last executing test programs: 2m14.862450803s ago: executing program 32 (id=237): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000040000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000006000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='hrtimer_init\x00', r0}, 0x10) futex(0x0, 0x80000000000b, 0x4, &(0x7f000000b000)={0x77359400}, &(0x7f0000048000)=0x200, 0x0) 2m5.726938146s ago: executing program 33 (id=739): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x5, 0x6, 0x0, 0x1, 0xf525}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) 2m3.52109631s ago: executing program 34 (id=798): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@delneigh={0x28, 0x1d, 0x1, 0x0, 0xa1ffffff, {0x7, 0x0, 0x0, r2, 0x0, 0xe2}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}, 0x80}, 0x1, 0x0, 0x0, 0x24004000}, 0x800) 1m39.06261523s ago: executing program 35 (id=1375): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) writev(r1, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}], 0x1) 1m13.021767079s ago: executing program 36 (id=2020): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000400)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) fcntl$lock(r0, 0x24, &(0x7f00000000c0)={0x2}) 1m8.215109316s ago: executing program 37 (id=2152): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xd, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x36e084fcb6392193, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0xa, r2, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000000)='id\xf7\xff\xffe{') 1m4.676113647s ago: executing program 38 (id=2273): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f0000000280)={[{@jqfmt_vfsv1}, {}, {@quota}, {@noauto_da_alloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@discard}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x5}}, {@orlov}]}, 0xfc, 0x56f, &(0x7f0000003780)="$eJzs3d9rW1UcAPDvTdPup66DMdQHGezByVy6tv6YIDgfRYcDfZ+hzcpouowmHWsduD24F19kCCIOxD/Adx+H/4B/xUAHQ0bRBxEiN73psjZp2i4z2fL5wG3Pyb23535z7vf2nNyEBDC0jqU/chEvR8Q3ScShlnX5yFYeW9tu9eH1mXRJol7/9M8kkuyx5vZJ9vtAVnkpIn79KuJkbnO71eWV+WK5XFrM6hO1hSsT1eWVU5cWinOludLlqenpM29NT737zts9i/X1839//8ndD898fXz1u5/vH76dxNk4mK1rjeMJ3GitHCv+m5VG4+yGDSd70NggSfp9AOzKSJbno5FeAw7FSJb1wPPvy4ioA0Mqkf8wpJrjgObcvkfz4GfGgw/WJkCN2Mda48+vvTYSextzo/2ryWMzo3S+O96D9tM2fvnjzu10ia1fh9jXpQ6wIzduRsTpfH7z9T/Jrn+7d7rx4vHWNrYxbP9/oJ/upuOfN9qN/3Lr459oM/450CZ3d6N7/ufu96CZjtLx33ttx7/rl67xkaz2QmPMN5pcvFQunY6IFyPiRNS73vo4s3qv3mld6/gvXdL2m2PB7Dju5/c8vs9ssVaMiLFdhvyYBzcjXsm3iz9Z7/+kTf+nz8f5bbZxtHTn1U7rusf/dNV/initbf8/6tZk6/uTE43zYaJ5Vmz2162jv3Vqv9/xp/2/f+v4x5PW+7XVnbfx495/Sp3W7fb8H0s+a5SbSXCtWKstTkaMJR9vfnzq0b7NenP7NP4Tx7e+/rU7/9PJ1+fbjP/WkVsdNx2E/p/dUf/vvHDvoy9+6NT+9vr/zUbpRPZIdv1rLztXtnuAT/r8AQAAAAAAwCDJRcTBSHKF9XIuVyisvb/jSOzPlSvV2smLlaXLs9H4rOx4jOaad7oPtbwfYjJ7P2yzPrWhPh0RhyPi25F9jXphplKe7XfwAAAAAAAAAAAAAAAAAAAAMCAOdPj8f+r3kX4fHfDUNb7YYE+/jwLoh65f+d+Lb3oCBlLX/AeeW/Ifhpf8h+El/2F4yX8YXvIfhpf8h+El/wEAAAAAAAAAAAAAAAAAAAAAAAAAAKCnzp87ly711YfXZ9L67NXlpfnK1VOzpep8YWFppjBTWbxSmKtU5sqlwkxlodvfK1cqVyanYunaRK1UrU1Ul1cuLFSWLtcuXFoozpUulEb/l6gAAAAAAAAAAAAAAAAAAADg2VJdXpkvlsulRYWOhfdjIA7jaQa4Zle75wclCoUOhZtZ9+5srz5elAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgg/8CAAD//4yLMZo=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)='2', 0x1, 0x8080c61) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0, 0x0) ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000080)={0xffa1, 0x2007bb}) 49.605565058s ago: executing program 39 (id=2697): setreuid(0xee00, 0xee00) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x20000000) 34.153934057s ago: executing program 3 (id=3136): sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x14, 0x0, 0x2, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x50}, 0x40) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1500"], 0x15) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000080)={0x17, 0x0, 0x0}) 34.145710737s ago: executing program 3 (id=3137): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="05000000050000000200000004"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000080000000d"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000002d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000300)='tlb_flush\x00', r1}, 0x10) 34.119378728s ago: executing program 3 (id=3140): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x20780, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) rt_sigpending(0x0, 0x0) 34.099865538s ago: executing program 3 (id=3142): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f0000000000)='./file0/../file0\x00', 0x1) 34.079976738s ago: executing program 3 (id=3143): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000020b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) 33.99214072s ago: executing program 3 (id=3146): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000000203010100000700000000000400000a0800010001"], 0x1c}, 0x1, 0x0, 0x0, 0x40841}, 0x2000c010) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000100)={0x1c, 0x2, 0x3, 0x101, 0x0, 0x0, {0x4, 0x0, 0x1a}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x1e}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40841}, 0x2000c010) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000000303050000000000000000000000000a"], 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x24000044) 33.99187844s ago: executing program 40 (id=3146): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000000203010100000700000000000400000a0800010001"], 0x1c}, 0x1, 0x0, 0x0, 0x40841}, 0x2000c010) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000100)={0x1c, 0x2, 0x3, 0x101, 0x0, 0x0, {0x4, 0x0, 0x1a}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x1e}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40841}, 0x2000c010) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000000303050000000000000000000000000a"], 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x24000044) 23.790933164s ago: executing program 6 (id=3444): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000400000000000000000000850000005000000085000000d000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0xe) dup3(r0, r1, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 23.790575694s ago: executing program 6 (id=3445): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$incfs(r0, &(0x7f00000001c0)='.pending_reads\x00', 0x0, 0x181) ioctl$TIOCL_GETKMSGREDIRECT(r1, 0x80106725, &(0x7f00000000c0)) 23.759199165s ago: executing program 6 (id=3446): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f00000002c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x13, r1, 0x0) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80045510, &(0x7f0000000000)) 23.599731098s ago: executing program 6 (id=3447): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f0000000000)='./file0/../file0\x00', 0x1) 23.591547768s ago: executing program 6 (id=3448): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_write(r1, 0x81, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 23.50160327s ago: executing program 6 (id=3450): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r1, 0x5, 0x1f, 0x0, &(0x7f0000000100)="66d4492a0a1b30e6f5d85a6d99", 0x0, 0xca, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x20}, 0x50) 23.49730585s ago: executing program 41 (id=3450): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r1, 0x5, 0x1f, 0x0, &(0x7f0000000100)="66d4492a0a1b30e6f5d85a6d99", 0x0, 0xca, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x20}, 0x50) 7.350388723s ago: executing program 1 (id=3896): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000580)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBDIACR(r2, 0x4b4a, &(0x7f0000000980)=""/28) 7.273292894s ago: executing program 1 (id=3899): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='net_dev_xmit\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/2566], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000100)="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", 0x0, 0x8, 0x60000000}, 0x1e) 7.272673114s ago: executing program 1 (id=3901): r0 = socket(0x2c, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="110000000400000004000000ff"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r1, &(0x7f0000000140), &(0x7f0000000080)=@udp=r0}, 0x20) r2 = socket(0x2c, 0x3, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r1, &(0x7f0000000180), &(0x7f0000000280)=@tcp6=r2, 0x1}, 0x20) 7.209362465s ago: executing program 1 (id=3903): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000300)='./file2\x00', 0x80cc88, &(0x7f0000000ec0)={[{@fmask={'fmask', 0x3d, 0x9}}, {@umask={'umask', 0x3d, 0x80000002}}, {@utf8}, {@keep_last_dots}, {@allow_utime={'allow_utime', 0x3d, 0x801}}, {@errors_continue}, {@discard}, {@time_offset={'time_offset', 0x3d, 0x4}}, {@iocharset={'iocharset', 0x3d, 'cp850'}}, {@iocharset={'iocharset', 0x3d, 'utf8'}}]}, 0x3, 0x1510, &(0x7f0000003640)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) socket(0x11, 0x3, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0\x00', 0x0, 0x887008, 0x0) 7.193926856s ago: executing program 1 (id=3906): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000900)={0x38, r2, 0x601, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x5, 0x2}]}]}]}, 0x38}}, 0xc000) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000dc0)={0x20, r2, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x48}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x2805}, 0x4000000) 7.077661148s ago: executing program 1 (id=3910): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bond0\x00'}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x2f, &(0x7f0000000740)="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", 0x8c1) mremap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000ffc000/0x4000)=nil) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) 7.071800959s ago: executing program 42 (id=3910): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bond0\x00'}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x2f, &(0x7f0000000740)="4341a82c80b722d86a46eb8b8712b05800949eb6365a7811102dec328f94787f71969955ddd1747de862e8aabab6e36cf8fff46817ea35919443bffb8fe4929d92a6a7fa2bc18b907cd1fae5ac712b85b98d8001e9e4b25ed774fccd40806e4e8d4e9628615b96ea9f490a436255bdcc20fc96fea7ec1be3ed916cf4e8034a3e441d49dc197cdd116b3904f0e831814a4ed94ae3c354b90f431b8b141e6fb7972d4cae9ac45ed164bb10bf08d02f3d4d26659a72bc28542710af1c21f6cbd0e9b87482bb54f405c25e5876c08dde6e9b6d1110d4fcb95f7f3e7b802ebb0b8702a4e621ce327c395f33ad0772670f8c11d5ec1659e1e887ca5b21da8bae7a86a1b72f8c9bb0342c4975b09386949d24c0410e5225e5f4891638d3f30539cb3d369841bf2bba9ec178b16892fa9ac72bf6491e6b7e9a72443856e0f68a6107776cb3025bc5ee341c4b2e89e315ffc10d8ad2748187a95ef026d6693d9c5277ba3602d645991066a8820fb0aa3391507172f80b7dd3e5f77c9070f7727d84c9658a9ea7a43e290e5fc384eccf4bd54f934406a5c4c6b5bb643a8a4ade67a96b6aaff0d9556a47c249e59524970e0a9747fd340fe72872f354c26b5a3530287aad7c45b464596e7b66dbfef6e56b3487f9d343a5fc93cb02c71500c38410131e0ac32163f8af8b1b3abb3624f33160480836b52eb63739ec387d791df8351b668398a0a86361c4cc6534785bd17ce189908ec863b007fffebb0a1564aa52610e6aca5db4e844ce90697631b36d71e11f2eff551fa268da7c0a0ef0376143fdccef1f0ca1935968f453d74ee935b33b12e8fc4bcc5828fa12f907ee4ed6ca120c2650cb7aa1013ecc375b6dc2f5c5ae02cfbbcaa08c7bf38877b9b0fbe23ac80acfe30992615aa4597564f358a22d3368365d899210bc295e9ff40644e75f3068ed25eaada0f088414ce10c84308ad8d4f0243c70db3e4ffa21215a91f1d88f78e5d44bca37498408def40c769d9885e646ce79dcb20c468a5f546c6bebcd6f7ec63ef18d82150fa914334e04b46c429568589d6b46bc03442a7ed7c13811a017e0358364c87a950a51f48e3926c86559b3aafd3b1a1f8a19f476e3957dc848b17349034a1f05fb05c019638b243831d0a9d7db6e89e4fe2d0fa7f1b1e2297d6822d2e677edd4e413db3dbcf7a9c8538addc40c23fa7542f0beaff92875e32dc1b49f2bd868085d275b6eb881d56a6836cd675f1da086f6c8e26f2e60c72e90ec3867fc8acc471ab401282242f67c02f40019017410fbcde992cb44e9e20334aad4e960e458fff046aace7eea59e7203df2c09a6c35494f7868224a4a218201930bf3fa810aeba5f77c30d105c5832801ebdedfc99d1c4100984eec7ff32262ea70e5761d1adc1ba54de4403cb6c11d02c2cde3b55337d174e49e7d2d6b5dd8ac445832f2d68e7f4d2ac0a36ed042a9e71515446b8d3a6deacdbc4ec3694f4213d5f85e6194899bf1f4f26dc901b14f4185b7eeffdeeb08c31ac0dce79c38573b94cb3ad41d140039e845cbe4e34372859fd7009caf26c11c91545bb42dc52fd6227e6c6f84bf41a824370bcaa5576dbe507c03dcdf6706183170d363d33778d2012a1c47626e175f3e13239bd2a84ebeeb8e879ef2a7c324c3f1608386f349f1140dba95ce79f020c1e0b57a9c1d151ca720b5b90d5211ea4d981d54b56bf3478dbd3b3b6e741586d3d5e54010cf85d14ed69487fdfd741cb12c2bb43f8d8df8e4f47141244276b6648ca68eac268b9848f97786da433aba9a5428279be6290a27ad7a84a6dc791e55f123aeb74431c8d180c90d312588a06f845195475fba8ebc61df7cb411424cdfd932ec5cef3589e14ed4106edb14fa45615d5997702f167f76447015ed941cf669c59154decdbf933136819121582bb7bf0704f6835b52bb223cc81645311210208d827c921ee3801fb9878f0ed8351e08cd8893ed08e10753c722e2db6dc73294fcf89b040822aadd99a62c609c270730c505c550117091d2067473d6bb9e6180e8094cd97e26b52030b50a1069aed0ba092b5ecadfc9bcd3f81dc16b796d59061af2be1da2c1afeddbdbc2643cf8f50136ac6fa0bcbd394b6061ce17b27545d36f213142818e11e669813df12b0882a9768892e0d06081a8decf85cb89e589183f810ebc231bcac219b0cef554e141a03b4431b9d73dbbcc02d4f9d61d05d0408a17187061a56d9c2b7d99f512db9acb58250ebed9a56e586cefec898061de859d141bb572f2e3632c98a8e66278ba749630ee2c8b1118c6240d0f106e83eb5a2ed7469f6b7067008dca02842ffece5fe4f6d1bfa6f4dbde814e112b00cd288cd1ce3ae22e8e98f552a50dea9f87880f7c9830f23f9cede4b2b6ba2c99846dd314a84837d6b148916eb59a34f34df2bd3416cf7bb0a0a4228fb5744bb88de6dc85ae82cc892f46c0afd785c883abde2d69ed2a37f0a4eccb343d4ad9c37b0b189d0955be5fa74cc0e95308913b7666a556f5157a33969ccb7b37fb2d12ede9382412a6a7fd77803661ec2297b5d77da66df4ec0204b1d906fd8724e47b28b726e04c14b68a2613505300d26ef3cf31fcf5c9a5a5684699dedd4fc010ac77674159044b9956229fe6de463327441bb607ad39fa44bf9a9f5ee7d2742105b76add234d7420f55c92e2d4553398b0dd073def7637002e27d2477c42db45d00fd7014b40e506488743b0eff0292526452e85e5693e69f9ae04dd666793a20695f14ea0d076feb2d3ce246643d71357514474d70b2ca38a91d3855a85facb46046d803fb1a9ed5e30c05eaa1fc44d81d795b365189b8bad90820de391b2f290b540da2504f2325a9a818572609ee601cbabd11e6259672ef07952345c2ac3309df64fafa2ce93a1e9b6cc80854864dce3a7f36382dd8671ba4a785423579c040fdd97992c118fc3b39eb4e1bfeb61dc7129eed34fecd074c47174b1211784e438a2a01e270c2733792c03601a41ec192e20ddcaebe51cf9d7cb7eb66411bd0cce34f588bcf61e608a5cb90eb6c7c9034657a62154074c5db12895b6ce2b509d811e925407e699a69bc4fdc51637ee216bda2f2659febfacb7dfafa0db7aaa8704cbcc99001eb05cdd1130750e4ef51bc00a877e8efd0210cb9af231", 0x8c1) mremap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000ffc000/0x4000)=nil) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) 5.50161s ago: executing program 0 (id=3975): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f00000002c0)={0x2, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000580)=@filter={'filter\x00', 0x2, 0x4, 0x410, 0xffffffff, 0xd0, 0xd0, 0x0, 0xfeffffff, 0xffffffff, 0x258, 0x340, 0x340, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0x118, 0x188, 0x0, {}, [@common=@hbh={{0x48}, {0x401, 0x1, 0x0, [0x5, 0x7, 0x4, 0x3333, 0x4, 0x8, 0x3, 0x5, 0x0, 0x7, 0xfffa, 0x6, 0x9, 0x5, 0x1, 0x4], 0xd}}, @common=@mh={{0x28}, {"b2ba"}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x1000, 0x0, 0x0, 0x0, "ddabf53d9b77000001e770b667f10900000000000000e3121114449f88d0b86b7a1db90163232ed996b4a8403f5d30825e2900"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "dae5637ff02e5b5e90c347e51ab0e19730b890b97955dd00fdd19ea5da94"}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x470) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000000000000a00000000000000ff02000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000590000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000003"], 0x210) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000780)={0x2, {{0xa, 0x0, 0x0, @mcast2}}, 0x1, 0x1, [{{0xa, 0x0, 0x0, @empty}}]}, 0x110) 5.490698729s ago: executing program 0 (id=3977): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x3, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x6b, 0x11, 0x4}}, &(0x7f0000000000)='GPL\x00'}, 0x94) 5.4594119s ago: executing program 2 (id=3978): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x221809, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) mount$bpf(0x0, &(0x7f00000023c0)='./file0\x00', 0x0, 0x958028, &(0x7f00000001c0)={[{@uid={'uid', 0x3d, r1}}]}) 5.45900794s ago: executing program 0 (id=3979): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000580)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBDIACR(r2, 0x4b4a, &(0x7f0000000980)=""/28) 5.45887896s ago: executing program 2 (id=3980): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r0}, 0x18) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) io_setup(0x202, 0x0) timer_delete(0x0) 5.45861628s ago: executing program 0 (id=3981): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1400c, &(0x7f0000000680)={[{@test_dummy_encryption}, {@init_itable}, {@noload}]}, 0x3, 0x470, &(0x7f0000001240)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f0000000000)='./file0\x00', 0x1222068, &(0x7f0000000bc0)=ANY=[], 0x1, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x4000) 5.385904452s ago: executing program 2 (id=3982): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x48) unshare(0x20000400) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xc, 0x4, 0x4, 0x7, 0x0, r0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000980)={{r2}, &(0x7f0000000900), &(0x7f0000000940)=r0}, 0x20) 5.364845693s ago: executing program 2 (id=3983): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000300)='./file2\x00', 0x80cc88, &(0x7f0000000ec0)={[{@fmask={'fmask', 0x3d, 0x9}}, {@umask={'umask', 0x3d, 0x80000002}}, {@utf8}, {@keep_last_dots}, {@allow_utime={'allow_utime', 0x3d, 0x801}}, {@errors_continue}, {@discard}, {@time_offset={'time_offset', 0x3d, 0x4}}, {@iocharset={'iocharset', 0x3d, 'cp850'}}, {@iocharset={'iocharset', 0x3d, 'utf8'}}]}, 0x3, 0x1510, &(0x7f0000003640)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) socket(0x11, 0x3, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0\x00', 0x0, 0x887008, 0x0) 5.315670183s ago: executing program 0 (id=3984): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r1}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc00"], 0x50) 5.267461744s ago: executing program 2 (id=3986): syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x8000, &(0x7f0000000200)={0x7, 0x0, 0x80000}, 0x20) 5.197004186s ago: executing program 0 (id=3990): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6}]}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'bond0\x00'}) 5.145165267s ago: executing program 43 (id=3990): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6}]}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'bond0\x00'}) 5.133755517s ago: executing program 2 (id=3993): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0x1}, 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001640)=ANY=[@ANYBLOB="120000000a0000000800000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r1, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000100)=r0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000300)={r2, &(0x7f0000001440), 0x0}, 0x20) 5.093811798s ago: executing program 44 (id=3993): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0x1}, 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001640)=ANY=[@ANYBLOB="120000000a0000000800000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r1, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000100)=r0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000300)={r2, &(0x7f0000001440), 0x0}, 0x20) 2.721908325s ago: executing program 7 (id=4031): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x4, 0xdd, 0xa}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000d400000010000000350000000000000095"], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x67000000}, 0x94) 2.705621406s ago: executing program 7 (id=4032): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000004c0)='.