last executing test programs: 37.558884168s ago: executing program 3 (id=507): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r1 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r0}, 0x8) close(r1) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r1, r0, 0x4, r1}, 0x10) 37.521653292s ago: executing program 3 (id=509): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x4001, 0x3, 0x3d8, 0x230, 0x700001b, 0x148, 0x0, 0x148, 0x340, 0x206, 0x240, 0x340, 0x240, 0x7fffffe, 0x0, {[{{@ip={@local, @rand_addr, 0x0, 0x0, 'tunl0\x00', 'bond_slave_1\x00', {0xff}}, 0x1ea, 0x1e8, 0x230, 0x0, {0x390, 0x8f00}, [@common=@inet=@hashlimit2={{0x150}, {'pim6reg1\x00', {0x5, 0x1ff, 0x1, 0x1, 0x1, 0x100, 0x1, 0x8, 0x20}, {0x8}}}, @common=@inet=@socket2={{0x28}, 0x4}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x8, 0x9, 'snmp\x00', {0xc000}}}}, {{@uncond, 0x0, 0xb0, 0x110, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x0, 0x6275dd3c01ecbf44, 0x2, 0x4, 0x4], 0x4, 0x2}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x4, [0x3, 0x6, 0x2, 0xa, 0x6], 0x2, 0x2}, {0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x1], 0x5, 0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x438) 37.473818416s ago: executing program 3 (id=513): bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB='\a\x00'], 0x50) mlock(&(0x7f00005b2000/0x2000)=nil, 0x2000) mlock2(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) syz_clone(0xe200, 0x0, 0x0, 0x0, 0x0, 0x0) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) 37.295314794s ago: executing program 3 (id=519): capset(0x0, 0x0) socket(0x10, 0x3, 0x0) syz_mount_image$exfat(&(0x7f00000009c0), &(0x7f0000000000)='./file1\x00', 0x8, &(0x7f0000000340)={[{@utf8}, {@umask={'umask', 0x3d, 0x8000}}, {@uid={'uid', 0x3d, 0xee01}}, {@iocharset={'iocharset', 0x3d, 'euc-jp'}}, {@errors_remount}, {@namecase}, {@fmask={'fmask', 0x3d, 0x5}}, {@dmask={'dmask', 0x3d, 0x1}}, {@time_offset={'time_offset', 0x3d, 0x6}}, {@errors_remount}]}, 0x1, 0x152b, &(0x7f0000002f80)="$eJzs3AmYjtXbAPD7Puc8Y0zS2yTLcM65H95kOSZJsiTJkiRJkmRLSJrkLwmJIVvSkIRkGZJlCMkyMWns+74kJEmTJCHZkvNdir/66r8vvuub+3ddzzXnfs9zn+c87/0+8yyzfNN5SI1GNas2ICL4l+AvX5IBIBYABgDANQAQAEDZ+LLxF/pzSkz+1zbC/r0eSrvSM2BXEtc/e+P6Z29c/+yN65+9cf2zN65/9sb1z964/oxlZ5umFbiWl+y78PP/7IzP//+PZJUa88WaUtd3AYj5e1O4/tkb1///reDvWYnrn71x/bOr2Cs9AfZ/AB//2UGOv9jD9c/euP6MZWdX+vnzf36Rf7UfItnhPfgr+88YY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjP0XnPaXKQC41L7S82KMMcYYY4wxxti/j89xpWfAGGOMMcYYY4yx/zwEARIUBBADOSAWckIcCAC4GnLDNRCBayEeroM8cD3khXyQHwpAAhSEQqDBgAWCEApDEYjCDVAUboRiUBxKQElwUAoS4SYoDTdDGbgFysKtUA5ug/JQASpCJbgdKsMdUAXuhKpwF1SD6lADasLdUAvugdpwL9SB+6Au3A/14AGoDw9CA3gIGsLD0AgegcbwKDSBptAMmkOLfyr/BegOL0IP6AnJ0At6w0vQB/pCP+gPA+BlGAivwCB4FVJgMAyB12AovA7D4A0YDiNgJLwJo+AtGA1jYCyMg1QYDxPgbZgI78AkmAxTYCqkwTSYDu/CDJgJs+A9mA3vwxyYC/NgPqTDB7AAFkIGfAiL4CPIhMWwBJbCMlgOK2AlrILVsAbWwjpYDxtgI2yCzbAFtsI22A474GPYCZ/ALtgNe/5cv38k/9Sv8j+FvdAFAQEFClSoMAZjMBZjMQ7jMBfmwtyYGyMYwXiMxzyYB/NiXsyP+TEBE7AQFkKDBgkJC2NhjGIUi2JRLIbFsASWQIcOEzERS+PNWAbLYFksi+WwHJbHClgBK2ElrIyVsQpWwapYFathNayBNfBuvBt7YW2sjXWwDtbFupceT2EDbIANsSE2wkbYGBtjE2yCzbAZtsAW2BJbYitshW2wDbbFttgO22ESJmF7bI8dsAN2xI7YCTthZ+yMXbArds16IQfgi/gi9sRqohf2xt7YB1Ny9MP+2B9fxoH4Cr6Cr2IKDsYh+Bq+hq/jMDyJw3EEjsSRWFm8haNxDJIYh6mYihNwAk7EiTgJJ+NknIppOA2n43ScgTNxJr6Hs/F9fB/n4lycj+mYjgtwIWZgBi7CU5iJi3EJLsVluByX4UpchStxDa7FNbge1+NG3IibcTNuxa24Hbfjx6gA8BPcjbsxBffiXtyH+3A/7scDeACzMAsP4kE8hIfwMB7GI3gEj+IxPI7H8ASewJN4Ck/jaTyLZ/EcPpfwVcOPi69OAXGBEkrEiBgRK2JFnIgTuUQukVvkFhEREfEiXuQReURekVfkF/lFgkgQhUQhYYQRJMIYABBRERVFRVFRTBQTJUQJ4YQTiSJRlBalRRlRRpQVt4py4jZRXlQQrV0lUUlUFm1cFXGnqCqqimqiuqghaoqaopaoJWqL2qKOqCPqirqinnhA1Be9sB8+JC5UppEYjI3FEGwimgp58QhoKYZhK9FatBFPiBE4HNuJli5JPC3ai9HYQfxJjMFnRScxDjuL50UX0VV0Ey+I7qKV6yF6iknYS/QWU7GP6Cv6if5iBlYX7+HsnDXEqyJFDBZDxGtiPr4uhok3xHAxQowUb4pR4i0xWowRY8U4kSrGiwnibTFRvCMmicliipgq0sQ0MV28K2aImWKWeE/MFu+LOWKumCfmi3TxgVggFooM8aFYJD4SmWKxWCKWimViuVghVopVYrVYI9aKdWK92CA2ik1is9gitoptYrvYIT4WO8UnYpfYLfaIT8Ve8ZnYJz4X+8UX4oD4UmSJr8RB8bU4JL4Rh8W34oj4ThwVx8Rx8b04IX4QJ8UpcVqcEWfFj+Kc+EmcF16ARCmklEoGMkbmkLEyp4yTV8lcMrj47l4r4+V1Mo+8XuaV+WR+WUAmyIKykNTSSCtJhrKwLCKj8gZZVN4oi8nisoQsKZ0sJRPlTbK0vFmWkbfIsvJWWU7eJsvLCrKirCRvl5XlHRIiv2yjmqwua8ia8m6ZDPfI2vJeWUfeJ+vK+2U9+YCsLx+UDeRDsqF8WDaSj8jG8lHZRDaVzWRz2UI+JlvKx2Ur2Vq2kU/ItvJJ2U4+JZPk07K99Bc/Is/KTvI52Vk+L7vIrrKb/Emel172kD0l9ALZW74k+8i+sp/sLwfIl+VA+YocJF+VKXKwHCJfk0Pl63KYfEMOlyPkSPmmHCXfkqPlGDlWjpOpcrycIN+WE+U7cpKcLKfIqTJNTpP9Lo40S8q/mf/2r/MvnHrlNDno561vlJvkZrlFbpXb5Ha5Q34sd8qdcpfcJffIPXKv3Cv3yX1yv9wvD8gDMktmyYPyoDwkD8nD8rA8Io/Io/KYPCO/lyfkD/KkPCVPyTPyrDwrz118D0ChEkoqpQIVo3KoWJVTxamrVC51tcqtrlERda2KV9epPOp6lVflU/lVAZWgCqpCSiujrCIVqsKqiIqqG/DiB0aVUCWVU6VUorrpH8lXRdWNqpgq/pv8S/NL/gvza6FaqJaqpWqlWqk2qo1qq9qqdqqdSlJJqr1qrzqoDqqj6qg6qU6qs+qsuqguqpvqprqr7qqH6qGSVbLqrV5SfVRf1U/1VwPUy2qgGqgGqUEqRaWoIWqIGqqGqmFqmBquhquRaqQapUap0Wq0GqvGqlSVqiaoCWqimqgmqUlqipqi0lSamq6mqxlqhpqlZqnZaraao+aoeWqeSlfpaoFaoDJUhlqkFqlMtVgtVkvVUrVcLVcr1Uq1Wq1Wa9VatV6tV5lqk9qktqgtapvapnaoHWqn2ql2qV1qj9qj9qq9ap/ap/ar/eqAOqCyVJY6qA6qQ+qQOqwOqyPqiDqqjqrj6rg6oU6ok+qkOq1Oq7PqrDqnzqnz6ryCQIAIRKACFcQEMUFsEBvEBXFBriBXkDvIHUSCSBAfxAd5guuDvEG+IH9QIEgICgaFAh2YwAbiYtGjwQ1B0eDGoFhQPCgRlAxcUCpIDG4KSgc3B2WCW4Kywa1BueC2oHxQIagYVApuDyoHdwRVgjuDqsFdQbWgelAjqBncHdQK7glqB/cGdYL7grrB/UG94IGgfvBg0CB4KGgYPBw0Ch4JGgePBk2CpkGzoHnQ4t86vvcn8z3ueuieOln30r31S7qP7qv76f56gH5ZD9Sv6EH6VZ2iB+sh+jU9VL+uh+k39HA9Qo/Ub+pR+i09Wo/RY/U4narH6wn6bT1Rv6Mn6cl6ip6q0/Q0PV2/q2fomXqWfk/P1u/rOXqunqfn63T9gV6gF+oM/aFepD/SmXqxXqKX6mV6uV6hV+pVerVeo9fqdXq93qA36k16s96it+pterveoT/WO/UnepferffoT/Ve/Znepz/X+/UX+oD+Umfpr/RB/bU+pL/Rh/W3+oj+Th/Vx/Rx/b0+oX/QJ/UpfVqf0Wf1j/qc/kmf1/7Cxf2F07tRRpkYE2NiTayJM3Eml8llcpvcJmIiJt7Emzwmj8lr8pr8Jr9JMAmmkClkLiBDprApbKImaoqaoqaYKWZKmBLGGWcSTaIpbUqbMqaMKWvKmnKmnClvypuKpqK53dxu7jB3mDvNneYuc5epbqqbmqamqWVqmdqmtqlj6pi6pq6pZ+qZ+qa+aWAamIamoWlkGpnGprFpYpqYZqaZaWFamJampWllWpk2po1pa9qadqadSTJJpr1pbzqYDqaj6Wg6mU6ms+lsupguppvpZrqb7qaH6WGSTbLpbXqbPqaP6Wf6mQFmgBloBppBZpBJMSlmiBlihpqhZpgZZoabEWbkhQtV85YZbcaYsWacSTWpZoKZYCaaiWaSmWSmmCkmzaSZ6Wa6mWFmmFlmlpltZps5Zo6ZZ+aZdJNuFpgFJsNkmEVmkck0mWaJWWKWmWVmhVlhVplVZo1ZY9bBOrPBbDCbzCazxWwx28w2s8PsMDvNTrPL7DJ7zB6z1+w1+8w+s9/sNwfMAZNlssxBc9AcMofMYXPYHDFHzFFz1Bw3x80Jc8KcNCfNaXPanDX5Lp4vvYm1OW2cvcrmslfb3PYa+7/j/LaATbAFbSGrbV6b7zexsdYWs8VtCVvSOlvKJtqbfheXtxVsRVvJ3m4r2ztsld/Ftew9tra919ax99ma9u7fxHXt/baefcTWRwSwTW1D29w2so/YxvZR28Q2tc1sc9vWPmnb2adskn3atrfP/C5eYBfaVXa1XWPX2l12tz1tz9hD9ht71v5oe9iedoB92Q60r9hB9lWbYgf/Lh5p37Sj7Ft2tB1jx9pxv4un2Kk2zU6z0+27doad+bs43X5gZ9sMO8fOtfPs/J/jC3PKsB/aRfYjm2kDWGKX2mV2uV1hV/55rkvtervBbrQ77Sd2i91qt9ntdselC2G72+6xn9q99jN70H5t99sv7AF72GbZr36OL+zfYfutPWK/s0ftMXvcfm9P2B/UpewL+/69/cmet94CIQFJUhRQDOWgWMpJcXQV5aKrKTddQxG6luLpOspD11Neykf5qQAlUEEqRJoMWSIKqTAVoSjdQJemV4JKkqNSlEg3UWm6mcrQLVSWbqVydBuVpwpUkSrR7VSZ7qAqdCdVpbuoGlWnGlST7qZadA/VpnupDt1Hdel+qkcPUH16kBrQQ9SQHqZG9Ag1pkepCTWlZtScWtBj1JIep1bUmtrQE9SWnqR29BQl0dPUnp6hDvQn6kjPUid6jjrT89SFulI3eoG604vUg3pSMvWi3vQS9aG+1I/60wB6mQbSKzSIXqUUGkxD6DUaSq/TMHqDhtMIGklv0ih6i0bTGBpL4yiVxtMEepsm0js0iSbTFJpKaTSNptO7NINm0ix6j2bT+zSH5tI8mk/p9AEtoIWUQR/SIvqIMmkxLaGltIyW0wpaSatoNa2htbSO1tMG2kibaDNtoa20jbbTDvqYdtIntIt20x76lPbSZ7SPPqf99AUdoC8pi76ig/Q1HaJv6DB963vSd3SUjtFx+p5O0A90kk7RaTpDZ+lHOkc/0XnyBCGGIpShCoMwJswRxoY5w7jwqjBXeHWYO7wmjITXhvHhdWGe8Powb5gvzB8WCBPCgmGhUIcmtCGFYVg4LBJGwxvCouGNYbGweFgiLBm6sFSYGN4Ulg5vDsuEt4Rlw1vDcuFtYfmwQvjIfZXC28PK4R1hlfDOsGp4V1gtrB7WCGuGd4e1wnvC2uG9YZ3wvrBMeH9YL3wgrB8+GDYIHwobhg+HjcJHwsbho2GTsGnYLGwetggfC1uGj4etwtZhm/CJsG34ZNgufCpMCp8O24fP/Nx//8K/3J8c9gp7hy+FL4Xe3yvnRedH06MfRBdEF0Yzoh9GF0U/imZGF0eXRJdGl0WXR1dEV0ZXRVdH10TXRtdF10c3RDdGva+ZAxw64aRTLnAxLoeLdTldnLvK5XJXu9zuGhdx17p4d53L4653eV0+l98VcAmuoCvktDPOOnKhK+yKuKi7wRV1N7pirrgr4Uo650q5RNfctXAtXEv3uGvlWrs27gn3hHvSPemeck+5p11794zr4P7kOrpnXSf3nHvOPe+6uK6um3vBdXfjc/9yTCa73q636+P6uH6unxvgBriBbqAb5Aa5FJfihrghbqgb6oa5YW64G+5GupFulBvlRrvRbqwb61JdqpvgJriJbqKb5Ca5KW6KS3Npbrqb7ma4Ga7yzF+2MsfNcfPcPJfu0t0Cd+GaMcMtcotcpst0S9wSt8wtcyvcCrfKrXJr3Bq3zq1zG9wGt8ltclvcFrfNbXM73A630+10u/w1vwzq9rp9bp/b7/a7A+5Ll+W+cgfd1+6Q+8Yddt+6I+47d9Qdc8fd9+6E+8GddKfcaXfGnXU/unPuJ3feeZcaGR+ZEHk7MjHyTmRSZHJkSmRqJC0yLTI98m5kRmRmZFbkvcjsyPuROZG5kXmR+ZH0yAeRBZGFkYzIh5FFkY8imZHFkSWRpZFlkeUR7wtuCX1hX8RH/Q2+qL/RF/PFfQlf0jtfyif6m3xpf7Mv42/xZf2tvpy/zZf3FXxF/6hv4pv6Zr65b+Ef8y39476Vb+3b+Cd8W/+kb+ef8kn+ad/eP+M7+D/5jv5Z38k/5zv7530X39V38y/47v5F38P39Mm+l+/tX/J9fF/fz/f3A/zLfqB/xQ/yr/oUP9gP8a/5of51P8y/4Yf7EX5kzJt+1KVbZBjnU/14P8G/7Sf6d/wkP9lP8VN9mp/mp/t3/Qw/08/y7/nZ/n0/x8/18/x8n+4/8Av8Qp/hP/SL/Ec+0y++9FDSr/Ar/Sq/2q/xa/06v95v8Bv9Jr/Zb/Fb/Ta/3e/wH/ud/hO/y+/2e/ynfq//zO/zn/v9/gt/wH/ps/xX/qD/2h/y3/jD/lt/xH/nj/pj/rj/3p/wP/iT/pQ/7c/4s/5Hf87/5M/z36wxxhhjjP1dxl9uit/2/PI4v9cf5IhfrdwbAK7eWiDr1/0XrijX5f2l3VcktI0AwNM9Oz90aalWLTk5+eK6mRKCInMBLv0k6IIYuBwvhjbwJCRBayj9h/PvK7qepb8xfvRWgLhf5cTC5fjy+J8DYPIfjP/YEyMXlAtPx/+V8ecCFCtyOScnXI4XQ5ufn6+0hjJ/Yf75Wv6N+ef8IhWg1a9ycsHl+PL8E+FxeAaSfrMmY4wxxhhjjDH2i76iYsdL95+XfuPzj+7PE9TlnBxwOf5b9+eMMcYYY4wxxhi78p7t2u2px5KSWnf8xxtV/qmsv7vRGP5TI3PjDxveA1x6RQHAvzggwIWG/G/uxeb/yrZSLh46/7tr2RkfwP+NUv7zjbF/fuUKf2NijDHGGGOM/dtdvvr/7evqSk2IMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhjLhv4b/1fsSu8jY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxdqX9TwAAAP//HmP+kg==") openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x101000, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) 37.209857682s ago: executing program 3 (id=522): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x3, 0x1000002, 0x0, 0xff, "d4e9002b2c000000ff00"}) r1 = syz_open_pts(r0, 0x0) r2 = dup(r1) ioctl$TCSETS2(r2, 0x402c542b, &(0x7f0000000080)={0x0, 0x7, 0x3, 0xa, 0x9, "7fa613661d38e76909e5e556b1af458e900c7e", 0x6, 0x40000000}) 37.086787644s ago: executing program 3 (id=525): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000a8500000005000000850000009e00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='sys_enter\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x50) timer_create(0x0, 0x0, &(0x7f0000bbdffc)=0x0) timer_getoverrun(r1) 37.086675994s ago: executing program 32 (id=525): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000a8500000005000000850000009e00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='sys_enter\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x50) timer_create(0x0, 0x0, &(0x7f0000bbdffc)=0x0) timer_getoverrun(r1) 31.664535227s ago: executing program 0 (id=639): bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="39212beb94820ad56d3355cf1ad138f15ef895b63b954546a063848bf2378a7d78dd3c97af5e288753118d1be78fdaf7a238ce6b3e8473aeb927e5f2421dfa82d402bf0651e4da18262718d4d86539eeaa28586af646240eb110d0c1e0f3a41cdaea2fa843e9a5e627275be96d5d983b86f21a2a251a89fc2f226cf4455b094922017a00168e244635605ad8b77bd5b725ec7458162b6ce8586a6e523893b312b4b5d3d136", @ANYRESDEC], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000400000009"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x2, 0x4, 0x1, 0x0, r0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000840), &(0x7f0000000880)=r0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000e80)={r2, &(0x7f0000000d40), 0x0}, 0x20) 31.647656079s ago: executing program 0 (id=641): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x20082, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x3) io_submit(0x0, 0x1, &(0x7f0000000080)=[0x0]) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000e40)='\b', 0x17ff}], 0x5) 31.247532429s ago: executing program 0 (id=644): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x18) syz_emit_ethernet(0x5e, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa2686dd6c370c8900282b01ce800000000000000000000000000025fe8000000000000000000000000000aa3c000000000000003b03000000"], 0x0) 31.23423083s ago: executing program 0 (id=645): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1c917, &(0x7f0000000140)={[{}, {@noblock_validity}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2}}, {@barrier_val}, {@nogrpid}, {@resgid={'resgid', 0x3d, 0xee01}}, {@noinit_itable}, {@noinit_itable}, {@journal_dev={'journal_dev', 0x3d, 0x7}, 0x32}]}, 0x9b, 0x4f2, &(0x7f0000000a40)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1887008, 0x0) 31.02589429s ago: executing program 0 (id=646): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0xec, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_AF_SPEC={0xcc, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0x2, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @local}]}, @AF_INET={0x30, 0x2, 0x0, 0x1, {0x4, 0x1, 0x0, 0x1, [{0x3}, {0x8}, {0x4}, {0x8}, {0x8}]}}, @AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x11}, {0x8}]}}, @AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}]}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}}, @AF_MPLS={0x4}, @AF_INET6={0x0, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_TOKEN={0x0, 0x7, @private1}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE]}, @AF_MPLS={0x4}]}]}, 0xec}}, 0x0) 30.873086215s ago: executing program 0 (id=647): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e000000000000000000180002801400038010"], 0x44}, 0x1, 0x0, 0x0, 0x20004080}, 0x0) 30.872979515s ago: executing program 33 (id=647): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e000000000000000000180002801400038010"], 0x44}, 0x1, 0x0, 0x0, 0x20004080}, 0x0) 23.341373906s ago: executing program 4 (id=731): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f0000000400), 0xff, 0x23f, &(0x7f0000000540)="$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") ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448dc, 0x0) r0 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r0, &(0x7f0000000180)={0xa0, 0x2f, 0x0, {{0x4, 0x3, 0x5, 0xb, 0x3, 0x2, {0x0, 0x4, 0x0, 0x800000000005, 0x89, 0xd615, 0x7, 0x7fffffff, 0xfffffffd, 0x8000, 0xfffffffe, 0x0, 0x0, 0x3ff, 0x1}}, {0x0, 0x8}}}, 0xa0) sendfile(r0, r0, &(0x7f0000000080), 0x7f03) 23.221628437s ago: executing program 4 (id=733): setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0) mmap(&(0x7f000048a000/0x1000)=nil, 0x1000, 0x2, 0x12, 0xffffffffffffffff, 0x0) r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000402505a1a440000002030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000060000000006241a0000000905810300020000000904010000020d000009"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 22.258304262s ago: executing program 5 (id=742): r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0) ftruncate(r0, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r2, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0) sendfile(r1, r0, 0x0, 0x578410e9) 21.353900511s ago: executing program 4 (id=755): r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000080)=0x6, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x80, 0x4) write$binfmt_script(r0, &(0x7f00000000c0), 0x28) 21.342743422s ago: executing program 5 (id=756): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xd40, 0xd2) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x12, 0xb, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x4}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000004c0)={r2, &(0x7f00000002c0), &(0x7f0000000300)=@tcp=r0}, 0x20) 21.280719438s ago: executing program 4 (id=757): setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000980)={[{@nojournal_checksum}, {@nombcache}, {@barrier}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@usrquota}, {@noauto_da_alloc}, {@bh}, {@init_itable}]}, 0xff, 0x551, &(0x7f0000000cc0)="$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") ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'bridge0\x00'}) mount$incfs(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000005c0), 0x5008000, 0x0) 21.255725131s ago: executing program 5 (id=758): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xf, &(0x7f0000000000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000280)=@framed, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) 21.193698537s ago: executing program 4 (id=761): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_SREGS2(r3, 0x4140aecd, &(0x7f0000000340)={{0x819c006, 0xf000, 0xa, 0x9, 0xf, 0xe, 0x6, 0x5, 0xe7, 0x9d, 0x2, 0x80}, {0xcd74c86e529ab594, 0x0, 0x8, 0x6, 0xf0, 0x9, 0x8, 0xc, 0xd, 0x4, 0x1, 0x3}, {0x6000, 0x1000, 0x3, 0x3, 0x9, 0x3, 0x8a, 0x34, 0x5, 0x15, 0xd, 0x1}, {0x2239e000, 0x3000, 0xf, 0x3, 0x0, 0x80, 0x2, 0x4, 0xb, 0xb, 0x0, 0x6}, {0xdddd1000, 0x3000, 0x0, 0x2, 0x81, 0xd, 0x0, 0x2, 0x5, 0x8, 0x5, 0x3}, {0xffff1000, 0x8000000, 0xc, 0x0, 0x1, 0x7, 0x5, 0x0, 0x0, 0x9, 0x98, 0x5}, {0x8000000, 0x1000, 0x7, 0x5, 0x7, 0x8, 0x5, 0x81, 0x35, 0x5, 0xff, 0x1}, {0xc4cf1000, 0xeeecc000, 0xc, 0xe0, 0x3, 0x0, 0x8, 0x7a, 0x5, 0xf, 0x9, 0x8}, {0x1}, {0x4, 0x4}, 0x10, 0x0, 0x6000, 0x2408, 0x8, 0x0, 0xdddd0000, 0x1, [0x6, 0x8, 0x2, 0x4]}) 21.193167697s ago: executing program 5 (id=762): syz_mount_image$exfat(&(0x7f0000000080), &(0x7f0000000240)='./bus\x00', 0x3010050, &(0x7f0000000600)=ANY=[], 0x1, 0x1513, &(0x7f0000003080)="$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") mount$incfs(&(0x7f0000000300)='./file0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000280), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') r0 = open(&(0x7f00000000c0)='.