953][ T4342] exFAT-fs (loop7): Medium has reported failures. Some data may be lost. [ 99.406650][ T4342] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 99.449129][ T4332] loop8: detected capacity change from 0 to 40427 [ 99.456961][ T4332] F2FS-fs (loop8): Invalid log_blocksize (268), supports only 12 [ 99.474136][ T4332] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 99.495031][ T28] audit: type=1400 audit(1758608471.289:2760): avc: denied { rename } for pid=4341 comm="syz.7.1545" name="file0" dev="loop7" ino=1048686 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 99.518191][ T4332] F2FS-fs (loop8): invalid crc value [ 99.554643][ T4332] F2FS-fs (loop8): Found nat_bits in checkpoint [ 99.565540][ T28] audit: type=1400 audit(1758608471.309:2761): avc: denied { reparent } for pid=4341 comm="syz.7.1545" name="file0" dev="loop7" ino=1048686 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 99.607740][ T4367] loop7: detected capacity change from 0 to 2048 [ 99.618603][ T28] audit: type=1400 audit(1758608471.389:2762): avc: denied { remount } for pid=4370 comm="syz.0.1543" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 99.673945][ T4332] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0 [ 99.681174][ T4332] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 99.739085][ T4367] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 99.797277][ T2972] EXT4-fs (loop7): unmounting filesystem. [ 100.064274][ T4375] loop5: detected capacity change from 0 to 131072 [ 100.072826][ T295] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 100.080753][ T4375] F2FS-fs (loop5): Wrong CP boundary, start(512) end(1536) blocks(0) [ 100.088906][ T4375] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 100.097761][ T4375] F2FS-fs (loop5): invalid crc value [ 100.120273][ T4391] loop8: detected capacity change from 0 to 2048 [ 100.130398][ T4375] F2FS-fs (loop5): Found nat_bits in checkpoint [ 100.162394][ T4375] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 100.163536][ T4391] Alternate GPT is invalid, using primary GPT. [ 100.169475][ T4375] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 100.176189][ T4391] loop8: p1 p2 p3 [ 100.251444][ T1442] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 100.282082][ T295] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 100.292276][ T295] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 100.319437][ T295] usb 2-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 100.328623][ T295] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.337022][ T295] usb 2-1: Product: syz [ 100.341499][ T295] usb 2-1: Manufacturer: syz [ 100.346184][ T295] usb 2-1: SerialNumber: syz [ 100.358096][ T295] usb 2-1: config 0 descriptor?? [ 100.363416][ T4358] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 100.370616][ T4358] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 100.431056][ T1442] usb 1-1: Using ep0 maxpacket: 32 [ 100.437394][ T1442] usb 1-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 100.471244][ T1442] usb 1-1: config 0 interface 0 has no altsetting 0 [ 100.477928][ T1442] usb 1-1: New USB device found, idVendor=04fc, idProduct=05d8, bcdDevice= 0.00 [ 100.487111][ T1442] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.496135][ T1442] usb 1-1: config 0 descriptor?? [ 100.584034][ T4358] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 100.591608][ T4358] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 100.611141][ T28] audit: type=1400 audit(1758608472.409:2763): avc: denied { read write } for pid=1716 comm="syz-executor" name="loop5" dev="devtmpfs" ino=123 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 100.635566][ T28] audit: type=1400 audit(1758608472.409:2764): avc: denied { open } for pid=1716 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=123 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 100.664118][ T28] audit: type=1400 audit(1758608472.409:2765): avc: denied { ioctl } for pid=1716 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=123 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 100.690261][ T28] audit: type=1400 audit(1758608472.429:2766): avc: denied { bpf } for pid=4407 comm="syz.5.1569" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 100.715118][ T28] audit: type=1400 audit(1758608472.429:2767): avc: denied { map_create } for pid=4407 comm="syz.5.1569" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 100.734758][ T28] audit: type=1400 audit(1758608472.429:2768): avc: denied { map_read map_write } for pid=4407 comm="syz.5.1569" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 100.745216][ T39] usb 9-1: new full-speed USB device number 2 using dummy_hcd [ 100.754885][ T28] audit: type=1400 audit(1758608472.429:2769): avc: denied { prog_load } for pid=4407 comm="syz.5.1569" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 100.913899][ T1442] sunplus 0003:04FC:05D8.0022: hidraw0: USB HID v0.02 Device [HID 04fc:05d8] on usb-dummy_hcd.0-1/input0 [ 100.943460][ T39] usb 9-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 100.952699][ T39] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.960722][ T39] usb 9-1: Product: syz [ 100.965009][ T39] usb 9-1: Manufacturer: syz [ 100.969707][ T39] usb 9-1: SerialNumber: syz [ 100.975280][ T39] usb 9-1: config 0 descriptor?? [ 101.084934][ T1442] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 101.089656][ T4418] loop7: detected capacity change from 0 to 256 [ 101.100400][ T4418] exfat: Deprecated parameter 'utf8' [ 101.105896][ T4418] exfat: Deprecated parameter 'utf8' [ 101.119996][ T334] usb 1-1: USB disconnect, device number 15 [ 101.127060][ T4418] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x23a77120, utbl_chksum : 0xe619d30d) [ 101.168672][ T4420] loop7: detected capacity change from 0 to 256 [ 101.186517][ T4420] incfs: ino conflict with backing FS 1 [ 101.282006][ T1442] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 101.293697][ T1442] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 101.303943][ T1442] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 101.317142][ T1442] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 101.326306][ T1442] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.339213][ T1442] usb 6-1: config 0 descriptor?? [ 101.385068][ T39] Error reading MAC address [ 101.391267][ T39] usb 9-1: USB disconnect, device number 2 [ 101.405589][ T295] dm9601 2-1:0.0 (unnamed net_device) (uninitialized): MDIO read error: -71 [ 101.422840][ T295] dm9601 2-1:0.0 eth1: register 'dm9601' at usb-dummy_hcd.1-1, Davicom DM96xx USB 10/100 Ethernet, a6:31:95:98:55:6a [ 101.447215][ T295] usb 2-1: USB disconnect, device number 14 [ 101.462738][ T295] dm9601 2-1:0.0 eth1: unregister 'dm9601' usb-dummy_hcd.1-1, Davicom DM96xx USB 10/100 Ethernet [ 101.748185][ T1442] plantronics 0003:047F:FFFF.0023: No inputs registered, leaving [ 101.773302][ T1442] plantronics 0003:047F:FFFF.0023: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 101.805518][ T445] udevd[445]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 102.048673][ T4463] loop1: detected capacity change from 0 to 8192 [ 102.066332][ T295] usb 6-1: USB disconnect, device number 11 [ 102.082148][ T4463] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 1043) [ 102.090854][ T4463] FAT-fs (loop1): Filesystem has been set read-only [ 102.097546][ T4463] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 1043) [ 102.106213][ T4463] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 1043) [ 102.115909][ T4463] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 1043) [ 102.124609][ T4463] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 1043) [ 102.133924][ T4463] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 1043) [ 102.143230][ T4463] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 1043) [ 102.152433][ T4463] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 1043) [ 102.161100][ T4463] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 1043) [ 102.403770][ T4478] loop7: detected capacity change from 0 to 2048 [ 102.434572][ T4478] Alternate GPT is invalid, using primary GPT. [ 102.451300][ T4478] loop7: p1 p2 p3 [ 102.455204][ T4478] loop7: partition table partially beyond EOD, truncated [ 102.464565][ T4464] loop8: detected capacity change from 0 to 40427 [ 102.495758][ T4464] F2FS-fs (loop8): invalid crc value [ 102.508029][ T4464] F2FS-fs (loop8): Found nat_bits in checkpoint [ 102.540114][ T446] udevd[446]: inotify_add_watch(7, /dev/loop7p3, 10) failed: No such file or directory [ 102.540262][ T336] udevd[336]: inotify_add_watch(7, /dev/loop7p1, 10) failed: No such file or directory [ 102.551790][ T445] udevd[445]: inotify_add_watch(7, /dev/loop7p2, 10) failed: No such file or directory [ 102.615104][ T4464] F2FS-fs (loop8): Start checkpoint disabled! [ 102.633382][ T4464] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e6 [ 102.744071][ T4501] SELinux: failed to load policy [ 102.758221][ T3562] kworker/u4:117: attempt to access beyond end of device [ 102.758221][ T3562] loop8: rw=2049, sector=40960, nr_sectors = 32 limit=40427 [ 103.225432][ T4528] loop5: detected capacity change from 0 to 128 [ 103.235878][ T4528] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 103.247715][ T4528] ext4 filesystem being mounted at /250/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 103.310865][ T1716] EXT4-fs (loop5): unmounting filesystem. [ 103.431502][ T4545] hub 8-0:1.0: USB hub found [ 103.434670][ T4543] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 103.436349][ T4545] hub 8-0:1.0: 1 port detected [ 103.462496][ T3568] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 103.476389][ T3568] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 103.495075][ T3568] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 103.507962][ T3568] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 103.516727][ T3568] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 103.525393][ T3568] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 103.544931][ T3568] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 103.555662][ T4550] loop7: detected capacity change from 0 to 512 [ 103.561950][ T3568] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 103.571378][ T6] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 103.596423][ T4550] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 103.608070][ T4550] ext4 filesystem being mounted at /117/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 103.718686][ T2972] EXT4-fs (loop7): unmounting filesystem. [ 103.746769][ T4554] loop8: detected capacity change from 0 to 40427 [ 103.757802][ T4554] F2FS-fs (loop8): Invalid log_blocksize (268), supports only 12 [ 103.761889][ T6] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 103.769470][ T4554] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 103.785261][ T6] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 103.806349][ T6] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 103.809256][ T4554] F2FS-fs (loop8): invalid crc value [ 103.825959][ T6] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 103.830513][ T4554] F2FS-fs (loop8): Found nat_bits in checkpoint [ 103.847968][ T6] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 103.863660][ T6] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 103.873444][ T6] usb 2-1: Manufacturer: syz [ 103.878935][ T6] usb 2-1: config 0 descriptor?? [ 103.895980][ T4554] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0 [ 103.906533][ T4554] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 103.935762][ T287] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 104.081349][ T3568] F2FS-fs (loop8): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 104.090965][ T3568] F2FS-fs (loop8): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 104.121687][ T287] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 104.140211][ T287] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 104.160183][ T287] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 104.196296][ T287] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 104.214680][ T287] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.224142][ T287] usb 6-1: config 0 descriptor?? [ 104.303233][ T6] appleir 0003:05AC:8243.0024: item fetching failed at offset 0/1 [ 104.314118][ T4585] loop8: detected capacity change from 0 to 512 [ 104.321591][ T6] appleir 0003:05AC:8243.0024: parse failed [ 104.331380][ T4585] EXT4-fs: Ignoring removed oldalloc option [ 104.337518][ T6] appleir: probe of 0003:05AC:8243.0024 failed with error -22 [ 104.346016][ T4585] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 104.361110][ T4585] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 104.386365][ T4585] EXT4-fs (loop8): 1 truncate cleaned up [ 104.398774][ T4585] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 104.456149][ T4274] EXT4-fs (loop8): unmounting filesystem. [ 104.513128][ T4605] hub 8-0:1.0: USB hub found [ 104.517478][ T28] kauditd_printk_skb: 109 callbacks suppressed [ 104.517497][ T28] audit: type=1400 audit(1758608476.310:2879): avc: denied { read } for pid=4606 comm="syz.0.1642" path="socket:[35581]" dev="sockfs" ino=35581 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 104.518002][ T6] usb 2-1: USB disconnect, device number 15 [ 104.525184][ T4605] hub 8-0:1.0: 1 port detected [ 104.633888][ T287] plantronics 0003:047F:FFFF.0025: unknown main item tag 0xe [ 104.641417][ T287] plantronics 0003:047F:FFFF.0025: unknown main item tag 0x0 [ 104.648957][ T287] plantronics 0003:047F:FFFF.0025: No inputs registered, leaving [ 104.658136][ T287] plantronics 0003:047F:FFFF.0025: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 104.740966][ T578] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 104.901258][ T6] usb 6-1: USB disconnect, device number 12 [ 104.921708][ T578] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 104.932092][ T578] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 104.941431][ T578] usb 9-1: config 1 has no interface number 0 [ 104.947593][ T578] usb 9-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 104.958551][ T578] usb 9-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 104.969039][ T578] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 104.978150][ T578] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.986233][ T578] usb 9-1: Product: syz [ 104.990430][ T578] usb 9-1: Manufacturer: syz [ 104.995031][ T578] usb 9-1: SerialNumber: syz [ 105.062237][ T28] audit: type=1400 audit(1758608476.860:2880): avc: denied { bind } for pid=4618 comm="syz.1.1647" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 105.092374][ T28] audit: type=1400 audit(1758608476.890:2881): avc: denied { read } for pid=4620 comm="syz.1.1648" name="ppp" dev="devtmpfs" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 105.116815][ T28] audit: type=1400 audit(1758608476.890:2882): avc: denied { open } for pid=4620 comm="syz.1.1648" path="/dev/ppp" dev="devtmpfs" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 105.140214][ T28] audit: type=1400 audit(1758608476.890:2883): avc: denied { ioctl } for pid=4620 comm="syz.1.1648" path="/dev/ppp" dev="devtmpfs" ino=158 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 105.527509][ T4636] hub 8-0:1.0: USB hub found [ 105.527638][ T4636] hub 8-0:1.0: 1 port detected [ 105.611915][ T3568] Bluetooth: hci0: Frame reassembly failed (-84) [ 105.621086][ T28] audit: type=1400 audit(1758608477.420:2884): avc: denied { ioctl } for pid=4645 comm="syz.5.1659" path="socket:[35611]" dev="sockfs" ino=35611 