\x00', &(0x7f0000005280)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setuid(r1) ioctl$BLKFLSBUF(r0, 0x1261, 0x0) 2.639755717s ago: executing program 7 (id=4033): getpid() bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(0xffffffffffffffff, 0xae44, 0x6) syz_usb_connect(0x3, 0x2d, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000229639010861a2d754d2d0102030109021b000100000000090401"], 0x0) 1.705525666s ago: executing program 9 (id=4075): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 1.619174857s ago: executing program 9 (id=4079): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x3004000, &(0x7f0000000340), 0x2, 0x7ad, &(0x7f0000000380)="$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") ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40106614, &(0x7f0000002b80)) 1.537597979s ago: executing program 9 (id=4080): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x80000, 0x0, 0x0, 0x41100}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) inotify_rm_watch(0xffffffffffffffff, 0x0) 1.537037059s ago: executing program 9 (id=4082): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) syz_usb_connect(0x5, 0x164, &(0x7f0000000180)=ANY=[@ANYBLOB="120100007af28810d30bf4055b000000000109025201010000000009044000000e0100008c2406", @ANYBLOB="c9df7a64f62985bcc0ccc9f6d34781766ea4d7370fb649014b12aa963a8159038c0f75396ac25ba7d9e90ce5df53255cda5ef0a2a856e959f9b5d3614a1767c0a31482c789f4e6663d3f3f71a0840b4bccc70352a11f19699f99aa79e299f3a103f95ee161f36976e667baf51149d1b8c5d88806f643d428422cc7ef9f7752ae83b1c9b84be0d82d33ab"], 0x0) 1.157483366s ago: executing program 5 (id=4103): ioctl$KVM_SET_FPU(0xffffffffffffffff, 0x41a0ae8d, &(0x7f00000000c0)={'\x00', 0x1ff, 0x0, 0x7f, 0x0, 0x401, 0x4, 0x2, '\x00', 0x59ac}) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000002c0)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000000000)=0x1, 0x4) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000080)='\x00', 0x1}], 0x23}}, {{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f00000001c0)='}', 0x1}], 0x1}}], 0x2, 0x2400c042) 1.155017496s ago: executing program 7 (id=4104): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000006c0)={[{@orlov}, {@noauto_da_alloc}, {@inlinecrypt}, {@dioread_lock}, {@data_err_ignore}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@data_err_ignore}, {@grpquota}, {@noblock_validity}, {@user_xattr}, {@resuid}, {@errors_remount}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x1f) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42042, 0x14a) fallocate(r1, 0x10, 0x253e, 0x8000) 1.093554427s ago: executing program 5 (id=4105): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000c00)='net_dev_start_xmit\x00', r1}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="b9ff03316844268cb89e14f0080047e0ffff00124000632f77fbac14fe16e000030a07080403fe80000020006558845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0x24, 0x60000000}, 0x2c) 1.093230808s ago: executing program 5 (id=4106): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='kfree\x00', r1}, 0x10) r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$selinux_load(r2, &(0x7f0000000640)={0xf97cff8c, 0x8}, 0x10) 1.092952168s ago: executing program 8 (id=4107): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/net/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd1l,'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x80, 0x4d) getdents(r1, 0x0, 0x0) 1.067590638s ago: executing program 7 (id=4108): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x800, 0x2, 0x4}, 0x1c) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x400, 0x2, 0xb, 0xd6}, 0x3a, [0x8000, 0xc95a, 0x100f, 0x8, 0x82, 0x2, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x2, 0x3, 0x0, 0x5, 0x4, 0x0, 0x9, 0x3c5b, 0x4, 0x3ff, 0x6, 0x1, 0x5, 0xffffffff, 0xe661, 0x3, 0xb, 0x3, 0x10008, 0x40, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x4eb, 0x7, 0x5, 0x3e, 0x8f, 0x4006, 0x6, 0x0, 0x5, 0x4, 0x8, 0x400, 0x7d, 0x0, 0x5, 0x6, 0x8, 0x4, 0xfffffffe, 0x2e], [0x10000007, 0x9, 0x10000, 0x6, 0x5, 0x6, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x802, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x9, 0x420, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x2, 0xb, 0x4, 0x8, 0x8, 0x9, 0xb, 0x2, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x4, 0x3, 0xbc45, 0x1, 0x42, 0x3], [0x400007, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d4, 0x9, 0x0, 0x2, 0x3, 0x1, 0xb, 0x4, 0x0, 0x1, 0x0, 0x1ef, 0x5, 0x8, 0x10000, 0x3, 0x5, 0x3e7, 0x7, 0x5, 0x2, 0x6, 0x3, 0x20000008, 0x4, 0x6d01, 0xa, 0x3b, 0x800003, 0x200, 0x80, 0x5, 0x4, 0x2950bfaf, 0x7, 0xa2, 0x5, 0xa9, 0x5, 0x9, 0xac8, 0xbf, 0xc, 0x3, 0x7ff, 0x12b, 0x1000004, 0x1, 0x0, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0x80b, 0x5, 0x938, 0x10000006, 0x6, 0x0, 0xb9, 0xce7, 0x9, 0x2, 0x57, 0x5, 0x3, 0x101, 0xf142, 0x4, 0x7fff, 0x10003, 0x2000a620, 0x2, 0x5, 0x8001, 0x2, 0x5, 0xe7, 0x6, 0x16, 0xffffbfff, 0x80000003, 0x5, 0x4, 0xc8, 0x9, 0xfffff000, 0x10000, 0x8, 0x7e, 0x100, 0x9602, 0x7, 0x7, 0x8, 0x6, 0x10000226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x1fd, 0xffff343e, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 1.026017019s ago: executing program 5 (id=4109): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000400)='kfree\x00', r0}, 0x18) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, 0x3) r1 = socket$vsock_stream(0x28, 0x1, 0x0) fgetxattr(r1, &(0x7f0000000000)=ANY=[], 0x0, 0x0) 957.05436ms ago: executing program 7 (id=4110): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106a05310300000000000109022400010000c60009040002010300010009210000000122f80409058103"], 0x0) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x1e, &(0x7f0000000580)=@string={0x1e, 0x3, "2a6e15f0a14f2688827e46282bad7da164d648d2998a6a70eee55408"}}]}) syz_usb_connect$printer(0xa416c1b52e1bf185, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x39, &(0x7f0000000440)=@string={0x39, 0x3, "c11e3ead0b2405e243a0dbbbe6417716806a3d7d9033ee123918c5544aee83da6814dc2f5f5152b8eceb843d205b1c1b053c75b4169dc3"}}]}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) 916.587091ms ago: executing program 5 (id=4112): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000181100"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000500)='hrtimer_start\x00', r0}, 0x10) clock_nanosleep(0x9, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, 0x0) 845.825143ms ago: executing program 5 (id=4115): getpid() bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(0xffffffffffffffff, 0xae44, 0x6) syz_usb_connect(0x3, 0x2d, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000229639010861a2d754d2d0102030109021b000100000000090401"], 0x0) 773.640274ms ago: executing program 8 (id=4117): ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random='\x00\x00\x00\x00\x00 '}) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="b80000001000210400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa888e16000009000128009000100766c616e00000000800002800c0002000e0000000a000000340004802000390017900000020000000c000100f04ae965cb0b00000c00010004000000002000000c000100001000000900000006000100020000000c0002000a0000000c000000280003800c00010008000000090000000c00010009000000030000000c000100090000000080000008000500", @ANYRES32=r2], 0xb8}}, 0x2) 773.359734ms ago: executing program 8 (id=4118): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000000180)=[{0x6, 0x9, 0x0, 0x10001}]}, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000180)=ANY=[], 0x0) 773.157274ms ago: executing program 8 (id=4119): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1400c, &(0x7f0000000680)={[{@test_dummy_encryption}, {@init_itable}, {@noload}]}, 0x3, 0x470, &(0x7f0000001240)="$eJzs3MtvG1UXAPAzkzj98qUloZRXyyNQEBWPpGkLdMECEEgsioQEC1haSVqVpi1qjESrSKQsygohJPaIJf8CK9ggxAqJLexRpQp1Q8vKaOyZxHZsp2nsuMW/n+T23Hn43uOZa9+ZayeAoTWd/ZNE7I6I3yNisl5s3mC6/t+N6yvzN6+vzCdRrb77V1Lb7u/rK/PFpsV+E42FSOJAm3qXL146U15aWryQl2crZz+aXb546YXTZ8unFk8tnjty/Pixo3Mvv3TkxZ7kORFpHr31wVdvn/iiKf+WPHpkutvKp6vVHlc3WHsa4tEBtoOtGcmPV6nW/ydjpOHoTcabn60VPh1QA4G+qVar1YnOq1erwH9YEs1lXR6GRfFBX1z/trsOfrVvo4/Bu/Za/QIoy/tG/qivGV27Y1Bqub7tpemIeH/1n2+yR/TnPgQAQJMfsvHP89loZ2U+G3usjz/SeKBhu3vyuaGpiLg3IvZGxH1xLvZFxP0RtW0fjIiHtlh/6yTJxvFPevW2ErtF2fjvlXxuq3n8V4z+YmokL+2p5V9KTp5eWjycvyaHorQrK891qePHN377stO6xvFf9sjqL8aCeTuuju5q3mehXClvJ+dG1y5H7B9tl3+yNhOQRMTDEbG/3ROkm9dx+tnvHum0bvP8u+jBRFP124hn6sd/NVryLyTd5ydn/xdLi4dni7Nio19+vfJOp/q3lX8PZMf//23P/7X8p5LG+drlrddx5Y/PO17TTJfyYAvn/2q5Uh5L3qvFY/myT8qVyoW5iLHkRL3RjcuPrO9blIvts/wPHWzf//fG+itxICKyk/jRiHgsIh7Pj90TEfFkRBzskv/Prz/1Yeuy8SL/O+D4L2zp+K8HY9G6pH0wcuan75sqnVoP8/xvdn//O1aLDuVLbuX971badXtnMwAAANx90ojYHUk6sxan6cxM/Tv8+yLSpfPLledOnv/43EL9NwJTUUqLO12TDfdD5/LL+nr5ckTUv1pQrD8aae2+8dcj47XyzPz5pYVBJw9DbqJD/8/8OTLo1gF95wdbMLz0fxheXft/aefaAey8Df2/a5/f1de2ADurzef/+CDaAey8duN/f+8HhkNL/zftB0PE/X8YXvo/DC/9H4bS8nhs/iP5rkHxTLe5+2bBZMR2WziYIEp3RDP6FkTa9yrG+ntq9S1I7sI2bwgG954EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQS/8GAAD//3hZ0MA=") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f0000000000)='./file0\x00', 0x1222068, &(0x7f0000000bc0)=ANY=[], 0x1, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x4000) 644.242637ms ago: executing program 8 (id=4120): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'wg0\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0x8000, 0x4) sendto$packet(r0, &(0x7f0000000180)="0b03feff4f00020002004788aa96a13bb1000011000088ca1a00", 0x1fffc, 0x0, &(0x7f0000000140)={0x11, 0x0, r1}, 0x14) 521.628829ms ago: executing program 8 (id=4122): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x800, 0x2, 0x4}, 0x1c) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x400, 0x2, 0xb, 0xd6}, 0x3a, [0x8000, 0xc95a, 0x100f, 0x8, 0x82, 0x2, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x2, 0x3, 0x0, 0x5, 0x4, 0x0, 0x9, 0x3c5b, 0x4, 0x3ff, 0x6, 0x1, 0x5, 0xffffffff, 0xe661, 0x3, 0xb, 0x3, 0x10008, 0x40, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x4eb, 0x7, 0x5, 0x3e, 0x8f, 0x4006, 0x6, 0x0, 0x5, 0x4, 0x8, 0x400, 0x7d, 0x0, 0x5, 0x6, 0x8, 0x4, 0xfffffffe, 0x2e], [0x10000007, 0x9, 0x10000, 0x6, 0x5, 0x6, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x802, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x9, 0x420, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x2, 0xb, 0x4, 0x8, 0x8, 0x9, 0xb, 0x2, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x4, 0x3, 0xbc45, 0x1, 0x42, 0x3], [0x400007, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d4, 0x9, 0x0, 0x2, 0x3, 0x1, 0xb, 0x4, 0x0, 0x1, 0x0, 0x1ef, 0x5, 0x8, 0x10000, 0x3, 0x5, 0x3e7, 0x7, 0x5, 0x2, 0x6, 0x3, 0x20000008, 0x4, 0x6d01, 0xa, 0x3b, 0x800003, 0x200, 0x80, 0x5, 0x4, 0x2950bfaf, 0x7, 0xa2, 0x5, 0xa9, 0x5, 0x9, 0xac8, 0xbf, 0xc, 0x3, 0x7ff, 0x12b, 0x1000004, 0x1, 0x0, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0x80b, 0x5, 0x938, 0x10000006, 0x6, 0x0, 0xb9, 0xce7, 0x9, 0x2, 0x57, 0x5, 0x3, 0x101, 0xf142, 0x4, 0x7fff, 0x10003, 0x2000a620, 0x2, 0x5, 0x8001, 0x2, 0x5, 0xe7, 0x6, 0x16, 0xffffbfff, 0x80000003, 0x5, 0x4, 0xc8, 0x9, 0xfffff000, 0x10000, 0x8, 0x7e, 0x100, 0x9602, 0x7, 0x7, 0x8, 0x6, 0x10000226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x1fd, 0xffff343e, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 506.95413ms ago: executing program 45 (id=4122): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x800, 0x2, 0x4}, 0x1c) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x400, 0x2, 0xb, 0xd6}, 0x3a, [0x8000, 0xc95a, 0x100f, 0x8, 0x82, 0x2, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x2, 0x3, 0x0, 0x5, 0x4, 0x0, 0x9, 0x3c5b, 0x4, 0x3ff, 0x6, 0x1, 0x5, 0xffffffff, 0xe661, 0x3, 0xb, 0x3, 0x10008, 0x40, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x4eb, 0x7, 0x5, 0x3e, 0x8f, 0x4006, 0x6, 0x0, 0x5, 0x4, 0x8, 0x400, 0x7d, 0x0, 0x5, 0x6, 0x8, 0x4, 0xfffffffe, 0x2e], [0x10000007, 0x9, 0x10000, 0x6, 0x5, 0x6, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x802, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x9, 0x420, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x2, 0xb, 0x4, 0x8, 0x8, 0x9, 0xb, 0x2, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x4, 0x3, 0xbc45, 0x1, 0x42, 0x3], [0x400007, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d4, 0x9, 0x0, 0x2, 0x3, 0x1, 0xb, 0x4, 0x0, 0x1, 0x0, 0x1ef, 0x5, 0x8, 0x10000, 0x3, 0x5, 0x3e7, 0x7, 0x5, 0x2, 0x6, 0x3, 0x20000008, 0x4, 0x6d01, 0xa, 0x3b, 0x800003, 0x200, 0x80, 0x5, 0x4, 0x2950bfaf, 0x7, 0xa2, 0x5, 0xa9, 0x5, 0x9, 0xac8, 0xbf, 0xc, 0x3, 0x7ff, 0x12b, 0x1000004, 0x1, 0x0, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0x80b, 0x5, 0x938, 0x10000006, 0x6, 0x0, 0xb9, 0xce7, 0x9, 0x2, 0x57, 0x5, 0x3, 0x101, 0xf142, 0x4, 0x7fff, 0x10003, 0x2000a620, 0x2, 0x5, 0x8001, 0x2, 0x5, 0xe7, 0x6, 0x16, 0xffffbfff, 0x80000003, 0x5, 0x4, 0xc8, 0x9, 0xfffff000, 0x10000, 0x8, 0x7e, 0x100, 0x9602, 0x7, 0x7, 0x8, 0x6, 0x10000226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x1fd, 0xffff343e, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 466.4456ms ago: executing program 4 (id=4125): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000c5000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000140000fbb703000000e31f008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000c00)='sys_enter\x00', r1}, 0x10) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r2, 0x0, 0x0, 0x0, 0x0, 0x0) 383.293222ms ago: executing program 4 (id=4126): recvfrom$unix(0xffffffffffffffff, 0x0, 0x0, 0x40000000, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xba98575a95aeb70d) ioctl$TUNSETLINK(r0, 0x400454cd, 0x300) 175.544366ms ago: executing program 9 (id=4127): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000800)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r1}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xa, 0x101, 0x7ffc, 0xcc}, 0x50) 175.353616ms ago: executing program 4 (id=4128): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d40)={&(0x7f0000000b00)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@union]}}, 0x0, 0x26}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xa, 0x7, 0x5, 0x8b}, 0x50) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000500000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000000)={r0, 0x0, 0xfffffffffffffffe}, 0x10) 150.257076ms ago: executing program 4 (id=4129): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r2, &(0x7f0000000780)=[{{&(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaffffffff0000000010000000000000000000000007"], 0x30}}], 0x1, 0x4008804) 89.670357ms ago: executing program 4 (id=4130): mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x1004002, 0x0) chdir(&(0x7f00000001c0)='./bus\x00') mkdir(&(0x7f0000000140)='./control\x00', 0x5) rmdir(&(0x7f0000000100)='./control\x00') 89.324117ms ago: executing program 4 (id=4131): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1400c, &(0x7f0000000680)={[{@test_dummy_encryption}, {@init_itable}, {@noload}]}, 0x3, 0x470, &(0x7f0000001240)="$eJzs3MtvG1UXAPAzkzj98qUloZRXyyNQEBWPpGkLdMECEEgsioQEC1haSVqVpi1qjESrSKQsygohJPaIJf8CK9ggxAqJLexRpQp1Q8vKaOyZxHZsp2nsuMW/n+T23Hn43uOZa9+ZayeAoTWd/ZNE7I6I3yNisl5s3mC6/t+N6yvzN6+vzCdRrb77V1Lb7u/rK/PFpsV+E42FSOJAm3qXL146U15aWryQl2crZz+aXb546YXTZ8unFk8tnjty/Pixo3Mvv3TkxZ7kORFpHr31wVdvn/iiKf+WPHpkutvKp6vVHlc3WHsa4tEBtoOtGcmPV6nW/ydjpOHoTcabn60VPh1QA4G+qVar1YnOq1erwH9YEs1lXR6GRfFBX1z/trsOfrVvo4/Bu/Za/QIoy/tG/qivGV27Y1Bqub7tpemIeH/1n2+yR/TnPgQAQJMfsvHP89loZ2U+G3usjz/SeKBhu3vyuaGpiLg3IvZGxH1xLvZFxP0RtW0fjIiHtlh/6yTJxvFPevW2ErtF2fjvlXxuq3n8V4z+YmokL+2p5V9KTp5eWjycvyaHorQrK891qePHN377stO6xvFf9sjqL8aCeTuuju5q3mehXClvJ+dG1y5H7B9tl3+yNhOQRMTDEbG/3ROkm9dx+tnvHum0bvP8u+jBRFP124hn6sd/NVryLyTd5ydn/xdLi4dni7Nio19+vfJOp/q3lX8PZMf//23P/7X8p5LG+drlrddx5Y/PO17TTJfyYAvn/2q5Uh5L3qvFY/myT8qVyoW5iLHkRL3RjcuPrO9blIvts/wPHWzf//fG+itxICKyk/jRiHgsIh7Pj90TEfFkRBzskv/Prz/1Yeuy8SL/O+D4L2zp+K8HY9G6pH0wcuan75sqnVoP8/xvdn//O1aLDuVLbuX971badXtnMwAAANx90ojYHUk6sxan6cxM/Tv8+yLSpfPLledOnv/43EL9NwJTUUqLO12TDfdD5/LL+nr5ckTUv1pQrD8aae2+8dcj47XyzPz5pYVBJw9DbqJD/8/8OTLo1gF95wdbMLz0fxheXft/aefaAey8Df2/a5/f1de2ADurzef/+CDaAey8duN/f+8HhkNL/zftB0PE/X8YXvo/DC/9H4bS8nhs/iP5rkHxTLe5+2bBZMR2WziYIEp3RDP6FkTa9yrG+ntq9S1I7sI2bwgG954EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQS/8GAAD//3hZ0MA=") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f0000000000)='./file0\x00', 0x1222068, &(0x7f0000000bc0)=ANY=[], 0x1, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x4000) 0s ago: executing program 9 (id=4132): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="00220f000000540b45"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGREPORT(r1, 0x400c4807, &(0x7f0000000040)={0x3, 0x200, 0x7}) kernel console output (not intermixed with test programs): tclass=netlink_xfrm_socket permissive=1 [ 163.253328][ T8412] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 163.266377][ T28] audit: type=1400 audit(1756798278.229:1698): avc: denied { nlmsg_write } for pid=8410 comm="syz.6.3223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 163.291797][ T8417] x_tables: duplicate underflow at hook 4 [ 163.307369][ T28] audit: type=1400 audit(1756798278.259:1699): avc: denied { create } for pid=8414 comm="syz.2.3225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 163.350923][ T8412] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3224'. [ 163.374284][ T8431] tmpfs: Unknown parameter 'â' [ 163.385882][ T6] kernel write not supported for file /uhid (pid: 6 comm: kworker/0:0) [ 163.518062][ T8457] syz.7.3243[8457] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 163.518130][ T8457] syz.7.3243[8457] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 163.617055][ T8472] loop6: detected capacity change from 0 to 1024 [ 163.642346][ T8472] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 163.659480][ T8472] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:3841: comm syz.6.3250: Allocating blocks 497-513 which overlap fs metadata [ 163.673738][ T8472] EXT4-fs (loop6): pa ffff8881330fe348: logic 256, phys. 385, len 8 [ 163.681834][ T8472] EXT4-fs error (device loop6): ext4_mb_release_inode_pa:4881: group 0, free 0, pa_free 1 [ 163.709789][ T7209] EXT4-fs (loop6): unmounting filesystem. [ 163.734160][ T8478] loop2: detected capacity change from 0 to 16 [ 163.742808][ T8478] erofs: Unknown parameter '017777777777777777777770xffffffffffffffff½±$¬»»#‹îšAæV蔜˜ÿÿ0x0000000000000004ÿÿÿÿÿÿÿÿ' [ 163.752007][ T8482] loop1: detected capacity change from 0 to 256 [ 163.761282][ C1] operation not supported error, dev loop2, sector 0 op 0x9:(WRITE_ZEROES) flags 0x8000800 phys_seg 0 prio class 2 [ 163.762874][ T8482] FAT-fs (loop1): bogus logical sector size 133 [ 163.781773][ T8482] FAT-fs (loop1): Can't find a valid FAT filesystem [ 163.802332][ T8486] loop2: detected capacity change from 0 to 512 [ 163.812053][ T8486] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 163.821072][ T8486] ext4 filesystem being mounted at /38/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 163.850484][ T1756] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 163.871149][ T8143] EXT4-fs (loop2): unmounting filesystem. [ 163.890256][ T8500] loop1: detected capacity change from 0 to 1024 [ 163.902277][ T8500] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 163.925379][ T8500] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:3841: comm syz.1.3262: Allocating blocks 497-513 which overlap fs metadata [ 163.939646][ T8500] EXT4-fs (loop1): pa ffff8881330fed20: logic 256, phys. 385, len 8 [ 163.947830][ T8500] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:4881: group 0, free 0, pa_free 1 [ 163.986454][ T6250] EXT4-fs (loop1): unmounting filesystem. [ 164.019754][ T8522] loop6: detected capacity change from 0 to 256 [ 164.026500][ T8522] FAT-fs (loop6): bogus logical sector size 133 [ 164.033086][ T8522] FAT-fs (loop6): Can't find a valid FAT filesystem [ 164.041719][ T1756] usb 1-1: config 1 interface 0 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 164.057275][ T392] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 164.071999][ T1756] usb 1-1: config 1 interface 0 has no altsetting 0 [ 164.090292][ T1756] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 164.101235][ T1756] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 164.109243][ T1756] usb 1-1: SerialNumber: syz [ 164.153515][ T8547] loop6: detected capacity change from 0 to 256 [ 164.183324][ T8547] FAT-fs (loop6): error, corrupted file size (i_pos 196, 2097152) [ 164.191656][ T8547] FAT-fs (loop6): Filesystem has been set read-only [ 164.198765][ T8547] FAT-fs (loop6): error, corrupted file size (i_pos 196, 2097152) [ 164.241681][ T392] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 164.252638][ T392] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 164.262104][ T392] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.270885][ T392] usb 8-1: config 0 descriptor?? [ 164.387342][ T8584] device veth0 entered promiscuous mode [ 164.393844][ T8584] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3300'. [ 164.630819][ T19] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 164.678525][ T392] keytouch 0003:0926:3333.0032: fixing up Keytouch IEC report descriptor [ 164.687888][ T392] input: HID 0926:3333 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:0926:3333.0032/input/input31 [ 164.725995][ T1756] cdc_ether 1-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.0-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 164.761702][ T392] keytouch 0003:0926:3333.0032: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.7-1/input0 [ 164.811476][ T19] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 164.822447][ T19] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 164.832235][ T19] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 164.845142][ T19] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 164.854199][ T19] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.862626][ T19] usb 7-1: config 0 descriptor?? [ 165.104165][ T2197] usb 8-1: USB disconnect, device number 18 [ 165.130792][ T506] usb 1-1: USB disconnect, device number 12 [ 165.137091][ T506] cdc_ether 1-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.0-1, CDC Ethernet Device [ 165.270689][ T19] plantronics 0003:047F:FFFF.0033: No inputs registered, leaving [ 165.279034][ T19] plantronics 0003:047F:FFFF.0033: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 165.408366][ T8620] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8620 comm=syz.1.3316 [ 165.443564][ T8624] loop2: detected capacity change from 0 to 512 [ 165.450111][ T8624] EXT4-fs: Ignoring removed nobh option [ 165.456132][ T8624] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 165.469133][ T8624] EXT4-fs error (device loop2): ext4_orphan_get:1400: inode #15: comm syz.2.3318: iget: bad i_size value: 38620345925642 [ 165.482133][ T8624] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.3318: couldn't read orphan inode 15 (err -117) [ 165.494333][ T8624] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 165.507747][ T8624] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm syz.2.3318: bg 0: block 5: invalid block bitmap [ 165.520239][ T8624] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 64 with error 28 [ 165.532504][ T8624] EXT4-fs (loop2): This should not happen!! Data will be lost [ 165.532504][ T8624] [ 165.541055][ T506] usb 7-1: USB disconnect, device number 6 [ 165.548712][ T8624] EXT4-fs (loop2): Total free blocks count 0 [ 165.555101][ T8624] EXT4-fs (loop2): Free/Dirty block details [ 165.561867][ T8624] EXT4-fs (loop2): free_blocks=0 [ 165.567452][ T8624] EXT4-fs (loop2): dirty_blocks=64 [ 165.572826][ T8624] EXT4-fs (loop2): Block reservation details [ 165.578857][ T8624] EXT4-fs (loop2): i_reserved_data_blocks=64 [ 165.598516][ T8143] EXT4-fs (loop2): unmounting filesystem. [ 165.626924][ T8641] loop1: detected capacity change from 0 to 512 [ 165.635246][ T8641] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 165.653777][ T8645] loop2: detected capacity change from 0 to 512 [ 165.660700][ T8645] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 165.687989][ T6250] EXT4-fs (loop1): unmounting filesystem. [ 165.703788][ T8645] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3337'. [ 165.773133][ T8666] loop1: detected capacity change from 0 to 256 [ 165.884038][ T8693] loop1: detected capacity change from 0 to 512 [ 165.891870][ T8693] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 165.943030][ T8693] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3345'. [ 165.971461][ T8706] loop0: detected capacity change from 0 to 256 [ 166.039614][ T8720] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 166.051313][ T4918] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 166.066265][ T4918] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 166.075821][ T4918] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 166.084456][ T4918] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 166.092788][ T4918] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 166.101591][ T4918] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 166.109733][ T4918] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 166.117926][ T4918] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 166.126018][ T506] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 166.180493][ T392] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 166.321470][ T506] usb 8-1: config 1 interface 0 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 166.334422][ T506] usb 8-1: config 1 interface 0 has no altsetting 0 [ 166.341655][ T506] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 166.350739][ T506] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 166.358708][ T506] usb 8-1: SerialNumber: syz [ 166.360480][ T392] usb 3-1: Using ep0 maxpacket: 32 [ 166.369470][ T392] usb 3-1: config 0 interface 0 has no altsetting 0 [ 166.376112][ T392] usb 3-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 166.385185][ T392] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.394004][ T392] usb 3-1: config 0 descriptor?? [ 166.450538][ T37] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 166.458190][ T2197] usb 7-1: new full-speed USB device number 7 using dummy_hcd [ 166.601568][ T392] usbhid 3-1:0.0: can't add hid device: -71 [ 166.607539][ T392] usbhid: probe of 3-1:0.0 failed with error -71 [ 166.615079][ T392] usb 3-1: USB disconnect, device number 22 [ 166.640681][ T37] usb 1-1: Using ep0 maxpacket: 8 [ 166.646619][ T2197] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 166.657635][ T2197] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 166.668509][ T2197] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 166.679397][ T2197] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 166.690173][ T37] usb 1-1: unable to get BOS descriptor or descriptor too short [ 166.698582][ T37] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 166.708425][ T37] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 16 [ 166.718835][ T2197] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 166.727981][ T2197] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.735995][ T2197] usb 7-1: Product: syz [ 166.740225][ T2197] usb 7-1: Manufacturer: syz [ 166.744891][ T2197] usb 7-1: SerialNumber: syz [ 166.749883][ T37] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 166.758992][ T37] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.767297][ T37] usb 1-1: Product: syz [ 166.771576][ T8734] raw-gadget.3 gadget.6: fail, usb_ep_enable returned -22 [ 166.771589][ T37] usb 1-1: Manufacturer: syz [ 166.771603][ T37] usb 1-1: SerialNumber: syz [ 166.788285][ T2197] cdc_mbim 7-1:1.0: skipping garbage [ 166.794535][ T8732] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 166.810501][ T8732] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 166.827137][ T8738] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3368'. [ 166.856446][ T8742] loop1: detected capacity change from 0 to 256 [ 166.865565][ T8742] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x99a53fd9, utbl_chksum : 0xe619d30d) [ 166.892953][ T8744] loop1: detected capacity change from 0 to 256 [ 166.902060][ T8744] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 166.911188][ T8744] FAT-fs (loop1): Filesystem has been set read-only [ 166.917802][ T8744] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 166.926487][ T8744] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 166.935247][ T8744] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 166.943940][ T8744] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 166.952989][ T8744] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 166.961702][ T8744] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 166.970710][ T8744] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 166.979514][ T8744] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 166.985294][ T8734] raw-gadget.3 gadget.6: fail, usb_ep_enable returned -22 [ 166.990185][ T506] cdc_ether 8-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.7-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 166.995718][ T8734] raw-gadget.3 gadget.6: fail, usb_ep_enable returned -22 [ 167.006884][ T8744] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 167.024961][ T37] usblp 1-1:1.0: usblp0: USB Bidirectional printer dev 13 if 0 alt 0 proto 2 vid 0x0525 pid 0xA4A8 [ 167.038413][ T37] usb 1-1: USB disconnect, device number 13 [ 167.060687][ T37] usblp0: removed [ 167.200497][ T392] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 167.390474][ T392] usb 3-1: Using ep0 maxpacket: 32 [ 167.396839][ T392] usb 3-1: config 0 interface 0 has no altsetting 0 [ 167.403555][ T392] usb 3-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 167.412653][ T392] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.421723][ T392] usb 3-1: config 0 descriptor?? [ 167.426987][ T1756] usb 8-1: USB disconnect, device number 19 [ 167.434397][ T1756] cdc_ether 8-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.7-1, CDC Ethernet Device [ 167.656694][ T8734] raw-gadget.3 gadget.6: fail, usb_ep_enable returned -22 [ 167.663936][ T8734] raw-gadget.3 gadget.6: fail, usb_ep_enable returned -22 [ 167.671588][ T2197] cdc_mbim 7-1:1.0: setting rx_max = 16384 [ 167.778012][ T28] kauditd_printk_skb: 31 callbacks suppressed [ 167.778028][ T28] audit: type=1400 audit(167.756:1731): avc: denied { name_bind } for pid=8748 comm="syz.0.3383" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 167.806912][ T28] audit: type=1400 audit(167.786:1732): avc: denied { node_bind } for pid=8748 comm="syz.0.3383" saddr=::ffff:0.0.0.0 src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 167.820925][ T8753] loop0: detected capacity change from 0 to 512 [ 167.835605][ T392] hid (null): invalid report_count 61715 [ 167.842771][ T8755] loop1: detected capacity change from 0 to 512 [ 167.843160][ T392] uclogic 0003:5543:0522.0034: invalid report_count 61715 [ 167.849321][ T8755] EXT4-fs: Ignoring removed nobh option [ 167.856339][ T392] uclogic 0003:5543:0522.0034: item 0 2 1 9 parsing failed [ 167.869344][ T392] uclogic 0003:5543:0522.0034: parse failed [ 167.875389][ T392] uclogic: probe of 0003:5543:0522.0034 failed with error -22 [ 167.875942][ T8755] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 167.894561][ T8753] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 167.895644][ T8755] EXT4-fs error (device loop1): ext4_orphan_get:1400: inode #15: comm syz.1.3375: iget: bad i_size value: 38620345925642 [ 167.903080][ T2197] cdc_mbim 7-1:1.0: setting tx_max = 16384 [ 167.922470][ T2197] cdc_mbim 7-1:1.0: cdc-wdm0: USB WDM device [ 167.930347][ T2197] cdc_mbim 7-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.6-1, CDC MBIM, be:33:00:7a:56:2e [ 167.943024][ T2197] usb 7-1: USB disconnect, device number 7 [ 167.950470][ T2197] cdc_mbim 7-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.6-1, CDC MBIM [ 167.955142][ T8760] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 167.966691][ T8755] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.3375: couldn't read orphan inode 15 (err -117) [ 167.979533][ T8755] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 167.985393][ T8233] EXT4-fs (loop0): unmounting filesystem. [ 168.063251][ T8755] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm syz.1.3375: bg 0: block 5: invalid block bitmap [ 168.063275][ T392] usb 3-1: USB disconnect, device number 23 [ 168.082155][ T8755] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 64 with error 28 [ 168.094668][ T8755] EXT4-fs (loop1): This should not happen!! Data will be lost [ 168.094668][ T8755] [ 168.104459][ T8755] EXT4-fs (loop1): Total free blocks count 0 [ 168.116084][ T8755] EXT4-fs (loop1): Free/Dirty block details [ 168.126617][ T8755] EXT4-fs (loop1): free_blocks=0 [ 168.131728][ T8755] EXT4-fs (loop1): dirty_blocks=64 [ 168.136845][ T8755] EXT4-fs (loop1): Block reservation details [ 168.154335][ T8755] EXT4-fs (loop1): i_reserved_data_blocks=64 [ 168.194334][ T6250] EXT4-fs (loop1): unmounting filesystem. [ 168.209012][ T8788] loop1: detected capacity change from 0 to 128 [ 168.250157][ T8792] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3392'. [ 168.339685][ T8814] loop7: detected capacity change from 0 to 128 [ 168.427993][ T8818] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3405'. [ 168.484377][ T8834] loop1: detected capacity change from 0 to 512 [ 168.491487][ T8834] EXT4-fs: Ignoring removed nobh option [ 168.512848][ T8834] EXT4-fs error (device loop1): ext4_do_update_inode:5256: inode #3: comm syz.1.3410: corrupted inode contents [ 168.525625][ T8834] EXT4-fs error (device loop1): ext4_dirty_inode:6121: inode #3: comm syz.1.3410: mark_inode_dirty error [ 168.537339][ T8834] EXT4-fs error (device loop1): ext4_do_update_inode:5256: inode #3: comm syz.1.3410: corrupted inode contents [ 168.549349][ T8834] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #3: comm syz.1.3410: mark_inode_dirty error [ 168.560973][ T8834] Quota error (device loop1): write_blk: dquota write failed [ 168.568681][ T8834] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 168.579682][ T8834] EXT4-fs error (device loop1): ext4_acquire_dquot:6801: comm syz.1.3410: Failed to acquire dquot type 0 [ 168.591480][ T6] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 168.599422][ T8834] EXT4-fs error (device loop1): ext4_do_update_inode:5256: inode #16: comm syz.1.3410: corrupted inode contents [ 168.618236][ T8834] EXT4-fs error (device loop1): ext4_dirty_inode:6121: inode #16: comm syz.1.3410: mark_inode_dirty error [ 168.630009][ T8834] EXT4-fs error (device loop1): ext4_do_update_inode:5256: inode #16: comm syz.1.3410: corrupted inode contents [ 168.642601][ T8834] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #16: comm syz.1.3410: mark_inode_dirty error [ 168.654009][ T8834] EXT4-fs error (device loop1): ext4_do_update_inode:5256: inode #16: comm syz.1.3410: corrupted inode contents [ 168.666021][ T8834] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 168.680144][ T8834] EXT4-fs error (device loop1): ext4_do_update_inode:5256: inode #16: comm syz.1.3410: corrupted inode contents [ 168.682055][ T8853] loop6: detected capacity change from 0 to 1024 [ 168.692416][ T8834] EXT4-fs error (device loop1): ext4_truncate:4314: inode #16: comm syz.1.3410: mark_inode_dirty error [ 168.709637][ T8834] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 168.709999][ T8853] EXT4-fs: Ignoring removed nobh option [ 168.719329][ T8834] EXT4-fs (loop1): 1 truncate cleaned up [ 168.729785][ T8853] EXT4-fs: Ignoring removed bh option [ 168.729890][ T8834] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 168.735496][ T8853] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 168.761836][ T8853] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 168.770436][ T2197] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 168.782790][ T6250] EXT4-fs (loop1): unmounting filesystem. [ 168.801609][ T6] usb 1-1: config 0 has an invalid interface number: 248 but max is 0 [ 168.808839][ T8853] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:3841: comm syz.6.3430: Allocating blocks 401-513 which overlap fs metadata [ 168.809805][ T6] usb 1-1: config 0 has no interface number 0 [ 168.809834][ T6] usb 1-1: New USB device found, idVendor=1b3d, idProduct=9316, bcdDevice= 4.3d [ 168.844795][ T8863] loop1: detected capacity change from 0 to 256 [ 168.846570][ T8853] EXT4-fs (loop6): pa ffff8881006317e0: logic 1, phys. 129, len 24 [ 168.852951][ T28] audit: type=1400 audit(168.836:1733): avc: denied { getopt } for pid=8861 comm="syz.2.3423" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 168.859222][ T8853] EXT4-fs error (device loop6): ext4_mb_release_inode_pa:4881: group 0, free 1, pa_free 6 [ 168.895777][ T8863] exFAT-fs (loop1): failed to load upcase table (idx : 0x000103df, chksum : 0xf3211d0a, utbl_chksum : 0xe619d30d) [ 168.910495][ T6] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.923296][ T7209] EXT4-fs (loop6): unmounting filesystem. [ 168.929607][ T6] usb 1-1: config 0 descriptor?? [ 168.945162][ T6] ftdi_sio 1-1:0.248: FTDI USB Serial Device converter detected [ 168.953391][ T6] ftdi_sio ttyUSB0: unknown device type: 0x43d [ 168.985606][ T8878] loop6: detected capacity change from 0 to 1024 [ 169.000445][ T2197] usb 8-1: Using ep0 maxpacket: 32 [ 169.007471][ T8878] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 169.016032][ T2197] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 169.027406][ T2197] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 169.037612][ T2197] usb 8-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 169.046782][ T2197] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.056733][ T2197] usb 8-1: config 0 descriptor?? [ 169.056985][ T7209] EXT4-fs (loop6): unmounting filesystem. [ 169.077773][ T8887] loop6: detected capacity change from 0 to 512 [ 169.084680][ T8887] EXT4-fs: Ignoring removed nobh option [ 169.102354][ T8887] EXT4-fs error (device loop6): ext4_do_update_inode:5256: inode #3: comm syz.6.3435: corrupted inode contents [ 169.114459][ T8887] EXT4-fs error (device loop6): ext4_dirty_inode:6121: inode #3: comm syz.6.3435: mark_inode_dirty error [ 169.126389][ T8887] EXT4-fs error (device loop6): ext4_do_update_inode:5256: inode #3: comm syz.6.3435: corrupted inode contents [ 169.138486][ T8887] EXT4-fs error (device loop6): __ext4_ext_dirty:202: inode #3: comm syz.6.3435: mark_inode_dirty error [ 169.150153][ T8887] Quota error (device loop6): write_blk: dquota write failed [ 169.157627][ T8887] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 169.169270][ T8887] EXT4-fs error (device loop6): ext4_acquire_dquot:6801: comm syz.6.3435: Failed to acquire dquot type 0 [ 169.170638][ T392] usb 1-1: USB disconnect, device number 14 [ 169.183362][ T8891] loop1: detected capacity change from 0 to 512 [ 169.187441][ T392] ftdi_sio 1-1:0.248: device disconnected [ 169.193377][ T8891] EXT4-fs: Ignoring removed i_version option [ 169.199932][ T8887] EXT4-fs error (device loop6): ext4_do_update_inode:5256: inode #16: comm syz.6.3435: corrupted inode contents [ 169.204960][ T8891] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 169.216972][ T8887] EXT4-fs error (device loop6): ext4_dirty_inode:6121: inode #16: comm syz.6.3435: mark_inode_dirty error [ 169.227747][ T8891] EXT4-fs (loop1): 1 truncate cleaned up [ 169.237878][ T8887] EXT4-fs error (device loop6): ext4_do_update_inode:5256: inode #16: comm syz.6.3435: corrupted inode contents [ 169.243286][ T8891] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 169.255433][ T8887] EXT4-fs error (device loop6): __ext4_ext_dirty:202: inode #16: comm syz.6.3435: mark_inode_dirty error [ 169.274967][ T8887] EXT4-fs error (device loop6): ext4_do_update_inode:5256: inode #16: comm syz.6.3435: corrupted inode contents [ 169.287082][ T8887] EXT4-fs error (device loop6) in ext4_orphan_del:305: Corrupt filesystem [ 169.287686][ T8891] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2195: inode #15: comm syz.1.3436: corrupted in-inode xattr [ 169.295855][ T8887] EXT4-fs error (device loop6): ext4_do_update_inode:5256: inode #16: comm syz.6.3435: corrupted inode contents [ 169.307901][ T8891] EXT4-fs warning (device loop1): ext4_xattr_set_entry:1732: inode #15: comm syz.1.3436: unable to update i_inline_off [ 169.319902][ T8887] EXT4-fs error (device loop6): ext4_truncate:4314: inode #16: comm syz.6.3435: mark_inode_dirty error [ 169.331989][ T6] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 169.343187][ T8891] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2195: inode #15: comm syz.1.3436: corrupted in-inode xattr [ 169.360921][ T8887] EXT4-fs error (device loop6) in ext4_process_orphan:347: Corrupt filesystem [ 169.362785][ T8893] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2195: inode #15: comm syz.1.3436: corrupted in-inode xattr [ 169.371719][ T8887] EXT4-fs (loop6): 1 truncate cleaned up [ 169.388821][ T8887] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 169.422423][ T6250] EXT4-fs (loop1): unmounting filesystem. [ 169.432927][ T7209] EXT4-fs (loop6): unmounting filesystem. [ 169.436802][ T8895] loop1: detected capacity change from 0 to 256 [ 169.445518][ T8895] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 169.456164][ T8895] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 169.468820][ T8895] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000ff98, chksum : 0x65b64522, utbl_chksum : 0xe619d30d) [ 169.481276][ T2197] savu 0003:1E7D:2D5A.0035: hiddev96,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.7-1/input0 [ 169.515987][ T8901] loop1: detected capacity change from 0 to 1024 [ 169.522649][ T8901] EXT4-fs: Ignoring removed nobh option [ 169.528196][ T8901] EXT4-fs: Ignoring removed bh option [ 169.533862][ T8901] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 169.541574][ T6] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 169.556026][ T6] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 169.561793][ T8901] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 169.566115][ T6] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 169.584915][ T8901] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:3841: comm syz.1.3439: Allocating blocks 401-513 which overlap fs metadata [ 169.587538][ T6] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 169.610770][ T6] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.614030][ T8901] EXT4-fs (loop1): pa ffff888100674000: logic 1, phys. 129, len 24 [ 169.619284][ T6] usb 3-1: config 0 descriptor?? [ 169.626700][ T8901] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:4881: group 0, free 1, pa_free 6 [ 169.663657][ T6250] EXT4-fs (loop1): unmounting filesystem. [ 169.741178][ T2197] usb 8-1: USB disconnect, device number 20 [ 169.789366][ T28] audit: type=1400 audit(169.766:1734): avc: denied { ioctl } for pid=8915 comm="syz.6.3445" path="/153/file0/.pending_reads" dev="incremental-fs" ino=2 ioctlcmd=0x6725 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 170.020451][ T392] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 170.035796][ T6] plantronics 0003:047F:FFFF.0036: No inputs registered, leaving [ 170.044710][ T6] plantronics 0003:047F:FFFF.0036: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 170.146505][ T8923] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.153584][ T8923] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.161072][ T8923] device bridge_slave_0 entered promiscuous mode [ 170.169275][ T8923] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.176378][ T8923] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.183814][ T8923] device bridge_slave_1 entered promiscuous mode [ 170.202123][ T392] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 170.213051][ T392] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 170.224157][ T392] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 170.234145][ T392] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 170.256952][ T392] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 170.266237][ T28] audit: type=1400 audit(170.246:1735): avc: denied { map } for pid=8927 comm="syz.7.3452" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 170.299695][ T392] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 170.314622][ T392] usb 1-1: Manufacturer: syz [ 170.322147][ T392] usb 1-1: config 0 descriptor?? [ 170.342747][ T8923] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.349372][ T28] audit: type=1400 audit(170.326:1736): avc: denied { bind } for pid=8937 comm="syz.7.3454" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 170.349792][ T8923] bridge0: port 2(bridge_slave_1) entered forwarding state [ 170.375900][ T8923] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.382943][ T8923] bridge0: port 1(bridge_slave_0) entered forwarding state [ 170.401189][ T37] usb 3-1: USB disconnect, device number 24 [ 170.421513][ T5259] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 170.429141][ T5259] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.437377][ T5259] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.446846][ T5259] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 170.455114][ T5259] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.462142][ T5259] bridge0: port 1(bridge_slave_0) entered forwarding state [ 170.472947][ T5259] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 170.481161][ T5259] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.488162][ T5259] bridge0: port 2(bridge_slave_1) entered forwarding state [ 170.500866][ T5259] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 170.510133][ T5259] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 170.527021][ T5259] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 170.542458][ T5259] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 170.546550][ T8943] loop7: detected capacity change from 0 to 512 [ 170.550748][ T5259] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 170.564197][ T5259] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 170.573055][ T8923] device veth0_vlan entered promiscuous mode [ 170.581696][ T8943] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 170.598633][ T5259] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 170.608499][ T8923] device veth1_macvtap entered promiscuous mode [ 170.620025][ T5259] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 170.632206][ T2259] EXT4-fs (loop7): unmounting filesystem. [ 170.632330][ T5235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 170.652006][ T5137] device bridge_slave_1 left promiscuous mode [ 170.658140][ T5137] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.665791][ T5137] device bridge_slave_0 left promiscuous mode [ 170.672080][ T5137] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.680055][ T5137] device veth1_macvtap left promiscuous mode [ 170.686478][ T5137] device veth0_vlan left promiscuous mode [ 170.738550][ T392] appleir 0003:05AC:8243.0037: unknown main item tag 0x0 [ 170.745731][ T392] appleir 0003:05AC:8243.0037: No inputs registered, leaving [ 170.754058][ T392] appleir 0003:05AC:8243.0037: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 170.807578][ T8957] loop4: detected capacity change from 0 to 1024 [ 170.814455][ T8957] EXT4-fs: Ignoring removed nobh option [ 170.820188][ T8957] EXT4-fs: Ignoring removed bh option [ 170.828144][ T8957] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 170.841442][ T8957] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 170.854548][ T8957] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:3841: comm syz.4.3458: Allocating blocks 401-513 which overlap fs metadata [ 170.883941][ T8957] EXT4-fs (loop4): pa ffff88811810e0a8: logic 1, phys. 129, len 24 [ 170.891922][ T8957] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:4881: group 0, free 1, pa_free 6 [ 170.918571][ T8923] EXT4-fs (loop4): unmounting filesystem. [ 170.978468][ T8976] loop2: detected capacity change from 0 to 8192 [ 171.011237][ T2197] usb 1-1: USB disconnect, device number 15 [ 171.032259][ T37] kernel write not supported for file bpf-prog (pid: 37 comm: kworker/1:1) [ 171.110709][ T1756] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 171.182533][ T9000] loop2: detected capacity change from 0 to 1024 [ 171.190828][ T9000] EXT4-fs: Ignoring removed nobh option [ 171.193648][ T8998] loop7: detected capacity change from 0 to 4096 [ 171.197035][ T9000] EXT4-fs: Ignoring removed bh option [ 171.203135][ T8998] EXT4-fs: Ignoring removed oldalloc option [ 171.214359][ T8998] EXT4-fs: Ignoring removed i_version option [ 171.220571][ T9000] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 171.232059][ T8998] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 171.240778][ T8998] EXT4-fs (loop7): Test dummy encryption mode enabled [ 171.249098][ T8998] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 171.260459][ T9000] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 171.281396][ T9000] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3841: comm syz.2.3477: Allocating blocks 401-513 which overlap fs metadata [ 171.296341][ T2259] EXT4-fs (loop7): unmounting filesystem. [ 171.310114][ T9000] EXT4-fs (loop2): pa ffff8881006747e0: logic 1, phys. 129, len 24 [ 171.318224][ T9000] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:4881: group 0, free 1, pa_free 6 [ 171.328245][ T1756] usb 2-1: Using ep0 maxpacket: 8 [ 171.335490][ T1756] usb 2-1: unable to get BOS descriptor or descriptor too short [ 171.348951][ T1756] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 171.366093][ T1756] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 16 [ 171.380545][ T8143] EXT4-fs (loop2): unmounting filesystem. [ 171.381696][ T1756] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 171.395544][ T1756] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.403595][ T1756] usb 2-1: Product: syz [ 171.407968][ T1756] usb 2-1: Manufacturer: syz [ 171.412708][ T1756] usb 2-1: SerialNumber: syz [ 171.418821][ T8961] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 171.426987][ T8961] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 171.614911][ T9042] loop0: detected capacity change from 0 to 128 [ 171.645089][ T1756] usblp 2-1:1.0: usblp0: USB Bidirectional printer dev 12 if 0 alt 0 proto 2 vid 0x0525 pid 0xA4A8 [ 171.657075][ T1756] usb 2-1: USB disconnect, device number 12 [ 171.664067][ T1756] usblp0: removed [ 171.726664][ T5137] kworker/u4:347: attempt to access beyond end of device [ 171.726664][ T5137] loop0: rw=1, sector=145, nr_sectors = 896 limit=128 [ 171.740445][ T2197] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 171.763203][ T9044] device bridge0 entered promiscuous mode [ 171.769005][ T9044] device macsec1 entered promiscuous mode [ 171.775389][ T9044] bridge0: port 3(macsec1) entered blocking state [ 171.781865][ T9044] bridge0: port 3(macsec1) entered disabled state [ 171.789160][ T9044] device bridge0 left promiscuous mode [ 171.921493][ T2197] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 171.933042][ T2197] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 171.943453][ T2197] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 171.958691][ T2197] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 171.972234][ T2197] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.991282][ T2197] usb 3-1: config 0 descriptor?? [ 172.317404][ T9063] loop4: detected capacity change from 0 to 40427 [ 172.332863][ T9063] F2FS-fs (loop4): fault_injection options not supported [ 172.346417][ T9063] F2FS-fs (loop4): invalid crc value [ 172.353086][ T9063] F2FS-fs (loop4): Found nat_bits in checkpoint [ 172.388478][ T9063] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 172.401873][ T2197] plantronics 0003:047F:FFFF.0038: unknown main item tag 0xe [ 172.411827][ T2197] plantronics 0003:047F:FFFF.0038: unknown main item tag 0x0 [ 172.419782][ T2197] plantronics 0003:047F:FFFF.0038: No inputs registered, leaving [ 172.439698][ T2197] plantronics 0003:047F:FFFF.0038: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 172.681346][ T2197] usb 3-1: USB disconnect, device number 25 [ 172.708563][ T9095] loop1: detected capacity change from 0 to 40427 [ 172.716078][ T9095] F2FS-fs (loop1): Wrong SIT boundary, start(1536) end(50334208) blocks(1024) [ 172.729903][ T9095] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 172.738282][ T9106] SELinux: Context system_u:object_r:syslogd_var_run_t:s0 is not valid (left unmapped). [ 172.749210][ T9095] F2FS-fs (loop1): invalid crc value [ 172.766892][ T9095] F2FS-fs (loop1): Found nat_bits in checkpoint [ 172.812423][ T9095] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 172.819480][ T9095] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 172.830727][ T6] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 172.851736][ T9095] syz.1.3530: attempt to access beyond end of device [ 172.851736][ T9095] loop1: rw=2049, sector=53248, nr_sectors = 8 limit=40427 [ 172.865665][ T9095] loop2: detected capacity change from 0 to 7 [ 172.879805][ T6250] syz-executor: attempt to access beyond end of device [ 172.879805][ T6250] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 173.021496][ T6] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 173.031773][ T6] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 173.041458][ T6] usb 8-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 173.050614][ T6] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 173.058685][ T6] usb 8-1: SerialNumber: syz [ 173.063402][ T392] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 173.251496][ T392] usb 5-1: config 1 interface 0 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 173.264815][ T28] kauditd_printk_skb: 85 callbacks suppressed [ 173.264844][ T28] audit: type=1400 audit(173.246:1822): avc: denied { remount } for pid=9113 comm="syz.1.3528" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 173.290957][ T392] usb 5-1: config 1 interface 0 has no altsetting 0 [ 173.298219][ T6] usb 8-1: 0:2 : does not exist [ 173.304752][ T392] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 173.314535][ T6] usb 8-1: USB disconnect, device number 21 [ 173.321460][ T392] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 173.329564][ T392] usb 5-1: SerialNumber: syz [ 173.480442][ T19] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 173.540346][ T28] audit: type=1400 audit(173.516:1823): avc: denied { validate_trans } for pid=9128 comm="syz.0.3534" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 173.660431][ T19] usb 3-1: Using ep0 maxpacket: 8 [ 173.666776][ T19] usb 3-1: unable to get BOS descriptor or descriptor too short [ 173.675114][ T19] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 173.684911][ T19] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 16 [ 173.696233][ T19] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 173.705372][ T19] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.713376][ T19] usb 3-1: Product: syz [ 173.717538][ T19] usb 3-1: Manufacturer: syz [ 173.722145][ T19] usb 3-1: SerialNumber: syz [ 173.727446][ T9116] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 173.734689][ T9116] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 173.939159][ T392] cdc_ether 5-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.4-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 173.953492][ T19] usblp 3-1:1.0: usblp0: USB Bidirectional printer dev 26 if 0 alt 0 proto 2 vid 0x0525 pid 0xA4A8 [ 173.964982][ T19] usb 3-1: USB disconnect, device number 26 [ 173.971532][ T19] usblp0: removed [ 174.058304][ T9146] loop7: detected capacity change from 0 to 2048 [ 174.101235][ T9146] Alternate GPT is invalid, using primary GPT. [ 174.107488][ T9146] loop7: p1 p2 p3 [ 174.168072][ T9159] loop7: detected capacity change from 0 to 256 [ 174.174917][ T9159] exFAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 174.185549][ T9159] exFAT-fs (loop7): Medium has reported failures. Some data may be lost. [ 174.196197][ T9159] exFAT-fs (loop7): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 174.212842][ T28] audit: type=1400 audit(174.196:1824): avc: denied { append } for pid=9158 comm="syz.7.3547" path="/480/file0/cgroup.controllers" dev="loop7" ino=1048793 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 174.241455][ T28] audit: type=1400 audit(174.196:1825): avc: denied { unlink } for pid=9158 comm="syz.7.3547" name="file0" dev="loop7" ino=1048792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 174.345057][ T506] usb 5-1: USB disconnect, device number 15 [ 174.352677][ T506] cdc_ether 5-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.4-1, CDC Ethernet Device [ 174.676676][ T9197] loop7: detected capacity change from 0 to 512 [ 174.686553][ T9197] EXT4-fs error (device loop7): ext4_get_branch:178: inode #11: block 4294967295: comm syz.7.3564: invalid block [ 174.699513][ T9197] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #11: comm syz.7.3564: invalid indirect mapped block 4294967295 (level 1) [ 174.714057][ T9197] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #11: comm syz.7.3564: invalid indirect mapped block 4294967295 (level 1) [ 174.728682][ T9197] EXT4-fs (loop7): 2 truncates cleaned up [ 174.734489][ T9197] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 174.750827][ T9197] EXT4-fs error (device loop7): ext4_validate_block_bitmap:429: comm syz.7.3564: bg 0: block 5: invalid block bitmap [ 174.844937][ T2259] EXT4-fs (loop7): unmounting filesystem. [ 174.872735][ T9210] loop0: detected capacity change from 0 to 4096 [ 174.876097][ T28] audit: type=1400 audit(174.856:1826): avc: denied { append } for pid=9215 comm="syz.4.3571" name="random" dev="devtmpfs" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 174.879387][ T9210] EXT4-fs: Ignoring removed oldalloc option [ 174.907608][ T2197] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 174.910540][ T9210] EXT4-fs: Ignoring removed i_version option [ 174.922719][ T9210] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 174.931430][ T9210] EXT4-fs (loop0): Test dummy encryption mode enabled [ 174.939564][ T9210] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 174.965885][ T8233] EXT4-fs (loop0): unmounting filesystem. [ 175.105588][ T2197] usb 2-1: config 0 has an invalid interface number: 248 but max is 0 [ 175.118519][ T2197] usb 2-1: config 0 has no interface number 0 [ 175.124836][ T2197] usb 2-1: New USB device found, idVendor=1b3d, idProduct=9316, bcdDevice= 4.3d [ 175.135221][ T2197] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.143873][ T2197] usb 2-1: config 0 descriptor?? [ 175.157965][ T2197] ftdi_sio 2-1:0.248: FTDI USB Serial Device converter