last executing test programs: 13.64052415s ago: executing program 0 (id=1): r0 = socket$packet(0x11, 0x2, 0x300) syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d0918108ac051582588f0000000109022d"], 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x5f3a, 0x4) recvfrom(r0, 0x0, 0x0, 0x2, 0x0, 0x0) 11.26802683s ago: executing program 0 (id=17): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f0000000880)={[{@errors_remount}, {@bsdgroups}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5e}}, {@noauto_da_alloc}, {@bsdgroups}, {@oldalloc}, {@nojournal_checksum}]}, 0x2, 0x459, &(0x7f0000000900)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount(0x0, &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x1304825, 0x0) 10.824009918s ago: executing program 3 (id=20): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000000d90100"]) 10.812448488s ago: executing program 0 (id=21): syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x810, &(0x7f00000018c0)=ANY=[], 0xfd, 0x1501, &(0x7f00000002c0)="$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") io_submit(0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x0) truncate(&(0x7f0000000080)='./file1\x00', 0xf000) write(0xffffffffffffffff, 0x0, 0x0) 10.635464931s ago: executing program 3 (id=23): r0 = gettid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) tgkill(r0, r2, 0x1e) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x67}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x76}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x6, 0x1, &(0x7f0000000000)={0x0, 0x747, 0x0, 0x3}, 0xc) connect$bt_l2cap(r5, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) sendmsg$inet(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)}, 0x4040004) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0005}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1b, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x6}]}) 10.053934691s ago: executing program 0 (id=26): r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x2000, 0x9430, @loopback, 0x7}, 0x1c) getsockopt$sock_buf(r0, 0x1, 0x1c, &(0x7f0000000000)=""/43, &(0x7f0000000040)=0x2b) 10.001731611s ago: executing program 32 (id=26): r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x2000, 0x9430, @loopback, 0x7}, 0x1c) getsockopt$sock_buf(r0, 0x1, 0x1c, &(0x7f0000000000)=""/43, &(0x7f0000000040)=0x2b) 9.734928806s ago: executing program 3 (id=30): r0 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000040)={0x40, 0x7, 0x0, 0x8, 0xfffffffffffffd90, 0x3, 0x0}) 9.728973746s ago: executing program 3 (id=31): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x800042, &(0x7f0000000000), 0xfc, 0x588, &(0x7f0000000700)="$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") sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='pstore\x00', 0x1800003, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0x800000, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x10}, 0x18) 9.53691073s ago: executing program 3 (id=32): r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0x400017e) mkdir(&(0x7f0000000100)='./control\x00', 0x184) inotify_add_watch(r0, &(0x7f0000000300)='./control\x00', 0x10000001) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') read$eventfd(r1, &(0x7f0000000340), 0x8) 9.283578064s ago: executing program 3 (id=35): gettid() r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11, r0, 0xbf7d5000) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000900)="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", 0x203, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x12, 0x0, 0x0) 9.221522174s ago: executing program 33 (id=35): gettid() r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11, r0, 0xbf7d5000) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000900)="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", 0x203, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x12, 0x0, 0x0) 4.905283687s ago: executing program 5 (id=104): socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x400, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000001c0)="ba0f"}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) lseek(r1, 0x851, 0x0) 4.655144552s ago: executing program 1 (id=107): pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000040)=0x4910, 0x4) splice(r0, 0x0, r1, 0x0, 0xfffd, 0x0) 4.605318043s ago: executing program 1 (id=109): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x4, 0xfff5, 0x9}) r1 = socket$unix(0x1, 0x3, 0x0) getpeername$unix(r1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) r4 = fsopen(&(0x7f0000000000)='overlay\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r5, 0x40045564, 0x3) write$uinput_user_dev(r5, &(0x7f0000000840)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x10, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0x2, 0x0, 0x3], [0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x3, 0x0, 0x4, 0x0, 0xffeffffe, 0x0, 0x800005], [0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5b2bb47c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x20], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcc5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) 4.181429159s ago: executing program 1 (id=111): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0200, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)=0x3) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0xe9503, 0x0) ioctl$PPPIOCATTACH(r1, 0x4004743d, &(0x7f0000000040)=0x3) r2 = epoll_create1(0x0) close(r0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000004c0)={0x60000018}) epoll_pwait(r2, &(0x7f00000001c0)=[{}], 0x1, 0x1, 0x0, 0x0) 3.925727884s ago: executing program 5 (id=113): syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f00000001c0)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x4}}, {@errors_remount}, {@test_dummy_encryption_v1}, {@dax}]}, 0x1, 0x78a, &(0x7f0000000cc0)="$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") syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x804, &(0x7f00000000c0)={[{@shortname_win95}, {@shortname_lower}, {@nonumtail}, {@utf8no}, {@fat=@dos1xfloppy}, {@rodir}, {@rodir}, {@shortname_win95}, {@fat=@time_offset={'time_offset', 0x3d, 0xfffffffffffffe28}}, {@fat=@codepage={'codepage', 0x3d, '855'}}, {@numtail}, {@shortname_winnt}, {@utf8no}, {@fat=@dos1xfloppy}, {@uni_xlate}, {@rodir}]}, 0xfd, 0x276, &(0x7f0000000a40)="$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") r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000840), 0x307}, 0x38) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) capset(0x0, &(0x7f0000000040)={0x200000, 0x200000}) ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d3, &(0x7f0000000780)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="820000000000000071000040"]) 3.662497018s ago: executing program 1 (id=114): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x2000050, &(0x7f0000000340)={[{@errors_remount}, {@nodiscard}, {@noquota}, {@init_itable}, {@jqfmt_vfsv0}, {@resgid}, {@sysvgroups}, {@delalloc}, {@quota}]}, 0x10, 0x4e0, &(0x7f0000000400)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000001580)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setresuid(0x0, r1, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) 3.331976183s ago: executing program 5 (id=119): r0 = syz_open_procfs(0x0, &(0x7f0000000480)='net/icmp6\x00') preadv(r0, &(0x7f0000000340)=[{&(0x7f0000000080)=""/201, 0xc9}, {0x0}], 0x2, 0x5, 0x3) 3.263282435s ago: executing program 5 (id=121): syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000080)='./file0\x00', 0xa08886, &(0x7f0000000040)=ANY=[@ANYRES32=0x0], 0x1, 0x2a8, &(0x7f0000000500)="$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") mount$9p_fd(0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x60) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x88800, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x40047211, &(0x7f00000000c0)) 3.262811125s ago: executing program 1 (id=122): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x2, 0x31, 0x7d, 0x55, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x1c1842, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000140), 0x0}, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000700)={0x34, &(0x7f0000000500)={0x0, 0xa, 0x4, "c66fb0e4"}, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.131705337s ago: executing program 5 (id=125): r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @dev={0xac, 0x14, 0x14, 0x34}}, 0xc) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @loopback, @remote}, 0xc) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x20, 0x28, 0x64, 0x0, 0x0, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x80000002, 0x1000000}}}}}, 0x0) 3.007932939s ago: executing program 5 (id=127): r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x57, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 2.699135244s ago: executing program 6 (id=132): r0 = syz_open_dev$usbfs(&(0x7f0000000200), 0x200, 0xa401) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000400)=@urb_type_interrupt={0x1, {0x1, 0x1}, 0x0, 0x60, &(0x7f0000000300)='M', 0x1, 0xc, 0x0, 0x0, 0x5, 0x5f8480, 0x0}) 1.826358769s ago: executing program 4 (id=138): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x2040400) ioctl$sock_netdev_private(r0, 0x89f0, &(0x7f0000000080)) 1.77384429s ago: executing program 4 (id=139): r0 = memfd_create(&(0x7f0000000380)='\x103q}2\x9a\xce\xaf\x03\xdfyR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7R\x94\xaf\xbb\xdcM\x90k\xd6\x05\r\x84\x87\x1e?\x10\x95SWFO{\x1f\x1b!\xd5\x991D\x1c\b\x8c`\xeaSA\x90m\xb6&\xd0\xf1\xb3\xed:\x82\xbd\xe3i|BL\x1f\x9d\x00\x00\xc5\xb8$\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\r\xd6h\x80\x8fQ|\xf5d\x10\x10\xd7\t\x00\x00\x00\x00\x00\x00\x00<\xfeeS\xb2l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfaa\xd3\xf1\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7~x\xb8vo\xe6\x15@\xc9\"CY\x11\xb9u\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D4E^7%8\x94y\x90\xf0l\xa0\'L%\xd4\xda\xee\x81\x98\xcc\xfd\xa2\x89$\x9by\xf1\xbb\x01\xb7\xcd\xbf\x99\x1f\x90@b\x03\xb3\xe0CfU\x16{\xbey\xa1cs\x96U\x11\xdb*\xdf\xcdG\xc7z\x85\x8aE\xf7\xd5\x9dAj\xe3\xfb\xc4\xa0\x14\x87\x19\x17\xed\xd1\x185%Q%\x81\xfaK\x82\xec=\xa3\xb8~\xb6O\xbd\x19*\xdb\x1c\x10\xa4\x8dIl\xc1\xceG\xd0h\xa1\xab:dP\xb6\xa0BR\xbe\x03\xac\xd9\x87\x00@\x80\x94\xd88\xc9\x03\x97\x17r\x85#\x7f\x8cu\x8f\xcc\x7fF\xb5\xea\xa6\xc1\x9d\xac\x89\xc9\xa1tuJw\xee\x1a\xe73\xa8\xadS\xd1\x11#d\xc2\xcfdj\x9ec\x93\xd5K\x90*_3\x89\v\xab\x04ih\x12\x93\xc5m\x8f~{\xe5\x85\xa5g\x00\x00\x00\xe45Q\xab%\xa8[\xf3\x17\x94\xf8\xdfq\xff\xd2?\xafW\xde\x1bW]\x1f\aaV\xc5\xc82*\xc7\xc5\"C}L\x10e\xc6\x90\xc0\xf9z\xb6+/d\x86\xf2\xbe\xc9:u\t\\e\x05)\xe4\xd2\xc4\x1a\xc9\xac\xdb\x925\x02\x94@\xa2\xe1\xee\x16\xb4\x98\xff\x0f\xbb\xb2\x81\xcf\x13g6l\xcc\xc8\x02\v\xa2\xb2\xf6\xbf@d\xcecC\x9fVz\xf4\x14\xa5\x8b|\xe1\xc0\xfa3X\xf4\xd9L\xe6\x8f\x9dy\x0fX.\xc5EQ\xd1/\xa1\xd0\x03>\xf0\x90\x13B\xe2\x97\x8b!