last executing test programs: 43.742349813s ago: executing program 1 (id=504): syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f00000000c0)='./file2\x00', 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="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", @ANYRES64, @ANYRESHEX, @ANYRES8, @ANYRES8, @ANYRESOCT], 0x1, 0x5518, &(0x7f0000002480)="$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") r0 = open(&(0x7f00000002c0)='./file0\x00', 0x1492fe, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x103042, 0x0) pwrite64(r1, &(0x7f00000006c0)="c6", 0x1, 0x8001) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000340)={r0, 0x0, 0x5, 0x8002}) 43.204211882s ago: executing program 1 (id=520): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002100)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) close(0x3) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x8, &(0x7f0000000000)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000640)='syzkaller\x00', 0x7, 0xf9, &(0x7f0000000080)=""/249, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) 43.141464022s ago: executing program 0 (id=522): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000500)={0x2, 0xa, 0x5, 0x5, 0x2, 0x0, 0x70bd28, 0x25dfdbfc}, 0x10}}, 0x0) 43.141243372s ago: executing program 0 (id=523): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r1}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x48) close(r2) 43.094746561s ago: executing program 0 (id=524): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x99, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@uname={'uname', 0x3d, '\xd0\xae\xde\xc1\xaa \xff\xd8\x1d\x1b\xf8\x93)!|\xb0X\xa3\x96\xed\xa2\xab@\xa2m\x93\xdd\b<\x00t\xdc\xabl\xab!\xae\x16\xc4\xcd\xf9{\xdc5_;A\xd2{eC\x014\\\xb3\xc4\xce\xc3yS2-\x01\xbe\xaarW\x96O\xd3\x0f\xe2\xd7/\x17\x1d\xa7.8\x9f8-\xea<\x8d\x91\x90j\xea\xd5\xd5\xae\xcc\xc0\x97\xef\x10\x92\xea\x98|+\x00\x00\x00\x00\x00\x00\x00\x00'}}]}}) 43.094495702s ago: executing program 0 (id=525): syz_mount_image$erofs(&(0x7f00000003c0), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000240)=ANY=[], 0x0, 0x17d, &(0x7f0000001ac0)="$eJzsmLFP+kAUx7/vyg/yMy6uLg4SxcHSFjUuxLA5mogaNwlUghYx0EGYdPH/cHZwdvOPMM7qYFwY3Uxqej3oQQR10MT4PsPj+7h313evyXcoGIb5szw+vNyvFe+EAWASaaTU/89GXCO0+tfb83Jraj1/OfeUv041robPIwBB8PnnJwDcFAz4Kg+Cwd1p9VuE6OstCCwovQOCqfQeBLaVdkHYVfpA042w3jT3a55rlhteJRRWGOwwOGHIDffXPSNUtP5IW2+1O4clz3Ob3yg+ml+3IJDX+tPfV282ljY/GwK20jkQNpVeRao3m2gk2v2nE/H5xg/fnwULFr9NxP4UXBDmNX9KaP6R9evH2Va7s1irl6pu1T1ynNyKtWRZy05WGlEUx/jff+lPE9r5/0bUJimJk5LvN+0o9nMniu85rpD+J5CZjfLQ+5Mju4nWSe0jqTLGmHKGYRiGYRiGYRiGYRiGYZgvMAOSX0EldIo4GcDZkNVvAQAA///an3MA") chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000040)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000100)='./file0\x00') 43.048059881s ago: executing program 0 (id=526): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f0000000240)={0x18, 0x7000000, 0x4, 0x1, 0x0, r0, 0x0, 0x0, 0xda00, 0x0, 0x6}]) 43.042877402s ago: executing program 1 (id=527): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r0}, &(0x7f0000000140), &(0x7f0000000180)='%pi6 \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r2}, 0xc) 42.982782661s ago: executing program 1 (id=528): syz_mount_image$erofs(&(0x7f0000000280), &(0x7f0000000580)='./file2\x00', 0x2000000, &(0x7f00000000c0)=ANY=[], 0x1, 0x220, &(0x7f00000005c0)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000880)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0\x00', 0x0, 0x887008, 0x0) 42.982482401s ago: executing program 0 (id=529): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x7fe01000) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xec427daba964b97e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000dc0)='rss_stat\x00', r1}, 0x18) munmap(&(0x7f0000004000/0x3000)=nil, 0x3000) 42.923307071s ago: executing program 32 (id=529): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x7fe01000) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xec427daba964b97e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000dc0)='rss_stat\x00', r1}, 0x18) munmap(&(0x7f0000004000/0x3000)=nil, 0x3000) 42.921582721s ago: executing program 1 (id=531): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) utime(&(0x7f0000000200)='./file0\x00', 0x0) 42.850529421s ago: executing program 1 (id=535): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000008850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) tgkill(r1, r1, 0x1a) 42.779490721s ago: executing program 33 (id=535): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000008850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) tgkill(r1, r1, 0x1a) 24.703728593s ago: executing program 3 (id=981): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a00000001000000e27f000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000618110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000740), 0x80000002, r0}, 0x38) 24.595244442s ago: executing program 3 (id=983): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x2, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x884, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) setfsuid(0x0) 24.528226392s ago: executing program 3 (id=985): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="c4000000190001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d54900000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000c001500000070"], 0xc4}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@empty, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x9, 0x1}}, 0xb8}}, 0x0) 24.500799022s ago: executing program 3 (id=997): syz_mount_image$erofs(&(0x7f0000000280), &(0x7f0000000580)='./file2\x00', 0x2000000, &(0x7f00000000c0)=ANY=[], 0x1, 0x220, &(0x7f00000005c0)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000880)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0\x00', 0x0, 0x887008, 0x0) 24.463243732s ago: executing program 3 (id=987): munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000500)=ANY=[@ANYBLOB="01040000"]) 24.282727942s ago: executing program 3 (id=991): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000100007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r1}, 0x10) mknod(&(0x7f0000000040)='./file1\x00', 0x0, 0x0) chmod(&(0x7f0000000080)='./file1\x00', 0x1258bab1c8332e9a) 24.272657841s ago: executing program 34 (id=991): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000100007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r1}, 0x10) mknod(&(0x7f0000000040)='./file1\x00', 0x0, 0x0) chmod(&(0x7f0000000080)='./file1\x00', 0x1258bab1c8332e9a) 23.68522741s ago: executing program 6 (id=995): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) setresgid(0xee01, 0x0, 0x0) 23.62497203s ago: executing program 6 (id=998): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r0}, &(0x7f0000000140), &(0x7f0000000180)='%pi6 \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r2}, 0xc) 23.58936548s ago: executing program 6 (id=999): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002100)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) close(0x3) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x8, &(0x7f0000000000)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000640)='syzkaller\x00', 0x7, 0xf9, &(0x7f0000000080)=""/249, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) 23.55456704s ago: executing program 6 (id=1000): syz_mount_image$erofs(&(0x7f00000003c0), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000240)=ANY=[], 0x0, 0x17d, &(0x7f0000001ac0)="$eJzsmLFP+kAUx7/vyg/yMy6uLg4SxcHSFjUuxLA5mogaNwlUghYx0EGYdPH/cHZwdvOPMM7qYFwY3Uxqej3oQQR10MT4PsPj+7h313evyXcoGIb5szw+vNyvFe+EAWASaaTU/89GXCO0+tfb83Jraj1/OfeUv041robPIwBB8PnnJwDcFAz4Kg+Cwd1p9VuE6OstCCwovQOCqfQeBLaVdkHYVfpA042w3jT3a55rlhteJRRWGOwwOGHIDffXPSNUtP5IW2+1O4clz3Ob3yg+ml+3IJDX+tPfV282ljY/GwK20jkQNpVeRao3m2gk2v2nE/H5xg/fnwULFr9NxP4UXBDmNX9KaP6R9evH2Va7s1irl6pu1T1ynNyKtWRZy05WGlEUx/jff+lPE9r5/0bUJimJk5LvN+0o9nMniu85rpD+J5CZjfLQ+5Mju4nWSe0jqTLGmHKGYRiGYRiGYRiGYRiGYZgvMAOSX0EldIo4GcDZkNVvAQAA///an3MA") chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000040)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000100)='./file0\x00') 23.45124765s ago: executing program 6 (id=1003): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="c4000000190001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d54900000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000c001500000070"], 0xc4}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@empty, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x9, 0x1}}, 0xb8}}, 0x0) 23.235848619s ago: executing program 6 (id=1009): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa65a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x296, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2004], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x3b6, 0x0, 0x2], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x54, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) 23.214729599s ago: executing program 35 (id=1009): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa65a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x296, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2004], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x3b6, 0x0, 0x2], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x54, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) 1.902452053s ago: executing program 8 (id=1591): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000202070250000000000203d207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) utime(0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000040)='./file1\x00', 0x300001a, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRESOCT, @ANYRES64, @ANYRES64, @ANYRESOCT, @ANYRESOCT=r0], 0xd, 0x2b9, &(0x7f0000000900)="$eJzs3U9rY1UUAPDz0jdpRCRF3CiCF3ThqkzdummVEcSulAgzLrQ4I0gaBmYgYAXjrOYTuPR7+BHcuPEbCG4FdzNI5cr7ZxKbdqKkHXB+v9Xpu/fcd969JckmJ5+9OhnfvlvEg0e/xGBQRG8/9uNxETvRi863UQYA8P/xOOf4Pa85eXvxj7J3ORUBAJetef9vPO1aAICr8dHNWx8cHB7e+DClQbw8fDgdFRExeTgd/VGPH3wRX8Zx3InrMYzTiPqDwq0XmuSc83vvH96IMlV24o3JbDqajiImn/7Urn/wW0SdvxfD2Gnz208buc3fS42F/FlTR+VaV+owXlqd/9aK/Bj1483XF+rfjWH8/HncjeO4XZc+z/9mL6V383ePvv6kuk2VX/RitF3Pm8tbV3MiAAAAAAAAAAAAAAAAAAAAAAA8C3ZTKsqUUlHU/XuqS23/na3Tenw3dXaW+/M0+V2XnrY/UI62Rc8sx/ddf53rKaXcTpznl/FK6YcFAAAAAAAAAAAAAAAAAAAAoHL/q5Px0fHxnXsbCbpuAN3X+v/rOvsLV16Lk/HR1vkLbq9/r8VuA1WtF06OsowNbcuTgueqetbPurneytvzw/04mqA7mI0+xYvvNIuejI9SO9Rt8vioeNK9Bt3B/TAfirIf/5j8b/anDnL9L3Gal8908Hepy1n9De1G//mVQ3/mnNdb5+1fmzNqrxR1i4317n6tDVY+YBUMzp7Fj+cveO5LxtZGXngAAAAAAAAAAAAAAAAAAIAz5l/6XTH44MLU3qUVBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABXbP77/10wiIjlK2eCWZt80Zw26Me9+0/5EQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgG/BUAAP//A9xJJQ==") newfstatat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', &(0x7f00000002c0), 0x2000) 1.822741013s ago: executing program 8 (id=1596): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000040)=0x1, 0x12) read$FUSE(r1, &(0x7f0000004a80)={0x2020}, 0x2020) 1.822345733s ago: executing program 8 (id=1597): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x11, &(0x7f0000000100)={[{@nombcache}, {@resgid}, {@norecovery}, {@commit={'commit', 0x3d, 0x5}}, {@nombcache}]}, 0x8, 0x601, &(0x7f0000000ac0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x8004587d, &(0x7f0000000140)={0x2, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x0) 1.639376493s ago: executing program 8 (id=1605): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) get_robust_list(0x0, &(0x7f0000000240)=0x0, &(0x7f0000000280)) 1.639016393s ago: executing program 4 (id=1607): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000080), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, r1}, 0x10, &(0x7f0000000200)={&(0x7f0000000100)={0x5, 0x202, 0x0, {}, {}, {0x0, 0x0, 0x0, 0x1}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "b68c52d2be3c0d90"}}, 0x48}}, 0x0) close(r0) 1.600244703s ago: executing program 4 (id=1610): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000008000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_GET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x2c, r2, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x90) 1.599519633s ago: executing program 8 (id=1621): mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) mount$tmpfs(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x800000, &(0x7f0000000180)={[], [{@rootcontext={'rootcontext', 0x3d, 'user_u'}}]}) 940.342901ms ago: executing program 4 (id=1614): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x10) setreuid(0x0, 0x0) 937.718391ms ago: executing program 8 (id=1615): syz_usb_connect(0x3, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x100, 0x68, 0xcc, 0x63, 0x20, 0x1660, 0x932, 0x52c6, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xfe, 0x0, 0x90, 0x0, [{{0x9, 0x4, 0xcd, 0x0, 0x0, 0x2b, 0x78, 0x27}}]}}]}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0xfff) syz_emit_ethernet(0x52, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "fc7771", 0x1c, 0x6, 0x0, @remote, @local, {[], {{0x3, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x2, 0x2, 0x0, 0x0, {[@sack_perm={0x4, 0x2}, @window={0x3, 0x3, 0xf9}]}}}}}}}}, 0x0) 919.987052ms ago: executing program 4 (id=1616): r0 = socket$netlink(0x10, 0x3, 0x4) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r2) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008004f0fffeffe809005300fff5dd000000100001000d0c100000224e0000000000", 0x58}], 0x1) 881.388422ms ago: executing program 4 (id=1617): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) read$FUSE(r1, &(0x7f0000000b80)={0x2020}, 0x2020) 771.042381ms ago: executing program 2 (id=1620): r0 = memfd_create(&(0x7f0000000480)='\x9d#\x00%\xa5\x83\xa6#\r\x83y\xf3\xb2\xe6b\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x17?$^\xe1Ob\xe1Y\xd6\xaa\x8d\x83;\xeb\xf1\xd0\xce\xe5\x19\x9f\xd9\xae\xcf>/\x05\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xa2c\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0\xb04\xb7T5\\\xe4h\xfc\x14\x06\xb5\x03\x8a\xc40\xbe\xe3\x93A\x15\xec\xdb\xaa\t9\x01\x00\x00\x00&0\xdd\xcbC\x15\xfcp\x11\xda|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\x04\xa0\x05}\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\x82t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12F\x03\b\x9dh\xcb)\xf4f\x12[\xf9w\xd2\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\x00\x00\x00\x00\x00\x00\x00\x04\t0\xaf\\H\x06x-\x01\x13\xa0\xf9\xe8\xdf;\xb9\x03\x00^!\xc2\xff\xac\xb8\xac\xc5\n4\xe7\xd5\xf5@L\b\xd3\x88\xc7\xb2G\f^B\xfeR/\xd7\xf9a[Y\xe0;5!r\x92?FB\xde\xa0>0\xdc\xa6\xbf\xce\xd6?\x1f%7>i\x8d\xd0Nw=,\xcc<\v\xfd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x000\xf5+\x1c\'\x06\x00\xd1\xc9k:\x9d\x18cP\x14\xb6\x91AT\xb5w\xe71\xf3\xf8]\xc4\xa6+\xb6\xdcZ\xf2\x82*f\x0etDt\xbf\xa4)\x8e<%\xbcijzt\xf7\x7fN\x8fR\n>\xa0\t\ae\x8d~\xa3!\"\xec&\x83\xec\xac\x01\a\xe9\x17\x0f\xce\x9f}4\xf3P\fx\xa3/]E\xd3\xdbc\xa9\x9d$T\a\x83\n$r\xcf\xf5\xaa\x19\xe2\xb2~\xa3N\x03\x90K\xf7\x9fR_y\x80t\xa2\"!5\xf1R\x90~iLeNm\x9c\\Wv\xe5\xbbK \xc2\xa7wx\xd7\xe1P\a\'<\xa2\x02\x84\xb7\x15\x99\xb4\x85\x9b\xe4\a\xc4\xbe\xe9\xd7~\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x88\xa1\x95\x8d\xad\x13\x10G\x99 !>\x01BS\x01w\xfc\xba\x1cu\x9d\x1aB\xaam\xddc\x1a`\xaflVlj\xb8G\xeb\xbe\a\xe4\xf38\xfba\xe8\xaf\xaa\x19\xa08\x0e\x80\xe2\x17\xde\x81\xd9fi\xca\xfa5\xb9\xf01{\xf5\xd4;Tj\xe7\xef\xfc\xdfAv\xd4\x9a\x83\xa5^\xbd\xa9\xb3\x9cE\xf3\x00Kg\x8aa\xd9|\xaa\xaa2\xf0/\\J\xc7\x13\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) fallocate(r0, 0x0, 0x0, 0x2400001) lseek(r0, 0x0, 0x3) 508.407831ms ago: executing program 2 (id=1628): prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='\\\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_create(r1, &(0x7f0000000200)=@objname={'system_u:object_r:netcontrol_device_t:s0', 0x20, '/usr/sbin/cupsd', 0x20, 0xfbd, 0x20, './file0\x00'}, 0x56) 463.704071ms ago: executing program 2 (id=1631): write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x2808b08, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x8000}}, 0x50) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000000000083000040"]) 364.23456ms ago: executing program 5 (id=1633): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000440)={{0x0, 0x989680}}, 0x0) read(r0, &(0x7f0000000240)=""/123, 0x7b) clock_adjtime(0x0, &(0x7f0000000040)={0xd4e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) 318.66826ms ago: executing program 2 (id=1636): iopl(0x3) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r0, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x102a) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) futex(0x0, 0x80, 0x1, &(0x7f00000002c0), 0x0, 0x0) 305.71271ms ago: executing program 2 (id=1637): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000002c0)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000dc0)={0x3ec, r2, 0x5, 0x70bd2a, 0x25dfdbfd, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e24}, @WGDEVICE_A_PEERS={0x3c8, 0x8, 0x0, 0x1, [{0xbc, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x1, @mcast1, 0x2}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "1171ee8da334a5099295af229a5d237a7f4102f01f28b34347d6cbbe135d83ec"}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_FLAGS={0x8, 0x3, 0x7}]}, {0x210, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_ALLOWEDIPS={0x1e8, 0x9, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x2}}]}, {0xc4, 0x0, 0x0, 0x1, [@ipv6={{0xfffffffffffffed5}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @local}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x2}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}]}]}]}, {0x64, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_FLAGS={0x8, 0x3, 0x3}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "379aa288b2244a5b504ba04bea45625d328fb93b62e607a1b2e4da2f7f76a549"}]}, {0x94, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @empty}}]}]}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r3}]}, 0x3ec}, 0x1, 0x0, 0x0, 0x4000}, 0x40) 269.8655ms ago: executing program 5 (id=1638): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000007000000020000000400000005"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r2}, 0x10) kcmp(0x0, 0x0, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) 269.30935ms ago: executing program 2 (id=1639): socket$nl_route(0x10, 0x3, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x2a) socket(0x10, 0x3, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x600, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f00000000c0)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3", @ANYRES8=r0, @ANYRES32=r1], 0x0) 261.12818ms ago: executing program 5 (id=1640): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001000a9000000000000000000000003d0", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r1, @ANYBLOB="080004007f00"], 0x30}}, 0x0) 244.92556ms ago: executing program 7 (id=1641): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000280), 0x81, 0x7a5, &(0x7f0000000f80)="$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") r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', &(0x7f00000000c0)={0x189141, 0x4, 0x1}, 0x18) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000100)={@desc={0x1, 0x0, @desc4}}) stat(&(0x7f0000000040)='./file0/file1\x00', 0x0) unlinkat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file1\x00', 0x0) 180.27029ms ago: executing program 5 (id=1642): mkdir(&(0x7f0000000200)='./file0\x00', 0x60) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) close(r2) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 162.26517ms ago: executing program 5 (id=1643): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, 0x0) 109.3489ms ago: executing program 5 (id=1644): syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000210", 0x10, 0x3a, 0xff, @empty, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x4, 0x2}}}}}}, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009e602206d0414c3400000000001090224"], 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x2, 0x4, 0x388, 0xffffffff, 0x1e8, 0x0, 0x1e8, 0xfeffffff, 0xffffffff, 0x2b8, 0x2b8, 0x2b8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [0xff000000], 'macsec0\x00', 'bond_slave_0\x00', {}, {}, 0x0, 0x0, 0x2}, 0x2f2, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "ddabf53d9b1435965491f6531877000001e770b667f10900000000000000e3121114449fd20ba2be6e45cae72a972f25170163232ed996b4789b9d00"}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e8) 107.96273ms ago: executing program 7 (id=1646): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x7, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'gretap0\x00', 0x0}) sendto$packet(r1, &(0x7f00000002c0)="05030500d3fc030000004788031c09101128", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) 34.64825ms ago: executing program 7 (id=1647): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000340)={r0, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) sysinfo(0x0) 34.21564ms ago: executing program 7 (id=1648): write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x2808b08, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x8000}}, 0x50) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000000000083000040"]) 33.957749ms ago: executing program 4 (id=1649): write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000)=@unlock_all, 0xb) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) ioctl$SIOCSIFHWADDR(r0, 0x89f1, &(0x7f0000000040)={'ip6tnl0\x00', @random='\a\x00\x00 \x00'}) 10.05316ms ago: executing program 7 (id=1650): mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, 0xffffffffffffffff, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r0, 0x28, 0x0, 0x0, &(0x7f0000000000)) 0s ago: executing program 7 (id=1651): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f0000000140)={0x2232f001, 0x3000, 0x2, 0x1, 0x100}) kernel console output (not intermixed with test programs): (loop0): Directory bread(block 67) failed [ 32.625306][ T1146] fs-verity: sha512 using implementation "sha512-avx2" [ 32.627823][ T1149] FAT-fs (loop0): Directory bread(block 68) failed [ 32.641133][ T1149] FAT-fs (loop0): Directory bread(block 69) failed [ 32.647511][ T1149] FAT-fs (loop0): Directory bread(block 70) failed [ 32.654092][ T1149] FAT-fs (loop0): Directory bread(block 71) failed [ 32.660488][ T1149] FAT-fs (loop0): Directory bread(block 72) failed [ 32.662069][ T1146] fs-verity (loop4, inode 13): ext4_end_enable_verity() failed with err -30 [ 32.666759][ T1149] FAT-fs (loop0): Directory bread(block 73) failed [ 32.711975][ T297] EXT4-fs (loop4): unmounting filesystem. [ 32.723728][ T1158] loop1: detected capacity change from 0 to 512 [ 32.730398][ T1146] syz.4.362 (1146) used greatest stack depth: 20616 bytes left [ 32.735354][ T1160] xt_bpf: check failed: parse error [ 32.771234][ T1158] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 32.787075][ T1158] ext4 filesystem being mounted at /55/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 32.802107][ T1158] EXT4-fs (loop1): unmounting filesystem. [ 32.925411][ T1182] netlink: 4 bytes leftover after parsing attributes in process `syz.4.375'. [ 33.070622][ T1180] loop1: detected capacity change from 0 to 40427 [ 33.082027][ T1180] F2FS-fs (loop1): invalid crc value [ 33.102752][ T1180] F2FS-fs (loop1): Found nat_bits in checkpoint [ 33.154045][ T1186] loop4: detected capacity change from 0 to 40427 [ 33.163495][ T1192] loop0: detected capacity change from 0 to 2048 [ 33.171384][ T1194] loop2: detected capacity change from 0 to 256 [ 33.178710][ T1186] F2FS-fs (loop4): fault_injection options not supported [ 33.181709][ T1180] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 33.187223][ T1186] F2FS-fs (loop4): Image doesn't support compression [ 33.209776][ T1186] F2FS-fs (loop4): Image doesn't support compression [ 33.217271][ T1192] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 33.220356][ T1194] FAT-fs (loop2): Directory bread(block 64) failed [ 33.232794][ T1186] F2FS-fs (loop4): invalid crc value [ 33.238060][ T1192] ext4 filesystem being mounted at /98/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 33.248219][ T1194] FAT-fs (loop2): Directory bread(block 65) failed [ 33.255463][ T1194] FAT-fs (loop2): Directory bread(block 66) failed [ 33.258598][ T1180] syz.1.374: attempt to access beyond end of device [ 33.258598][ T1180] loop1: rw=2049, sector=53248, nr_sectors = 32 limit=40427 [ 33.268994][ T1194] FAT-fs (loop2): Directory bread(block 67) failed [ 33.283297][ T1186] F2FS-fs (loop4): Found nat_bits in checkpoint [ 33.284157][ T1194] FAT-fs (loop2): Directory bread(block 68) failed [ 33.296501][ T1194] FAT-fs (loop2): Directory bread(block 69) failed [ 33.303445][ T1194] FAT-fs (loop2): Directory bread(block 70) failed [ 33.303712][ T1192] fs-verity (loop0, inode 13): ext4_end_enable_verity() failed with err -30 [ 33.326066][ T1194] FAT-fs (loop2): Directory bread(block 71) failed [ 33.332577][ T1194] FAT-fs (loop2): Directory bread(block 72) failed [ 33.339909][ T1194] FAT-fs (loop2): Directory bread(block 73) failed [ 33.343641][ T1186] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 33.347216][ T298] EXT4-fs (loop0): unmounting filesystem. [ 33.379775][ T292] syz-executor: attempt to access beyond end of device [ 33.379775][ T292] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 33.452695][ T1186] syz.4.377: attempt to access beyond end of device [ 33.452695][ T1186] loop4: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 33.715062][ T1227] loop4: detected capacity change from 0 to 512 [ 33.757731][ T1227] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 33.768629][ T1227] ext4 filesystem being mounted at /75/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 33.789340][ T1227] EXT4-fs (loop4): unmounting filesystem. [ 34.076685][ T24] usb 4-1: USB disconnect, device number 2 [ 34.082745][ T1247] loop1: detected capacity change from 0 to 40427 [ 34.118485][ T1247] F2FS-fs (loop1): fault_injection options not supported [ 34.125851][ T1247] F2FS-fs (loop1): Image doesn't support compression [ 34.132526][ T1247] F2FS-fs (loop1): Image doesn't support compression [ 34.147110][ T1247] F2FS-fs (loop1): invalid crc value [ 34.153822][ T1247] F2FS-fs (loop1): Found nat_bits in checkpoint [ 34.202290][ T1247] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 34.378233][ T1272] loop3: detected capacity change from 0 to 512 [ 34.401215][ T1272] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 34.414706][ T1272] ext4 filesystem being mounted at /69/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 34.426644][ T1272] EXT4-fs (loop3): unmounting filesystem. [ 34.698071][ T1313] loop2: detected capacity change from 0 to 512 [ 34.747876][ T1313] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 34.780646][ T1313] ext4 filesystem being mounted at /96/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 34.831930][ T291] EXT4-fs (loop2): unmounting filesystem. [ 34.952794][ T1340] SELinux: Context system_u:object_r:dhcpc_var_run_t:s0 is not valid (left unmapped). [ 35.037831][ T1348] netlink: 24 bytes leftover after parsing attributes in process `syz.2.438'. [ 35.049970][ T1350] loop1: detected capacity change from 0 to 2048 [ 35.070383][ T1350] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 35.104999][ T292] EXT4-fs (loop1): unmounting filesystem. [ 35.230431][ T1373] bridge0: port 3(veth1_macvtap) entered blocking state [ 35.237305][ T1373] bridge0: port 3(veth1_macvtap) entered disabled state [ 35.238731][ T1356] loop2: detected capacity change from 0 to 256 [ 35.264434][ T1375] loop1: detected capacity change from 0 to 512 [ 35.270820][ T1375] EXT4-fs: Ignoring removed mblk_io_submit option [ 35.279705][ T1375] EXT4-fs error (device loop1): ext4_get_branch:178: inode #13: block 2: comm syz.1.451: invalid block [ 35.291040][ T316] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 35.301110][ T1375] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.451: invalid indirect mapped block 10 (level 1) [ 35.327333][ T1379] mmap: syz.2.452 (1379): VmData 24899584 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 35.327422][ T1375] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.451: invalid indirect mapped block 8 (level 1) [ 35.358961][ T1375] EXT4-fs (loop1): 1 truncate cleaned up [ 35.364453][ T1375] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 35.427788][ T292] EXT4-fs (loop1): unmounting filesystem. [ 35.463572][ T1393] input: syz1 as /devices/virtual/input/input5 [ 35.470275][ T1393] input: failed to attach handler leds to device input5, error: -6 [ 35.578951][ T1415] loop1: detected capacity change from 0 to 512 [ 35.600426][ T1415] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 35.610686][ T1418] netlink: 8 bytes leftover after parsing attributes in process `syz.0.470'. [ 35.625523][ T1415] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 35.650831][ T1415] EXT4-fs (loop1): 1 truncate cleaned up [ 35.699140][ T1415] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 35.796117][ T292] EXT4-fs (loop1): unmounting filesystem. [ 35.966326][ T1449] netlink: 16 bytes leftover after parsing attributes in process `syz.1.484'. [ 36.060116][ T1436] loop0: detected capacity change from 0 to 40427 [ 36.072115][ T1436] F2FS-fs (loop0): Invalid log blocks per segment (4278190089) [ 36.079857][ T1436] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 36.089210][ T1436] F2FS-fs (loop0): invalid crc value [ 36.108823][ T24] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 36.127722][ T1436] F2FS-fs (loop0): Found nat_bits in checkpoint [ 36.154942][ T28] kauditd_printk_skb: 62 callbacks suppressed [ 36.154959][ T28] audit: type=1400 audit(1737115002.101:348): avc: denied { bind } for pid=1461 comm="syz.1.489" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 36.180921][ T1462] netlink: 28 bytes leftover after parsing attributes in process `syz.1.489'. [ 36.227211][ T1462] tipc: Started in network mode [ 36.232673][ T1436] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 36.241173][ T1462] tipc: Node identity 7, cluster identity 5 [ 36.242931][ T1436] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 36.258808][ T1462] tipc: Node number set to 7 [ 36.298855][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 36.308185][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 36.321448][ T298] bio_check_eod: 5 callbacks suppressed [ 36.321467][ T298] syz-executor: attempt to access beyond end of device [ 36.321467][ T298] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 36.335197][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 36.355677][ T28] audit: type=1400 audit(1737115002.301:349): avc: denied { mount } for pid=1474 comm="syz.1.496" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 36.376060][ T24] usb 5-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 36.399464][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 36.412199][ T28] audit: type=1400 audit(1737115002.311:350): avc: denied { unmount } for pid=292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 36.418285][ T24] usb 5-1: config 0 descriptor?? [ 36.698076][ T1491] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1491 comm=syz.3.501 [ 36.871144][ T24] hid-generic 0003:04F3:0755.0001: unknown main item tag 0x0 [ 36.881086][ T24] hid-generic 0003:04F3:0755.0001: unknown main item tag 0x0 [ 36.888527][ T24] hid-generic 0003:04F3:0755.0001: unknown main item tag 0x0 [ 36.905964][ T24] hid-generic 0003:04F3:0755.0001: unknown main item tag 0x0 [ 36.919363][ T24] hid-generic 0003:04F3:0755.0001: unknown main item tag 0x0 [ 36.947157][ T24] hid-generic 0003:04F3:0755.0001: failed to start in urb: -90 [ 36.947575][ T28] audit: type=1400 audit(1737115002.891:351): avc: denied { read } for pid=1508 comm="syz.0.509" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 36.968050][ T24] hid-generic 0003:04F3:0755.0001: hidraw0: USB HID v0.00 Device [HID 04f3:0755] on usb-dummy_hcd.4-1/input0 [ 37.000566][ T28] audit: type=1400 audit(1737115002.941:352): avc: denied { setopt } for pid=1508 comm="syz.0.509" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 37.035491][ T1497] loop1: detected capacity change from 0 to 40427 [ 37.044134][ T28] audit: type=1400 audit(1737115002.941:353): avc: denied { write } for pid=1508 comm="syz.0.509" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 37.078220][ T24] usb 5-1: USB disconnect, device number 3 [ 37.106866][ T1497] F2FS-fs (loop1): Found nat_bits in checkpoint [ 37.115572][ T28] audit: type=1400 audit(1737115002.991:354): avc: denied { remove_name } for pid=84 comm="syslogd" name="messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 37.139602][ T28] audit: type=1400 audit(1737115002.991:355): avc: denied { rename } for pid=84 comm="syslogd" name="messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 37.162160][ T28] audit: type=1400 audit(1737115002.991:356): avc: denied { create } for pid=84 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 37.193287][ T28] audit: type=1400 audit(1737115003.141:357): avc: denied { unmount } for pid=298 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 37.209819][ T1497] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 37.262416][ T1497] syz.1.504: attempt to access beyond end of device [ 37.262416][ T1497] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 37.296996][ T292] syz-executor: attempt to access beyond end of device [ 37.296996][ T292] loop1: rw=2049, sector=45104, nr_sectors = 16 limit=40427 [ 37.407043][ T1547] loop0: detected capacity change from 0 to 16 [ 37.420527][ T1547] erofs: (device loop0): mounted with root inode @ nid 36. [ 37.486212][ T1553] loop1: detected capacity change from 0 to 16 [ 37.500015][ T1553] erofs: (device loop1): mounted with root inode @ nid 36. [ 37.523123][ T292] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 46 [ 37.534454][ T292] erofs: (device loop1): erofs_readdir: invalid de[0].nameoff 0 @ nid 89 [ 37.543166][ T292] erofs: (device loop1): erofs_readdir: invalid de[0].nameoff 0 @ nid 89 [ 37.552068][ T292] erofs: (device loop1): erofs_readdir: invalid de[0].nameoff 0 @ nid 89 [ 37.560657][ T292] erofs: (device loop1): erofs_readdir: invalid de[0].nameoff 0 @ nid 89 [ 37.648608][ T1562] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 37.805859][ T1578] loop3: detected capacity change from 0 to 256 [ 37.827995][ T1564] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.851193][ T1564] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.858609][ T1564] device bridge_slave_0 entered promiscuous mode [ 37.859317][ T1578] exfat: Deprecated parameter 'namecase' [ 37.870759][ T1578] exfat: Deprecated parameter 'utf8' [ 37.875890][ T1578] exfat: Deprecated parameter 'namecase' [ 37.885267][ T1564] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.885798][ T1578] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011f41, chksum : 0xe1a8932d, utbl_chksum : 0xe619d30d) [ 37.899290][ T1564] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.924398][ T1564] device bridge_slave_1 entered promiscuous mode [ 37.945164][ T1585] loop4: detected capacity change from 0 to 512 [ 37.989503][ T1585] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 38.012572][ T1585] ext4 filesystem being mounted at /97/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 38.056380][ T297] EXT4-fs (loop4): unmounting filesystem. [ 38.091667][ T1581] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.098950][ T1581] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.107009][ T1581] device bridge_slave_0 entered promiscuous mode [ 38.121442][ T1596] mmap: syz.3.548 (1596) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 38.138992][ T1581] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.145871][ T1581] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.159354][ T1581] device bridge_slave_1 entered promiscuous mode [ 38.166471][ T321] device bridge_slave_1 left promiscuous mode [ 38.176092][ T321] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.195061][ T321] device bridge_slave_0 left promiscuous mode [ 38.218091][ T321] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.221182][ T1593] syz.3.548 (1593) used greatest stack depth: 20176 bytes left [ 38.238225][ T321] device veth1_macvtap left promiscuous mode [ 38.260766][ T321] device veth0_vlan left promiscuous mode [ 38.285584][ T1611] loop3: detected capacity change from 0 to 256 [ 38.310010][ T1611] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 38.486715][ T1616] loop4: detected capacity change from 0 to 512 [ 38.509640][ T1564] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.510286][ T1616] EXT4-fs: Ignoring removed i_version option [ 38.516518][ T1564] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.516635][ T1564] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.536222][ T1564] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.543088][ T1616] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 38.566803][ T1616] EXT4-fs (loop4): 1 truncate cleaned up [ 38.580629][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.593997][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.606823][ T1616] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 38.651687][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 38.660146][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 