detected [ 175.171612][ T2197] ftdi_sio ttyUSB0: unknown device type: 0x43d [ 175.177081][ T9245] loop2: detected capacity change from 0 to 4096 [ 175.184536][ T9245] EXT4-fs: Ignoring removed oldalloc option [ 175.191199][ T9245] EXT4-fs: Ignoring removed i_version option [ 175.197795][ T9245] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 175.206633][ T9245] EXT4-fs (loop2): Test dummy encryption mode enabled [ 175.247101][ T9245] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 175.269554][ T8143] EXT4-fs (loop2): unmounting filesystem. [ 175.330520][ T2197] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 175.359788][ T288] usb 2-1: USB disconnect, device number 13 [ 175.380706][ T288] ftdi_sio 2-1:0.248: device disconnected [ 175.487587][ T9256] loop2: detected capacity change from 0 to 40427 [ 175.494864][ T9256] F2FS-fs (loop2): fault_injection options not supported [ 175.502582][ T9256] F2FS-fs (loop2): invalid crc value [ 175.508953][ T9256] F2FS-fs (loop2): Found nat_bits in checkpoint [ 175.530507][ T9256] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 175.531579][ T2197] usb 1-1: config 0 has no interfaces? [ 175.545148][ T2197] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 175.554374][ T2197] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.562445][ T2197] usb 1-1: Product: syz [ 175.566756][ T2197] usb 1-1: Manufacturer: syz [ 175.571409][ T2197] usb 1-1: SerialNumber: syz [ 175.576653][ T2197] usb 1-1: config 0 descriptor?? [ 175.600756][ T28] audit: type=1400 audit(175.586:1827): avc: denied { create } for pid=9263 comm="syz.7.3592" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 175.746268][ T28] audit: type=1400 audit(175.737:1828): avc: denied { append } for pid=9279 comm="syz.4.3599" name="kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 175.790450][ T288] usb 1-1: USB disconnect, device number 16 [ 175.853335][ T9291] tipc: Started in network mode [ 175.858196][ T9291] tipc: Node identity ac1414aa, cluster identity 4711 [ 175.865127][ T9291] tipc: Enabled bearer , priority 10 [ 175.888888][ T28] audit: type=1326 audit(175.877:1829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9293 comm="syz.1.3604" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f397cf8ebe9 code=0x0 [ 175.891309][ T19] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 176.090465][ T19] usb 8-1: Using ep0 maxpacket: 16 [ 176.096893][ T19] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 176.100467][ T2197] usb 3-1: new full-speed USB device number 27 using dummy_hcd [ 176.107107][ T19] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 176.124765][ T19] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 176.133826][ T19] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.141830][ T19] usb 8-1: Product: syz [ 176.145985][ T19] usb 8-1: Manufacturer: syz [ 176.150580][ T19] usb 8-1: SerialNumber: syz [ 176.291481][ T2197] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 176.304788][ T2197] usb 3-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 176.314190][ T2197] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.322688][ T2197] usb 3-1: config 0 descriptor?? [ 176.357074][ T19] usb 8-1: 0:2 : does not exist [ 176.363909][ T19] usb 8-1: 5:0: failed to get current value for ch 0 (-22) [ 176.375934][ T19] usb 8-1: USB disconnect, device number 22 [ 176.733157][ T9309] loop0: detected capacity change from 0 to 512 [ 176.739721][ T2197] nintendo 0003:057E:200E.0039: unbalanced collection at end of report description [ 176.749345][ T9309] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 176.751700][ T2197] nintendo 0003:057E:200E.0039: HID parse failed [ 176.772891][ T2197] nintendo 0003:057E:200E.0039: probe - fail = -22 [ 176.779430][ T2197] nintendo: probe of 0003:057E:200E.0039 failed with error -22 [ 176.796394][ T9316] device bridge0 entered promiscuous mode [ 176.807382][ T9316] device macsec1 entered promiscuous mode [ 176.814741][ T9316] bridge0: port 3(macsec1) entered blocking state [ 176.821225][ T9316] bridge0: port 3(macsec1) entered disabled state [ 176.831933][ T9316] device bridge0 left promiscuous mode [ 176.972914][ T2197] usb 3-1: USB disconnect, device number 27 [ 176.983302][ T288] tipc: Node number set to 2886997162 [ 177.063199][ T28] audit: type=1400 audit(177.057:1830): avc: denied { mount } for pid=9372 comm="syz.4.3640" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 177.066566][ T9375] device bridge0 entered promiscuous mode [ 177.091478][ T9375] device macsec1 entered promiscuous mode [ 177.094706][ T28] audit: type=1400 audit(177.077:1831): avc: denied { getopt } for pid=9372 comm="syz.4.3640" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 177.099115][ T9375] bridge0: port 3(macsec1) entered blocking state [ 177.123738][ T9375] bridge0: port 3(macsec1) entered disabled state [ 177.130845][ T9375] device bridge0 left promiscuous mode [ 177.145346][ T9377] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 177.157773][ T5235] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 177.166030][ T5235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 177.174423][ T5235] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 177.183550][ T5235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 177.191958][ T5235] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 177.200018][ T5235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 177.208295][ T5235] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 177.216475][ T5235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 177.633797][ T9413] loop2: detected capacity change from 0 to 512 [ 177.640694][ T9413] EXT4-fs: Ignoring removed oldalloc option [ 177.648459][ T9413] EXT4-fs (loop2): 1 truncate cleaned up [ 177.654679][ T9413] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 177.667419][ T9413] EXT4-fs error (device loop2): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz.2.3657: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0 [ 177.688232][ T9413] EXT4-fs (loop2): Remounting filesystem read-only [ 177.702849][ T8143] EXT4-fs (loop2): unmounting filesystem. [ 177.729850][ T9419] loop2: detected capacity change from 0 to 512 [ 177.736853][ T9419] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 177.752856][ T9419] EXT4-fs error (device loop2): ext4_orphan_get:1400: inode #17: comm syz.2.3659: iget: bad i_size value: -6917529027641081756 [ 177.766485][ T9419] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.3659: couldn't read orphan inode 17 (err -117) [ 177.778614][ T9419] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 177.792876][ T9419] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.3659: bg 0: block 65: padding at end of block bitmap is not set [ 177.810772][ T9419] EXT4-fs error (device loop2): ext4_acquire_dquot:6801: comm syz.2.3659: Failed to acquire dquot type 0 [ 178.012060][ T9442] input: syz0 as /devices/virtual/input/input33 [ 178.261452][ T9470] syz.0.3680[9470] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 178.261508][ T9470] syz.0.3680[9470] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 178.358269][ T8143] EXT4-fs (loop2): unmounting filesystem. [ 178.438397][ T28] kauditd_printk_skb: 11 callbacks suppressed [ 178.438412][ T28] audit: type=1400 audit(178.427:1841): avc: denied { bind } for pid=9477 comm="syz.7.3684" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 178.469175][ T28] audit: type=1400 audit(178.427:1842): avc: denied { write } for pid=9477 comm="syz.7.3684" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 178.490320][ T9484] loop0: detected capacity change from 0 to 512 [ 178.508214][ T9484] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 178.521345][ T28] audit: type=1400 audit(178.457:1843): avc: denied { map } for pid=9479 comm="syz.4.3685" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=55360 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 178.548848][ T28] audit: type=1400 audit(178.457:1844): avc: denied { read write } for pid=9479 comm="syz.4.3685" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=55360 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 178.581337][ T9484] FAT-fs (loop0): error, fat_free_clusters: deleting FAT entry beyond EOF [ 178.614191][ T28] audit: type=1400 audit(178.597:1845): avc: denied { ioctl } for pid=9496 comm="syz.2.3692" path="socket:[54596]" dev="sockfs" ino=54596 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 178.651050][ T28] audit: type=1400 audit(178.627:1846): avc: denied { connect } for pid=9496 comm="syz.2.3692" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 178.680145][ T28] audit: type=1400 audit(178.627:1847): avc: denied { write } for pid=9496 comm="syz.2.3692" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 178.787780][ T9493] loop4: detected capacity change from 0 to 40427 [ 178.810459][ T9493] F2FS-fs (loop4): Corrupted extension count (720933 + 1 > 64) [ 178.818040][ T9493] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 178.843719][ T9493] F2FS-fs (loop4): fault_injection options not supported [ 178.856719][ T9493] F2FS-fs (loop4): Image doesn't support compression [ 178.863608][ T9493] F2FS-fs (loop4): Image doesn't support compression [ 178.871818][ T9493] F2FS-fs (loop4): invalid crc value [ 178.878293][ T9493] F2FS-fs (loop4): Found nat_bits in checkpoint [ 178.915239][ T9493] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 178.924278][ T9493] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 178.986914][ T9529] syz.0.3705[9529] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 178.986994][ T9529] syz.0.3705[9529] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 179.057965][ T5235] kworker/u4:434: attempt to access beyond end of device [ 179.057965][ T5235] loop4: rw=1, sector=53248, nr_sectors = 2048 limit=40427 [ 179.101646][ T5235] kworker/u4:434: attempt to access beyond end of device [ 179.101646][ T5235] loop4: rw=1, sector=55296, nr_sectors = 7392 limit=40427 [ 179.133060][ T5235] kworker/u4:434: attempt to access beyond end of device [ 179.133060][ T5235] loop4: rw=1, sector=62688, nr_sectors = 6944 limit=40427 [ 179.164126][ T5235] kworker/u4:434: attempt to access beyond end of device [ 179.164126][ T5235] loop4: rw=1, sector=69632, nr_sectors = 8192 limit=40427 [ 179.191785][ T5235] kworker/u4:434: attempt to access beyond end of device [ 179.191785][ T5235] loop4: rw=1, sector=81920, nr_sectors = 8024 limit=40427 [ 179.207198][ T5235] kworker/u4:434: attempt to access beyond end of device [ 179.207198][ T5235] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 179.290460][ T2197] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 179.469875][ T9551] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 179.478972][ T9551] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 179.488043][ T9551] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 179.497088][ T9551] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 179.506136][ T9551] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 179.515185][ T9551] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 179.524227][ T9551] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 179.533262][ T9551] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 179.542387][ T9551] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 179.551421][ T9551] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 179.561186][ T2197] usb 1-1: Using ep0 maxpacket: 16 [ 179.572585][ T2197] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 179.591330][ T2197] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 179.610445][ T392] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 179.611922][ T2197] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 179.648913][ T2197] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 179.658541][ T2197] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.666642][ T2197] usb 1-1: Product: syz [ 179.670901][ T2197] usb 1-1: Manufacturer: syz [ 179.675537][ T2197] usb 1-1: SerialNumber: syz [ 179.791528][ T392] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 179.802499][ T392] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 179.812297][ T392] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 179.825218][ T392] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 179.842036][ T392] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.853919][ T392] usb 3-1: config 0 descriptor?? [ 180.083194][ T2197] usb 1-1: 0:2 : does not exist [ 180.112547][ T9558] loop7: detected capacity change from 0 to 131072 [ 180.121839][ T9558] F2FS-fs (loop7): Found nat_bits in checkpoint [ 180.149195][ T9558] F2FS-fs (loop7): Mounted with checkpoint version = 753bd00b [ 180.164084][ T28] audit: type=1400 audit(180.157:1848): avc: denied { write } for pid=9557 comm="syz.7.3718" name="encrypted_dir" dev="loop7" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 180.186035][ T28] audit: type=1400 audit(180.167:1849): avc: denied { add_name } for pid=9557 comm="syz.7.3718" name="file" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 180.295423][ T28] audit: type=1400 audit(180.287:1850): avc: denied { write } for pid=9575 comm="syz.4.3726" name="ptp0" dev="devtmpfs" ino=264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 180.601548][ T9574] loop1: detected capacity change from 0 to 131072 [ 180.609012][ T9574] F2FS-fs (loop1): Wrong CP boundary, start(512) end(1536) blocks(0) [ 180.617140][ T9574] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 180.626371][ T392] plantronics 0003:047F:FFFF.003A: unknown main item tag 0xe [ 180.633856][ T392] plantronics 0003:047F:FFFF.003A: unknown main item tag 0x0 [ 180.641416][ T392] plantronics 0003:047F:FFFF.003A: No inputs registered, leaving [ 180.649864][ T392] plantronics 0003:047F:FFFF.003A: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 180.663060][ T392] usb 3-1: USB disconnect, device number 28 [ 180.671859][ T9574] F2FS-fs (loop1): invalid crc value [ 180.694527][ T9574] F2FS-fs (loop1): Found nat_bits in checkpoint [ 180.705720][ T2197] usb 1-1: 1:0: failed to get current value for ch 0 (-22) [ 180.726212][ T2197] usb 1-1: USB disconnect, device number 17 [ 180.737795][ T9574] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 180.744426][ T9594] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 180.745020][ T9574] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 180.916549][ T9602] Non-string source [ 181.005328][ T9613] IPv6: NLM_F_REPLACE set, but no existing node found! [ 181.010212][ T9614] loop4: detected capacity change from 0 to 512 [ 181.022653][ T9614] EXT4-fs: Ignoring removed oldalloc option [ 181.038555][ T9614] EXT4-fs (loop4): 1 truncate cleaned up [ 181.044450][ T9614] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 181.074257][ T8923] EXT4-fs (loop4): unmounting filesystem. [ 181.321514][ T9654] loop0: detected capacity change from 0 to 512 [ 181.328964][ T9654] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 181.362246][ T9654] EXT4-fs error (device loop0): ext4_orphan_get:1400: inode #17: comm syz.0.3756: iget: bad i_size value: -6917529027641081756 [ 181.390492][ T9654] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.3756: couldn't read orphan inode 17 (err -117) [ 181.409183][ T9654] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 181.428662][ T9654] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.3756: bg 0: block 65: padding at end of block bitmap is not set [ 181.450558][ T9654] EXT4-fs error (device loop0): ext4_acquire_dquot:6801: comm syz.0.3756: Failed to acquire dquot type 0 [ 181.525759][ T9671] IPv6: NLM_F_REPLACE set, but no existing node found! [ 181.656389][ T2197] hid-generic 0000:0000:0000.003B: unknown main item tag 0x0 [ 181.664089][ T2197] hid-generic 0000:0000:0000.003B: unknown main item tag 0x0 [ 181.671572][ T2197] hid-generic 0000:0000:0000.003B: unknown main item tag 0x0 [ 181.679022][ T2197] hid-generic 0000:0000:0000.003B: unknown main item tag 0x0 [ 181.696192][ T2197] hid-generic 0000:0000:0000.003B: unknown main item tag 0x0 [ 181.704312][ T2197] hid-generic 0000:0000:0000.003B: unknown main item tag 0x0 [ 181.712195][ T2197] hid-generic 0000:0000:0000.003B: unknown main item tag 0x0 [ 181.719602][ T2197] hid-generic 0000:0000:0000.003B: unknown main item tag 0x0 [ 181.727117][ T2197] hid-generic 0000:0000:0000.003B: unknown main item tag 0x0 [ 181.734584][ T2197] hid-generic 0000:0000:0000.003B: unknown main item tag 0x0 [ 181.742305][ T2197] hid-generic 0000:0000:0000.003B: unknown main item tag 0x0 [ 181.749712][ T2197] hid-generic 0000:0000:0000.003B: unknown main item tag 0x0 [ 181.767500][ T2197] hid-generic 0000:0000:0000.003B: unknown main item tag 0x0 [ 181.779105][ T2197] hid-generic 0000:0000:0000.003B: unknown main item tag 0x0 [ 181.796672][ T2197] hid-generic 0000:0000:0000.003B: unknown main item tag 0x0 [ 181.805686][ T2197] hid-generic 0000:0000:0000.003B: unknown main item tag 0x0 [ 181.813151][ T2197] hid-generic 0000:0000:0000.003B: unknown main item tag 0x0 [ 181.820624][ T2197] hid-generic 0000:0000:0000.003B: unknown main item tag 0x0 [ 181.828015][ T2197] hid-generic 0000:0000:0000.003B: unknown main item tag 0x0 [ 181.835512][ T2197] hid-generic 0000:0000:0000.003B: unknown main item tag 0x0 [ 181.843208][ T2197] hid-generic 0000:0000:0000.003B: unknown main item tag 0x0 [ 181.854877][ T2197] hid-generic 0000:0000:0000.003B: unknown main item tag 0x0 [ 181.863345][ T9703] usb usb8: usbfs: process 9703 (syz.1.3779) did not claim interface 0 before use [ 181.872657][ T2197] hid-generic 0000:0000:0000.003B: unknown main item tag 0x0 [ 181.881301][ T2197] hid-generic 0000:0000:0000.003B: unknown main item tag 0x0 [ 181.888963][ T2197] hid-generic 0000:0000:0000.003B: unknown main item tag 0x0 [ 181.897008][ T2197] hid-generic 0000:0000:0000.003B: unknown main item tag 0x0 [ 181.904722][ T2197] hid-generic 0000:0000:0000.003B: unknown main item tag 0x0 [ 181.912178][ T2197] hid-generic 0000:0000:0000.003B: unknown main item tag 0x0 [ 181.919568][ T2197] hid-generic 0000:0000:0000.003B: unknown main item tag 0x0 [ 181.926990][ T2197] hid-generic 0000:0000:0000.003B: unknown main item tag 0x0 [ 181.935888][ T9706] loop1: detected capacity change from 0 to 256 [ 181.942700][ T2197] hid-generic 0000:0000:0000.003B: unknown main item tag 0x0 [ 181.950312][ T2197] hid-generic 0000:0000:0000.003B: unknown main item tag 0x0 [ 181.958457][ T2197] hid-generic 0000:0000:0000.003B: hidraw0: HID v0.00 Device [sy] on syz0 [ 181.986817][ T8233] EXT4-fs (loop0): unmounting filesystem. [ 182.277188][ T9748] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.284251][ T9748] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.291679][ T9748] device bridge_slave_0 entered promiscuous mode [ 182.298434][ T9748] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.305472][ T9748] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.313233][ T9748] device bridge_slave_1 entered promiscuous mode [ 182.354587][ T9748] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.361648][ T9748] bridge0: port 2(bridge_slave_1) entered forwarding state [ 182.368892][ T9748] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.376007][ T9748] bridge0: port 1(bridge_slave_0) entered forwarding state [ 182.395898][ T5235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 182.403546][ T5235] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.411204][ T5235] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.427035][ T5235] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 182.435393][ T5235] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.442498][ T5235] bridge0: port 1(bridge_slave_0) entered forwarding