\x00', 0x10000, 0x0) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 21.045106392s ago: executing program 4 (id=766): openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) fdatasync(r0) 20.999877766s ago: executing program 34 (id=766): openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) fdatasync(r0) 20.983692207s ago: executing program 5 (id=770): r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904000001020d0000052406000105240000000d240f01ffffffff000000000006241a00000008241c030008070009057f0300020000000904010000020d000009040101"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x10, 0x7f9, 0x10, 0x10, 0x4009, 0x8000, 0x12, 0x1}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 20.761075599s ago: executing program 5 (id=772): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x18) socket$inet6(0xa, 0x200000000003, 0x87) syz_emit_ethernet(0x66, &(0x7f0000000080)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0x30, 0x2b, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @local, {[@hopopts={0x87}, @routing={0x3b, 0x2, 0x2, 0x0, 0x700, [@dev={0xfe, 0x80, '\x00', 0x21}]}], {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}}}, 0x0) 20.709585575s ago: executing program 35 (id=772): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x18) socket$inet6(0xa, 0x200000000003, 0x87) syz_emit_ethernet(0x66, &(0x7f0000000080)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0x30, 0x2b, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @local, {[@hopopts={0x87}, @routing={0x3b, 0x2, 0x2, 0x0, 0x700, [@dev={0xfe, 0x80, '\x00', 0x21}]}], {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}}}, 0x0) 5.863089104s ago: executing program 7 (id=1083): munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000a00)={'syz0\x00', {0x9, 0x7, 0x5, 0x5}, 0x3f, [0x9, 0x2, 0x8, 0x6, 0x2, 0x400, 0x80000000, 0x0, 0x8, 0x0, 0x6, 0x2, 0xfffffffb, 0x39, 0x747d5e13, 0x8, 0xfffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x2004, 0x3, 0x4, 0xf252, 0x80, 0x800, 0x300000, 0x7, 0xe, 0x4623f, 0x0, 0x0, 0x1ff, 0x8000, 0x0, 0x3, 0xd, 0x3, 0xba55, 0x8da8, 0x2, 0x200, 0x2, 0x4, 0xe, 0x4, 0x2, 0x6, 0x8, 0x9, 0x1, 0x199f, 0x8, 0x2, 0x9, 0xffffffff, 0x4, 0x6, 0x1000, 0xfffffff6, 0x40, 0x8, 0xa, 0x5], [0x7, 0x1e, 0x3, 0x8000, 0xfffffffe, 0x3, 0x0, 0x25, 0x7, 0xfffffffc, 0x4, 0x7fff, 0x72c, 0x1c32, 0x3, 0x5, 0x10000, 0x400, 0x8001, 0x3, 0x1, 0x297, 0x5, 0x0, 0x981, 0x4, 0x0, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0xfffffffd, 0x5, 0x1, 0xffffffff, 0x6, 0x5, 0x800, 0xffff, 0x6, 0x96, 0xfffffff9, 0x2, 0x0, 0x2, 0x401, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x6, 0x200, 0x3], [0x401, 0xc584, 0xffff, 0xcd3, 0x7, 0x1f, 0x404, 0x4, 0x8, 0x10, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x8, 0x3f92, 0x1000, 0x0, 0x10, 0x1, 0xfffffff9, 0xe58, 0x1000, 0x80040101, 0x4, 0x4, 0x5, 0x200003, 0x2, 0x5, 0x80, 0x9, 0x8001, 0x3, 0x0, 0x3, 0x4, 0x3, 0x6d7e, 0x3, 0x8, 0x3, 0xbf23, 0x6, 0x9, 0x956, 0x0, 0x3ff, 0x3, 0x6, 0x100fffd, 0x2005, 0x9, 0x4, 0xea, 0x9, 0x20000005, 0x3, 0xd9, 0x0, 0x7d, 0x401, 0x5], [0x108e, 0xffff, 0x3, 0x3, 0x88, 0x2, 0x4000000, 0x4, 0x50, 0x2, 0x763, 0xb, 0x402, 0x800, 0x5, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x6, 0x4, 0xe47, 0x3, 0x1654, 0x4, 0x200, 0x2851, 0x3b, 0x20000002, 0x5, 0x800, 0xa80a, 0x65f413f9, 0x4, 0x20008, 0x8a8, 0x6, 0x44, 0x409, 0x3, 0x4, 0x4, 0x10, 0x4, 0xffffffff, 0x7fff, 0x2, 0xfffffff8, 0x401, 0x1, 0x200, 0x7, 0x4edf, 0xfffffffd, 0xa, 0xe, 0x2, 0xf, 0xf, 0x136, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 5.839497726s ago: executing program 7 (id=1084): open$dir(0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x0, 0x7fff0000}]}) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) waitid(0x0, r0, 0x0, 0x8, 0x0) 5.811211629s ago: executing program 7 (id=1085): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000140)={0x9, 0x5, 0xd, 0xffff, 0x0, "4ae23ae17df2e98c69ba36c4095c911abad88f"}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0x7f) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x9) 5.810530219s ago: executing program 7 (id=1086): syz_mount_image$ext4(&(0x7f00000008c0)='ext4\x00', &(0x7f0000000300)='./file1\x00', 0x800080, &(0x7f0000000440)={[{@test_dummy_encryption}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x6}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40000}}]}, 0x3, 0x45f, &(0x7f0000000900)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(&(0x7f0000000080)='.\x00', 0x0, 0x120) getdents64(r0, 0xfffffffffffffffe, 0x41) 5.69533081s ago: executing program 7 (id=1088): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket(0x10, 0x3, 0x0) connect$netlink(r1, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfc, 0x40000}, 0xc) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000001540)=@newtaction={0x18, 0x32, 0x829, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) 5.537128266s ago: executing program 7 (id=1089): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = memfd_create(&(0x7f0000000200)='\f\x8b\x8a\xa9\x16\x11O\xdd\xdfk(F\x99\xdf\x9a\xd5>oJ\x02u\x9b\x94a\xac\xfe6A\xc4\a\x9e\xbd\xa2\xfb\rD\xefq\x1f!\x01\xc3\xa5U\x98\xee\xcd;A\xe8\x00~V\xbf\xd4\x00\xd2,7\xa0\xfd7\xe8\xf9M\x02\xec\f3\xd4\xb8\xc3\x85\xda\xeb\xce7y%S\x1e\xa9\xe9\x92!\x95\xf1Ek\x95\x9bQ\x1d\xa4\xc2\xbb\xfa\x96\x14\x7f\xb9\x90\x9cn\xb5\x10\xd2\x84\xe9\x9e1\x9a\x9e\xa7\x9e\xcd\x1a\x86\x14%\xbaS\x90\xb1j\xf9\x00\xd7@D\x04\xaa\xb55\xd8x?z\xff\x85j3\xbe\axo\x05)\xcc\xcd\x9b\xb3\xe7w\x0e\x9f\xd3\aU\xf0M\xc1\xad\x17t\xeb\x1b\x11m\xec\x00\x00\x00\x00R\xb6v\x88\a\x82\x9e\x00\x00\x00\x10\x00\x00\x00\xa6!\xb3\xa8\xe7[&\x165\x84\xce\xa5\xc4wT\xf2E\tj\x92G\x14\x04\x93\xa4\xba\xcb\xce\"Y\xd68\xeb\x01\xc9/\x19\x85\xc6\x8do\xcb\x17\xb5\xffW\xe6\x8a\xfb\a\xf6', 0x2) write$binfmt_misc(r1, &(0x7f0000000280), 0xff9d) sendfile(r0, r1, &(0x7f0000000100), 0x2) fcntl$addseals(r1, 0x409, 0x8) 5.537043556s ago: executing program 36 (id=1089): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = memfd_create(&(0x7f0000000200)='\f\x8b\x8a\xa9\x16\x11O\xdd\xdfk(F\x99\xdf\x9a\xd5>oJ\x02u\x9b\x94a\xac\xfe6A\xc4\a\x9e\xbd\xa2\xfb\rD\xefq\x1f!\x01\xc3\xa5U\x98\xee\xcd;A\xe8\x00~V\xbf\xd4\x00\xd2,7\xa0\xfd7\xe8\xf9M\x02\xec\f3\xd4\xb8\xc3\x85\xda\xeb\xce7y%S\x1e\xa9\xe9\x92!\x95\xf1Ek\x95\x9bQ\x1d\xa4\xc2\xbb\xfa\x96\x14\x7f\xb9\x90\x9cn\xb5\x10\xd2\x84\xe9\x9e1\x9a\x9e\xa7\x9e\xcd\x1a\x86\x14%\xbaS\x90\xb1j\xf9\x00\xd7@D\x04\xaa\xb55\xd8x?z\xff\x85j3\xbe\axo\x05)\xcc\xcd\x9b\xb3\xe7w\x0e\x9f\xd3\aU\xf0M\xc1\xad\x17t\xeb\x1b\x11m\xec\x00\x00\x00\x00R\xb6v\x88\a\x82\x9e\x00\x00\x00\x10\x00\x00\x00\xa6!\xb3\xa8\xe7[&\x165\x84\xce\xa5\xc4wT\xf2E\tj\x92G\x14\x04\x93\xa4\xba\xcb\xce\"Y\xd68\xeb\x01\xc9/\x19\x85\xc6\x8do\xcb\x17\xb5\xffW\xe6\x8a\xfb\a\xf6', 0x2) write$binfmt_misc(r1, &(0x7f0000000280), 0xff9d) sendfile(r0, r1, &(0x7f0000000100), 0x2) fcntl$addseals(r1, 0x409, 0x8) 3.901123736s ago: executing program 9 (id=1117): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, &(0x7f0000004340)=[{&(0x7f0000000f00)="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", 0xe24}, {0x0, 0x4000}, {0x0}, {0x0}, {&(0x7f00000020c0), 0x500}], 0x5}, 0x0) 3.824818394s ago: executing program 9 (id=1122): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) process_mrelease(0xffffffffffffffff, 0x0) 3.796096077s ago: executing program 9 (id=1125): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402609333340000000000109022400010000000009040000010301010009210000000122010009058103"], 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000480)={0x24, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="002201"], 0x0}, 0x0) 2.666137048s ago: executing program 2 (id=1162): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000ffffffff00000000000000001801000020646c250000000000202c207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000007d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sys_enter\x00', r0}, 0x10) r1 = timerfd_create(0x9, 0x80800) timerfd_settime(r1, 0x0, &(0x7f0000000980)={{}, {0x0, 0x989680}}, 0x0) 2.637205171s ago: executing program 2 (id=1163): ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, &(0x7f0000000040)={0x10000, 0x380, 0x9, &(0x7f0000000200)=[0x8, 0x1, 0x7, 0x401, 0x1e69, 0x1ff, 0x8, 0x81, 0x8, 0xffffffffffffffff, 0x55, 0x6, 0x403, 0x4, 0x3, 0x3, 0x1, 0x5, 0x7, 0x660, 0xfffffffffffffffb, 0x5f5e, 0x7, 0x4, 0xfffffffffffffc01, 0x2, 0x3, 0xff, 0xfffffffffffffffb, 0x4, 0x2, 0xfffffffffffffff9, 0x3, 0x35, 0x6, 0x5, 0x8000000000000000, 0x9d, 0x8, 0x9, 0x8, 0x2, 0x5, 0x7, 0x8, 0x1, 0xfff, 0x9, 0x3, 0x6, 0x6, 0x5, 0x8000, 0x7, 0x6, 0x41, 0xff, 0x100, 0x400, 0x3, 0x0, 0x80000001, 0x4, 0x6f9, 0x5, 0x8, 0x32, 0x35b, 0x5, 0xa0a4, 0x2, 0x6, 0x0, 0xa33, 0xc1e2, 0xfffffffffffffbff, 0x8, 0xfffffffffffffffe, 0x0, 0x7, 0x6f7, 0x1, 0x80, 0x6, 0x9, 0x0, 0xb, 0x3, 0x101, 0x0, 0x0, 0x4, 0x9, 0x81, 0x12, 0x3, 0x29, 0xf7, 0x80000001, 0x9, 0x4, 0xffffffffffffffff, 0x1, 0x8, 0x8d94, 0x6, 0xfffffffffffffffd, 0x100000000, 0x663e, 0x12d69986, 0x1, 0x63, 0x5, 0x1000, 0x4, 0x4, 0x79, 0x9, 0x9, 0x2, 0x3, 0xf, 0x3, 0x25, 0x2, 0x8, 0x0, 0x2dbbd6b8]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000002c0)=ANY=[@ANYBLOB="020000000000000cd004"]) 2.552912899s ago: executing program 2 (id=1164): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./file1\x00', 0x101880a, &(0x7f0000005a80)=ANY=[@ANYBLOB="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"], 0x1, 0x550b, &(0x7f0000000540)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) lseek(r0, 0x7fffffffffffffff, 0x0) 2.222868512s ago: executing program 2 (id=1170): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='kmem_cache_free\x00', r0}, 0x18) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) 2.03380461s ago: executing program 2 (id=1178): socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4) r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="1201000000000010ac054b02000000000001090224000100003000090400000103e6000009210000000122450009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000a40)={0x2c, &(0x7f00000001c0)=ANY=[@ANYBLOB="40066700000045a7"], 0x0, 0x0, 0x0, 0x0}, 0x0) 1.846342509s ago: executing program 9 (id=1180): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000010100008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='hrtimer_init\x00', r1}, 0x18) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x8080, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000340)={'pimreg1\x00', 0x1}) 1.7322931s ago: executing program 9 (id=1181): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) 1.577071485s ago: executing program 9 (id=1183): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000406a05b50000000000000109022d000100000003090400000103f70000092102000801220700090581030000060a0709"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\"-\x00\x00'], 0x0}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 1.474518035s ago: executing program 8 (id=1190): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r2, &(0x7f0000000540)={&(0x7f00000001c0)=@name={0x1e, 0x2, 0x0, {{0x42}, 0x2}}, 0x10, 0x0}, 0x10) 1.453854507s ago: executing program 8 (id=1192): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002c00)=ANY=[@ANYBLOB="bf16000000000000b70700000900f0ff4070000000000000500000000000000095000000000000002ba728041598d6fbd30cb599e8c73d24a3aa81d36bb3019c13bd23212fb56fa54f26fb0b71d0e6adfefc41d86bd917487960717142fa9ea4318123741c0a0e168c1886d0d4d94f2f4e345c652ebc1626e3a2a2ad35806150ae0209e62f51ee988e6e0dc8ce974a22a550d6fd70800c86ae3b3e05df3ceb9fc474c2a100c788b277beee1cbf9b0a4def23d410f6296b32a8343881dcc7b1b85f3c3d44aeaccd3641110bec4e90a6341965c39e4b3449abe802f5ab3e89cf6c662ed4048d3b3e22278d00031e5388ee6f867ddd58211d6ececb0cd2b6d357b8580218ce740068725837074e468ee23fd2f73902ebcfcf49822775985bf31b715f5888b2c81f96a810b946855c9fc52ac17cbc97a616811a4c2dc3470009b966abaf41939aeca3e7b00c2e9d5db7a34fe2a29ac88c360a878a2b9ab9440c1961e80477166f3f847e855cdddc941d996d61ea0ce23b37e9d21c849d1e1e53087a3b109012e3a3ecbd219265048bf5c72b7ba2806b73323301b4bc94d0e4afde44867d71049a7c89bc615e215571ac910d80a58b5169576ff9906c34d2342806960b6bcb00000000000000000000000000113ee640b9ed1e04a0bfb125204d30990361bf45ef45277a167cd2c2e6ce9138143aa5ea7ee6f7c6d8b00437e070b004c5aa90766538b4fe45a16f14b270904d36eaa87508ac6d46639b3971ac6a88dc531fcc5ffc6b76b334795d88156336a9a452a9022485bb572dacb7aa25f748bc75918a16d9d5ae21004cd799ac4951beb2c6c9b5baf60081b86cc2e31c49f4ea055fb3639036c95c69b1ae60e685d486dbd1d5e7d0daacd73acfc80b9c9c92"], &(0x7f0000000140)='GPL\x00'}, 0x48) r1 = socket$netlink(0x10, 0x3, 0x9) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000017c0)=r0, 