38.660205][ T297] EXT4-fs (loop4): unmounting filesystem. [ 38.685419][ T1611] exFAT-fs (loop3): error, tried to truncate zeroed cluster. [ 38.693057][ T1611] exFAT-fs (loop3): Filesystem has been set read-only [ 38.702626][ T1611] exFAT-fs (loop3): error, tried to truncate zeroed cluster. [ 38.719766][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 38.728281][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 38.736894][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.743784][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.771313][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 38.789257][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 38.797945][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.804980][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.817233][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 38.828719][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 38.870109][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 38.892022][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 38.894450][ T1641] loop4: detected capacity change from 0 to 256 [ 38.917470][ T1641] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 38.929059][ T1641] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 38.940136][ T1641] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 38.952488][ T1564] device veth0_vlan entered promiscuous mode [ 38.959814][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 38.974785][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 38.984570][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 38.996909][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 39.026340][ T1564] device veth1_macvtap entered promiscuous mode [ 39.033580][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 39.041983][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 39.057894][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 39.068493][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 39.077059][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 39.097203][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 39.105316][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 39.117734][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 39.132157][ T1660] input: syz1 as /devices/virtual/input/input6 [ 39.145649][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 39.169105][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.175984][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.184060][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 39.209296][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 39.219876][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.226738][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.239586][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 39.247842][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 39.256359][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 39.265111][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 39.273993][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 39.307135][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 39.325646][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 39.349821][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 39.368733][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 39.381424][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 39.396587][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 39.412118][ T1666] loop3: detected capacity change from 0 to 40427 [ 39.413316][ T1581] device veth0_vlan entered promiscuous mode [ 39.434002][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 39.445172][ T1581] device veth1_macvtap entered promiscuous mode [ 39.446598][ T1666] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 39.470646][ T1666] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 39.473557][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 39.493171][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 39.503304][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 39.515399][ T1666] F2FS-fs (loop3): Found nat_bits in checkpoint [ 39.636395][ T1695] loop2: detected capacity change from 0 to 1024 [ 39.637711][ T1666] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 39.652649][ T1666] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 39.668585][ T1695] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:477: comm syz.2.589: Invalid block bitmap block 0 in block_group 0 [ 39.669096][ T1666] syz.3.580: attempt to access beyond end of device [ 39.669096][ T1666] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 39.683040][ T1695] EXT4-fs error (device loop2): ext4_acquire_dquot:6788: comm syz.2.589: Failed to acquire dquot type 0 [ 39.707372][ T1695] EXT4-fs error (device loop2): ext4_free_blocks:6210: comm syz.2.589: Freeing blocks not in datazone - block = 0, count = 4096 [ 39.714320][ T1666] syz.3.580: attempt to access beyond end of device [ 39.714320][ T1666] loop3: rw=0, sector=45096, nr_sectors = 8 limit=40427 [ 39.735499][ T1695] EXT4-fs error (device loop2): ext4_read_inode_bitmap:140: comm syz.2.589: Invalid inode bitmap blk 0 in block_group 0 [ 39.753595][ T422] EXT4-fs error (device loop2): ext4_release_dquot:6811: comm kworker/u4:5: Failed to release dquot type 0 [ 39.765072][ T1695] EXT4-fs error (device loop2) in ext4_free_inode:362: Corrupt filesystem [ 39.774547][ T1695] EXT4-fs (loop2): 1 orphan inode deleted [ 39.781294][ T1695] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 39.791286][ T295] syz-executor: attempt to access beyond end of device [ 39.791286][ T295] loop3: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 39.810366][ T1695] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 16: comm syz.2.589: path /132/file2: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 39.840874][ T1695] syz.2.589 (1695) used greatest stack depth: 19848 bytes left [ 39.849064][ T291] EXT4-fs (loop2): unmounting filesystem. [ 39.885068][ T1711] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=1711 comm=syz.6.594 [ 40.198887][ T312] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 40.379748][ T312] usb 3-1: Using ep0 maxpacket: 32 [ 40.385896][ T312] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 40.394014][ T312] usb 3-1: config 0 has no interface number 0 [ 40.401414][ T312] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 40.410309][ T312] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 40.418084][ T312] usb 3-1: Product: syz [ 40.422109][ T312] usb 3-1: Manufacturer: syz [ 40.426500][ T312] usb 3-1: SerialNumber: syz [ 40.431861][ T312] usb 3-1: config 0 descriptor?? [ 40.437560][ T312] smsc95xx v2.0.0 [ 40.676026][ T1754] netlink: 'syz.5.614': attribute type 1 has an invalid length. [ 40.683675][ T1754] netlink: 'syz.5.614': attribute type 2 has an invalid length. [ 40.694504][ T1754] netlink: 'syz.5.614': attribute type 1 has an invalid length. [ 40.702077][ T1754] netlink: 'syz.5.614': attribute type 2 has an invalid length. [ 40.841523][ T312] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 40.853546][ T312] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 41.081778][ T1788] loop6: detected capacity change from 0 to 256 [ 41.112437][ T1788] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 41.187596][ T1791] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=1791 comm=syz.4.629 [ 41.270274][ T312] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000108: -71 [ 41.290153][ T312] smsc95xx: probe of 3-1:0.67 failed with error -71 [ 41.306883][ T312] usb 3-1: USB disconnect, device number 2 [ 41.730314][ T1788] exFAT-fs (loop6): error, tried to truncate zeroed cluster. [ 41.758957][ T1788] exFAT-fs (loop6): Filesystem has been set read-only [ 41.765576][ T1788] exFAT-fs (loop6): error, tried to truncate zeroed cluster. [ 41.812739][ T1804] loop2: detected capacity change from 0 to 256 [ 41.859333][ T1804] exfat: Deprecated parameter 'namecase' [ 41.868359][ T1806] netlink: 'syz.6.634': attribute type 1 has an invalid length. [ 41.875914][ T1804] exfat: Deprecated parameter 'namecase' [ 41.918069][ T1804] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x1fdf94bc, utbl_chksum : 0xe619d30d) [ 41.951137][ T28] kauditd_printk_skb: 21 callbacks suppressed [ 41.951153][ T28] audit: type=1400 audit(2000000000.899:376): avc: denied { accept } for pid=1807 comm="syz.6.635" path="socket:[22545]" dev="sockfs" ino=22545 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 42.018945][ T28] audit: type=1400 audit(2000000000.939:377): avc: denied { watch } for pid=1803 comm="syz.2.633" path="/137/file0/file0" dev="loop2" ino=1048631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 42.044877][ T1810] loop2: detected capacity change from 0 to 128 [ 42.054934][ T1810] EXT4-fs (loop2): Test dummy encryption mode enabled [ 42.079514][ T1810] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 42.095180][ T1810] ext4 filesystem being mounted at /138/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 42.144007][ T1810] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 42.162682][ T28] audit: type=1400 audit(2000000001.109:378): avc: denied { write } for pid=1809 comm="syz.2.636" name="bus" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 42.194255][ T1823] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=1823 comm=syz.5.641 [ 42.204329][ T28] audit: type=1400 audit(2000000001.129:379): avc: denied { add_name } for pid=1809 comm="syz.2.636" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 42.228129][ T291] EXT4-fs (loop2): unmounting filesystem. [ 42.318717][ T28] audit: type=1400 audit(2000000001.129:380): avc: denied { remove_name } for pid=1809 comm="syz.2.636" name="file0" dev="loop2" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 42.351277][ T1835] loop5: detected capacity change from 0 to 256 [ 42.352658][ T28] audit: type=1400 audit(2000000001.129:381): avc: denied { rename } for pid=1809 comm="syz.2.636" name="file0" dev="loop2" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 42.406237][ T28] audit: type=1400 audit(2000000001.129:382): avc: denied { reparent } for pid=1809 comm="syz.2.636" name="file0" dev="loop2" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 42.436129][ T1835] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 42.510417][ T1845] tipc: Enabling of bearer rejected, failed to enable media [ 42.543463][ T1846] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=210 sclass=netlink_route_socket pid=1846 comm=syz.4.651 [ 42.654793][ T1856] netlink: 48 bytes leftover after parsing attributes in process `syz.4.657'. [ 42.667258][ T1857] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=1857 comm=syz.3.655 [ 42.999449][ T1877] tipc: Enabling of bearer rejected, failed to enable media [ 43.132155][ T1835] exFAT-fs (loop5): error, tried to truncate zeroed cluster. [ 43.159414][ T1835] exFAT-fs (loop5): Filesystem has been set read-only [ 43.166173][ T1883] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=210 sclass=netlink_route_socket pid=1883 comm=syz.6.668 [ 43.178560][ T1835] exFAT-fs (loop5): error, tried to truncate zeroed cluster. [ 43.430814][ T28] audit: type=1400 audit(2000000002.379:383): avc: denied { create } for pid=1911 comm="syz.2.681" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 43.530191][ T1916] loop2: detected capacity change from 0 to 256 [ 43.561877][ T1916] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 43.899117][ T1933] loop3: detected capacity change from 0 to 256 [ 43.932677][ T1933] FAT-fs (loop3): Directory bread(block 64) failed [ 43.949187][ T1933] FAT-fs (loop3): Directory bread(block 65) failed [ 43.965807][ T1933] FAT-fs (loop3): Directory bread(block 66) failed [ 43.975888][ T1933] FAT-fs (loop3): Directory bread(block 67) failed [ 43.991128][ T1933] FAT-fs (loop3): Directory bread(block 68) failed [ 44.011017][ T1933] FAT-fs (loop3): Directory bread(block 69) failed [ 44.017412][ T1933] FAT-fs (loop3): Directory bread(block 70) failed [ 44.033599][ T1933] FAT-fs (loop3): Directory bread(block 71) failed [ 44.040472][ T1933] FAT-fs (loop3): Directory bread(block 72) failed [ 44.046877][ T1933] FAT-fs (loop3): Directory bread(block 73) failed [ 44.104062][ T1916] exFAT-fs (loop2): error, tried to truncate zeroed cluster. [ 44.115825][ T1916] exFAT-fs (loop2): Filesystem has been set read-only [ 44.128142][ T1916] exFAT-fs (loop2): error, tried to truncate zeroed cluster. [ 44.227624][ T1951] loop2: detected capacity change from 0 to 512 [ 44.264185][ T1951] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 44.282477][ T1953] loop6: detected capacity change from 0 to 1024 [ 44.300146][ T1951] EXT4-fs (loop2): 1 truncate cleaned up [ 44.308939][ T1951] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 44.410114][ T291] EXT4-fs (loop2): unmounting filesystem. [ 44.424197][ T1953] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 44.518971][ T1960] xt_hashlimit: size too large, truncated to 1048576 [ 44.526886][ T1581] EXT4-fs (loop6): unmounting filesystem. [ 44.652615][ T1964] loop6: detected capacity change from 0 to 512 [ 44.672470][ T1964] EXT4-fs: Ignoring removed orlov option [ 44.700429][ T1964] EXT4-fs (loop6): orphan cleanup on readonly fs [ 44.716801][ T1964] EXT4-fs error (device loop6): ext4_find_extent:936: inode #4: comm syz.6.702: pblk 2 bad header/extent: invalid magic - magic 3fff, entries 12, max 508(0), depth 0(0) [ 44.739264][ T1964] Quota error (device loop6): v2_read_header: Failed header read: expected=8 got=-117 [ 44.773367][ T1964] EXT4-fs warning (device loop6): ext4_enable_quotas:7023: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 44.853435][ T1964] EXT4-fs (loop6): Cannot turn on quotas: error -22 [ 44.884410][ T1964] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 45.079863][ T422] kworker/u4:5: attempt to access beyond end of device [ 45.079863][ T422] loop3: rw=1, sector=1224, nr_sectors = 12 limit=256 [ 45.110907][ T28] audit: type=1400 audit(2000000004.059:384): avc: denied { mounton } for pid=1967 comm="syz.4.705" path="/137/file0" dev="tmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 45.208112][ T1976] loop5: detected capacity change from 0 to 512 [ 45.238572][ T1976] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 45.247472][ T1976] ext4 filesystem being mounted at /32/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.438838][ T1581] EXT4-fs (loop6): unmounting filesystem. [ 45.444460][ T6] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 45.489091][ T1984] hub 9-0:1.0: USB hub found [ 45.496944][ T1984] hub 9-0:1.0: 1 port detected [ 45.533499][ T1986] loop6: detected capacity change from 0 to 256 [ 45.542571][ T1986] exFAT-fs (loop6): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 45.662294][ T1992] loop6: detected capacity change from 0 to 512 [ 45.675815][ T6] usb 5-1: Using ep0 maxpacket: 32 [ 45.684701][ T6] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 45.693099][ T1992] EXT4-fs (loop6): external journal device major/minor numbers have changed [ 45.701696][ T6] usb 5-1: config 0 has no interface number 0 [ 45.707789][ T1992] EXT4-fs (loop6): failed to open journal device unknown-block(11,127) -6 [ 45.719429][ T6] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 45.728285][ T6] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 45.736389][ T6] usb 5-1: Product: syz [ 45.748774][ T6] usb 5-1: Manufacturer: syz [ 45.753425][ T6] usb 5-1: SerialNumber: syz [ 45.769276][ T6] usb 5-1: config 0 descriptor?? [ 45.776134][ T6] smsc95xx v2.0.0 [ 45.944257][ T2004] loop6: detected capacity change from 0 to 1024 [ 45.972900][ T2004] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 45.999803][ T1581] EXT4-fs (loop6): unmounting filesystem. [ 46.019268][ T1564] EXT4-fs (loop5): unmounting filesystem. [ 46.070778][ T2014] hub 9-0:1.0: USB hub found [ 46.075580][ T2014] hub 9-0:1.0: 1 port detected [ 46.144757][ T2023] loop5: detected capacity change from 0 to 512 [ 46.179424][ T2023] EXT4-fs (loop5): external journal device major/minor numbers have changed [ 46.188513][ T6] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 46.198172][ T2031] loop2: detected capacity change from 0 to 512 [ 46.207806][ T2023] EXT4-fs (loop5): failed to open journal device unknown-block(11,127) -6 [ 46.208625][ T6] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 46.217223][ T2031] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 46.256506][ T2031] EXT4-fs (loop2): 1 truncate cleaned up [ 46.262425][ T2031] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 46.314522][ T291] EXT4-fs (loop2): unmounting filesystem. [ 46.345801][ T2043] hub 9-0:1.0: USB hub found [ 46.350480][ T2043] hub 9-0:1.0: 1 port detected [ 46.423729][ T2048] loop2: detected capacity change from 0 to 512 [ 46.454326][ T2048] EXT4-fs error (device loop2): ext4_acquire_dquot:6788: comm syz.2.739: Failed to acquire dquot type 0 [ 46.466024][ T2048] EXT4-fs error (device loop2): ext4_acquire_dquot:6788: comm syz.2.739: Failed to acquire dquot type 0 [ 46.478609][ T2048] EXT4-fs error (device loop2): ext4_acquire_dquot:6788: comm syz.2.739: Failed to acquire dquot type 0 [ 46.490288][ T2048] EXT4-fs (loop2): 1 orphan inode deleted [ 46.495860][ T2048] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 46.504710][ T2048] ext4 filesystem being mounted at /157/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.548704][ T291] EXT4-fs (loop2): unmounting filesystem. [ 46.605329][ T2064] I/O error, dev loop13, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 46.615404][ T2064] FAT-fs (loop13): unable to read boot sector [ 46.666342][ T6] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000108: -71 [ 46.684463][ T6] smsc95xx: probe of 5-1:0.67 failed with error -71 [ 46.698715][ T6] usb 5-1: USB disconnect, device number 4 [ 46.811947][ T2069] loop2: detected capacity change from 0 to 40427 [ 46.819499][ T2069] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 46.834110][ T2069] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 46.850351][ T2069] F2FS-fs (loop2): Found nat_bits in checkpoint [ 46.887510][ T2069] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 46.894430][ T2069] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 46.915456][ T291] syz-executor: attempt to access beyond end of device [ 46.915456][ T291] loop2: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 47.201217][ T2080] hub 9-0:1.0: USB hub found [ 47.205810][ T2080] hub 9-0:1.0: 1 port detected [ 47.254581][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 47.254597][ T28] audit: type=1326 audit(2000000006.199:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2075 