state [ 182.450225][ T5235] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 182.458942][ T5235] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.466030][ T5235] bridge0: port 2(bridge_slave_1) entered forwarding state [ 182.485236][ T5235] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 182.493119][ T392] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 182.501189][ T5235] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 182.519626][ T5235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 182.528405][ T5235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 182.537317][ T5235] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 182.545117][ T5235] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 182.554046][ T9748] device veth0_vlan entered promiscuous mode [ 182.565387][ T5235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 182.575097][ T9748] device veth1_macvtap entered promiscuous mode [ 182.585413][ T5235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 182.595330][ T5235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 182.636611][ T9774] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 182.700520][ T392] usb 8-1: Using ep0 maxpacket: 32 [ 182.709582][ T392] usb 8-1: config index 0 descriptor too short (expected 29220, got 36) [ 182.722838][ T392] usb 8-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 182.731890][ T9778] loop0: detected capacity change from 0 to 128 [ 182.732581][ T392] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 182.747397][ T392] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 182.757257][ T392] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 182.772440][ T392] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 182.782228][ T392] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 182.792399][ T392] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 182.805525][ T392] usb 8-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 182.814586][ T392] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.824027][ T392] usb 8-1: config 0 descriptor?? [ 182.901620][ T5137] device bridge_slave_1 left promiscuous mode [ 182.907791][ T5137] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.921076][ T5137] device bridge_slave_0 left promiscuous mode [ 182.932793][ T5137] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.949675][ T5137] device veth1_macvtap left promiscuous mode [ 182.956034][ T5137] device veth0_vlan left promiscuous mode [ 183.030786][ T392] usblp 8-1:0.0: usblp0: USB Bidirectional printer dev 23 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 183.126953][ T9796] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.134080][ T9796] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.141687][ T9796] device bridge_slave_0 entered promiscuous mode [ 183.148819][ T9796] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.155940][ T9796] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.163439][ T9796] device bridge_slave_1 entered promiscuous mode [ 183.204594][ T9796] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.211655][ T9796] bridge0: port 2(bridge_slave_1) entered forwarding state [ 183.218910][ T9796] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.225924][ T9796] bridge0: port 1(bridge_slave_0) entered forwarding state [ 183.233920][ T392] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 183.240940][ T2197] usb 8-1: USB disconnect, device number 23 [ 183.248413][ T2197] usblp0: removed [ 183.255116][ T5259] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.262724][ T5259] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.270125][ T5259] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 183.277815][ T5259] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 183.287541][ T5259] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 183.295761][ T5259] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.302798][ T5259] bridge0: port 1(bridge_slave_0) entered forwarding state [ 183.315117][ T5259] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 183.320555][ T288] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 183.330902][ T5259] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.337966][ T5259] bridge0: port 2(bridge_slave_1) entered forwarding state [ 183.348431][ T5259] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 183.356614][ T5259] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 183.371830][ T5259] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 183.382994][ T5259] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 183.391028][ T5259] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 183.398405][ T5259] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 183.406573][ T9796] device veth0_vlan entered promiscuous mode [ 183.417175][ T5259] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 183.426288][ T9796] device veth1_macvtap entered promiscuous mode [ 183.435930][ T5259] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 183.445766][ T5259] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 183.455042][ T392] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 183.466053][ T392] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 183.476109][ T392] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 183.489025][ T392] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 183.498087][ T392] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.506644][ T392] usb 2-1: config 0 descriptor?? [ 183.510803][ T288] usb 5-1: Using ep0 maxpacket: 16 [ 183.519833][ T288] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 183.529084][ T288] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 183.541231][ T288] usb 5-1: config 0 has no interface number 0 [ 183.549344][ T288] usb 5-1: New USB device found, idVendor=1a86, idProduct=752d, bcdDevice=2d.4d [ 183.558435][ T288] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.566475][ T288] usb 5-1: Product: syz [ 183.570817][ T288] usb 5-1: Manufacturer: syz [ 183.575436][ T288] usb 5-1: SerialNumber: syz [ 183.580662][ T288] usb 5-1: config 0 descriptor?? [ 183.587851][ T288] snd-usb-audio: probe of 5-1:0.1 failed with error -2 [ 183.633023][ T9823] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3827'. [ 183.763229][ T9829] loop7: detected capacity change from 0 to 512 [ 183.770802][ T9829] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 183.783902][ T9829] EXT4-fs error (device loop7): ext4_orphan_get:1400: inode #17: comm syz.7.3828: iget: bad i_size value: -6917529027641081756 [ 183.800687][ T506] usb 5-1: USB disconnect, device number 16 [ 183.807529][ T9829] EXT4-fs error (device loop7): ext4_orphan_get:1405: comm syz.7.3828: couldn't read orphan inode 17 (err -117) [ 183.824934][ T9829] EXT4-fs error (device loop7): ext4_validate_block_bitmap:438: comm syz.7.3828: bg 0: block 65: padding at end of block bitmap is not set [ 183.840617][ T9829] __quota_error: 11 callbacks suppressed [ 183.840665][ T9829] Quota error (device loop7): write_blk: dquota write failed [ 183.853880][ T9829] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 183.864222][ T9829] EXT4-fs error (device loop7): ext4_acquire_dquot:6801: comm syz.7.3828: Failed to acquire dquot type 0 [ 183.915482][ T392] plantronics 0003:047F:FFFF.003C: unknown main item tag 0x0 [ 183.923048][ T392] plantronics 0003:047F:FFFF.003C: unknown main item tag 0x0 [ 183.930474][ T392] plantronics 0003:047F:FFFF.003C: unknown main item tag 0x0 [ 183.937933][ T392] plantronics 0003:047F:FFFF.003C: unknown main item tag 0x0 [ 183.945363][ T392] plantronics 0003:047F:FFFF.003C: unknown main item tag 0x0 [ 183.952877][ T392] plantronics 0003:047F:FFFF.003C: unknown main item tag 0x0 [ 183.960284][ T392] plantronics 0003:047F:FFFF.003C: unknown main item tag 0x0 [ 183.967705][ T392] plantronics 0003:047F:FFFF.003C: unknown main item tag 0x0 [ 183.975102][ T392] plantronics 0003:047F:FFFF.003C: unknown main item tag 0x0 [ 183.982693][ T392] plantronics 0003:047F:FFFF.003C: No inputs registered, leaving [ 183.991510][ T392] plantronics 0003:047F:FFFF.003C: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 184.011150][ T5137] device bridge_slave_1 left promiscuous mode [ 184.017324][ T5137] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.029253][ T5137] device bridge_slave_0 left promiscuous mode [ 184.035707][ T5137] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.048894][ T5137] device veth1_macvtap left promiscuous mode [ 184.055122][ T5137] device veth0_vlan left promiscuous mode [ 184.191285][ T392] usb 2-1: USB disconnect, device number 14 [ 184.245201][ T28] audit: type=1400 audit(184.237:1860): avc: denied { connect } for pid=9865 comm="syz.0.3845" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 184.420093][ T9877] incfs: Options parsing error. -22 [ 184.425571][ T9877] incfs: mount failed -22 [ 184.687630][ T9879] loop0: detected capacity change from 0 to 131072 [ 184.696601][ T9879] F2FS-fs (loop0): Found nat_bits in checkpoint [ 184.729668][ T9879] F2FS-fs (loop0): Mounted with checkpoint version = 753bd00b [ 184.740863][ T28] audit: type=1400 audit(184.737:1861): avc: denied { compute_member } for pid=9892 comm="syz.1.3854" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 184.911465][ T9899] loop2: detected capacity change from 0 to 1024 [ 184.939728][ T5137] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 184.955109][ T5137] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 320 with error 28 [ 184.967724][ T5137] EXT4-fs (loop2): This should not happen!! Data will be lost [ 184.967724][ T5137] [ 184.977478][ T5137] EXT4-fs (loop2): Total free blocks count 0 [ 184.983473][ T5137] EXT4-fs (loop2): Free/Dirty block details [ 184.989355][ T5137] EXT4-fs (loop2): free_blocks=68451041280 [ 184.995283][ T5137] EXT4-fs (loop2): dirty_blocks=320 [ 185.000505][ T5137] EXT4-fs (loop2): Block reservation details [ 185.006487][ T5137] EXT4-fs (loop2): i_reserved_data_blocks=20 [ 185.019867][ T28] audit: type=1400 audit(185.007:1862): avc: denied { read write } for pid=9902 comm="syz.2.3857" name="file1" dev="tmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 185.042035][ T28] audit: type=1400 audit(185.007:1863): avc: denied { open } for pid=9902 comm="syz.2.3857" path="/12/file1" dev="tmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 185.064062][ T28] audit: type=1400 audit(185.007:1864): avc: denied { watch watch_reads } for pid=9902 comm="syz.2.3857" path="/12/file1" dev="tmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 185.090498][ T288] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 185.177248][ T9912] loop4: detected capacity change from 0 to 512 [ 185.184070][ T9912] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 185.202453][ T9912] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #17: comm syz.4.3861: iget: bad i_size value: -6917529027641081756 [ 185.215911][ T9912] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.3861: couldn't read orphan inode 17 (err -117) [ 185.231869][ T9912] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.3861: bg 0: block 65: padding at end of block bitmap is not set [ 185.246273][ T9912] Quota error (device loop4): write_blk: dquota write failed [ 185.253806][ T9912] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 185.263794][ T9912] EXT4-fs error (device loop4): ext4_acquire_dquot:6801: comm syz.4.3861: Failed to acquire dquot type 0 [ 185.280585][ T288] usb 2-1: Using ep0 maxpacket: 8 [ 185.286724][ T288] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 185.295070][ T288] usb 2-1: config 179 has no interface number 0 [ 185.301402][ T288] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 185.312485][ T288] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 185.323718][ T288] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 185.334914][ T288] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 185.346294][ T288] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 185.359544][ T288] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 185.368582][ T288] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.377280][ T9895] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 185.590204][ T392] usb 2-1: USB disconnect, device number 15 [ 185.590269][ C1] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 185.605117][ C1] dummy_hcd dummy_hcd.1: timer fired with no URBs pending? [ 185.861736][ T28] audit: type=1400 audit(185.857:1865): avc: denied { watch_reads } for pid=9945 comm="syz.0.3876" path="/23/file0" dev="tmpfs" ino=138 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 185.954581][ T9954] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 185.970647][ T5259] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 185.978950][ T5259] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 185.987320][ T5259] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 185.995853][ T5259] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 186.004181][ T5259] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 186.012431][ T5259] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 186.021245][ T5259] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 186.029576][ T5259] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 186.069703][ T9962] netlink: 27 bytes leftover after parsing attributes in process `syz.0.3883'. [ 186.141732][ T9980] loop0: detected capacity change from 0 to 1024 [ 186.154897][ T9984] loop1: detected capacity change from 0 to 512 [ 186.163135][ T9984] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 186.177669][ T9984] EXT4-fs (loop1): 1 truncate cleaned up [ 186.231568][ T5137] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 186.247338][ T5137] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 320 with error 28 [ 186.267226][ T5137] EXT4-fs (loop0): This should not happen!! Data will be lost [ 186.267226][ T5137] [ 186.276964][ T5137] EXT4-fs (loop0): Total free blocks count 0 [ 186.283320][ T5137] EXT4-fs (loop0): Free/Dirty block details [ 186.289271][ T5137] EXT4-fs (loop0): free_blocks=68451041280 [ 186.295323][ T5137] EXT4-fs (loop0): dirty_blocks=320 [ 186.300920][ T5137] EXT4-fs (loop0): Block reservation details [ 186.307099][ T5137] EXT4-fs (loop0): i_reserved_data_blocks=20 [ 186.331091][T10005] loop1: detected capacity change from 0 to 256 [ 186.337773][T10005] exfat: Deprecated parameter 'utf8' [ 186.343080][T10009] loop0: detected capacity change from 0 to 256 [ 186.345509][T10005] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 186.361475][ T37] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 186.466011][T10021] loop2: detected capacity change from 0 to 512 [ 186.476609][T10021] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 186.550591][ T37] usb 5-1: Using ep0 maxpacket: 16 [ 186.557626][ T37] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 186.579477][ T37] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 186.603628][ T37] usb 5-1: config 0 interface 0 has no altsetting 0 [ 186.604142][T10038] loop7: detected capacity change from 0 to 1024 [ 186.620535][ T37] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 186.639734][ T37] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.656941][ T37] usb 5-1: config 0 descriptor?? [ 186.713830][ T5137] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 186.729056][ T5137] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 320 with error 28 [ 186.741529][ T5137] EXT4-fs (loop7): This should not happen!! Data will be lost [ 186.741529][ T5137] [ 186.751649][ T5137] EXT4-fs (loop7): Total free blocks count 0 [ 186.752036][T10041] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.760514][ T5137] EXT4-fs (loop7): Free/Dirty block details [ 186.770578][ T5137] EXT4-fs (loop7): free_blocks=68451041280 [ 186.773521][T10041] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.776416][ T5137] EXT4-fs (loop7): dirty_blocks=320 [ 186.776430][ T5137] EXT4-fs (loop7): Block reservation details [ 186.776439][ T5137] EXT4-fs (loop7): i_reserved_data_blocks=20 [ 186.793689][T10041] device bridge_slave_0 entered promiscuous mode [ 186.818687][T10041] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.825776][T10041] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.833296][T10041] device bridge_slave_1 entered promiscuous mode [ 186.907676][T10041] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.914769][T10041] bridge0: port 2(bridge_slave_1) entered forwarding state [ 186.922050][T10041] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.929070][T10041] bridge0: port 1(bridge_slave_0) entered forwarding state [ 186.955417][ T5235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 186.964012][ T5235] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.971355][ T5235] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.983411][ T5259] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 186.991956][ T5259] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 187.000189][ T5259] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.007327][ T5259] bridge0: port 1(bridge_slave_0) entered forwarding state [ 187.015809][ T5259] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 187.024458][ T5259] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 187.032823][ T5259] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.039847][ T5259] bridge0: port 2(bridge_slave_1) entered forwarding state [ 187.056140][ T5137] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 187.064367][ T5137] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 187.077960][ T37] hid (null): unknown global tag 0xc [ 187.082421][ T5137] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 187.091612][ T5137] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 187.097953][ T37] hid (null): unknown global tag 0xd [ 187.105180][ T37] hid (null): unknown global tag 0xe [ 187.110539][ T37] hid (null): usage index exceeded [ 187.113266][ T5137] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 187.124148][ T5137] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 187.136163][T10041] device veth0_vlan entered promiscuous mode [ 187.147825][T10063] loop0: detected capacity change from 0 to 512 [ 187.154386][ T5137] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 187.155345][T10063] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 187.162175][ T1756] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 187.181012][T10063] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 187.181614][ T5137] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 187.192458][T10063] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2195: inode #15: comm syz.0.3925: corrupted in-inode xattr [ 187.198080][ T5137] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 187.216994][T10063] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.3925: couldn't read orphan inode 15 (err -117) [ 187.217010][ T5137] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 187.241844][ T5259] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 187.250085][ T5259] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 187.260331][T10041] device veth1_macvtap entered promiscuous mode [ 187.279292][ T5259] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 187.288128][ T5259] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 187.296700][ T5259] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 187.298907][ T6] usb 5-1: USB disconnect, device number 17 [ 187.306073][ T5259] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 187.319253][ T5259] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 187.325727][T10070] loop8: detected capacity change from 0 to 512 [ 