\xf7\"\xecX\x92\xab\xbc^\xb2\x80@\xcc+\xbbp\xdc|N\xd3[=G\xb2\xe1\x9c\xc5\x81y\x84\xef\xacQ\x01\xdd\xe7<\xb8\xf1Hn\x86\xa6\xe3\x18N\x19\"[-\xdb\xef\xc3\xe0\xa8}', 0x0) writev(r0, 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, &(0x7f00000008c0)={0x3, {{0x2, 0x4e23, @private=0xa010101}}, {{0x2, 0x4e23, @local}}}, 0x108) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000340)=""/225, &(0x7f0000000180)=0xe1) timer_create(0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x513, &(0x7f0000000c40)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='freezer.state\x00', 0x275a, 0x0) getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) read$FUSE(0xffffffffffffffff, 0x0, 0x0) keyctl$session_to_parent(0x12) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$UHID_CREATE(r3, &(0x7f0000000b00)={0x0, {'syz1\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000040)=""/15, 0xf, 0xa0, 0x8, 0x1, 0x5, 0x1635}}, 0x120) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10030, 0xffffffffffffffff, 0x0) write$UHID_INPUT(r3, &(0x7f0000001080)={0x8, {"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", 0x1000}}, 0x1006) 1.284725498s ago: executing program 4 (id=140): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100), 0x2, 0x500, &(0x7f0000000500)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f00000001c0)={0x0, 0x2904c, 0x2, 0x10003, '\x00', [{0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0xffffffff, 0x2, 0x0, 0x6}], ['\x00', '\x00']}) 1.225251689s ago: executing program 2 (id=142): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x800) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f00000001c0)={0x20, 0xff, 0x0, 0xfff, "00207d200fff0000201b14700c1e0ac74f000000001200000000000900"}) 1.224866109s ago: executing program 2 (id=143): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r3, 0x4068aea3, &(0x7f0000000280)) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x13, r4, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000000c0)={[0x79, 0x0, 0x3, 0x1, 0x1, 0xfffffffffffffffc, 0x2, 0x5, 0x9, 0x4, 0x2, 0x0, 0x2, 0x6, 0x4, 0x2], 0xf000, 0x82106}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000600)={0x2, 0x0, @ioapic={0x8080000, 0x2, 0x40, 0xdc47, 0x0, [{0x5, 0x9, 0x81, '\x00', 0x2}, {0x7, 0x7f, 0xbf, '\x00', 0x7}, {0x8, 0x4, 0x5, '\x00', 0x22}, {0x2, 0x3, 0x7f, '\x00', 0x8}, {0xff, 0xf, 0x5}, {0xe7, 0x7, 0x4, '\x00', 0x2}, {0x1, 0x33, 0x4, '\x00', 0x8}, {0x5, 0xe2, 0xe3, '\x00', 0xd4}, {0x9, 0xf5, 0x3, '\x00', 0x2}, {0x40, 0x8, 0x6}, {0x1, 0x2, 0x8, '\x00', 0x6}, {0x79, 0x0, 0x6, '\x00', 0x4}, {0x2, 0x69, 0x5, '\x00', 0x5}, {0x4, 0xf1, 0x5, '\x00', 0x1}, {0x0, 0x0, 0x5, '\x00', 0x5}, {0x2, 0x4d, 0x80, '\x00', 0xff}, {0xb, 0x7f, 0xe, '\x00', 0x5}, {0xc0, 0xf, 0xaa, '\x00', 0xf9}, {0x2, 0x1, 0x3, '\x00', 0xa}, {0x7, 0x4, 0x1, '\x00', 0x9}, {0x0, 0xa, 0xaa, '\x00', 0xc7}, {0x67, 0x4, 0xc7, '\x00', 0x1}, {0x7f, 0x4, 0x43, '\x00', 0x6}, {0x4, 0x8, 0x0, '\x00', 0x7}]}}) 1.221563589s ago: executing program 6 (id=144): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1) sendmsg$NL80211_CMD_DEL_KEY(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x28, r3, 0x1, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x4480}, 0x80040) 1.19389104s ago: executing program 6 (id=145): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_TX_RATES={0x8, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x4}]}, @NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME={0x6, 0xd, 0x4}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0x1ff}]}]}, 0x44}}, 0x0) 1.14567411s ago: executing program 6 (id=146): r0 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0xb, 0x0, 0x0) syz_mount_image$exfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000600)=ANY=[], 0x2, 0x14fe, &(0x7f0000002180)="$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") syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2000000000000070200"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) fsopen(&(0x7f0000000180)='proc\x00', 0x1) chdir(0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @empty}, 0x10) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r4, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 1.144365711s ago: executing program 2 (id=147): add_key$keyring(0x0, &(0x7f0000001100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) r0 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) recvmmsg(r0, &(0x7f0000003880)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}}], 0x3, 0x20, 0x0) 1.009680273s ago: executing program 2 (id=148): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x180018, &(0x7f0000000040)={[], [{@defcontext={'defcontext', 0x3d, 'staff_u'}}]}, 0xf5, 0x464, &(0x7f0000000f80)="$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") r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) 990.676573ms ago: executing program 4 (id=149): r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$USBDEVFS_CONNECTINFO(r0, 0x40085511, 0x0) 983.623723ms ago: executing program 1 (id=150): r0 = memfd_create(&(0x7f0000000380)='\x103q}2\x9a\xce\xaf\x03\xdfyR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7R\x94\xaf\xbb\xdcM\x90k\xd6\x05\r\x84\x87\x1e?\x10\x95SWFO{\x1f\x1b!\xd5\x991D\x1c\b\x8c`\xeaSA\x90m\xb6&\xd0\xf1\xb3\xed:\x82\xbd\xe3i|BL\x1f\x9d\x00\x00\xc5\xb8$\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\r\xd6h\x80\x8fQ|\xf5d\x10\x10\xd7\t\x00\x00\x00\x00\x00\x00\x00<\xfeeS\xb2l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfaa\xd3\xf1\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7~x\xb8vo\xe6\x15@\xc9\"CY\x11\xb9u\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D4E^7%8\x94y\x90\xf0l\xa0\'L%\xd4\xda\xee\x81\x98\xcc\xfd\xa2\x89$\x9by\xf1\xbb\x01\xb7\xcd\xbf\x99\x1f\x90@b\x03\xb3\xe0CfU\x16{\xbey\xa1cs\x96U\x11\xdb*\xdf\xcdG\xc7z\x85\x8aE\xf7\xd5\x9dAj\xe3\xfb\xc4\xa0\x14\x87\x19\x17\xed\xd1\x185%Q%\x81\xfaK\x82\xec=\xa3\xb8~\xb6O\xbd\x19*\xdb\x1c\x10\xa4\x8dIl\xc1\xceG\xd0h\xa1\xab:dP\xb6\xa0BR\xbe\x03\xac\xd9\x87\x00@\x80\x94\xd88\xc9\x03\x97\x17r\x85#\x7f\x8cu\x8f\xcc\x7fF\xb5\xea\xa6\xc1\x9d\xac\x89\xc9\xa1tuJw\xee\x1a\xe73\xa8\xadS\xd1\x11#d\xc2\xcfdj\x9ec\x93\xd5K\x90*_3\x89\v\xab\x04ih\x12\x93\xc5m\x8f~{\xe5\x85\xa5g\x00\x00\x00\xe45Q\xab%\xa8[\xf3\x17\x94\xf8\xdfq\xff\xd2?\xafW\xde\x1bW]\x1f\aaV\xc5\xc82*\xc7\xc5\"C}L\x10e\xc6\x90\xc0\xf9z\xb6+/d\x86\xf2\xbe\xc9:u\t\\e\x05)\xe4\xd2\xc4\x1a\xc9\xac\xdb\x925\x02\x94@\xa2\xe1\xee\x16\xb4\x98\xff\x0f\xbb\xb2\x81\xcf\x13g6l\xcc\xc8\x02\v\xa2\xb2\xf6\xbf@d\xcecC\x9fVz\xf4\x14\xa5\x8b|\xe1\xc0\xfa3X\xf4\xd9L\xe6\x8f\x9dy\x0fX.\xc5EQ\xd1/\xa1\xd0\x03>\xf0\x90\x13B\xe2\x97\x8b!\xf7\"\xecX\x92\xab\xbc^\xb2\x80@\xcc+\xbbp\xdc|N\xd3[=G\xb2\xe1\x9c\xc5\x81y\x84\xef\xacQ\x01\xdd\xe7<\xb8\xf1Hn\x86\xa6\xe3\x18N\x19\"[-\xdb\xef\xc3\xe0\xa8}', 0x0) writev(r0, 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, &(0x7f00000008c0)={0x3, {{0x2, 0x4e23, @private=0xa010101}}, {{0x2, 0x4e23, @local}}}, 0x108) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000340)=""/225, &(0x7f0000000180)=0xe1) timer_create(0x0, 0x0, 0x0) r1 = syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x513, &(0x7f0000000c40)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='freezer.state\x00', 0x275a, 0x0) getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x3) read$FUSE(0xffffffffffffffff, 0x0, 0x0) keyctl$session_to_parent(0x12) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$UHID_CREATE(r4, &(0x7f0000000b00)={0x0, {'syz1\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000040)=""/15, 0xf, 0xa0, 0x8, 0x1, 0x5, 0x1635}}, 0x120) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10030, 0xffffffffffffffff, 0x0) open_tree(r1, &(0x7f0000000080)='./file1\x00', 0x81000) 881.543125ms ago: executing program 4 (id=151): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000080), 0x81, 0x7a5, &(0x7f0000000f80)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x201) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105042, 0x40) write$cgroup_subtree(r2, 0x0, 0x32600) 527.145361ms ago: executing program 4 (id=152): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00'}, 0x10) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r0}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) rt_tgsigqueueinfo(0x0, 0x0, 0x24, &(0x7f00000002c0)={0x114, 0xfffffffd, 0x8}) creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) 499.787811ms ago: executing program 2 (id=153): r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000001080)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) 409.615853ms ago: executing program 2 (id=154): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f00000003c0), 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000840)=@bpf_lsm={0x1d, 0x0, &(0x7f0000000000), 0x0, 0x7, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, 0x1b, r2, 0x8, &(0x7f00000004c0)={0x3, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0), 0x10, 0x79f, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0}, 0x18) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) unshare(0x40000000) writev(r1, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) 265.899185ms ago: executing program 6 (id=155): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000000)=0x1a, 0x4) 0s ago: executing program 6 (id=156): unshare(0x2040400) unshare(0x2040400) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.144' (ED25519) to the list of known hosts. [ 25.363385][ T30] audit: type=1400 audit(1744869029.448:66): avc: denied { integrity } for pid=283 comm="syz-executor" lockdown_reason="debugfs access" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=lockdown permissive=1 [ 25.387150][ T30] audit: type=1400 audit(1744869029.468:67): avc: denied { mounton } for pid=283 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 25.388979][ T283] cgroup: Unknown subsys name 'net' [ 25.410070][ T30] audit: type=1400 audit(1744869029.468:68): avc: denied { mount } for pid=283 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 25.436769][ T283] cgroup: Unknown subsys name 'devices' [ 25.436795][ T30] audit: type=1400 audit(1744869029.498:69): avc: denied { unmount } for pid=283 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 25.644343][ T283] cgroup: Unknown subsys name 'hugetlb' [ 25.649913][ T283] cgroup: Unknown subsys name 'rlimit' [ 25.909989][ T30] audit: type=1400 audit(1744869029.988:70): avc: denied { setattr } for pid=283 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 25.932997][ T30] audit: type=1400 audit(1744869029.988:71): avc: denied { mounton } for pid=283 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 25.957540][ T30] audit: type=1400 audit(1744869029.988:72): avc: denied { mount } for pid=283 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 25.965334][ T286] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 25.989251][ T30] audit: type=1400 audit(1744869030.068:73): avc: denied { relabelto } for pid=286 comm="mkswap" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 26.014495][ T30] audit: type=1400 audit(1744869030.068:74): avc: denied { write } for pid=286 comm="mkswap" path="/root/swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 26.066960][ T30] audit: type=1400 audit(1744869030.148:75): avc: denied { read } for pid=283 comm="syz-executor" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 26.092413][ T283] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 26.983189][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.990052][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.997416][ T293] device bridge_slave_0 entered promiscuous mode [ 27.004259][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.011106][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.018617][ T293] device bridge_slave_1 entered promiscuous mode [ 27.159233][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.166103][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.173517][ T294] device bridge_slave_0 entered promiscuous mode [ 27.180225][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.187141][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.194315][ T294] device bridge_slave_1 entered promiscuous mode [ 27.221658][ T297] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.228538][ T297] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.235907][ T297] device bridge_slave_0 entered promiscuous mode [ 27.257497][ T297] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.264411][ T297] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.271637][ T297] device bridge_slave_1 entered promiscuous mode [ 27.286865][ T298] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.293807][ T298] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.300952][ T298] device bridge_slave_0 entered promiscuous mode [ 27.321836][ T298] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.328740][ T298] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.336033][ T298] device bridge_slave_1 entered promiscuous mode [ 27.350488][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.357631][ T293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.364768][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.371600][ T293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.419485][ T299] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.426474][ T299] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.433832][ T299] device bridge_slave_0 entered promiscuous mode [ 27.450134][ T299] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.457067][ T299] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.464329][ T299] device bridge_slave_1 entered