last executing test programs: 52.444976523s ago: executing program 32 (id=11): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x8, 0x6, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) writev(r0, 0x0, 0x0) 41.113900903s ago: executing program 33 (id=254): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000ffffff00000000000000008510000002000000850000000f0000009500000000000000"], 0x0, 0xfffffdfe, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffe55, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r0, 0x0, 0x0}, 0x10) 37.825091929s ago: executing program 34 (id=333): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x0, 0x0, 0xfffff010}, {0x6, 0x9}]}, 0x10) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000000)="e9", 0x1, 0x20008045, &(0x7f00000001c0)={0xa, 0x2, 0x40, @ipv4={'\x00', '\xff\xff', @empty}, 0x8}, 0x1c) 35.171278581s ago: executing program 35 (id=411): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) syz_ublk_setup_queues(r2, r0, &(0x7f0000000180)={0x0, 0x20000, 0x0, 0x1, 0x154, 0x0, r2}, 0x0, 0x1, &(0x7f0000000340)={0x2e, 0x15, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0xfff9, 0x42, 0x0, 0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB=','], 0x2c}}, 0x40) 25.82622158s ago: executing program 0 (id=507): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040), 0x6) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0x4, 0x1}, 0x6) 24.401422512s ago: executing program 36 (id=518): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x7c, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000001c0)={{0x8000000, 0x3000, 0x8, 0x9, 0xfb, 0x8, 0x3e, 0x17, 0x0, 0xc8, 0x6}, {0x1000, 0x50000, 0xa, 0xff, 0x22, 0x5, 0x79, 0xe1, 0x5, 0xb4, 0x3}, {0x0, 0xa000, 0x0, 0x5, 0x3, 0x3, 0x0, 0x19, 0x1, 0x5, 0x5, 0x81}, {0x3000, 0x1, 0x44e41e77284b2876, 0x1, 0x0, 0x42, 0xb, 0x0, 0x6, 0x7, 0xc}, {0x58000, 0xb000, 0xb, 0x3, 0x15, 0x19, 0xab, 0x7f, 0x7, 0x83, 0xa, 0x83}, {0x8000000, 0x0, 0xc, 0x6, 0xad, 0xa, 0x1, 0xf7, 0x1, 0x5, 0xff, 0x80}, {0x3000, 0x2000, 0xc, 0x7, 0x0, 0x5, 0x9, 0x6c, 0x5, 0x81, 0xff, 0x71}, {0x100000, 0x1, 0xe, 0x5, 0xb, 0x7, 0x0, 0x34, 0x2, 0xb, 0x3, 0x9}, {0x1ff8, 0x30}, {0x100000, 0x7}, 0x80000031, 0x0, 0xeeef0000, 0x1200d, 0x3, 0x8000, 0x54000, [0x6800000000000020, 0x2, 0x3, 0x80000000006]}) 23.70269976s ago: executing program 0 (id=523): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x280440e, &(0x7f0000000500)={[{@data_err_ignore}, {@test_dummy_encryption_v1}, {@inlinecrypt}, {@jqfmt_vfsv1}, {@noinit_itable}, {@norecovery}, {@minixdf}, {@nodioread_nolock}, {@errors_remount}, {@jqfmt_vfsv0}, {@usrquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x8}}]}, 0x1, 0xbdb, &(0x7f0000001000)="$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") setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000340), 0x24, 0x3) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000042, 0x0, 0x1, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 23.666281728s ago: executing program 9 (id=524): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000002000095"], &(0x7f00000001c0)='syzkaller\x00'}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r1, r2, 0x25, 0x0, @void}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0xffffffff, 0x0, {0x0, 0x0, 0x74, r2, {0x0, 0xf}, {0x0, 0x4}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 23.550085832s ago: executing program 0 (id=525): r0 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000090000402505a8a440000102030109021b00010100000009040000020701010009050102"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1, 0x4}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) close(0x3) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[], 0x0) 23.518320799s ago: executing program 9 (id=526): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e1d, 0x9, @local, 0x4}, 0x1c) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @mcast2, 0x4}, 0x2f) syz_emit_ethernet(0x7e, &(0x7f0000000080)={@random="79ee7c2eea00", @multicast, @void, {@ipv6={0x86dd, @udp={0xa, 0x6, '\x00', 0x48, 0x11, 0x0, @private1, @mcast2, {[], {0x4e1d, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0x1, "dc521c259b538a2bf2a113dc2eeec0a072edf20b6d59027f", "d646c098cfc27eb8549d66e7b219c2c3b85e4508546e551af9e59631718ba089"}}}}}}}, 0x0) 23.502482002s ago: executing program 9 (id=527): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3000002, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000000240)=0x7, 0x4) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000040)=0xf2b, 0x4) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f00000000c0)=""/19, &(0x7f0000000080)=0x13) 23.473144259s ago: executing program 9 (id=528): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x2818082, &(0x7f00000005c0)=ANY=[@ANYBLOB="696f636861727365743d6b6f69382d72752c73686f72746e616d653d77696e6e742c726f6469722c73686f72746e616d653d77696e6e742c636f6465706167653d313235312c666d61736b3d303030300000000030303030303030303030303004000000646531215a670233c0116275672c756e080000006174653d302c6e6f7e756d7461696c3d302d757466383d312c73686f72746e616d653d6c6f7765722c7511695f786c6174653d302c756e695f786c6174653d312c757466383d312c00"], 0x7f, 0x2bd, &(0x7f0000000240)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0xa27b734c1a0bc97) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x3, 0x0, 0x0, 0x4, 0x0, "ce35af41090000000000000000298b070000000000004faa2ae2c084a0ea0000000000007700000c0000200000002000000000000400", "036c47c678082000cb59d654cbb41bbcef549ba197fce47ddfdd753abd950100f20000000200000000000000000000000000000000000000000200", "b7326736181c208220fffff2ff00", [0x6]}) creat(&(0x7f0000004440)='./file0\x00', 0x12) 23.306076474s ago: executing program 9 (id=529): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'ip6gre0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031600d3fc140000004788031c09103c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) recvmmsg(r1, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000005c0)=""/174, 0xae}], 0x1}, 0xffffffff}], 0x1, 0x22, 0x0) 23.172029722s ago: executing program 9 (id=530): syz_mount_image$vfat(&(0x7f0000000540), &(0x7f0000000000)='./file1\x00', 0xa18cd6, &(0x7f0000000180)={[{@shortname_lower}, {@iocharset={'iocharset', 0x3d, 'koi8-r'}}, {@utf8no}, {@fat=@debug}, {@fat=@showexec}, {@shortname_winnt}, {@uni_xlate}, {@fat=@check_normal}, {@fat=@codepage={'codepage', 0x3d, '860'}}, {@rodir}, {@uni_xlate}, {@rodir}, {@utf8no}]}, 0x81, 0x29b, &(0x7f0000001100)="$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") munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x112) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x2200000, &(0x7f0000000240)={[{@nolazytime}, {@journal_dev={'journal_dev', 0x3d, 0x2}}, {@grpquota}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@delalloc}, {@nogrpid}, {@noauto_da_alloc}, {@dioread_nolock}]}, 0xb, 0x572, &(0x7f00000006c0)="$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") 23.165514794s ago: executing program 37 (id=530): syz_mount_image$vfat(&(0x7f0000000540), &(0x7f0000000000)='./file1\x00', 0xa18cd6, &(0x7f0000000180)={[{@shortname_lower}, {@iocharset={'iocharset', 0x3d, 'koi8-r'}}, {@utf8no}, {@fat=@debug}, {@fat=@showexec}, {@shortname_winnt}, {@uni_xlate}, {@fat=@check_normal}, {@fat=@codepage={'codepage', 0x3d, '860'}}, {@rodir}, {@uni_xlate}, {@rodir}, {@utf8no}]}, 0x81, 0x29b, &(0x7f0000001100)="$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") munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x112) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x2200000, &(0x7f0000000240)={[{@nolazytime}, {@journal_dev={'journal_dev', 0x3d, 0x2}}, {@grpquota}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@delalloc}, {@nogrpid}, {@noauto_da_alloc}, {@dioread_nolock}]}, 0xb, 0x572, &(0x7f00000006c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwIF6kCCIWxD/Au8fiH6B/RUELRUrQg5fIbGbbbZLNJunWbJ3PB6Z9b2ayb96++b79zs4uG0BhjWT/lCJejoivk4iDbdsGI984srLf0sNrk9mSxPLyJ38mkeTrWvsn+f/788pLEfHLFxHHS2vbrS8szlSq1XQur482Zi+P1hcWT1ycrUyn0+ml8YmJU29NjL/7zts96+vr5/7+7uO7H5z66ujStz/dP3Q7iTNxIN/W3o+ncKO9MhIj+XMyFGdW7TjWg8b6SbLTB8C2DORxPhTZHHAwBvKoB/7/rkfEMlBQifiHgmrlAa1r+x5dBz83Hry/cgG0tv+DK++NxJ7mtdG+peSJK6Psene4B+1nbfz8x53b2RJd3oe43oP2AFpu3IyIk4ODa+e/JJ//tu9k883jja1uo2ivP7CT7mb5zxvr5T+lR/lPrJP/7F8ndreje/yX7vegmY6y/O+9dfPfR1PX8EBee6GZ8w0lFy5W05MR8WJEHIuh3Vl9o/s5p5buLXfa1p7/ZUvWfisXzI/j/uDuJ/9mqtKoPE2f2z24GfHK4/w3iTXz/55mrrt6/LPn41xW+PXLrm0cSe+82mlb9/63630GvPxjxGvrjv/jO1rJxvcnR5vnw2jrrFjrr1tHfuvU/tb633vZ+O/buP/DSfv92vrW2/hhzz9pp23bPf93JZ82y7vydVcrjcbcWMSu5KO168cf/22r3to/6/+xoxvPf+ud/3sj4rNN9v/W4Vsdd+2H8Z/a0vhvvXDvw8+/79T+5sb/zWbpWL5mM/PfZg/waZ47AAAAAAAA6DeliDgQSan8qFwqlcsrn+84HPtK1Vq9cfxCbf7SVDS/KzscQ6XWne6DbZ+HGMs/D9uqj6+qT0TEoYj4ZmBvs16erFWndrrzAAAAAAAAAAAAAAAAAAAA0Cf2d/j+f+b3gZ0+OuCZ85PfUFxd478Xv/QE9CWv/1Bc4h+KS/xDcYl/KC7xD8Ul/qG4xD8Ul/gHAAAAAAAAAAAAAAAAAAAAAAAAAACAnjp39my2LC89vDaZ1aeuLMzP1K6cmErrM+XZ+cnyZG3ucnm6VpuupuXJ2my3x6vWapfHxmP+6mgjrTdG6wuL52dr85ca5y/OVqbT8+nQf9IrAAAAAAAAAAAAAAAAAAAAeL7UFxZnKtVqOqfQsXA6+uIwtl1Iuo3y6fxk2NIjR14Y3PkOKjyDwg5PTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQ5t8AAAD//8nLNLM=") 21.38974402s ago: executing program 0 (id=551): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x2818082, &(0x7f00000005c0)=ANY=[@ANYBLOB="696f636861727365743d6b6f69382d72752c73686f72746e616d653d77696e6e742c726f6469722c73686f72746e616d653d77696e6e742c636f6465706167653d313235312c666d61736b3d303030300000000030303030303030303030303004000000646531215a670233c0116275672c756e080000006174653d302c6e6f7e756d7461696c3d302d757466383d312c73686f72746e616d653d6c6f7765722c7511695f786c6174653d302c756e695f786c6174653d312c757466383d312c00"], 0x7f, 0x2bd, &(0x7f0000000240)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0xa27b734c1a0bc97) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x3, 0x0, 0x0, 0x4, 0x0, "ce35af41090000000000000000298b070000000000004faa2ae2c084a0ea0000000000007700000c0000200000002000000000000400", "036c47c678082000cb59d654cbb41bbcef549ba197fce47ddfdd753abd950100f20000000200000000000000000000000000000000000000000200", "b7326736181c208220fffff2ff00", [0x6]}) creat(&(0x7f0000004440)='./file0\x00', 0x12) 21.239165122s ago: executing program 0 (id=553): write(0xffffffffffffffff, &(0x7f0000000000)="2000000012005f0214f9f4012100fbe40a000000edff84b5ca8d7c102775", 0x1e) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "e907f8f9951e76c13f64323723e7eecdf40c363423eb3d259266ec9c37865c6c1a4640ce1b22bb3327ef4f8a1d34c07c3260049e4f8d3ee0878ae95bc7f52363c468b257ffb3baf7aea4fb76dcfd54f11ed2c41d078b9cf1fc8f72566153c97e4af37017ea6b16b694bb4a6e4606c3fb19d1d2bd3c8c4e97da2213f9d5c3c4891f9150d685a7d7c27df0355808390666e827d61dcc3a633bb0b1250b5a293e3877adc1a1b44b99c93d57fd720a170e7f5670e419dc64febf7ddc73fd4a5a0b6c281e05c541471d8d2a58f5edac665f7f46c7084e17c809268103a2584ab40a68e528329d97afc3612e325c1eb4a3ab2e156a97444800", "0615e456c196e819a321fdb3690bfab19538829a732a01781564ef7738cb5b82a704b3952f81c68bb4ceeaad63206f88201638e87c4981cbf9332cbc9c4d69e392bd33237ece7ad91e44edac0da8dacad81adf2e08c21ad6b44ce1f90bd618c255ca40cdb411485fb48a51d329c816b3488c7d032ef69c502c6e1236bd381efd410165988847c1dcb98a18ca2b853910e52044fa3b3026cb88de269537c8f26ffc3b15cbf279832bfc90bd95939043182e88050dfd2a4784a5d1453610fb1f1c2bac36c3ecd3e6fb756ef8880d030000006afd981d8ab4ab119928448f90351aec113335eacf52a18c87738d9679d31ce0108dc556e597655ba11bacc032a16fbefc64776f363610a15b37bcd36e6a7cba931151b9c9ba5779d550e9ab21603a43a25f3b4895d8dc4f3ce0e7d5e964e888169ea79a0848e9338b3d34d62e963fbf98834f4455419907f0ffdb76373af77a340e00000000000000bdab9614a0d460f791a06e6cf5243bf2b3a1624a80ec7e1116f1c81f5ef4b895be74bf67eea9193428b58a8b62b7976d3d2e59796c46ec918c83cd49c3f43dbd2967586966c19ace7b0bef5f94eb333b362649f1bfa114f8b1f126e97ec672cff77e2130823fa7a1df6760c6a8917815e9f0a409ed32b133df7dc9afceffcd472b35145c83c9167764d25ce214133c6170adeb6653b30b226a3b6ff1363ac862a540c7fab584cd051ce7ee951e0f121d43cff75afbdec6bc6f6e8f7db58c8086751320d22ee8582e915cabc536e3767e9a9230c9ae8b92398f0ca2a7141fa4588af7afde10e5ec2a6fe85ba5712e126629d4e3998fc4721cb638f2ef8356049e3448466e2c400d5e8baf843fa399907cb526b791c5350ce29204cb6fe50b892a69ec6dbecc28f032a745738faa12c2a34222942fef0ec0511da5fe0b565ceac429da7cc25cfe0320b40a514723e2392a6a354837153542fd61b3156b54c566036e493250c3a3214738e3cacc24a50d5dfd17d5008b4ca629c3062f3417cb67c48b80000000000000006c68e95a71a00383ad9df263f6a775ded64fef20ed5cb5f31c33cb86f839d00a12e40cd31219113619c4e0585454cb1776278bfd7f5c4275792afb790e83ff0fc6925355c7aee7a070477d9ec2292366e39b9dc66f7adcf449a1a718e5217183faf0f679efc5cef20bcdcf2d12ea0684084ec0d693256e280025b23b5a08b7b1ebe7d41fb045793f971d6ee066604818cb09d86c1eda99a44c35476a113fd5d1a7543f8f99424ebb78dd9e00d719502a6eafa743a061fa3fa55e4deaa0a011b6b9d633f10e0c9446b5a2e3f6d6014ab00695366c1a6bf0c32f703aebb7988c7d4d322681458e85626302c70f37628835e1fcfff4da3099c0b4af433eb9a51f9609f2c0c09a98b18880c846b34d6ac0210f073765666100976ee1d94633b98e02c3e81869534ab985eb3a73e0bac892dac949f85db949285a6a7a490b1075467226af23df82d8dd09b7282490fbb3ada9ed4cae8f761aefbe0701de6b132f12044c58ac1c2607c8f51361de5bed021dea13fd0a440263cf0b304522a324b581ab274e7bdae5994316657b5c0ab0220d9b08739729f7a35d4368780082aec4f08dd161c11ee5b7937fae7835e8bfe98a44c8d4bbb2e0eee0cb5d7c93517e96a9fc8132e60f3ef7c735bea1934b37df451f981c8d9210e61278c871e6dad6ceb89aa4d7245658a63e65cec7b81d307426a60a31cc917844a14e1d9ad83bef1c9f736d1836687c950d1275caece0d46ab9f3b0e95d9cf560eb8134e8346b35e0a6f60e6a87a14c4aeb3e0d06158390660a52a6e44b524c1e16de2bf99870f78fc81d267072bc63e97d3f26d23fd59799ff2c847d6a724cebc2377a582ba73d99a610a095c28d66c60910ac64b7d18847fa98fd8528b72e0a149b082c731575b2e2763e67c821ba29eecd8b8c87981c4fb1fbbaaa4e8aa077ec98de1362fc7af7a0ac5e3297fd0d924124b2e255b5cc4f6b0873f3d34418d5ae0d6f734628f38cb9b856b2db3fbb2fafb76983eabc51a348e55789e997fa25cbe6e5031bd2e33d4e2686f964a65d1abf7f96a20a8b270b1522ace4adf6fdade5cd3f101574960d13267e2382f70027ebe5ef7f9418e14e6a8a130d2aec2253c8fe21825e3295774db0c9b1340ea28a96589ba0d9f79aa61b92aea6f704ef7f716d849b8c77e6922e198a086d8133491d0bb85b925825a6d307d7cc8f09c655aa3edabf84c75560dfb279ee3e8b825323279edc58c3161e72cf9ae02ef80d500da922c0abeb8b164abd9c17ef7c02e89000d67b0c2ddd078cacbf37c4826be3845948d598980d63c1d7aade89d0637d80a4c102a35eb027a08ef90cc20d17fc514926914e68e5de54b861200ffa4ce1cbc16e4ecf342a1176cdb561f7dea38b3ae0fd81260f72d34e6f33d364cf313d3b3161410dcbf5f0f0579a1d235b49bb5d27f85825b94f1899e7846d0292ad912d934574f918700000dbfb39d662e6e0f2496182d012af8b4bebbdfa1d68e3e988869fb5cd9612db97e6cc574444f4b5025ec9827bafc55341bf6ad3fd4fab2ee43f343cb9bcec0c38384b5699e5c6d5973ba591978275c51a40200d340b9ed3681f08c69f58320f538f9cd78a34eb6ed55710d2478ea4bd15813921817b42f88f1bb038033b519668f0a2e8693b9a19c7bcf96eec04bda625b31c32f4286be922ab2c87aa30310c8f46551450d5bc26b5fbfdedaae0f756384023bb9a28d3200cfeaedd63d6afe076513e8ad73d16607cd4ede16344e60d8707357e82b1089258c56d851a435e23ce0919825e04471dd61a44c43e87c2959d4e89311a30ee8be010094d0ef109bb210dda58b21b685b9e9c078c9ded6117d9a88dd77992f870a275a692188dafcf6e89ba87b0eb61011de031fda25fb3349901d40da2bbdb76eda417c9fafd90fb23504ab150ca0033b65ccd4e990cb2ba86ba3aaa79d0df4f2e4e4afa565e66d28aa167f835d080bf1d41d0e52dbf81c671f8eacae234bf4fc328302671fab46613b73daf2ace80aff2f80f6a9d84b82480178cc612aa90adfc80ab3bba7d1527fc6ab04f009011bf093494a0d329df4e53d855b1c0ff6a25d22052b3a778e1ca2fbe59c9eeedf99e13682d06da269560524ffa0f404b73b946edf900ee958ceba09a051e27a620fb78e7a352c182c8c2981ce822eeaf6323965b4b3f322d40d406a158b6f3cf5d74822de952fefc341d0dead6c1c8fed8e48e0a85b51c1dcc7796d3f45bb1f50467a475da76c356c9e031b096867da1dbb89c3a038d475dbcdb2df1278d5dba55c2fb5ba6a9778c2a244198491f0f711cdb2ef0332f347afffb1b098b4c59041ccb0c286bb2dd40e7ec713f6ffe0b1067678c748615dae3c1e090f3739a9035767fb9972580d19fdef49a5071f99c3706b8fa4991f430721cf3ca11af0e3bd7c4d0cd0ab5b7d98ee66730c20a098110e4a15ce0bfc88c41fe375f261fe3557e14eb5ff4a2cdf6a008fd7b6702951b8456e940fbd269a0f3ed5146c03cfecce67027d579e1226bd7b7381827453550343566508d38790ee838c3bf85c6c91a45e7a44752f57313533a3e82e4042e65d346afb20c0527575f79080aef4e1aa8d5868d190c8d37bdae7592e41bed37b9d4c30d8126d3debde02dff25f5ef1e48133e2a41cd55347bd23dcce57a00189619db629c530dc112d22ac72bce353681264b5175be40b3ba84408d0f56762cc720e96c128447be7128748e185be2640115556bac64d060207e629b0144e501c1c49c6abd15c7982b01e22da2ad04bb28df1a27f31e18040c16406071d798bb40d901d001e22cc5ed870d08702f49f0021814cdd814901a13c7ab061bb4b8172c639b3449e24f656fee58186e69e6874ea95d946da781b49ca080ffb4a3c87746c661f43e9be52d0ba2ee368b9c143687c8846abac599069decf41e69fddcadf31c5f715917df12df4eedbfcc5805fe8e661b8fcd7b130d7bcc4a9a152de93a15dddacf3cf52479956185a3c5000d18ddce0236d5858c0d8761bca7446e3d30f3e8f48d5e8f86a60cbe46f038b1028ffd35590bdacfeebb86e28d42a923bdc3f9a307b919341a2a7dda096d41070da245c2c424aebe4a4bb9863169454d09f25fd0aa2da7bfc97ad7aca886dd998e041133e07899ad48f7cda600de48ac3951152dfbe6331b8acae24cfd2dd2b14696c75040685c756942a0d049ee9863a2e480388f93876f3910ecb3a59fa16c25b2b3636a542f92744495e10a4ce37f19f5c2256e2d61775d388e2a86b52f76add2f956aa02501f5badb94da12595b2bbf88b05dc70caae6766fd3df4f299d0ff71ce787249b255ea49b3d33b3f1a8c9403cb75d64264465c3578538382b23d721f8a49134020ca2d9e887d9949624ac6d63322b6507e277a0020db9bfa2928736b96c72fa3406a95adfe6b374ffa27001d37d3bbe727e75c257834572026c511f57dce67153a4008f9e75e07ed9237f600005800ee667c137fc78bc4fd4ebf4d228979ab0ccafbcd8b8daad76fb2abcfc585377ea6e19f170db898b950a7b0f4e75466a2ba26e7d60e0a6f5c54a3fe78677f3362c5b01ae791b62ee8a5d0fd65b739ece4f3b758d05a8e4e4ea7e4866ee67750ce2769f72a9f45780eadfae73b42d4dd4c614c797c694ece8af88cc732edabfa26ace57de54835c7551154dfa3be11a0d3b5845ac97b2da84410a652e72cd563acbb2b02bb59370cebaaa80014e3ad280944eae6fbf8d5f85237257bb5b8e5ec3e52dc06f8394176b325a577804e9eb78d7015172d17ed15f905f705d56687f53988bb207c74fbeb2b03a700258e835362886239f4d8f1c2cf6d4d10ff26d2579ea40a5fb99e5b6d01cdeda050d3faa78ed674f2899be08332086c8bf0410a7d06099c50a2d949d49a0f21b43bcdfbdf435875cf5a9def46db63746574ee8a5b1fbcef411154e914dd9e5bb1b1bd2944581083fb66a017e7972df3daefc487e4198cb281d3a80637d52b41738b7f1a57c867d5b2ee5d72465657593339506fd0c3807cd6445eb54cfb5ca9d35ef93eec6383224ebf85197eb6ed75f6c324f6a0345a25be6bb52ed347e57ccb059b903fb7db4e9f46513a4158ce29c1f5d6081b556bbc471e89225cad81aed34dae0f90ee8e7237b3b286e29b49d7a1700c537b28571f7d7e2a55e10792d6f7779ddefa3febdea5693048372a45903c04f1035a96c6cfbe6f6c2b754581aac02f8a70e698be6e37fd411cf4b76317b47683f6b0f80dfdeef3a9767c7e5c30dff786093a21477431fea0458023953700"}) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) ioctl(r0, 0xc138fd05, &(0x7f0000000000)="0400000002000000000000007e0100003801") 21.066604568s ago: executing program 0 (id=554): r0 = socket$inet6(0xa, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x0, &(0x7f0000000180)}) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000040)=0x7, 0x4) r1 = dup(r0) bind$unix(r1, &(0x7f00000001c0)=@abs={0xa, 0x2}, 0x6e) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa, 0x4e20, 0x7ffffffb, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x26}}}, 0x1c) 20.940557675s ago: executing program 38 (id=554): r0 = socket$inet6(0xa, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x0, &(0x7f0000000180)}) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000040)=0x7, 0x4) r1 = dup(r0) bind$unix(r1, &(0x7f00000001c0)=@abs={0xa, 0x2}, 0x6e) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa, 0x4e20, 0x7ffffffb, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x26}}}, 0x1c) 20.042429435s ago: executing program 3 (id=572): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1c0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) removexattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)=@known='system.posix_acl_default\x00') umount2(&(0x7f0000000400)='./file0\x00', 0x2) syz_fuse_handle_req(r0, &(0x7f0000006140)="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", 0x2000, &(0x7f0000000700)={&(0x7f00000002c0)={0x50, 0xffffffffffffff8c, 