comm="syz.5.747" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f04d8385d29 code=0x0 [ 47.507647][ T2094] xt_hashlimit: size too large, truncated to 1048576 [ 47.631312][ T2103] tipc: Started in network mode [ 47.657437][ T2103] tipc: Node identity 7, cluster identity 4711 [ 47.667511][ T2103] tipc: Node number set to 7 [ 47.697847][ T2103] tipc: Cannot configure node identity twice [ 47.766852][ T2105] loop6: detected capacity change from 0 to 512 [ 47.791478][ T2105] EXT4-fs (loop6): unsupported inode size: 143 [ 47.807727][ T2105] EXT4-fs (loop6): blocksize: 1024 [ 47.868140][ T2100] loop2: detected capacity change from 0 to 40427 [ 47.883355][ T2100] F2FS-fs (loop2): fault_injection options not supported [ 47.900192][ T2100] F2FS-fs (loop2): Image doesn't support compression [ 47.913407][ T2100] F2FS-fs (loop2): Image doesn't support compression [ 47.927592][ T2100] F2FS-fs (loop2): fault_type options not supported [ 47.941777][ T2100] F2FS-fs (loop2): invalid crc value [ 47.957708][ T2100] F2FS-fs (loop2): Found nat_bits in checkpoint [ 48.058803][ T2100] F2FS-fs (loop2): Start checkpoint disabled! [ 48.065721][ T2100] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 48.113206][ T2117] hub 9-0:1.0: USB hub found [ 48.118459][ T2100] syz.2.756: attempt to access beyond end of device [ 48.118459][ T2100] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 48.121217][ T2117] hub 9-0:1.0: 1 port detected [ 48.189917][ T321] kworker/u4:4: attempt to access beyond end of device [ 48.189917][ T321] loop2: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 48.241293][ T2124] hub 9-0:1.0: USB hub found [ 48.245838][ T2124] hub 9-0:1.0: 1 port detected [ 48.278973][ T6] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 48.326809][ T2132] loop4: detected capacity change from 0 to 256 [ 48.333952][ T2132] exfat: Deprecated parameter 'namecase' [ 48.343015][ T2132] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xcd8273f8, utbl_chksum : 0xe619d30d) [ 48.380146][ T2137] loop3: detected capacity change from 0 to 512 [ 48.386953][ T2137] EXT4-fs (loop3): unsupported inode size: 143 [ 48.392997][ T2137] EXT4-fs (loop3): blocksize: 1024 [ 48.468998][ T6] usb 7-1: Using ep0 maxpacket: 32 [ 48.475621][ T6] usb 7-1: config 0 has an invalid interface number: 67 but max is 0 [ 48.489019][ T6] usb 7-1: config 0 has no interface number 0 [ 48.513149][ T6] usb 7-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 48.528536][ T6] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 48.539901][ T6] usb 7-1: Product: syz [ 48.545581][ T6] usb 7-1: Manufacturer: syz [ 48.550393][ T6] usb 7-1: SerialNumber: syz [ 48.563184][ T6] usb 7-1: config 0 descriptor?? [ 48.571196][ T6] smsc95xx v2.0.0 [ 48.586689][ T28] audit: type=1326 audit(2000000007.529:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2142 comm="syz.3.773" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f391e385d29 code=0x0 [ 48.666965][ T2147] loop2: detected capacity change from 0 to 512 [ 48.690877][ T2147] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 48.699917][ T2147] ext4 filesystem being mounted at /166/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.722678][ T291] EXT4-fs (loop2): unmounting filesystem. [ 48.944791][ T28] audit: type=1400 audit(2000000007.889:390): avc: denied { getopt } for pid=2156 comm="syz.2.779" lport=141 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 48.971803][ T6] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 48.984043][ T6] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 49.124570][ T2171] netlink: 24 bytes leftover after parsing attributes in process `syz.5.784'. [ 49.372136][ T28] audit: type=1400 audit(2000000008.319:391): avc: denied { lock } for pid=2178 comm="syz.3.788" path="socket:[22217]" dev="sockfs" ino=22217 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 49.395970][ T6] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000108: -71 [ 49.415489][ T6] smsc95xx: probe of 7-1:0.67 failed with error -71 [ 49.427301][ T2181] loop3: detected capacity change from 0 to 256 [ 49.427932][ T6] usb 7-1: USB disconnect, device number 2 [ 49.441012][ T2181] exfat: Deprecated parameter 'namecase' [ 49.453119][ T2181] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 49.553218][ T28] audit: type=1400 audit(2000000008.499:392): avc: denied { bind } for pid=2189 comm="syz.3.793" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 49.855298][ T2200] netlink: 24 bytes leftover after parsing attributes in process `syz.3.797'. [ 49.908456][ T28] audit: type=1400 audit(2000000008.849:393): avc: denied { append } for pid=2204 comm="syz.3.799" name="kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 49.959098][ T2211] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 49.968176][ T2211] FAT-fs (loop5): unable to read boot sector [ 50.007085][ T28] audit: type=1400 audit(2000000008.949:394): avc: denied { setopt } for pid=2215 comm="syz.2.806" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 50.038955][ T28] audit: type=1400 audit(2000000008.979:395): avc: denied { read } for pid=2215 comm="syz.2.806" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 50.113717][ T2227] loop5: detected capacity change from 0 to 2048 [ 50.161638][ T2227] Alternate GPT is invalid, using primary GPT. [ 50.167814][ T2227] loop5: p2 p3 p7 [ 50.177811][ T102] Alternate GPT is invalid, using primary GPT. [ 50.184051][ T102] loop5: p2 p3 p7 [ 50.189047][ T19] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 50.239414][ T316] I/O error, dev loop5, sector 608 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 50.239456][ T1564] __loop_clr_fd: partition scan of loop5 failed (rc=-16) [ 50.249006][ T329] I/O error, dev loop5, sector 408 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 50.265347][ T1793] I/O error, dev loop5, sector 208 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 50.280533][ T1793] I/O error, dev loop5, sector 208 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 50.289940][ T316] I/O error, dev loop5, sector 608 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 50.300862][ T329] I/O error, dev loop5, sector 408 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 50.310195][ T1793] Buffer I/O error on dev loop5p3, logical block 8, async page read [ 50.318045][ T316] Buffer I/O error on dev loop5p2, logical block 8, async page read [ 50.326101][ T329] Buffer I/O error on dev loop5p7, logical block 8, async page read [ 50.329801][ T1793] I/O error, dev loop5, sector 209 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 50.334295][ T316] I/O error, dev loop5, sector 609 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 50.359945][ T1793] Buffer I/O error on dev loop5p3, logical block 9, async page read [ 50.363337][ T316] Buffer I/O error on dev loop5p2, logical block 9, async page read [ 50.368050][ T329] Buffer I/O error on dev loop5p7, logical block 9, async page read [ 50.376988][ T316] Buffer I/O error on dev loop5p2, logical block 10, async page read [ 50.392175][ T1793] Buffer I/O error on dev loop5p3, logical block 10, async page read [ 50.392547][ T316] Buffer I/O error on dev loop5p2, logical block 11, async page read [ 50.408729][ T329] Buffer I/O error on dev loop5p7, logical block 10, async page read [ 50.409166][ T19] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 50.429690][ T19] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 50.439795][ T19] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 50.455430][ T19] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 50.464359][ T19] usb 4-1: SerialNumber: syz [ 50.478295][ T329] udevd[329]: inotify_add_watch(7, /dev/loop5p7, 10) failed: No such file or directory [ 50.480694][ T1793] udevd[1793]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 50.499979][ T316] udevd[316]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 50.519937][ T329] udevd[329]: inotify_add_watch(7, /dev/loop5p7, 10) failed: No such file or directory [ 50.520364][ T1793] udevd[1793]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 50.541379][ T316] udevd[316]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 50.574240][ T2231] loop5: detected capacity change from 0 to 40427 [ 50.586909][ T2231] F2FS-fs (loop5): fault_type options not supported [ 50.590201][ T2238] binder: 2237:2238 ioctl c0306201 20000000 returned -14 [ 50.594412][ T2231] F2FS-fs (loop5): invalid crc value [ 50.614284][ T2231] F2FS-fs (loop5): Found nat_bits in checkpoint [ 50.656487][ T2231] F2FS-fs (loop5): Start checkpoint disabled! [ 50.663336][ T2231] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 50.678343][ T2231] syz.5.810: attempt to access beyond end of device [ 50.678343][ T2231] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 50.701253][ T19] usb 4-1: 0:2 : does not exist [ 50.710777][ T19] usb 4-1: USB disconnect, device number 3 [ 50.719677][ T10] kworker/u4:1: attempt to access beyond end of device [ 50.719677][ T10] loop5: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 50.879922][ T2255] loop6: detected capacity change from 0 to 1024 [ 50.886921][ T2255] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 50.919429][ T316] udevd[316]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 50.942509][ T2255] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 50.982450][ T2255] EXT4-fs error (device loop6): ext4_xattr_inode_iget:404: inode #11: comm syz.6.821: missing EA_INODE flag [ 50.997928][ T2255] EXT4-fs (loop6): Remounting filesystem read-only [ 51.004455][ T2255] EXT4-fs error (device loop6): ext4_xattr_inode_iget:409: comm syz.6.821: error while reading EA inode 11 err=-117 [ 51.016746][ T2255] EXT4-fs (loop6): Remounting filesystem read-only [ 51.030408][ T1581] EXT4-fs (loop6): unmounting filesystem. [ 51.084003][ T2272] loop6: detected capacity change from 0 to 128 [ 51.091666][ T2272] FAT-fs (loop6): Unrecognized mount option "ےےے0xffffffffffffffff00000000000000000000000ےےےےےےےےےے" or missing value [ 51.185519][ T2282] loop6: detected capacity change from 0 to 512 [ 51.233856][ T2288] hub 9-0:1.0: USB hub found [ 51.240003][ T2288] hub 9-0:1.0: 1 port detected [ 51.245779][ T2282] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 51.259094][ T2282] ext4 filesystem being mounted at /57/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.283301][ T2294] loop4: detected capacity change from 0 to 1024 [ 51.299515][ T2294] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 51.314347][ T2282] fs-verity (loop6, inode 15): Unrecognized descriptor size: 0 bytes [ 51.332119][ T1581] EXT4-fs (loop6): unmounting filesystem. [ 51.344583][ T2294] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 51.371961][ T2294] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: inode #11: comm syz.4.835: missing EA_INODE flag [ 51.387347][ T2294] EXT4-fs (loop4): Remounting filesystem read-only [ 51.394029][ T2294] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.835: error while reading EA inode 11 err=-117 [ 51.408294][ T2294] EXT4-fs (loop4): Remounting filesystem read-only [ 51.428980][ T297] EXT4-fs (loop4): unmounting filesystem. [ 51.517404][ T2314] loop3: detected capacity change from 0 to 2048 [ 51.554855][ T2314] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 51.577889][ T295] EXT4-fs (loop3): unmounting filesystem. [ 51.652000][ T2321] hub 9-0:1.0: USB hub found [ 51.666415][ T2321] hub 9-0:1.0: 1 port detected [ 51.681484][ T2327] netlink: 24 bytes leftover after parsing attributes in process `syz.2.848'. [ 51.685730][ T2329] loop4: detected capacity change from 0 to 512 [ 51.705752][ T2329] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 51.707348][ T102] udevd[102]: worker [316] terminated by signal 33 (Unknown signal 33) [ 51.714745][ T2329] ext4 filesystem being mounted at /166/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.744273][ T2329] fs-verity (loop4, inode 15): Unrecognized descriptor size: 0 bytes [ 51.751004][ T102] udevd[102]: worker [316] failed while handling '/devices/virtual/block/loop4' [ 51.769023][ T297] EXT4-fs (loop4): unmounting filesystem. [ 51.833453][ T2346] xt_hashlimit: size too large, truncated to 1048576 [ 52.180844][ T2372] hub 9-0:1.0: USB hub found [ 52.191106][ T2372] hub 9-0:1.0: 1 port detected [ 52.336772][ T2383] blk_print_req_error: 19 callbacks suppressed [ 52.336791][ T2383] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 52.352411][ T2385] loop6: detected capacity change from 0 to 256 [ 52.372658][ T2383] FAT-fs (loop7): unable to read boot sector [ 52.381267][ T2385] exFAT-fs (loop6): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 52.421028][ T2385] exFAT-fs (loop6): hint_cluster is invalid (17) [ 52.432941][ T422] Bluetooth: hci0: Frame reassembly failed (-84) [ 52.434927][ T2385] exFAT-fs (loop6): error, broken FAT chain. [ 52.447872][ T2385] exFAT-fs (loop6): Filesystem has been set read-only [ 52.461692][ T2385] exFAT-fs (loop6): error, failed to bmap (inode : ffff888114b91990 iblock : 13, err : -5) [ 53.000403][ T2410] netlink: 36 bytes leftover after parsing attributes in process `syz.4.886'. [ 53.071271][ T2419] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 53.081224][ T2419] FAT-fs (loop9): unable to read boot sector [ 53.121028][ T2430] binder: 2427:2430 ioctl c0306201 20000000 returned -14 [ 53.352095][ T2459] loop4: detected capacity change from 0 to 256 [ 53.378305][ T2461] binder: 2460:2461 ioctl c0306201 20000000 returned -14 [ 53.390614][ T2459] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 53.425427][ T2459] exFAT-fs (loop4): hint_cluster is invalid (17) [ 53.436653][ T2459] exFAT-fs (loop4): error, broken FAT chain. [ 53.442642][ T2459] exFAT-fs (loop4): Filesystem has been set read-only [ 53.449316][ T2459] exFAT-fs (loop4): error, failed to bmap (inode : ffff888114b925f0 iblock : 13, err : -5) [ 53.482169][ T2455] loop2: detected capacity change from 0 to 40427 [ 53.489320][ T2455] F2FS-fs (loop2): fault_type options not supported [ 53.496681][ T2455] F2FS-fs (loop2): invalid crc value [ 53.502870][ T2455] F2FS-fs (loop2): Found nat_bits in checkpoint [ 53.537560][ T2455] F2FS-fs (loop2): Start checkpoint disabled! [ 53.544202][ T2455] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 53.571795][ T2455] syz.2.905: attempt to access beyond end of device [ 53.571795][ T2455] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 53.602323][ T321] kworker/u4:4: attempt to access beyond end of device [ 53.602323][ T321] loop2: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 54.459002][ T497] Bluetooth: hci0: command 0x1003 tx timeout [ 54.459002][ T330] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 54.498925][ T28] audit: type=1400 audit(2000000013.439:396): avc: denied { validate_trans } for pid=2469 comm="syz.2.911" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 54.593824][ T2482] netlink: 36 bytes leftover after parsing attributes in process `syz.3.919'. [ 54.891564][ T2531] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 55.037031][ T2554] IPv6: sit1: Disabled Multicast RS [ 55.039095][ T2550] loop6: detected capacity change from 0 to 4096 [ 55.064972][ T2550] EXT4-fs: Ignoring removed nobh option [ 55.081357][ T2550] EXT4-fs: Ignoring removed i_version option [ 55.090206][ T2558] loop5: detected capacity change from 0 to 128 [ 55.105788][ T2558] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 55.126467][ T2550] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 55.161141][ T28] audit: type=1400 audit(2000000014.099:397): avc: denied { watch watch_reads } for pid=2557 comm="syz.5.952" path="/61/file0" dev="loop5" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 55.173912][ T2566] loop3: detected capacity change from 0 to 1024 [ 55.209159][ T2566] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 55.275884][ T1581] EXT4-fs (loop6): unmounting filesystem. [ 55.297193][ T28] audit: type=1400 audit(2000000014.239:398): avc: denied { write } for pid=2574 comm="syz.4.961" name="kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 55.321242][ T295] EXT4-fs (loop3): unmounting filesystem. [ 55.470299][ T2599] loop4: detected capacity change from 0 to 128 [ 55.476841][ T2599] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 55.488552][ T312] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 55.558979][ T320] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 55.592361][ T2609] input: syz1 as /devices/virtual/input/input8 [ 55.649134][ T2613] loop4: detected capacity change from 0 to 4096 [ 55.660228][ T2613] EXT4-fs: Ignoring removed nobh option [ 55.666005][ T2613] EXT4-fs: Ignoring removed i_version option [ 55.672317][ T24] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 55.681766][ T312] usb 3-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice= 0.00 [ 55.691157][ T312] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.706098][ T2613] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 55.712083][ T312] usb 3-1: config 0 descriptor?? [ 55.758926][ T320] usb 6-1: Using ep0 maxpacket: 16 [ 55.765190][ T320] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 55.779146][ T320] usb 6-1: config 0 interface 0 has no altsetting 0 [ 55.789060][ T297] EXT4-fs (loop4): unmounting filesystem. [ 55.796839][ T320] usb 6-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 55.810304][ T320] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.826936][ T320] usb 6-1: config 0 descriptor?? [ 55.837140][ T2620] loop4: detected capacity change from 0 to 1024 [ 55.852771][ T2620] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 55.886324][ T297] EXT4-fs (loop4): unmounting filesystem. [ 55.893424][ T24] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 55.915947][ T24] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 55.916697][ T2627] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2627 comm=syz.4.982 [ 55.938494][ T24] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 55.958922][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 55.976984][ T24] usb 7-1: SerialNumber: syz [ 56.011715][ T2636] loop3: detected capacity change from 0 to 16 [ 56.018385][ T2636] erofs: (device loop3): mounted with root inode @ nid 36. [ 56.036477][ T295] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 46 [ 56.048744][ T295] erofs: (device loop3): erofs_readdir: invalid de[0].nameoff 0 @ nid 89 [ 56.057561][ T295] erofs: (device loop3): erofs_readdir: invalid de[0].nameoff 0 @ nid 89 [ 56.071763][ T295] erofs: (device loop3): erofs_readdir: invalid de[0].nameoff 0 @ nid 89 [ 56.080405][ T295] erofs: (device loop3): erofs_readdir: invalid de[0].nameoff 0 @ nid 89 [ 56.141511][ T312] playstation 0003:054C:0DF2.0002: unknown