promiscuous mode [ 27.581010][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.588325][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.598172][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 27.605507][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 27.625173][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 27.633261][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.640099][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.653218][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 27.661283][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.668157][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.691770][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 27.705747][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 27.751685][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 27.768554][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 27.776713][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.783592][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.791092][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 27.806943][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 27.815843][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 27.824160][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.831002][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.838434][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 27.857541][ T293] device veth0_vlan entered promiscuous mode [ 27.872443][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 27.880635][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 27.888064][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 27.895621][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 27.904641][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 27.912104][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 27.920057][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.926912][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.934111][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 27.942132][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.948965][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.956283][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 27.964370][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.971198][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.978616][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 27.986591][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.993439][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.000651][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 28.008713][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.015560][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.023041][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 28.030956][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 28.038975][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 28.046908][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 28.054878][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 28.062440][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 28.069942][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 28.091580][ T293] device veth1_macvtap entered promiscuous mode [ 28.102650][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 28.110895][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 28.119137][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.126013][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.133337][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 28.141272][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 28.149540][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 28.157192][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 28.165414][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 28.173686][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 28.181320][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 28.189287][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 28.196698][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 28.209269][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 28.217503][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 28.225790][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 28.234935][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 28.244391][ T299] device veth0_vlan entered promiscuous mode [ 28.253126][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 28.261166][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 28.269276][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 28.277270][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 28.292620][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 28.300584][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 28.309735][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 28.317902][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 28.339488][ T293] request_module fs-gadgetfs succeeded, but still no fs? [ 28.348100][ T299] device veth1_macvtap entered promiscuous mode [ 28.357915][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 28.366582][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 28.378390][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 28.386640][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 28.395163][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 28.403436][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 28.411339][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 28.425017][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 28.432428][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 28.439638][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 28.448162][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 28.456539][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 28.464838][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 28.473999][ T298] device veth0_vlan entered promiscuous mode [ 28.485538][ T297] device veth0_vlan entered promiscuous mode [ 28.494012][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 28.502597][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 28.510599][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 28.518934][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 28.527201][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 28.535616][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 28.545489][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 28.552860][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 28.568666][ T297] device veth1_macvtap entered promiscuous mode [ 28.577005][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 28.585119][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 28.593400][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 28.600899][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 28.609169][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 28.617378][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 28.625763][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 28.633883][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 28.641238][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 28.649280][ T294] device veth0_vlan entered promiscuous mode [ 28.658852][ T298] device veth1_macvtap entered promiscuous mode [ 28.665175][ T20] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 28.676304][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 28.684068][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 28.693092][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 28.701260][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 28.709564][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 28.717975][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 28.726253][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 28.734707][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 28.743062][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 28.774717][ T294] device veth1_macvtap entered promiscuous mode [ 28.784535][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 28.792656][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 28.800722][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 28.820218][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 28.820491][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 28.822813][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 28.823084][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 28.850940][ T325] loop1: detected capacity change from 0 to 512 [ 28.854439][ T329] loop2: detected capacity change from 0 to 128 [ 28.891686][ T323] loop3: detected capacity change from 0 to 128 [ 28.898420][ T325] ======================================================= [ 28.898420][ T325] WARNING: The mand mount option has been deprecated and [ 28.898420][ T325] and is ignored by this kernel. Remove the mand [ 28.898420][ T325] option from the mount to silence this warning. [ 28.898420][ T325] ======================================================= [ 28.908324][ T331] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 28.954803][ T325] EXT4-fs (loop1): orphan cleanup on readonly fs [ 28.961626][ T325] EXT4-fs error (device loop1): ext4_acquire_dquot:6195: comm syz.1.2: Failed to acquire dquot type 1 [ 28.972578][ T20] usb 1-1: Using ep0 maxpacket: 8 [ 28.978861][ T325] EXT4-fs (loop1): 1 truncate cleaned up [ 28.985133][ T325] EXT4-fs (loop1): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,abort,noload,nodiscard,,errors=continue. Quota mode: writeback. [ 29.015153][ T325] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2'. [ 29.018774][ T329] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 29.034413][ T329] ext4 filesystem being mounted at /0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 29.132057][ T20] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 29.136257][ T343] loop3: detected capacity change from 0 to 512 [ 29.148630][ T20] usb 1-1: config 0 has no interfaces? [ 29.154610][ T20] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 29.164204][ T20] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 29.177094][ T20] usb 1-1: config 0 descriptor?? [ 29.205518][ T343] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 29.243577][ T343] EXT4-fs (loop3): 1 orphan inode deleted [ 29.249310][ T343] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 29.263089][ T343] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 29.436852][ T303] hid-generic 00A0:0008:0001.0001: unknown main item tag 0x0 [ 29.473603][ T303] hid-generic 00A0:0008:0001.0001: unknown main item tag 0x0 [ 29.511277][ T303] hid-generic 00A0:0008:0001.0001: unknown main item tag 0x0 [ 29.534679][ T303] hid-generic 00A0:0008:0001.0001: unknown main item tag 0x0 [ 29.545485][ T303] hid-generic 00A0:0008:0001.0001: unknown main item tag 0x0 [ 29.555159][ T303] hid-generic 00A0:0008:0001.0001: unknown main item tag 0x0 [ 29.563775][ T303] hid-generic 00A0:0008:0001.0001: unknown main item tag 0x0 [ 29.582079][ T303] hid-generic 00A0:0008:0001.0001: unknown main item tag 0x0 [ 29.589477][ T303] hid-generic 00A0:0008:0001.0001: unknown main item tag 0x0 [ 29.597660][ T303] hid-generic 00A0:0008:0001.0001: unknown main item tag 0x0 [ 29.605071][ T303] hid-generic 00A0:0008:0001.0001: unknown main item tag 0x0 [ 29.612482][ T303] hid-generic 00A0:0008:0001.0001: unknown main item tag 0x0 [ 29.619799][ T303] hid-generic 00A0:0008:0001.0001: unknown main item tag 0x0 [ 29.627290][ T303] hid-generic 00A0:0008:0001.0001: unknown main item tag 0x0 [ 29.634693][ T303] hid-generic 00A0:0008:0001.0001: unknown main item tag 0x0 [ 29.666926][ T303] hid-generic 00A0:0008:0001.0001: hidraw0: HID v0.05 Device [syz1] on syz0 [ 29.684864][ T39] usb 1-1: USB disconnect, device number 2 [ 29.729604][ T362] loop1: detected capacity change from 0 to 512 [ 29.736541][ T362] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 29.758857][ T362] EXT4-fs (loop1): mounted filesystem without journal. Opts: quota,dioread_nolock,quota,,errors=continue. Quota mode: writeback. [ 29.762908][ T366] loop3: detected capacity change from 0 to 1024 [ 29.772812][ T362] ext4 filesystem being mounted at /4/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 29.778378][ T6] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 30.519587][ T30] kauditd_printk_skb: 76 callbacks suppressed [ 30.519604][ T30] audit: type=1400 audit(1744869034.598:150): avc: denied { create } for pid=361 comm="syz.1.