0x4) sendmsg$NFT_BATCH(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x28}, 0x1, 0x0, 0x0, 0x20}, 0x4000) 1.409675802s ago: executing program 8 (id=1193): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [0x0, 0x0, 0x0, 0xffffff00], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000180)='./file1\x00', 0x8084, &(0x7f00000001c0)=ANY=[@ANYBLOB="616c6c6f775f7574696d653d30303030303030303030303030303030303030303030372c646f74732c646f74732c6e6f636173652c646f74732c636865636b3d72656c617865642c646f74732c6e6f646f74732c646f74732c0032884758edd2e7a17e3c116a014262927783807ed4e210440ddebdf7d64a629cc9e873202c6d1e1d7dbabad279cb290d8a6c81b9ee715a035afdc5af3e15b932174f56cf4f009847fbc0e187d20fe47e50595251e835b306e05bc51afba211073e289eb499be4d726e3efbbeb1eb175e92b262c4ee4cee83e529784e53c874b73bb376876e2f3b2e667330e12c337d3a8b8cacccd9d86bc4c2f3b8971a79fb8f69af7b1d19592bf6a7186f7d4322045a99eaa207c407ab52aeadaaf1d089c278fccfb2138f"], 0x1, 0x189, &(0x7f0000000540)="$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") connect$inet6(r0, &(0x7f0000000cc0)={0xa, 0x4e23, 0x81, @empty, 0xc}, 0x1c) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x9511, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xffd0}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 1.303276132s ago: executing program 8 (id=1199): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r0, 0x400, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0xffffffffffffffef}, 0x27) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000500)='leases_conflict\x00', r1}, 0x18) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) 1.245329058s ago: executing program 8 (id=1202): syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000680)='./file2\x00', 0x800000, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x1, 0x5504, &(0x7f000000c0c0)="$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") bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) open(0x0, 0x14927e, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x64842, 0x0) pwritev2(r0, &(0x7f0000000240), 0x1, 0x0, 0x0, 0x0) 1.203413622s ago: executing program 1 (id=1204): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$erofs(&(0x7f00000001c0), &(0x7f0000000400)='./file0\x00', 0x10802, &(0x7f0000000200)=ANY=[], 0x0, 0x21e, &(0x7f0000000440)="$eJzsmb1rFEEYxp/Z3dtNggg2FjZBDBoxyX6cSpqACmIlCFHU8jCbcGaTk8sKSUC4kMbGUkTQ0n/AwiK1nY3YWGjhB4KFKQULYWRmZzazd7vniacgvr9i7t33Y96Z3bnn4BYEQfy3fHj/9d29c7OXpwDswwQ85f9s7+VYRv7bh7dP3J87/+jpmyfPV/ff2SnO5sqR88Oj2vPyY//+DOjgrFsZnxDDg6LvCiwcV/ZV5LXfuSS7iMFwXQVuGnZLryyJZ260koXFZhIHYgjFEImhbvZyAOxuMSwAGJF745wZ8bWNzeVGksTtbqPGdZ9iSPdfRkcZpeWm0ef2dbQxpz7F+sTzunZ3e0tczyh/ACu7lwBCWAiVXQfDvLJn4WEcQH5LjP0fcvbmtwfZ/18yjnZ72LfsGAjPgeneqhqA32hq41eqHqP8EPz7xtRroOjh3vB74cyfWDzr9ogvdO45uLvzQoe285xPQ+ku5K435A1nX6zqsEnhgvG8LqicV2NJcnHwxfcIlpbe0ioRGJX6wRzgmKFPDpxcP/x05Za/trE53VxpLMVL8WoU1U8HJ4PgVOQvNj0EvlToSgF0MCL1acyYv1aR6zIX6400bYfrQNoO8+soGw3FnX/W+iJrLKl/FiaPZHMw/SvnlfdgRnMmsyftysUTBEEQBEEQBEEQBEEQBEH8FP1nJAMwDobsFYh8UcUriC7Jih8BAAD//6GzV7g=") chdir(&(0x7f0000000240)='./file0\x00') open(&(0x7f0000000080)='./file1\x00', 0x64842, 0x0) 864.665965ms ago: executing program 8 (id=1205): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x2d) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x19, 0x4, 0x4, 0x1ffff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) 864.046055ms ago: executing program 1 (id=1215): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = io_uring_setup(0x1de2, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0xfff7fffc}) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000006c0)=[{0x0}], 0x1) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) 775.196004ms ago: executing program 1 (id=1206): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r1}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xa, 0x101, 0x7ffc, 0xcc}, 0x50) 689.987733ms ago: executing program 1 (id=1207): io_setup(0x227b, &(0x7f0000000400)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000000)={0x0, 0xea60}, 0x10) io_submit(r0, 0x2, &(0x7f0000000140)=[&(0x7f00000001c0)={0x0, 0x4, 0x0, 0x0, 0x0, r1, &(0x7f0000000200)=' ', 0x1, 0x0, 0x0, 0x2}, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x3, 0x2, r1, 0x0}]) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 529.037368ms ago: executing program 6 (id=1209): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = gettid() rt_sigqueueinfo(r1, 0x21, &(0x7f00000002c0)={0xb, 0x4}) 528.802128ms ago: executing program 6 (id=1210): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x5, 0x7fffffff}]}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001a80)={0x18, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000018c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r1}, 0x10) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f00000000c0)={0x0, 0x3, 0xffffffffffffffff, 0x5, 0x80000}) 528.646238ms ago: executing program 1 (id=1211): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2008042, &(0x7f00000000c0), 0x1, 0x571, &(0x7f0000000780)="$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") mkdir(&(0x7f0000000440)='./file0\x00', 0x60) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f0000000080)='./bus\x00', 0x3) renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x4) 471.016904ms ago: executing program 6 (id=1212): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x6) fchdir(r1) getcwd(&(0x7f0000000000)=""/204, 0xcc) 446.289376ms ago: executing program 6 (id=1213): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'pimreg\x00', 0x5005}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010024bd7000fc0ddf2500000000", @ANYRES32=0x0, @ANYBLOB="1b0b04000300000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) write$tun(r0, &(0x7f0000001400)={@void, @val={0x0, 0x0, 0x8, 0x6ed, 0x19, 0x8}, @ipv4=@tcp={{0x5, 0x4, 0x1, 0x1, 0xfc5, 0x67, 0x0, 0x4a, 0x6, 0x0, @empty, @multicast1}, {{0x4e23, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x20, 0xece5, 0x0, 0x0, {[@eol]}}, {"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"}}}}, 0xfcf) 259.776835ms ago: executing program 6 (id=1214): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='rss_stat\x00', r1}, 0x10) syz_clone(0x42000000, 0x0, 0x0, 0x0, 0x0, 0x0) 108.67307ms ago: executing program 2 (id=1216): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x1, 0xfc, 0x7ffc1ffb}]}) syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000), 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) 94.347861ms ago: executing program 1 (id=1217): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f00000001c0)={0x9d, 0x0, 0x1}) 0s ago: executing program 6 (id=1218): bpf$ENABLE_STATS(0x20, &(0x7f0000000000), 0x4) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x800, &(0x7f0000000c40)={[{@noload}, {@usrquota}, {@sysvgroups}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x3}}, {@barrier_val={'barrier', 0x3d, 0x453}}, {@dioread_nolock}, {@resgid}, {@barrier}]}, 0x2, 0xbe0, &(0x7f0000001880)="$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") rmdir(&(0x7f0000000040)='./file0\x00') kernel console output (not intermixed with test programs): inue. Quota mode: writeback. [ 45.538510][ T356] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 45.552100][ T356] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 45.564382][ T356] usb 1-1: config 0 descriptor?? [ 45.645086][ T1619] loop3: detected capacity change from 0 to 256 [ 45.652509][ T1619] exfat: Deprecated parameter 'utf8' [ 45.661046][ T1619] exfat: Deprecated parameter 'namecase' [ 45.670729][ T1619] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 45.712764][ T1622] netlink: 'syz.4.520': attribute type 4 has an invalid length. [ 45.828626][ T356] asix 1-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 46.021807][ T1636] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.029149][ T1636] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.036651][ T1636] device bridge_slave_0 entered promiscuous mode [ 46.043995][ T1636] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.051211][ T1636] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.058916][ T1636] device bridge_slave_1 entered promiscuous mode [ 46.079380][ T1633] loop1: detected capacity change from 0 to 40427 [ 46.091627][ T1633] F2FS-fs (loop1): invalid crc value [ 46.101811][ T1633] F2FS-fs (loop1): Found nat_bits in checkpoint [ 46.141623][ T1633] F2FS-fs (loop1): Start checkpoint disabled! [ 46.148606][ T1633] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 46.195406][ T1633] attempt to access beyond end of device [ 46.195406][ T1633] loop1: rw=2049, want=78232, limit=40427 [ 46.235545][ T8] attempt to access beyond end of device [ 46.235545][ T8] loop1: rw=1, want=77912, limit=40427 [ 46.251536][ T8] attempt to access beyond end of device [ 46.251536][ T8] loop1: rw=2049, want=40976, limit=40427 [ 46.253708][ T1636] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.269850][ T1636] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.340188][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.348194][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 46.355811][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 46.371921][ T1655] loop2: detected capacity change from 0 to 40427 [ 46.383445][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 46.392000][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 46.400724][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.407790][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.419528][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 46.420149][ T1655] F2FS-fs (loop2): invalid crc value [ 46.447299][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.454484][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.462951][ T1655] F2FS-fs (loop2): Found nat_bits in checkpoint [ 46.470490][ T10] device bridge_slave_1 left promiscuous mode [ 46.476660][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.492031][ T10] device bridge_slave_0 left promiscuous mode [ 46.504878][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.521062][ T10] device veth1_macvtap left promiscuous mode [ 46.532569][ T10] device veth0_vlan left promiscuous mode [ 46.542938][ T1655] F2FS-fs (loop2): Start checkpoint disabled! [ 46.561442][ T1655] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 46.617587][ T1665] loop1: detected capacity change from 0 to 40427 [ 46.628709][ T1665] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 46.636853][ T1665] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 46.664860][ T1665] F2FS-fs (loop1): invalid crc value [ 46.670318][ T356] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 46.680686][ T356] asix: probe of 1-1:0.0 failed with error -71 [ 46.687998][ T356] usb 1-1: USB disconnect, device number 4 [ 46.696281][ T1665] F2FS-fs (loop1): Found nat_bits in checkpoint [ 46.714509][ T1353] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 46.739136][ T1353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 46.747816][ T1353] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 46.763026][ T1665] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 46.763365][ T1636] device veth0_vlan entered promiscuous mode [ 46.771886][ T1665] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 46.786852][ T1353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 46.795818][ T1353] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 46.803664][ T1353] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 46.822166][ T1636] device veth1_macvtap entered promiscuous mode [ 46.829190][ T1353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 46.842385][ T1353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 46.851434][ T8] attempt to access beyond end of device [ 46.851434][ T8] loop2: rw=2049, want=45104, limit=40427 [ 46.864652][ T1353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 47.170711][ T281] attempt to access beyond end of device [ 47.170711][ T281] loop1: rw=2049, want=40968, limit=40427 [ 47.278430][ T58] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 47.291747][ T1682] loop2: detected capacity change from 0 to 40427 [ 47.314179][ T1695] device bridge1 entered promiscuous mode [ 47.373782][ T1682] F2FS-fs (loop2): fault_type options not supported [ 47.383792][ T1697] netlink: 'syz.4.549': attribute type 12 has an invalid length. [ 47.415134][ T1701] loop4: detected capacity change from 0 to 512 [ 47.433716][ T1703] syz.0.552[1703] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 47.433794][ T1703] syz.0.552[1703] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 47.453614][ T1682] F2FS-fs (loop2): invalid crc value [ 47.471759][ T1701] EXT4-fs (loop4): orphan cleanup on readonly fs [ 47.479180][ T1701] EXT4-fs error (device loop4): ext4_orphan_get:1427: comm syz.4.551: bad orphan inode 13 [ 47.489814][ T1701] ext4_test_bit(bit=12, block=18) = 1 [ 47.495224][ T1701] is_bad_inode(inode)=0 [ 47.499737][ T1701] NEXT_ORPHAN(inode)=2130706432 [ 47.502077][ T1682] F2FS-fs (loop2): Found nat_bits in checkpoint [ 47.504719][ T1701] max_ino=32 [ 47.515049][ T1701] i_nlink=1 [ 47.546556][ T1701] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 47.568428][ T58] usb 6-1: Using ep0 maxpacket: 32 [ 47.595807][ T1712] loop0: detected capacity change from 0 to 4096 [ 47.624110][ T1682] F2FS-fs (loop2): Start checkpoint disabled! [ 47.635765][ T1712] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 47.643303][ T1682] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 47.672512][ T1712] EXT4-fs (loop0): Test dummy encryption mode enabled [ 47.686185][ T1712] EXT4-fs (loop0): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000008000000,mblk_io_submit,nodioread_nolock,test_dummy_encryption,nombcache,nodelalloc,minixdf,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback. [ 47.748566][ T58] usb 6-1: unable to get BOS descriptor or descriptor too short [ 47.828566][ T58] usb 6-1: config 1 interface 0 altsetting 7 bulk endpoint 0x82 has invalid maxpacket 8 [ 47.850727][ T58] usb 6-1: config 1 interface 0 altsetting 7 bulk endpoint 0x3 has invalid maxpacket 16 [ 47.868259][ T58] usb 6-1: config 1 interface 0 has no altsetting 0 [ 47.888977][ T356] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 47.896995][ T1736] syz.0.563 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 48.028595][ T58] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 48.038112][ T58] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 48.046255][ T58] usb 6-1: Product: syz [ 48.050565][ T58] usb 6-1: Manufacturer: syz [ 48.055328][ T58] usb 6-1: SerialNumber: syz [ 48.078945][ T1678] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 48.086105][ T1678] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 48.118199][ T1747] loop0: detected capacity change from 0 