ioctlcmd=0x48cb scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 106.004239][ T578] cdc_ncm 9-1:1.1: bind() failure [ 106.007670][ T578] usb 9-1: USB disconnect, device number 3 [ 106.091505][ T4657] x_tables: duplicate underflow at hook 4 [ 106.131072][ T28] audit: type=1400 audit(1758608477.930:2885): avc: denied { watch watch_reads } for pid=4658 comm="syz.1.1664" path="/348/file0" dev="tmpfs" ino=1849 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 106.158835][ T4663] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 106.179440][ T28] audit: type=1400 audit(1758608477.970:2886): avc: denied { create } for pid=4664 comm="syz.0.1667" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 106.199363][ T28] audit: type=1400 audit(1758608477.980:2887): avc: denied { setopt } for pid=4664 comm="syz.0.1667" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 106.220907][ T28] audit: type=1400 audit(1758608477.980:2888): avc: denied { read } for pid=4664 comm="syz.0.1667" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 106.524180][ T3562] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 106.536386][ T3562] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 106.545560][ T3562] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 106.559731][ T3562] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 106.572141][ T6] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 106.577802][ T3562] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 106.588955][ T3562] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 106.598624][ T3562] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 106.607147][ T3562] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 106.638763][ T4702] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 106.654456][ T3553] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 106.681018][ T3553] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 106.693377][ T3553] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 106.703534][ T3553] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 106.712040][ T3553] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 106.721219][ T3553] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 106.729496][ T3553] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 106.737960][ T3553] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 106.754137][ T4706] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 106.761535][ T6] usb 8-1: Using ep0 maxpacket: 16 [ 106.769966][ T3553] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 106.773470][ T6] usb 8-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 106.779340][ T3553] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 106.797261][ T3553] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 106.815829][ T6] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.816140][ T3553] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 106.824102][ T6] usb 8-1: Product: syz [ 106.834854][ T3553] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 106.836415][ T6] usb 8-1: Manufacturer: syz [ 106.845871][ T3553] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 106.848857][ T6] usb 8-1: SerialNumber: syz [ 106.857451][ T3553] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 106.866717][ T6] r8152-cfgselector 8-1: config 0 descriptor?? [ 106.870683][ T3553] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 106.971331][ T4715] SELinux: Context system_u:object_r:tun_tap_device_t:s0 is not valid (left unmapped). [ 107.284669][ T6] r8152-cfgselector 8-1: Unknown version 0x0000 [ 107.291178][ T6] r8152-cfgselector 8-1: bad CDC descriptors [ 107.297572][ T6] r8152-cfgselector 8-1: Unknown version 0x0000 [ 107.305495][ T6] r8152-cfgselector 8-1: USB disconnect, device number 8 [ 107.512847][ T578] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 107.520977][ T578] hid-generic 0000:0000:0000.0026: hidraw0: HID v0.00 Device [syz1] on syz0 [ 107.623116][ T990] Bluetooth: hci0: command 0x1003 tx timeout [ 107.629208][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 107.641919][ T4740] loop1: detected capacity change from 0 to 128 [ 107.844921][ T4756] loop5: detected capacity change from 0 to 1024 [ 107.855591][ T4756] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.1707: bg 0: block 10: padding at end of block bitmap is not set [ 107.870549][ T4756] EXT4-fs error (device loop5): ext4_acquire_dquot:6803: comm syz.5.1707: Failed to acquire dquot type 0 [ 107.882265][ T4756] EXT4-fs error (device loop5): ext4_acquire_dquot:6803: comm syz.5.1707: Failed to acquire dquot type 0 [ 107.893825][ T4756] EXT4-fs error (device loop5): ext4_free_blocks:6205: comm syz.5.1707: Freeing blocks not in datazone - block = 0, count = 4096 [ 107.908257][ T4756] EXT4-fs error (device loop5): ext4_acquire_dquot:6803: comm syz.5.1707: Failed to acquire dquot type 0 [ 107.920193][ T4756] EXT4-fs (loop5): 1 orphan inode deleted [ 107.926240][ T4756] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 107.951010][ T1716] EXT4-fs (loop5): unmounting filesystem. [ 107.953617][ T4760] loop8: detected capacity change from 0 to 1024 [ 107.963760][ T4760] EXT4-fs: Ignoring removed orlov option [ 107.972091][ T4760] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 107.995620][ T4274] EXT4-fs (loop8): unmounting filesystem. [ 108.010208][ T287] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 108.090133][ T578] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 108.202476][ T287] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 108.217187][ T4791] loop5: detected capacity change from 0 to 1024 [ 108.226131][ T4791] EXT4-fs: Ignoring removed orlov option [ 108.232161][ T287] usb 2-1: New USB device found, idVendor=050e, idProduct=a4a1, bcdDevice= 0.40 [ 108.241726][ T287] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.249758][ T287] usb 2-1: Product: syz [ 108.254449][ T287] usb 2-1: Manufacturer: syz [ 108.259190][ T287] usb 2-1: SerialNumber: syz [ 108.267388][ T4791] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 108.285658][ T578] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 108.297145][ T578] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 108.307336][ T578] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 108.320423][ T578] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 108.321359][ T1716] EXT4-fs (loop5): unmounting filesystem. [ 108.329499][ T578] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.344929][ T578] usb 8-1: config 0 descriptor?? [ 108.366346][ T4799] loop5: detected capacity change from 0 to 128 [ 108.378497][ T4799] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 54) [ 108.387473][ T4799] FAT-fs (loop5): Filesystem has been set read-only [ 108.394419][ T4799] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 54) [ 108.409295][ T4799] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 54) [ 108.418135][ T4799] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 54) [ 108.426920][ T4799] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 54) [ 108.436141][ T4799] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 54) [ 108.445486][ T4799] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 54) [ 108.449184][ T4802] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 108.454522][ T4799] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 54) [ 108.463690][ T4802] FAT-fs (loop1): unable to read boot sector [ 108.472513][ T4799] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 54) [ 108.487515][ T4799] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 54) [ 108.537076][ T4808] loop5: detected capacity change from 0 to 128 [ 108.611487][ T4819] TCP: TCP_TX_DELAY enabled [ 108.735226][ T4823] loop8: detected capacity change from 0 to 512 [ 108.752033][ T4823] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 108.761067][ T4823] ext4 filesystem being mounted at /29/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 108.797407][ T4823] EXT4-fs (loop8): shut down requested (2) [ 108.797626][ T578] plantronics 0003:047F:FFFF.0027: unknown main item tag 0xd [ 108.815373][ T4274] EXT4-fs (loop8): unmounting filesystem. [ 108.823788][ T578] plantronics 0003:047F:FFFF.0027: No inputs registered, leaving [ 108.834597][ T578] plantronics 0003:047F:FFFF.0027: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 108.880004][ T24] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 109.060016][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 109.066214][ T24] usb 6-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 109.079121][ T24] usb 6-1: config 0 interface 0 has no altsetting 0 [ 109.085812][ T24] usb 6-1: New USB device found, idVendor=04fc, idProduct=05d8, bcdDevice= 0.00 [ 109.091119][ T1442] usb 8-1: USB disconnect, device number 9 [ 109.095100][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.110533][ T24] usb 6-1: config 0 descriptor?? [ 109.301726][ T287] cdc_ncm 2-1:1.0: bind() failure [ 109.308545][ T287] usb 2-1: USB disconnect, device number 16 [ 109.518990][ T24] sunplus 0003:04FC:05D8.0028: hidraw0: USB HID v0.02 Device [HID 04fc:05d8] on usb-dummy_hcd.5-1/input0 [ 109.638389][ T28] kauditd_printk_skb: 36 callbacks suppressed [ 109.638405][ T28] audit: type=1400 audit(1758608481.430:2916): avc: denied { read write } for pid=4837 comm="syz.7.1742" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 109.665447][ T4838] binder: 4837:4838 ioctl c0306201 200000000540 returned -14 [ 109.667751][ T28] audit: type=1400 audit(1758608481.440:2917): avc: denied { mounton } for pid=4839 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 109.696597][ T28] audit: type=1400 audit(1758608481.440:2918): avc: denied { open } for pid=4837 comm="syz.7.1742" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 109.730361][ T287] usb 6-1: USB disconnect, device number 13 [ 109.740289][ T1442] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 109.748383][ T28] audit: type=1400 audit(1758608481.440:2919): avc: denied { ioctl } for pid=4837 comm="syz.7.1742" path="/dev/binderfs/binder0" dev="binder" ino=4 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 109.773863][ T28] audit: type=1400 audit(1758608481.440:2920): avc: denied { set_context_mgr } for pid=4837 comm="syz.7.1742" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 109.817127][ T4839] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.824265][ T4839] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.836758][ T4839] device bridge_slave_0 entered promiscuous mode [ 109.846771][ T4839] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.854368][ T4839] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.856169][ T4850] loop1: detected capacity change from 0 to 4096 [ 109.862227][ T4839] device bridge_slave_1 entered promiscuous mode [ 109.892383][ T4850] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 109.913394][ T4850] EXT4-fs (loop1): shut down requested (2) [ 109.919771][ T4850] EXT4-fs warning (device loop1): ext4_empty_dir:3156: inode #12: comm syz.1.1745: directory missing '..' [ 109.942390][ T282] EXT4-fs (loop1): unmounting filesystem. [ 109.983064][ T1442] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 109.994093][ T1442] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 110.004012][ T1442] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 110.017482][ T1442] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 110.026838][ T1442] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.035852][ T1442] usb 1-1: config 0 descriptor?? [ 110.063602][ T4839] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.070789][ T4839] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.078104][ T4839] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.085185][ T4839] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.114133][ T3562] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 110.122068][ T3562] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.129414][ T3562] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.139065][ T3562] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 110.147627][ T3562] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.154727][ T3562] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.163712][ T3562] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 110.172717][ T3562] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.179805][ T3562] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.197451][ T3568] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 110.209539][ T3568] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 110.227586][ T3568] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 110.240523][ T3568] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 110.249489][ T3568] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 110.257224][ T3568] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 110.260588][ T287] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 110.274080][ T4839] device veth0_vlan entered promiscuous mode [ 110.285882][ T3630] device bridge_slave_1 left promiscuous mode [ 110.298923][ T3630] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.313728][ T3630] device bridge_slave_0 left promiscuous mode [ 110.320042][ T3630] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.328557][ T3630] device veth1_macvtap left promiscuous mode [ 110.341782][ T3630] device veth0_vlan left promiscuous mode [ 110.460938][ T287] usb 2-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 110.471967][ T3562] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 110.479825][ T6] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 110.482484][ T4839] device veth1_macvtap entered promiscuous mode [ 110.495547][ T287] usb 2-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 110.498098][ T1442] plantronics 0003:047F:FFFF.0029: unknown main item tag 0xd [ 110.514972][ T1442] plantronics 0003:047F:FFFF.0029: No inputs registered, leaving [ 110.519826][ T287] usb 2-1: config 1 interface 0 has no altsetting 0 [ 110.524265][ T1442] plantronics 0003:047F:FFFF.0029: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 110.542082][ T287] usb 2-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 110.556633][ T3562] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 110.571951][ T287] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.580325][ T287] usb 2-1: Product: syz [ 110.584499][ T287] usb 2-1: Manufacturer: syz [ 110.589106][ T287] usb 2-1: SerialNumber: syz [ 110.590393][ T3562] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 110.604324][ T4859] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 110.614380][ T4859] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 110.624131][ T3562] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 110.645739][ T3562] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 110.663719][ T28] audit: type=1400 audit(1758608482.461:2921): avc: denied { mounton } for pid=4839 comm="syz-executor" path="/root/syzkaller.1xg9De/syz-tmp" dev="sda1" ino=2055 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 110.696203][ T28] audit: type=1400 audit(1758608482.461:2922): avc: denied { mount } for pid=4839 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 110.733784][ T6] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 110.758101][ T6] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 110.767686][ T28] audit: type=1400 audit(1758608482.461:2923): avc: denied { mount } for pid=4839 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 110.789940][ T6] usb 8-1: config 1 has no interface number 0 [ 110.796094][ T6] usb 