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 30.582680][ T30] audit: type=1400 audit(1744869034.598:151): avc: denied { getopt } for pid=361 comm="syz.1.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 30.583347][ T366] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 30.751946][ T6] usb 3-1: Using ep0 maxpacket: 8 [ 30.767574][ T379] loop0: detected capacity change from 0 to 512 [ 30.801473][ T379] EXT4-fs (loop0): Ignoring removed oldalloc option [ 30.830391][ T30] audit: type=1400 audit(1744869034.908:152): avc: denied { write } for pid=364 comm="syz.3.15" name="001" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 30.854740][ T379] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.17: error while reading EA inode 32 err=-116 [ 30.867111][ T379] EXT4-fs (loop0): Remounting filesystem read-only [ 30.883395][ T379] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2816: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 30.903698][ T383] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:3876: comm syz.3.15: Allocating blocks 465-513 which overlap fs metadata [ 30.917387][ T6] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 30.934836][ T6] usb 3-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 30.949101][ T382] loop1: detected capacity change from 0 to 512 [ 30.955401][ T379] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.17: error while reading EA inode 32 err=-116 [ 30.968549][ T383] EXT4-fs (loop3): pa ffff88811114aa80: logic 256, phys. 369, len 9 [ 30.976444][ T383] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:4893: group 0, free 0, pa_free 3 [ 30.986408][ T6] usb 3-1: config 179 has no interface number 0 [ 30.993449][ T383] EXT4-fs error (device loop3): mb_free_blocks:1865: group 0, inode 18: block 113:freeing already freed block (bit 7); block bitmap corrupt. [ 30.993549][ T379] EXT4-fs (loop0): Remounting filesystem read-only [ 30.993640][ T379] EXT4-fs (loop0): 1 orphan inode deleted [ 30.993658][ T379] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,bsdgroups,debug_want_extra_isize=0x000000000000005e,noauto_da_alloc,bsdgroups,oldalloc,nojournal_checksum,. Quota mode: none. [ 30.998907][ T379] EXT4-fs error (device loop0): ext4_lookup:1862: inode #2: comm syz.0.17: deleted inode referenced: 15 [ 31.013020][ T6] usb 3-1: config 179 interface 65 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 23 [ 31.019204][ T379] EXT4-fs (loop0): Remounting filesystem read-only [ 31.024698][ T6] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 31.046784][ T387] loop4: detected capacity change from 0 to 128 [ 31.055440][ T6] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 31.080232][ T379] EXT4-fs error (device loop0): ext4_remount:5846: comm syz.0.17: Abort forced by user [ 31.106598][ T30] audit: type=1400 audit(1744869035.148:153): avc: denied { mounton } for pid=378 comm="syz.0.17" path="/1/file0/file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 31.130365][ T30] audit: type=1400 audit(1744869035.158:154): avc: denied { remount } for pid=378 comm="syz.0.17" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 31.138306][ T379] EXT4-fs (loop0): Remounting filesystem read-only [ 31.151139][ T382] EXT4-fs error (device loop1): ext4_orphan_get:1401: inode #15: comm syz.1.18: casefold flag without casefold feature [ 31.168108][ T382] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.18: couldn't read orphan inode 15 (err -117) [ 31.183193][ T382] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 31.190794][ T293] EXT4-fs error (device loop0): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0 [ 31.213581][ T293] EXT4-fs (loop0): Remounting filesystem read-only [ 31.220381][ T30] audit: type=1400 audit(1744869035.298:155): avc: denied { remove_name } for pid=293 comm="syz-executor" name="lost+found" dev="loop0" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 31.220505][ T293] EXT4-fs error (device loop0): ext4_lookup:1862: inode #2: comm syz-executor: deleted inode referenced: 15 [ 31.243323][ T30] audit: type=1400 audit(1744869035.298:156): avc: denied { unlink } for pid=293 comm="syz-executor" name="lost+found" dev="loop0" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 [ 31.255082][ T293] EXT4-fs (loop0): Remounting filesystem read-only [ 31.284233][ T293] EXT4-fs error (device loop0): ext4_lookup:1862: inode #2: comm syz-executor: deleted inode referenced: 15 [ 31.311928][ T30] audit: type=1400 audit(1744869035.388:157): avc: denied { map } for pid=393 comm="syz.1.22" path="/dev/bus/usb/003/001" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 31.321917][ T293] EXT4-fs (loop0): Remounting filesystem read-only [ 31.385677][ T30] audit: type=1400 audit(1744869035.468:158): avc: denied { create } for pid=397 comm="syz.3.23" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 31.453030][ T293] syz-executor (293) used greatest stack depth: 19296 bytes left [ 31.887869][ T30] audit: type=1400 audit(1744869035.598:159): avc: denied { bpf } for pid=397 comm="syz.3.23" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 32.139098][ T413] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.146204][ T413] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.153653][ T413] device bridge_slave_0 entered promiscuous mode [ 32.160422][ T413] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.167581][ T413] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.174952][ T413] device bridge_slave_1 entered promiscuous mode [ 32.243385][ T413] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.250278][ T413] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.257428][ T413] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.264299][ T413] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.284610][ T422] loop3: detected capacity change from 0 to 512 [ 32.297762][ T408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.305145][ T6] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 32.312654][ T408] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.321600][ T422] EXT4-fs error (device loop3): ext4_orphan_get:1427: comm syz.3.31: bad orphan inode 15 [ 32.331540][ T408] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.331636][ T422] ext4_test_bit(bit=14, block=18) = 1 [ 32.343947][ T422] is_bad_inode(inode)=0 [ 32.347967][ T422] NEXT_ORPHAN(inode)=1023 [ 32.352683][ T390] device bridge_slave_1 left promiscuous mode [ 32.352700][ T422] max_ino=32 [ 32.358968][ T390] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.361696][ T422] i_nlink=0 [ 32.371643][ T422] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2932: inode #15: comm syz.3.31: corrupted xattr block 19 [ 32.371658][ T390] device bridge_slave_0 left promiscuous mode [ 32.371939][ T390] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.385043][ T422] EXT4-fs warning (device loop3): ext4_evict_inode:303: xattr delete (err -117) [ 32.405384][ T422] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 32.415851][ T303] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 32.416231][ T422] ext4 filesystem being mounted at /6/éq‰Y’3aK supports timestamps until 2038-01-19 (0x7fffffff) [ 32.433886][ T390] device veth1_macvtap left promiscuous mode [ 32.442006][ T390] device veth0_vlan left promiscuous mode [ 32.470038][ T299] EXT4-fs error (device loop3): ext4_readdir:263: inode #2: block 3: comm syz-executor: path /6/éq‰Y’3aK: bad entry in directory: rec_len is smaller than minimal - offset=60, inode=458767, rec_len=0, size=4096 fake=0 [ 32.492678][ T299] EXT4-fs error (device loop3): ext4_ext_check_inode:501: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 32.511368][ T299] EXT4-fs error (device loop3): ext4_ext_check_inode:501: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 32.551848][ T39] usb 3-1: USB disconnect, device number 2 [ 32.561995][ T6] usb 5-1: Using ep0 maxpacket: 8 [ 32.576380][ T408] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.584744][ T408] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.591600][ T408] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.598898][ T408] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.607388][ T408] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.614264][ T408] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.626969][ T428] loop2: detected capacity change from 0 to 512 [ 32.633356][ T408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 32.641335][ T408] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.649405][ T408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 32.657523][ T408] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.671539][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 32.679800][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 32.690991][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 32.692047][ T6] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 32.699325][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 32.716615][ T6] usb 5-1: config 0 has no interfaces? [ 32.731240][ T6] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 32.737090][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 32.747485][ T6] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 32.758077][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 32.760351][ T6] usb 5-1: config 0 descriptor?? [ 32.772201][ T413] device veth0_vlan entered promiscuous mode [ 32.772745][ T428] EXT4-fs (loop2): 1 orphan inode deleted [ 32.785252][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 32.793768][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 32.793832][ T428] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 32.803478][ T413] device veth1_macvtap entered promiscuous mode [ 32.823264][ T428] ext4 filesystem being mounted at /5/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 32.842297][ T303] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 32.853592][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 32.861066][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 32.870827][ T303] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 32.878286][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 32.880756][ T303] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 32.889428][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 32.901837][ T303] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 32.910609][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 32.918778][ T303] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 32.938228][ T303] usb 2-1: config 0 descriptor?? [ 33.095171][ T377] usb 5-1: USB disconnect, device number 2 [ 33.156473][ T432] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.166916][ T434] hid-generic 00A0:0008:0001.0002: unknown main item tag 0x0 [ 33.174179][ T434] hid-generic 00A0:0008:0001.0002: unknown main item tag 0x0 [ 33.176563][ T432] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.181438][ T434] hid-generic 00A0:0008:0001.0002: unknown main item tag 0x0 [ 33.189607][ T432] device bridge_slave_0 entered promiscuous mode [ 33.195461][ T434] hid-generic 00A0:0008:0001.0002: unknown main item tag 0x0 [ 33.209029][ T434] hid-generic 00A0:0008:0001.0002: unknown main item tag 0x0 [ 33.223439][ T432] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.227161][ T434] hid-generic 00A0:0008:0001.0002: unknown main item tag 0x0 [ 33.230302][ T432] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.237948][ T434] hid-generic 00A0:0008:0001.0002: unknown main item tag 0x0 [ 33.245310][ T432] device bridge_slave_1 entered promiscuous mode [ 33.252354][ T434] hid-generic 00A0:0008:0001.0002: unknown main item tag 0x0 [ 33.272009][ T434] hid-generic 00A0:0008:0001.0002: unknown main item tag 0x0 [ 33.286157][ T434] hid-generic 00A0:0008:0001.0002: unknown main item tag 0x0 [ 33.299121][ T434] hid-generic 00A0:0008:0001.0002: unknown main item tag 0x0 [ 33.315079][ T434] hid-generic 00A0:0008:0001.0002: unknown main item tag 0x0 [ 33.317196][ T447] incfs: iterate_incfs_dir / -22 [ 33.322676][ T434] hid-generic 