0x8000000000000000, {0x7, 0x2b, 0x0, 0x2c000}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 19.980582718s ago: executing program 3 (id=574): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x268}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x80000e, 0x2072, 0xffffffffffffffff, 0xd0fb8000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$UFFDIO_MOVE(r0, 0xc028aa05, 0x0) 19.132530018s ago: executing program 3 (id=580): mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x20132, 0xffffffffffffffff, 0xb2993000) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) wait4(r0, 0x0, 0x8, 0x0) ptrace$poke(0x4, r0, &(0x7f00000011c0), 0xfffffffffffffffe) 19.084619998s ago: executing program 3 (id=581): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101090, 0x0) chroot(&(0x7f0000000040)='./file0/../file0\x00') mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) unshare(0x22020600) pivot_root(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0\x00') 19.050645465s ago: executing program 3 (id=582): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd700000000000ac1e0001000000000000000000000000ac1414aa0000000000000000000000000000399f000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000feffffffff7f40000200000000000008ffffffff00000000010006000000000044000500ac1414bb000000000000000000000000000000003c00000002000000000000000000000000000000000000010600000004"], 0xfc}, 0x1, 0x0, 0x0, 0x4008000}, 0x600c010) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={r2, 0x18000000000002a0, 0x22, 0x0, &(0x7f0000000580)="b9ff0300600d698cff9e13f008004de7f9c764360000ff8700135433f6e31e17128c", 0x0, 0xfffffffe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 18.903770717s ago: executing program 3 (id=583): unshare(0x60600) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r1 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r0}, 0x8) close(r1) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000005c0)={r1, 0x30, 0x0}, 0x10) 18.903673946s ago: executing program 39 (id=583): unshare(0x60600) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r1 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r0}, 0x8) close(r1) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000005c0)={r1, 0x30, 0x0}, 0x10) 7.59943205s ago: executing program 8 (id=804): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)='W', 0x1}], 0x1}, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r0, 0xc008744c, &(0x7f0000000180)) 7.5993588s ago: executing program 4 (id=805): mkdir(&(0x7f00000003c0)='./file0\x00', 0x25) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x82, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c) r1 = openat$incfs(r0, &(0x7f00000001c0)='.pending_reads\x00', 0x0, 0x130) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[], 0x1f0}}, 0x8800) ioctl$TIOCL_GETKMSGREDIRECT(r1, 0x40106726, &(0x7f00000000c0)) 7.590110972s ago: executing program 4 (id=806): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000000)='./mnt\x00', 0x840, &(0x7f0000000040), 0x1, 0x242, &(0x7f00000002c0)="$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") creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mknod$loop(&(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800, 0x1) mknod$loop(&(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 7.50822478s ago: executing program 8 (id=809): r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r0, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x68}) ftruncate(0xffffffffffffffff, 0xffff) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa07, &(0x7f0000000280)={{&(0x7f0000ffc000/0x2000)=nil, 0x2000}}) 7.50810202s ago: executing program 4 (id=810): r0 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000001740)=0x2, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4400000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b00010062726964676500"], 0x44}, 0x1, 0x0, 0x0, 0x24048004}, 0x4000) 7.452904311s ago: executing program 8 (id=812): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys_dbg\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys_dbg\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) mount$bind(0x0, 0x0, 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000280)='./sys_dbg\x00', 0x0) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 7.452712391s ago: executing program 8 (id=813): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000240)='./file1\x00', 0x1200080, &(0x7f00000010c0)=ANY=[@ANYBLOB="666c7573682c6e6f646f74732c646973636172642c646d61736b3d30303030303030303030303030303030303030303030322c646d61736b3d30303030303030303030303030303030303030303137372c646f74732c6e6f646f74732c71756965742c646f74732c0023c3cb4d2e3cbf18508098fe0de2af38db67d42d1bc4ab714d52f019082433fc9ca2d7174b2c4ece31c9f4c7a4d53914e100"/167], 0x5, 0x140, &(0x7f0000000000)="$eJzs27Fq21AUBuDj2m3ddvFcOgi6dDJtn6CluFAqaEnwkEwJOFnsYIgXJZMfJS8YCJ683ZAo2Imxhwy2IPq+RT/8CO4dpMMV6OjT2XAwnpyO/8+i3WhE60dkMW9EJ15FM0rTAABeknlKcZNSSm+n8e4qUkpVrwgA2DbzHwDqx/wHgPox/wGgfvYPDv/+zPPeXpa1I66nRb/ol9ey//0n733N7nWWd82Kot9c9N/KPnvav473D/33tf2b+PK57O+6X//ylf5DDLa/fQAAAKiFbraw9nzf7W7qy/To+8DK+b0VH1s72wYA8AyTi8vh8Wh0ci4IgrAIVb+ZgG1bPvRVrwQAAAAAAAAAAAAAANhkF78TVb1HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAWHUbAAD//0DvUik=") syz_mount_image$fuse(0x0, &(0x7f0000000100)='./bus\x00', 0x40, 0x0, 0x0, 0x0, 0x0) mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x1004002, 0x0) chdir(&(0x7f00000001c0)='./bus\x00') mount$incfs(&(0x7f0000000400)='./bus\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000200), 0x4482, 0x0) 7.452615101s ago: executing program 4 (id=814): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='configfs\x00', 0x200, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x103090, 0x0) mount$bind(0x0, 0x0, 0x0, 0x4000, 0x0) mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x24000, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) 7.442995394s ago: executing program 4 (id=815): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000000300)="$eJzs3TFoM2UcBvDnLomf/b4gVRdBUEFEtFDqJrjURaEgpYgIKlREXJRWqC1urZOLg84qnVyKuFkdpUtxUQSnqh3qImhxsDjoELlcK9VGFFNz8t3vB5fcJe97//e4e95kOS5Aa00nmU/SSTKTpJekON/grnqZPt3cntpfTgaDx38shu3q7dpZv2tJtpI8mGSvLPJiN9nYffro54NH731jvXfPe7tPTU30IE8dHx0+dvLu4usfLjyw8fmX3y8WmU//D8d1+YoRn3WL5Jb/otj/RNFtegT8E0uvfvBVlftbk9w9zH8vZeqT9+baDXu93P/OX/V964cvbp/kWIHLNxj0qt/ArQHQOmWSfopyNkm9Xpazs/V/+K87V8uXVtdemXlhdX3l+aZnKuCy9JPDRz6+8tG1P+X/u06df+D6VeX/iaWdb6r1k07TowEmqcr/zLOb90X+oXXkH9pL/qG95B/aS/6hveQf2kv+ob3kH9pL/qG95B/a63z+AYB2GVxp+g5koClNzz8AAAAAAAAAAAAAAAAAAMBF21P7y2fLpGp++nZy/HCS7qj6neHziJMbh69XfyqqZr8r6m5jeebOMXcwpvcbvvv6pm+brf/ZHc3W31xJtl5LMtftXrz+itPr79+7+W++7z03ZoExPfRks/V/3Wm2/sJB8kk1/8yNmn/K3DZ8Hz3/9KvzN2b9l38ZcwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABMzG8BAAD//8n0bSk=") r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000106a053103000000000001090224000100008000090400101c0300010009210000000122f80409058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) io_uring_setup(0x899, 0x0) 7.368268719s ago: executing program 8 (id=816): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'vlan0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000004c0)={r2, 0x3, 0x6, @broadcast}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000200)={r2, 0x3, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2d}}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r2, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}}, 0x10) 7.319688399s ago: executing program 4 (id=817): unshare(0x40400) r0 = epoll_create1(0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = epoll_create1(0x0) r3 = fcntl$dupfd(r2, 0x0, r1) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000080)={0x10000004}) 7.319531669s ago: executing program 40 (id=817): unshare(0x40400) r0 = epoll_create1(0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = epoll_create1(0x0) r3 = fcntl$dupfd(r2, 0x0, r1) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000080)={0x10000004}) 7.298650534s ago: executing program 8 (id=819): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) mremap(&(0x7f00002b5000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) mprotect(&(0x7f0000936000/0x9000)=nil, 0x9000, 0x0) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x15) 7.231068348s ago: executing program 41 (id=819): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) mremap(&(0x7f00002b5000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) mprotect(&(0x7f0000936000/0x9000)=nil, 0x9000, 0x0) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x15) 1.122925872s ago: executing program 6 (id=967): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) futex(&(0x7f0000000200)=0x1, 0x6, 0x0, 0x0, 0x0, 0xffffffff) 1.096871628s ago: executing program 5 (id=968): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f00000001c0)="48b801b89734000000004d9823c80f23f835080050000f23f8c744240004000000c744240200000000c7442406000000000f01d1670f2107c74424002a010000ff2c24b8010000000f01c10f23c00f21f835020002000f23f8260f01d1f341f4c4017d10e548b8c0770c90f03a5f344b0fc76f000f20e0f3440fc7370f22e035080000000f23f8", 0x87}], 0x1, 0x21, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 907.303428ms ago: executing program 2 (id=974): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000003280)={0x73622a85, 0x100b, 0x4}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@acquire], 0xffffffffffffff47, 0x0, 0x0}) dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) 876.355164ms ago: executing program 7 (id=976): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001500)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x2f00020b, 0xe, 0x0, &(0x7f0000000240)="63ecedf7b98637fa929140ac5ea1", 0x0, 0xefdf, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080), 0xc) 845.549011ms ago: executing program 2 (id=978): socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @remote}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x35) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f0000000000)={'vlan0\x00', @local}) 767.697587ms ago: executing program 7 (id=979): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x22003, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000240)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000580)={[0xa, 0x1f8, 0xff, 0xd6bffffffffffe, 0x7ff, 0x8000040000000001, 0xb3, 0x8, 0x4b1d, 0x4000000000000004, 0xffffffffffffffff, 0x2081, 0x2000000000007, 0x1ff, 0xe6, 0x80000000000005], 0x8000000, 0x383fc2}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 767.507947ms ago: executing program 2 (id=980): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x42, &(0x7f0000000080)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x2, 0x34, 0xfffd, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x8, 0x10, 0x0, 0x0, 0x2d9, {[@timestamp={0x8, 0xa, 0x29, 0xfffffaa4}]}}}}}}}, 0x0) 750.494311ms ago: executing program 2 (id=981): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_TSC_KHZ_cpu(r2, 0xaea2, 0xfffffffeffffffff) ioctl$KVM_RUN(r2, 0xae80, 0x0) 682.175125ms ago: executing program 7 (id=982): gettid() sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000002, &(0x7f0000000480)={[{@rodir}, {@numtail}, {@rodir}, {@uni_xlate}, {@shortname_lower}, {@iocharset={'iocharset', 0x3d, 'cp737'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-14'}}, {@fat=@codepage={'codepage', 0x3d, '862'}}, {@shortname_lower}, {@shortname_win95}, {@iocharset={'iocharset', 0x3d, 'cp936'}}, {@rodir}, {@utf8no}, {@fat=@fmask={'fmask', 0x3d, 0x7ff}}, {@fat=@flush}, {@shortname_winnt}]}, 0x81, 0x2d5, &(0x7f0000000b80)="$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") write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x1006) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.empty_time\x00', 0x275a, 0x0) 611.33773ms ago: executing program 2 (id=984): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x20800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x6) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f00009b3000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000000)="b9800000c00f3235004000000f30b9fa000000130f01d9300d76c4020a1bf7b805000000b90000c0fe0f3cae0a41d941d900b80c0000000f23c00f21f83501000f000f23f8ba00e500000f30660fc775022e0fba600c9864660ffc76002f3166b85766baa00066ed00d0", 0x6a}], 0x1, 0x1, 0x0, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f00000005c0)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 611.13899ms ago: executing program 7 (id=985): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x29}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x815}, 0x40080) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./proc/net/netfilter/nfnetlink_queue\x00', 0x0, 0x0) read(r1, &(0x7f0000000400), 0x1000) 578.566217ms ago: executing program 1 (id=986): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000140)={[{}, {@oldalloc}, {@resuid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@block_validity}, {@jqfmt_vfsv1}]}, 0x3, 0x447, &(0x7f0000000380)="$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") socket$inet6(0xa, 0x5, 0xfffffffa) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.empty_time\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r0, 0xc986f000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 551.973933ms ago: executing program 7 (id=987): socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6060626000102c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa11000001"], 0x0) syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) syz_clone(0x0, 0x0, 0x43, 0x0, 0x0, 0x0) syz_emit_ethernet(0x19a, &(0x7f00000002c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd60eaff02000c2c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa00000c"], 0x0) 399.699555ms ago: executing program 7 (id=988): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x1411c2, 0x91) close(r0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x7, 0x8, 0x22}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r2, &(0x7f0000001080), &(0x7f00000004c0)=@udp6=r1}, 0x20) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100), 0x1000000, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 337.892568ms ago: executing program 1 (id=989): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0x78b}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x3) ioctl$KVM_GET_MP_STATE(r2, 0x8004ae98, &(0x7f0000000080)) 286.933189ms ago: executing program 2 (id=990): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x101800, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) remap_file_pages(&(0x7f00003e3000/0x7000)=nil, 0x7000, 0x0, 0x4, 0x1000) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) 203.667586ms ago: executing program 6 (id=991): syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000000)='./bus\x00', 0x10000, &(0x7f0000000080)=ANY=[@ANYBLOB='iocharset=cp1255,errors=continue,\x00'/49], 0x1, 0x1535, &(0x7f00000001c0)="$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") socket$unix(0x1, 0x5, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000080)=""/237, 0xed) 191.206969ms ago: executing program 1 (id=992): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) 180.192501ms ago: executing program 6 (id=993): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GETFSUUID(r2, 0x80487436, 0x0) 127.783783ms ago: executing program 5 (id=994): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000740)=0xffffffffffffffff) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000003640)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xe6e40000}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 127.559793ms ago: executing program 1 (id=995): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000075"], 0x0, 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10) 127.481123ms ago: executing program 5 (id=996): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, r0) setpgid(0x0, r0) tkill(r0, 0x7) wait4(r0, 0x0, 0x0, 0x0) ptrace(0x10, r0) 118.482935ms ago: executing program 1 (id=997): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x1, 0x0, &(0x7f00000001c0)=""/43, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1) 98.554599ms ago: executing program 6 (id=998): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x9) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000100)=0x4) pwritev(r0, &(0x7f0000000080)=[{&(0x7f00000003c0)="00214500002800000000400600000a0000010a000002005000500000000100000001501003e800000001", 0x2a}], 0x1, 0x0, 0x0) pwritev(r0, &(0x7f0000000080)=[{&(0x7f00000003c0)="00214500002800000000400600000a0000010a000002005000500000000100000001501003e800000000", 0x2a}], 0x1, 0x0, 0x0) 27.806654ms ago: executing program 1 (id=999): r0 = syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r0, &(0x7f0000000080)={0x0, 0x0}) ioctl$KVM_GET_MSRS_cpu(r3, 0xc008ae88, &(0x7f00000000c0)={0x1, 0x0, [{0xc0010002, 0x0, 0x6}]}) 27.543004ms ago: executing program 5 (id=1000): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x9c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000104000500010001"], 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) close(0x4) 27.445224ms ago: executing program 5 (id=1001): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x103496, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x21d000, 0x0) syz_clone(0x40011, 0x0, 0x0, 0x0, 0x0, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f00000000c0)='./file0/../file0/../file0\x00') 27.361414ms ago: executing program 5 (id=1002): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xa, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1808000001"], 0x0, 0x4, 0x0, 0x0, 0x40f00, 0x29, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x8) r1 = socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000), 0x8) 11.315077ms ago: executing program 6 (id=1003): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002064000000000000002020207bd2000000000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000000000008500000058"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x28}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 0s ago: executing program 6 (id=1004): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) timer_create(0x7, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, r0, 0x0, 0x4, &(0x7f0000000480)) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): EXT4-fs warning (device loop6): ext4_enable_quotas:7080: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 47.019925][ T1601] EXT4-fs (loop6): Cannot turn on quotas: error -22 [ 47.021707][ T28] kauditd_printk_skb: 24 callbacks suppressed [ 47.021721][ T28] audit: type=1400 audit(1790645335.342:378): avc: denied { create } for pid=1597 comm="syz.8.466" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=blk_file permissive=1 [ 47.026722][ T1601] EXT4-fs error (device loop6): ext4_ext_check_inode:520: inode #13: comm syz.6.465: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 47.033424][ T1598] EXT4-fs error (device loop8): ext4_do_update_inode:5281: inode #2: comm syz.8.466: corrupted inode contents [ 47.054642][ T1601] EXT4-fs error (device loop6): ext4_orphan_get:1410: comm syz.6.465: couldn't read orphan inode 13 (err -117) [ 47.072671][ T1598] EXT4-fs error (device loop8): ext4_dirty_inode:6158: inode #2: comm syz.8.466: mark_inode_dirty error [ 47.084263][ T1601] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 47.095530][ T1598] EXT4-fs error (device loop8): ext4_do_update_inode:5281: inode #2: comm syz.8.466: corrupted inode contents [ 47.126871][ T1598] EXT4-fs error (device loop8): __ext4_ext_dirty:202: inode #2: comm syz.8.466: mark_inode_dirty error [ 47.136186][ T1601] EXT4-fs (loop6): warning: mounting fs with errors, running e2fsck is recommended [ 47.148694][ T59] usb 1-1: Using ep0 maxpacket: 16 [ 47.154262][ T1601] EXT4-fs warning (device loop6): ext4_enable_quotas:7080: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 47.159577][ T59] usb 1-1: config 1 has an invalid interface number: 105 but max is 0 [ 47.177359][ T59] usb 1-1: config 1 has no interface number 0 [ 47.178310][ T1392] EXT4-fs (loop8): unmounting filesystem. [ 47.184039][ T59] usb 1-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 47.199660][ T59] usb 1-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 47.204247][ T1601] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended [ 47.209709][ T59] usb 1-1: config 1 interface 105 has no altsetting 0 [ 47.211189][ T59] usb 1-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 47.245957][ T59] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 47.246004][ T1601] EXT4-fs warning (device loop6): ext4_enable_quotas:7080: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 47.269158][ T59] usb 1-1: Product: syz [ 47.273334][ T59] usb 1-1: Manufacturer: syz [ 47.277942][ T59] usb 1-1: SerialNumber: syz [ 47.283592][ T1585] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 47.283952][ T1002] EXT4-fs (loop6): unmounting filesystem. [ 47.291144][ T1585] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 47.430561][ T1622] loop4: detected capacity change from 0 to 512 [ 47.508714][ T6] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 47.559737][ T28] audit: type=1400 audit(1790645335.882:379): avc: denied { mounton } for pid=1625 comm="syz.4.475" path="/120/file0" dev="tmpfs" ino=669 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 47.700792][ T6] usb 9-1: New USB device found, idVendor=0925, idProduct=8888, bcdDevice= 0.00 [ 47.713746][ T1616] loop6: detected capacity change from 0 to 131072 [ 47.715828][ T1631] loop4: detected capacity change from 0 to 512 [ 47.720335][ T6] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 47.723438][ T1585] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 47.742352][ T6] usb 9-1: config 0 descriptor?? [ 47.749266][ T1616] F2FS-fs (loop6): Invalid segment/section count (458783, 24 x 150994945) [ 47.757937][ T1616] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 47.766825][ T1631] EXT4-fs (loop4): Test dummy encryption mode enabled [ 47.772216][ T1585] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 47.781881][ T1616] F2FS-fs (loop6): invalid crc value [ 47.789063][ T1616] F2FS-fs (loop6): Found nat_bits in checkpoint [ 47.804492][ T1631] EXT4-fs (loop4): re-mounted. Quota mode: writeback. [ 47.819368][ T1631] EXT4-fs (loop4): re-mounted. Quota mode: writeback. [ 47.830253][ T1616] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 47.837573][ T1616] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4 [ 47.873767][ T1640] loop7: detected capacity change from 0 to 7 [ 47.881801][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 47.891137][ C0] buffer_io_error: 6 callbacks suppressed [ 47.891152][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 47.904968][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 47.914127][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 47.922226][ T366] loop7: unable to read partition table [ 47.969154][ T1640] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 47.979096][ T1640] Buffer I/O error on dev loop7, logical block 0, async page read [ 47.987189][ T1640] loop7: unable to read partition table [ 48.000719][ T1640] loop7: partition table beyond EOD, truncated [ 48.007144][ T1640] loop_reread_partitions: partition scan of loop7 () failed (rc=-5) [ 48.150578][ T6] smartjoyplus 0003:0925:8888.0007: unknown main item tag 0x0 [ 48.158349][ T6] smartjoyplus 0003:0925:8888.0007: unknown main item tag 0x0 [ 48.166264][ T6] smartjoyplus 0003:0925:8888.0007: item fetching failed at offset 2/8 [ 48.174985][ T6] smartjoyplus 0003:0925:8888.0007: parse failed [ 48.181943][ T6] smartjoyplus: probe of 0003:0925:8888.0007 failed with error -22 [ 48.298614][ T1649] loop3: detected capacity change from 0 to 512 [ 48.309189][ T1649] EXT4-fs (loop3): orphan cleanup on readonly fs [ 48.316320][ T1649] EXT4-fs warning (device loop3): ext4_enable_quotas:7080: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 48.331163][ T1649] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 48.337977][ T1649] EXT4-fs error (device loop3): ext4_ext_check_inode:520: inode #13: comm syz.3.481: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 48.356205][ T1649] EXT4-fs error (device loop3): ext4_orphan_get:1410: comm syz.3.481: couldn't read orphan inode 13 (err -117) [ 48.363023][ T19] usb 9-1: USB disconnect, device number 3 [ 48.374489][ T6] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 48.390372][ T1649] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 48.408455][ T59] aqc111 1-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 48.410164][ T1649] EXT4-fs warning (device loop3): ext4_enable_quotas:7080: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 48.420269][ T59] aqc111 1-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 48.446944][ T59] aqc111 1-1:1.105 eth1: register 'aqc111' at usb-dummy_hcd.0-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, e6:25:5f:67:01:5f [ 48.459900][ T1649] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 48.471967][ T59] usb 1-1: USB disconnect, device number 8 [ 48.481883][ T59] aqc111 1-1:1.105 eth1: unregister 'aqc111' usb-dummy_hcd.0-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 48.494374][ T1649] EXT4-fs warning (device loop3): ext4_enable_quotas:7080: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 48.539063][ T59] aqc111 1-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 48.548432][ T59] aqc111 1-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 48.559761][ T6] usb 7-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 48.578581][ T6] usb 7-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 48.583296][ T59] aqc111 1-1:1.105 eth1 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 48.598039][ T6] usb 7-1: config 1 interface 0 has no altsetting 0 [ 48.599517][ T6] usb 7-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 48.614592][ T6] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 48.623297][ T6] usb 7-1: Product: syz [ 48.627572][ T6] usb 7-1: Manufacturer: syz [ 48.632354][ T6] usb 7-1: SerialNumber: syz [ 48.641345][ T1646] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 48.648915][ T1646] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 48.831708][ T1677] F2FS-fs (loop4): invalid crc value [ 48.832179][ T1687] EXT4-fs error (device loop3): ext4_orphan_get:1405: inode #15: comm syz.3.483: inode has both inline data and extents flags [ 48.851735][ T1677] F2FS-fs (loop4): Found nat_bits in checkpoint [ 48.869054][ T1687] EXT4-fs error (device loop3): ext4_orphan_get:1410: comm syz.3.483: couldn't read orphan inode 15 (err -117) [ 48.913245][ T1677] F2FS-fs (loop4): Start checkpoint disabled! [ 48.924274][ T1677] F2FS-fs (loop4): f2fs_disable_checkpoint() finish, err:0 [ 48.942714][ T1677] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 48.945905][ T1691] ext4 filesystem being mounted at /11/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 49.097209][ T354] kworker/u4:5: attempt to access beyond end of device [ 49.097209][ T354] loop4: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 49.164797][ T1695] F2FS-fs (loop3): Invalid SB checksum offset: 0 [ 49.191874][ T1695] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 49.212606][ T1695] F2FS-fs (loop3): invalid crc value [ 49.243272][ T1695] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 49.302894][ T28] audit: type=1400 audit(1790645337.622:380): avc: denied { mounton } for pid=1705 comm="syz.4.489" path="/syzcgroup/unified/syz4" dev="cgroup2" ino=24 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 49.325979][ T1695] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 49.335611][ T1695] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 49.418425][ T10] kworker/u4:1: attempt to access beyond end of device [ 49.418425][ T10] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 49.442758][ T1695] VFS:Filesystem freeze failed [ 49.642433][ T1709] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 49.658060][ T1709] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 49.667330][ T6] (unnamed net_device) (uninitialized): Assigned a random MAC address: 52:22:be:97:b3:e0 [ 49.680791][ T1709] F2FS-fs (loop4): invalid crc value [ 49.688346][ T6] rtl8150 7-1:1.0: eth1: rtl8150 is detected [ 49.704873][ T6] usb 7-1: USB disconnect, device number 3 [ 49.711821][ T1709] F2FS-fs (loop4): Found nat_bits in checkpoint [ 49.750229][ T1709] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 49.757432][ T1709] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 49.848382][ T28] audit: type=1400 audit(1790645338.162:381): avc: denied { map } for pid=1708 comm="syz.4.490" path="/128/file0/blkio.bfq.io_wait_time_recursive" dev="loop4" ino=455 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 49.876144][ T1708] syz.4.490: attempt to access beyond end of device [ 49.876144][ T1708] loop4: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 49.888739][ T298] usb 4-1: new low-speed USB device number 5 using dummy_hcd [ 49.919522][ T543] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 49.931483][ T1699] F2FS-fs (loop8): Invalid segment/section count (458783, 24 x 150994945) [ 49.941384][ T1697] F2FS-fs (loop0): invalid crc value [ 49.944966][ T1699] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 49.949876][ T543] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 49.964143][ T1699] F2FS-fs (loop8): invalid crc value [ 49.989963][ T543] kworker/u4:6: attempt to access beyond end of device [ 49.989963][ T543] loop4: rw=1, sector=45104, nr_sectors = 8 limit=40427 [ 50.007841][ T1699] F2FS-fs (loop8): Found nat_bits in checkpoint [ 50.008053][ T1697] F2FS-fs (loop0): Found nat_bits in checkpoint [ 50.073526][ T1699] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0 [ 50.082157][ T298] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 50.094550][ T1699] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e4 [ 50.102160][ T298] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 50.112135][ T1697] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 50.166772][ T298] usb 4-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 50.182682][ T28] audit: type=1400 audit(1790645338.502:382): avc: denied { rename } for pid=1698 comm="syz.8.486" name="file1" dev="loop8" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 50.186206][ T298] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 50.228981][ T1749] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Dropping request. Check SNMP counters. [ 50.268515][ T298] usb 4-1: config 0 descriptor?? [ 50.615040][ T28] audit: type=1400 audit(1790645338.932:383): avc: denied { setopt } for pid=1768 comm="syz.6.510" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 50.669018][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 50.678381][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 50.686246][ T1762] F2FS-fs (loop4): Small segment_count (9 < 1 * 24) [ 50.693006][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 50.693335][ T1762] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 50.702258][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 50.702613][ T366] loop7: unable to read partition table [ 50.713902][ T298] hid-generic 0003:0C70:F0B6.0008: hidraw0: USB HID v0.00 Device [HID 0c70:f0b6] on usb-dummy_hcd.3-1/input0 [ 50.725097][ T1762] F2FS-fs (loop4): Found nat_bits in checkpoint [ 50.760064][ T366] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 50.773696][ T366] Buffer I/O error on dev loop7, logical block 0, async page read [ 50.776028][ T1762] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 50.781667][ T1774] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 50.789030][ T1762] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 50.801781][ T1774] Buffer I/O error on dev loop7, logical block 0, async page read [ 50.813225][ T1774] loop7: unable to read partition table [ 50.820323][ T1774] loop7: partition table beyond EOD, truncated [ 50.826704][ T1774] loop_reread_partitions: partition scan of loop7 () failed (rc=-5) [ 50.847263][ T291] syz-executor: attempt to access beyond end of device [ 50.847263][ T291] loop4: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 50.908752][ T298] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 50.944302][ T28] audit: type=1400 audit(1790645339.262:384): avc: denied { execute } for pid=1780 comm="syz.6.503" path=2F6D656D66643A0B656DDA9952406DFCFE9B232AFF202864656C6574656429 dev="tmpfs" ino=1098 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 51.065409][ T28] audit: type=1400 audit(1790645339.382:385): avc: denied { write } for pid=1710 comm="syz.3.491" name="hidraw0" dev="devtmpfs" ino=979 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 51.089162][ T368] usb 4-1: USB disconnect, device number 5 [ 51.119669][ T298] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 51.138688][ T298] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 51.148356][ T298] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 51.179986][ T298] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 51.198683][ T298] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 51.206898][ T298] usb 9-1: Product: syz [ 51.211185][ T298] usb 9-1: Manufacturer: syz [ 51.215874][ T298] usb 9-1: SerialNumber: syz [ 51.230348][ T298] hub 9-1:1.0: bad descriptor, ignoring hub [ 51.236286][ T298] hub: probe of 9-1:1.0 failed with error -5 [ 51.278915][ T59] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 51.440737][ T298] usblp 9-1:1.0: usblp0: USB Unidirectional printer dev 4 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 51.469895][ T59] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 51.481079][ T59] usb 5-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 51.494560][ T59] usb 5-1: config 0 interface 0 has no altsetting 0 [ 51.501355][ T59] usb 5-1: New USB device found, idVendor=056a, idProduct=00bb, bcdDevice= 0.00 [ 51.511020][ T59] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 51.520104][ T59] usb 5-1: config 0 descriptor?? [ 51.586915][ T28] audit: type=1400 audit(1790645339.902:386): avc: denied { name_bind } for pid=1791 comm="syz.0.506" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 51.618955][ T368] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 51.678737][ T298] usb 9-1: reset high-speed USB device number 4 using dummy_hcd [ 51.809963][ T368] usb 7-1: unable to get BOS descriptor or descriptor too short [ 51.818529][ T368] usb 7-1: config 129 has an invalid interface number: 80 but max is 0 [ 51.826926][ T368] usb 7-1: config 129 has an invalid interface number: 5 but max is 0 [ 51.835348][ T368] usb 7-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 51.844526][ T368] usb 7-1: config 129 has no interface number 0 [ 51.850871][ T368] usb 7-1: config 129 has no interface number 1 [ 51.857142][ T368] usb 7-1: config 129 interface 80 altsetting 11 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 51.871607][ T368] usb 7-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 51.883425][ T368] usb 7-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 51.896955][ T368] usb 7-1: config 129 interface 80 has no altsetting 0 [ 51.904642][ T24] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 51.912217][ T368] usb 7-1: config 129 interface 5 has no altsetting 0 [ 51.923726][ T368] usb 7-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00 [ 51.934035][ T59] wacom 0003:056A:00BB.0009: Unknown device_type for 'HID 056a:00bb'. Assuming pen. [ 51.944323][ T368] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 51.952937][ T368] usb 7-1: SerialNumber: syz [ 51.957693][ T59] wacom 0003:056A:00BB.0009: hidraw0: USB HID v0.00 Device [HID 056a:00bb] on usb-dummy_hcd.4-1/input0 [ 51.970582][ T59] input: Wacom Intuos4 12x19 Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:056A:00BB.0009/input/input8 [ 52.099796][ T24] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 52.111164][ T24] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 52.121557][ T24] usb 4-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 52.134472][ T24] usb 4-1: config 0 interface 0 has no altsetting 0 [ 52.141384][ T24] usb 4-1: New USB device found, idVendor=1b96, idProduct=0011, bcdDevice= 0.00 [ 52.145684][ T298] usb 5-1: USB disconnect, device number 5 [ 52.150600][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.165064][ T24] usb 4-1: config 0 descriptor?? [ 52.173334][ T368] usb 7-1: MIDIStreaming interface descriptor not found [ 52.197472][ T368] usb 7-1: USB disconnect, device number 4 [ 52.218854][ T316] usb 9-1: USB disconnect, device number 4 [ 52.225671][ T316] usblp0: removed [ 52.573484][ T24] input: HID 1b96:0011 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:1B96:0011.000A/input/input11 [ 52.652282][ T24] ntrig 0003:1B96:0011.000A: input,hidraw0: USB HID v0.04 Joystick [HID 1b96:0011] on usb-dummy_hcd.3-1/input0 [ 52.702779][ T1808] set_capacity_and_notify: 9 callbacks suppressed [ 52.702797][ T1808] loop6: detected capacity change from 0 to 256 [ 52.719753][ T28] audit: type=1400 audit(1790645341.042:387): avc: denied { mounton } for pid=1804 comm="syz.6.514" path="/49/file0/bus" dev="loop6" ino=1048653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=file permissive=1 [ 52.769167][ T1808] loop6: detected capacity change from 256 to 0 [ 52.778689][ C1] I/O error, dev loop6, sector 12 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 52.788034][ T1809] FAT-fs (loop6): Directory bread(block 3) failed [ 52.788115][ T24] usb 4-1: USB disconnect, device number 6 [ 52.794819][ C0] I/O error, dev loop6, sector 12 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 52.809930][ T1809] FAT-fs (loop6): Directory bread(block 3) failed [ 52.816643][ C0] I/O error, dev loop6, sector 12 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 52.832834][ T1480] udevd[1480]: setting owner of /dev/bus/usb/004/006 to uid=0, gid=0 failed: No such file or directory [ 52.832898][ T1809] FAT-fs (loop6): Directory bread(block 3) failed [ 52.873055][ T1810] fido_id[1810]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 52.898751][ T316] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 52.917309][ C0] I/O error, dev loop6, sector 12 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 52.927098][ T1002] FAT-fs (loop6): Directory bread(block 3) failed [ 52.936763][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 52.946122][ T1002] FAT-fs (loop6): unable to read boot sector to mark fs as dirty [ 53.088723][ T316] usb 9-1: Using ep0 maxpacket: 32 [ 53.095248][ T316] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 53.106312][ T316] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 53.116460][ T316] usb 9-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 53.125553][ T316] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.134325][ T316] usb 9-1: config 0 descriptor?? [ 53.165194][ T1819] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.175032][ T1819] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.182591][ T59] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 53.183268][ T1819] device bridge_slave_0 entered promiscuous mode [ 53.199497][ T1819] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.207181][ T1819] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.214901][ T1819] device bridge_slave_1 entered promiscuous mode [ 53.255063][ T1819] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.262127][ T1819] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.269401][ T1819] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.276435][ T1819] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.297454][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.305589][ T327] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.313400][ T327] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.324445][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.332850][ T327] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.339930][ T327] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.361505][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.370147][ T327] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.377303][ T327] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.386406][ T59] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 53.400879][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.408734][ T59] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 53.416530][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 53.427113][ T59] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 53.435174][ T1819] device veth0_vlan entered promiscuous mode [ 53.438999][ T59] usb 5-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 53.453813][ T59] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.463575][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 53.465828][ T1814] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 53.472543][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 53.480153][ T1814] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 53.487659][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 53.499774][ T59] pl2303 5-1:1.0: pl2303 converter detected [ 53.502864][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 53.515816][ T59] usb 5-1: pl2303 converter now attached to ttyUSB0 [ 53.525595][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 53.534508][ T1819] device veth1_macvtap entered promiscuous mode [ 53.545260][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 53.549698][ T316] savu 0003:1E7D:2D5A.000B: hiddev96,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.8-1/input0 [ 53.576510][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 53.659445][ T543] device bridge_slave_1 left promiscuous mode [ 53.665737][ T543] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.673266][ T543] device bridge_slave_0 left promiscuous mode [ 53.679626][ T543] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.687314][ T543] device veth1_macvtap left promiscuous mode [ 53.693501][ T543] device veth0_vlan left promiscuous mode [ 53.698770][ T6] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 53.699443][ T824] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 53.712843][ T1086] Bluetooth: hci0: command 0x1003 tx timeout [ 53.788245][ T1834] loop0: detected capacity change from 0 to 4096 [ 53.795908][ T1834] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 53.805232][ T1834] EXT4-fs (loop0): Test dummy encryption mode enabled [ 53.852654][ T19] usb 9-1: USB disconnect, device number 5 [ 53.859579][ T1840] netlink: 4 bytes leftover after parsing attributes in process `syz.9.524'. [ 53.871222][ T1834] overlayfs: failed to create directory ./bus/work (errno: 28); mounting read-only [ 53.928757][ T1814] pl2303 ttyUSB0: pl2303_get_line_request - failed: -110 [ 53.938773][ T1814] pl2303 ttyUSB0: pl2303_set_line_request - failed: -32 [ 53.941233][ T6] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 53.946043][ T1814] pl2303 5-1:1.0: pl2303_vendor_read - failed to read [000a]: -32 [ 53.966265][ T1814] pl2303 ttyUSB0: pl2303_set_control_lines - failed: -32 [ 53.971488][ T6] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 53.978031][ T1848] loop9: detected capacity change from 0 to 256 [ 53.984919][ T6] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 54.005700][ T6] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 54.015689][ T6] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.033361][ T6] usb 4-1: config 0 descriptor?? [ 54.039502][ T1828] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 54.068767][ T1848] loop9: detected capacity change from 256 to 0 [ 54.076942][ C0] I/O error, dev loop9, sector 12 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 54.086666][ T1848] FAT-fs (loop9): Directory bread(block 3) failed [ 54.093441][ C1] I/O error, dev loop9, sector 12 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 54.102877][ T1848] FAT-fs (loop9): Directory bread(block 3) failed [ 54.109729][ C0] I/O error, dev loop9, sector 12 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 54.119062][ T1848] FAT-fs (loop9): Directory bread(block 3) failed [ 54.131975][ C1] I/O error, dev loop9, sector 12 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 54.141282][ T1819] FAT-fs (loop9): Directory bread(block 3) failed [ 54.152788][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 54.162021][ T1819] FAT-fs (loop9): unable to read boot sector to mark fs as dirty [ 54.198830][ T316] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 54.258973][ T1814] pl2303 ttyUSB0: pl2303_set_control_lines - failed: -32 [ 54.266948][ T1814] pl2303 ttyUSB0: error sending break = -32 [ 54.302080][ T59] usb 5-1: USB disconnect, device number 6 [ 54.310574][ T59] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 54.323483][ T59] pl2303 5-1:1.0: device disconnected [ 54.389838][ T316] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 54.399767][ T316] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 54.409786][ T1850] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.410194][ T316] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 54.430266][ T1850] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.438357][ T1850] device bridge_slave_0 entered promiscuous mode [ 54.445121][ T316] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 54.455417][ T6] plantronics 0003:047F:FFFF.000C: unknown main item tag 0xd [ 54.462914][ T1850] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.462934][ T1850] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.463319][ T1850] device bridge_slave_1 entered promiscuous mode [ 54.478840][ T316] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 54.485297][ T28] audit: type=1326 audit(1790645342.802:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1863 comm="syz.8.534" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f915419e159 code=0x7ffc0000 [ 54.493144][ T6] plantronics 0003:047F:FFFF.000C: No inputs registered, leaving [ 54.524999][ T316] usb 1-1: Product: syz [ 54.529359][ T316] usb 1-1: Manufacturer: syz [ 54.534148][ T316] usb 1-1: SerialNumber: syz [ 54.540199][ T316] hub 1-1:1.0: bad descriptor, ignoring hub [ 54.546117][ T316] hub: probe of 1-1:1.0 failed with error -5 [ 54.553174][ T6] plantronics 0003:047F:FFFF.000C: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 54.601227][ T28] audit: type=1326 audit(1790645342.832:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1863 comm="syz.8.534" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f915419e159 code=0x7ffc0000 [ 54.632925][ T28] audit: type=1326 audit(1790645342.832:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1863 comm="syz.8.534" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f915419e159 code=0x7ffc0000 [ 54.658121][ T28] audit: type=1326 audit(1790645342.832:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1863 comm="syz.8.534" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f915419e159 code=0x7ffc0000 [ 54.699558][ T28] audit: type=1326 audit(1790645342.832:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1863 comm="syz.8.534" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f915419e159 code=0x7ffc0000 [ 54.724663][ T28] audit: type=1326 audit(1790645342.832:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1863 comm="syz.8.534" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f915419e159 code=0x7ffc0000 [ 54.756943][ T1850] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.764142][ T1850] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.771661][ T1850] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.779213][ T1850] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.787517][ T28] audit: type=1326 audit(1790645342.842:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1863 comm="syz.8.534" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f915419e159 code=0x7ffc0000 [ 54.801900][ T59] usb 4-1: USB disconnect, device number 7 [ 54.813963][ T316] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 9 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 54.832744][ T28] audit: type=1326 audit(1790645342.842:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1863 comm="syz.8.534" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f915419e159 code=0x7ffc0000 [ 54.892564][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.901146][ T327] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.911253][ T1870] loop4: detected capacity change from 0 to 4096 [ 54.918464][ T327] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.926259][ T28] audit: type=1326 audit(1790645342.842:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1863 comm="syz.8.534" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f915419e159 code=0x7ffc0000 [ 54.955758][ T1870] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 54.966578][ T1870] EXT4-fs (loop4): Test dummy encryption mode enabled [ 54.975167][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.987563][ T327] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.994648][ T327] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.002309][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.012079][ T327] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.019171][ T327] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.032413][ T1870] overlayfs: failed to create directory ./bus/work (errno: 28); mounting read-only [ 55.042641][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.051066][ T316] usb 1-1: reset high-speed USB device number 9 using dummy_hcd [ 55.051304][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.068367][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.076698][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.089862][ T543] device bridge_slave_1 left promiscuous mode [ 55.102405][ T1879] loop8: detected capacity change from 0 to 256 [ 55.109192][ T543] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.130445][ T543] device bridge_slave_0 left promiscuous mode [ 55.138125][ T543] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.146368][ T543] device veth1_macvtap left promiscuous mode [ 55.152649][ T543] device veth0_vlan left promiscuous mode [ 55.168880][ T1879] loop8: detected capacity change from 256 to 0 [ 55.179105][ C0] I/O error, dev loop8, sector 12 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 55.188501][ T1879] FAT-fs (loop8): Directory bread(block 3) failed [ 55.196026][ C0] I/O error, dev loop8, sector 12 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 55.205754][ T1879] FAT-fs (loop8): Directory bread(block 3) failed [ 55.213535][ C0] I/O error, dev loop8, sector 12 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 55.222954][ T1879] FAT-fs (loop8): Directory bread(block 3) failed [ 55.236073][ T1392] FAT-fs (loop8): Directory bread(block 3) failed [ 55.249113][ T1392] FAT-fs (loop8): unable to read boot sector to mark fs as dirty [ 55.271007][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 55.280084][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.291813][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 55.300255][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 55.310528][ T1850] device veth0_vlan entered promiscuous mode [ 55.320934][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 55.333659][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 55.348079][ T1850] device veth1_macvtap entered promiscuous mode [ 55.355307][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 55.363731][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 55.379400][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 55.390494][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 55.399137][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 55.409043][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 55.417436][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 55.536614][ T1893] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.543867][ T1893] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.551694][ T1893] device bridge_slave_0 entered promiscuous mode [ 55.560157][ T1893] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.567261][ T1893] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.575073][ T1893] device bridge_slave_1 entered promiscuous mode [ 55.611443][ T1900] kvm: apic: phys broadcast and lowest prio [ 55.627108][ T1893] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.634190][ T1893] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.641458][ T1893] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.648591][ T1893] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.656855][ T59] usb 1-1: USB disconnect, device number 9 [ 55.658781][ T316] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 55.670590][ T19] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 55.680797][ T59] usblp0: removed [ 55.694652][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.702884][ T327] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.710639][ T327] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.720757][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.729412][ T327] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.736488][ T327] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.757734][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.766766][ T327] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.773939][ T327] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.782616][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.791350][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.795324][ T1905] loop1: detected capacity change from 0 to 4096 [ 55.807670][ T1905] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 55.816947][ T1905] EXT4-fs (loop1): Test dummy encryption mode enabled [ 55.825456][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.834676][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 55.843545][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 55.852082][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 55.859835][ T316] usb 4-1: Using ep0 maxpacket: 32 [ 55.866722][ T1893] device veth0_vlan entered promiscuous mode [ 55.873293][ T19] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 55.883306][ T316] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 55.893544][ T1905] overlayfs: failed to create directory ./bus/work (errno: 28); mounting read-only [ 55.900786][ T1893] device veth1_macvtap entered promiscuous mode [ 55.910437][ T19] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 55.920353][ T316] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 55.930539][ T19] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 55.942109][ T316] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 55.951241][ T19] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 55.961297][ T316] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.961960][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 55.978177][ T19] usb 5-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 55.985333][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 55.987570][ T316] usb 4-1: config 0 descriptor?? [ 55.999562][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.000872][ T19] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 56.009798][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 56.026072][ T1888] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 56.027808][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 56.034369][ T1888] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 56.051245][ T19] pl2303 5-1:1.0: pl2303 converter detected [ 56.082837][ T1911] loop0: detected capacity change from 0 to 256 [ 56.095138][ T19] usb 5-1: pl2303 converter now attached to ttyUSB0 [ 56.141571][ T1911] FAT-fs (loop0): Directory bread(block 3) failed [ 56.161111][ T1911] FAT-fs (loop0): Directory bread(block 3) failed [ 56.171204][ T1911] FAT-fs (loop0): Directory bread(block 3) failed [ 56.199157][ T288] FAT-fs (loop0): Directory bread(block 3) failed [ 56.216353][ T288] FAT-fs (loop0): unable to read boot sector to mark fs as dirty [ 56.276879][ T1913] F2FS-fs (loop1): Invalid SB checksum offset: 0 [ 56.296263][ T1913] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 56.305641][ T1913] F2FS-fs (loop1): invalid crc value [ 56.312458][ T1913] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 56.349541][ T543] device bridge_slave_1 left promiscuous mode [ 56.357363][ T1888] pl2303 5-1:1.0: pl2303_vendor_write - failed to write [0007]: -71 [ 56.358104][ T362] usb 5-1: USB disconnect, device number 7 [ 56.368972][ T1913] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 56.379063][ T543] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.389152][ T1888] pl2303 ttyUSB0: pl2303_get_line_request - failed: -19 [ 56.398916][ T1888] pl2303 ttyUSB0: pl2303_set_line_request - failed: -19 [ 56.399030][ T543] device bridge_slave_0 left promiscuous mode [ 56.412079][ T1913] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 56.416109][ T1888] pl2303 5-1:1.0: pl2303_vendor_read - failed to read [000a]: -19 [ 56.430575][ T543] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.441189][ T316] savu 0003:1E7D:2D5A.000D: hiddev96,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.3-1/input0 [ 56.455125][ T1888] pl2303 ttyUSB0: failed to submit interrupt urb: -19 [ 56.462066][ T543] device veth1_macvtap left promiscuous mode [ 56.466487][ T1913] syz.1.552: attempt to access beyond end of device [ 56.466487][ T1913] loop1: rw=2049, sector=53248, nr_sectors = 8 limit=40427 [ 56.468108][ T543] device veth0_vlan left promiscuous mode [ 56.486631][ T362] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 56.500144][ T362] pl2303 5-1:1.0: device disconnected [ 56.564172][ T1850] syz-executor: attempt to access beyond end of device [ 56.564172][ T1850] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 56.738202][ T1930] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.745372][ T1930] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.753109][ T1930] device bridge_slave_0 entered promiscuous mode [ 56.760917][ T1930] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.768492][ T362] usb 4-1: USB disconnect, device number 8 [ 56.783522][ T1930] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.794739][ T1930] device bridge_slave_1 entered promiscuous mode [ 56.812453][ T1939] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 56.834271][ T1939] EXT4-fs (loop8): Test dummy encryption mode enabled [ 56.857801][ T1930] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.865003][ T1930] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.872677][ T1930] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.880097][ T1930] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.905059][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.911637][ T1939] overlayfs: failed to create directory ./bus/work (errno: 28); mounting read-only [ 56.921814][ T327] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.929515][ T327] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.946709][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.955185][ T327] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.962278][ T327] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.968760][ T316] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 56.970365][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.985754][ T327] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.992841][ T327] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.000239][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.017770][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.027183][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 57.035841][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.047178][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 57.056340][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.065749][ T1930] device veth0_vlan entered promiscuous mode [ 57.073008][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.080742][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.092600][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.101084][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.120115][ T1930] device veth1_macvtap entered promiscuous mode [ 57.143468][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 57.152533][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.161149][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.176503][ T316] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 57.188918][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.197131][ T316] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 57.200783][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.215407][ T316] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 57.226718][ T316] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 57.249596][ T316] usb 2-1: config 0 descriptor?? [ 57.282403][ T1958] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 57.297133][ T1958] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 57.307279][ T1958] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 57.385573][ T1967] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 57.398243][ T1967] EXT4-fs (loop5): Test dummy encryption mode enabled [ 57.405247][ T298] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 57.474224][ T1967] overlayfs: failed to create directory ./bus/work (errno: 28); mounting read-only [ 57.599878][ T298] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 57.609675][ T298] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 57.620252][ T543] device bridge_slave_1 left promiscuous mode [ 57.620284][ T298] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 57.626531][ T543] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.647472][ T543] device bridge_slave_0 left promiscuous mode [ 57.654353][ T543] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.663107][ T298] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 57.672398][ T298] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 57.680431][ T298] usb 5-1: Product: syz [ 57.684610][ T298] usb 5-1: Manufacturer: syz [ 57.689274][ T298] usb 5-1: SerialNumber: syz [ 57.695464][ T543] device veth1_macvtap left promiscuous mode [ 57.701779][ T543] device veth0_vlan left promiscuous mode [ 57.701907][ T298] hub 5-1:1.0: bad descriptor, ignoring hub [ 57.713711][ T298] hub: probe of 5-1:1.0 failed with error -5 [ 57.808756][ T59] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 57.862514][ T316] usb 2-1: language id specifier not provided by device, defaulting to English [ 57.897587][ T298] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 8 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 57.988947][ T59] usb 6-1: Using ep0 maxpacket: 32 [ 57.995582][ T59] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 58.006571][ T59] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 58.016456][ T59] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 58.025814][ T59] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.035113][ T59] usb 6-1: config 0 descriptor?? [ 58.138767][ T298] usb 5-1: reset high-speed USB device number 8 using dummy_hcd [ 58.263539][ T316] uclogic 0003:256C:006D.000E: failed retrieving string descriptor #200: -71 [ 58.276219][ T316] uclogic 0003:256C:006D.000E: failed retrieving pen parameters: -71 [ 58.284551][ T316] uclogic 0003:256C:006D.000E: failed probing pen v2 parameters: -71 [ 58.292867][ T316] uclogic 0003:256C:006D.000E: failed probing parameters: -71 [ 58.312079][ T316] uclogic: probe of 0003:256C:006D.000E failed with error -71 [ 58.334690][ T316] usb 2-1: USB disconnect, device number 2 [ 58.386855][ T28] kauditd_printk_skb: 22 callbacks suppressed [ 58.386901][ T28] audit: type=1400 audit(1790645346.702:419): avc: denied { unmount } for pid=287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 58.444379][ T59] savu 0003:1E7D:2D5A.000F: hiddev96,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.5-1/input0 [ 58.602993][ T1998] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.610260][ T1998] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.617580][ T1998] device bridge_slave_0 entered promiscuous mode [ 58.624784][ T1998] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.632232][ T1998] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.639696][ T1998] device bridge_slave_1 entered promiscuous mode [ 58.678818][ T316] usb 5-1: USB disconnect, device number 8 [ 58.680054][ T1998] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.691714][ T1998] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.699011][ T1998] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.706032][ T1998] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.719300][ T19] usb 6-1: USB disconnect, device number 3 [ 58.726867][ T543] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 58.734434][ T316] usblp0: removed [ 58.738249][ T543] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.747409][ T543] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.756503][ T543] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 58.764869][ T543] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.772035][ T543] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.787128][ T543] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 58.796390][ T543] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.803563][ T543] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.813899][ T543] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 58.824097][ T543] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 58.837908][ T543] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 58.849741][ T543] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.857838][ T543] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.865511][ T543] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.873760][ T1998] device veth0_vlan entered promiscuous mode [ 58.884754][ T543] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.894193][ T1998] device veth1_macvtap entered promiscuous mode [ 58.903810][ T543] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.913705][ T543] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.957765][ T2009] set_capacity_and_notify: 6 callbacks suppressed [ 58.957778][ T2009] loop2: detected capacity change from 0 to 4096 [ 58.984192][ T2009] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 58.993099][ T2009] EXT4-fs (loop2): Test dummy encryption mode enabled [ 59.065339][ T2009] overlayfs: failed to create directory ./bus/work (errno: 28); mounting read-only [ 59.113064][ T2020] xt_hashlimit: size too large, truncated to 1048576 [ 59.147875][ T2022] loop8: detected capacity change from 0 to 2048 [ 59.199441][ T2022] loop8: p1 < > p4 [ 59.209404][ T2022] loop8: p4 size 722688 extends beyond EOD, truncated [ 59.275678][ T1480] udevd[1480]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 59.289991][ T1816] udevd[1816]: inotify_add_watch(7, /dev/loop8p4, 10) failed: No such file or directory [ 59.296614][ T28] audit: type=1400 audit(1790645347.612:420): avc: denied { map } for pid=2035 comm="syz.1.598" path="/dev/zero" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 59.386063][ T2051] netlink: 'syz.5.603': attribute type 34 has an invalid length. [ 59.445087][ T2053] loop8: detected capacity change from 0 to 4096 [ 59.461678][ T2053] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 59.475226][ T2053] EXT4-fs (loop8): Test dummy encryption mode enabled [ 59.546176][ T2053] overlayfs: failed to create directory ./bus/work (errno: 28); mounting read-only [ 59.555779][ T28] audit: type=1400 audit(1790645347.872:421): avc: denied { mounton } for pid=2066 comm="syz.4.610" path="/144/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 59.580100][ T28] audit: type=1400 audit(1790645347.892:422): avc: denied { mounton } for pid=2066 comm="syz.4.610" path="/144/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 59.613443][ T28] audit: type=1400 audit(1790645347.932:423): avc: denied { execmem } for pid=2068 comm="syz.4.612" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 59.650593][ T2074] loop4: detected capacity change from 0 to 2048 [ 59.665240][ T2073] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 59.680308][ T2073] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 59.699332][ T2073] EXT4-fs (loop4): This should not happen!! Data will be lost [ 59.699332][ T2073] [ 59.709530][ T2073] EXT4-fs (loop4): Total free blocks count 0 [ 59.715518][ T2073] EXT4-fs (loop4): Free/Dirty block details [ 59.721871][ T2073] EXT4-fs (loop4): free_blocks=4096 [ 59.727168][ T2073] EXT4-fs (loop4): dirty_blocks=64 [ 59.732546][ T19] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 59.738761][ T2073] EXT4-fs (loop4): Block reservation details [ 59.746130][ T2073] EXT4-fs (loop4): i_reserved_data_blocks=4 [ 59.759239][ T8] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28 [ 59.771899][ T8] EXT4-fs (loop4): This should not happen!! Data will be lost [ 59.771899][ T8] [ 59.788754][ T24] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 59.903734][ T2083] loop8: detected capacity change from 0 to 40427 [ 59.912366][ T28] audit: type=1326 audit(1790645348.232:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2093 comm="syz.4.621" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf3ab9e159 code=0x7ffc0000 [ 59.932851][ T2096] loop4: detected capacity change from 0 to 4096 [ 59.949080][ T19] usb 6-1: config 1 has an invalid interface number: 128 but max is 1 [ 59.957276][ T19] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 59.963873][ T2096] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 59.968376][ T2083] F2FS-fs (loop8): Invalid SB checksum offset: 0 [ 59.978726][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 59.982783][ T19] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 59.991994][ T28] audit: type=1326 audit(1790645348.232:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2093 comm="syz.4.621" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf3ab9e159 code=0x7ffc0000 [ 59.996828][ T2083] F2FS-fs (loop8): Can't find valid F2FS filesystem in 2th superblock [ 60.026496][ T28] audit: type=1326 audit(1790645348.232:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2093 comm="syz.4.621" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf3ab9e159 code=0x7ffc0000 [ 60.029691][ T2096] EXT4-fs (loop4): Test dummy encryption mode enabled [ 60.055786][ T28] audit: type=1326 audit(1790645348.232:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2093 comm="syz.4.621" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7fdf3ab9e159 code=0x7ffc0000 [ 60.061334][ T19] usb 6-1: config 1 has no interface number 0 [ 60.086188][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 60.092486][ T19] usb 6-1: config 1 interface 128 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 60.103662][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 60.119176][ T2083] F2FS-fs (loop8): invalid crc value [ 60.126106][ T28] audit: type=1326 audit(1790645348.232:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2093 comm="syz.4.621" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf3ab9e159 code=0x7ffc0000 [ 60.133412][ T19] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 60.163080][ T24] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 60.165209][ T19] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.182882][ T19] usb 6-1: Product: syz [ 60.187109][ T19] usb 6-1: Manufacturer: syz [ 60.191748][ T19] usb 6-1: SerialNumber: syz [ 60.194254][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.204869][ T19] cdc_wdm 6-1:1.128: skipping garbage [ 60.210330][ T19] cdc_wdm 6-1:1.128: skipping garbage [ 60.215710][ T19] cdc_wdm 6-1:1.128: invalid descriptor buffer length [ 60.216749][ T2083] F2FS-fs (loop8): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 60.222518][ T19] cdc_wdm: probe of 6-1:1.128 failed with error -22 [ 60.250201][ T24] usb 2-1: config 0 descriptor?? [ 60.268906][ T2083] F2FS-fs (loop8): Try to recover 2th superblock, ret: 0 [ 60.276048][ T2083] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 60.296313][ T2096] overlayfs: failed to create directory ./bus/work (errno: 28); mounting read-only [ 60.308494][ T1893] syz-executor: attempt to access beyond end of device [ 60.308494][ T1893] loop8: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 60.490285][ T19] usb 6-1: USB disconnect, device number 4 [ 60.523220][ T2127] loop2: detected capacity change from 0 to 2048 [ 60.552090][ T2127] loop2: p1 < > p4 [ 60.556457][ T2127] loop2: p4 size 722688 extends beyond EOD, truncated [ 60.579455][ T103] loop2: p1 < > p4 [ 60.584226][ T103] loop2: p4 size 722688 extends beyond EOD, truncated [ 60.584536][ T2145] loop8: detected capacity change from 0 to 4096 [ 60.603648][ T2145] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 60.617799][ T1480] udevd[1480]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 60.620619][ T2145] EXT4-fs (loop8): Test dummy encryption mode enabled [ 60.637869][ T1818] udevd[1818]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 60.654901][ T1818] udevd[1818]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 60.667168][ T24] savu 0003:1E7D:2D5A.0010: hiddev96,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0 [ 60.667356][ T1480] udevd[1480]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 60.796800][ T2145] overlayfs: failed to create directory ./bus/work (errno: 28); mounting read-only [ 60.867078][ T2162] loop8: detected capacity change from 0 to 512 [ 60.897276][ T2162] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 60.920488][ T2162] EXT4-fs (loop8): 1 truncate cleaned up [ 61.007176][ T362] usb 2-1: USB disconnect, device number 3 [ 61.051729][ T2177] FAULT_INJECTION: forcing a failure. [ 61.051729][ T2177] name failslab, interval 1, probability 0, space 0, times 1 [ 61.067262][ T2177] CPU: 1 PID: 2177 Comm: syz.8.648 Not tainted syzkaller #0 [ 61.074586][ T2177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 61.085014][ T2177] Call Trace: [ 61.088561][ T2177] [ 61.091503][ T2177] __dump_stack+0x21/0x24 [ 61.095893][ T2177] dump_stack_lvl+0x110/0x170 [ 61.100584][ T2177] ? __cfi_dump_stack_lvl+0x8/0x8 [ 61.100666][ T2120] loop4: detected capacity change from 0 to 131072 [ 61.105620][ T2177] dump_stack+0x15/0x24 [ 61.116340][ T2177] should_fail_ex+0x3bf/0x510 [ 61.121036][ T2177] __should_failslab+0xac/0xf0 [ 61.122890][ T2120] F2FS-fs (loop4): invalid crc value [ 61.125825][ T2177] should_failslab+0x9/0x20 [ 61.135643][ T2177] __kmem_cache_alloc_node+0x3d/0x2d0 [ 61.141065][ T2177] ? security_prepare_creds+0x4e/0x150 [ 61.146589][ T2177] ? security_prepare_creds+0x4e/0x150 [ 61.152068][ T2177] __kmalloc+0xa4/0x1e0 [ 61.156323][ T2177] security_prepare_creds+0x4e/0x150 [ 61.161710][ T2177] prepare_creds+0x428/0x610 [ 61.166314][ T2177] cap_task_prctl+0x4f2/0x950 [ 61.171096][ T2177] security_task_prctl+0x89/0x110 [ 61.176143][ T2177] __se_sys_prctl+0xd6/0x1170 [ 61.180837][ T2177] ? __x64_sys_prctl+0xd0/0xd0 [ 61.185797][ T2177] ? __kasan_check_write+0x14/0x20 [ 61.190930][ T2177] ? fpregs_restore_userregs+0x128/0x260 [ 61.196583][ T2177] __x64_sys_prctl+0xbf/0xd0 [ 61.200027][ T2120] F2FS-fs (loop4): Found nat_bits in checkpoint [ 61.201231][ T2177] x64_sys_call+0x6e9/0x9a0 [ 61.212143][ T2177] do_syscall_64+0x4c/0xa0 [ 61.216845][ T2177] ? clear_bhb_loop+0x30/0x80 [ 61.221547][ T2177] ? clear_bhb_loop+0x30/0x80 [ 61.226329][ T2177] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 61.232311][ T2177] RIP: 0033:0x7fb3d359e159 [ 61.236775][ T2177] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 61.256491][ T2177] RSP: 002b:00007fb3d1ff7028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 61.264919][ T2177] RAX: ffffffffffffffda RBX: 00007fb3d3825fa0 RCX: 00007fb3d359e159 [ 61.272994][ T2177] RDX: 0000000000000014 RSI: 0000000000000003 RDI: 000000000000002f [ 61.281064][ T2177] RBP: 00007fb3d363506b R08: 0000000000000000 R09: 0000000000000000 [ 61.289054][ T2177] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 61.297036][ T2177] R13: 00007fb3d3826038 R14: 00007fb3d3825fa0 R15: 00007ffdf7e12cc8 [ 61.302712][ T2120] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 61.305029][ T2177] [ 61.978738][ T24] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 62.103113][ T2295] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a80ec018, mo2=0002] [ 62.115136][ T2295] System zones: 1-3, 19-19, 35-36 [ 62.126355][ T2295] ext4 filesystem being mounted at /15/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 62.158877][ T59] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 62.190785][ T24] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 62.202682][ T24] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 7 [ 62.220210][ T24] usb 2-1: New USB device found, idVendor=0e41, idProduct=414b, bcdDevice= 0.40 [ 62.231322][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.240093][ T24] usb 2-1: Product: syz [ 62.244385][ T24] usb 2-1: Manufacturer: syz [ 62.262434][ T24] usb 2-1: SerialNumber: syz [ 62.291096][ T2305] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 62.340254][ T59] usb 5-1: Using ep0 maxpacket: 32 [ 62.346783][ T59] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 62.359644][ T59] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 62.370919][ T59] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 62.380050][ T59] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.389113][ T59] usb 5-1: config 0 descriptor?? [ 62.482007][ T24] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 62.494611][ T2318] ip_tables: iptables: counters copy to user failed while replacing table [ 62.502998][ T24] usb 2-1: unit 5 not found! [ 62.530814][ T2318] ip_tables: iptables: counters copy to user failed while replacing table [ 62.538683][ T24] usb 2-1: USB disconnect, device number 4 [ 62.578960][ C1] blk_print_req_error: 7 callbacks suppressed [ 62.578976][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 62.594283][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 62.602652][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 62.611932][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 62.619870][ T2328] loop7: unable to read partition table [ 62.625715][ T2328] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü�¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö�˜Èµ4FLQkÝŠ) failed (rc=-5) [ 62.627242][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 62.648437][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 62.656753][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 62.666046][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 62.674296][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 62.683488][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 62.691420][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 62.700579][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 62.708527][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 62.717949][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 62.725890][ T2328] loop7: unable to read partition table [ 62.725903][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 62.740689][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 62.750963][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 