8-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 110.798516][ T28] audit: type=1400 audit(1758608482.461:2924): avc: denied { mounton } for pid=4839 comm="syz-executor" path="/root/syzkaller.1xg9De/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 110.807005][ T6] usb 8-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 110.807786][ T1421] usb 1-1: USB disconnect, device number 16 [ 110.834965][ T28] audit: type=1400 audit(1758608482.461:2925): avc: denied { mounton } for pid=4839 comm="syz-executor" path="/root/syzkaller.1xg9De/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=37425 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 110.844604][ T6] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 110.889296][ T6] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.897387][ T6] usb 8-1: Product: syz [ 110.901695][ T6] usb 8-1: Manufacturer: syz [ 110.906307][ T6] usb 8-1: SerialNumber: syz [ 111.202765][ T4903] loop8: detected capacity change from 0 to 512 [ 111.209482][ T4903] EXT4-fs: Ignoring removed orlov option [ 111.216436][ T4903] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 111.227035][ T4903] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002] [ 111.236536][ T4903] EXT4-fs error (device loop8): ext4_xattr_ibody_find:2195: inode #15: comm syz.8.1763: corrupted in-inode xattr [ 111.248852][ T4903] EXT4-fs error (device loop8): ext4_orphan_get:1405: comm syz.8.1763: couldn't read orphan inode 15 (err -117) [ 111.261065][ T4903] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 111.289892][ T4839] EXT4-fs (loop8): unmounting filesystem. [ 111.666442][ T287] (unnamed net_device) (uninitialized): Assigned a random MAC address: 9e:13:33:e9:30:0b [ 111.678847][ T287] rtl8150 2-1:1.0: eth1: rtl8150 is detected [ 111.693808][ T287] usb 2-1: USB disconnect, device number 17 [ 111.899689][ T24] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 111.922032][ T6] cdc_ncm 8-1:1.1: bind() failure [ 111.930623][ T6] usb 8-1: USB disconnect, device number 10 [ 112.079594][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 112.085823][ T24] usb 1-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 112.098917][ T24] usb 1-1: config 0 interface 0 has no altsetting 0 [ 112.105926][ T24] usb 1-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 112.115022][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.125432][ T24] usb 1-1: config 0 descriptor?? [ 112.194403][ T4978] loop1: detected capacity change from 0 to 128 [ 112.344970][ T4980] loop1: detected capacity change from 0 to 40427 [ 112.355370][ T4980] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 112.363242][ T4980] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 112.372313][ T4980] F2FS-fs (loop1): invalid crc value [ 112.379203][ T4980] F2FS-fs (loop1): Found nat_bits in checkpoint [ 112.411846][ T4980] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 112.418981][ T4980] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 112.468456][ T4987] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 112.488005][ T4987] overlayfs: missing 'lowerdir' [ 112.533948][ T24] lenovo 0003:17EF:6047.002A: unknown main item tag 0x0 [ 112.551195][ T24] lenovo 0003:17EF:6047.002A: unknown main item tag 0x0 [ 112.564703][ T24] lenovo 0003:17EF:6047.002A: unknown main item tag 0x0 [ 112.571836][ T4997] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 112.589582][ T4997] SELinux: failed to load policy [ 112.599685][ T24] lenovo 0003:17EF:6047.002A: unknown main item tag 0x0 [ 112.606691][ T24] lenovo 0003:17EF:6047.002A: unknown main item tag 0x0 [ 112.625804][ T24] lenovo 0003:17EF:6047.002A: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.0-1/input0 [ 112.669968][ T4999] loop7: detected capacity change from 0 to 512 [ 112.684742][ T3630] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 112.700733][ T3630] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 112.710282][ T4999] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 112.719219][ T4999] ext4 filesystem being mounted at /148/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 112.743085][ T287] usb 1-1: USB disconnect, device number 17 [ 112.809078][ T4996] loop5: detected capacity change from 0 to 40427 [ 112.814553][ T4999] EXT4-fs (loop7): unmounting filesystem. [ 112.825788][ T4996] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 112.840321][ T4996] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 112.871831][ T4996] F2FS-fs (loop5): invalid crc value [ 112.899555][ T4996] F2FS-fs (loop5): Found nat_bits in checkpoint [ 112.962433][ T5015] netlink: 7000 bytes leftover after parsing attributes in process `syz.1.1794'. [ 112.970808][ T4996] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 112.978756][ T4996] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 113.037370][ T3553] Bluetooth: hci0: Frame reassembly failed (-84) [ 113.088947][ T5026] loop8: detected capacity change from 0 to 1024 [ 113.106989][ T5026] EXT4-fs: Ignoring removed orlov option [ 113.131069][ T5026] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 113.140580][ T5026] ext4 filesystem being mounted at /13/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 113.174309][ T4996] syz.5.1792: attempt to access beyond end of device [ 113.174309][ T4996] loop5: rw=2049, sector=77824, nr_sectors = 4096 limit=40427 [ 113.195282][ T4996] syz.5.1792: attempt to access beyond end of device [ 113.195282][ T4996] loop5: rw=2049, sector=49152, nr_sectors = 3472 limit=40427 [ 113.211421][ T4996] syz.5.1792: attempt to access beyond end of device [ 113.211421][ T4996] loop5: rw=2049, sector=52624, nr_sectors = 624 limit=40427 [ 113.231433][ T4996] syz.5.1792: attempt to access beyond end of device [ 113.231433][ T4996] loop5: rw=2049, sector=57344, nr_sectors = 2544 limit=40427 [ 113.247640][ T3553] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 113.263028][ T3553] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 2050 with max blocks 1 with error 28 [ 113.265059][ T4996] syz.5.1792: attempt to access beyond end of device [ 113.265059][ T4996] loop5: rw=2049, sector=59888, nr_sectors = 6872 limit=40427 [ 113.281771][ T3553] EXT4-fs (loop8): This should not happen!! Data will be lost [ 113.281771][ T3553] [ 113.299526][ T3553] EXT4-fs (loop8): Total free blocks count 0 [ 113.305532][ T3553] EXT4-fs (loop8): Free/Dirty block details [ 113.306604][ T4996] syz.5.1792: attempt to access beyond end of device [ 113.306604][ T4996] loop5: rw=2049, sector=66760, nr_sectors = 4096 limit=40427 [ 113.311760][ T3553] EXT4-fs (loop8): free_blocks=4293918720 [ 113.334469][ T3553] EXT4-fs (loop8): dirty_blocks=16 [ 113.340360][ T3553] EXT4-fs (loop8): Block reservation details [ 113.346651][ T3553] EXT4-fs (loop8): i_reserved_data_blocks=1 [ 113.357449][ T4839] EXT4-fs (loop8): unmounting filesystem. [ 113.363524][ T4996] syz.5.1792: attempt to access beyond end of device [ 113.363524][ T4996] loop5: rw=2049, sector=70856, nr_sectors = 6304 limit=40427 [ 113.382593][ T4996] syz.5.1792: attempt to access beyond end of device [ 113.382593][ T4996] loop5: rw=2049, sector=77160, nr_sectors = 664 limit=40427 [ 113.409562][ T287] usb 8-1: new full-speed USB device number 11 using dummy_hcd [ 113.421745][ T4996] syz.5.1792: attempt to access beyond end of device [ 113.421745][ T4996] loop5: rw=2049, sector=81920, nr_sectors = 3800 limit=40427 [ 113.482041][ T1716] syz-executor: attempt to access beyond end of device [ 113.482041][ T1716] loop5: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 113.600678][ T287] usb 8-1: config 1 interface 0 has no altsetting 0 [ 113.609209][ T287] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 113.623329][ T287] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 113.631931][ T287] usb 8-1: SerialNumber: syz [ 113.640762][ T5012] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 113.760969][ T5046] SELinux: Context system_u:object_r:iptables_conf_t:s0 is not valid (left unmapped). [ 113.820975][ T5054] random: crng reseeded on system resumption [ 113.851825][ T5012] loop7: detected capacity change from 0 to 256 [ 113.865114][ T287] cdc_ether: probe of 8-1:1.0 failed with error -71 [ 113.879566][ T287] usb 8-1: USB disconnect, device number 11 [ 113.884868][ T5054] Restarting kernel threads ... done. [ 113.906769][ T5056] loop5: detected capacity change from 0 to 128 [ 113.950075][ T5060] 9pnet: p9_errstr2errno: server reported unknown error @00000000000000000000004D0xffffffffffffffff [ 114.099397][ T6] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 114.248234][ T5073] loop5: detected capacity change from 0 to 512 [ 114.257826][ T5073] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 114.269426][ T5073] EXT4-fs (loop5): 1 truncate cleaned up [ 114.275104][ T5073] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 114.289426][ T6] usb 1-1: Using ep0 maxpacket: 32 [ 114.304964][ T6] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 114.315374][ T6] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 114.324487][ T6] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 114.338988][ T6] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 114.348256][ T6] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.356968][ T6] usb 1-1: Product: syz [ 114.357594][ T1716] EXT4-fs (loop5): unmounting filesystem. [ 114.361362][ T6] usb 1-1: Manufacturer: syz [ 114.371868][ T6] usb 1-1: SerialNumber: syz [ 114.391966][ T6] cdc_ncm 1-1:1.0: NCM or ECM functional descriptors missing [ 114.416432][ T6] cdc_ncm 1-1:1.0: bind() failure [ 114.434838][ T5085] loop5: detected capacity change from 0 to 1024 [ 114.450115][ T5085] EXT4-fs: Ignoring removed nobh option [ 114.455810][ T5085] EXT4-fs: Ignoring removed bh option [ 114.464407][ T5087] device syz_tun entered promiscuous mode [ 114.470749][ T5087] device macsec1 entered promiscuous mode [ 114.473456][ T5085] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 114.494650][ T5087] device syz_tun left promiscuous mode [ 114.506431][ T5085] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 114.537118][ T5085] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:3836: comm syz.5.1829: Allocating blocks 497-513 which overlap fs metadata [ 114.551403][ T5085] EXT4-fs (loop5): pa ffff88811ca0a348: logic 256, phys. 385, len 8 [ 114.559587][ T5085] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:4876: group 0, free 0, pa_free 1 [ 114.579909][ T5085] EXT4-fs error (device loop5): mb_free_blocks:1810: group 0, inode 15: block 129:freeing already freed block (bit 8); block bitmap corrupt. [ 114.597658][ T295] usb 1-1: USB disconnect, device number 18 [ 114.626389][ T1716] EXT4-fs (loop5): unmounting filesystem. [ 114.642071][ T28] kauditd_printk_skb: 27 callbacks suppressed [ 114.642086][ T28] audit: type=1400 audit(1758608486.441:2953): avc: denied { read } for pid=5096 comm="syz.5.1832" name="usbmon7" dev="devtmpfs" ino=180 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 114.672217][ T28] audit: type=1400 audit(1758608486.451:2954): avc: denied { open } for pid=5096 comm="syz.5.1832" path="/dev/usbmon7" dev="devtmpfs" ino=180 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 114.696193][ T28] audit: type=1400 audit(1758608486.451:2955): avc: denied { ioctl } for pid=5096 comm="syz.5.1832" path="/dev/usbmon7" dev="devtmpfs" ino=180 ioctlcmd=0x9206 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 114.722597][ T28] audit: type=1400 audit(1758608486.501:2956): avc: denied { append } for pid=5096 comm="syz.5.1832" name="001" dev="devtmpfs" ino=182 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 114.760129][ T5102] loop5: detected capacity change from 0 to 512 [ 114.789364][ T6] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 114.889330][ T287] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 114.989511][ T6] usb 8-1: Using ep0 maxpacket: 32 [ 114.996118][ T6] usb 8-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 115.007419][ T6] usb 8-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 115.016543][ T6] usb 8-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 115.024929][ T6] usb 8-1: Product: syz [ 115.029108][ T6] usb 8-1: Manufacturer: syz [ 115.035383][ T6] hub 8-1:4.0: bad descriptor, ignoring hub [ 115.041340][ T6] hub: probe of 8-1:4.0 failed with error -5 [ 115.059291][ T989] Bluetooth: hci0: command 0x1003 tx timeout [ 115.069267][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 115.070620][ T287] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 115.077397][ T5022] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 115.087659][ T287] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 115.107043][ T28] audit: type=1326 audit(1758608486.901:2957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5108 comm="syz.1.1838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdac398eec9 code=0x7ffc0000 [ 115.107799][ T287] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 115.144669][ T28] audit: type=1326 audit(1758608486.931:2958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5108 comm="syz.1.1838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdac398eec9 code=0x7ffc0000 [ 115.155874][ T24] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 115.169868][ T28] audit: type=1326 audit(1758608486.931:2959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5108 comm="syz.1.1838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdac398eec9 code=0x7ffc0000 [ 115.186793][ T287] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 115.200478][ T28] audit: type=1326 audit(1758608486.931:2960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5108 comm="syz.1.1838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdac398eec9 code=0x7ffc0000 [ 115.211502][ T287] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.240866][ T5111] random: crng reseeded on system resumption [ 115.241288][ T28] audit: type=1326 audit(1758608486.931:2961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5108 comm="syz.1.1838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdac398eec9 code=0x7ffc0000 [ 115.270655][ T287] usb 9-1: config 0 descriptor?? [ 115.279513][ T28] audit: type=1326 audit(1758608486.931:2962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5108 comm="syz.1.1838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fdac398d710 code=0x7ffc0000 [ 115.350638][ T5119] loop1: detected capacity change from 0 to 1024 [ 115.364439][ T5119] EXT4-fs: Ignoring removed nobh option [ 115.373977][ T5119] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 115.390489][ T6] usb 8-1: USB disconnect, device number 12 [ 115.401309][ T5119] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c856c018, mo2=0102] [ 115.410167][ T5119] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 115.427129][ T24] usb 6-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 115.438452][ T24] usb 6-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 115.448527][ T24] usb 6-1: config 0 interface 0 has no altsetting 0 [ 115.455636][ T24] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 115.458571][ T282] EXT4-fs (loop1): unmounting filesystem. [ 115.465343][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.487832][ T24] usb 6-1: config 0 descriptor?? [ 115.561521][ T5131] futex_wake_op: syz.1.1848 tries to shift op by -1; fix this program [ 115.681525][ T287] plantronics 0003:047F:FFFF.002B: unknown main item tag 0xe [ 115.689021][ T287] plantronics 0003:047F:FFFF.002B: unknown main item tag 0x0 [ 115.696835][ T287] plantronics 0003:047F:FFFF.002B: No inputs registered, leaving [ 