187.341729][T10070] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a802c01c, mo2=0002] [ 187.350012][T10070] System zones: 0-2, 18-18, 34-35 [ 187.370419][ T1756] usb 8-1: Using ep0 maxpacket: 32 [ 187.376711][ T1756] usb 8-1: config 0 has an invalid interface number: 184 but max is 0 [ 187.390846][ T1756] usb 8-1: config 0 has no interface number 0 [ 187.397416][ T1756] usb 8-1: config 0 interface 184 has no altsetting 0 [ 187.409392][ T1756] usb 8-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 187.418881][ T1756] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.437882][ T1756] usb 8-1: Product: syz [ 187.444593][ T1756] usb 8-1: Manufacturer: syz [ 187.449299][T10087] loop2: detected capacity change from 0 to 512 [ 187.455912][ T1756] usb 8-1: SerialNumber: syz [ 187.461231][ T1756] usb 8-1: config 0 descriptor?? [ 187.467897][T10087] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 187.476753][ T1756] smsc75xx v1.0.0 [ 187.480629][ T1756] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 187.491068][ T1756] smsc75xx: probe of 8-1:0.184 failed with error -22 [ 187.549186][T10104] loop2: detected capacity change from 0 to 512 [ 187.568529][T10104] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 187.568963][T10110] loop8: detected capacity change from 0 to 1024 [ 187.594667][T10110] EXT4-fs error (device loop8): ext4_map_blocks:745: inode #15: block 3: comm syz.8.3944: lblock 3 mapped to illegal pblock 3 (length 3) [ 187.609143][T10110] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 187.621923][T10110] EXT4-fs (loop8): This should not happen!! Data will be lost [ 187.621923][T10110] [ 187.632885][T10110] EXT4-fs error (device loop8): ext4_map_blocks:745: inode #15: comm syz.8.3944: lblock 0 mapped to illegal pblock 0 (length 3) [ 187.660810][ T5206] EXT4-fs error (device loop8): ext4_map_blocks:745: inode #15: block 8: comm kworker/u4:405: lblock 8 mapped to illegal pblock 8 (length 8) [ 187.701261][ T5206] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 187.714702][ T1756] usb 8-1: USB disconnect, device number 24 [ 187.723802][ T5206] EXT4-fs (loop8): This should not happen!! Data will be lost [ 187.723802][ T5206] [ 187.752913][T10120] loop0: detected capacity change from 0 to 2048 [ 187.804140][T10120] Alternate GPT is invalid, using primary GPT. [ 187.810504][T10120] loop0: p1 p2 p3 [ 187.891850][ T5235] device veth1_macvtap left promiscuous mode [ 187.897964][ T5235] device veth0_vlan left promiscuous mode [ 188.013511][T10159] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3966'. [ 188.034615][T10174] netlink: 5 bytes leftover after parsing attributes in process `syz.2.3973'. [ 188.075957][T10178] input: syz1 as /devices/virtual/input/input35 [ 188.082831][T10178] input: failed to attach handler leds to device input35, error: -6 [ 188.104116][T10186] tmpfs: Bad value for 'uid' [ 188.119324][T10190] syz.2.3980[10190] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 188.119395][T10190] syz.2.3980[10190] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 188.121240][T10189] loop0: detected capacity change from 0 to 512 [ 188.142212][ T37] usb 9-1: new low-speed USB device number 8 using dummy_hcd [ 188.158685][T10189] EXT4-fs (loop0): Test dummy encryption mode enabled [ 188.177520][T10189] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 188.188837][T10189] EXT4-fs error (device loop0): ext4_orphan_get:1426: comm syz.0.3981: bad orphan inode 131083 [ 188.199357][T10195] loop2: detected capacity change from 0 to 256 [ 188.202994][T10189] overlayfs: upper fs needs to support d_type. [ 188.212077][T10189] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 188.212265][T10195] exfat: Deprecated parameter 'utf8' [ 188.227029][T10189] EXT4-fs error (device loop0): __ext4_iget:5079: inode #13: block 512: comm syz.0.3981: invalid block [ 188.231032][T10195] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 188.244179][ T9748] EXT4-fs error (device loop0): ext4_readdir:263: inode #2: block 13: comm syz-executor: path /63/bus: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 188.274026][T10197] loop7: detected capacity change from 0 to 512 [ 188.280484][ T506] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 188.289260][T10197] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 188.304932][T10197] EXT4-fs (loop7): 1 truncate cleaned up [ 188.391719][ T37] usb 9-1: config 1 has an invalid interface descriptor of length 6, skipping [ 188.400743][ T37] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 188.410916][ T37] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 188.421771][ T37] usb 9-1: string descriptor 0 read error: -22 [ 188.428884][ T37] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 188.448163][ T37] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.462145][ T506] usb 5-1: config 0 has an invalid interface number: 156 but max is 0 [ 188.481045][ T506] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 188.495471][ T506] usb 5-1: config 0 has no interface number 0 [ 188.501682][ T506] usb 5-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 188.512789][ T506] usb 5-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 188.522653][ T506] usb 5-1: config 0 interface 156 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 188.535782][ T506] usb 5-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice=d6.b9 [ 188.544868][ T506] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.553692][ T506] usb 5-1: config 0 descriptor?? [ 188.560954][ T506] usb 5-1: MIDIStreaming interface descriptor not found [ 188.632658][T10212] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.639689][T10212] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.647252][T10212] device bridge_slave_0 entered promiscuous mode [ 188.656445][T10212] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.663694][T10212] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.671217][T10212] device bridge_slave_1 entered promiscuous mode [ 188.673506][ T506] usb 9-1: USB disconnect, device number 8 [ 188.693060][T10213] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.700122][T10213] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.707726][T10213] device bridge_slave_0 entered promiscuous mode [ 188.718996][T10213] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.726073][T10213] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.733452][T10213] device bridge_slave_1 entered promiscuous mode [ 188.760489][ T392] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 188.762633][ T37] usb 5-1: USB disconnect, device number 18 [ 188.829968][T10212] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.837023][T10212] bridge0: port 2(bridge_slave_1) entered forwarding state [ 188.844269][T10212] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.851282][T10212] bridge0: port 1(bridge_slave_0) entered forwarding state [ 188.865498][T10213] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.872582][T10213] bridge0: port 2(bridge_slave_1) entered forwarding state [ 188.879849][T10213] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.886890][T10213] bridge0: port 1(bridge_slave_0) entered forwarding state [ 188.915500][ T5259] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 188.923912][ T5259] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.931929][ T5259] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.939142][ T5259] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.946530][ T392] usb 8-1: Using ep0 maxpacket: 8 [ 188.946624][ T5259] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.968428][ T392] usb 8-1: config 179 has an invalid interface number: 65 but max is 0 [ 188.976749][ T392] usb 8-1: config 179 has no interface number 0 [ 188.986443][T10212] device veth0_vlan entered promiscuous mode [ 188.998797][ T392] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 189.011120][ T392] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 189.022386][ T392] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 189.033643][ T392] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 189.045072][ T392] usb 8-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 189.058325][ T392] usb 8-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 189.058863][ T5259] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 189.067416][ T392] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.076099][ T5259] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 189.091801][ T5259] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 189.094025][T10211] raw-gadget.2 gadget.7: fail, usb_ep_enable returned -22 [ 189.099347][ T5259] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 189.113667][ T5259] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 189.121184][ T5259] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 189.129430][ T5259] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.136457][ T5259] bridge0: port 1(bridge_slave_0) entered forwarding state [ 189.143855][ T5259] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 189.152025][ T5259] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.159053][ T5259] bridge0: port 1(bridge_slave_0) entered forwarding state [ 189.166393][ T5259] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 189.174608][ T5259] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.181651][ T5259] bridge0: port 2(bridge_slave_1) entered forwarding state [ 189.188958][ T5259] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 189.197268][ T5259] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.204310][ T5259] bridge0: port 2(bridge_slave_1) entered forwarding state [ 189.211790][ T5259] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 189.219866][ T5259] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 189.233104][T10235] tipc: Started in network mode [ 189.238051][T10235] tipc: Node identity 48, cluster identity 4711 [ 189.244459][T10235] tipc: Node number set to 72 [ 189.256094][ T5259] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 189.264593][ T5259] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 189.279922][T10212] device veth1_macvtap entered promiscuous mode [ 189.288658][ T5235] device bridge_slave_1 left promiscuous mode [ 189.294956][ T5235] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.302940][ T5235] device bridge_slave_0 left promiscuous mode [ 189.311021][ T5235] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.319898][ T5235] device veth1_macvtap left promiscuous mode [ 189.326509][ T5235] device veth0_vlan left promiscuous mode [ 189.404229][ T19] input: Generic X-Box pad as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:179.65/input/input36 [ 189.482656][ T5259] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 189.490910][ T5259] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 189.499044][ T5259] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 189.511765][ T5259] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 189.520045][ T5259] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 189.536678][ T5259] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 189.545084][ T5259] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 189.554662][ T5259] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 189.563344][ T5259] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 189.575605][ T5259] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 189.583615][ T5259] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 189.591892][ T5259] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 189.599387][ T5259] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 189.607814][T10213] device veth0_vlan entered promiscuous mode [ 189.614204][T10211] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 189.620906][T10213] device veth1_macvtap entered promiscuous mode [ 189.629587][ T5259] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 189.629715][T10211] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 189.638122][ T5259] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 189.654133][ T5259] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 189.672603][ T4918] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 189.681652][ T4918] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 189.689992][ T4918] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 189.698880][ T4918] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 189.741009][ T506] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 189.886304][ C0] xpad 8-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 189.894614][ C0] xpad 8-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 189.903034][ T6] usb 8-1: USB disconnect, device number 25 [ 189.909295][ T6] xpad 8-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 189.931630][ T506] usb 9-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 189.942516][ T506] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 189.953496][ T506] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 189.963829][ T506] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 189.991536][ T506] usb 9-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 190.000629][ T506] usb 9-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 190.008706][ T506] usb 9-1: Manufacturer: syz [ 190.030556][ T392] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 190.031018][ T506] usb 9-1: config 0 descriptor?? [ 190.071294][ T19] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 190.222171][ T392] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 190.233237][ T392] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 190.243385][ T392] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 190.255889][T10270] input: syz1 as /devices/virtual/input/input37 [ 190.257348][ T392] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 190.262626][T10270] input: failed to attach handler leds to device input37, error: -6 [ 190.271819][ T392] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.288631][ T19] usb 10-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 190.299177][ T19] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 190.310989][ T19] usb 10-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 190.324207][ T392] usb 6-1: config 0 descriptor?? [ 190.329435][ T19] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 190.339448][ T19] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.354387][ T19] usb 10-1: invalid MIDI out EP 0 [ 190.366246][ T19] snd-usb-audio: probe of 10-1:27.0 failed with error -22 [ 190.396453][ T28] kauditd_printk_skb: 18 callbacks suppressed [ 190.396467][ T28] audit: type=1400 audit(190.387:1884): avc: denied { create } for pid=10279 comm="syz.4.4016" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 190.423426][ T5235] device bridge_slave_1 left promiscuous mode [ 190.429593][ T5235] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.437252][ T5235] device bridge_slave_0 left promiscuous mode [ 190.443435][ T28] audit: type=1400 audit(190.387:1885): avc: denied { ioctl } for pid=10279 comm="syz.4.4016" path="socket:[59520]" dev="sockfs" ino=59520 ioctlcmd=0x89f1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 190.468591][ T5235] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.477249][ T28] audit: type=1400 audit(190.387:1886): avc: denied { setopt } for pid=10279 comm="syz.4.4016" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 190.497797][ T506] appleir 0003:05AC:8243.003E: unknown main item tag 0x0 [ 190.498066][ T5235] device veth1_macvtap left promiscuous mode [ 190.507247][ T506] appleir 0003:05AC:8243.003E: No inputs registered, leaving [ 190.517246][ T5235] device veth0_vlan left promiscuous mode [ 190.526138][ T506] appleir 0003:05AC:8243.003E: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.8-1/input0 [ 190.566472][ T6] usb 10-1: USB disconnect, device number 5 [ 190.741462][ T392] plantronics 0003:047F:FFFF.003F: unknown main item tag 0xe [ 190.752360][T10304] syz.4.4026[10304] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 190.752421][T10304] syz.4.4026[10304] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 190.760757][ T392] plantronics 0003:047F:FFFF.003F: unknown main item tag 0x0 [ 190.788272][ T392] plantronics 0003:047F:FFFF.003F: No inputs registered, leaving [ 190.802295][ T506] usb 9-1: USB disconnect, device number 9 [ 190.808398][ T392] plantronics 0003:047F:FFFF.003F: hiddev97,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 190.880501][ T28] audit: type=1400 audit(190.867:1887): avc: denied { read } for pid=10314 comm="syz.7.4032" name="file0" dev="tmpfs" ino=2935 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 190.909733][ T28] audit: type=1400 audit(190.867:1888): avc: denied { open } for pid=10314 comm="syz.7.4032" path="/560/file0" dev="tmpfs" ino=2935 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 190.934233][ T28] audit: type=1400 audit(190.867:1889): avc: denied { ioctl } for pid=10314 comm="syz.7.4032" path="/560/file0" dev="tmpfs" ino=2935 ioctlcmd=0x1261 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 190.988952][ T392] usb 6-1: USB disconnect, device number 17 [ 191.043787][T10319] loop4: detected capacity change from 0 to 512 [ 191.050358][T10319] EXT4-fs: Ignoring removed nomblk_io_submit option [ 191.057258][T10319] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 191.068326][T10319] EXT4-fs (loop4): 1 truncate cleaned up [ 191.074136][T10319] EXT4-fs mount: 26 callbacks suppressed [ 191.074146][T10319] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 191.102027][ T8923] EXT4-fs (loop4): unmounting filesystem. [ 191.163662][T10337] syz.9.4042[10337] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 191.163708][T10337] syz.9.4042[10337] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 191.236241][T10351] loop9: detected capacity change from 0 to 512 [ 191.254328][T10351] EXT4-fs: Ignoring removed nomblk_io_submit option [ 191.260461][ T288] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 191.269158][T10351] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 191.281854][T10351] EXT4-fs (loop9): 1 truncate cleaned up [ 191.292700][T10351] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 191.331032][T10213] EXT4-fs (loop9): unmounting filesystem. [ 191.347537][T10366] syz.8.4055[10366] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 191.347605][T10366] syz.8.4055[10366] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 191.372070][T10371] syz.9.4057[10371] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 191.383984][T10371] syz.9.4057[10371] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 191.460530][ T288] usb 8-1: Using ep0 maxpacket: 16 [ 191.485806][ T288] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 191.494084][ T288] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 191.510532][ T288] usb 8-1: config 0 has no interface number 0 [ 191.517913][T10389] input: syz1 as /devices/virtual/input/input39 [ 191.532209][T10391] loop5: detected capacity change from 0 to 512 [ 191.532650][ T288] usb 8-1: New USB device found, idVendor=1a86, idProduct=752d, bcdDevice=2d.4d [ 191.547857][T10391] EXT4-fs: Ignoring removed nomblk_io_submit option [ 191.558355][ T288] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.561101][T10391] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 191.572898][ T288] usb 8-1: Product: syz [ 191.585425][T10395] netlink: 96 bytes leftover after parsing attributes in process `syz.9.4068'. [ 191.585771][ T288] usb 8-1: Manufacturer: syz [ 191.609162][ T288] usb 8-1: SerialNumber: syz [ 191.610150][T10391] EXT4-fs (loop5): 1 truncate cleaned up [ 191.619390][ T288] usb 8-1: config 0 descriptor?? [ 