main item tag 0x0 [ 56.148749][ T312] playstation 0003:054C:0DF2.0002: item fetching failed at offset 3/5 [ 56.156966][ T312] playstation 0003:054C:0DF2.0002: Parse failed [ 56.164120][ T312] playstation: probe of 0003:054C:0DF2.0002 failed with error -22 [ 56.189228][ T24] usb 7-1: 0:2 : does not exist [ 56.196235][ T24] usb 7-1: USB disconnect, device number 3 [ 56.254909][ T320] hid-generic 0003:060B:500A.0003: unexpected long global item [ 56.262529][ T320] hid-generic: probe of 0003:060B:500A.0003 failed with error -22 [ 56.329115][ T28] audit: type=1400 audit(2000000015.279:399): avc: denied { mounton } for pid=2645 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 56.351977][ T320] usb 3-1: USB disconnect, device number 3 [ 56.399465][ T2632] udevd[2632]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 56.430293][ T2645] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.437211][ T2645] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.444844][ T2645] device bridge_slave_0 entered promiscuous mode [ 56.456569][ T19] usb 6-1: USB disconnect, device number 2 [ 56.468807][ T2645] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.475964][ T2645] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.483429][ T2645] device bridge_slave_1 entered promiscuous mode [ 56.560751][ T2645] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.567620][ T2645] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.574794][ T2645] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.581652][ T2645] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.605743][ T422] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.613456][ T422] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.621116][ T422] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.632636][ T422] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.640702][ T422] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.647563][ T422] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.659319][ T422] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.667344][ T422] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.674247][ T422] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.686588][ T422] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.694593][ T422] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.719714][ T422] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.728422][ T2652] loop6: detected capacity change from 0 to 1024 [ 56.735331][ T422] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.749991][ T870] device bridge_slave_1 left promiscuous mode [ 56.755964][ T870] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.766402][ T2652] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 56.775437][ T870] device bridge_slave_0 left promiscuous mode [ 56.799239][ T870] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.815230][ T870] device veth1_macvtap left promiscuous mode [ 56.822171][ T1581] EXT4-fs (loop6): unmounting filesystem. [ 56.827842][ T870] device veth0_vlan left promiscuous mode [ 56.924955][ T2653] loop4: detected capacity change from 0 to 40427 [ 56.945605][ T2653] F2FS-fs (loop4): Found nat_bits in checkpoint [ 56.964588][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 56.973690][ T2668] loop6: detected capacity change from 0 to 16 [ 56.994359][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.011981][ T2668] erofs: (device loop6): mounted with root inode @ nid 36. [ 57.023389][ T2645] device veth0_vlan entered promiscuous mode [ 57.049963][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 57.067339][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.082803][ T2653] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 57.100192][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.111827][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.141637][ T422] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.150446][ T422] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.154923][ T2653] syz.4.1004: attempt to access beyond end of device [ 57.154923][ T2653] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 57.159415][ T2645] device veth1_macvtap entered promiscuous mode [ 57.183223][ T297] syz-executor: attempt to access beyond end of device [ 57.183223][ T297] loop4: rw=2049, sector=45104, nr_sectors = 16 limit=40427 [ 57.200118][ T422] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 57.211267][ T422] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.222036][ T422] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.246168][ T422] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.255244][ T422] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.340607][ T2686] loop7: detected capacity change from 0 to 4096 [ 57.368925][ T24] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 57.378416][ T2686] EXT4-fs: Ignoring removed nobh option [ 57.384901][ T870] tipc: Left network mode [ 57.389163][ T2686] EXT4-fs: Ignoring removed i_version option [ 57.420575][ T2686] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 57.485644][ T2688] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.492556][ T2688] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.500211][ T2688] device bridge_slave_0 entered promiscuous mode [ 57.507443][ T2688] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.514818][ T2688] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.523225][ T2688] device bridge_slave_1 entered promiscuous mode [ 57.529695][ T2645] EXT4-fs (loop7): unmounting filesystem. [ 57.550021][ T24] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 57.560058][ T24] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 57.573664][ T24] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 57.582721][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 57.591267][ T24] usb 6-1: SerialNumber: syz [ 57.706896][ T2712] loop2: detected capacity change from 0 to 16 [ 57.709061][ T6] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 57.720857][ T2712] erofs: (device loop2): mounted with root inode @ nid 36. [ 57.751781][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.759533][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.772386][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 57.780748][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.789350][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.796236][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.805519][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.809718][ T24] usb 6-1: 0:2 : does not exist [ 57.819137][ T24] usb 6-1: USB disconnect, device number 3 [ 57.848423][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.856730][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.864830][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.871696][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.897122][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.910316][ T6] usb 5-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice= 0.00 [ 57.922351][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.930812][ T6] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 57.940527][ T6] usb 5-1: config 0 descriptor?? [ 57.959253][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.967274][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.984937][ T2688] device veth0_vlan entered promiscuous mode [ 57.991889][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 58.000431][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 58.008685][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 58.016900][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.025194][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.032696][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.049519][ T2632] udevd[2632]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 58.052613][ T422] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.073979][ T422] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.085806][ T2688] device veth1_macvtap entered promiscuous mode [ 58.098914][ T422] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 58.106461][ T422] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.114675][ T422] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.124528][ T422] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.133066][ T422] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.204626][ T870] device bridge_slave_1 left promiscuous mode [ 58.212006][ T870] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.227909][ T870] device bridge_slave_0 left promiscuous mode [ 58.234378][ T870] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.245652][ T870] device veth1_macvtap left promiscuous mode [ 58.251575][ T870] device veth0_vlan left promiscuous mode [ 58.360385][ T6] playstation 0003:054C:0DF2.0004: unknown main item tag 0x0 [ 58.368762][ T6] playstation 0003:054C:0DF2.0004: item fetching failed at offset 3/5 [ 58.377817][ T6] playstation 0003:054C:0DF2.0004: Parse failed [ 58.384517][ T6] playstation: probe of 0003:054C:0DF2.0004 failed with error -22 [ 58.448997][ T299] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 58.483707][ T2730] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.491698][ T2730] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.499423][ T2730] device bridge_slave_0 entered promiscuous mode [ 58.506499][ T2730] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.514178][ T2730] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.526932][ T2730] device bridge_slave_1 entered promiscuous mode [ 58.530127][ T2750] loop5: detected capacity change from 0 to 1024 [ 58.559501][ T2750] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 58.576067][ T2750] EXT4-fs warning (device loop5): ext4_empty_dir:3156: inode #11: comm syz.5.1037: directory missing '..' [ 58.588655][ T694] usb 5-1: USB disconnect, device number 5 [ 58.616718][ T1564] EXT4-fs (loop5): unmounting filesystem. [ 58.638369][ T2756] device pim6reg1 entered promiscuous mode [ 58.644168][ T299] usb 8-1: Using ep0 maxpacket: 16 [ 58.651748][ T299] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 58.666738][ T299] usb 8-1: config 0 interface 0 has no altsetting 0 [ 58.673228][ T299] usb 8-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 58.682183][ T299] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.701215][ T299] usb 8-1: config 0 descriptor?? [ 58.747254][ T870] tipc: Left network mode [ 58.764485][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 58.772084][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 58.787667][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 58.796667][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 58.807093][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.813979][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.821052][ T2762] xt_hashlimit: size too large, truncated to 1048576 [ 58.822059][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 58.836292][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 58.844583][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.851611][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.877799][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 58.885793][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 58.893946][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 58.902031][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 58.911658][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 58.926383][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 58.935162][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 58.951716][ T2730] device veth0_vlan entered promiscuous mode [ 58.958079][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.967023][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.974550][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.994048][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 59.002867][ T2730] device veth1_macvtap entered promiscuous mode [ 59.014825][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 59.025077][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.038963][ T1521] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 59.054694][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 59.070638][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 59.137576][ T299] hid-generic 0003:060B:500A.0005: unexpected long global item [ 59.159294][ T299] hid-generic: probe of 0003:060B:500A.0005 failed with error -22 [ 59.229991][ T1521] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 59.257688][ T1521] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 59.276316][ T1521] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 59.298929][ T1521] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 59.318943][ T1521] usb 9-1: SerialNumber: syz [ 59.334629][ T320] usb 8-1: USB disconnect, device number 2 [ 59.389797][ T870] device bridge_slave_1 left promiscuous mode [ 59.390138][ T2766] loop2: detected capacity change from 0 to 40427 [ 59.400853][ T870] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.416647][ T870] device bridge_slave_0 left promiscuous mode [ 59.429093][ T870] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.438484][ T2795] loop5: detected capacity change from 0 to 256 [ 59.445013][ T2766] F2FS-fs (loop2): Found nat_bits in checkpoint [ 59.445609][ T2795] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 59.461697][ T870] device veth1_macvtap left promiscuous mode [ 59.463755][ T2795] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 59.469462][ T870] device veth0_vlan left promiscuous mode [ 59.478397][ T2795] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 59.533896][ T2766] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 59.549666][ T1521] usb 9-1: 0:2 : does not exist [ 59.565044][ T1521] usb 9-1: USB disconnect, device number 2 [ 59.602511][ T1793] udevd[1793]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 59.621350][ T2766] syz.2.1033: attempt to access beyond end of device [ 59.621350][ T2766] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 59.644300][ T2730] syz-executor: attempt to access beyond end of device [ 59.644300][ T2730] loop2: rw=2049, sector=45104, nr_sectors = 16 limit=40427 [ 59.838932][ T299] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 59.992839][ T2820] loop2: detected capacity change from 0 to 4096 [ 59.999728][ T2820] EXT4-fs: Ignoring removed nobh option [ 60.014040][ T2820] EXT4-fs: Ignoring removed i_version option [ 60.032660][ T2820] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 60.050514][ T299] usb 6-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice= 0.00 [ 60.078356][ T299] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.090387][ T299] usb 6-1: config 0 descriptor?? [ 60.222886][ T2730] EXT4-fs (loop2): unmounting filesystem. [ 60.311714][ T2855] loop7: detected capacity change from 0 to 512 [ 60.379660][ T2855] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 60.399051][ T2855] ext4 filesystem being mounted at /15/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 60.489635][ T2874] loop8: detected capacity change from 0 to 4096 [ 60.501371][ T299] playstation 0003:054C:0DF2.0006: unknown main item tag 0x0 [ 60.519880][ T2874] EXT4-fs: Ignoring removed nobh option [ 60.525571][ T2874] EXT4-fs: Ignoring removed i_version option [ 60.526173][ T299] playstation 0003:054C:0DF2.0006: item fetching failed at offset 3/5 [ 60.539644][ T299] playstation 0003:054C:0DF2.0006: Parse failed [ 60.545810][ T299] playstation: probe of 0003:054C:0DF2.0006 failed with error -22 [ 60.710504][ T312] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 60.753666][ T320] usb 6-1: USB disconnect, device number 4 [ 60.909077][ T312] usb 3-1: Using ep0 maxpacket: 16 [ 60.915262][ T312] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 60.925017][ T312] usb 3-1: config 0 interface 0 has no altsetting 0 [ 60.931458][ T312] usb 3-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 60.940416][ T312] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.948838][ T312] usb 3-1: config 0 descriptor?? [ 61.276341][ T2895] netlink: 'syz.4.1105': attribute type 1 has an invalid length. [ 61.284085][ T2895] netlink: 'syz.4.1105': attribute type 2 has an invalid length. [ 61.293220][ T2895] netlink: 'syz.4.1105': attribute type 1 has an invalid length. [ 61.301304][ T2895] netlink: 'syz.4.1105': attribute type 2 has an invalid length. [ 61.364370][ T312] hid-generic 0003:060B:500A.0007: unexpected long global item [ 61.374980][ T312] hid-generic: probe of 0003:060B:500A.0007 failed with error -22 [ 61.448500][ T2912] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 61.560881][ T320] usb 3-1: USB disconnect, device number 4 [ 61.643087][ T2931] loop5: detected capacity change from 0 to 4096 [ 61.658700][ T2931] EXT4-fs: Ignoring removed nobh option [ 61.664590][ T2931] EXT4-fs: Ignoring removed i_version option [ 61.769150][ T299] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 61.800884][ T2944] loop5: detected capacity change from 0 to 4096 [ 61.812059][ T2944] EXT4-fs: Ignoring removed nobh option [ 61.817475][ T2944] EXT4-fs: Ignoring removed i_version option [ 61.825105][ T2948] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 61.960381][ T299] usb 8-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice= 0.00 [ 61.969333][ T299] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.981135][ T299] usb 8-1: config 0 descriptor?? [ 62.008751][ T2953] loop8: detected capacity change from 0 to 40427 [ 62.015606][ T2953] F2FS-fs (loop8): Invalid log_blocksize (268), supports only 12 [ 62.023237][ T2953] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 62.033530][ T2953] F2FS-fs (loop8): Found nat_bits in checkpoint [ 62.074028][ T2953] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0 [ 62.087719][ T2953] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 62.105516][ T2960] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1132'. [ 62.136970][ T2953] syz.8.1119: attempt to access beyond end of device [ 62.136970][ T2953] loop8: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 62.169386][ T2953] syz.8.1119: attempt to access beyond end of device [ 62.169386][ T2953] loop8: rw=0, sector=45096, nr_sectors = 8 limit=40427 [ 62.225235][ T2966] loop2: detected capacity change from 0 to 1024 [ 62.234623][ T2688] syz-executor: attempt to access beyond end of device [ 62.234623][ T2688] loop8: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 62.236269][ T2967] netlink: 'syz.5.1134': attribute type 1 has an invalid length. [ 62.267053][ T2966] EXT4-fs warning (device loop2): ext4_empty_dir:3156: inode #11: comm syz.2.1122: directory missing '..' [ 62.320842][ T2973] loop2: detected capacity change from 0 to 512 [ 62.350090][ T2973] EXT4-fs (loop2): 1 truncate cleaned up [ 62.404594][ T299] playstation 0003:054C:0DF2.0008: unknown main item tag 0x0 [ 62.416383][ T299] playstation 0003:054C:0DF2.0008: item fetching failed at offset 3/5 [ 62.434893][ T299] playstation 0003:054C:0DF2.0008: Parse failed [ 62.459605][ T299] playstation: probe of 0003:054C:0DF2.0008 failed with error -22 [ 62.492157][ T2991] loop4: detected capacity change from 0 to 128 [ 62.523382][ T2991] EXT4-fs (loop4): Test dummy encryption mode enabled [ 62.526969][ T2984] loop5: detected capacity change from 0 to 8192 [ 62.547244][ T2991] ext4 filesystem being mounted at /239/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 62.606477][ T694] usb 8-1: USB disconnect, device number 3 [ 62.869359][ T320] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 63.059297][ T320] usb 9-1: Using ep0 maxpacket: 16 [ 63.065465][ T320] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 63.075040][ T320] usb 9-1: config 0 interface 0 has no altsetting 0 [ 63.081473][ T320] usb 9-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 63.090328][ T320] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.098696][ T320] usb 9-1: config 0 descriptor?? [ 63.189945][ T3011] loop5: detected capacity change from 0 to 256 [ 63.191095][ T3012] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1140'. [ 63.206586][ T3011] exfat: Deprecated parameter 'namecase' [ 63.229393][ T3011] exfat: Deprecated parameter 'namecase' [ 63.239677][ T3011] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x1fdf94bc, utbl_chksum : 0xe619d30d) [ 63.241986][ T3014] loop7: detected capacity change from 0 to 512 [ 63.310040][ T3014] EXT4-fs (loop7): 1 truncate cleaned up [ 63.380974][ T2645] EXT4-fs unmount: 14 callbacks suppressed [ 63.380993][ T2645] EXT4-fs (loop7): unmounting filesystem. [ 63.390395][ T3001] loop4: detected capacity change from 0 to 40427 [ 63.402255][ T3001] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 63.409964][ T3001] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 63.437790][ T3001] F2FS-fs (loop4): Found nat_bits in checkpoint [ 63.519185][ T320] hid-generic 0003:060B:500A.0009: unexpected long global item [ 63.538682][ T320] hid-generic: probe of 0003:060B:500A.0009 failed with error -22 [ 63.571075][ T3042] loop7: detected capacity change from 0 to 4096 [ 63.578599][ T3042] EXT4-fs: Ignoring removed nobh option [ 63.584543][ T3001] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 63.584565][ T3042] EXT4-fs: Ignoring removed i_version option [ 63.597641][ T3001] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 63.628272][ T3042] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 63.650468][ T3001] syz.4.1137: attempt to access beyond end of device [ 63.650468][ T3001] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 63.680468][ T3001] syz.4.1137: attempt to access beyond end of device [ 63.680468][ T3001] loop4: rw=0, sector=45096, nr_sectors = 8 limit=40427 [ 63.717786][ T2645] EXT4-fs (loop7): unmounting filesystem. [ 63.724482][ T320] usb 9-1: USB disconnect, device number 3 [ 63.772995][ T3050] netlink: 48 bytes leftover after parsing attributes in process `syz.7.1157'. [ 63.789134][ T297] syz-executor: attempt to access beyond end of device [ 63.789134][ T297] loop4: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 63.806681][ T28] audit: type=1400 audit(2000000022.749:400): avc: denied { getattr } for pid=3051 comm="syz.2.1159" name="[io_uring]" dev="anon_inodefs" ino=26623 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 63.931746][ T3059] loop7: detected capacity change from 0 to 512 [ 63.956054][ T3059] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 63.984345][ T3059] EXT4-fs (loop7): 1 truncate cleaned up [ 64.005677][ T3059] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 64.064088][ T2645] EXT4-fs (loop7): unmounting filesystem. [ 64.163676][ T3079] loop4: detected capacity change from 0 to 1024 [ 64.184794][ T3082] loop2: detected capacity change from 0 to 256 [ 64.195859][ T3079] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 64.216478][ T3082] FAT-fs (loop2): Directory bread(block 64) failed [ 64.224179][ T3082] FAT-fs (loop2): Directory bread(block 65) failed [ 64.231393][ T3082] FAT-fs (loop2): Directory bread(block 66) failed [ 64.269528][ T297] EXT4-fs (loop4): unmounting filesystem. [ 64.281983][ T3082] FAT-fs (loop2): Directory bread(block 67) failed [ 64.288481][ T3082] FAT-fs (loop2): Directory bread(block 68) failed [ 64.289060][ T3087] loop5: detected capacity change from 0 to 512 [ 64.294935][ T3082] FAT-fs (loop2): Directory bread(block 69) failed [ 64.308907][ T3082] FAT-fs (loop2): Directory bread(block 70) failed [ 64.322346][ T3087] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 64.336964][ T3082] FAT-fs (loop2): Directory bread(block 71) failed [ 64.345074][ T3087] EXT4-fs (loop5): 1 truncate cleaned up [ 64.351097][ T3087] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 64.364484][ T3082] FAT-fs (loop2): Directory bread(block 72) failed [ 64.371180][ T3082] FAT-fs (loop2): Directory bread(block 73) failed [ 64.401281][ T1564] EXT4-fs (loop5): unmounting filesystem. [ 64.450234][ T870] kworker/u4:6: attempt to access beyond end of device [ 64.450234][ T870] loop2: rw=1, sector=1224, nr_sectors = 12 limit=256 [ 64.461612][ T3101] loop8: detected capacity change from 0 to 256 [ 64.485142][ T3101] exFAT-fs (loop8): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 64.556020][ T28] audit: type=1400 audit(2000000023.499:401): avc: denied { write } for pid=3110 comm="syz.5.1184" path="socket:[27745]" dev="sockfs" ino=27745 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 64.584706][ T28] audit: type=1400 audit(2000000023.499:402): avc: denied { read } for pid=3110 comm="syz.5.1184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 64.615586][ T3116] loop5: detected capacity change from 0 to 1024 [ 64.649508][ T3116] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 64.709286][ T3130] loop2: detected capacity change from 0 to 256 [ 64.710207][ T3129] loop4: detected capacity change from 0 to 512 [ 64.716024][ T1564] EXT4-fs (loop5): unmounting filesystem. [ 64.727498][ T3129] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 64.740871][ T3130] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 64.755933][ T28] audit: type=1400 audit(2000000023.699:403): avc: denied { nlmsg_read } for pid=3131 comm="syz.8.1195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 64.791375][ T3129] EXT4-fs (loop4): 1 truncate cleaned up [ 64.804434][ T3129] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 64.853950][ T297] EXT4-fs (loop4): unmounting filesystem. [ 64.978836][ T3145] loop4: detected capacity change from 0 to 8192 [ 65.104684][ T3163] xt_hashlimit: size too large, truncated to 1048576 [ 65.125058][ T3165] loop5: detected capacity change from 0 to 256 [ 65.160629][ T3165] FAT-fs (loop5): Directory bread(block 64) failed [ 65.167422][ T3165] FAT-fs (loop5): Directory bread(block 65) failed [ 65.185315][ T3165] FAT-fs (loop5): Directory bread(block 66) failed [ 65.192298][ T3165] FAT-fs (loop5): Directory bread(block 67) failed [ 65.208911][ T3165] FAT-fs (loop5): Directory bread(block 68) failed [ 65.215575][ T3165] FAT-fs (loop5): Directory bread(block 69) failed [ 65.249825][ T3165] FAT-fs (loop5): Directory bread(block 70) failed [ 65.256191][ T3165] FAT-fs (loop5): Directory bread(block 71) failed [ 65.299778][ T3165] FAT-fs (loop5): Directory bread(block 72) failed [ 65.323931][ T3165] FAT-fs (loop5): Directory bread(block 73) failed [ 65.484524][ T321] kworker/u4:4: attempt to access beyond end of device [ 65.484524][ T321] loop5: rw=1, sector=1224, nr_sectors = 12 limit=256 [ 65.552347][ T3172] loop2: detected capacity change from 0 to 40427 [ 65.559163][ T28] audit: type=1400 audit(2000000024.499:404): avc: denied { getattr } for pid=3181 comm="syz.4.1215" name="/" dev="dax" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 65.599268][ T3172] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 65.606933][ T3172] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 65.647116][ T3172] F2FS-fs (loop2): Found nat_bits in checkpoint [ 65.769089][ T3172] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 65.778905][ T3172] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 65.802231][ T3194] loop7: detected capacity change from 0 to 8192 [ 65.947052][ T3172] syz.2.1208: attempt to access beyond end of device [ 65.947052][ T3172] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 66.018112][ T3172] syz.2.1208: attempt to access beyond end of device [ 66.018112][ T3172] loop2: rw=0, sector=45096, nr_sectors = 8 limit=40427 [ 66.112349][ T2730] syz-executor: attempt to access beyond end of device [ 66.112349][ T2730] loop2: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 66.140135][ T3214] loop7: detected capacity change from 0 to 256 [ 66.322454][ T3225] loop8: detected capacity change from 0 to 512 [ 66.354968][ T3225] Quota error (device loop8): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 66.365207][ T3225] Quota error (device loop8): qtree_read_dquot: Can't read quota structure for id 0 [ 66.374382][ T3225] EXT4-fs error (device loop8): ext4_acquire_dquot:6788: comm syz.8.1244: Failed to acquire dquot type 0 [ 66.385781][ T3225] Quota error (device loop8): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 66.396011][ T3225] Quota error (device loop8): qtree_read_dquot: Can't read quota structure for id 0 [ 66.405186][ T3225] EXT4-fs error (device loop8): ext4_acquire_dquot:6788: comm syz.8.1244: Failed to acquire dquot type 0 [ 66.419093][ T3225] Quota error (device loop8): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 66.429686][ T3225] EXT4-fs error (device loop8): ext4_acquire_dquot:6788: comm syz.8.1244: Failed to acquire dquot type 0 [ 66.441164][ T3225] EXT4-fs (loop8): 1 orphan inode deleted [ 66.446739][ T3225] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 66.455496][ T3225] ext4 filesystem being mounted at /44/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.510629][ T2688] EXT4-fs (loop8): unmounting filesystem. [ 66.653613][ T3185] loop5: detected capacity change from 0 to 131072 [ 66.697217][ T3185] F2FS-fs (loop5): Wrong CP boundary, start(512) end(198144) blocks(1024) [ 66.712933][ T3185] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 66.737027][ T3185] F2FS-fs (loop5): invalid crc value [ 66.771056][ T3185] F2FS-fs (loop5): Found nat_bits in checkpoint [ 66.860001][ T3185] F2FS-fs (loop5): Try to recover 2th superblock, ret: 0 [ 66.866885][ T3185] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 66.941085][ T3185] F2FS-fs (loop5): sanity_check_inode: inode (ino=8) is with extra_attr, but extra_attr feature is off [ 66.986665][ T3270] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1248'. [ 66.993590][ T3244] loop7: detected capacity change from 0 to 40427 [ 67.029799][ T3244] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12 [ 67.044857][ T3244] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 67.130595][ T3244] F2FS-fs (loop7): Found nat_bits in checkpoint [ 67.153058][ T3285] loop2: detected capacity change from 0 to 2048 [ 67.213176][ T3285] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 67.242500][ T3291] loop4: detected capacity change from 0 to 512 [ 67.262586][ T3244] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 67.269553][ T3244] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 67.323442][ T3291] EXT4-fs: Ignoring removed orlov option [ 67.361900][ T2730] EXT4-fs (loop2): unmounting filesystem. [ 67.414433][ T3291] EXT4-fs (loop4): orphan cleanup on readonly fs [ 67.430092][ T3291] EXT4-fs error (device loop4): ext4_find_extent:936: inode #4: comm syz.4.1257: pblk 2 bad header/extent: invalid magic - magic 3fff, entries 12, max 508(0), depth 0(0) [ 67.459934][ T3301] xt_hashlimit: size too large, truncated to 1048576 [ 67.480589][ T3244] syz.7.1237: attempt to access beyond end of device [ 67.480589][ T3244] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 67.494654][ T3291] EXT4-fs warning (device loop4): ext4_enable_quotas:7023: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 67.545911][ T3244] syz.7.1237: attempt to access beyond end of device [ 67.545911][ T3244] loop7: rw=0, sector=45096, nr_sectors = 8 limit=40427 [ 67.570620][ T3291] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 67.577382][ T3291] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 67.629335][ T3306] loop2: detected capacity change from 0 to 512 [ 67.659971][ T3306] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 67.664513][ T2645] syz-executor: attempt to access beyond end of device [ 67.664513][ T2645] loop7: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 67.712919][ T3311] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1265'. [ 67.722631][ T3306] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 67.803029][ T3306] EXT4-fs (loop2): 1 truncate cleaned up [ 67.835071][ T3306] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 67.964506][ T2730] EXT4-fs (loop2): unmounting filesystem. [ 68.001084][ T297] EXT4-fs (loop4): unmounting filesystem. [ 68.090679][ T3331] loop4: detected capacity change from 0 to 512 [ 68.123671][ T3331] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 68.140404][ T3331] ext4 filesystem being mounted at /272/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 68.192690][ T3344] loop2: detected capacity change from 0 to 512 [ 68.252132][ T3344] EXT4-fs: Ignoring removed mblk_io_submit option [ 68.280811][ T297] EXT4-fs (loop4): unmounting filesystem. [ 68.291101][ T3344] EXT4-fs error (device loop2): ext4_get_branch:178: inode #13: block 2: comm syz.2.1278: invalid block [ 68.324176][ T3344] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.1278: invalid indirect mapped block 10 (level 1) [ 68.369822][ T3344] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.1278: invalid indirect mapped block 8 (level 1) [ 68.419637][ T3344] EXT4-fs (loop2): 1 truncate cleaned up [ 68.428256][ T3357] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1282'. [ 68.448322][ T3344] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 68.511460][ T2730] EXT4-fs (loop2): unmounting filesystem. [ 68.521580][ T3337] loop5: detected capacity change from 0 to 256 [ 68.599144][ T3365] loop4: detected capacity change from 0 to 512 [ 68.612120][ T3365] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 68.639318][ T3365] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 68.666707][ T3365] EXT4-fs (loop4): 1 truncate cleaned up [ 68.672535][ T3365] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 68.710092][ T297] EXT4-fs (loop4): unmounting filesystem. [ 68.741631][ T3384] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1293'. [ 68.759837][ T3387] loop5: detected capacity change from 0 to 512 [ 68.766554][ T3387] EXT4-fs: Ignoring removed mblk_io_submit option [ 68.808072][ T3387] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.1295: invalid indirect mapped block 10 (level 1) [ 68.830308][ T3387] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.1295: invalid indirect mapped block 8 (level 1) [ 68.848664][ T3394] xt_hashlimit: size too large, truncated to 1048576 [ 68.870205][ T3387] EXT4-fs (loop5): 1 truncate cleaned up [ 68.876160][ T3387] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 68.945375][ T1564] EXT4-fs (loop5): unmounting filesystem. [ 68.993555][ T3402] loop5: detected capacity change from 0 to 512 [ 69.025608][ T3402] __quota_error: 4 callbacks suppressed [ 69.025629][ T3402] Quota error (device loop5): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 69.041236][ T3402] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0 [ 69.050405][ T3402] EXT4-fs error (device loop5): ext4_acquire_dquot:6788: comm syz.5.1303: Failed to acquire dquot type 0 [ 69.070454][ T3402] Quota error (device loop5): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 69.080924][ T3402] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0 [ 69.090165][ T3402] EXT4-fs error (device loop5): ext4_acquire_dquot:6788: comm syz.5.1303: Failed to acquire dquot type 0 [ 69.102121][ T3402] Quota error (device loop5): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 69.112351][ T3402] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0 [ 69.121612][ T3402] EXT4-fs error (device loop5): ext4_acquire_dquot:6788: comm syz.5.1303: Failed to acquire dquot type 0 [ 69.132984][ T3402] EXT4-fs (loop5): 1 orphan inode deleted [ 69.138544][ T3402] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 69.147373][ T3402] ext4 filesystem being mounted at /123/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 69.168699][ T1564] EXT4-fs (loop5): unmounting filesystem. [ 69.240809][ T3407] loop8: detected capacity change from 0 to 512 [ 69.247198][ T3407] EXT4-fs: Ignoring removed mblk_io_submit option [ 69.300294][ T3411] xt_hashlimit: size too large, truncated to 1048576 [ 69.335130][ T3407] EXT4-fs error (device loop8): ext4_get_branch:178: inode #13: block 2: comm syz.8.1314: invalid block [ 69.360781][ T3407] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #13: comm syz.8.1314: invalid indirect mapped block 10 (level 1) [ 69.447750][ T3407] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #13: comm syz.8.1314: invalid indirect mapped block 8 (level 1) [ 69.470378][ T3407] EXT4-fs (loop8): 1 truncate cleaned up [ 69.475938][ T3407] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 69.510596][ T2688] EXT4-fs (loop8): unmounting filesystem. [ 69.575285][ T3419] loop8: detected capacity change from 0 to 512 [ 69.623518][ T3419] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 69.637816][ T3419] ext4 filesystem being mounted at /68/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 69.729696][ T2688] EXT4-fs (loop8): unmounting filesystem. [ 69.962739][ T28] audit: type=1400 audit(2000000028.908:407): avc: denied { read } for pid=3441 comm="syz.2.1317" name="msr" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 70.011052][ T28] audit: type=1400 audit(2000000028.938:408): avc: denied { open } for pid=3441 comm="syz.2.1317" path="/dev/cpu/0/msr" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 70.087157][ T28] audit: type=1400 audit(2000000029.028:409): avc: denied { shutdown } for pid=3453 comm="syz.7.1322" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 70.189424][ T3458] overlayfs: missing 'lowerdir' [ 70.239731][ T3460] loop8: detected capacity change from 0 to 512 [ 70.259926][ T3462] loop7: detected capacity change from 0 to 1024 [ 