to 4096 [ 48.136811][ T1747] EXT4-fs (loop0): Test dummy encryption mode enabled [ 48.156054][ T1747] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 48.158445][ T356] usb 2-1: Using ep0 maxpacket: 32 [ 48.174024][ T1747] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 48.182561][ T1747] System zones: 0-5 [ 48.187458][ T1747] EXT4-fs (loop0): mounted filesystem without journal. Opts: debug,delalloc,journal_ioprio=0x0000000000000000,test_dummy_encryption,nodiscard,min_batch_time=0x0000000000000005,acl,nomblk_io_submit,,errors=continue. Quota mode: writeback. [ 48.227083][ T1747] fs-verity: sha512 using implementation "sha512-avx2" [ 48.328461][ T356] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 48.339601][ T356] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 48.356736][ T356] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 48.366074][ T356] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 48.368795][ T58] usb 6-1: bad CDC descriptors [ 48.382856][ T356] usb 2-1: config 0 descriptor?? [ 48.387029][ T58] usb 6-1: USB disconnect, device number 2 [ 48.504996][ T1776] loop4: detected capacity change from 0 to 256 [ 48.538405][ T1776] FAT-fs (loop4): Directory bread(block 64) failed [ 48.545116][ T1776] FAT-fs (loop4): Directory bread(block 65) failed [ 48.551818][ T1776] FAT-fs (loop4): Directory bread(block 66) failed [ 48.558497][ T1776] FAT-fs (loop4): Directory bread(block 67) failed [ 48.565146][ T1776] FAT-fs (loop4): Directory bread(block 68) failed [ 48.571744][ T1776] FAT-fs (loop4): Directory bread(block 69) failed [ 48.578345][ T1776] FAT-fs (loop4): Directory bread(block 70) failed [ 48.585957][ T1776] FAT-fs (loop4): Directory bread(block 71) failed [ 48.592600][ T6] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 48.594314][ T1776] FAT-fs (loop4): Directory bread(block 72) failed [ 48.607249][ T1776] FAT-fs (loop4): Directory bread(block 73) failed [ 48.669533][ T1778] loop4: detected capacity change from 0 to 1024 [ 48.710150][ T1778] EXT4-fs (loop4): mounted filesystem without journal. Opts: user_xattr,nodioread_nolock,,errors=continue. Quota mode: none. [ 48.723274][ T1778] ext4 filesystem being mounted at /119/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.738092][ T1778] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1147: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 48.753115][ T578] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 48.753263][ T1778] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 319 with max blocks 1 with error 28 [ 48.773363][ T1778] EXT4-fs (loop4): This should not happen!! Data will be lost [ 48.773363][ T1778] [ 48.783257][ T1778] EXT4-fs (loop4): Total free blocks count 0 [ 48.789356][ T1778] EXT4-fs (loop4): Free/Dirty block details [ 48.795270][ T1778] EXT4-fs (loop4): free_blocks=4293918720 [ 48.801044][ T1778] EXT4-fs (loop4): dirty_blocks=16 [ 48.806177][ T1778] EXT4-fs (loop4): Block reservation details [ 48.812219][ T1778] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 48.838497][ T6] usb 1-1: Using ep0 maxpacket: 16 [ 48.881815][ T356] savu 0003:1E7D:2D5A.0007: hiddev96,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0 [ 48.926819][ T1785] loop4: detected capacity change from 0 to 8192 [ 49.088412][ T1781] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 49.118539][ T6] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 49.127735][ T578] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 49.138793][ T6] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 49.146791][ T6] usb 1-1: Product: syz [ 49.151262][ T578] usb 3-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 49.152501][ T58] usb 2-1: USB disconnect, device number 4 [ 49.160487][ T578] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 49.160918][ T6] usb 1-1: Manufacturer: syz [ 49.179480][ T578] usb 3-1: config 0 descriptor?? [ 49.184570][ T6] usb 1-1: SerialNumber: syz [ 49.190738][ T6] r8152-cfgselector 1-1: config 0 descriptor?? [ 49.198535][ T1774] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 49.458531][ T1781] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 49.628524][ T1781] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 49.637703][ T1781] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 49.647008][ T578] hid-generic 0003:04F3:0755.0008: unknown main item tag 0x0 [ 49.654489][ T1781] usb 6-1: Product: syz [ 49.658719][ T578] hid-generic 0003:04F3:0755.0008: unknown main item tag 0x0 [ 49.666126][ T578] hid-generic 0003:04F3:0755.0008: unknown main item tag 0x0 [ 49.673615][ T6] r8152-cfgselector 1-1: Unknown version 0x0000 [ 49.679921][ T1781] usb 6-1: Manufacturer: syz [ 49.684532][ T1781] usb 6-1: SerialNumber: syz [ 49.689228][ T6] r8152-cfgselector 1-1: bad CDC descriptors [ 49.695925][ T578] hid-generic 0003:04F3:0755.0008: unknown main item tag 0x0 [ 49.703629][ T1781] usb 6-1: config 0 descriptor?? [ 49.708676][ T6] r8152-cfgselector 1-1: Unknown version 0x0000 [ 49.711621][ T1791] loop1: detected capacity change from 0 to 512 [ 49.715976][ T6] r8152-cfgselector 1-1: USB disconnect, device number 5 [ 49.728500][ T578] hid-generic 0003:04F3:0755.0008: unknown main item tag 0x0 [ 49.744255][ T578] hid-generic 0003:04F3:0755.0008: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.2-1/input0 [ 49.756957][ T1781] snd-usb-audio: probe of 6-1:0.0 failed with error -22 [ 49.775790][ T1791] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 49.788152][ T1791] ext4 filesystem being mounted at /159/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.789688][ T30] kauditd_printk_skb: 81 callbacks suppressed [ 49.789704][ T30] audit: type=1400 audit(1760354808.082:724): avc: denied { bind } for pid=1794 comm="syz.4.588" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 49.825558][ T1791] EXT4-fs error (device loop1): ext4_get_first_dir_block:3619: inode #12: comm syz.1.587: directory missing '..' [ 49.851196][ T30] audit: type=1400 audit(1760354808.092:725): avc: denied { rename } for pid=1790 comm="syz.1.587" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 49.860392][ T1799] loop4: detected capacity change from 0 to 256 [ 49.899073][ T1801] loop1: detected capacity change from 0 to 512 [ 49.909218][ T1799] FAT-fs (loop4): Directory bread(block 64) failed [ 49.915972][ T1799] FAT-fs (loop4): Directory bread(block 65) failed [ 49.916829][ T1801] EXT4-fs (loop1): orphan cleanup on readonly fs [ 49.922638][ T1799] FAT-fs (loop4): Directory bread(block 66) failed [ 49.936324][ T1799] FAT-fs (loop4): Directory bread(block 67) failed [ 49.942966][ T1799] FAT-fs (loop4): Directory bread(block 68) failed [ 49.946513][ T1801] EXT4-fs error (device loop1): ext4_orphan_get:1427: comm syz.1.590: bad orphan inode 13 [ 49.950019][ T1799] FAT-fs (loop4): Directory bread(block 69) failed [ 49.965763][ T578] usb 6-1: USB disconnect, device number 3 [ 49.966987][ T1799] FAT-fs (loop4): Directory bread(block 70) failed [ 49.979028][ T1799] FAT-fs (loop4): Directory bread(block 71) failed [ 49.985931][ T1799] FAT-fs (loop4): Directory bread(block 72) failed [ 49.992690][ T1799] FAT-fs (loop4): Directory bread(block 73) failed [ 49.999840][ T1801] ext4_test_bit(bit=12, block=18) = 1 [ 50.005424][ T1801] is_bad_inode(inode)=0 [ 50.009767][ T1801] NEXT_ORPHAN(inode)=2130706432 [ 50.014644][ T1801] max_ino=32 [ 50.018012][ T1801] i_nlink=1 [ 50.021352][ T1801] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 50.113623][ T1806] loop4: detected capacity change from 0 to 256 [ 50.161521][ T1806] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 50.179682][ T30] audit: type=1400 audit(1760354808.472:726): avc: denied { add_name } for pid=1805 comm="syz.4.592" name="rdma.current" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 50.214209][ T30] audit: type=1400 audit(1760354808.492:727): avc: denied { associate } for pid=1805 comm="syz.4.592" name="rdma.current" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 50.240104][ T30] audit: type=1400 audit(1760354808.492:728): avc: denied { read append open } for pid=1805 comm="syz.4.592" path="/124/file0/rdma.current" dev="loop4" ino=1048686 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 50.328288][ T1820] loop4: detected capacity change from 0 to 128 [ 50.349161][ T1820] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 50.377482][ T1820] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 50.393136][ T30] audit: type=1326 audit(1760354808.682:729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1825 comm="syz.0.601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f751adb5ec9 code=0x7ffc0000 [ 50.439956][ T10] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 50.446577][ T30] audit: type=1326 audit(1760354808.682:730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1825 comm="syz.0.601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=271 compat=0 ip=0x7f751adb5ec9 code=0x7ffc0000 [ 50.482034][ T1830] loop1: detected capacity change from 0 to 512 [ 50.482490][ T30] audit: type=1326 audit(1760354808.682:731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1825 comm="syz.0.601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f751adb5ec9 code=0x7ffc0000 [ 50.514321][ T30] audit: type=1326 audit(1760354808.702:732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1825 comm="syz.0.601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f751adb5ec9 code=0x7ffc0000 [ 50.539623][ T30] audit: type=1400 audit(1760354808.732:733): avc: denied { remount } for pid=1819 comm="syz.4.598" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 50.578535][ T1830] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 50.600428][ T1830] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 50.608084][ T1834] loop4: detected capacity change from 0 to 1024 [ 50.622456][ T1834] EXT4-fs (loop4): Ignoring removed orlov option [ 50.634398][ T1830] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 50.642562][ T1830] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=842c01c, mo2=0002] [ 50.652245][ T1830] EXT4-fs (loop1): couldn't mount RDWR because of unsupported optional features (80) [ 50.661907][ T1830] EXT4-fs (loop1): Skipping orphan cleanup due to unknown ROCOMPAT features [ 50.673034][ T1830] EXT4-fs (loop1): mounted filesystem without journal. Opts: dioread_nolock,noinit_itable,nomblk_io_submit,noblock_validity,data_err=abort,data_err=ignore,jqfmt=vfsv0,barrier=0x000000000000d95a,debug,,errors=continue. Quota mode: none. [ 50.704874][ T1834] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_lock,resgid=0x0000000000000000,nodioread_nolock,norecovery,debug_want_extra_isize=0x0000000000000080,resgid=0x0000000000000000,errors=remount-ro,grpid,orlov,. Quota mode: none. [ 50.733396][ T1830] EXT4-fs warning (device loop1): dx_probe:893: inode #2: comm syz.1.603: dx entry: limit 65535 != root limit 120 [ 50.746028][ T1830] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.603: Corrupt directory, running e2fsck is recommended [ 50.921907][ T1862] netlink: 24 bytes leftover after parsing attributes in process `syz.5.616'. [ 51.105494][ T1888] loop0: detected capacity change from 0 to 512 [ 51.140813][ T1888] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,auto_da_alloc,minixdf,,errors=continue. Quota mode: writeback. [ 51.155012][ T1888] ext4 filesystem being mounted at /142/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 51.331601][ T1353] Bluetooth: hci0: Frame reassembly failed (-84) [ 51.358540][ T58] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 51.418458][ T338] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 51.609056][ T39] usb 3-1: USB disconnect, device number 7 [ 51.668471][ T338] usb 6-1: Using ep0 maxpacket: 8 [ 51.704279][ T1926] loop0: detected capacity change from 0 to 512 [ 51.738629][ T58] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 51.752364][ T58] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 51.753571][ T1926] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 51.772651][ T1926] EXT4-fs (loop0): orphan cleanup on readonly fs [ 51.779967][ T1926] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1147: group 0, block bitmap and bg descriptor inconsistent: 19 vs 41 free clusters [ 51.794567][ T1926] EXT4-fs error (device loop0): ext4_acquire_dquot:6200: comm syz.0.645: Failed to acquire dquot type 0 [ 51.806990][ T1926] EXT4-fs (loop0): 1 truncate cleaned up [ 51.812973][ T1926] EXT4-fs (loop0): mounted filesystem without journal. Opts: bsddf,noblock_validity,inode_readahead_blks=0x0000000000000002,barrier=0x0000000000000000,nogrpid,resgid=0x000000000000ee01,noinit_itable,noinit_itable,journal_dev=0x00000000000000072,errors=continue. Quota mode: writeback. [ 51.851727][ T283] EXT4-fs error (device loop0): ext4_ext_check_inode:501: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 51.869962][ T338] usb 6-1: unable to get BOS descriptor or descriptor too short [ 51.870358][ T283] EXT4-fs error (device loop0): ext4_ext_check_inode:501: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 51.877740][ T58] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 51.905875][ T58] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 51.914175][ T58] usb 2-1: Manufacturer: syz [ 51.921337][ T58] usb 2-1: config 0 descriptor?? [ 51.960267][ T8] tipc: Left network mode [ 52.105528][ T1929] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.112764][ T1929] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.120607][ T1929] device bridge_slave_0 entered promiscuous mode [ 52.127703][ T1929] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.135009][ T1929] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.142579][ T1929] device bridge_slave_1 entered promiscuous mode [ 52.188441][ T338] usb 6-1: string descriptor 0 read error: -22 [ 52.194732][ T338] usb 6-1: New USB device found, idVendor=0789, idProduct=0160, bcdDevice=82.fe [ 52.204348][ T338] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 52.217026][ T1929] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.224107][ T1929] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.231442][ T1929] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.238502][ T1929] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.259160][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 52.266942][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.274477][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.285209][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 52.293465][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.300552][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.309714][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 52.317938][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.325026][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.339835][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 52.349630][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 52.364680][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 52.379955][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 52.388061][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 52.395680][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 52.401865][ T58] pyra 0003:1E7D:2CF6.0009: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 52.416740][ T1929] device veth0_vlan entered promiscuous mode [ 52.427562][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 52.438841][ T1929] device veth1_macvtap entered promiscuous mode [ 52.448959][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 52.459686][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 52.489322][ T8] device bridge_slave_1 left promiscuous mode [ 52.495477][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.504102][ T8] device bridge_slave_0 left promiscuous mode [ 52.510339][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.519931][ T8] device veth1_macvtap left promiscuous mode [ 52.525961][ T8] device veth0_vlan left promiscuous mode [ 52.620801][ T1940] loop6: detected capacity change from 0 to 40427 [ 52.630283][ T1940] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 52.641750][ T1940] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 52.652256][ T1940] F2FS-fs (loop6): invalid crc value [ 52.659216][ T1940] F2FS-fs (loop6): Found nat_bits in checkpoint [ 52.688815][ T1940] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 52.695874][ T1940] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 52.835651][ T1929] attempt to access beyond end of device [ 52.835651][ T1929] loop6: rw=2049, want=40968, limit=40427 [ 52.918527][ T338] asix 6-1:7.