00A0:0008:0001.0002: unknown main item tag 0x2 [ 33.334930][ T434] hid-generic 00A0:0008:0001.0002: unknown main item tag 0x0 [ 33.347114][ T434] hid-generic 00A0:0008:0001.0002: hidraw0: HID v0.05 Device [syz1] on syz0 [ 33.445439][ T432] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.452340][ T432] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.459424][ T432] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.466227][ T432] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.493010][ T303] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 33.500541][ T303] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 33.512199][ T303] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 33.519430][ T303] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 33.526976][ T303] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 33.541659][ T408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 33.549310][ T408] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 33.557421][ T303] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 33.557655][ T408] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 33.564967][ T303] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 33.579843][ T303] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 33.587373][ T303] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 33.594944][ T303] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 33.603323][ T303] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 33.610893][ T408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 33.619003][ T408] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 33.621832][ T303] plantronics 0003:047F:FFFF.0003: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 33.627349][ T408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 33.651935][ T377] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 33.659764][ T408] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 33.668410][ T462] loop4: detected capacity change from 0 to 128 [ 33.675158][ T458] netlink: 12 bytes leftover after parsing attributes in process `syz.2.44'. [ 33.690287][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.699382][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.720426][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.721263][ T462] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 33.728407][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.738711][ T462] ext4 filesystem being mounted at /6/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 33.747413][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.790722][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.793410][ T376] usb 2-1: USB disconnect, device number 2 [ 33.803603][ T432] device veth0_vlan entered promiscuous mode [ 33.818401][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.829671][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.840130][ T432] device veth1_macvtap entered promiscuous mode [ 33.857921][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.866703][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.871066][ T465] loop4: detected capacity change from 0 to 16 [ 33.875431][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.892784][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.901022][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.902095][ T377] usb 6-1: Using ep0 maxpacket: 16 [ 33.924535][ T465] erofs: (device loop4): mounted with root inode @ nid 36. [ 33.949344][ T467] loop6: detected capacity change from 0 to 512 [ 33.964502][ T467] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 33.982931][ T471] loop4: detected capacity change from 0 to 128 [ 33.989112][ T467] EXT4-fs (loop6): 1 truncate cleaned up [ 33.994719][ T467] EXT4-fs (loop6): mounted filesystem without journal. Opts: nogrpid,min_batch_time=0x0000000000000004,debug_want_extra_isize=0x0000000000000068,nobarrier,nodiscard,quota,,errors=continue. Quota mode: writeback. [ 34.024569][ T390] device bridge_slave_1 left promiscuous mode [ 34.032036][ T377] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 34.032187][ T390] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.040151][ T377] usb 6-1: config 0 has no interface number 0 [ 34.053056][ T377] usb 6-1: config 0 interface 2 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 34.060742][ T471] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 34.063811][ T377] usb 6-1: config 0 interface 2 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 34.063837][ T377] usb 6-1: config 0 interface 2 has no altsetting 0 [ 34.063864][ T377] usb 6-1: New USB device found, idVendor=046d, idProduct=c517, bcdDevice= 0.08 [ 34.063887][ T377] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 34.065563][ T377] usb 6-1: config 0 descriptor?? [ 34.083357][ T471] ext4 filesystem being mounted at /8/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 34.084774][ T467] EXT4-fs error (device loop6): mb_free_blocks:1865: group 0, [ 34.090732][ T390] device bridge_slave_0 left promiscuous mode [ 34.099287][ T467] inode 16: block 33:freeing already freed block (bit 32); block bitmap corrupt. [ 34.099508][ T467] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #16: comm syz.6.36: invalid indirect mapped block 6 (level 1) [ 34.126521][ T471] EXT4-fs error (device loop4): dx_make_map:1328: inode #2: block 20: comm syz.4.47: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=1 [ 34.144669][ T390] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.151662][ T471] EXT4-fs error (device loop4) in do_split:2095: Corrupt filesystem [ 34.212334][ T390] device veth1_macvtap left promiscuous mode [ 34.213489][ T473] EXT4-fs error (device loop4): dx_make_map:1328: inode #2: block 20: comm syz.4.47: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=1 [ 34.218490][ T390] device veth0_vlan left promiscuous mode [ 34.241685][ T473] EXT4-fs error (device loop4) in do_split:2095: Corrupt filesystem [ 34.291389][ T477] loop4: detected capacity change from 0 to 256 [ 34.300497][ T477] exfat: Deprecated parameter 'namecase' [ 34.306312][ T477] exfat: Deprecated parameter 'namecase' [ 34.345261][ T477] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d) [ 34.345451][ T482] loop6: detected capacity change from 0 to 512 [ 34.367576][ T477] incfs: ino conflict with backing FS 1 [ 34.407255][ T482] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 34.446115][ T491] binder: 489:491 ioctl c0306201 0 returned -14 [ 34.453328][ T482] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.51: bg 0: block 384: padding at end of block bitmap is not set [ 34.470657][ T482] EXT4-fs (loop6): Remounting filesystem read-only [ 34.488526][ T482] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 34.506709][ T482] EXT4-fs (loop6): Remounting filesystem read-only [ 34.514651][ T482] EXT4-fs error (device loop6): ext4_clear_blocks:883: inode #11: comm syz.6.51: attempt to clear invalid blocks 983260 len 1 [ 34.515159][ T495] loop2: detected capacity change from 0 to 128 [ 34.534421][ T482] EXT4-fs (loop6): Remounting filesystem read-only [ 34.544402][ T482] EXT4-fs error (device loop6): __ext4_get_inode_loc:4351: comm syz.6.51: Invalid inode table block 0 in block_group 0 [ 34.557189][ T482] EXT4-fs (loop6): Remounting filesystem read-only [ 34.559977][ T502] netlink: 12 bytes leftover after parsing attributes in process `syz.4.59'. [ 34.563897][ T482] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5837: Corrupt filesystem [ 34.584743][ T482] EXT4-fs (loop6): Remounting filesystem read-only [ 34.591139][ T482] EXT4-fs error (device loop6) in ext4_orphan_del:305: Corrupt filesystem [ 34.600893][ T504] loop4: detected capacity change from 0 to 512 [ 34.609377][ T377] logitech-djreceiver 0003:046D:C517.0004: item fetching failed at offset 1/5 [ 34.613181][ T482] EXT4-fs (loop6): Remounting filesystem read-only [ 34.618652][ T504] EXT4-fs (loop4): ea_inode feature is not supported for Hurd [ 34.632155][ T482] EXT4-fs error (device loop6): __ext4_get_inode_loc:4351: comm syz.6.51: Invalid inode table block 0 in block_group 0 [ 34.640455][ T495] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 34.655603][ T377] logitech-djreceiver 0003:046D:C517.0004: logi_dj_probe: parse failed [ 34.662021][ T482] EXT4-fs (loop6): Remounting filesystem read-only [ 34.664398][ T377] logitech-djreceiver: probe of 0003:046D:C517.0004 failed with error -22 [ 34.678506][ T495] ext4 filesystem being mounted at /11/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 34.681383][ T482] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5837: Corrupt filesystem [ 34.698541][ T482] EXT4-fs (loop6): Remounting filesystem read-only [ 34.705853][ T482] EXT4-fs error (device loop6): ext4_truncate:4303: inode #11: comm syz.6.51: mark_inode_dirty error [ 34.712011][ T495] fscrypt: Adiantum using implementation "adiantum(xchacha12-simd,aes-aesni,nhpoly1305-generic)" [ 34.717419][ T482] EXT4-fs (loop6): Remounting filesystem read-only [ 34.733537][ T482] EXT4-fs error (device loop6) in ext4_process_orphan:347: Corrupt filesystem [ 34.744428][ T482] EXT4-fs (loop6): Remounting filesystem read-only [ 34.750918][ T482] EXT4-fs (loop6): 1 truncate cleaned up [ 34.756655][ T482] EXT4-fs (loop6): mounted filesystem without journal. Opts: errors=remount-ro,resuid=0x0000000000000000,max_dir_size_kb=0x00000000000001ff,noblock_validity,. Quota mode: none. [ 34.781017][ T482] EXT4-fs error (device loop6): __ext4_get_inode_loc:4351: comm syz.6.51: Invalid inode table block 0 in block_group 0 [ 34.793825][ T482] EXT4-fs (loop6): Remounting filesystem read-only [ 34.800229][ T482] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5837: Corrupt filesystem [ 34.824756][ T482] EXT4-fs (loop6): Remounting filesystem read-only [ 34.856452][ T377] usb 6-1: USB disconnect, device number 2 [ 34.864019][ T509] netlink: 'syz.2.61': attribute type 2 has an invalid length. [ 34.889616][ T512] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 34.950033][ T520] loop6: detected capacity change from 0 to 2048 [ 35.044026][ T520] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 35.202003][ T434] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 35.223700][ T527] loop6: detected capacity change from 0 to 1024 [ 35.312549][ T527] EXT4-fs (loop6): Ignoring removed orlov option [ 35.323979][ T527] EXT4-fs (loop6): mounted filesystem without journal. Opts: jqfmt=vfsv1,bsddf,quota,noauto_da_alloc,debug_want_extra_isize=0x0000000000000080,lazytime,noauto_da_alloc,stripe=0x0000000000000005,orlov,,errors=continue. Quota mode: writeback. [ 35.339578][ T537] Zero length message leads to an empty skb [ 35.400939][ T539] loop5: detected capacity change from 0 to 1024 [ 35.412977][ T543] loop1: detected capacity change from 0 to 512 [ 35.422896][ T543] EXT4-fs (loop1): Mount option "noacl" will be removed by 3.5 [ 35.422896][ T543] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 35.422896][ T543] [ 35.440552][ T543] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 35.450040][ T543] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 35.463736][ T543] [EXT4 FS bs=4096, gc=1, bpg=3008, ipg=32, mo=80026018, mo2=0000] [ 35.487602][ T539] EXT4-fs (loop5): Mount option "nouser_xattr" will be removed by 3.5 [ 35.487602][ T539] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 35.487602][ T539] [ 35.508132][ T543] EXT4-fs (loop1): 1 truncate cleaned up [ 35.517165][ T543] EXT4-fs (loop1): mounted filesystem without journal. Opts: nobarrier,noblock_validity,nobarrier,acl,barrier=0x000000000000000f,noacl,nodiscard,jqfmt=vfsold,resgid=0x00000000000000002,errors=continue. Quota mode: writeback. [ 35.530062][ T377] hid-generic 00A0:0008:0001.0005: unknown main item tag 0x0 [ 35.546338][ T377] hid-generic 00A0:0008:0001.0005: unknown main item tag 0x0 [ 35.548578][ T390] __quota_error: 55 callbacks suppressed [ 35.548596][ T390] Quota error (device loop1): free_dqentry: Quota structure has offset to other block (1) than it should (5) [ 35.557734][ T377] hid-generic 00A0:0008:0001.0005: unknown main item tag 0x0 [ 35.561688][ T390] EXT4-fs error (device loop1): ext4_release_dquot:6218: comm kworker/u4:4: Failed to release dquot type 1 [ 35.571060][ T377] hid-generic 00A0:0008:0001.0005: unknown main item tag 0x0 [ 35.579690][ T543] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1054: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 35.589813][ T377] hid-generic 00A0:0008:0001.0005: unknown main item tag 0x0 [ 35.597320][ T434] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 35.611693][ T543] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:3876: comm syz.1.74: Allocating blocks 43-55 which overlap fs metadata [ 35.618049][ T434] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 35.629049][ T539] EXT4-fs (loop5): mounted filesystem without journal. Opts: usrjquota=,max_dir_size_kb=0x0000000000000001,jqfmt=vfsv1,norecovery,discard,lazytime,noload,usrquota,nouser_xattr,,errors=continue. Quota mode: writeback. [ 35.646892][ T542] EXT4-fs (loop1): pa ffff888128e4ff18: logic 20, phys. 43, len 21 [ 35.649806][ T377] hid-generic 00A0:0008:0001.0005: unknown main item tag 0x0 [ 35.670566][ T542] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:4893: group 0, free 9, pa_free 21 [ 35.689135][ T377] hid-generic 00A0:0008:0001.0005: unknown main item tag 0x0 [ 35.702871][ T377] hid-generic 00A0:0008:0001.0005: unknown main item tag 0x0 [ 35.710302][ T377] hid-generic 00A0:0008:0001.0005: unknown main item tag 0x0 [ 35.717824][ T377] hid-generic 00A0:0008:0001.0005: unknown main item tag 0x0 [ 35.725239][ T377] hid-generic 00A0:0008:0001.0005: unknown main item tag 0x0 [ 35.732663][ T377] hid-generic 00A0:0008:0001.0005: unknown main item tag 0x0 [ 35.739854][ T377] hid-generic 00A0:0008:0001.0005: unknown main item tag 0x0 [ 35.747139][ T377] hid-generic 00A0:0008:0001.0005: unknown main item tag 0x0 [ 35.754325][ T377] hid-generic 00A0:0008:0001.0005: unknown main item tag 0x0 [ 35.763203][ T377] hid-generic 00A0:0008:0001.0005: hidraw0: HID v0.05 Device [syz1] on syz0 [ 35.776432][ T561] binder: 559:561 ioctl c0306201 0 returned -14 [ 35.792337][ T303] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 35.799997][ T563] loop4: detected capacity change from 0 to 512 [ 35.813126][ T563] EXT4-fs (loop4): Mount option "nouser_xattr" will be removed by 3.5 [ 35.813126][ T563] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 35.813126][ T563] [ 35.816542][ T565] loop5: detected capacity change from 0 to 512 [ 35.835895][ T563] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 35.846117][ T563] EXT4-fs (loop4): invalid journal inode [ 35.846295][ T434] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 35.851667][ T563] EXT4-fs (loop4): can't get journal size [ 35.861028][ T434] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 35.867131][ T563] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a0168118, mo2=0002] [ 35.874069][ T434] usb 3-1: Product: syz [ 35.881723][ T563] System zones: [ 35.885649][ T434] usb 3-1: Manufacturer: syz [ 35.885996][ T563] 1-12 [ 35.889176][ T434] usb 3-1: SerialNumber: syz [ 35.898319][ T563] , 13-13 [ 35.903587][ T565] EXT4-fs (loop5): Test dummy encryption mode enabled [ 35.910297][ T565] EXT4-fs (loop5): Test dummy encryption mode enabled [ 35.910305][ T563] EXT4-fs (loop4): 1 truncate cleaned up [ 35.910323][ T563] EXT4-fs (loop4): mounted filesystem without journal. Opts: norecovery,grpquota,debug,nouser_xattr,,errors=continue. Quota mode: writeback. [ 35.946010][ T565] EXT4-fs (loop5): fragment/cluster size (65536) != block size (1024) [ 36.062036][ T303] usb 7-1: Using ep0 maxpacket: 8 [ 36.086159][ T577] loop5: detected capacity change from 0 to 1024 [ 36.114183][ T579] loop4: detected capacity change from 0 to 512 [ 36.133747][ T577] EXT4-fs (loop5): Ignoring removed nobh option [ 36.139900][ T577] EXT4-fs (loop5): Ignoring removed bh option [ 36.146192][ T577] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 36.148563][ T579] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 36.163797][ T577] EXT4-fs (loop5): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 36.194725][ T303] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 36.203193][ T303] usb 7-1: config 179 has no interface number 0 [ 36.209519][ T303] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 36.220575][ T303] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 36.231971][ T303] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 36.234411][ T577] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:3876: comm syz.5.86: Allocating blocks 497-513 which overlap fs metadata [ 36.243348][ T303] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 36.268101][ T303] usb 7-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 36.281317][ T303] usb 7-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 36.290195][ T303] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 36.312105][ T552] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 36.340881][ T30] audit: type=1400 audit(1744869040.418:215): avc: denied { map } for pid=583 comm="syz.4.88" path="socket:[17239]" dev="sockfs" ino=17239 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 36.372730][ T30] audit: type=1400 audit(1744869040.458:216): avc: denied { create } for pid=585 comm="syz.4.90" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 36.397069][ T588] loop5: detected capacity change from 0 to 1024 [ 36.403767][ T30] audit: type=1400 audit(1744869040.478:217): avc: denied { read } for pid=585 comm="syz.4.90" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 36.422646][ T590] loop4: detected capacity change from 0 to 512 [ 36.423353][ T434] usb 3-1: cannot find UAC_HEADER [ 36.434297][ T434] snd-usb-audio: probe of 3-1:1.0 failed with error -22 [ 36.463924][ T590] Quota error (device loop4): dq_insert_tree: Quota tree root isn't allocated! [ 36.472761][ T590] Quota error (device loop4): qtree_write_dquot: Error -5 occurred while creating quota [ 36.482312][ T590] EXT4-fs error (device loop4): ext4_acquire_dquot:6195: comm syz.4.91: Failed to acquire dquot type 0 [ 36.493663][ T590] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.91: bg 0: block 64: padding at end of block bitmap is not set [ 36.507849][ T590] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 36.517018][ T590] EXT4-fs (loop4): 1 truncate cleaned up [ 36.523664][ T590] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 36.536049][ T590] ext4 filesystem being mounted at /24/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 36.548950][ T588] EXT4-fs (loop5): mounted filesystem without journal. Opts: jqfmt=vfsv1,resgid=0x0000000000000000,grpjquota=,bsdgroups,debug_want_extra_isize=0x0000000000000080,bsddf,errors=remount-ro,grpid,delalloc,. Quota mode: none. [ 36.559258][ T30] audit: type=1400 audit(1744869040.638:218): avc: denied { remove_name } for pid=83 comm="syslogd" name="messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 36.590654][ T588] EXT4-fs (loop5): resizing filesystem from 512 to 0 blocks [ 36.599748][ T588] EXT4-fs warning (device loop5): ext4_resize_fs:2004: can't shrink FS - resize aborted [ 36.607788][ T30] audit: type=1400 audit(1744869040.638:219): avc: denied { rename } for pid=83 comm="syslogd" name="messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 36.632062][ T30] audit: type=1400 audit(1744869040.638:220): avc: denied { create } for pid=83 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 36.654302][ T590] Quota error (device loop4): dq_insert_tree: Quota tree root isn't allocated! [ 36.663910][ T590] EXT4-fs error (device loop4): ext4_acquire_dquot:6195: comm syz.4.91: Failed to acquire dquot type 0 [ 36.666848][ T303] usb 3-1: USB disconnect, device number 3 [ 36.737684][ T608] loop5: detected capacity change from 0 to 1024 [ 36.785264][ T608] EXT4-fs (loop5): mounted filesystem without journal. Opts: jqfmt=vfsv1,resgid=0x0000000000000000,minixdf,bsdgroups,debug_want_extra_isize=0x0000000000000080,bsddf,errors=remount-ro,grpid,delalloc,. Quota mode: none. [ 36.850265][ T621] loop1: detected capacity change from 0 to 512 [ 36.879439][ T625] loop5: detected capacity change from 0 to 256 [ 36.905604][ T625] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x987a2e96, utbl_chksum : 0xe619d30d) [ 36.928327][ T621] EXT4-fs (loop1): 1 orphan inode deleted [ 36.934123][ T621] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 36.945242][ T621] ext4 filesystem being mounted at /20/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 36.955757][ T552] UDC core: couldn't find an available UDC or it's busy: -16 [ 36.971161][ T552] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 37.018018][ T630] loop5: detected capacity change from 0 to 128 [ 37.018868][ T303] hid-generic 00A0:0008:0001.0006: unknown main item tag 0x0 [ 37.031428][ T303] hid-generic 00A0:0008:0001.0006: unknown main item tag 0x0 [ 37.039019][ T303] hid-generic 00A0:0008:0001.0006: unknown main item tag 0x0 [ 37.046553][ T303] hid-generic 00A0:0008:0001.0006: unknown main item tag 0x0 [ 37.054009][ T303] hid-generic 00A0:0008:0001.0006: unknown main item tag 0x0 [ 37.055375][ T630] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 37.061271][ T303] hid-generic 00A0:0008:0001.0006: unknown main item tag 0x0 [ 37.061324][ T303] hid-generic 00A0:0008:0001.0006: unknown main item tag 0x0 [ 37.072579][ T630] ext4 filesystem being mounted at /16/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 37.078934][ T303] hid-generic 00A0:0008:0001.0006: unknown main item tag 0x0 [ 37.103346][ T303] hid-generic 00A0:0008:0001.0006: unknown main item tag 0x0 [ 37.110831][ T303] hid-generic 00A0:0008:0001.0006: unknown main item tag 0x0 [ 37.118311][ T303] hid-generic 00A0:0008:0001.0006: unknown main item tag 0x0 [ 37.125671][ T303] hid-generic 00A0:0008:0001.0006: unknown main item tag 0x0 [ 37.133651][ T303] hid-generic 00A0:0008:0001.0006: unknown main item tag 0x0 [ 37.140998][ T303] hid-generic 00A0:0008:0001.0006: unknown main item tag 0x0 [ 37.148398][ T303] hid-generic 00A0:0008:0001.0006: unknown main item tag 0x0 [ 37.157852][ T303] hid-generic 00A0:0008:0001.0006: hidraw0: HID v0.05 Device [syz1] on syz0 [ 37.184034][ T60] usb 7-1: USB disconnect, device number 2 [ 37.191930][ C1] xpad 7-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 37.198756][ T634] binder: 633:634 ioctl c0306201 0 returned -14 [ 37.200030][ C1] xpad 7-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 37.366358][ T303] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 37.378189][ T303] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 37.386070][ T303] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 37.393802][ T303] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 37.401385][ T303] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 37.409211][ T303] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 37.416895][ T303] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 37.427200][ T303] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 37.434994][ T303] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 37.442683][ T303] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 37.450350][ T303] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 37.459690][ T303] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 37.468056][ T303] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 37.476611][ T303] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 37.497846][ T647] overlayfs: missing 'lowerdir' [ 37.505634][ T303] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 37.514703][ T303] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 37.523243][ T303] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 37.531578][ T303] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 37.540607][ T303] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 37.577867][ T303] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 37.587712][ T303] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 37.599797][ T303] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 37.609795][ T303] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 37.619553][ T303] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 37.629837][ T303] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 37.639408][ T303] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 37.648889][ T303] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 37.705961][ T303] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 37.750206][ T303] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 37.834469][ T650] loop4: detected capacity change from 0 to 256 [ 37.840687][ T303] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 37.862312][ T303] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 37.872142][ T303] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 37.879872][ T303] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 37.888385][ T303] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 37.903913][ T303] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 37.915559][ T650] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 37.926344][ T303] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 37.934419][ T650] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 37.943059][ T303] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 37.953504][ T650] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 37.965561][ T303] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 37.973463][ T303] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 38.058437][ T303] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 38.066289][ T303] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 38.081678][ T303] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 38.099848][ T303] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 38.166957][ T661] exFAT-fs (loop4): hint_cluster is invalid (17) [ 38.173694][ T661] exFAT-fs (loop4): error, invalid access to FAT (entry 0xffffffff) [ 38.181499][ T661] exFAT-fs (loop4): Filesystem has been set read-only [ 38.212403][ T659] loop5: detected capacity change from 0 to 2048 [ 38.273503][ T303] hid-generic 0000:007F:FFFFFFFE.0007: hidraw0: HID v0.00 Device [syz1] on syz0 [ 38.421202][ T659] EXT4-fs (loop5): test_dummy_encryption requires encrypt feature [ 38.470933][ T663] loop1: detected capacity change from 0 to 512 [ 38.488106][ T668] wireguard: wg2: Could not create IPv4 socket [ 38.512863][ T663] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 38.534190][ T672] loop2: detected capacity change from 0 to 512 [ 38.547535][ T659] loop5: detected capacity change from 0 to 256 [ 38.563994][ T659] FAT-fs (loop5): Unrecognized mount option "nnonumtail=1" or missing value [ 38.569169][ T663] EXT4-fs (loop1): 1 orphan inode deleted [ 38.583692][ T663] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,jqfmt=vfsv0,resgid=0x0000000000000000,sysvgroups,delalloc,quota,. Quota mode: writeback. [ 38.603687][ T663] ext4 filesystem being mounted at /24/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 38.716125][ T680] loop5: detected capacity change from 0 to 128 [ 38.725450][ T672] EXT4-fs (loop2): 1 orphan inode deleted [ 38.731019][ T672] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 38.744208][ T672] ext4 filesystem being mounted at /21/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 38.757851][ T685] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65299 sclass=netlink_route_socket pid=685 comm=syz.4.123 [ 38.813951][ T685] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65299 sclass=netlink_route_socket pid=685 comm=syz.4.123 [ 38.856120][ T434] hid-generic 00A0:0008:0001.0008: unknown main item tag 0x0 [ 38.872327][ T434] hid-generic 00A0:0008:0001.0008: unknown main item tag 0x0 [ 38.879861][ T434] hid-generic 00A0:0008:0001.0008: unknown main item tag 0x0 [ 38.888239][ T434] hid-generic 00A0:0008:0001.0008: unknown main item tag 0x0 [ 38.896311][ T434] hid-generic 00A0:0008:0001.0008: unknown main item tag 0x0 [ 38.903870][ T434] hid-generic 00A0:0008:0001.0008: unknown main item tag 0x0 [ 38.906200][ T692] loop4: detected capacity change from 0 to 128 [ 38.911195][ T434] hid-generic 00A0:0008:0001.0008: unknown main item tag 0x0 [ 38.926438][ T434] hid-generic 00A0:0008:0001.0008: unknown main item tag 0x0 [ 38.933853][ T434] hid-generic 00A0:0008:0001.0008: unknown main item tag 0x0 [ 38.941945][ T434] hid-generic 00A0:0008:0001.0008: unknown main item tag 0x0 [ 38.949786][ T434] hid-generic 00A0:0008:0001.0008: unknown main item tag 0x0 [ 38.958419][ T434] hid-generic 00A0:0008:0001.0008: unknown main item tag 0x0 [ 38.987462][ T692] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 38.994383][ T434] hid-generic 00A0:0008:0001.0008: unknown main item tag 0x0 [ 39.005794][ T692] ext4 filesystem being mounted at /30/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 39.010647][ T434] hid-generic 00A0:0008:0001.0008: unknown main item tag 0x0 [ 39.024422][ T434] hid-generic 00A0:0008:0001.0008: unknown main item tag 0x0 [ 39.045385][ T434] hid-generic 00A0:0008:0001.0008: hidraw0: HID v0.05 Device [syz1] on syz0 [ 39.080159][ T692] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 39.163931][ T700] fscrypt: loop4: 1 inode(s) still busy after removing key with identifier 69b2f6edeee720cce0577937eb8a6751, including ino 12 [ 39.211974][ T434] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 39.332157][ T303] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 39.381371][ T709] loop4: detected capacity change from 0 to 512 [ 39.451979][ T434] usb 2-1: Using ep0 maxpacket: 32 [ 39.492023][ T376] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 39.572133][ T434] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 39.582675][ T434] usb 2-1: config 0 has no interface number 0 [ 39.595777][ T719] loop4: detected capacity change from 0 to 512 [ 39.652424][ T719] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 39.663183][ T719] EXT4-fs (loop4): 1 truncate cleaned up [ 39.668639][ T719] EXT4-fs (loop4): mounted filesystem without journal. Opts: debug_want_extra_isize=0x0000000000000008,block_validity,inode_readahead_blks=0x0000000000000080,lazytime,journal_ioprio=0x0000000000000005,max_batch_time=0x0000000000000004,,errors=continue. Quota mode: none. [ 39.692030][ T303] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 39.695107][ T719] usb usb8: usbfs: process 719 (syz.4.134) did not claim interface 0 before use [ 39.752096][ T434] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 39.761101][ T434] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 39.769344][ T434] usb 2-1: Product: syz [ 39.773694][ T434] usb 2-1: Manufacturer: syz [ 39.778117][ T434] usb 2-1: SerialNumber: syz [ 39.783783][ T434] usb 2-1: config 0 descriptor?? [ 39.819132][ T725] loop4: detected capacity change from 0 to 1024 [ 39.825837][ T434] smsc95xx v2.0.0 [ 39.851997][ T376] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 39.862045][ T303] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 39.870897][ T303] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 39.875173][ T725] EXT4-fs error (device loop4): ext4_ext_check_inode:501: inode #3: comm syz.4.136: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 3, max 3(4), depth 0(0) [ 39.880186][ T376] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 39.897053][ T725] EXT4-fs error (device loop4): ext4_quota_enable:6389: comm syz.4.136: Bad quota inode: 3, type: 0 [ 39.908309][ T303] usb 6-1: Product: syz [ 39.916367][ T725] EXT4-fs warning (device loop4): ext4_enable_quotas:6430: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 39.919492][ T303] usb 6-1: Manufacturer: syz [ 39.919511][ T303] usb 6-1: SerialNumber: syz [ 39.935216][ T725] EXT4-fs (loop4): mount failed [ 39.938368][ T376] usb 3-1: New USB device found, idVendor=056a, idProduct=4004, bcdDevice= 0.00 [ 39.956643][ T376] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 39.965832][ T376] usb 3-1: config 0 descriptor?? [ 40.027222][ T728] loop4: detected capacity change from 0 to 512 [ 40.102438][ T728] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 40.110122][ T728] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 40.117896][ T728] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802c01d, mo2=0002] [ 40.126012][ T728] EXT4-fs (loop4): couldn't mount RDWR because of unsupported optional features (80) [ 40.135341][ T728] EXT4-fs (loop4): Skipping orphan cleanup due to unknown ROCOMPAT features [ 40.143852][ T728] EXT4-fs (loop4): mounted filesystem without journal. Opts: nombcache,abort,nomblk_io_submit,noblock_validity,nolazytime,jqfmt=vfsold,jqfmt=vfsv0,barrier=0x000000000000d95a,debug,,errors=continue. Quota mode: none. [ 40.165303][ T728] EXT4-fs error (device loop4): ext4_remount:5846: comm syz.4.137: Abort forced by user [ 40.205747][ T707] netlink: 59 bytes leftover after parsing attributes in process `syz.2.131'. [ 40.215159][ T60] usb 3-1: USB disconnect, device number 4 [ 40.240411][ T734] loop4: detected capacity change from 0 to 512 [ 40.314390][ T734] EXT4-fs (loop4): 1 orphan inode deleted [ 40.319942][ T734] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 40.331046][ T734] ext4 filesystem being mounted at /38/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 40.401344][ T26] hid-generic 00A0:0008:0001.0009: unknown main item tag 0x0 [ 40.408706][ T26] hid-generic 00A0:0008:0001.0009: unknown main item tag 0x0 [ 40.416097][ T26] hid-generic 00A0:0008:0001.0009: unknown main item tag 0x0 [ 40.423472][ T26] hid-generic 00A0:0008:0001.0009: unknown main item tag 0x0 [ 40.430770][ T26] hid-generic 00A0:0008:0001.0009: unknown main item tag 0x0 [ 40.438174][ T26] hid-generic 00A0:0008:0001.0009: unknown main item tag 0x0 [ 40.445804][ T26] hid-generic 00A0:0008:0001.0009: unknown main item tag 0x0 [ 40.453348][ T26] hid-generic 00A0:0008:0001.0009: unknown main item tag 0x0 [ 40.460646][ T26] hid-generic 00A0:0008:0001.0009: unknown main item tag 0x0 [ 40.467946][ T26] hid-generic 00A0:0008:0001.0009: unknown main item tag 0x0 [ 40.475360][ T434] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 40.486020][ T26] hid-generic 00A0:0008:0001.0009: unknown main item tag 0x0 [ 40.493329][ T434] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 40.502374][ T26] hid-generic 00A0:0008:0001.0009: unknown main item tag 0x0 [ 40.510094][ T26] hid-generic 00A0:0008:0001.0009: unknown main item tag 0x0 [ 40.517458][ T26] hid-generic 00A0:0008:0001.0009: unknown main item tag 0x0 [ 40.524816][ T434] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 40.535515][ T26] hid-generic 00A0:0008:0001.0009: unknown main item tag 0x0 [ 40.543181][ T434] smsc95xx: probe of 2-1:0.67 failed with error -71 [ 40.551546][ T26] hid-generic 00A0:0008:0001.0009: hidraw0: HID v0.05 Device [syz1] on syz0 [ 40.564731][ T434] usb 2-1: USB disconnect, device number 3 [ 40.743853][ T30] kauditd_printk_skb: 25 callbacks suppressed [ 40.743883][ T30] audit: type=1400 audit(1744869044.828:245): avc: denied { compute_member } for pid=739 comm="syz.2.141" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 40.795368][ T749] loop4: detected capacity change from 0 to 512 [ 40.835008][ T747] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 40.839978][ T754] loop6: detected capacity change from 0 to 256 [ 40.863394][ T754] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 40.873951][ T30] audit: type=1400 audit(1744869044.958:246): avc: denied { setopt } for pid=756 comm="syz.2.147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 40.875785][ T754] exFAT-fs (loop6): Medium has reported failures. Some data may be lost. [ 40.895553][ T30] audit: type=1400 audit(1744869044.978:247): avc: denied { read } for pid=756 comm="syz.2.147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 40.903517][ T749] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 40.922687][ T754] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 40.931480][ T749] ext4 filesystem being mounted at /39/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 40.970206][ T30] audit: type=1400 audit(1744869045.048:248): avc: denied { ioctl } for pid=743 comm="syz.4.140" path="/39/file0/cpu.stat" dev="loop4" ino=18 ioctlcmd=0x583b scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 41.008715][ T760] loop2: detected capacity change from 0 to 512 [ 41.041678][ T763] loop1: detected capacity change from 0 to 512 [ 41.117883][ T767] loop4: detected capacity change from 0 to 2048 [ 41.147499][ T769] exFAT-fs (loop6): hint_cluster is invalid (17) [ 41.156473][ T769] exFAT-fs (loop6): error, invalid access to FAT (entry 0xffffffff) [ 41.164363][ T769] exFAT-fs (loop6): Filesystem has been set read-only [ 41.332174][ T303] cdc_ncm 6-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 