62.760178][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 62.807622][ T59] savu 0003:1E7D:2D5A.0011: hiddev96,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.4-1/input0 [ 62.848759][ T39] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 63.028696][ T39] usb 3-1: Using ep0 maxpacket: 16 [ 63.034976][ T39] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 63.050422][ T39] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 63.061094][ T39] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 63.070735][ T39] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.078866][ T39] usb 3-1: Product: syz [ 63.083102][ T39] usb 3-1: Manufacturer: syz [ 63.087798][ T39] usb 3-1: SerialNumber: syz [ 63.090602][ T362] usb 5-1: USB disconnect, device number 9 [ 63.296846][ T39] usb 3-1: 0:2 : does not exist [ 63.303504][ T39] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 63.316015][ T39] usb 3-1: USB disconnect, device number 5 [ 63.324344][ T1480] udevd[1480]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 63.378782][ T59] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 63.388749][ T316] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 63.558757][ T59] usb 9-1: Using ep0 maxpacket: 32 [ 63.565118][ T59] usb 9-1: config 0 has an invalid interface number: 67 but max is 0 [ 63.573291][ T59] usb 9-1: config 0 has no interface number 0 [ 63.580726][ T59] usb 9-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 63.589885][ T316] usb 2-1: too many endpoints for config 0 interface 0 altsetting 5: 66, using maximum allowed: 30 [ 63.590066][ T59] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.608829][ T316] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 63.614454][ T59] usb 9-1: Product: syz [ 63.623723][ T316] usb 2-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 66 [ 63.625702][ T59] usb 9-1: Manufacturer: syz [ 63.638821][ T316] usb 2-1: config 0 interface 0 has no altsetting 0 [ 63.643027][ T59] usb 9-1: SerialNumber: syz [ 63.649947][ T316] usb 2-1: New USB device found, idVendor=0738, idProduct=1709, bcdDevice= 0.00 [ 63.655132][ T59] usb 9-1: config 0 descriptor?? [ 63.668965][ T316] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.669574][ T59] smsc95xx v2.0.0 [ 63.681275][ T316] usb 2-1: config 0 descriptor?? [ 64.090554][ T316] input: HID 0738:1709 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0738:1709.0012/input/input13 [ 64.170727][ T316] saitek 0003:0738:1709.0012: input,hiddev96,hidraw0: USB HID v0.00 Device [HID 0738:1709] on usb-dummy_hcd.1-1/input0 [ 64.311755][ T39] usb 2-1: USB disconnect, device number 5 [ 64.829326][ T28] kauditd_printk_skb: 23 callbacks suppressed [ 64.829338][ T28] audit: type=1400 audit(1790645353.152:452): avc: denied { sqpoll } for pid=2354 comm="syz.4.702" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 64.868551][ T2360] set_capacity_and_notify: 5 callbacks suppressed [ 64.868568][ T2360] loop7: detected capacity change from 0 to 7 [ 64.879025][ T2365] loop5: detected capacity change from 0 to 16 [ 64.884360][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 64.889206][ T59] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000030: -71 [ 64.896638][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 64.909317][ T2365] erofs: (device loop5): mounted with root inode @ nid 36. [ 64.923915][ T59] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 64.934022][ T2360] loop7: unable to read partition table [ 64.947566][ T2360] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü�¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö�˜Èµ4FLQkÝŠ) failed (rc=-5) [ 64.948087][ T2369] loop7: unable to read partition table [ 64.966516][ T28] audit: type=1400 audit(1790645353.282:453): avc: denied { rename } for pid=2363 comm="syz.5.705" name="file2" dev="overlay" ino=89 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 64.968986][ T59] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 65.004551][ T59] smsc95xx: probe of 9-1:0.67 failed with error -71 [ 65.037857][ T2373] loop5: detected capacity change from 0 to 512 [ 65.055028][ T59] usb 9-1: USB disconnect, device number 6 [ 65.061498][ T2373] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 65.074620][ T28] audit: type=1400 audit(1790645353.322:454): avc: denied { unlink } for pid=2363 comm="syz.5.705" name="file1" dev="overlay" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 65.138866][ T28] audit: type=1400 audit(1790645353.322:455): avc: denied { write } for pid=2363 comm="syz.5.705" path=2F202864656C6574656429 dev="tmpfs" ino=189 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 65.215798][ T28] audit: type=1400 audit(1790645353.322:456): avc: denied { setattr } for pid=2363 comm="syz.5.705" name="#189" dev="tmpfs" ino=189 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 65.241094][ T28] audit: type=1400 audit(1790645353.322:457): avc: denied { link } for pid=2363 comm="syz.5.705" name="#189" dev="tmpfs" ino=189 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 65.338560][ T28] audit: type=1400 audit(1790645353.652:458): avc: denied { create } for pid=2381 comm="syz.4.711" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 65.362456][ T28] audit: type=1400 audit(1790645353.652:459): avc: denied { getopt } for pid=2381 comm="syz.4.711" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 65.534828][ T2404] loop7: detected capacity change from 0 to 7 [ 65.542142][ T1480] loop7: unable to read partition table [ 65.550259][ T2404] loop7: unable to read partition table [ 65.559370][ T2404] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü�¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö�˜Èµ4FLQkÝŠ) failed (rc=-5) [ 65.603437][ T2386] loop5: detected capacity change from 0 to 131072 [ 65.612969][ T2386] F2FS-fs (loop5): invalid crc value [ 65.650886][ T2386] F2FS-fs (loop5): Found nat_bits in checkpoint [ 65.691315][ T2386] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 65.713318][ T2386] F2FS-fs (loop5): Corrupted max_depth of 3: 16842753 [ 65.718705][ T368] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 65.909774][ T368] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 65.920753][ T368] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 65.931280][ T368] usb 2-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 65.941742][ T368] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.951291][ T368] usb 2-1: config 0 descriptor?? [ 65.970406][ T28] audit: type=1326 audit(1790645354.292:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2418 comm="syz.2.725" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d8e59e159 code=0x7ffc0000 [ 65.995767][ T28] audit: type=1326 audit(1790645354.292:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2418 comm="syz.2.725" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d8e59e159 code=0x7ffc0000 [ 66.019945][ T2386] syz.5.713 (2386) used greatest stack depth: 20672 bytes left [ 66.361347][ T368] playstation 0003:054C:0DF2.0013: unknown main item tag 0x0 [ 66.372052][ T368] playstation 0003:054C:0DF2.0013: unknown main item tag 0x0 [ 66.379700][ T368] playstation 0003:054C:0DF2.0013: unknown main item tag 0x0 [ 66.387190][ T368] playstation 0003:054C:0DF2.0013: unknown main item tag 0x0 [ 66.406003][ T368] playstation 0003:054C:0DF2.0013: unknown main item tag 0x0 [ 66.417959][ T368] playstation 0003:054C:0DF2.0013: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.1-1/input0 [ 66.719669][ T39] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 66.728696][ T19] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 66.858676][ T59] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 66.919724][ T19] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 66.919773][ T39] usb 6-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 66.929329][ T19] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.948781][ T39] usb 6-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1983, setting to 1024 [ 66.951661][ T19] usb 3-1: config 0 descriptor?? [ 66.961125][ T368] playstation 0003:054C:0DF2.0013: Invalid gyro calibration data for axis (3), disabling calibration. [ 66.976029][ T39] usb 6-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 66.989072][ T368] playstation 0003:054C:0DF2.0013: Invalid gyro calibration data for axis (4), disabling calibration. [ 67.000267][ T39] usb 6-1: config 0 interface 0 has no altsetting 0 [ 67.006872][ T39] usb 6-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 67.016191][ T368] playstation 0003:054C:0DF2.0013: Invalid gyro calibration data for axis (5), disabling calibration. [ 67.027329][ T368] playstation 0003:054C:0DF2.0013: Invalid accelerometer calibration data for axis (0), disabling calibration. [ 67.039436][ T39] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.048379][ T39] usb 6-1: config 0 descriptor?? [ 67.054085][ T368] playstation 0003:054C:0DF2.0013: Invalid accelerometer calibration data for axis (1), disabling calibration. [ 67.066057][ T368] playstation 0003:054C:0DF2.0013: Invalid accelerometer calibration data for axis (2), disabling calibration. [ 67.078022][ T2442] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 67.086288][ T59] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 67.098722][ T368] input: HID 054c:0df2 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:054C:0DF2.0013/input/input14 [ 67.110269][ T59] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 67.121888][ T368] input: HID 054c:0df2 Motion Sensors as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:054C:0DF2.0013/input/input15 [ 67.135026][ T59] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 67.150053][ T368] input: HID 054c:0df2 Touchpad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:054C:0DF2.0013/input/input16 [ 67.162721][ T59] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 67.172766][ T59] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.185225][ T368] playstation 0003:054C:0DF2.0013: Registered DualSense controller hw_version=0x00000000 fw_version=0x00000000 [ 67.197955][ T59] usb 9-1: config 0 descriptor?? [ 67.238760][ T368] usb 2-1: USB disconnect, device number 6 [ 67.275031][ T2484] fido_id[2484]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 67.501904][ T39] hkems 0003:2006:0118.0014: unknown main item tag 0x2 [ 67.509278][ T39] hkems 0003:2006:0118.0014: unknown main item tag 0x0 [ 67.516430][ T39] hkems 0003:2006:0118.0014: unknown main item tag 0x0 [ 67.524310][ T39] input: HID 2006:0118 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:2006:0118.0014/input/input17 [ 67.603366][ T39] hkems 0003:2006:0118.0014: input,hidraw0: USB HID v0.00 Keyboard [HID 2006:0118] on usb-dummy_hcd.5-1/input0 [ 67.616142][ T59] plantronics 0003:047F:FFFF.0015: No inputs registered, leaving [ 67.624010][ T39] hkems 0003:2006:0118.0014: implement() called with too large value 1 (n: 0)! (kworker/1:1) [ 67.635467][ T59] plantronics 0003:047F:FFFF.0015: hiddev96,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 67.648217][ T39] hkems 0003:2006:0118.0014: force feedback for EMS based devices by Ignaz Forster [ 67.717710][ T59] usb 6-1: USB disconnect, device number 5 [ 67.764966][ T2495] kvm [2494]: vcpu0, guest rIP: 0x9143 Unhandled WRMSR(0x11e) = 0xbe702111 [ 67.859226][ T39] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 67.881738][ T2502] netlink: 12 bytes leftover after parsing attributes in process `syz.1.757'. [ 67.891190][ T2502] netlink: 12 bytes leftover after parsing attributes in process `syz.1.757'. [ 68.039745][ T39] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 68.047889][ T39] usb 5-1: config 0 has no interface number 0 [ 68.054195][ T39] usb 5-1: config 0 interface 41 has no altsetting 0 [ 68.062499][ T39] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 68.071713][ T39] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.079907][ T39] usb 5-1: Product: syz [ 68.084301][ T39] usb 5-1: Manufacturer: syz [ 68.088922][ T39] usb 5-1: SerialNumber: syz [ 68.094233][ T39] usb 5-1: config 0 descriptor?? [ 68.174746][ T19] usb 3-1: Cannot set autoneg [ 68.179588][ T19] MOSCHIP usb-ethernet driver: probe of 3-1:0.0 failed with error -71 [ 68.190156][ T19] usb 3-1: USB disconnect, device number 6 [ 68.228697][ T362] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 68.284033][ T2513] loop5: detected capacity change from 0 to 4096 [ 68.291126][ T2513] EXT4-fs: Ignoring removed orlov option [ 68.297535][ T2513] EXT4-fs (loop5): Test dummy encryption mode enabled [ 68.310134][ T2513] EXT4-fs mount: 34 callbacks suppressed [ 68.310153][ T2513] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 68.335329][ T1930] EXT4-fs (loop5): unmounting filesystem. [ 68.408739][ T362] usb 2-1: Using ep0 maxpacket: 32 [ 68.415436][ T362] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 68.426975][ T362] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 68.436861][ T362] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 68.450111][ T362] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.458850][ T362] usb 2-1: config 0 descriptor?? [ 68.465295][ T362] hub 2-1:0.0: USB hub found [ 68.521604][ T2536] tipc: Started in network mode [ 68.526704][ T2536] tipc: Node identity 7f000001, cluster identity 4711 [ 68.533953][ T2536] tipc: Enabled bearer , priority 10 [ 68.541530][ T2536] tipc: Can't add remote ip to TIPC UDP multicast bearer [ 68.668121][ T362] hub 2-1:0.0: config failed, can't read hub descriptor (err -22) [ 68.743167][ T2558] loop2: detected capacity change from 0 to 512 [ 68.763123][ T2560] ip_tables: iptables: counters copy to user failed while replacing table [ 68.763922][ T2558] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 68.797798][ T2558] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e01c, mo2=0002] [ 68.806337][ T2558] System zones: 1-12 [ 68.811074][ T2558] EXT4-fs (loop2): orphan cleanup on readonly fs [ 68.818546][ T2558] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #11: comm syz.2.782: attempt to clear invalid blocks 1024 len 1 [ 68.832719][ T2558] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.782: bg 0: block 361: padding at end of block bitmap is not set [ 68.847863][ T2558] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 68.856970][ T2558] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.782: invalid indirect mapped block 1811939328 (level 0) [ 68.871176][ T2558] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.782: invalid indirect mapped block 2 (level 2) [ 68.887457][ T362] hid-generic 0003:046D:C31C.0016: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.1-1/input0 [ 68.899428][ T2558] EXT4-fs (loop2): 1 truncate cleaned up [ 68.905098][ T2558] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 68.914147][ T39] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 69.010044][ T1998] EXT4-fs (loop2): unmounting filesystem. [ 69.052606][ T2576] capability: warning: `syz.2.790' uses 32-bit capabilities (legacy support in use) [ 69.073887][ T2578] loop2: detected capacity change from 0 to 256 [ 69.081408][ T2578] FAT-fs (loop2): Unrecognized mount option "shortnam" or missing value [ 69.152258][ T39] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 69.163104][ T39] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): Failed to power down PHY : -71 [ 69.173344][ T39] CoreChips: probe of 5-1:0.41 failed with error -71 [ 69.180911][ T39] usb 5-1: USB disconnect, device number 10 [ 69.208892][ T316] usb 2-1: USB disconnect, device number 7 [ 69.438737][ T316] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 69.593866][ T2591] kvm [2590]: vcpu0, guest rIP: 0x9143 Unhandled WRMSR(0x11e) = 0xbe702111 [ 69.625040][ T2596] SELinux: failed to load policy [ 69.631473][ T316] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 69.642584][ T316] usb 3-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 69.660705][ T316] usb 3-1: config 0 interface 0 has no altsetting 0 [ 69.667402][ T316] usb 3-1: New USB device found, idVendor=12ba, idProduct=0100, bcdDevice= 0.00 [ 69.678328][ T19] usb 9-1: USB disconnect, device number 7 [ 69.687181][ T316] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.695978][ T316] usb 3-1: config 0 descriptor?? [ 69.701167][ T298] tipc: Node number set to 2130706433 [ 69.727163][ T2600] loop4: detected capacity change from 0 to 8192 [ 69.757606][ T2600] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 69.852798][ T2613] loop4: detected capacity change from 0 to 128 [ 69.864260][ T2613] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 69.878372][ T2613] ext4 filesystem being mounted at /185/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 69.919391][ T291] EXT4-fs (loop4): unmounting filesystem. [ 69.953569][ T2627] netlink: 20 bytes leftover after parsing attributes in process `syz.4.810'. [ 69.977384][ T28] kauditd_printk_skb: 134 callbacks suppressed [ 69.977399][ T28] audit: type=1400 audit(1790645358.292:596): avc: denied { mounton } for pid=2629 comm="syz.4.814" path="/187/file0" dev="configfs" ino=14518 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 69.978774][ T2632] loop8: detected capacity change from 0 to 128 [ 70.030772][ T28] audit: type=1400 audit(1790645358.352:597): avc: denied { mounton } for pid=2631 comm="syz.8.813" path="/54/file1/bus" dev="loop8" ino=1048687 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 70.040674][ T2632] incfs: ino conflict with backing FS 1 [ 70.112052][ T316] input: HID 12ba:0100 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:12BA:0100.0017/input/input19 [ 70.139979][ T2618] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input18 [ 70.194217][ T316] sony 0003:12BA:0100.0017: input,hiddev96,hidraw0: USB HID v0.03 Device [HID 12ba:0100] on usb-dummy_hcd.2-1/input0 [ 70.208720][ T19] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 70.346339][ T2637] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.353740][ T2637] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.362458][ T2637] device bridge_slave_0 entered promiscuous mode [ 70.379638][ T2637] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.386687][ T2637] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.394380][ T2637] device bridge_slave_1 entered promiscuous mode [ 70.431972][ T19] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 70.446514][ T19] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 70.466291][ T19] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0014, bcdDevice= 0.40 [ 70.476922][ T19] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.485537][ T19] usb 2-1: Product: syz [ 70.489804][ T19] usb 2-1: Manufacturer: syz [ 70.494491][ T19] usb 2-1: SerialNumber: syz [ 70.517899][ T2647] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.525333][ T2647] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.532812][ T2647] device bridge_slave_0 entered promiscuous mode [ 70.541583][ T2647] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.548728][ T2647] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.556173][ T2647] device bridge_slave_1 entered promiscuous mode [ 70.586162][ T2637] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.593327][ T2637] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.600619][ T2637] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.607738][ T2637] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.658097][ T2278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.667745][ T2278] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.675989][ T2278] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.700427][ T2278] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.709941][ T2623] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 70.718495][ T2623] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 70.728161][ T2278] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.735416][ T2278] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.744818][ T2278] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.747182][ T19] usb 2-1: 0:1 : does not exist [ 70.754689][ T2278] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.764820][ T2278] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.769257][ T19] usb 2-1: 3:0: failed to get current value for ch 0 (-71) [ 70.790110][ T19] usb 2-1: unit 0 not found! [ 70.790246][ T2278] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.802734][ T19] usb 2-1: USB disconnect, device number 8 [ 70.811463][ T2278] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.830059][ T2279] device bridge_slave_1 left promiscuous mode [ 70.836230][ T2279] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.859262][ T2279] device bridge_slave_0 left promiscuous mode [ 70.865533][ T2279] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.865771][ T2657] loop5: detected capacity change from 0 to 40427 [ 70.875086][ T316] usb 3-1: USB disconnect, device number 7 [ 70.885886][ T2279] device veth1_macvtap left promiscuous mode [ 70.890437][ T2657] F2FS-fs (loop5): invalid crc value [ 70.892651][ T2279] device veth0_vlan left promiscuous mode [ 70.914107][ T2657] F2FS-fs (loop5): Found nat_bits in checkpoint [ 70.953667][ T2657] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 70.980452][ T2657] syz.5.826: attempt to access beyond end of device [ 70.980452][ T2657] loop5: rw=0, sector=49152, nr_sectors = 8 limit=40427 [ 70.997834][ T1930] syz-executor: attempt to access beyond end of device [ 70.997834][ T1930] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 71.028006][ T2278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.036639][ T2278] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.045734][ T2278] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.052804][ T2278] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.060829][ T2278] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.072975][ T2278] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.080044][ T2278] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.087606][ T2278] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.105723][ T2637] device veth0_vlan entered promiscuous mode [ 71.112603][ T2278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.121372][ T2278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.131050][ T2278] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.136854][ T2666] netlink: 'syz.5.828': attribute type 11 has an invalid length. [ 71.138296][ T28] audit: type=1400 audit(1790645359.452:598): avc: denied { bind } for pid=2665 comm="syz.5.828" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 71.147023][ T2278] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.174147][ T2278] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.182127][ T2278] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.194982][ T2278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.203782][ T2278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.215330][ T2278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.224637][ T2278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.236260][ T2637] device veth1_macvtap entered promiscuous mode [ 71.244670][ T2647] device veth0_vlan entered promiscuous mode [ 71.252036][ T2278] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.260691][ T2278] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.277624][ T2278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.286561][ T2278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.294951][ T2278] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 71.311092][ T2233] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.321988][ T2233] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.334255][ T2233] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.345660][ T2675] SELinux: failed to load policy [ 71.355231][ T2233] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.369654][ T2647] device veth1_macvtap entered promiscuous mode [ 71.379641][ T2233] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.392764][ T2233] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.401640][ T2233] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 71.437288][ T2233] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.466337][ T2233] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.508189][ T2233] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.533590][ T2233] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.543769][ T2696] netlink: 'syz.5.840': attribute type 4 has an invalid length. [ 71.573903][ T2707] netlink: 20 bytes leftover after parsing attributes in process `syz.6.843'. [ 71.585085][ T2707] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 71.592737][ T2707] IPv6: NLM_F_CREATE should be set when creating new route [ 71.599998][ T2707] IPv6: NLM_F_CREATE should be set when creating new route [ 71.609650][ T2696] netlink: 'syz.5.840': attribute type 4 has an invalid length. [ 71.635543][ T28] audit: type=1400 audit(1790645359.952:599): avc: denied { read } for pid=2712 comm="syz.5.846" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 71.668493][ T28] audit: type=1400 audit(1790645359.952:600): avc: denied { open } for pid=2712 comm="syz.5.846" path="/77/file0" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 71.711381][ T2720] xt_hashlimit: size too large, truncated to 1048576 [ 71.718545][ T28] audit: type=1400 audit(1790645360.032:601): avc: denied { setopt } for pid=2719 comm="syz.6.850" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 71.763134][ T2723] loop7: detected capacity change from 0 to 16 [ 71.787637][ T2723] erofs: (device loop7): mounted with root inode @ nid 36. [ 71.812925][ T46] erofs: (device loop7): z_erofs_lz4_decompress_mem: failed to decompress -10 in[4096, 0] out[9000] [ 71.824909][ T2723] erofs: (device loop7): z_erofs_lz4_decompress_mem: failed to decompress -10 in[4096, 0] out[4096] [ 71.849453][ T2723] erofs: (device loop7): z_erofs_lz4_decompress_mem: failed to decompress -10 in[4096, 0] out[4096] [ 71.865190][ T2723] erofs: (device loop7): z_erofs_lz4_decompress_mem: failed to decompress -10 in[4096, 0] out[4096] [ 71.876316][ T2723] erofs: (device loop7): z_erofs_lz4_decompress_mem: failed to decompress -10 in[4096, 0] out[4096] [ 71.920383][ T2737] device syzkaller1 entered promiscuous mode [ 71.971602][ T2739] 9pnet: p9_errstr2errno: server reported unknown error ��n$Ž[ [ 71.971602][ T2739] Q&|xù6 [ 72.089821][ T28] audit: type=1400 audit(1790645360.412:602): avc: denied { relabelfrom } for pid=2755 comm="syz.5.865" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 72.114781][ T28] audit: type=1400 audit(1790645360.432:603): avc: denied { relabelto } for pid=2755 comm="syz.5.865" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 72.164130][ T2485] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 72.172108][ T2485] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 72.179645][ T2485] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 72.186748][ T2769] loop5: detected capacity change from 0 to 1024 [ 72.187248][ T2485] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 72.195553][ T2769] EXT4-fs: Ignoring removed orlov option [ 72.201727][ T2485] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 72.215196][ T2485] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 72.223972][ T2485] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 72.231433][ T2485] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 72.239206][ T2485] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 72.246982][ T2485] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 72.254821][ T2485] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 72.257851][ T2769] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 72.262359][ T2485] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 72.277646][ T2769] EXT4-fs (loop5): shut down requested (1) [ 72.278149][ T2485] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 72.291619][ T28] audit: type=1400 audit(1790645360.602:604): avc: denied { read } for pid=85 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 72.293423][ T2778] loop7: detected capacity change from 0 to 512 [ 72.313545][ T2485] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 72.326073][ T28] audit: type=1400 audit(1790645360.602:605): avc: denied { search } for pid=85 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 72.328522][ T2485] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 72.356576][ T2485] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 72.356962][ T1930] EXT4-fs (loop5): unmounting filesystem. [ 72.364076][ T2485] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 72.377267][ T2485] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 72.384710][ T2485] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 72.394322][ T2485] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 72.402247][ T2485] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 72.410003][ T2485] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 72.419121][ T19] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 72.420505][ T2485] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 72.438716][ T2485] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 72.447450][ T2485] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 72.462662][ T2485] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 72.473891][ T2485] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 72.488045][ T2485] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 72.501238][ T2485] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 72.508902][ T2485] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 72.516460][ T2485] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 72.524248][ T2485] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 72.532076][ T2485] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 72.541053][ T2485] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 72.548506][ T2485] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 72.560804][ T2485] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 72.568590][ T2485] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 72.576296][ T2485] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 72.584400][ T2485] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 72.593136][ T2485] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 72.600893][ T2485] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 72.608699][ T19] usb 3-1: Using ep0 maxpacket: 32 [ 72.615208][ T19] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 72.616910][ T2485] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 72.633824][ T2485] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 72.637609][ T19] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 72.641547][ T2485] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 72.669480][ T19] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 72.671198][ T2485] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 72.686121][ T19] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.687064][ T2485] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 72.701822][ T2485] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 72.704973][ T19] usb 3-1: config 0 descriptor?? [ 72.709840][ T2485] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 72.722136][ T2485] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 72.726339][ T19] hub 3-1:0.0: USB hub found [ 72.743058][ T2485] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 72.752869][ T2485] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 72.761696][ T2485] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 72.769577][ T2485] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 72.777032][ T2485] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 72.784698][ T2485] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 72.792388][ T2485] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 72.800075][ T2485] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 72.807695][ T2485] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 72.825029][ T2485] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 72.832846][ T2485] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 72.840567][ T2485] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 72.848107][ T2485] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 72.856396][ T2485] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 72.873680][ T2485] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 72.888684][ T2485] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 72.896158][ T2485] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 72.908709][ T2485] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 72.927177][ T2485] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 72.927291][ T19] hub 3-1:0.0: 1 port detected [ 72.934872][ T2485] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 72.948709][ T2485] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 72.956113][ T2485] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 72.979103][ T2485] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 72.998808][ T2485] hid-generic 0000:0000:0000.0018: hidraw0: HID v0.03 Device [syz1] on syz1 [ 73.105196][ T2805] fido_id[2805]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 73.223780][ T2812] loop6: detected capacity change from 0 to 2048 [ 73.358076][ T2816] netlink: 36 bytes leftover after parsing attributes in process `syz.6.891'. [ 73.551766][ T19] hub 3-1:0.0: activate --> -90 [ 73.677695][ T2844] netlink: 'syz.5.901': attribute type 4 has an invalid length. [ 73.687917][ T2844] netlink: 'syz.5.901': attribute type 4 has an invalid length. [ 73.698078][ T2800] loop7: detected capacity change from 0 to 131072 [ 73.715152][ T2800] F2FS-fs (loop7): Test dummy encryption mode enabled [ 73.732237][ T2800] F2FS-fs (loop7): invalid crc value [ 73.745170][ T2800] F2FS-fs (loop7): Found nat_bits in checkpoint [ 73.783396][ T2800] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 73.791491][ T59] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 73.824414][ T2852] TCP: TCP_TX_DELAY enabled [ 73.848756][ T2800] overlayfs: failed to resolve './file0': -2 [ 73.852875][ T2861] loop5: detected capacity change from 0 to 16 [ 73.882874][ T2861] erofs: (device loop5): mounted with root inode @ nid 36. [ 73.913146][ T2861] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=46 [ 73.927420][ T2861] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=46 [ 73.937155][ T2861] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=46 [ 73.946302][ T2861] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=46 [ 73.957297][ T2279] usb 3-1: Failed to suspend device, error -71 [ 73.958571][ T2485] usb 3-1: USB disconnect, device number 8 [ 73.998765][ T59] usb 7-1: Using ep0 maxpacket: 32 [ 74.016885][ T59] usb 7-1: too many endpoints for config 0 interface 0 altsetting 129: 33, using maximum allowed: 30 [ 74.024419][ T2868] loop5: detected capacity change from 0 to 4096 [ 74.038353][ T59] usb 7-1: config 0 interface 0 altsetting 129 has 1 endpoint descriptor, different from the interface descriptor's value: 33 [ 74.053000][ T2868] EXT4-fs (loop5): Test dummy encryption mode enabled [ 74.062489][ T2872] bridge0: port 3(vlan2) entered blocking state [ 74.068901][ T59] usb 7-1: config 0 interface 0 has no altsetting 0 [ 74.069226][ T2872] bridge0: port 3(vlan2) entered disabled state [ 74.076878][ T2868] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 74.091817][ T2872] device vlan2 entered promiscuous mode [ 74.097449][ T2872] device syz_tun entered promiscuous mode [ 74.097783][ T59] usb 7-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 74.117428][ T2872] bridge0: port 3(vlan2) entered blocking state [ 74.123762][ T2872] bridge0: port 3(vlan2) entered forwarding state [ 74.155567][ T1930] EXT4-fs (loop5): unmounting filesystem. [ 74.171949][ T59] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.201667][ T59] usb 7-1: config 0 descriptor?? [ 74.266233][ T2888] ip_tables: iptables: counters copy to user failed while replacing table [ 74.309839][ T2893] netlink: 'syz.5.919': attribute type 1 has an invalid length. [ 74.381922][ T2903] loop5: detected capacity change from 0 to 256 [ 74.394926][ T2903] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 74.407510][ T2903] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 74.424385][ T2903] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 74.478607][ T2913] netlink: 32 bytes leftover after parsing attributes in process `syz.2.928'. [ 74.505301][ T2916] FAT-fs (loop2): Directory bread(block 64) failed [ 74.512578][ T2916] FAT-fs (loop2): Directory bread(block 65) failed [ 74.519785][ T2916] FAT-fs (loop2): Directory bread(block 66) failed [ 74.536796][ T2916] FAT-fs (loop2): Directory bread(block 67) failed [ 74.543661][ T2916] FAT-fs (loop2): Directory bread(block 68) failed [ 74.550748][ T2916] FAT-fs (loop2): Directory bread(block 69) failed [ 74.557297][ T2916] FAT-fs (loop2): Directory bread(block 70) failed [ 74.574473][ T2916] FAT-fs (loop2): Directory bread(block 71) failed [ 74.587831][ T2916] FAT-fs (loop2): Directory bread(block 72) failed [ 74.596337][ T2916] FAT-fs (loop2): Directory bread(block 73) failed [ 74.618328][ T59] zydacron 0003:13EC:0006.0019: global environment stack underflow [ 74.626958][ T59] zydacron 0003:13EC:0006.0019: item 0 0 1 11 parsing failed [ 74.634698][ T59] zydacron 0003:13EC:0006.0019: parse failed [ 74.640872][ T59] zydacron: probe of 0003:13EC:0006.0019 failed with error -22 [ 74.825747][ T19] usb 7-1: USB disconnect, device number 5 [ 74.920878][ T2931] F2FS-fs (loop2): Invalid log sectorsize (0) [ 74.927467][ T2931] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 74.936441][ T2931] F2FS-fs (loop2): invalid crc value [ 74.943025][ T2931] F2FS-fs (loop2): Found nat_bits in checkpoint [ 74.968837][ T2931] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 74.975914][ T2931] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 75.117919][ T2943] set_capacity_and_notify: 2 callbacks suppressed [ 75.117932][ T2943] loop2: detected capacity change from 0 to 256 [ 75.133310][ T2943] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x987a2e96, utbl_chksum : 0xe619d30d) [ 75.149862][ T2943] syz.2.939: attempt to access beyond end of device [ 75.149862][ T2943] loop2: rw=524288, sector=34359738488, nr_sectors = 8 limit=256 [ 75.164264][ T2943] syz.2.939: attempt to access beyond end of device [ 75.164264][ T2943] loop2: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 75.178418][ T2943] syz.2.939: attempt to access beyond end of device [ 75.178418][ T2943] loop2: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 75.192966][ T2943] syz.2.939: attempt to access beyond end of device [ 75.192966][ T2943] loop2: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 75.207292][ T2943] syz.2.939: attempt to access beyond end of device [ 75.207292][ T2943] loop2: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 75.227134][ T2943] syz.2.939: attempt to access beyond end of device [ 75.227134][ T2943] loop2: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 75.241619][ T2946] exFAT-fs (loop2): hint_cluster is invalid (1) [ 75.248468][ T2943] exFAT-fs (loop2): error, invalid access to exfat cache (entry 0x00000000) [ 75.257478][ T2943] exFAT-fs (loop2): Filesystem has been set read-only [ 75.264468][ T2951] loop1: detected capacity change from 0 to 512 [ 75.264476][ T2943] exFAT-fs (loop2): error, failed to bmap (inode : ffff888133db5150 iblock : 0, err : -5) [ 75.264509][ T2946] exFAT-fs (loop2): error, invalid access to exfat cache (entry 0x00000000) [ 75.290245][ T2946] exFAT-fs (loop2): error, failed to bmap (inode : ffff888133db5150 