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 52.928804][ T338] asix 6-1:7.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 53.018760][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 53.027024][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 53.036050][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 53.044279][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 53.052577][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 53.060507][ T58] pyra 0003:1E7D:2CF6.0009: couldn't init struct pyra_device [ 53.060883][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 53.068001][ T58] pyra 0003:1E7D:2CF6.0009: couldn't install mouse [ 53.076884][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 53.083839][ T58] pyra: probe of 0003:1E7D:2CF6.0009 failed with error -71 [ 53.091560][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 53.100812][ T58] usb 2-1: USB disconnect, device number 5 [ 53.127843][ T1949] fido_id[1949]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 53.128560][ T338] asix 6-1:7.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 53.171773][ T338] asix 6-1:7.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 53.350391][ T338] asix 6-1:7.0 eth1: register 'asix' at usb-dummy_hcd.5-1, ASIX AX88178 USB 2.0 Ethernet, 90:c1:af:eb:da:c3 [ 53.391811][ T338] usb 6-1: USB disconnect, device number 4 [ 53.399035][ T578] Bluetooth: hci0: command 0x1003 tx timeout [ 53.404764][ T338] asix 6-1:7.0 eth1: unregister 'asix' usb-dummy_hcd.5-1, ASIX AX88178 USB 2.0 Ethernet [ 53.423098][ T1921] Bluetooth: hci0: sending frame failed (-49) [ 53.446822][ T1353] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 53.455552][ T1353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 53.464083][ T1353] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 53.472442][ T1353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 53.481058][ T1353] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 53.489770][ T1353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 53.498179][ T1353] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 53.506531][ T1353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 53.745142][ T1993] SELinux: security_context_str_to_sid(s) failed for (dev ?, type ?) errno=-22 [ 53.746007][ T1984] loop1: detected capacity change from 0 to 40427 [ 53.764737][ T1993] SELinux: security_context_str_to_sid(s) failed for (dev incremental-fs, type incremental-fs) errno=-22 [ 53.806992][ T1984] F2FS-fs (loop1): fault_injection options not supported [ 53.818315][ T1984] F2FS-fs (loop1): invalid crc value [ 53.828517][ T26] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 53.837250][ T1984] F2FS-fs (loop1): Found nat_bits in checkpoint [ 53.874602][ T1984] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 55.818360][ C1] sched: RT throttling activated [ 55.828967][ T356] Bluetooth: hci0: command 0x1001 tx timeout [ 55.840180][ T1921] Bluetooth: hci0: sending frame failed (-49) [ 56.862053][ T30] kauditd_printk_skb: 116 callbacks suppressed [ 56.862072][ T30] audit: type=1400 audit(1760354815.152:848): avc: denied { ioctl } for pid=2002 comm="syz.6.676" path="socket:[22439]" dev="sockfs" ino=22439 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 56.897175][ T30] audit: type=1400 audit(1760354815.172:849): avc: denied { read } for pid=2004 comm="syz.4.677" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 56.937454][ T30] audit: type=1400 audit(1760354815.172:850): avc: denied { open } for pid=2004 comm="syz.4.677" path="/139/file0/.pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 56.963734][ T30] audit: type=1400 audit(1760354815.182:851): avc: denied { unmount } for pid=288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 57.014180][ T2015] loop4: detected capacity change from 0 to 1024 [ 57.017953][ T30] audit: type=1400 audit(1760354815.212:852): avc: denied { read } for pid=2006 comm="syz.6.678" name="ppp" dev="devtmpfs" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 57.071459][ T30] audit: type=1400 audit(1760354815.212:853): avc: denied { open } for pid=2006 comm="syz.6.678" path="/dev/ppp" dev="devtmpfs" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 57.101231][ T30] audit: type=1400 audit(1760354815.212:854): avc: denied { ioctl } for pid=2006 comm="syz.6.678" path="/dev/ppp" dev="devtmpfs" ino=154 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 57.127640][ T30] audit: type=1400 audit(1760354815.212:855): avc: denied { write } for pid=2006 comm="syz.6.678" name="ppp" dev="devtmpfs" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 57.163987][ T2015] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 57.171660][ T2024] loop1: detected capacity change from 0 to 512 [ 57.181013][ T30] audit: type=1400 audit(1760354815.252:856): avc: denied { create } for pid=2012 comm="syz.4.681" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 57.215650][ T2020] loop6: detected capacity change from 0 to 512 [ 57.218423][ T30] audit: type=1400 audit(1760354815.352:857): avc: denied { mounton } for pid=2014 comm="syz.4.682" path="/142/file1" dev="tmpfs" ino=770 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 57.222596][ T2024] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 57.266887][ T2024] EXT4-fs error (device loop1): ext4_orphan_get:1427: comm syz.1.684: bad orphan inode 131083 [ 57.286533][ T2024] EXT4-fs (loop1): mounted filesystem without journal. Opts: stripe=0x000000000000003d,init_itable,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 57.338419][ T26] usb 5-1: device not accepting address 5, error -71 [ 57.353951][ T2020] EXT4-fs error (device loop6): ext4_do_update_inode:5235: inode #16: comm syz.6.683: corrupted inode contents [ 57.379530][ T2020] EXT4-fs error (device loop6): ext4_dirty_inode:6071: inode #16: comm syz.6.683: mark_inode_dirty error [ 57.400702][ T2020] EXT4-fs error (device loop6): ext4_do_update_inode:5235: inode #16: comm syz.6.683: corrupted inode contents [ 57.418433][ T2020] EXT4-fs error (device loop6): __ext4_ext_dirty:183: inode #16: comm syz.6.683: mark_inode_dirty error [ 57.436788][ T2035] loop1: detected capacity change from 0 to 4096 [ 57.456246][ T2020] EXT4-fs error (device loop6): ext4_do_update_inode:5235: inode #16: comm syz.6.683: corrupted inode contents [ 57.471905][ T2035] EXT4-fs (loop1): Test dummy encryption mode enabled [ 57.496064][ T2035] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 57.504297][ T2035] System zones: 0-5 [ 57.514879][ T2020] EXT4-fs error (device loop6) in ext4_orphan_del:305: Corrupt filesystem [ 57.528420][ T2035] EXT4-fs (loop1): mounted filesystem without journal. Opts: debug,delalloc,journal_ioprio=0x0000000000000000,test_dummy_encryption,nodiscard,min_batch_time=0x0000000000000004,acl,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback. [ 57.539158][ T2020] EXT4-fs error (device loop6): ext4_do_update_inode:5235: inode #16: comm syz.6.683: corrupted inode contents [ 57.618452][ T2035] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 57.640124][ T2020] EXT4-fs error (device loop6): ext4_truncate:4304: inode #16: comm syz.6.683: mark_inode_dirty error [ 57.655191][ T2037] loop5: detected capacity change from 0 to 40427 [ 57.667902][ T2020] EXT4-fs error (device loop6) in ext4_process_orphan:347: Corrupt filesystem [ 57.681893][ T2020] EXT4-fs (loop6): 1 truncate cleaned up [ 57.687600][ T2020] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 57.701967][ T2020] ext4 filesystem being mounted at /22/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.715124][ T2051] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 57.731241][ T2051] overlayfs: conflicting lowerdir path [ 57.751740][ T2053] netlink: 4 bytes leftover after parsing attributes in process `syz.1.693'. [ 57.762246][ T2053] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.771983][ T2053] device bridge_slave_1 left promiscuous mode [ 57.778084][ T2053] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.806451][ T2037] F2FS-fs (loop5): invalid crc value [ 57.840669][ T2037] F2FS-fs (loop5): Found nat_bits in checkpoint [ 57.850231][ T2060] loop6: detected capacity change from 0 to 256 [ 57.879311][ T6] Bluetooth: hci0: command 0x1009 tx timeout [ 57.904590][ T2037] F2FS-fs (loop5): Start checkpoint disabled! [ 57.913548][ T2037] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 57.949533][ T2060] FAT-fs (loop6): Directory bread(block 64) failed [ 57.956133][ T2060] FAT-fs (loop6): Directory bread(block 65) failed [ 57.983258][ T2060] FAT-fs (loop6): Directory bread(block 66) failed [ 58.008448][ T2060] FAT-fs (loop6): Directory bread(block 67) failed [ 58.015135][ T2060] FAT-fs (loop6): Directory bread(block 68) failed [ 58.025319][ T2079] loop4: detected capacity change from 0 to 4096 [ 58.028034][ T2060] FAT-fs (loop6): Directory bread(block 69) failed [ 58.032445][ T2037] attempt to access beyond end of device [ 58.032445][ T2037] loop5: rw=2049, want=53256, limit=40427 [ 58.039240][ T2060] FAT-fs (loop6): Directory bread(block 70) failed [ 58.050404][ T2037] attempt to access beyond end of device [ 58.050404][ T2037] loop5: rw=2049, want=53304, limit=40427 [ 58.057284][ T2060] FAT-fs (loop6): Directory bread(block 71) failed [ 58.068057][ T2037] attempt to access beyond end of device [ 58.068057][ T2037] loop5: rw=2049, want=53360, limit=40427 [ 58.074100][ T2060] FAT-fs (loop6): Directory bread(block 72) failed [ 58.086350][ T2037] attempt to access beyond end of device [ 58.086350][ T2037] loop5: rw=2049, want=53416, limit=40427 [ 58.093286][ T2060] FAT-fs (loop6): Directory bread(block 73) failed [ 58.113802][ T2037] attempt to access beyond end of device [ 58.113802][ T2037] loop5: rw=2049, want=53448, limit=40427 [ 58.160393][ T2079] EXT4-fs (loop4): Test dummy encryption mode enabled [ 58.180416][ T2079] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 58.181590][ T2084] loop1: detected capacity change from 0 to 1024 [ 58.192082][ T2079] System zones: 0-5 [ 58.203555][ T2079] EXT4-fs (loop4): mounted filesystem without journal. Opts: debug,delalloc,journal_ioprio=0x0000000000000000,test_dummy_encryption,nodiscard,min_batch_time=0x0000000000000004,acl,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback. [ 58.240438][ T2084] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 58.250828][ T8] attempt to access beyond end of device [ 58.250828][ T8] loop5: rw=1, want=53256, limit=40427 [ 58.266402][ T8] attempt to access beyond end of device [ 58.266402][ T8] loop5: rw=2049, want=40968, limit=40427 [ 58.278176][ T8] attempt to access beyond end of device [ 58.278176][ T8] loop5: rw=2049, want=41008, limit=40427 [ 58.284421][ T2084] EXT4-fs (loop1): mounted filesystem without journal. Opts: minixdf,bsddf,barrier=0x0000000000000009,commit=0x0000000000000005,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,noblock_validity,nomblk_io_submit,,errors=continue. Quota mode: none. [ 58.439715][ T2097] loop1: detected capacity change from 0 to 128 [ 58.489858][ T2097] EXT4-fs (loop1): mounted filesystem without journal. Opts: sysvgroups,inode_readahead_blks=0x0000000000004000,usrjquota=,acl,grpjquota=,,errors=continue. Quota mode: none. [ 58.511383][ T2097] ext4 filesystem being mounted at /179/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 58.748426][ T26] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 59.148492][ T26] usb 7-1: unable to get BOS descriptor or descriptor too short [ 59.188471][ T26] usb 7-1: not running at top speed; connect to a high speed hub [ 59.268485][ T26] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 59.278619][ T26] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 59.316049][ T2119] loop4: detected capacity change from 0 to 512 [ 59.348985][ T2123] loop5: detected capacity change from 0 to 4096 [ 59.390486][ T2123] EXT4-fs (loop5): Test dummy encryption mode enabled [ 59.399339][ T2123] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 59.407652][ T2123] System zones: 0-5 [ 59.412589][ T2123] EXT4-fs (loop5): mounted filesystem without journal. Opts: debug,delalloc,journal_ioprio=0x0000000000000000,test_dummy_encryption,nodiscard,min_batch_time=0x0000000000000004,acl,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback. [ 59.418246][ T2119] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,grpquota,. Quota mode: writeback. [ 59.457787][ T2119] ext4 filesystem being mounted at /162/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.528472][ T26] usb 7-1: string descriptor 0 read error: -22 [ 59.538041][ T26] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 59.554224][ T26] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.595174][ T2144] loop4: detected capacity change from 0 to 128 [ 59.606781][ T2144] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 59.617689][ T2144] ext4 filesystem being mounted at /166/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 59.629223][ T26] usb 7-1: 0:2 : does not exist [ 59.805954][ T2150] loop5: detected capacity