115.710536][ T287] plantronics 0003:047F:FFFF.002B: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 115.941491][ T5156] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 116.062311][ T287] usb 9-1: USB disconnect, device number 4 [ 116.068305][ T5157] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.075783][ T5157] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.083881][ T5157] device bridge_slave_0 entered promiscuous mode [ 116.091275][ T5157] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.098371][ T5157] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.105530][ T24] usb 6-1: string descriptor 0 read error: -22 [ 116.112805][ T5157] device bridge_slave_1 entered promiscuous mode [ 116.308007][ T24] input: HID 256c:006d as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:256C:006D.002C/input/input14 [ 116.326946][ T24] input: HID 256c:006d as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:256C:006D.002C/input/input15 [ 116.340895][ T24] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:256C:006D.002C/input/input16 [ 116.356189][ T24] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:256C:006D.002C/input/input17 [ 116.374895][ T24] uclogic 0003:256C:006D.002C: input,hiddev96,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.5-1/input0 [ 117.138956][ C0] ================================================================== [ 117.147080][ C0] BUG: KASAN: use-after-free in __run_timers+0x32b/0x9a0 [ 117.154128][ C0] Write of size 8 at addr ffff88813488ca00 by task rcub/0/15 [ 117.161706][ C0] [ 117.164036][ C0] CPU: 0 PID: 15 Comm: rcub/0 Not tainted syzkaller #0 [ 117.170892][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 117.180960][ C0] Call Trace: [ 117.184248][ C0] [ 117.187111][ C0] __dump_stack+0x21/0x24 [ 117.191459][ C0] dump_stack_lvl+0xee/0x150 [ 117.196065][ C0] ? __cfi_dump_stack_lvl+0x8/0x8 [ 117.201097][ C0] ? __run_timers+0x32b/0x9a0 [ 117.205883][ C0] print_address_description+0x71/0x200 [ 117.211444][ C0] print_report+0x4a/0x60 [ 117.215825][ C0] kasan_report+0x122/0x150 [ 117.220341][ C0] ? __run_timers+0x32b/0x9a0 [ 117.225035][ C0] __asan_report_store8_noabort+0x17/0x20 [ 117.230770][ C0] __run_timers+0x32b/0x9a0 [ 117.235309][ C0] ? sched_clock+0x9/0x10 [ 117.239671][ C0] ? sched_clock_cpu+0x6e/0x250 [ 117.244553][ C0] ? calc_index+0x200/0x200 [ 117.249083][ C0] ? kvm_sched_clock_read+0x18/0x40 [ 117.254325][ C0] run_timer_softirq+0x6a/0xf0 [ 117.259112][ C0] handle_softirqs+0x1d7/0x600 [ 117.263926][ C0] __irq_exit_rcu+0x52/0xf0 [ 117.268446][ C0] irq_exit_rcu+0x9/0x10 [ 117.272702][ C0] sysvec_apic_timer_interrupt+0xa9/0xc0 [ 117.278356][ C0] [ 117.281305][ C0] [ 117.284240][ C0] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 117.290233][ C0] RIP: 0010:rt_mutex_slowlock_block+0x3e5/0x5f0 [ 117.296495][ C0] Code: 3c 20 00 4c 8b a5 78 ff ff ff 74 0c 4c 89 e7 e8 81 d8 c0 fc 48 8b 7d c8 4d 39 3c 24 49 bc 00 00 00 00 00 fc ff df 75 69 f3 90 <48> 8b 45 a0 42 80 3c 20 00 0f 84 07 ff ff ff e8 57 d8 c0 fc 48 8b [ 117.316108][ C0] RSP: 0000:ffffc900000f7bf0 EFLAGS: 00000246 [ 117.322186][ C0] RAX: 1ffffffff0df6798 RBX: ffffffff86fb3cb0 RCX: ffffffff84f3aea1 [ 117.330172][ C0] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff86fb3cc8 [ 117.338150][ C0] RBP: ffffc900000f7cb0 R08: dffffc0000000000 R09: ffffed1020074799 [ 117.346130][ C0] R10: ffffed1020074799 R11: 1ffff11020074798 R12: dffffc0000000000 [ 117.354138][ C0] R13: ffff88811fbaa880 R14: ffff8881003a3cc0 R15: ffffc900000f7d00 [ 117.362230][ C0] ? rt_mutex_slowlock_block+0x391/0x5f0 [ 117.367903][ C0] rt_mutex_slowlock+0x15e/0x400 [ 117.372864][ C0] ? _raw_spin_unlock+0x4c/0x70 [ 117.377733][ C0] ? rt_mutex_adjust_prio_chain+0x1760/0x1760 [ 117.383821][ C0] ? __switch_to_asm+0x3a/0x60 [ 117.388695][ C0] rt_mutex_lock+0x102/0x1b0 [ 117.393310][ C0] ? __cfi_rt_mutex_lock+0x10/0x10 [ 117.398473][ C0] ? __kasan_check_write+0x14/0x20 [ 117.403615][ C0] rcu_boost_kthread+0x239/0x650 [ 117.408581][ C0] kthread+0x281/0x320 [ 117.412687][ C0] ? __cfi_rcu_boost_kthread+0x10/0x10 [ 117.418177][ C0] ? __cfi_kthread+0x10/0x10 [ 117.422804][ C0] ret_from_fork+0x1f/0x30 [ 117.427345][ C0] [ 117.430379][ C0] [ 117.432719][ C0] Allocated by task 5022: [ 117.437053][ C0] kasan_set_track+0x4b/0x70 [ 117.441665][ C0] kasan_save_alloc_info+0x25/0x30 [ 117.446795][ C0] __kasan_kmalloc+0x95/0xb0 [ 117.451403][ C0] __kmalloc+0xb1/0x1e0 [ 117.455588][ C0] hci_alloc_dev_priv+0x27/0x1bd0 [ 117.460645][ C0] hci_uart_tty_ioctl+0x3d6/0xa20 [ 117.465688][ C0] tty_ioctl+0x8ef/0xc60 [ 117.469954][ C0] __se_sys_ioctl+0x12f/0x1b0 [ 117.474648][ C0] __x64_sys_ioctl+0x7b/0x90 [ 117.479249][ C0] x64_sys_call+0x58b/0x9a0 [ 117.483767][ C0] do_syscall_64+0x4c/0xa0 [ 117.488191][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 117.494102][ C0] [ 117.496426][ C0] Freed by task 5022: [ 117.500405][ C0] kasan_set_track+0x4b/0x70 [ 117.505008][ C0] kasan_save_free_info+0x31/0x50 [ 117.510053][ C0] ____kasan_slab_free+0x132/0x180 [ 117.515181][ C0] __kasan_slab_free+0x11/0x20 [ 117.520057][ C0] slab_free_freelist_hook+0xc2/0x190 [ 117.525443][ C0] __kmem_cache_free+0xb7/0x1b0 [ 117.530307][ C0] kfree+0x6f/0xf0 [ 117.534102][ C0] hci_release_dev+0x12a3/0x13b0 [ 117.539089][ C0] bt_host_release+0x82/0x90 [ 117.543712][ C0] device_release+0xa4/0x1d0 [ 117.548319][ C0] kobject_put+0x19d/0x280 [ 117.552755][ C0] put_device+0x1f/0x30 [ 117.556934][ C0] hci_dev_cmd+0x265/0x720 [ 117.561382][ C0] hci_sock_ioctl+0x41e/0x7f0 [ 117.566072][ C0] sock_do_ioctl+0x101/0x310 [ 117.570682][ C0] sock_ioctl+0x4d8/0x6e0 [ 117.575048][ C0] __se_sys_ioctl+0x12f/0x1b0 [ 117.579740][ C0] __x64_sys_ioctl+0x7b/0x90 [ 117.584349][ C0] x64_sys_call+0x58b/0x9a0 [ 117.588871][ C0] do_syscall_64+0x4c/0xa0 [ 117.593310][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 117.599319][ C0] [ 117.601648][ C0] Last potentially related work creation: [ 117.607368][ C0] kasan_save_stack+0x3a/0x60 [ 117.612060][ C0] __kasan_record_aux_stack+0xb6/0xc0 [ 117.617450][ C0] kasan_record_aux_stack_noalloc+0xb/0x10 [ 117.623284][ C0] insert_work+0x51/0x300 [ 117.627632][ C0] __queue_work+0x9b1/0xd30 [ 117.632149][ C0] queue_work_on+0xd2/0x140 [ 117.636665][ C0] __hci_cmd_sync_sk+0xa3e/0xcf0 [ 117.641613][ C0] hci_cmd_sync_status+0x53/0x120 [ 117.646657][ C0] hci_dev_cmd+0x628/0x720 [ 117.651089][ C0] hci_sock_ioctl+0x41e/0x7f0 [ 117.655777][ C0] sock_do_ioctl+0x101/0x310 [ 117.660379][ C0] sock_ioctl+0x4d8/0x6e0 [ 117.664728][ C0] __se_sys_ioctl+0x12f/0x1b0 [ 117.669417][ C0] __x64_sys_ioctl+0x7b/0x90 [ 117.674030][ C0] x64_sys_call+0x58b/0x9a0 [ 117.678560][ C0] do_syscall_64+0x4c/0xa0 [ 117.683005][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 117.688920][ C0] [ 117.691254][ C0] Second to last potentially related work creation: [ 117.697839][ C0] kasan_save_stack+0x3a/0x60 [ 117.702529][ C0] __kasan_record_aux_stack+0xb6/0xc0 [ 117.707922][ C0] kasan_record_aux_stack_noalloc+0xb/0x10 [ 117.713758][ C0] insert_work+0x51/0x300 [ 117.718105][ C0] __queue_work+0x9b1/0xd30 [ 117.722618][ C0] queue_work_on+0xd2/0x140 [ 117.727130][ C0] hci_cmd_timeout+0x191/0x200 [ 117.731908][ C0] process_one_work+0x71f/0xc40 [ 117.736779][ C0] worker_thread+0xa29/0x11f0 [ 117.741467][ C0] kthread+0x281/0x320 [ 117.745568][ C0] ret_from_fork+0x1f/0x30 [ 117.750004][ C0] [ 117.752330][ C0] The buggy address belongs to the object at ffff88813488c000 [ 117.752330][ C0] which belongs to the cache kmalloc-8k of size 8192 [ 117.766390][ C0] The buggy address is located 2560 bytes inside of [ 117.766390][ C0] 8192-byte region [ffff88813488c000, ffff88813488e000) [ 117.779888][ C0] [ 117.782217][ C0] The buggy address belongs to the physical page: [ 117.788629][ C0] page:ffffea0004d22200 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x134888 [ 