iblock : 9, err : -5) [ 75.307793][ T2943] exFAT-fs (loop2): error, invalid access to exfat cache (entry 0x00000000) [ 75.316692][ T2943] exFAT-fs (loop2): error, failed to bmap (inode : ffff888133db5150 iblock : 0, err : -5) [ 75.326855][ T2946] exFAT-fs (loop2): error, invalid access to exfat cache (entry 0x00000000) [ 75.335633][ T2946] exFAT-fs (loop2): error, failed to bmap (inode : ffff888133db5150 iblock : 8, err : -5) [ 75.336678][ T2951] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 75.353169][ T2943] exFAT-fs (loop2): error, invalid access to exfat cache (entry 0x00000000) [ 75.369674][ T2943] exFAT-fs (loop2): error, failed to bmap (inode : ffff888133db5150 iblock : 1, err : -5) [ 75.382347][ T2951] FAT-fs (loop1): Filesystem has been set read-only [ 75.384445][ T2943] exFAT-fs (loop2): error, invalid access to exfat cache (entry 0x00000000) [ 75.403370][ T2943] exFAT-fs (loop2): error, failed to bmap (inode : ffff888133db5150 iblock : 2, err : -5) [ 75.416263][ T2943] exFAT-fs (loop2): error, invalid access to exfat cache (entry 0x00000000) [ 75.433223][ T2943] exFAT-fs (loop2): error, failed to bmap (inode : ffff888133db5150 iblock : 3, err : -5) [ 75.444094][ T2943] exFAT-fs (loop2): error, invalid access to exfat cache (entry 0x00000000) [ 75.453425][ T2943] exFAT-fs (loop2): error, failed to bmap (inode : ffff888133db5150 iblock : 4, err : -5) [ 75.464467][ T2943] exFAT-fs (loop2): error, invalid access to exfat cache (entry 0x00000000) [ 75.473661][ T2943] exFAT-fs (loop2): error, failed to bmap (inode : ffff888133db5150 iblock : 5, err : -5) [ 75.484066][ T2943] exFAT-fs (loop2): error, invalid access to exfat cache (entry 0x00000000) [ 75.493035][ T2943] exFAT-fs (loop2): error, failed to bmap (inode : ffff888133db5150 iblock : 6, err : -5) [ 75.503489][ T2943] exFAT-fs (loop2): error, invalid access to exfat cache (entry 0x00000000) [ 75.517725][ T2943] exFAT-fs (loop2): error, invalid access to exfat cache (entry 0x00000000) [ 75.527550][ T2943] exFAT-fs (loop2): error, invalid access to exfat cache (entry 0x00000000) [ 75.536721][ T2943] exFAT-fs (loop2): error, invalid access to exfat cache (entry 0x00000000) [ 75.546369][ T2943] exFAT-fs (loop2): error, invalid access to exfat cache (entry 0x00000000) [ 75.557330][ T2943] exFAT-fs (loop2): error, invalid access to exfat cache (entry 0x00000000) [ 75.568572][ T2943] exFAT-fs (loop2): error, invalid access to exfat cache (entry 0x00000000) [ 75.577774][ T2943] exFAT-fs (loop2): error, invalid access to exfat cache (entry 0x00000000) [ 75.587053][ T2943] exFAT-fs (loop2): error, invalid access to exfat cache (entry 0x00000000) [ 75.601853][ T2943] exFAT-fs (loop2): error, invalid access to exfat cache (entry 0x00000000) [ 75.630244][ T2974] loop5: detected capacity change from 0 to 256 [ 75.640812][ T2943] exFAT-fs (loop2): error, invalid access to exfat cache (entry 0x00000000) [ 75.653234][ T2974] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x7cc0afd3, utbl_chksum : 0xe619d30d) [ 75.673050][ T2943] exFAT-fs (loop2): error, invalid access to exfat cache (entry 0x00000000) [ 75.682762][ T2943] exFAT-fs (loop2): error, invalid access to exfat cache (entry 0x00000000) [ 75.692550][ T2943] exFAT-fs (loop2): error, invalid access to exfat cache (entry 0x00000000) [ 75.723740][ T2943] exFAT-fs (loop2): error, invalid access to exfat cache (entry 0x00000000) [ 75.739644][ T2984] loop7: detected capacity change from 0 to 1024 [ 75.744694][ T2943] exFAT-fs (loop2): error, invalid access to exfat cache (entry 0x00000000) [ 75.756790][ T2984] EXT4-fs: Ignoring removed oldalloc option [ 75.757643][ T2943] exFAT-fs (loop2): error, invalid access to exfat cache (entry 0x00000000) [ 75.780011][ T2943] exFAT-fs (loop2): error, invalid access to exfat cache (entry 0x00000000) [ 75.780315][ T2984] EXT4-fs: Ignoring removed orlov option [ 75.789326][ T2943] exFAT-fs (loop2): error, invalid access to exfat cache (entry 0x00000000) [ 75.802315][ T2990] FAULT_INJECTION: forcing a failure. [ 75.802315][ T2990] name failslab, interval 1, probability 0, space 0, times 0 [ 75.803574][ T2943] exFAT-fs (loop2): error, invalid access to exfat cache (entry 0x00000000) [ 75.815922][ T2990] CPU: 0 PID: 2990 Comm: syz.5.960 Not tainted syzkaller #0 [ 75.815943][ T2990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 75.815963][ T2990] Call Trace: [ 75.815969][ T2990] [ 75.815977][ T2990] __dump_stack+0x21/0x24 [ 75.816010][ T2990] dump_stack_lvl+0x110/0x170 [ 75.816030][ T2990] ? __cfi_dump_stack_lvl+0x8/0x8 [ 75.825394][ T2943] exFAT-fs (loop2): error, invalid access to exfat cache (entry 0x00000000) [ 75.832261][ T2990] dump_stack+0x15/0x24 [ 75.832291][ T2990] should_fail_ex+0x3bf/0x510 [ 75.832308][ T2990] ? __sigqueue_alloc+0x13f/0x210 [ 75.842747][ T2943] exFAT-fs (loop2): error, invalid access to exfat cache (entry 0x00000000) [ 75.845668][ T2990] __should_failslab+0xac/0xf0 [ 75.845697][ T2990] should_failslab+0x9/0x20 [ 75.848853][ T2943] exFAT-fs (loop2): error, invalid access to exfat cache (entry 0x00000000) [ 75.852908][ T2990] kmem_cache_alloc+0x3b/0x320 [ 75.852935][ T2990] __sigqueue_alloc+0x13f/0x210 [ 75.857639][ T2943] exFAT-fs (loop2): error, invalid access to exfat cache (entry 0x00000000) [ 75.862677][ T2990] __send_signal_locked+0x19d/0xb70 [ 75.862710][ T2990] send_signal_locked+0x416/0x580 [ 75.862727][ T2990] force_sig_info_to_task+0x2e5/0x3b0 [ 75.862750][ T2990] force_sig_fault+0xd9/0x130 [ 75.862768][ T2990] ? __cfi_force_sig_fault+0x10/0x10 [ 75.862788][ T2990] ? page_fault_oops+0x8b0/0x8b0 [ 75.872098][ T2943] exFAT-fs (loop2): error, invalid access to exfat cache (entry 0x00000000) [ 75.875756][ T2990] ? down_read_trylock+0x27f/0x660 [ 75.875790][ T2990] ? find_vma+0x89/0xd0 [ 75.880811][ T2943] exFAT-fs (loop2): error, invalid access to exfat cache (entry 0x00000000) [ 75.885465][ T2990] __bad_area_nosemaphore+0x303/0x630 [ 75.885496][ T2990] bad_area_nosemaphore+0x2d/0x40 [ 75.894557][ T2943] exFAT-fs (loop2): error, invalid access to exfat cache (entry 0x00000000) [ 75.898987][ T2990] do_user_addr_fault+0xd10/0x1030 [ 75.899015][ T2990] ? debug_smp_processor_id+0x17/0x20 [ 75.899037][ T2990] exc_page_fault+0x51/0xb0 [ 75.899053][ T2990] asm_exc_page_fault+0x27/0x30 [ 75.903816][ T2943] exFAT-fs (loop2): error, invalid access to exfat cache (entry 0x00000000) [ 75.912180][ T2990] RIP: 0033:0x7f5b81f88fe1 [ 75.912198][ T2990] Code: 00 0f 1f 84 00 00 00 00 00 48 85 f6 74 37 49 89 f0 89 f8 48 89 fa c5 f9 ef c0 25 ff 0f 00 00 3d e0 0f 00 00 0f 87 5f 02 00 00 fd 74 0f c5 fd d7 c1 48 83 fe 20 76 11 85 c0 74 6d f3 0f bc c0 [ 75.912211][ T2990] RSP: 002b:00007f5b82ee8f48 EFLAGS: 00010283 [ 75.912226][ T2990] RAX: 0000000000000000 RBX: 00007f5b82ee9014 RCX: 0000000000000000 [ 75.917319][ T2943] exFAT-fs (loop2): error, invalid access to exfat cache (entry 0x00000000) [ 75.921926][ T2990] RDX: 0000000000000000 RSI: 000000000000000f RDI: 0000000000000000 [ 75.921939][ T2990] RBP: 0000000000000003 R08: 000000000000000f R09: 0000000000000000 [ 75.921949][ T2990] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 75.921957][ T2990] R13: 00007f5b82ee8fb0 R14: 00007f5b82225fa0 R15: 0000000000000000 [ 75.921971][ T2990] [ 75.945309][ T2984] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 75.947782][ T2943] exFAT-fs (loop2): error, invalid access to exfat cache (entry 0x00000000) [ 75.969204][ T2984] ext4 filesystem being mounted at /31/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 75.975412][ T2943] exFAT-fs (loop2): error, invalid access to exfat cache (entry 0x00000000) [ 75.997672][ T2984] EXT4-fs error (device loop7): ext4_map_blocks:747: inode #15: comm syz.7.957: lblock 0 mapped to illegal pblock 0 (length 6) [ 76.000294][ T2943] exFAT-fs (loop2): error, invalid access to exfat cache (entry 0x00000000) [ 76.009772][ T2984] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 76.014489][ T2943] exFAT-fs (loop2): error, invalid access to exfat cache (entry 0x00000000) [ 76.033473][ T2984] EXT4-fs (loop7): This should not happen!! Data will be lost [ 76.033473][ T2984] [ 76.210778][ T2995] EXT4-fs error (device loop7): ext4_map_blocks:637: inode #15: comm syz.7.957: lblock 0 mapped to illegal pblock 0 (length 6) [ 76.262397][ T327] EXT4-fs error (device loop7): ext4_map_blocks:747: inode #15: block 8: comm kworker/u4:4: lblock 8 mapped to illegal pblock 8 (length 8) [ 76.293659][ T327] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 76.312219][ T327] EXT4-fs (loop7): This should not happen!! Data will be lost [ 76.312219][ T327] [ 76.329363][ T2637] EXT4-fs (loop7): unmounting filesystem. [ 76.497008][ T19] kernel write not supported for file /vcs (pid: 19 comm: kworker/0:1) [ 76.550488][ T3026] binder: 3025:3026 ioctl c0306201 200000000080 returned -14 [ 76.615355][ T3031] loop1: detected capacity change from 0 to 512 [ 76.656205][ T3031] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 76.706397][ T3031] EXT4-fs (loop1): 1 truncate cleaned up [ 76.718723][ T3031] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 76.764677][ T3044] loop7: detected capacity change from 0 to 256 [ 76.794764][ T1850] EXT4-fs (loop1): unmounting filesystem. [ 76.884912][ T3053] loop1: detected capacity change from 0 to 512 [ 76.920038][ T3053] EXT4-fs: Ignoring removed oldalloc option [ 76.939136][ T3053] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 76.970078][ T3053] EXT4-fs (loop1): 1 truncate cleaned up [ 77.021503][ T3053] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 77.111113][ T1850] EXT4-fs (loop1): unmounting filesystem. [ 77.210210][ T3067] loop6: detected capacity change from 0 to 256 [ 77.219755][ T3067] exFAT-fs (loop6): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 77.306123][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 77.306136][ T28] audit: type=1400 audit(1790645365.622:612): avc: denied { ioctl } for pid=3073 comm="syz.6.993" path="socket:[31637]" dev="sockfs" ino=31637 ioctlcmd=0x7436 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 77.449500][ T3078] ================================================================== [ 77.457686][ T3078] BUG: KASAN: use-after-free in rcu_segcblist_enqueue+0x9c/0xb0 [ 77.465318][ T3078] Write of size 8 at addr ffff888131269990 by task syz.6.993/3078 [ 77.473113][ T3078] [ 77.475426][ T3078] CPU: 0 PID: 3078 Comm: syz.6.993 Not tainted syzkaller #0 [ 77.482689][ T3078] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 77.492918][ T3078] Call Trace: [ 77.496356][ T3078] [ 77.499277][ T3078] __dump_stack+0x21/0x24 [ 77.503632][ T3078] dump_stack_lvl+0x110/0x170 [ 77.508333][ T3078] ? __cfi_dump_stack_lvl+0x8/0x8 [ 77.513534][ T3078] ? rcu_segcblist_enqueue+0x9c/0xb0 [ 77.518817][ T3078] print_address_description+0x71/0x200 [ 77.524356][ T3078] print_report+0x4a/0x60 [ 77.528674][ T3078] kasan_report+0x122/0x150 [ 77.533169][ T3078] ? rcu_segcblist_enqueue+0x9c/0xb0 [ 77.538441][ T3078] __asan_report_store8_noabort+0x17/0x20 [ 77.544150][ T3078] rcu_segcblist_enqueue+0x9c/0xb0 [ 77.549337][ T3078] call_rcu+0x554/0xf50 [ 77.553487][ T3078] ? __cfi_call_rcu+0x10/0x10 [ 77.558236][ T3078] ? __kasan_check_write+0x14/0x20 [ 77.563938][ T3078] ? selinux_inode_free_security+0x21f/0x230 [ 77.569994][ T3078] security_inode_free+0xc5/0xe0 [ 77.574931][ T3078] __destroy_inode+0x175/0x500 [ 77.579685][ T3078] evict+0x777/0x8c0 [ 77.583587][ T3078] ? proc_nr_inodes+0x2f0/0x2f0 [ 77.588426][ T3078] ? _raw_spin_lock+0x94/0xf0 [ 77.593105][ T3078] ? __cfi__raw_spin_lock+0x10/0x10 [ 77.598302][ T3078] ? __kasan_check_write+0x14/0x20 [ 77.603416][ T3078] iput+0x633/0x690 [ 77.607250][ T3078] dentry_unlink_inode+0x346/0x3f0 [ 77.612346][ T3078] __dentry_kill+0x46c/0x680 [ 77.616927][ T3078] dentry_kill+0xc0/0x2a0 [ 77.621250][ T3078] dput+0x42/0x80 [ 77.624867][ T3078] __fput+0x5c0/0x8f0 [ 77.628836][ T3078] ____fput+0x15/0x20 [ 77.632831][ T3078] task_work_run+0x1e1/0x250 [ 77.637406][ T3078] ? __cfi_task_work_run+0x10/0x10 [ 77.642503][ T3078] ? free_nsproxy+0x21f/0x270 [ 77.647295][ T3078] do_exit+0xb0d/0x29f0 [ 77.651549][ T3078] ? __cfi_do_exit+0x10/0x10 [ 77.656149][ T3078] ? xfd_validate_state+0x70/0x150 [ 77.661253][ T3078] ? __kasan_check_write+0x14/0x20 [ 77.666350][ T3078] __x64_sys_exit+0x40/0x40 [ 77.670843][ T3078] x64_sys_call+0x67/0x9a0 [ 77.675328][ T3078] do_syscall_64+0x4c/0xa0 [ 77.679729][ T3078] ? clear_bhb_loop+0x30/0x80 [ 77.684391][ T3078] ? clear_bhb_loop+0x30/0x80 [ 77.689048][ T3078] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 77.695269][ T3078] RIP: 0033:0x7f7ce539e159 [ 77.699854][ T3078] Code: Unable to access opcode bytes at 0x7f7ce539e12f. [ 77.706859][ T3078] RSP: 002b:00007f7ce620bef8 EFLAGS: 00000246 ORIG_RAX: 000000000000003c [ 77.715347][ T3078] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f7ce539e159 [ 77.723307][ T3078] RDX: 00007f7ce620c9c8 RSI: 0000000000000000 RDI: 0000000000000000 [ 77.731365][ T3078] RBP: 00007f7ce543506b R08: 0000000000000000 R09: 0000000000000058 [ 77.739333][ T3078] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 77.747287][ T3078] R13: 00007f7ce5626038 R14: 00007f7ce5625fa0 R15: 00007ffe7db6ae88 [ 77.755260][ T3078] [ 77.758262][ T3078] [ 77.760562][ T3078] Allocated by task 3075: [ 77.764865][ T3078] kasan_set_track+0x4b/0x70 [ 77.769442][ T3078] kasan_save_alloc_info+0x1f/0x30 [ 77.774626][ T3078] __kasan_kmalloc+0x95/0xb0 [ 77.779212][ T3078] __kmalloc+0xb4/0x1e0 [ 77.783347][ T3078] l2tp_session_create+0x38/0xbd0 [ 77.788358][ T3078] pppol2tp_connect+0xbf5/0x1640 [ 77.793283][ T3078] __sys_connect+0x3da/0x460 [ 77.797859][ T3078] __x64_sys_connect+0x7a/0x90 [ 77.802604][ T3078] x64_sys_call+0x88d/0x9a0 [ 77.807096][ T3078] do_syscall_64+0x4c/0xa0 [ 77.811503][ T3078] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 77.817583][ T3078] [ 77.819983][ T3078] Freed by task 327: [ 77.823865][ T3078] kasan_set_track+0x4b/0x70 [ 77.828445][ T3078] kasan_save_free_info+0x2b/0x40 [ 77.833457][ T3078] ____kasan_slab_free+0x132/0x180 [ 77.838644][ T3078] __kasan_slab_free+0x11/0x20 [ 77.843486][ T3078] slab_free_freelist_hook+0xc2/0x190 [ 77.848960][ T3078] __kmem_cache_free+0xb7/0x1b0 [ 77.853817][ T3078] kfree+0x6f/0xf0 [ 77.857606][ T3078] l2tp_session_put+0xaf/0x1a0 [ 77.862699][ T3078] l2tp_session_delete+0x3df/0x4d0 [ 77.867795][ T3078] l2tp_tunnel_del_work+0x199/0x410 [ 77.872978][ T3078] process_one_work+0x717/0xc30 [ 77.877829][ T3078] worker_thread+0xa4d/0x11d0 [ 77.882486][ T3078] kthread+0x281/0x320 [ 77.886562][ T3078] ret_from_fork+0x1f/0x30 [ 77.890975][ T3078] [ 77.893302][ T3078] Last potentially related work creation: [ 77.899001][ T3078] kasan_save_stack+0x3a/0x60 [ 77.903689][ T3078] __kasan_record_aux_stack+0xb6/0xc0 [ 77.909046][ T3078] kasan_record_aux_stack_noalloc+0xb/0x10 [ 77.914841][ T3078] call_rcu+0xcf/0xf50 [ 77.918897][ T3078] pppol2tp_release+0x1e3/0x2b0 [ 77.923733][ T3078] sock_close+0xc9/0x220 [ 77.928135][ T3078] __fput+0x1fd/0x8f0 [ 77.932104][ T3078] ____fput+0x15/0x20 [ 77.936069][ T3078] task_work_run+0x1e1/0x250 [ 77.940642][ T3078] do_exit+0xb0d/0x29f0 [ 77.944799][ T3078] __cfi___ia32_sys_exit+0x0/0x10 [ 77.949895][ T3078] x64_sys_call+0x67/0x9a0 [ 77.954294][ T3078] do_syscall_64+0x4c/0xa0 [ 77.958693][ T3078] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 77.964603][ T3078] [ 77.966942][ T3078] Second to last potentially related work creation: [ 77.973499][ T3078] kasan_save_stack+0x3a/0x60 [ 77.978253][ T3078] __kasan_record_aux_stack+0xb6/0xc0 [ 77.983605][ T3078] kasan_record_aux_stack_noalloc+0xb/0x10 [ 77.989860][ T3078] kvfree_call_rcu+0x8b/0x7a0 [ 77.994897][ T3078] neigh_destroy+0x476/0x5b0 [ 77.999493][ T3078] neigh_cleanup_and_release+0x76/0x1a0 [ 78.005021][ T3078] neigh_flush_dev+0x79a/0x950 [ 78.009769][ T3078] __neigh_ifdown+0x3f/0x400 [ 78.014344][ T3078] neigh_ifdown+0x1f/0x30 [ 78.018664][ T3078] rt6_disable_ip+0x878/0x8e0 [ 78.023434][ T3078] addrconf_ifdown+0x15d/0x1950 [ 78.028267][ T3078] addrconf_notify+0x39f/0xe30 [ 78.033011][ T3078] raw_notifier_call_chain+0xa1/0x110 [ 78.038364][ T3078] dev_close_many+0x325/0x4d0 [ 78.043060][ T3078] unregister_netdevice_many+0x43f/0x1910 [ 78.048795][ T3078] rtnl_dellink+0x513/0x7d0 [ 78.053289][ T3078] rtnetlink_rcv_msg+0xb28/0xde0 [ 78.058221][ T3078] netlink_rcv_skb+0x200/0x450 [ 78.062969][ T3078] rtnetlink_rcv+0x1c/0x20 [ 78.067366][ T3078] netlink_unicast+0x8c1/0xa60 [ 78.072108][ T3078] netlink_sendmsg+0x8b9/0xbd0 [ 78.076909][ T3078] ____sys_sendmsg+0x5fb/0x9c0 [ 78.081655][ T3078] ___sys_sendmsg+0x2a2/0x360 [ 78.086313][ T3078] __x64_sys_sendmsg+0x20d/0x2e0 [ 78.091265][ T3078] x64_sys_call+0x171/0x9a0 [ 78.095758][ T3078] do_syscall_64+0x4c/0xa0 [ 78.100163][ T3078] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 78.106046][ T3078] [ 78.108358][ T3078] The buggy address belongs to the object at ffff888131269800 [ 78.108358][ T3078] which belongs to the cache kmalloc-512 of size 512 [ 78.122417][ T3078] The buggy address is located 400 bytes inside of [ 78.122417][ T3078] 512-byte region [ffff888131269800, ffff888131269a00) [ 78.135680][ T3078] [ 78.138163][ T3078] The buggy address belongs to the physical page: [ 78.144555][ T3078] page:ffffea0004c49a00 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88813126ac00 pfn:0x131268 [ 78.156077][ T3078] head:ffffea0004c49a00 order:2 compound_mapcount:0 compound_pincount:0 [ 78.164384][ T3078] flags: 0x4000000000010200(slab|head|zone=1) [ 78.170460][ T3078] raw: 4000000000010200 ffffea0004c87908 ffffea0004c9e508 ffff888100042f00 [ 78.179222][ T3078] raw: ffff88813126ac00 0000000000100008 00000001ffffffff 0000000000000000 [ 78.187927][ T3078] page dumped because: kasan: bad access detected [ 78.194392][ T3078] page_owner tracks the page as allocated [ 78.200114][ T3078] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 290, tgid 290 (syz-executor), ts 22918336461, free_ts 0 [ 78.220690][ T3078] post_alloc_hook+0x1f5/0x210 [ 78.226437][ T3078] prep_new_page+0x1c/0x110 [ 78.230953][ T3078] get_page_from_freelist+0x2ca9/0x2d20 [ 78.236618][ T3078] __alloc_pages+0x1fa/0x610 [ 78.241301][ T3078] alloc_slab_page+0x6e/0xf0 [ 78.245987][ T3078] new_slab+0x98/0x3e0 [ 78.250044][ T3078] ___slab_alloc+0x70f/0xb70 [ 78.254794][ T3078] __slab_alloc+0x5e/0xa0 [ 78.259110][ T3078] __kmem_cache_alloc_node+0x204/0x2d0 [ 78.264638][ T3078] __kmalloc_node_track_caller+0xa1/0x1e0 [ 78.270344][ T3078] __alloc_skb+0x226/0x4a0 [ 78.275022][ T3078] netlink_ack+0x373/0x1160 [ 78.279508][ T3078] netlink_rcv_skb+0x27e/0x450 [ 78.284276][ T3078] rtnetlink_rcv+0x1c/0x20 [ 78.288667][ T3078] netlink_unicast+0x8c1/0xa60 [ 78.293410][ T3078] netlink_sendmsg+0x8b9/0xbd0 [ 78.298161][ T3078] page_owner free stack trace missing [ 78.303518][ T3078] [ 78.305834][ T3078] Memory state around the buggy address: [ 78.311474][ T3078] ffff888131269880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 78.319810][ T3078] ffff888131269900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 78.327941][ T3078] >ffff888131269980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 78.335981][ T3078] ^ [ 78.340551][ T3078] ffff888131269a00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 78.348684][ T3078] ffff888131269a80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 78.356723][ T3078] ================================================================== [ 78.364860][ T3078] Disabling lock debugging due to kernel taint [ 78.398943][ T327] tipc: Disabling bearer [ 78.406620][ T327] tipc: Left network mode [ 78.999308][ T327] device bridge_slave_1 left promiscuous mode [ 79.005572][ T327] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.013418][ T327] device bridge_slave_0 left promiscuous mode [ 79.019735][ T327] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.028038][ T327] device veth1_macvtap left promiscuous mode [ 79.034352][ T327] device veth0_vlan left promiscuous mode