191.625072][T10391] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 191.635366][ T288] snd-usb-audio: probe of 8-1:0.1 failed with error -2 [ 191.638750][ T28] audit: type=1400 audit(191.627:1890): avc: denied { relabelfrom } for pid=10397 comm="syz.9.4069" name="NETLINK" dev="sockfs" ino=58857 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 191.685871][ T28] audit: type=1400 audit(191.627:1891): avc: denied { relabelto } for pid=10397 comm="syz.9.4069" name="NETLINK" dev="sockfs" ino=58857 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=netlink_audit_socket permissive=1 [ 191.722250][T10212] EXT4-fs (loop5): unmounting filesystem. [ 191.751354][ T28] audit: type=1400 audit(191.747:1892): avc: denied { nosuid_transition } for pid=10403 comm="syz.9.4072" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process2 permissive=1 [ 191.772244][T10405] loop5: detected capacity change from 0 to 2048 [ 191.788179][ T28] audit: type=1400 audit(191.767:1893): avc: denied { transition } for pid=10403 comm="syz.9.4072" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=278 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process permissive=1 [ 191.821837][T10405] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 191.846133][T10212] EXT4-fs (loop5): unmounting filesystem. [ 191.890300][ T288] usb 8-1: USB disconnect, device number 26 [ 191.965810][T10423] loop9: detected capacity change from 0 to 2048 [ 191.975431][T10423] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 191.991997][T10213] EXT4-fs (loop9): unmounting filesystem. [ 192.023743][T10430] loop5: detected capacity change from 0 to 512 [ 192.042852][T10430] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 192.056607][T10430] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 192.078719][T10212] EXT4-fs (loop5): unmounting filesystem. [ 192.146146][T10451] binder: 10450:10451 ioctl c018620c 200000000000 returned -22 [ 192.196436][T10462] input: syz0 as /devices/virtual/input/input40 [ 192.206699][T10464] loop4: detected capacity change from 0 to 512 [ 192.232487][T10464] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 192.255157][T10464] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 192.291013][ T8923] EXT4-fs (loop4): unmounting filesystem. [ 192.310555][ T506] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 192.343965][T10460] loop8: detected capacity change from 0 to 40427 [ 192.355315][T10460] F2FS-fs (loop8): Invalid log_blocksize (268), supports only 12 [ 192.363226][T10460] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 192.388375][T10460] F2FS-fs (loop8): Found nat_bits in checkpoint [ 192.428168][T10487] loop7: detected capacity change from 0 to 1024 [ 192.436448][T10487] EXT4-fs: Ignoring removed orlov option [ 192.440904][T10460] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0 [ 192.449266][T10460] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 192.464267][T10487] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 192.477040][T10041] F2FS-fs (loop8): invalid namelen(0), ino:0, run fsck to fix. [ 192.477059][T10041] F2FS-fs (loop8): invalid namelen(0), ino:0, run fsck to fix. [ 192.486056][T10496] SELinux: failed to load policy [ 192.493691][T10041] F2FS-fs (loop8): invalid namelen(0), ino:0, run fsck to fix. [ 192.500488][ T506] usb 10-1: Using ep0 maxpacket: 16 [ 192.504789][T10041] F2FS-fs (loop8): invalid namelen(0), ino:0, run fsck to fix. [ 192.514605][ T506] usb 10-1: config 0 has an invalid interface number: 64 but max is 0 [ 192.514711][ T2259] EXT4-fs (loop7): unmounting filesystem. [ 192.525486][ T506] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 192.530554][T10041] F2FS-fs (loop8): invalid namelen(0), ino:0, run fsck to fix. [ 192.546451][ T506] usb 10-1: config 0 has no interface number 0 [ 192.547266][T10041] F2FS-fs (loop8): invalid namelen(0), ino:0, run fsck to fix. [ 192.560910][T10041] F2FS-fs (loop8): invalid namelen(0), ino:0, run fsck to fix. [ 192.564074][ T506] usb 10-1: New USB device found, idVendor=0bd3, idProduct=05f4, bcdDevice= 0.5b [ 192.599145][ T506] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.607962][ T506] usb 10-1: config 0 descriptor?? [ 192.631140][ T506] usb 10-1: Found UVC 0.00 device (0bd3:05f4) [ 192.638585][ T506] usb 10-1: No valid video chain found. [ 192.761838][T10519] netlink: 16 bytes leftover after parsing attributes in process `syz.8.4117'. [ 192.800052][T10523] loop8: detected capacity change from 0 to 512 [ 192.808291][T10523] EXT4-fs (loop8): Test dummy encryption mode enabled [ 192.815113][T10523] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 192.843066][T10523] EXT4-fs error (device loop8): ext4_orphan_get:1426: comm syz.8.4119: bad orphan inode 131083 [ 192.843749][ T2197] usb 10-1: USB disconnect, device number 6 [ 192.861070][T10523] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 192.874443][T10515] loop4: detected capacity change from 0 to 40427 [ 192.876290][T10523] overlayfs: upper fs needs to support d_type. [ 192.881754][T10515] F2FS-fs (loop4): fault_injection options not supported [ 192.895334][T10515] F2FS-fs (loop4): fault_type options not supported [ 192.896628][T10523] EXT4-fs error (device loop8): __ext4_iget:5079: inode #13: block 512: comm syz.8.4119: invalid block [ 192.902013][ T37] usb 8-1: new high-speed USB device number 27 using dummy_hcd [ 192.921637][T10515] F2FS-fs (loop4): invalid crc value [ 192.925545][T10041] EXT4-fs error (device loop8): ext4_readdir:263: inode #2: block 13: comm syz-executor: path /39/bus: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 192.928651][T10515] F2FS-fs (loop4): Found nat_bits in checkpoint [ 192.971897][T10515] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 192.987665][ T8923] syz-executor: attempt to access beyond end of device [ 192.987665][ T8923] loop4: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 193.003048][T10437] EXT4-fs (loop8): unmounting filesystem. [ 193.020424][ T1731] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 193.120455][ T37] usb 8-1: Using ep0 maxpacket: 16 [ 193.126709][ T37] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 193.147816][ T37] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 193.158567][ T37] usb 8-1: config 0 interface 0 has no altsetting 0 [ 193.174521][T10538] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 193.177860][ T37] usb 8-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 193.180699][T10538] syzkaller0: linktype set to 768 [ 193.190560][ T37] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.203498][ T37] usb 8-1: config 0 descriptor?? [ 193.212365][T10535] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.219391][T10535] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.220480][ T1731] usb 6-1: Using ep0 maxpacket: 16 [ 193.226892][T10535] device bridge_slave_0 entered promiscuous mode [ 193.232726][ T1731] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 193.238627][T10535] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.245921][ T1731] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 193.252842][T10535] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.263044][ T1731] usb 6-1: config 0 has no interface number 0 [ 193.270477][T10535] device bridge_slave_1 entered promiscuous mode [ 193.278316][ T1731] usb 6-1: New USB device found, idVendor=1a86, idProduct=752d, bcdDevice=2d.4d [ 193.296320][ T1731] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.304372][ T1731] usb 6-1: Product: syz [ 193.308552][ T1731] usb 6-1: Manufacturer: syz [ 193.313194][ T1731] usb 6-1: SerialNumber: syz [ 193.318379][ T1731] usb 6-1: config 0 descriptor?? [ 193.333477][ T1731] snd-usb-audio: probe of 6-1:0.1 failed with error -2 [ 193.362052][T10535] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.369111][T10535] bridge0: port 2(bridge_slave_1) entered forwarding state [ 193.376365][T10535] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.383375][T10535] bridge0: port 1(bridge_slave_0) entered forwarding state [ 193.411493][ T5235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 193.424872][ T5235] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.443797][ T5235] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.461111][ T8923] ------------[ cut here ]------------ [ 193.466682][ T8923] WARNING: CPU: 1 PID: 8923 at fs/inode.c:332 drop_nlink+0xc5/0x110 [ 193.474885][ T8923] Modules linked in: [ 193.478845][ T8923] CPU: 1 PID: 8923 Comm: syz-executor Not tainted syzkaller #0 [ 193.486419][ T8923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 193.496510][ T8923] RIP: 0010:drop_nlink+0xc5/0x110 [ 193.501576][ T8923] Code: 1b 48 8d bb b8 04 00 00 be 08 00 00 00 e8 03 ea f0 ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 9b 82 ac ff <0f> 0b eb 86 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 5e ff ff ff 4c [ 193.521504][ T8923] RSP: 0018:ffffc9000159fc38 EFLAGS: 00010293 [ 193.527592][ T8923] RAX: ffffffff81c386c5 RBX: ffff8881349ec810 RCX: ffff88810ed5a880 [ 193.535620][ T8923] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 193.543616][ T8923] RBP: ffffc9000159fc60 R08: 0000000000000004 R09: 0000000000000003 [ 193.551617][ T8923] R10: fffff520002b3f78 R11: 1ffff920002b3f78 R12: dffffc0000000000 [ 193.559684][ T8923] R13: 1ffff1102693d90b R14: ffff8881349ec858 R15: 0000000000000000 [ 193.567714][ T8923] FS: 00005555794ec500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 193.576699][ T8923] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 193.583319][ T8923] CR2: 000055557950f4e8 CR3: 000000011a0fe000 CR4: 00000000003506a0 [ 193.591355][ T8923] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 193.599350][ T8923] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 193.606269][ T19] usb 6-1: USB disconnect, device number 18 [ 193.607354][ T8923] Call Trace: [ 193.616549][ T8923] [ 193.619473][ T8923] shmem_rmdir+0x5b/0x90 [ 193.623713][ T8923] vfs_rmdir+0x393/0x500 [ 193.627936][ T8923] incfs_kill_sb+0x105/0x220 [ 193.632525][ T8923] deactivate_locked_super+0xb5/0x120 [ 193.637877][ T8923] deactivate_super+0xaf/0xe0 [ 193.642568][ T8923] cleanup_mnt+0x45f/0x4e0 [ 193.646967][ T8923] __cleanup_mnt+0x19/0x20 [ 193.651387][ T8923] task_work_run+0x1db/0x240 [ 193.655955][ T8923] ? __cfi_task_work_run+0x10/0x10 [ 193.661057][ T8923] ? __x64_sys_umount+0x125/0x160 [ 193.666061][ T8923] ? __cfi___x64_sys_umount+0x10/0x10 [ 193.671422][ T8923] exit_to_user_mode_loop+0x9b/0xb0 [ 193.676598][ T8923] exit_to_user_mode_prepare+0x5a/0xa0 [ 193.682049][ T8923] syscall_exit_to_user_mode+0x1a/0x30 [ 193.687499][ T8923] do_syscall_64+0x58/0xa0 [ 193.691905][ T8923] ? clear_bhb_loop+0x30/0x80 [ 193.696564][ T8923] ? clear_bhb_loop+0x30/0x80 [ 193.701235][ T8923] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 193.707109][ T8923] RIP: 0033:0x7fe802f8ff17 [ 193.711535][ T8923] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 193.731141][ T8923] RSP: 002b:00007ffdd6a30978 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 193.739554][ T8923] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fe802f8ff17 [ 193.747525][ T8923] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdd6a30a30 [ 193.755526][ T8923] RBP: 00007ffdd6a30a30 R08: 0000000000000000 R09: 0000000000000000 [ 193.763518][ T8923] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffdd6a31ac0 [ 193.771494][ T8923] R13: 00007fe803011c05 R14: 000000000002f397 R15: 00007ffdd6a31b00 [ 193.779472][ T8923] [ 193.782493][ T8923] ---[ end trace 0000000000000000 ]--- [ 193.788033][ T8923] ================================================================== [ 193.792963][ T37] hid (null): unknown global tag 0xc [ 193.796091][ T8923] BUG: KASAN: null-ptr-deref in ihold+0x20/0x60 [ 193.804031][ T37] hid (null): unknown global tag 0xd [ 193.807568][ T8923] Write of size 4 at addr 0000000000000170 by task syz-executor/8923 [ 193.812857][ T37] hid (null): unknown global tag 0xe [ 193.820862][ T8923] [ 193.820869][ T8923] CPU: 0 PID: 8923 Comm: syz-executor Tainted: G W syzkaller #0 [ 193.826134][ T37] hid (null): usage index exceeded [ 193.828451][ T8923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 193.852562][ T8923] Call Trace: [ 193.855819][ T8923] [ 193.858726][ T8923] __dump_stack+0x21/0x24 [ 193.863032][ T8923] dump_stack_lvl+0xee/0x150 [ 193.867602][ T8923] ? __cfi_dump_stack_lvl+0x8/0x8 [ 193.872603][ T8923] ? ihold+0x20/0x60 [ 193.876473][ T8923] ? ihold+0x20/0x60 [ 193.880338][ T8923] print_report+0x3d/0x60 [ 193.884647][ T8923] kasan_report+0x122/0x150 [ 193.889139][ T8923] ? ihold+0x20/0x60 [ 193.893009][ T8923] kasan_check_range+0x280/0x290 [ 193.897925][ T8923] __kasan_check_write+0x14/0x20 [ 193.902875][ T8923] ihold+0x20/0x60 [ 193.906571][ T8923] vfs_rmdir+0x25f/0x500 [ 193.910790][ T8923] incfs_kill_sb+0x105/0x220 [ 193.915357][ T8923] deactivate_locked_super+0xb5/0x120 [ 193.920702][ T8923] deactivate_super+0xaf/0xe0 [ 193.925378][ T8923] cleanup_mnt+0x45f/0x4e0 [ 193.929772][ T8923] __cleanup_mnt+0x19/0x20 [ 193.934168][ T8923] task_work_run+0x1db/0x240 [ 193.938742][ T8923] ? __cfi_task_work_run+0x10/0x10 [ 193.943830][ T8923] ? __x64_sys_umount+0x125/0x160 [ 193.948873][ T8923] ? __cfi___x64_sys_umount+0x10/0x10 [ 193.954221][ T8923] exit_to_user_mode_loop+0x9b/0xb0 [ 193.959394][ T8923] exit_to_user_mode_prepare+0x5a/0xa0 [ 193.964840][ T8923] syscall_exit_to_user_mode+0x1a/0x30 [ 193.970281][ T8923] do_syscall_64+0x58/0xa0 [ 193.974670][ T8923] ? clear_bhb_loop+0x30/0x80 [ 193.979324][ T8923] ? clear_bhb_loop+0x30/0x80 [ 193.984062][ T8923] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 193.989929][ T8923] RIP: 0033:0x7fe802f8ff17 [ 193.994333][ T8923] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 194.013914][ T8923] RSP: 002b:00007ffdd6a30978 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 194.022301][ T8923] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fe802f8ff17 [ 194.030247][ T8923] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdd6a30a30 [ 194.038195][ T8923] RBP: 00007ffdd6a30a30 R08: 0000000000000000 R09: 0000000000000000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 194.046144][ T8923] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffdd6a31ac0 [ 194.054091][ T8923] R13: 00007fe803011c05 R14: 000000000002f397 R15: 00007ffdd6a31b00 [ 194.062042][ T8923] [ 194.065037][ T8923] ================================================================== [ 194.087190][ T1731] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 194.087978][ T5235] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 194.126212][ T5235] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.133275][ T5235] bridge0: port 1(bridge_slave_0) entered forwarding state [ 194.140917][ T5235] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 194.149105][ T5235] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.156142][ T5235] bridge0: port 2(bridge_slave_1) entered forwarding state [ 194.163809][ T8923] Disabling lock debugging due to kernel taint [ 194.170326][ T8923] BUG: kernel NULL pointer dereference, address: 0000000000000170 [ 194.178122][ T8923] #PF: supervisor write access in kernel mode [ 194.184180][ T8923] #PF: error_code(0x0002) - not-present page [ 194.190145][ T8923] PGD 1376a8067 P4D 1376a8067 PUD 0 [ 194.195418][ T8923] Oops: 0002 [#1] PREEMPT SMP KASAN [ 194.200594][ T8923] CPU: 1 PID: 8923 Comm: syz-executor Tainted: G B W syzkaller #0 [ 194.209593][ T8923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 194.219625][ T8923] RIP: 0010:ihold+0x26/0x60 [ 194.224114][ T8923] Code: 33 36 7c df 55 48 89 e5 41 56 53 48 89 fb e8 01 7a ac ff 48 8d bb 70 01 00 00 be 04 00 00 00 e8 40 e1 f0 ff 41 be 01 00 00 00 44 0f c1 b3 70 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 f1 [ 194.243787][ T8923] RSP: 0018:ffffc9000159fc78 EFLAGS: 00010246 [ 194.249836][ T8923] RAX: ffff88810ed5a800 RBX: 0000000000000000 RCX: ffff88810ed5a880 [ 194.257876][ T8923] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 194.265921][ T8923] RBP: ffffc9000159fc88 R08: dffffc0000000000 R09: fffffbfff0f2d6fd [ 194.273882][ T8923] R10: fffffbfff0f2d6fd R11: 1ffffffff0f2d6fc R12: ffff8881349ec81c [ 194.281855][ T8923] R13: dffffc0000000000 R14: 0000000000000001 R15: 0000000000000000 [ 194.289837][ T8923] FS: 00005555794ec500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 194.298753][ T8923] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 194.305323][ T8923] CR2: 0000000000000170 CR3: 000000011a0fe000 CR4: 00000000003506a0 [ 194.313285][ T8923] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 194.321247][ T8923] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 194.329198][ T8923] Call Trace: [ 194.332457][ T8923] [ 194.335375][ T8923] vfs_rmdir+0x25f/0x500 [ 194.339603][ T8923] incfs_kill_sb+0x105/0x220 [ 194.344180][ T8923] deactivate_locked_super+0xb5/0x120 [ 194.349534][ T8923] deactivate_super+0xaf/0xe0 [ 194.354190][ T8923] cleanup_mnt+0x45f/0x4e0 [ 194.358606][ T8923] __cleanup_mnt+0x19/0x20 [ 194.363005][ T8923] task_work_run+0x1db/0x240 [ 194.367588][ T8923] ? __cfi_task_work_run+0x10/0x10 [ 194.372692][ T8923] ? __x64_sys_umount+0x125/0x160 [ 194.377870][ T8923] ? __cfi___x64_sys_umount+0x10/0x10 [ 194.383250][ T8923] exit_to_user_mode_loop+0x9b/0xb0 [ 194.388429][ T8923] exit_to_user_mode_prepare+0x5a/0xa0 [ 194.393871][ T8923] syscall_exit_to_user_mode+0x1a/0x30 [ 194.399321][ T8923] do_syscall_64+0x58/0xa0 [ 194.403810][ T8923] ? clear_bhb_loop+0x30/0x80 [ 194.408471][ T8923] ? clear_bhb_loop+0x30/0x80 [ 194.413131][ T8923] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 194.419006][ T8923] RIP: 0033:0x7fe802f8ff17 [ 194.423402][ T8923] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 194.442999][ T8923] RSP: 002b:00007ffdd6a30978 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 194.451405][ T8923] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fe802f8ff17 [ 194.459359][ T8923] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdd6a30a30 [ 194.467312][ T8923] RBP: 00007ffdd6a30a30 R08: 0000000000000000 R09: 0000000000000000 [ 194.475298][ T8923] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffdd6a31ac0 [ 194.483253][ T8923] R13: 00007fe803011c05 R14: 000000000002f397 R15: 00007ffdd6a31b00 [ 194.491210][ T8923] [ 194.494213][ T8923] Modules linked in: [ 194.498100][ T8923] CR2: 0000000000000170 [ 194.502230][ T8923] ---[ end trace 0000000000000000 ]--- [ 194.507665][ T8923] RIP: 0010:ihold+0x26/0x60 [ 194.512187][ T8923] Code: 33 36 7c df 55 48 89 e5 41 56 53 48 89 fb e8 01 7a ac ff 48 8d bb 70 01 00 00 be 04 00 00 00 e8 40 e1 f0 ff 41 be 01 00 00 00 44 0f c1 b3 70 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 f1 [ 194.531952][ T8923] RSP: 0018:ffffc9000159fc78 EFLAGS: 00010246 [ 194.538005][ T8923] RAX: ffff88810ed5a800 RBX: 0000000000000000 RCX: ffff88810ed5a880 [ 194.545958][ T8923] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 194.553907][ T8923] RBP: ffffc9000159fc88 R08: dffffc0000000000 R09: fffffbfff0f2d6fd [ 194.561968][ T8923] R10: fffffbfff0f2d6fd R11: 1ffffffff0f2d6fc R12: ffff8881349ec81c [ 194.569919][ T8923] R13: dffffc0000000000 R14: 0000000000000001 R15: 0000000000000000 [ 194.577870][ T8923] FS: 00005555794ec500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 194.586789][ T8923] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 194.593352][ T8923] CR2: 0000000000000170 CR3: 000000011a0fe000 CR4: 00000000003506a0 [ 194.601308][ T8923] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 194.609256][ T8923] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 194.617218][ T8923] Kernel panic - not syncing: Fatal exception [ 194.623487][ T8923] Kernel Offset: disabled [ 194.627800][ T8923] Rebooting in 86400 seconds..