117.798885][ C0] head:ffffea0004d22200 order:3 compound_mapcount:0 compound_pincount:0 [ 117.807218][ C0] flags: 0x4000000000010200(slab|head|zone=1) [ 117.813328][ C0] raw: 4000000000010200 0000000000000000 dead000000000001 ffff888100043500 [ 117.821935][ C0] raw: 0000000000000000 0000000000020002 00000001ffffffff 0000000000000000 [ 117.830526][ C0] page dumped because: kasan: bad access detected [ 117.836969][ C0] page_owner tracks the page as allocated [ 117.842687][ C0] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 2417, tgid 2416 (syz.5.841), ts 60037281966, free_ts 59996714388 [ 117.865238][ C0] post_alloc_hook+0x1f5/0x210 [ 117.870027][ C0] prep_new_page+0x1c/0x110 [ 117.874546][ C0] get_page_from_freelist+0x2c7b/0x2cf0 [ 117.880110][ C0] __alloc_pages+0x1c3/0x450 [ 117.884720][ C0] alloc_slab_page+0x6e/0xf0 [ 117.889330][ C0] new_slab+0x98/0x3d0 [ 117.893415][ C0] ___slab_alloc+0x6bd/0xb20 [ 117.898019][ C0] __slab_alloc+0x5e/0xa0 [ 117.902366][ C0] __kmem_cache_alloc_node+0x203/0x2c0 [ 117.907836][ C0] kmalloc_trace+0x29/0xb0 [ 117.912268][ C0] fat_fill_super+0x116/0x4890 [ 117.917051][ C0] msdos_fill_super+0x2c/0x40 [ 117.921737][ C0] mount_bdev+0x2bc/0x3f0 [ 117.926093][ C0] msdos_mount+0x34/0x40 [ 117.930434][ C0] legacy_get_tree+0xfe/0x1a0 [ 117.935134][ C0] vfs_get_tree+0x9a/0x270 [ 117.939587][ C0] page last free stack trace: [ 117.944259][ C0] free_unref_page_prepare+0x742/0x750 [ 117.949731][ C0] free_unref_page+0x8f/0x530 [ 117.954423][ C0] __free_pages+0x67/0x100 [ 117.958851][ C0] __free_slab+0xca/0x1a0 [ 117.963215][ C0] __unfreeze_partials+0x160/0x190 [ 117.968347][ C0] put_cpu_partial+0xa9/0x100 [ 117.973044][ C0] __slab_free+0x1c4/0x280 [ 117.977471][ C0] ___cache_free+0xbf/0xd0 [ 117.981896][ C0] qlist_free_all+0xc6/0x140 [ 117.986491][ C0] kasan_quarantine_reduce+0x14a/0x170 [ 117.991960][ C0] __kasan_slab_alloc+0x24/0x80 [ 117.996828][ C0] slab_post_alloc_hook+0x4f/0x2d0 [ 118.001957][ C0] kmem_cache_alloc+0x16e/0x330 [ 118.006818][ C0] vm_area_dup+0x27/0x280 [ 118.011164][ C0] copy_mm+0xb45/0x1a10 [ 118.015348][ C0] copy_process+0x12b4/0x3480 [ 118.020055][ C0] [ 118.022385][ C0] Memory state around the buggy address: [ 118.028024][ C0] ffff88813488c900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 118.036097][ C0] ffff88813488c980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 118.044186][ C0] >ffff88813488ca00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 118.052258][ C0] ^ [ 118.056328][ C0] ffff88813488ca80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 118.064387][ C0] ffff88813488cb00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 118.072443][ C0] ================================================================== [ 118.080504][ C0] Disabling lock debugging due to kernel taint [ 118.086705][ C0] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN [ 118.098413][ C0] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 118.106819][ C0] CPU: 0 PID: 15 Comm: rcub/0 Tainted: G B syzkaller #0 [ 118.115139][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 118.125191][ C0] RIP: 0010:__queue_work+0x575/0xd30 [ 118.130483][ C0] Code: 39 2b 0f 84 b9 00 00 00 e8 88 dc 28 00 4c 89 ff e8 70 db ac 03 49 bc 00 00 00 00 00 fc ff df 4c 8b 6d d0 4c 89 e8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ef e8 bc 45 6d 00 49 8b 7d 00 e8 53 d7 [ 118.150181][ C0] RSP: 0000:ffffc90000007c70 EFLAGS: 00010046 [ 118.156249][ C0] RAX: 0000000000000000 RBX: 000000007fffffff RCX: ffff8881003a3cc0 [ 118.164217][ C0] RDX: 0000000000000100 RSI: 000000007fffffff RDI: 000000007fffffff [ 118.172273][ C0] RBP: ffffc90000007d08 R08: fffffffffffffffb R09: 0000000000000007 [ 118.180244][ C0] R10: ffffed1026911939 R11: 1ffff11026911939 R12: dffffc0000000000 [ 118.188214][ C0] R13: 0000000000000000 R14: ffff88813488c9c8 R15: 0000000000000008 [ 118.196181][ C0] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 118.205108][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 118.211711][ C0] CR2: 00007ffeed24701c CR3: 0000000112c52000 CR4: 00000000003506b0 [ 118.219691][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 118.227659][ C0] DR3: 000000000000e58e DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 118.235635][ C0] Call Trace: [ 118.238912][ C0] [ 118.241763][ C0] delayed_work_timer_fn+0x61/0x80 [ 118.246882][ C0] ? __cfi_delayed_work_timer_fn+0x10/0x10 [ 118.252700][ C0] call_timer_fn+0x46/0x2a0 [ 118.257207][ C0] ? __cfi_delayed_work_timer_fn+0x10/0x10 [ 118.263020][ C0] __run_timers+0x667/0x9a0 [ 118.267528][ C0] ? calc_index+0x200/0x200 [ 118.272036][ C0] ? kvm_sched_clock_read+0x18/0x40 [ 118.277237][ C0] run_timer_softirq+0x6a/0xf0 [ 118.281998][ C0] handle_softirqs+0x1d7/0x600 [ 118.286762][ C0] __irq_exit_rcu+0x52/0xf0 [ 118.291264][ C0] irq_exit_rcu+0x9/0x10 [ 118.295503][ C0] sysvec_apic_timer_interrupt+0xa9/0xc0 [ 118.301137][ C0] [ 118.304063][ C0] [ 118.306987][ C0] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 118.312968][ C0] RIP: 0010:rt_mutex_slowlock_block+0x3e5/0x5f0 [ 118.319219][ C0] Code: 3c 20 00 4c 8b a5 78 ff ff ff 74 0c 4c 89 e7 e8 81 d8 c0 fc 48 8b 7d c8 4d 39 3c 24 49 bc 00 00 00 00 00 fc ff df 75 69 f3 90 <48> 8b 45 a0 42 80 3c 20 00 0f 84 07 ff ff ff e8 57 d8 c0 fc 48 8b [ 118.338826][ C0] RSP: 0000:ffffc900000f7bf0 EFLAGS: 00000246 [ 118.344891][ C0] RAX: 1ffffffff0df6798 RBX: ffffffff86fb3cb0 RCX: ffffffff84f3aea1 [ 118.352861][ C0] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff86fb3cc8 [ 118.360834][ C0] RBP: ffffc900000f7cb0 R08: dffffc0000000000 R09: ffffed1020074799 [ 118.368806][ C0] R10: ffffed1020074799 R11: 1ffff11020074798 R12: dffffc0000000000 [ 118.376777][ C0] R13: ffff88811fbaa880 R14: ffff8881003a3cc0 R15: ffffc900000f7d00 [ 118.384755][ C0] ? rt_mutex_slowlock_block+0x391/0x5f0 [ 118.390400][ C0] rt_mutex_slowlock+0x15e/0x400 [ 118.395346][ C0] ? _raw_spin_unlock+0x4c/0x70 [ 118.400195][ C0] ? rt_mutex_adjust_prio_chain+0x1760/0x1760 [ 118.406357][ C0] ? __switch_to_asm+0x3a/0x60 [ 118.411126][ C0] rt_mutex_lock+0x102/0x1b0 [ 118.415720][ C0] ? __cfi_rt_mutex_lock+0x10/0x10 [ 118.420839][ C0] ? __kasan_check_write+0x14/0x20 [ 118.425951][ C0] rcu_boost_kthread+0x239/0x650 [ 118.430889][ C0] kthread+0x281/0x320 [ 118.434958][ C0] ? __cfi_rcu_boost_kthread+0x10/0x10 [ 118.440420][ C0] ? __cfi_kthread+0x10/0x10 [ 118.445008][ C0] ret_from_fork+0x1f/0x30 [ 118.449431][ C0] [ 118.452455][ C0] Modules linked in: [ 118.456349][ C0] ---[ end trace 0000000000000000 ]--- [ 118.461797][ C0] RIP: 0010:__queue_work+0x575/0xd30 [ 118.467085][ C0] Code: 39 2b 0f 84 b9 00 00 00 e8 88 dc 28 00 4c 89 ff e8 70 db ac 03 49 bc 00 00 00 00 00 fc ff df 4c 8b 6d d0 4c 89 e8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ef e8 bc 45 6d 00 49 8b 7d 00 e8 53 d7 [ 118.486777][ C0] RSP: 0000:ffffc90000007c70 EFLAGS: 00010046 [ 118.492843][ C0] RAX: 0000000000000000 RBX: 000000007fffffff RCX: ffff8881003a3cc0 [ 118.500816][ C0] RDX: 0000000000000100 RSI: 000000007fffffff RDI: 000000007fffffff [ 118.508785][ C0] RBP: ffffc90000007d08 R08: fffffffffffffffb R09: 0000000000000007 [ 118.516754][ C0] R10: ffffed1026911939 R11: 1ffff11026911939 R12: dffffc0000000000 [ 118.524724][ C0] R13: 0000000000000000 R14: ffff88813488c9c8 R15: 0000000000000008 [ 118.532690][ C0] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 118.541617][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 118.548199][ C0] CR2: 00007ffeed24701c CR3: 0000000112c52000 CR4: 00000000003506b0 [ 118.556172][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 118.564138][ C0] DR3: 000000000000e58e DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 118.572110][ C0] Kernel panic - not syncing: Fatal exception in interrupt [ 118.579618][ C0] Kernel Offset: disabled [ 118.584036][ C0] Rebooting in 86400 seconds..