change from 0 to 16 [ 60.028418][ T58] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 60.190853][ T2152] loop1: detected capacity change from 0 to 512 [ 60.230256][ T2152] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 60.241412][ T2152] ext4 filesystem being mounted at /183/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 60.255612][ T2152] EXT4-fs error (device loop1): ext4_do_update_inode:5235: inode #2: comm syz.1.735: corrupted inode contents [ 60.267686][ T2152] EXT4-fs error (device loop1): ext4_dirty_inode:6071: inode #2: comm syz.1.735: mark_inode_dirty error [ 60.279306][ T2152] EXT4-fs error (device loop1): ext4_do_update_inode:5235: inode #2: comm syz.1.735: corrupted inode contents [ 60.291583][ T2152] EXT4-fs error (device loop1): __ext4_ext_dirty:183: inode #2: comm syz.1.735: mark_inode_dirty error [ 60.306183][ T2152] SELinux: Context system_u:object_r:gpg_exec_t:s0 is not valid (left unmapped). [ 60.316844][ T2152] EXT4-fs error (device loop1): ext4_find_dest_de:2115: inode #2: block 21: comm syz.1.735: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=19, rec_len=1, size=2048 fake=0 [ 60.336853][ T2152] EXT4-fs error (device loop1) in ext4_resetent:3739: Corrupt filesystem [ 60.345646][ T2152] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2941: inode #19: comm syz.1.735: corrupted xattr block 21 [ 60.358038][ T2152] EXT4-fs warning (device loop1): ext4_evict_inode:303: xattr delete (err -117) [ 60.388542][ T58] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 60.398749][ T58] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 60.428508][ T26] usb 7-1: 5:0: cannot get min/max values for control 2 (id 5) [ 60.450381][ T2158] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 60.461321][ T2158] F2FS-fs (loop3): Unable to read 1th superblock [ 60.467825][ T2158] blk_update_request: I/O error, dev loop3, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 60.479001][ T2158] F2FS-fs (loop3): Unable to read 2th superblock [ 60.501210][ T2160] loop1: detected capacity change from 0 to 1024 [ 60.538546][ T58] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 60.541274][ T2160] EXT4-fs (loop1): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,barrier,auto_da_alloc,nodioread_nolock,,errors=continue. Quota mode: none. [ 60.547624][ T58] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 60.564768][ T2160] ext4 filesystem being mounted at /186/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 60.572974][ T58] usb 5-1: Product: syz [ 60.587436][ T58] usb 5-1: SerialNumber: syz [ 60.629841][ T58] usb 5-1: selecting invalid altsetting 1 [ 60.635821][ T45] EXT4-fs error (device loop1): ext4_map_blocks:740: inode #15: comm kworker/u4:2: lblock 0 mapped to illegal pblock 0 (length 1) [ 60.649377][ T26] usb 7-1: 5:0: cannot get min/max values for control 3 (id 5) [ 60.663577][ T26] usb 7-1: USB disconnect, device number 2 [ 60.675026][ T45] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 60.689979][ T45] EXT4-fs (loop1): This should not happen!! Data will be lost [ 60.689979][ T45] [ 60.743123][ T2171] netlink: 'syz.1.741': attribute type 1 has an invalid length. [ 60.750844][ T2171] netlink: 12 bytes leftover after parsing attributes in process `syz.1.741'. [ 61.068458][ T58] cdc_ncm 5-1:1.0: failed GET_NTB_PARAMETERS [ 61.074554][ T58] cdc_ncm 5-1:1.0: bind() failure [ 61.081312][ T58] cdc_ncm 5-1:1.1: skipping garbage [ 61.086601][ T58] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 61.093645][ T58] cdc_ncm 5-1:1.1: bind() failure [ 61.100435][ T58] usb 5-1: USB disconnect, device number 7 [ 61.623391][ T2203] loop4: detected capacity change from 0 to 1024 [ 61.643339][ T2203] EXT4-fs (loop4): Ignoring removed bh option [ 61.684118][ T2203] EXT4-fs (loop4): mounted filesystem without journal. Opts: nojournal_checksum,nombcache,barrier,norecovery,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,usrquota,noauto_da_alloc,bh,init_itable,,errors=continue. Quota mode: writeback. [ 61.752634][ T2216] loop5: detected capacity change from 0 to 256 [ 61.781756][ T2216] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 61.793782][ T2216] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 61.823158][ T2216] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x44ede5da, utbl_chksum : 0xe619d30d) [ 61.916496][ T30] kauditd_printk_skb: 112 callbacks suppressed [ 61.916513][ T30] audit: type=1400 audit(1760354820.202:970): avc: denied { mounton } for pid=2215 comm="syz.5.762" path="/34/bus/file0" dev="loop5" ino=1048696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 61.960537][ T2227] serio: Serial port ptm0 [ 61.987572][ T30] audit: type=1400 audit(1760354820.202:971): avc: denied { write } for pid=2215 comm="syz.5.762" name="file0" dev="loop5" ino=1048696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 61.993882][ T2223] loop6: detected capacity change from 0 to 8192 [ 62.020208][ T30] audit: type=1400 audit(1760354820.202:972): avc: denied { add_name } for pid=2215 comm="syz.5.762" name=".index" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 62.044103][ T30] audit: type=1400 audit(1760354820.202:973): avc: denied { associate } for pid=2215 comm="syz.5.762" name=".index" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 62.066677][ T30] audit: type=1326 audit(1760354820.242:974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2226 comm="syz.1.768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1b9a4bec9 code=0x7ffc0000 [ 62.090598][ T2223] loop6: p1 p2 p4 [ 62.094453][ T2223] loop6: p1 size 65536 extends beyond EOD, truncated [ 62.121072][ T2223] loop6: p2 start 861536256 is beyond EOD, truncated [ 62.131661][ T30] audit: type=1326 audit(1760354820.242:975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2226 comm="syz.1.768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1b9a4bec9 code=0x7ffc0000 [ 62.154987][ T2223] loop6: p4 size 65536 extends beyond EOD, truncated [ 62.189206][ T30] audit: type=1326 audit(1760354820.252:976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2226 comm="syz.1.768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb1b9a4bec9 code=0x7ffc0000 [ 62.215055][ T30] audit: type=1326 audit(1760354820.252:977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2226 comm="syz.1.768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1b9a4bec9 code=0x7ffc0000 [ 62.249082][ T30] audit: type=1326 audit(1760354820.252:978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2226 comm="syz.1.768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1b9a4bec9 code=0x7ffc0000 [ 62.273404][ T30] audit: type=1400 audit(1760354820.252:979): avc: denied { remove_name } for pid=1636 comm="syz-executor" name=".index" dev="loop5" ino=1048697 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 62.318142][ T2231] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.331589][ T2231] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.341268][ T2231] device bridge_slave_0 entered promiscuous mode [ 62.363884][ T2231] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.371380][ T2231] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.380388][ T2231] device bridge_slave_1 entered promiscuous mode [ 62.390506][ T398] udevd[398]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 62.505780][ T10] device bridge_slave_1 left promiscuous mode [ 62.513007][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.520823][ T10] device bridge_slave_0 left promiscuous mode [ 62.526972][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.535691][ T10] device veth1_macvtap left promiscuous mode [ 62.541820][ T10] device veth0_vlan left promiscuous mode [ 62.638624][ T2250] loop6: detected capacity change from 0 to 40427 [ 62.666714][ T2242] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.673917][ T2242] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.681466][ T2242] device bridge_slave_0 entered promiscuous mode [ 62.689491][ T2250] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 62.697252][ T2250] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 62.707200][ T2242] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.714399][ T2242] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.722370][ T2242] device bridge_slave_1 entered promiscuous mode [ 62.734212][ T2250] F2FS-fs (loop6): Found nat_bits in checkpoint [ 62.767427][ T2231] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.774517][ T2231] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.781860][ T2231] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.782958][ T2250] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 62.788926][ T2231] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.820352][ T2250] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 62.843029][ T1353] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.852304][ T2263] loop2: detected capacity change from 0 to 4096 [ 62.858918][ T1353] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.868721][ T2263] EXT4-fs (loop2): Test dummy encryption mode enabled [ 62.887299][ T2263] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 62.895741][ T2263] System zones: 0-5 [ 62.902379][ T2263] EXT4-fs (loop2): mounted filesystem without journal. Opts: debug,delalloc,journal_ioprio=0x0000000000000000,test_dummy_encryption,nodiscard,min_batch_time=0x0000000000000004,acl,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback. [ 62.945130][ T487] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.952949][ T487] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.980271][ T487] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.989366][ T487] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.997735][ T487] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.004837][ T487] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.013229][ T487] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.022143][ T487] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.030591][ T487] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.037650][ T487] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.066483][ T487] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.074685][ T487] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.083963][ T487] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.093092][ T487] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.102479][ T487] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 63.118910][ T487] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 63.133697][ T2231] device veth0_vlan entered promiscuous mode [ 63.162298][ T487] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 63.174559][ T487] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 63.204841][ T487] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 63.212807][ T487] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 63.251300][ T487] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 63.255940][ T2290] xt_bpf: check failed: parse error [ 63.266595][ T487] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 63.277027][ T2231] device veth1_macvtap entered promiscuous mode [ 63.301115][ T2288] device pim6reg1 entered promiscuous mode [ 63.326875][ T2297] sit: Src spoofed 0.0.224.0/2002:0:e0::bfd8:a5dd -> 224.0.0.1/2002:c021:42c4:3911:45ba:dd28:fd7f:ffc [ 63.348826][ T487] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 63.365553][ T487] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 63.374292][ T487] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 63.384251][ T487] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 63.393729][ T487] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 63.402684][ T487] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.410975][ T487] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.422491][ T2301] netlink: 16 bytes leftover after parsing attributes in process `syz.2.793'. [ 63.447490][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.469407][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.477998][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.485102][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.493594][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.529536][ T487] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.553689][ T487] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.590564][ T487] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.597647][ T487] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.659629][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.696868][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.730156][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 63.771445][ T1353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 63.785396][ T1353] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 63.815668][ T1353] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 63.846947][ T2242] device veth0_vlan entered promiscuous mode [ 63.897959][ T1353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 63.920848][ T1353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 63.933713][ T2242] device veth1_macvtap entered promiscuous mode [ 63.957433][ T1353] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 63.974635][ T1353] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 63.992327][ T1353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 64.025220][ T1353] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 64.051577][ T1353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 64.080964][ T10] device bridge_slave_1 left promiscuous mode [ 64.097315][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.113843][ T10] device bridge_slave_0 left promiscuous mode [ 64.121803][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.130576][ T10] device veth1_macvtap left promiscuous mode [ 64.136656][ T10] device veth0_vlan left promiscuous mode [ 64.274402][ T2359] device pim6reg1 entered promiscuous mode [ 64.345315][ T2369] input: syz0 as /devices/virtual/input/input11 [ 64.397899][ T2374] syz.2.823[2374] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 64.397974][ T2374] syz.2.823[2374] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 64.629336][ T2398] device pim6reg1 entered promiscuous mode [ 64.694086][ T2377] loop6: detected capacity change from 0 to 40427 [ 64.718932][ T2377] F2FS-fs (loop6): Wrong CP boundary, start(512) end(1536) blocks(32256) [ 64.727724][ T2377] F2FS-fs (loop6): Can't find valid F2FS filesystem in 2th superblock [ 64.737658][ T338] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 64.745337][ T2377] F2FS-fs (loop6): fault_injection options not supported [ 64.765389][ T2377] F2FS-fs (loop6): fault_type options not supported [ 64.776426][ T2377] F2FS-fs (loop6): invalid crc value [ 64.803448][ T2377] F2FS-fs (loop6): Found nat_bits in