41.349737][ T303] cdc_ncm 6-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 41.382156][ T303] cdc_ncm 6-1:1.0: setting rx_max = 2048 [ 41.383973][ T767] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 41.391742][ T763] EXT4-fs (loop1): 1 orphan inode deleted [ 41.406961][ T763] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 41.418442][ T763] ext4 filesystem being mounted at /26/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 41.506553][ T434] hid-generic 00A0:0008:0001.000A: unknown main item tag 0x0 [ 41.531862][ T434] hid-generic 00A0:0008:0001.000A: unknown main item tag 0x0 [ 41.543962][ T434] hid-generic 00A0:0008:0001.000A: unknown main item tag 0x0 [ 41.552635][ T303] cdc_ncm 6-1:1.0: setting tx_max = 88 [ 41.572093][ T303] cdc_ncm 6-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.5-1, CDC NCM, 42:42:42:42:42:42 [ 41.582539][ T434] hid-generic 00A0:0008:0001.000A: unknown main item tag 0x0 [ 41.589894][ T434] hid-generic 00A0:0008:0001.000A: unknown main item tag 0x0 [ 41.600880][ T434] hid-generic 00A0:0008:0001.000A: unknown main item tag 0x0 [ 41.719418][ T30] audit: type=1400 audit(1744869045.798:249): avc: denied { read } for pid=139 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 41.729090][ T434] hid-generic 00A0:0008:0001.000A: unknown main item tag 0x0 [ 41.757919][ T434] hid-generic 00A0:0008:0001.000A: unknown main item tag 0x0 [ 41.772692][ T434] hid-generic 00A0:0008:0001.000A: unknown main item tag 0x0 [ 41.781532][ T434] hid-generic 00A0:0008:0001.000A: unknown main item tag 0x0 [ 41.790734][ T434] hid-generic 00A0:0008:0001.000A: unknown main item tag 0x0 [ 41.799965][ T434] hid-generic 00A0:0008:0001.000A: unknown main item tag 0x0 [ 41.858740][ T30] audit: type=1400 audit(1744869045.898:250): avc: denied { confidentiality } for pid=781 comm="syz.2.154" lockdown_reason="use of bpf to read kernel RAM" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=lockdown permissive=1 [ 41.875133][ T434] hid-generic 00A0:0008:0001.000A: unknown main item tag 0x0 [ 41.915804][ T434] hid-generic 00A0:0008:0001.000A: unknown main item tag 0x0 [ 41.959029][ T434] hid-generic 00A0:0008:0001.000A: unknown main item tag 0x0 [ 41.963279][ T6] usb 6-1: USB disconnect, device number 3 [ 41.979289][ T6] cdc_ncm 6-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.5-1, CDC NCM [ 42.020021][ T434] hid-generic 00A0:0008:0001.000A: hidraw0: HID v0.05 Device [syz1] on syz0 [ 42.046043][ T303] ================================================================== [ 42.053945][ T303] BUG: KASAN: use-after-free in __list_del_entry_valid+0xa6/0x120 [ 42.061580][ T303] Read of size 8 at addr ffff888112beac70 by task kworker/1:2/303 [ 42.069219][ T303] [ 42.071399][ T303] CPU: 1 PID: 303 Comm: kworker/1:2 Not tainted 5.15.180-syzkaller-00947-g8034ec1338e8 #0 [ 42.081115][ T303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 42.091005][ T303] Workqueue: rcu_gp process_srcu [ 42.095788][ T303] Call Trace: [ 42.098902][ T303] [ 42.101688][ T303] dump_stack_lvl+0x151/0x1c0 [ 42.106195][ T303] ? io_uring_drop_tctx_refs+0x190/0x190 [ 42.111663][ T303] ? panic+0x760/0x760 [ 42.115568][ T303] ? preempt_schedule+0xd9/0xe0 [ 42.120253][ T303] ? sysvec_reschedule_ipi+0x8c/0x160 [ 42.125461][ T303] print_address_description+0x87/0x3b0 [ 42.130847][ T303] kasan_report+0x179/0x1c0 [ 42.135183][ T303] ? __kasan_check_write+0x14/0x20 [ 42.140128][ T303] ? __list_del_entry_valid+0xa6/0x120 [ 42.145426][ T303] ? __list_del_entry_valid+0xa6/0x120 [ 42.151587][ T303] __asan_report_load8_noabort+0x14/0x20 [ 42.157057][ T303] __list_del_entry_valid+0xa6/0x120 [ 42.162178][ T303] process_one_work+0x458/0xc10 [ 42.166865][ T303] worker_thread+0xad5/0x12a0 [ 42.171379][ T303] ? _raw_spin_lock+0x1b0/0x1b0 [ 42.176069][ T303] kthread+0x421/0x510 [ 42.179968][ T303] ? worker_clr_flags+0x180/0x180 [ 42.184837][ T303] ? kthread_blkcg+0xd0/0xd0 [ 42.189253][ T303] ret_from_fork+0x1f/0x30 [ 42.193513][ T303] [ 42.196371][ T303] [ 42.198541][ T303] Allocated by task 303: [ 42.202620][ T303] ____kasan_kmalloc+0xdb/0x110 [ 42.207312][ T303] __kasan_kmalloc+0x9/0x10 [ 42.211644][ T303] __kmalloc+0x13f/0x2c0 [ 42.215727][ T303] kvmalloc_node+0x1f0/0x4d0 [ 42.220151][ T303] alloc_netdev_mqs+0x8c/0xc90 [ 42.224754][ T303] alloc_etherdev_mqs+0x33/0x40 [ 42.229437][ T303] usbnet_probe+0x1fa/0x28e0 [ 42.234028][ T303] usb_probe_interface+0x5b6/0xa90 [ 42.238967][ T303] really_probe+0x28d/0x970 [ 42.243314][ T303] __driver_probe_device+0x1a0/0x310 [ 42.248429][ T303] driver_probe_device+0x54/0x3d0 [ 42.253390][ T303] __device_attach_driver+0x2c5/0x470 [ 42.258596][ T303] bus_for_each_drv+0x183/0x200 [ 42.263277][ T303] __device_attach+0x312/0x510 [ 42.267877][ T303] device_initial_probe+0x1a/0x20 [ 42.272743][ T303] bus_probe_device+0xbe/0x1e0 [ 42.277338][ T303] device_add+0xb60/0xf10 [ 42.281506][ T303] usb_set_configuration+0x190f/0x1e80 [ 42.286801][ T303] usb_generic_driver_probe+0x8b/0x150 [ 42.292099][ T303] usb_probe_device+0x144/0x260 [ 42.296790][ T303] really_probe+0x28d/0x970 [ 42.301121][ T303] __driver_probe_device+0x1a0/0x310 [ 42.306240][ T303] driver_probe_device+0x54/0x3d0 [ 42.311103][ T303] __device_attach_driver+0x2c5/0x470 [ 42.316312][ T303] bus_for_each_drv+0x183/0x200 [ 42.320995][ T303] __device_attach+0x312/0x510 [ 42.325598][ T303] device_initial_probe+0x1a/0x20 [ 42.330468][ T303] bus_probe_device+0xbe/0x1e0 [ 42.335058][ T303] device_add+0xb60/0xf10 [ 42.339223][ T303] usb_new_device+0x1038/0x1c10 [ 42.343909][ T303] hub_event+0x2def/0x4770 [ 42.348164][ T303] process_one_work+0x6bb/0xc10 [ 42.352853][ T303] worker_thread+0xad5/0x12a0 [ 42.357365][ T303] kthread+0x421/0x510 [ 42.361277][ T303] ret_from_fork+0x1f/0x30 [ 42.365522][ T303] [ 42.367695][ T303] Freed by task 6: [ 42.371254][ T303] kasan_set_track+0x4b/0x70 [ 42.375675][ T303] kasan_set_free_info+0x23/0x40 [ 42.380457][ T303] ____kasan_slab_free+0x126/0x160 [ 42.385401][ T303] __kasan_slab_free+0x11/0x20 [ 42.389996][ T303] slab_free_freelist_hook+0xbd/0x190 [ 42.395206][ T303] kfree+0xcc/0x270 [ 42.398849][ T303] kvfree+0x35/0x40 [ 42.402498][ T303] netdev_freemem+0x3f/0x60 [ 42.406834][ T303] netdev_release+0x7f/0xb0 [ 42.411178][ T303] device_release+0x95/0x1c0 [ 42.415599][ T303] kobject_put+0x178/0x260 [ 42.419893][ T303] put_device+0x1f/0x30 [ 42.423990][ T303] free_netdev+0x34f/0x440 [ 42.428233][ T303] usbnet_disconnect+0x25f/0x3b0 [ 42.433008][ T303] usb_unbind_interface+0x1fa/0x8c0 [ 42.438045][ T303] device_release_driver_internal+0x50b/0x7d0 [ 42.443943][ T303] device_release_driver+0x19/0x20 [ 42.448896][ T303] bus_remove_device+0x2f8/0x360 [ 42.453662][ T303] device_del+0x663/0xe90 [ 42.457825][ T303] usb_disable_device+0x380/0x720 [ 42.462686][ T303] usb_disconnect+0x32a/0x890 [ 42.467199][ T303] hub_event+0x1d42/0x4770 [ 42.471454][ T303] process_one_work+0x6bb/0xc10 [ 42.476141][ T303] worker_thread+0xad5/0x12a0 [ 42.480653][ T303] kthread+0x421/0x510 [ 42.484557][ T303] ret_from_fork+0x1f/0x30 [ 42.488811][ T303] [ 42.490983][ T303] Last potentially related work creation: [ 42.496694][ T303] kasan_save_stack+0x3b/0x60 [ 42.501202][ T303] __kasan_record_aux_stack+0xd3/0xf0 [ 42.506407][ T303] kasan_record_aux_stack_noalloc+0xb/0x10 [ 42.512047][ T303] insert_work+0x56/0x320 [ 42.516214][ T303] __queue_work+0x92a/0xcd0 [ 42.520553][ T303] queue_work_on+0x105/0x170 [ 42.524980][ T303] usbnet_link_change+0x182/0x1a0 [ 42.529841][ T303] usbnet_probe+0x1e04/0x28e0 [ 42.534353][ T303] usb_probe_interface+0x5b6/0xa90 [ 42.539304][ T303] really_probe+0x28d/0x970 [ 42.543640][ T303] __driver_probe_device+0x1a0/0x310 [ 42.548761][ T303] driver_probe_device+0x54/0x3d0 [ 42.553729][ T303] __device_attach_driver+0x2c5/0x470 [ 42.558937][ T303] bus_for_each_drv+0x183/0x200 [ 42.563633][ T303] __device_attach+0x312/0x510 [ 42.568225][ T303] device_initial_probe+0x1a/0x20 [ 42.573085][ T303] bus_probe_device+0xbe/0x1e0 [ 42.577686][ T303] device_add+0xb60/0xf10 [ 42.581944][ T303] usb_set_configuration+0x190f/0x1e80 [ 42.587232][ T303] usb_generic_driver_probe+0x8b/0x150 [ 42.592527][ T303] usb_probe_device+0x144/0x260 [ 42.597211][ T303] really_probe+0x28d/0x970 [ 42.601553][ T303] __driver_probe_device+0x1a0/0x310 [ 42.606679][ T303] driver_probe_device+0x54/0x3d0 [ 42.611530][ T303] __device_attach_driver+0x2c5/0x470 [ 42.616751][ T303] bus_for_each_drv+0x183/0x200 [ 42.621430][ T303] __device_attach+0x312/0x510 [ 42.626027][ T303] device_initial_probe+0x1a/0x20 [ 42.630892][ T303] bus_probe_device+0xbe/0x1e0 [ 42.635488][ T303] device_add+0xb60/0xf10 [ 42.639652][ T303] usb_new_device+0x1038/0x1c10 [ 42.644345][ T303] hub_event+0x2def/0x4770 [ 42.648594][ T303] process_one_work+0x6bb/0xc10 [ 42.653282][ T303] worker_thread+0xad5/0x12a0 [ 42.657795][ T303] kthread+0x421/0x510 [ 42.661699][ T303] ret_from_fork+0x1f/0x30 [ 42.665952][ T303] [ 42.668121][ T303] The buggy address belongs to the object at ffff888112bea000 [ 42.668121][ T303] which belongs to the cache kmalloc-4k of size 4096 [ 42.682012][ T303] The buggy address is located 3184 bytes inside of [ 42.682012][ T303] 4096-byte region [ffff888112bea000, ffff888112beb000) [ 42.695289][ T303] The buggy address belongs to the page: [ 42.700758][ T303] page:ffffea00044afa00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x112be8 [ 42.710825][ T303] head:ffffea00044afa00 order:3 compound_mapcount:0 compound_pincount:0 [ 42.718984][ T303] flags: 0x4000000000010200(slab|head|zone=1) [ 42.724896][ T303] raw: 4000000000010200 0000000000000000 dead000000000122 ffff888100043380 [ 42.733313][ T303] raw: 0000000000000000 0000000000040004 00000001ffffffff 0000000000000000 [ 42.741742][ T303] page dumped because: kasan: bad access detected [ 42.747983][ T303] page_owner tracks the page as allocated [ 42.753529][ T303] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d60c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_RETRY_MAYFAIL|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 303, ts 40002442786, free_ts 39808759534 [ 42.775486][ T303] post_alloc_hook+0x1a3/0x1b0 [ 42.780084][ T303] prep_new_page+0x1b/0x110 [ 42.784510][ T303] get_page_from_freelist+0x3550/0x35d0 [ 42.789892][ T303] __alloc_pages+0x27e/0x8f0 [ 42.794317][ T303] new_slab+0x9a/0x4e0 [ 42.798222][ T303] ___slab_alloc+0x39e/0x830 [ 42.802665][ T303] __slab_alloc+0x4a/0x90 [ 42.806824][ T303] __kmalloc+0x172/0x2c0 [ 42.810896][ T303] kvmalloc_node+0x1f0/0x4d0 [ 42.815322][ T303] alloc_netdev_mqs+0x8c/0xc90 [ 42.819920][ T303] alloc_etherdev_mqs+0x33/0x40 [ 42.824608][ T303] usbnet_probe+0x1fa/0x28e0 [ 42.829035][ T303] usb_probe_interface+0x5b6/0xa90 [ 42.833987][ T303] really_probe+0x28d/0x970 [ 42.838322][ T303] __driver_probe_device+0x1a0/0x310 [ 42.843444][ T303] driver_probe_device+0x54/0x3d0 [ 42.848305][ T303] page last free stack trace: [ 42.852817][ T303] free_unref_page_prepare+0x7c8/0x7d0 [ 42.858117][ T303] free_unref_page+0xe8/0x750 [ 42.862626][ T303] __free_pages+0x61/0xf0 [ 42.866792][ T303] __free_slab+0xec/0x1d0 [ 42.870960][ T303] __unfreeze_partials+0x165/0x1a0 [ 42.875905][ T303] put_cpu_partial+0xc4/0x120 [ 42.880419][ T303] __slab_free+0x1c8/0x290 [ 42.884669][ T303] ___cache_free+0x109/0x120 [ 42.889097][ T303] qlink_free+0x4d/0x90 [ 42.893090][ T303] qlist_free_all+0x44/0xb0 [ 42.897428][ T303] kasan_quarantine_reduce+0x15a/0x180 [ 42.902731][ T303] __kasan_slab_alloc+0x2f/0xe0 [ 42.907410][ T303] slab_post_alloc_hook+0x53/0x2c0 [ 42.912360][ T303] kmem_cache_alloc+0xf5/0x250 [ 42.916958][ T303] getname_flags+0xba/0x520 [ 42.921297][ T303] user_path_at_empty+0x2d/0x1a0 [ 42.926075][ T303] [ 42.928240][ T303] Memory state around the buggy address: [ 42.933713][ T303] ffff888112beab00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 42.941614][ T303] ffff888112beab80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 42.949508][ T303] >ffff888112beac00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 42.957405][ T303] ^ [ 42.964957][ T303] ffff888112beac80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 42.972858][ T303] ffff888112bead00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 42.980754][ T303] ================================================================== [ 42.988886][ T303] Disabling lock debugging due to kernel taint