70.291287][ T3460] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 70.310343][ T3460] ext4 filesystem being mounted at /73/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 70.355200][ T28] audit: type=1400 audit(2000000029.298:410): avc: denied { remount } for pid=3459 comm="syz.8.1326" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 70.375402][ T3460] EXT4-fs (loop8): re-mounted. Quota mode: writeback. [ 70.376207][ T3462] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 70.400652][ T3460] EXT4-fs: Ignoring removed orlov option [ 70.403556][ T3462] EXT4-fs error (device loop7): ext4_lookup:1855: inode #2: comm syz.7.1327: 'file2' linked to parent dir [ 70.420233][ T3460] EXT4-fs: Remounting file system with no journal so ignoring journalled data option [ 70.426121][ T3462] binfmt_misc: register: failed to install interpreter file ./file2 [ 70.429523][ T3460] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 70.429544][ T3460] EXT4-fs error (device loop8): __ext4_remount:6436: comm syz.8.1326: Abort forced by user [ 70.441796][ T3468] loop5: detected capacity change from 0 to 1024 [ 70.463319][ T2645] EXT4-fs (loop7): unmounting filesystem. [ 70.500950][ T2688] EXT4-fs (loop8): unmounting filesystem. [ 70.547827][ T3468] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 70.563578][ T3468] ext4 filesystem being mounted at /126/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 70.621123][ T1564] EXT4-fs (loop5): unmounting filesystem. [ 70.788521][ T3503] input: syz0 as /devices/virtual/input/input9 [ 70.955988][ T3516] loop8: detected capacity change from 0 to 128 [ 71.009036][ T3516] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 71.047204][ T3516] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 71.076964][ T3516] EXT4-fs error (device loop8): htree_dirblock_to_tree:1083: inode #2: comm syz.8.1351: Directory block failed checksum [ 71.100071][ T2688] EXT4-fs (loop8): unmounting filesystem. [ 71.175530][ T3547] xt_TPROXY: Can be used only with -p tcp or -p udp [ 71.342006][ T870] Bluetooth: hci0: Frame reassembly failed (-84) [ 71.394348][ T3593] 9pnet: p9_errstr2errno: server reported unknown error ‌@يخ‚ح(للي«Qے0x0000000000000004 [ 71.456498][ T3599] loop2: detected capacity change from 0 to 512 [ 71.477422][ T3599] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 71.500473][ T3599] ext4 filesystem being mounted at /64/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 71.534541][ T3610] input: syz1 as /devices/virtual/input/input10 [ 71.579859][ T2730] EXT4-fs (loop2): unmounting filesystem. [ 71.789167][ T3646] loop7: detected capacity change from 0 to 256 [ 71.795512][ T3646] exfat: Deprecated parameter 'utf8' [ 71.801643][ T3646] exfat: Deprecated parameter 'utf8' [ 71.806834][ T3646] exfat: Deprecated parameter 'utf8' [ 71.814843][ T3646] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x4899f300, utbl_chksum : 0xe619d30d) [ 71.850264][ T3649] loop7: detected capacity change from 0 to 128 [ 71.866716][ T3649] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 71.875358][ T3649] ext4 filesystem being mounted at /76/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 71.889795][ T3657] loop2: detected capacity change from 0 to 2048 [ 71.897501][ T2645] EXT4-fs (loop7): unmounting filesystem. [ 71.916770][ T3657] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 71.928379][ T3657] EXT4-fs (loop2): shut down requested (1) [ 71.934427][ T3657] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=12 [ 71.943347][ T3657] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=12 [ 71.953738][ T3657] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=14 [ 71.962467][ T3657] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=14 [ 71.971649][ T3657] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=12 [ 71.980271][ T3657] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=12 [ 71.989103][ T3657] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=12 [ 71.997898][ T3657] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=14 [ 72.015706][ T2730] EXT4-fs (loop2): unmounting filesystem. [ 72.030532][ T1521] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 72.231687][ T1521] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 72.243022][ T1521] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 72.252844][ T1521] usb 6-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 72.261960][ T1521] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.270658][ T1521] usb 6-1: config 0 descriptor?? [ 72.490283][ T1521] usbhid 6-1:0.0: can't add hid device: -71 [ 72.496363][ T1521] usbhid: probe of 6-1:0.0 failed with error -71 [ 72.503250][ T1521] usb 6-1: USB disconnect, device number 5 [ 72.771537][ T3717] I/O error, dev loop17, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 72.780676][ T3717] FAT-fs (loop17): unable to read boot sector [ 73.045550][ T3745] netlink: 'syz.7.1446': attribute type 4 has an invalid length. [ 73.053165][ T3745] netlink: 3657 bytes leftover after parsing attributes in process `syz.7.1446'. [ 73.246282][ T3758] loop8: detected capacity change from 0 to 128 [ 73.254248][ T3758] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 73.262747][ T3758] ext4 filesystem being mounted at /109/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 73.283929][ T2688] EXT4-fs (loop8): unmounting filesystem. [ 73.300533][ T312] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 73.407678][ T3768] loop7: detected capacity change from 0 to 2048 [ 73.414545][ T3768] EXT4-fs: Ignoring removed bh option [ 73.420598][ T45] Bluetooth: hci0: command 0x1003 tx timeout [ 73.422138][ T330] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 73.442218][ T3768] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 73.488480][ T3768] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 73.509513][ T3768] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 73.521644][ T3768] EXT4-fs (loop7): This should not happen!! Data will be lost [ 73.521644][ T3768] [ 73.532974][ T3768] EXT4-fs (loop7): Total free blocks count 0 [ 73.539773][ T3768] EXT4-fs (loop7): Free/Dirty block details [ 73.545601][ T3768] EXT4-fs (loop7): free_blocks=2415919104 [ 73.551778][ T3768] EXT4-fs (loop7): dirty_blocks=16 [ 73.556875][ T312] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 73.567628][ T3768] EXT4-fs (loop7): Block reservation details [ 73.573429][ T312] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 73.589894][ T3768] EXT4-fs (loop7): i_reserved_data_blocks=1 [ 73.595715][ T312] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 73.608506][ T312] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 73.623712][ T312] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.632482][ T312] usb 6-1: config 0 descriptor?? [ 73.639218][ T2645] EXT4-fs (loop7): unmounting filesystem. [ 73.889530][ T3815] loop2: detected capacity change from 0 to 256 [ 73.896268][ T3815] exfat: Deprecated parameter 'utf8' [ 73.903485][ T3815] exfat: Deprecated parameter 'utf8' [ 73.908963][ T3815] exfat: Deprecated parameter 'utf8' [ 73.916944][ T3815] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x4899f300, utbl_chksum : 0xe619d30d) [ 73.934942][ T3821] loop7: detected capacity change from 0 to 512 [ 73.952791][ T3821] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 73.961826][ T3821] ext4 filesystem being mounted at /95/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 74.008322][ T2645] EXT4-fs (loop7): unmounting filesystem. [ 74.044845][ T312] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 74.053573][ T312] plantronics 0003:047F:FFFF.000A: No inputs registered, leaving [ 74.062430][ T312] plantronics 0003:047F:FFFF.000A: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 74.067848][ T28] kauditd_printk_skb: 79 callbacks suppressed [ 74.067872][ T28] audit: type=1326 audit(2000000033.008:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3838 comm="syz.7.1484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ad1185d29 code=0x7ffc0000 [ 74.104087][ T28] audit: type=1326 audit(2000000033.028:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3838 comm="syz.7.1484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f5ad1185d29 code=0x7ffc0000 [ 74.136653][ T28] audit: type=1326 audit(2000000033.028:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3838 comm="syz.7.1484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ad1185d29 code=0x7ffc0000 [ 74.159923][ T28] audit: type=1326 audit(2000000033.028:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3838 comm="syz.7.1484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f5ad1185d29 code=0x7ffc0000 [ 74.183276][ T28] audit: type=1326 audit(2000000033.028:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3838 comm="syz.7.1484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ad1185d29 code=0x7ffc0000 [ 74.208287][ T28] audit: type=1326 audit(2000000033.028:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3838 comm="syz.7.1484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f5ad1185d29 code=0x7ffc0000 [ 74.242764][ T28] audit: type=1326 audit(2000000033.028:496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3838 comm="syz.7.1484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ad1185d29 code=0x7ffc0000 [ 74.268555][ T28] audit: type=1326 audit(2000000033.028:497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3838 comm="syz.7.1484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=128 compat=0 ip=0x7f5ad1185d29 code=0x7ffc0000 [ 74.292661][ T28] audit: type=1326 audit(2000000033.028:498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3838 comm="syz.7.1484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ad1185d29 code=0x7ffc0000 [ 74.311424][ T694] usb 6-1: USB disconnect, device number 6 [ 74.381385][ T3862] xt_TPROXY: Can be used only with -p tcp or -p udp [ 74.864157][ T3879] loop4: detected capacity change from 0 to 128 [ 74.875800][ T3882] loop7: detected capacity change from 0 to 1024 [ 74.883652][ T3879] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 74.988426][ T3879] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 74.991535][ T3882] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 75.007550][ T3879] EXT4-fs error (device loop4): htree_dirblock_to_tree:1083: inode #2: comm syz.4.1501: Directory block failed checksum [ 75.046096][ T3882] ext4 filesystem being mounted at /105/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 75.107419][ T297] EXT4-fs (loop4): unmounting filesystem. [ 75.121049][ T2645] EXT4-fs (loop7): unmounting filesystem. [ 75.251449][ T3912] overlayfs: missing 'lowerdir' [ 75.262717][ T3918] loop2: detected capacity change from 0 to 256 [ 75.290445][ T3920] loop5: detected capacity change from 0 to 128 [ 75.303405][ T3920] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 75.319077][ T3920] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 75.330230][ T3920] EXT4-fs error (device loop5): htree_dirblock_to_tree:1083: inode #2: comm syz.5.1517: Directory block failed checksum [ 75.352850][ T1564] EXT4-fs (loop5): unmounting filesystem. [ 75.505687][ T3936] loop2: detected capacity change from 0 to 40427 [ 75.512796][ T3936] F2FS-fs (loop2): Invalid log blocks per segment (4278190089) [ 75.520222][ T3936] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 75.530330][ T3936] F2FS-fs (loop2): invalid crc value [ 75.530959][ T3941] loop4: detected capacity change from 0 to 2048 [ 75.557201][ T3936] F2FS-fs (loop2): Found nat_bits in checkpoint [ 75.562617][ T3941] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 75.582523][ T3941] EXT4-fs (loop4): shut down requested (1) [ 75.598046][ T3941] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 75.606350][ T3952] loop7: detected capacity change from 0 to 512 [ 75.606925][ T3941] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 75.622018][ T3936] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 75.622064][ T3941] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=14 [ 75.629048][ T3936] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 75.638011][ T3941] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=14 [ 75.655885][ T3957] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 75.665083][ T3957] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 75.674771][ T3952] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 75.683621][ T3952] ext4 filesystem being mounted at /111/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 75.691942][ T3957] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 75.702635][ T3957] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=14 [ 75.702964][ T2730] syz-executor: attempt to access beyond end of device [ 75.702964][ T2730] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 75.731035][ T3952] EXT4-fs (loop7): re-mounted. Quota mode: writeback. [ 75.739529][ T3952] EXT4-fs: Ignoring removed orlov option [ 75.749502][ T3952] EXT4-fs: Remounting file system with no journal so ignoring journalled data option [ 75.759680][ T297] EXT4-fs (loop4): unmounting filesystem. [ 75.766012][ T3952] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 75.775820][ T3952] EXT4-fs error (device loop7): __ext4_remount:6436: comm syz.7.1528: Abort forced by user [ 75.887605][ T3966] loop7: detected capacity change from 0 to 128 [ 75.906277][ T3966] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 75.926042][ T3966] EXT4-fs error (device loop7): htree_dirblock_to_tree:1083: inode #2: comm syz.7.1542: Directory block failed checksum [ 76.041670][ T3992] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 76.050666][ T3992] FAT-fs (loop5): unable to read boot sector [ 76.221343][ T1521] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 76.249105][ T28] audit: type=1400 audit(2000000035.188:499): avc: denied { setattr } for pid=4009 comm="syz.7.1552" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 76.370909][ T19] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 76.410917][ T1521] usb 9-1: Using ep0 maxpacket: 32 [ 76.416956][ T1521] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 76.430396][ T4025] netlink: 'syz.5.1559': attribute type 4 has an invalid length. [ 76.438053][ T1521] usb 9-1: config 0 has no interfaces? [ 76.443437][ T312] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 76.450920][ T4025] netlink: 3657 bytes leftover after parsing attributes in process `syz.5.1559'. [ 76.460055][ T1521] usb 9-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 76.469524][ T1521] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.478282][ T1521] usb 9-1: config 0 descriptor?? [ 76.488646][ T321] Bluetooth: hci0: Frame reassembly failed (-84) [ 76.570997][ T19] usb 3-1: Using ep0 maxpacket: 32 [ 76.577406][ T19] usb 3-1: config 254 has an invalid interface number: 205 but max is 0 [ 76.585626][ T19] usb 3-1: config 254 has no interface number 0 [ 76.593060][ T19] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=52.c6 [ 76.601974][ T19] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.609734][ T19] usb 3-1: Product: syz [ 76.613806][ T19] usb 3-1: Manufacturer: syz [ 76.618158][ T19] usb 3-1: SerialNumber: syz [ 76.640993][ T312] usb 5-1: Using ep0 maxpacket: 16 [ 76.647122][ T312] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 76.658208][ T312] usb 5-1: config 0 interface 0 has no altsetting 0 [ 76.666197][ T312] usb 5-1: New USB device found, idVendor=046d, idProduct=c517, bcdDevice= 0.00 [ 76.675359][ T312] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.683747][ T312] usb 5-1: config 0 descriptor?? [ 76.829462][ T3997] TCP: tcp_parse_options: Illegal window scaling value 249 > 14 received [ 76.844948][ T320] usb 3-1: USB disconnect, device number 5 [ 77.114651][ T320] usb 9-1: USB disconnect, device number 4 [ 77.299830][ T312] usb 5-1: USB disconnect, device number 6 [ 77.662286][ T4058] loop5: detected capacity change from 0 to 512 [ 77.677967][ T4058] ext4 filesystem being mounted at /161/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 77.773112][ T4078] input: syz0 as /devices/virtual/input/input11 [ 77.796674][ T4084] loop5: detected capacity change from 0 to 512 [ 77.804224][ T4084] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 77.812801][ T4084] EXT4-fs (loop5): orphan cleanup on readonly fs [ 77.819308][ T4084] EXT4-fs warning (device loop5): ext4_enable_quotas:7023: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 77.834031][ T4084] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 77.840885][ T4084] EXT4-fs error (device loop5): ext4_orphan_get:1400: inode #16: comm syz.5.1583: casefold flag without casefold feature [ 77.853654][ T4084] EXT4-fs error (device loop5): ext4_orphan_get:1405: comm syz.5.1583: couldn't read orphan inode 16 (err -117) [ 77.900639][ T4091] input: syz0 as /devices/virtual/input/input12 [ 78.541249][ T497] Bluetooth: hci0: command 0x1003 tx timeout [ 78.541289][ T330] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 78.553140][ T4027] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 78.603022][ T4109] loop8: detected capacity change from 0 to 256 [ 78.608863][ T4110] loop7: detected capacity change from 0 to 512 [ 78.645293][ T4115] loop4: detected capacity change from 0 to 1024 [ 78.646580][ T4110] ext4 filesystem being mounted at /121/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 78.662256][ T4115] EXT4-fs: Ignoring removed nobh option [ 78.667781][ T4115] EXT4-fs: Ignoring removed bh option [ 78.673389][ T4115] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 78.690950][ T4120] loop8: detected capacity change from 0 to 1024 [ 78.730426][ T4115] EXT4-fs error (device loop4): mb_free_blocks:1815: group 0, inode 13: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 78.747636][ T4120] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (1764!=20869) [ 78.774157][ T4120] EXT4-fs (loop8): invalid journal inode [ 78.781221][ T4120] EXT4-fs (loop8): can't get journal size [ 78.789715][ T4131] input: syz0 as /devices/virtual/input/input13 [ 78.793632][ T4129] loop5: detected capacity change from 0 to 512 [ 78.806316][ T4120] EXT4-fs (loop8): shut down requested (2) [ 78.830029][ T4129] ext4 filesystem being mounted at /172/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 78.897089][ T4150] syz.7.1609[4150] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 78.897167][ T4150] syz.7.1609[4150] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 78.931562][ T4154] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 79.695216][ T4175] syz.5.1618[4175] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 79.695275][ T4175] syz.5.1618[4175] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 79.788309][ T4186] netlink: 192 bytes leftover after parsing attributes in process `syz.7.1625'. [ 79.841408][ T320] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 79.857951][ T4191] loop5: detected capacity change from 0 to 2048 [ 79.864754][ T4191] EXT4-fs: Ignoring removed bh option [ 79.891410][ T4191] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 79.907638][ T4191] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 79.920028][ T4191] EXT4-fs (loop5): This should not happen!! Data will be lost [ 79.920028][ T4191] [ 79.929632][ T4191] EXT4-fs (loop5): Total free blocks count 0 [ 79.935577][ T4191] EXT4-fs (loop5): Free/Dirty block details [ 79.941366][ T4191] EXT4-fs (loop5): free_blocks=2415919104 [ 79.946909][ T4191] EXT4-fs (loop5): dirty_blocks=16 [ 79.951835][ T4191] EXT4-fs (loop5): Block reservation details [ 79.957666][ T4191] EXT4-fs (loop5): i_reserved_data_blocks=1 [ 79.983943][ T4196] loop7: detected capacity change from 0 to 512 [ 79.992599][ T4196] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 80.001254][ T4196] EXT4-fs (loop7): orphan cleanup on readonly fs [ 80.011163][ T4196] __quota_error: 2 callbacks suppressed [ 80.011182][ T4196] Quota error (device loop7): v2_read_file_info: Block with free entry 32513 out of range (1, 6). [ 80.034722][ T4196] EXT4-fs warning (device loop7): ext4_enable_quotas:7023: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 80.051362][ T320] usb 9-1: Using ep0 maxpacket: 32 [ 80.057620][ T320] usb 9-1: config 254 has an invalid interface number: 205 but max is 0 [ 80.058734][ T4196] EXT4-fs (loop7): Cannot turn on quotas: error -117 [ 80.074599][ T320] usb 9-1: config 254 has no interface number 0 [ 80.081637][ T4196] EXT4-fs error (device loop7): ext4_orphan_get:1400: inode #16: comm syz.7.1629: casefold flag without casefold feature [ 80.095933][ T320] usb 9-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=52.c6 [ 80.105477][ T320] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.113338][ T4196] EXT4-fs error (device loop7): ext4_orphan_get:1405: comm syz.7.1629: couldn't read orphan inode 16 (err -117) [ 80.113674][ T320] usb 9-1: Product: syz [ 80.130840][ T320] usb 9-1: Manufacturer: syz [ 80.144311][ T320] usb 9-1: SerialNumber: syz [ 80.209940][ T4221] netlink: 192 bytes leftover after parsing attributes in process `syz.2.1637'. [ 80.265024][ T4227] device bridge_slave_0 left promiscuous mode [ 80.267785][ T4229] loop7: detected capacity change from 0 to 2048 [ 80.274613][ T4227] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.285499][ T4227] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 80.300951][ T4229] EXT4-fs (loop7): shut down requested (1) [ 80.308313][ T4229] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop7 ino=12 [ 80.317305][ T4229] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop7 ino=12 [ 80.326255][ T4229] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop7 ino=14 [ 80.335324][ T4229] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop7 ino=14 [ 80.344780][ T4229] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop7 ino=12 [ 80.353666][ T4229] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop7 ino=12 [ 80.362486][ T4229] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop7 ino=12 [ 80.371202][ T4229] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop7 ino=14 [ 80.375515][ T4167] TCP: tcp_parse_options: Illegal window scaling value 249 > 14 received [ 80.392296][ T19] usb 9-1: USB disconnect, device number 5 [ 80.521451][ T1521] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 80.621399][ C0] ================================================================== [ 80.629286][ C0] BUG: KASAN: use-after-free in __run_timers+0x34a/0xa10 [ 80.636136][ C0] Write of size 8 at addr ffff88810c20ca00 by task swapper/0/0 [ 80.643963][ C0] [ 80.646115][ C0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted 6.1.118-syzkaller-00020-gdbdf659cc65c #0 [ 80.655677][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 80.665573][ C0] Call Trace: [ 80.668704][ C0] [ 80.671388][ C0] dump_stack_lvl+0x151/0x1b7 [ 80.676023][ C0] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 80.681321][ C0] ? _printk+0xd1/0x111 [ 80.681382][ T320] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 80.685308][ C0] ? __virt_addr_valid+0x242/0x2f0 [ 80.697547][ C0] print_report+0x158/0x4e0 [ 80.701887][ C0] ? __virt_addr_valid+0x242/0x2f0 [ 80.706833][ C0] ? kasan_complete_mode_report_info+0x90/0x1b0 [ 80.712911][ C0] ? __run_timers+0x34a/0xa10 [ 80.717426][ C0] kasan_report+0x13c/0x170 [ 80.721762][ C0] ? __run_timers+0x34a/0xa10 [ 80.726279][ C0] __asan_report_store8_noabort+0x17/0x20 [ 80.731829][ C0] __run_timers+0x34a/0xa10 [ 80.736171][ C0] ? kvm_sched_clock_read+0x18/0x40 [ 80.741213][ C0] ? calc_index+0x270/0x270 [ 80.745544][ C0] ? sched_clock+0x9/0x10 [ 80.749708][ C0] ? sched_clock_cpu+0x71/0x2b0 [ 80.754484][ C0] run_timer_softirq+0x69/0xf0 [ 80.759086][ C0] handle_softirqs+0x1db/0x650 [ 80.763685][ C0] ? irqtime_account_irq+0xdc/0x260 [ 80.768717][ C0] __irq_exit_rcu+0x52/0xf0 [ 80.773057][ C0] irq_exit_rcu+0x9/0x10 [ 80.777136][ C0] sysvec_apic_timer_interrupt+0xa9/0xc0 [ 80.782615][ C0] [ 80.785395][ C0] [ 80.788168][ C0] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 80.794112][ C0] RIP: 0010:acpi_idle_enter+0x416/0x760 [ 80.799489][ C0] Code: 89 de 48 83 e6 08 31 ff e8 97 ab 53 fc 48 83 e3 08 0f 85 b1 00 00 00 0f 1f 44 00 00 e8 43 a7 53 fc 0f 00 2d 5c 7f ce 00 fb f4 e9 e3 00 00 00 49 83 c7 04 4c 89 f8 48 c1 e8 03 42 0f b6 04 30 [ 80.818933][ C0] RSP: 0018:ffffffff87007bd0 EFLAGS: 000002d3 [ 80.824838][ C0] RAX: ffffffff8521defd RBX: 0000000000000000 RCX: ffffffff8701d4c0 [ 80.832644][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 80.840457][ C0] RBP: ffffffff87007c10 R08: ffffffff8521dee9 R09: fffffbfff0e03a99 [ 80.848273][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000001 [ 80.856081][ C0] R13: ffff888109f0f004 R14: dffffc0000000000 R15: ffff888109b75064 [ 80.863899][ C0] ? acpi_idle_enter+0x3f9/0x760 [ 80.868665][ C0] ? acpi_idle_enter+0x40d/0x760 [ 80.873443][ C0] ? intel_idle_xstate+0xa0/0xa0 [ 80.878223][ C0] cpuidle_enter_state+0x5eb/0x17f0 [ 80.883257][ C0] ? cpuidle_enter_s2idle+0x600/0x600 [ 80.888462][ C0] ? menu_enable_device+0x380/0x380 [ 80.893594][ C0] ? __sched_text_start+0x8/0x8 [ 80.898274][ C0] cpuidle_enter+0x5f/0xa0 [ 80.902527][ C0] do_idle+0x3d1/0x580 [ 80.906449][ C0] ? ct_irq_exit+0x9/0x10 [ 80.910603][ C0] ? idle_inject_timer_fn+0x60/0x60 [ 80.915721][ C0] cpu_startup_entry+0x44/0x60 [ 80.920330][ C0] rest_init+0x10b/0x130 [ 80.924401][ C0] ? time_init+0x38/0x38 [ 80.928481][ C0] arch_call_rest_init+0xe/0xe [ 80.933083][ C0] start_kernel+0x46c/0x4d8 [ 80.937419][ C0] x86_64_start_reservations+0x2a/0x2c [ 80.942712][ C0] x86_64_start_kernel+0x7c/0x81 [ 80.947485][ C0] secondary_startup_64_no_verify+0xce/0xdb [ 80.953219][ C0] [ 80.956076][ C0] [ 80.958245][ C0] Allocated by task 4027: [ 80.962419][ C0] kasan_set_track+0x4b/0x70 [ 80.966848][ C0] kasan_save_alloc_info+0x1f/0x30 [ 80.971787][ C0] __kasan_kmalloc+0x9c/0xb0 [ 80.976211][ C0] __kmalloc+0xb4/0x1e0 [ 80.980206][ C0] hci_alloc_dev_priv+0x27/0x1c00 [ 80.985150][ C0] hci_uart_tty_ioctl+0x401/0xa70 [ 80.990014][ C0] tty_ioctl+0x903/0xc50 [ 80.994093][ C0] __se_sys_ioctl+0x114/0x190 [ 80.998606][ C0] __x64_sys_ioctl+0x7b/0x90 [ 81.003029][ C0] x64_sys_call+0x98/0x9a0 [ 81.007283][ C0] do_syscall_64+0x3b/0xb0 [ 81.011537][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 81.017264][ C0] [ 81.019436][ C0] Freed by task 4027: [ 81.023256][ C0] kasan_set_track+0x4b/0x70 [ 81.027682][ C0] kasan_save_free_info+0x2b/0x40 [ 81.032540][ C0] ____kasan_slab_free+0x131/0x180 [ 81.037497][ C0] __kasan_slab_free+0x11/0x20 [ 81.042090][ C0] __kmem_cache_free+0x21d/0x410 [ 81.046865][ C0] kfree+0x7a/0xf0 [ 81.050424][ C0] hci_release_dev+0x14d3/0x1640 [ 81.055196][ C0] bt_host_release+0x83/0xa0 [ 81.059623][ C0] device_release+0x95/0x1c0 [ 81.064049][ C0] kobject_put+0x178/0x260 [ 81.068302][ C0] put_device+0x1f/0x30 [ 81.072291][ C0] hci_dev_cmd+0x2be/0x9b0 [ 81.076553][ C0] hci_sock_ioctl+0x415/0x7f0 [ 81.081060][ C0] sock_do_ioctl+0x152/0x450 [ 81.085485][ C0] sock_ioctl+0x455/0x740 [ 81.089737][ C0] __se_sys_ioctl+0x114/0x190 [ 81.094254][ C0] __x64_sys_ioctl+0x7b/0x90 [ 81.098688][ C0] x64_sys_call+0x98/0x9a0 [ 81.103021][ C0] do_syscall_64+0x3b/0xb0 [ 81.107273][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 81.113002][ C0] [ 81.115168][ C0] Last potentially related work creation: [ 81.120728][ C0] kasan_save_stack+0x3b/0x60 [ 81.125237][ C0] __kasan_record_aux_stack+0xb4/0xc0 [ 81.130443][ C0] kasan_record_aux_stack_noalloc+0xb/0x10 [ 81.136086][ C0] insert_work+0x56/0x310 [ 81.140252][ C0] __queue_work+0x9b6/0xd70 [ 81.144589][ C0] queue_work_on+0x105/0x170 [ 81.149019][ C0] __hci_cmd_sync_sk+0xc2a/0xf70 [ 81.153790][ C0] hci_cmd_sync_status+0x52/0x130 [ 81.158652][ C0] hci_dev_cmd+0x39e/0x9b0 [ 81.162992][ C0] hci_sock_ioctl+0x415/0x7f0 [ 81.167507][ C0] sock_do_ioctl+0x152/0x450 [ 81.171929][ C0] sock_ioctl+0x455/0x740 [ 81.176097][ C0] __se_sys_ioctl+0x114/0x190 [ 81.180613][ C0] __x64_sys_ioctl+0x7b/0x90 [ 81.185036][ C0] x64_sys_call+0x98/0x9a0 [ 81.189290][ C0] do_syscall_64+0x3b/0xb0 [ 81.193543][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 81.199272][ C0] [ 81.201440][ C0] Second to last potentially related work creation: [ 81.207866][ C0] kasan_save_stack+0x3b/0x60 [ 81.212378][ C0] __kasan_record_aux_stack+0xb4/0xc0 [ 81.217585][ C0] kasan_record_aux_stack_noalloc+0xb/0x10 [ 81.223230][ C0] insert_work+0x56/0x310 [ 81.227393][ C0] __queue_work+0x9b6/0xd70 [ 81.231733][ C0] queue_work_on+0x105/0x170 [ 81.236161][ C0] hci_cmd_timeout+0x199/0x200 [ 81.240761][ C0] process_one_work+0x73d/0xcb0 [ 81.245444][ C0] worker_thread+0xa60/0x1260 [ 81.249959][ C0] kthread+0x26d/0x300 [ 81.253950][ C0] ret_from_fork+0x1f/0x30 [ 81.258202][ C0] [ 81.260373][ C0] The buggy address belongs to the object at ffff88810c20c000 [ 81.260373][ C0] which belongs to the cache kmalloc-8k of size 8192 [ 81.274261][ C0] The buggy address is located 2560 bytes inside of [ 81.274261][ C0] 8192-byte region [ffff88810c20c000, ffff88810c20e000) [ 81.287540][ C0] [ 81.289709][ C0] The buggy address belongs to the physical page: [ 81.295969][ C0] page:ffffea0004308200 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x10c208 [ 81.306029][ C0] head:ffffea0004308200 order:3 compound_mapcount:0 compound_pincount:0 [ 81.314185][ C0] flags: 0x4000000000010200(slab|head|zone=1) [ 81.320098][ C0] raw: 4000000000010200 0000000000000000 dead000000000122 ffff888100043500 [ 81.328515][ C0] raw: 0000000000000000 0000000000020002 00000001ffffffff 0000000000000000 [ 81.336927][ C0] page dumped because: kasan: bad access detected [ 81.343188][ C0] page_owner tracks the page as allocated [ 81.348731][ C0] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 4027, tgid 4026 (syz.7.1561), ts 76487303743, free_ts 76428113663 [ 81.371129][ C0] post_alloc_hook+0x213/0x220 [ 81.375725][ C0] prep_new_page+0x1b/0x110 [ 81.380063][ C0] get_page_from_freelist+0x2f41/0x2fc0 [ 81.385442][ C0] __alloc_pages+0x234/0x610 [ 81.389871][ C0] alloc_slab_page+0x6c/0xf0 [ 81.394296][ C0] new_slab+0x90/0x3e0 [ 81.398199][ C0] ___slab_alloc+0x6f9/0xb80 [ 81.402630][ C0] __slab_alloc+0x5d/0xa0 [ 81.406794][ C0] __kmem_cache_alloc_node+0x207/0x2a0 [ 81.412091][ C0] __kmalloc+0xa3/0x1e0 [ 81.416079][ C0] hci_alloc_dev_priv+0x27/0x1c00 [ 81.420954][ C0] hci_uart_tty_ioctl+0x401/0xa70 [ 81.425804][ C0] tty_ioctl+0x903/0xc50 [ 81.429881][ C0] __se_sys_ioctl+0x114/0x190 [ 81.434394][ C0] __x64_sys_ioctl+0x7b/0x90 [ 81.438822][ C0] x64_sys_call+0x98/0x9a0 [ 81.443074][ C0] page last free stack trace: [ 81.447590][ C0] free_unref_page_prepare+0x83d/0x850 [ 81.452880][ C0] free_unref_page+0xb2/0x5c0 [ 81.457395][ C0] __free_pages+0x61/0xf0 [ 81.461560][ C0] __free_slab+0xce/0x1a0 [ 81.465728][ C0] __unfreeze_partials+0x165/0x1a0 [ 81.470672][ C0] put_cpu_partial+0xa9/0x100 [ 81.475188][ C0] __slab_free+0x1c8/0x280 [ 81.479442][ C0] ___cache_free+0xc6/0xd0 [ 81.483707][ C0] qlist_free_all+0xc5/0x140 [ 81.488119][ C0] kasan_quarantine_reduce+0x15a/0x180 [ 81.493414][ C0] __kasan_slab_alloc+0x24/0x80 [ 81.498098][ C0] slab_post_alloc_hook+0x53/0x2c0 [ 81.503048][ C0] kmem_cache_alloc_node+0x188/0x330 [ 81.508167][ C0] __alloc_skb+0xcc/0x2d0 [ 81.512336][ C0] inet_netconf_notify_devconf+0x173/0x230 [ 81.517978][ C0] inetdev_event+0x823/0x1110 [ 81.522490][ C0] [ 81.524659][ C0] Memory state around the buggy address: [ 81.530129][ C0] ffff88810c20c900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 81.538032][ C0] ffff88810c20c980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 81.545928][ C0] >ffff88810c20ca00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 81.553824][ C0] ^ [ 81.557729][ C0] ffff88810c20ca80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 81.565629][ C0] ffff88810c20cb00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 81.573523][ C0] ================================================================== [ 81.581512][ C0] Disabling lock debugging due to kernel taint [ 81.587758][ C0] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN [ 81.599327][ C0] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 81.607532][ C0] CPU: 0 PID: 0 Comm: swapper/0 Tainted: G B 6.1.118-syzkaller-00020-gdbdf659cc65c #0 [ 81.618295][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 81.628189][ C0] RIP: 0010:__queue_work+0x4f1/0xd70 [ 81.633306][ C0] Code: 39 03 0f 84 40 01 00 00 e8 8c 6b 2a 00 4c 89 e7 e8 e4 e3 d6 03 49 bd 00 00 00 00 00 fc ff df 4c 8b 65 d0 4c 89 f0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 f7 e8 60 e1 71 00 49 8b 3e e8 98 dc d6 [ 81.652748][ C0] RSP: 0018:ffffc90000007c78 EFLAGS: 00010046 [ 81.658648][ C0] RAX: 0000000000000000 RBX: 000000007fffffff RCX: ffffffff8701d4c0 [ 81.666460][ C0] RDX: 0000000000000100 RSI: 000000007fffffff RDI: 000000007fffffff [ 81.674271][ C0] RBP: ffffc90000007d00 R08: ffffffff814b186b R09: 0000000000000007 [ 81.682081][ C0] R10: ffffffffffffffff R11: dffffc0000000001 R12: ffff88810c20c9c8 [ 81.689892][ C0] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff88810c20c9e0 [ 81.697705][ C0] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 81.706474][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 81.712897][ C0] CR2: 0000001b33c0bff8 CR3: 000000014a21b000 CR4: 00000000003506b0 [ 81.720708][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 81.728519][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 81.736329][ C0] Call Trace: [ 81.739457][ C0] [ 81.742147][ C0] ? __die_body+0x62/0xb0 [ 81.746313][ C0] ? die_addr+0x9f/0xd0 [ 81.750304][ C0] ? exc_general_protection+0x317/0x4c0 [ 81.755691][ C0] ? asm_exc_general_protection+0x27/0x30 [ 81.761246][ C0] ? __queue_work+0x28b/0xd70 [ 81.765751][ C0] ? __queue_work+0x4f1/0xd70 [ 81.770270][ C0] ? __queue_work+0x29c/0xd70 [ 81.774784][ C0] delayed_work_timer_fn+0x61/0x80 [ 81.779730][ C0] ? queue_work_node+0x1d0/0x1d0 [ 81.784498][ C0] call_timer_fn+0x3b/0x2d0 [ 81.788839][ C0] ? queue_work_node+0x1d0/0x1d0 [ 81.793614][ C0] __run_timers+0x756/0xa10 [ 81.797956][ C0] ? calc_index+0x270/0x270 [ 81.802295][ C0] ? sched_clock+0x9/0x10 [ 81.806460][ C0] ? sched_clock_cpu+0x71/0x2b0 [ 81.811150][ C0] run_timer_softirq+0x69/0xf0 [ 81.815748][ C0] handle_softirqs+0x1db/0x650 [ 81.820348][ C0] ? irqtime_account_irq+0xdc/0x260 [ 81.825381][ C0] __irq_exit_rcu+0x52/0xf0 [ 81.829723][ C0] irq_exit_rcu+0x9/0x10 [ 81.833800][ C0] sysvec_apic_timer_interrupt+0xa9/0xc0 [ 81.839394][ C0] [ 81.842162][ C0] [ 81.844941][ C0] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 81.850754][ C0] RIP: 0010:acpi_idle_enter+0x416/0x760 [ 81.856135][ C0] Code: 89 de 48 83 e6 08 31 ff e8 97 ab 53 fc 48 83 e3 08 0f 85 b1 00 00 00 0f 1f 44 00 00 e8 43 a7 53 fc 0f 00 2d 5c 7f ce 00 fb f4 e9 e3 00 00 00 49 83 c7 04 4c 89 f8 48 c1 e8 03 42 0f b6 04 30 [ 81.875674][ C0] RSP: 0018:ffffffff87007bd0 EFLAGS: 000002d3 [ 81.881567][ C0] RAX: ffffffff8521defd RBX: 0000000000000000 RCX: ffffffff8701d4c0 [ 81.889375][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 81.897196][ C0] RBP: ffffffff87007c10 R08: ffffffff8521dee9 R09: fffffbfff0e03a99 [ 81.904999][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000001 [ 81.912812][ C0] R13: ffff888109f0f004 R14: dffffc0000000000 R15: ffff888109b75064 [ 81.920626][ C0] ? acpi_idle_enter+0x3f9/0x760 [ 81.925401][ C0] ? acpi_idle_enter+0x40d/0x760 [ 81.930177][ C0] ? intel_idle_xstate+0xa0/0xa0 [ 81.935038][ C0] cpuidle_enter_state+0x5eb/0x17f0 [ 81.940069][ C0] ? cpuidle_enter_s2idle+0x600/0x600 [ 81.945276][ C0] ? menu_enable_device+0x380/0x380 [ 81.950324][ C0] ? __sched_text_start+0x8/0x8 [ 81.954995][ C0] cpuidle_enter+0x5f/0xa0 [ 81.959252][ C0] do_idle+0x3d1/0x580 [ 81.963154][ C0] ? ct_irq_exit+0x9/0x10 [ 81.967328][ C0] ? idle_inject_timer_fn+0x60/0x60 [ 81.972363][ C0] cpu_startup_entry+0x44/0x60 [ 81.976955][ C0] rest_init+0x10b/0x130 [ 81.981031][ C0] ? time_init+0x38/0x38 [ 81.985113][ C0] arch_call_rest_init+0xe/0xe [ 81.989714][ C0] start_kernel+0x46c/0x4d8 [ 81.994085][ C0] x86_64_start_reservations+0x2a/0x2c [ 81.999462][ C0] x86_64_start_kernel+0x7c/0x81 [ 82.004229][ C0] secondary_startup_64_no_verify+0xce/0xdb [ 82.009961][ C0] [ 82.012821][ C0] Modules linked in: [ 82.016559][ C0] ---[ end trace 0000000000000000 ]--- [ 82.021847][ C0] RIP: 0010:__queue_work+0x4f1/0xd70 [ 82.026971][ C0] Code: 39 03 0f 84 40 01 00 00 e8 8c 6b 2a 00 4c 89 e7 e8 e4 e3 d6 03 49 bd 00 00 00 00 00 fc ff df 4c 8b 65 d0 4c 89 f0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 f7 e8 60 e1 71 00 49 8b 3e e8 98 dc d6 [ 82.046411][ C0] RSP: 0018:ffffc90000007c78 EFLAGS: 00010046 [ 82.052312][ C0] RAX: 0000000000000000 RBX: 000000007fffffff RCX: ffffffff8701d4c0 [ 82.060139][ C0] RDX: 0000000000000100 RSI: 000000007fffffff RDI: 000000007fffffff [ 82.067937][ C0] RBP: ffffc90000007d00 R08: ffffffff814b186b R09: 0000000000000007 [ 82.075745][ C0] R10: ffffffffffffffff R11: dffffc0000000001 R12: ffff88810c20c9c8 [ 82.083557][ C0] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff88810c20c9e0 [ 82.091367][ C0] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 82.100134][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 82.106557][ C0] CR2: 0000001b33c0bff8 CR3: 000000014a21b000 CR4: 00000000003506b0 [ 82.114377][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 82.122180][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 82.129992][ C0] Kernel panic - not syncing: Fatal exception in interrupt [ 82.137335][ C0] Kernel Offset: disabled [ 82.141470][ C0] Rebooting in 86400 seconds..