checkpoint [ 64.824274][ T2404] loop2: detected capacity change from 0 to 8192 [ 64.825106][ T2406] loop8: detected capacity change from 0 to 8192 [ 64.871212][ T285] FAT-fs (loop2): error, invalid access to FAT (entry 0x0000e1b1) [ 64.879912][ T2406] loop8: p1 p2 p4 [ 64.883696][ T2377] F2FS-fs (loop6): Try to recover 2th superblock, ret: 0 [ 64.891257][ T2406] loop8: p1 size 65536 extends beyond EOD, truncated [ 64.898015][ T2377] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 64.902274][ T285] FAT-fs (loop2): Filesystem has been set read-only [ 64.906431][ T2406] loop8: p2 start 861536256 is beyond EOD, truncated [ 64.923815][ T2406] loop8: p4 size 65536 extends beyond EOD, truncated [ 64.970209][ T2377] attempt to access beyond end of device [ 64.970209][ T2377] loop6: rw=2049, want=45104, limit=40427 [ 65.050664][ T401] udevd[401]: inotify_add_watch(7, /dev/loop8p4, 10) failed: No such file or directory [ 65.069846][ T398] udevd[398]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 65.118470][ T338] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 65.134716][ T338] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 65.163297][ T338] usb 2-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 65.178447][ T338] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.197506][ T338] usb 2-1: config 0 descriptor?? [ 65.240814][ T2423] loop2: detected capacity change from 0 to 256 [ 65.379216][ T2435] loop6: detected capacity change from 0 to 2048 [ 65.403478][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 65.412312][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.420761][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 65.429182][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.437717][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.446277][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.446823][ T2435] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 65.454921][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.473387][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.679938][ T338] hid-steam 0003:28DE:1142.000A: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.1-1/input0 [ 65.695907][ T338] hid-steam 0003:28DE:1142.000B: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.1-1/input0 [ 65.768424][ T338] hid-steam 0003:28DE:1142.000A: Steam wireless receiver connected [ 65.776431][ T338] hid-steam 0003:28DE:1142.000A: No HID_FEATURE_REPORT submitted - nothing to read [ 65.902195][ T6] usb 2-1: USB disconnect, device number 6 [ 65.916045][ T6] hid-steam 0003:28DE:1142.000A: Steam wireless receiver disconnected [ 66.162747][ T2453] loop7: detected capacity change from 0 to 512 [ 66.209692][ T2453] EXT4-fs (loop7): Ignoring removed bh option [ 66.226535][ T2453] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 66.238077][ T2453] EXT4-fs (loop7): 1 truncate cleaned up [ 66.243971][ T2453] EXT4-fs (loop7): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000001,bh,noload,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none. [ 66.364937][ T2464] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 66.364971][ T2464] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=on. [ 66.411624][ T2467] loop2: detected capacity change from 0 to 512 [ 66.499060][ T2473] loop6: detected capacity change from 0 to 8192 [ 66.594204][ T2485] incfs: Options parsing error. -22 [ 66.602730][ T2485] incfs: mount failed -22 [ 66.609680][ T356] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 66.716689][ T2497] netlink: 8 bytes leftover after parsing attributes in process `syz.2.875'. [ 66.727099][ T2497] netlink: 8 bytes leftover after parsing attributes in process `syz.2.875'. [ 66.777472][ T2501] loop2: detected capacity change from 0 to 512 [ 66.836142][ T2501] EXT4-fs error (device loop2): ext4_orphan_get:1401: inode #15: comm syz.2.877: casefold flag without casefold feature [ 66.850604][ T2501] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.877: couldn't read orphan inode 15 (err -117) [ 66.855402][ T2509] loop1: detected capacity change from 0 to 1024 [ 66.870214][ T2501] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 66.932949][ T2509] EXT4-fs (loop1): Test dummy encryption mode enabled [ 66.950281][ T2519] loop8: detected capacity change from 0 to 512 [ 66.963502][ T30] kauditd_printk_skb: 89 callbacks suppressed [ 66.963517][ T30] audit: type=1326 audit(2000000003.393:1069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2520 comm="syz.2.880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf5f943ec9 code=0x7ffc0000 [ 66.969729][ T356] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 66.998290][ T30] audit: type=1326 audit(2000000003.393:1070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2520 comm="syz.2.880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf5f943ec9 code=0x7ffc0000 [ 67.028187][ T356] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 67.038692][ T356] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 67.043130][ T2509] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,i_version,noblock_validity,commit=0x0000000000000005,inlinecrypt,max_batch_time=0x0000000000000000,abort,auto_da_alloc,lazytime,noauto_da_alloc,block_validity,,errors=continue. Quota mode: writeback. [ 67.051673][ T356] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 67.051701][ T356] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.096326][ T356] usb 8-1: config 0 descriptor?? [ 67.114453][ T2519] EXT4-fs (loop8): mounted filesystem without journal. Opts: acl,barrier=0x0000000000001000,grpjquota=,norecovery,dioread_lock,,errors=continue. Quota mode: writeback. [ 67.132574][ T2519] ext4 filesystem being mounted at /13/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.136370][ T30] audit: type=1326 audit(2000000003.393:1071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2520 comm="syz.2.880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=297 compat=0 ip=0x7fcf5f943ec9 code=0x7ffc0000 [ 67.170318][ T30] audit: type=1326 audit(2000000003.393:1072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2520 comm="syz.2.880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf5f943ec9 code=0x7ffc0000 [ 67.194484][ T30] audit: type=1326 audit(2000000003.393:1073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2520 comm="syz.2.880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf5f943ec9 code=0x7ffc0000 [ 67.218069][ T2509] EXT4-fs (loop1): shut down requested (1) [ 67.227972][ T30] audit: type=1400 audit(2000000003.653:1074): avc: denied { read } for pid=83 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 67.252710][ T30] audit: type=1400 audit(2000000003.653:1075): avc: denied { search } for pid=83 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 67.274301][ T30] audit: type=1400 audit(2000000003.653:1076): avc: denied { append } for pid=83 comm="syslogd" name="messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 67.299038][ T2529] netlink: 27 bytes leftover after parsing attributes in process `syz.2.887'. [ 67.326726][ T30] audit: type=1400 audit(2000000003.653:1077): avc: denied { open } for pid=83 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 67.373389][ T30] audit: type=1400 audit(2000000003.653:1078): avc: denied { getattr } for pid=83 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 67.535452][ T2519] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1147: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 67.553027][ T2519] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 2048 with error 28 [ 67.566715][ T2519] EXT4-fs (loop8): This should not happen!! Data will be lost [ 67.566715][ T2519] [ 67.577097][ T2519] EXT4-fs (loop8): Total free blocks count 0 [ 67.579609][ T356] plantronics 0003:047F:FFFF.000C: unknown main item tag 0xe [ 67.597869][ T356] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 67.606099][ T2519] EXT4-fs (loop8): Free/Dirty block details [ 67.612287][ T356] plantronics 0003:047F:FFFF.000C: No inputs registered, leaving [ 67.618703][ T2519] EXT4-fs (loop8): free_blocks=39626 [ 67.631254][ T356] plantronics 0003:047F:FFFF.000C: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 67.635680][ T2519] EXT4-fs (loop8): dirty_blocks=4095 [ 67.677205][ T2519] EXT4-fs (loop8): Block reservation details [ 67.693391][ T2544] loop6: detected capacity change from 0 to 8192 [ 67.705762][ T2519] EXT4-fs (loop8): i_reserved_data_blocks=4095 [ 67.731473][ T2544] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 67.836618][ T10] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 2050 with max blocks 2046 with error 28 [ 67.856196][ T10] EXT4-fs (loop8): This should not happen!! Data will be lost [ 67.856196][ T10] [ 67.917171][ T2552] loop6: detected capacity change from 0 to 512 [ 67.929354][ T356] usb 8-1: USB disconnect, device number 2 [ 67.938047][ T2552] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 68.258416][ T338] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 68.280986][ T2565] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=2565 comm=syz.1.903 [ 68.293437][ T2565] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=2565 comm=syz.1.903 [ 68.298481][ T1912] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 68.377547][ T2574] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 68.388697][ T2574] FAT-fs (loop3): unable to read boot sector [ 68.626298][ T2605] loop2: detected capacity change from 0 to 1024 [ 68.628552][ T338] usb 9-1: config 220 has an invalid interface number: 76 but max is 2 [ 68.641033][ T338] usb 9-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 68.650006][ T338] usb 9-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 68.660324][ T338] usb 9-1: config 220 has no interface number 2 [ 68.666786][ T338] usb 9-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 68.680309][ T1912] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 68.690697][ T338] usb 9-1: config 220 interface 0 has no altsetting 0 [ 68.690738][ T2605] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 68.697512][ T338] usb 9-1: config 220 interface 76 has no altsetting 0 [ 68.697533][ T338] usb 9-1: config 220 interface 1 has no altsetting 0 [ 68.697618][ T1912] usb 7-1: New USB device found, idVendor=056a, idProduct=00b5, bcdDevice= 0.00 [ 68.723637][ T2605] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3871: comm syz.2.922: Allocating blocks 385-513 which overlap fs metadata [ 68.731050][ T1912] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.748927][ T2605] EXT4-fs (loop2): pa ffff88812970c738: logic 16, phys. 129, len 24 [ 68.753776][ T1912] usb 7-1: config 0 descriptor?? [ 68.760954][ T2605] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:4888: group 0, free 0, pa_free 8 [ 68.761597][ T356] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 68.786191][ T2605] syz.2.922 (2605) used greatest stack depth: 20144 bytes left [ 68.848478][ T1781] usb 8-1: new full-speed USB device number 3 using dummy_hcd [ 68.848526][ T338] usb 9-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 68.865332][ T338] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.874103][ T338] usb 9-1: Product: syz [ 68.878639][ T338] usb 9-1: Manufacturer: syz [ 68.883254][ T338] usb 9-1: SerialNumber: syz [ 69.021985][ T2620] loop2: detected capacity change from 0 to 512 [ 69.132223][ T2620] EXT4-fs (loop2): 1 orphan inode deleted [ 69.137996][ T2620] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 69.149282][ T2620] ext4 filesystem being mounted at /133/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 69.169066][ T356] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 69.180266][ T356] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 69.190164][ T356] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 69.203080][ T356] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 69.212788][ T356] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.222171][ T356] usb 2-1: config 0 descriptor?? [ 69.228509][ T1781] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 69.230170][ T1912] wacom 0003:056A:00B5.000D: unknown main item tag 0x0 [ 69.240106][ T1781] usb 8-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 69.247184][ T1912] wacom 0003:056A:00B5.000D: unknown main item tag 0x0 [ 69.255646][ T1781] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.262766][ T338] usb 9-1: Found UVC 7.01 device syz (8086:0b07) [ 69.284482][ T1781] usb 8-1: config 0 descriptor?? [ 69.288488][ T1912] wacom 0003:056A:00B5.000D: unknown main item tag 0x0 [ 69.296640][ T338] usb 9-1: No valid video chain found. [ 69.302457][ T1912] wacom 0003:056A:00B5.000D: unknown main item tag 0x0 [ 69.308562][ T2599] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 69.309791][ T338] usb 9-1: selecting invalid altsetting 0 [ 69.322154][ T1912] wacom 0003:056A:00B5.000D: unknown main item tag 0x0 [ 69.329209][ T1912] wacom 0003:056A:00B5.000D: unknown main item tag 0x0 [ 69.336141][ T1912] wacom 0003:056A:00B5.000D: unknown main item tag 0x0 [ 69.343766][ T1912] wacom 0003:056A:00B5.000D: Unknown device_type for 'HID 056a:00b5'. Assuming pen. [ 69.354123][ T1912] wacom 0003:056A:00B5.000D: hidraw0: USB HID v0.02 Device [HID 056a:00b5] on usb-dummy_hcd.6-1/input0 [ 69.366317][ T1912] input: Wacom Intuos3 6x11 Pen as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:056A:00B5.000D/input/input12 [ 69.414164][ T2628] xt_CT: No such helper "pptp" [ 69.432385][ T338] usb 9-1: USB disconnect, device number 2 [ 69.489201][ T26] usb 7-1: USB disconnect, device number 3 [ 69.572766][ T2630] loop2: detected capacity change from 0 to 40427 [ 69.630989][ T2630] F2FS-fs (loop2): invalid crc value [ 69.638038][ T2630] F2FS-fs (loop2): Found nat_bits in checkpoint [ 69.668242][ T2630] F2FS-fs (loop2): Cannot turn on quotas: -2 on 0 [ 69.675264][ T2630] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 69.709728][ T356] plantronics 0003:047F:FFFF.000E: No inputs registered, leaving [ 69.720118][ T356] plantronics 0003:047F:FFFF.000E: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 69.769723][ T1781] hid-generic 0003:04F3:0755.000F: unknown main item tag 0x0 [ 69.777231][ T1781] hid-generic 0003:04F3:0755.000F: unknown main item tag 0x0 [ 69.784839][ T1781] hid-generic 0003:04F3:0755.000F: unknown main item tag 0x0 [ 69.792748][ T1781] hid-generic 0003:04F3:0755.000F: unknown main item tag 0x0 [ 69.800641][ T1781] hid-generic 0003:04F3:0755.000F: unknown main item tag 0x0 [ 69.809617][ T1781] hid-generic 0003:04F3:0755.000F: hidraw1: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.7-1/input0 [ 70.176422][ T2646] loop2: detected capacity change from 0 to 131072 [ 70.231151][ T2646] F2FS-fs (loop2): invalid crc value [ 70.248405][ T338] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 70.256953][ T2646] F2FS-fs (loop2): Found nat_bits in checkpoint [ 70.291584][ T2646] F2FS-fs (loop2): Cannot turn on quotas: -2 on 2 [ 70.298770][ T2646] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 70.485800][ T2668] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 70.552061][ T338] usb 9-1: Using ep0 maxpacket: 16 [ 70.593736][ T2682] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=2682 comm=syz.6.951 [ 70.606294][ T2682] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=2682 comm=syz.6.951 [ 70.668463][ T338] usb 9-1: config index 0 descriptor too short (expected 58660, got 36) [ 70.679934][ T338] usb 9-1: config 0 has an invalid interface number: 146 but max is -1 [ 70.688926][ T338] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 70.699032][ T338] usb 9-1: config 0 has no interface number 0 [ 70.705215][ T338] usb 9-1: config 0 interface 146 altsetting 188 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 70.716590][ T338] usb 9-1: config 0 interface 146 altsetting 188 endpoint 0x81 has invalid wMaxPacketSize 0 [ 70.727055][ T338] usb 9-1: config 0 interface 146 has no altsetting 0 [ 70.734049][ T338] usb 9-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.00 [ 70.743272][ T338] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.752142][ T338] usb 9-1: config 0 descriptor?? [ 70.818334][ T2696] loop6: detected capacity change from 0 to 8192 [ 70.839490][ T2702] loop2: detected capacity change from 0 to 512 [ 70.849188][ T2696] loop6: p1 p2 p3 p4[DM] [ 70.854145][ T2696] loop6: p1 size 835329 extends beyond EOD, truncated [ 70.861623][ T2696] loop6: p2 size 327680 extends beyond EOD, truncated [ 70.868977][ T2696] loop6: p3 start 1052673 is beyond EOD, truncated [ 70.875507][ T2696] loop6: p4 size 262144 extends beyond EOD, truncated [ 70.985022][ T2711] netlink: 96 bytes leftover after parsing attributes in process `syz.6.965'. [ 70.986704][ T2626] udevd[2626]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory [ 70.997714][ T333] udevd[333]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 71.016487][ T401] udevd[401]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 71.030539][ T2713] xt_bpf: check failed: parse error [ 71.034759][ T333] udevd[333]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 71.037305][ T2626] udevd[2626]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory [ 71.045714][ T26] usb 8-1: reset full-speed USB device number 3 using dummy_hcd [ 71.060419][ T401] udevd[401]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 71.229536][ T338] logitech-djreceiver 0003:046D:C71B.0010: unknown main item tag 0x0 [ 71.237779][ T338] logitech-djreceiver 0003:046D:C71B.0010: unknown main item tag 0x0 [ 71.245925][ T338] logitech-djreceiver 0003:046D:C71B.0010: unknown main item tag 0x0 [ 71.254121][ T338] logitech-djreceiver 0003:046D:C71B.0010: unknown main item tag 0x0 [ 71.262292][ T338] logitech-djreceiver 0003:046D:C71B.0010: unknown main item tag 0x0 [ 71.271191][ T338] logitech-djreceiver 0003:046D:C71B.0010: hidraw2: USB HID v0.05 Device [HID 046d:c71b] on usb-dummy_hcd.8-1/input146 [ 71.368452][ T58] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 71.437436][ T6] usb 9-1: USB disconnect, device number 3 [ 71.610486][ T2731] loop7: detected capacity change from 0 to 128 [ 71.620898][ T58] usb 7-1: Using ep0 maxpacket: 32 [ 71.669312][ T2731] attempt to access beyond end of device [ 71.669312][ T2731] loop7: rw=2049, want=1041, limit=128 [ 71.748451][ T58] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 71.758873][ T2735] loop1: detected capacity change from 0 to 40427 [ 71.765865][ T58] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 71.774306][ T2735] F2FS-fs (loop1): Wrong MAIN_AREA boundary, start(4096) end(12800) block(12288) [ 71.775230][ T58] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.792487][ T2735] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 71.801136][ T58] usb 7-1: config 0 descriptor?? [ 71.806207][ T2735] F2FS-fs (loop1): fault_type options not supported [ 71.813084][ T2735] F2FS-fs (loop1): fault_injection options not supported [ 71.821088][ T2735] F2FS-fs (loop1): invalid crc value [ 71.827816][ T2735] F2FS-fs (loop1): Found nat_bits in checkpoint [ 71.859147][ T2735] F2FS-fs (loop1): Start checkpoint disabled! [ 71.866174][ T2735] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 71.873398][ T2735] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 71.873691][ T1912] usb 2-1: USB disconnect, device number 7 [ 71.917679][ T8] attempt to access beyond end of device [ 71.917679][ T8] loop1: rw=2049, want=40976, limit=40427 [ 71.948835][ T39] usb 8-1: USB disconnect, device number 3 [ 71.992652][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 72.008785][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.017136][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 72.042234][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.053136][ T2747] loop2: detected capacity change from 0 to 256 [ 72.057667][ T2717] netlink: 31 bytes leftover after parsing attributes in process `syz.6.969'. [ 72.060036][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.090296][ T1912] usb 7-1: USB disconnect, device number 4 [ 72.099110][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.107447][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.121693][ T2749] loop1: detected capacity change from 0 to 512 [ 72.129979][ T2749] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 72.131011][ T2747] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 72.145039][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.168716][ T2747] process 'syz.2.981' launched '/dev/fd/4' with NULL argv: empty string added [ 72.168754][ T2749] EXT4-fs error (device loop1): mb_free_blocks:1860: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 72.186856][ T30] kauditd_printk_skb: 115 callbacks suppressed [ 72.186875][ T30] audit: type=1400 audit(2000000008.603:1194): avc: denied { execute_no_trans } for pid=2746 comm="syz.2.981" path=2F6D656D66643A5B0BDB58AE5B35A990FF631F1AA9FDFAADD16D64E7E27F9BD55210F3B6FF54BFD1C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=88 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 72.194602][ T2749] EXT4-fs error (device loop1): ext4_do_update_inode:5235: inode #11: comm syz.1.978: corrupted inode contents [ 72.243227][ T2749] EXT4-fs error (device loop1): ext4_dirty_inode:6071: inode #11: comm syz.1.978: mark_inode_dirty error [ 72.254949][ T2749] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.978: invalid indirect mapped block 1 (level 1) [ 72.269688][ T2749] EXT4-fs error (device loop1): ext4_do_update_inode:5235: inode #11: comm syz.1.978: corrupted inode contents [ 72.306001][ T2753] loop2: detected capacity change from 0 to 4096 [ 72.312596][ T2749] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 72.322378][ T2749] EXT4-fs error (device loop1): ext4_do_update_inode:5235: inode #11: comm syz.1.978: corrupted inode contents [ 72.334497][ T2749] EXT4-fs error (device loop1): ext4_truncate:4304: inode #11: comm syz.1.978: mark_inode_dirty error [ 72.334762][ T30] audit: type=1326 audit(2000000008.763:1195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2754 comm="syz.8.983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa265b6cec9 code=0x7ffc0000 [ 72.350978][ T2749] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 72.369888][ T30] audit: type=1326 audit(2000000008.763:1196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2754 comm="syz.8.983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa265b6cec9 code=0x7ffc0000 [ 72.401742][ T2753] EXT4-fs (loop2): Test dummy encryption mode enabled [ 72.409267][ T2749] EXT4-fs (loop1): 1 truncate cleaned up [ 72.415122][ T2749] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 72.426179][ T2753] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 72.446131][ T30] audit: type=1326 audit(2000000008.783:1197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2754 comm="syz.8.983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fa265b6cec9 code=0x7ffc0000 [ 72.470365][ T2753] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 72.480062][ T2753] System zones: 0-5 [ 72.488632][ T30] audit: type=1326 audit(2000000008.783:1198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2754 comm="syz.8.983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa265b6cec9 code=0x7ffc0000 [ 72.498728][ T2753] EXT4-fs (loop2): mounted filesystem without journal. Opts: debug,delalloc,journal_ioprio=0x0000000000000000,test_dummy_encryption,nodiscard,min_batch_time=0x0000000000000005,acl,nomblk_io_submit,,errors=continue. Quota mode: writeback. [ 72.512826][ T30] audit: type=1326 audit(2000000008.783:1199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2754 comm="syz.8.983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa265b6cec9 code=0x7ffc0000 [ 72.562053][ T30] audit: type=1326 audit(2000000008.813:1200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2754 comm="syz.8.983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=52 compat=0 ip=0x7fa265b6cec9 code=0x7ffc0000 [ 72.585762][ T30] audit: type=1326 audit(2000000008.813:1201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2754 comm="syz.8.983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa265b6cec9 code=0x7ffc0000 [ 72.609584][ T30] audit: type=1326 audit(2000000008.813:1202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2754 comm="syz.8.983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa265b6cec9 code=0x7ffc0000 [ 72.653588][ T2765] futex_wake_op: syz.6.987 tries to shift op by -1; fix this program [ 72.678268][ T30] audit: type=1326 audit(2000000009.103:1203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2766 comm="syz.8.988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa265b6cec9 code=0x7ffc0000 [ 72.817738][ T2785] loop7: detected capacity change from 0 to 1024 [ 72.875917][ T2798] loop2: detected capacity change from 0 to 128 [ 72.906053][ T2801] loop6: detected capacity change from 0 to 4096 [ 72.930586][ T2801] EXT4-fs (loop6): Test dummy encryption mode enabled [ 72.942634][ T2785] EXT4-fs (loop7): Ignoring removed bh option [ 72.955100][ T2810] loop8: detected capacity change from 0 to 512 [ 72.955573][ T2801] EXT4-fs (loop6): Ignoring removed nomblk_io_submit option [ 72.970280][ T2801] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 72.979215][ T2801] System zones: 0-5 [ 72.985197][ T2785] EXT4-fs (loop7): mounted filesystem without journal. Opts: noblock_validity,noauto_da_alloc,jqfmt=vfsold,stripe=0x0000000000000003,noauto_da_alloc,auto_da_alloc=0x0000000000000005,dioread_lock,init_itable,jqfmt=vfsv1,bh,,errors=continue. Quota mode: none. [ 72.996064][ T2801] EXT4-fs (loop6): mounted filesystem without journal. Opts: debug,delalloc,journal_ioprio=0x0000000000000000,test_dummy_encryption,nodiscard,min_batch_time=0x0000000000000005,acl,nomblk_io_submit,,errors=continue. Quota mode: writeback. [ 73.039744][ T2810] EXT4-fs error (device loop8): ext4_orphan_get:1401: inode #15: comm syz.8.1009: casefold flag without casefold feature [ 73.052703][ T2810] EXT4-fs error (device loop8): ext4_orphan_get:1406: comm syz.8.1009: couldn't read orphan inode 15 (err -117) [ 73.064751][ T2810] EXT4-fs (loop8): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback. [ 73.083279][ T2785] EXT4-fs (loop7): shut down requested (1) [ 73.239809][ T2837] loop6: detected capacity change from 0 to 512 [ 73.266613][ T2845] input: syz0 as /devices/virtual/input/input16 [ 73.287741][ T2837] EXT4-fs warning (device loop6): ext4_enable_quotas:6452: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 73.316256][ T2837] EXT4-fs (loop6): mount failed [ 73.392276][ T2861] loop1: detected capacity change from 0 to 4096 [ 73.409989][ T2861] EXT4-fs (loop1): Test dummy encryption mode enabled [ 73.444694][ T2861] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 73.453613][ T2861] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 73.474533][ T2861] System zones: 0-5 [ 73.475576][ T2870] loop7: detected capacity change from 0 to 512 [ 73.480173][ T2861] EXT4-fs (loop1): mounted filesystem without journal. Opts: debug,delalloc,journal_ioprio=0x0000000000000000,test_dummy_encryption,nodiscard,min_batch_time=0x0000000000000005,acl,nomblk_io_submit,,errors=continue. Quota mode: writeback. [ 73.518793][ T6] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 73.562783][ T2877] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 73.572551][ T2870] EXT4-fs (loop7): mounted filesystem without journal. Opts: quota,barrier=0x0000000000001000,grpjquota=,norecovery,dioread_lock,,errors=continue. Quota mode: writeback. [ 73.572644][ T2870] ext4 filesystem being mounted at /27/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 73.599156][ T2870] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1147: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 73.614931][ T2877] SELinux: failed to load policy [ 73.620291][ T2870] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 512 with max blocks 1 with error 28 [ 73.640087][ T2870] EXT4-fs (loop7): This should not happen!! Data will be lost [ 73.640087][ T2870] [ 73.656680][ T2870] EXT4-fs (loop7): Total free blocks count 0 [ 73.665127][ T2883] loop8: detected capacity change from 0 to 512 [ 73.671528][ T2870] EXT4-fs (loop7): Free/Dirty block details [ 73.677450][ T2870] EXT4-fs (loop7): free_blocks=39626 [ 73.683041][ T2870] EXT4-fs (loop7): dirty_blocks=1 [ 73.688090][ T2870] EXT4-fs (loop7): Block reservation details [ 73.694331][ T2870] EXT4-fs (loop7): i_reserved_data_blocks=1 [ 73.719039][ T2888] loop1: detected capacity change from 0 to 256 [ 73.731270][ T2883] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 73.751495][ T2888] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x46ae1815, utbl_chksum : 0xe619d30d) [ 73.765605][ T2888] exFAT-fs (loop1): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 73.898441][ T6] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 73.901411][ T2894] loop1: detected capacity change from 0 to 4096 [ 73.916239][ T6] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 73.928421][ T291] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 73.942078][ T6] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 73.961490][ T6] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 73.969378][ T2894] EXT4-fs (loop1): Test dummy encryption mode enabled [ 73.975599][ T6] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.985935][ T2894] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 73.987200][ T6] usb 3-1: config 0 descriptor?? [ 74.009734][ T2894] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 74.014412][ T2898] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 74.017966][ T2894] System zones: [ 74.026469][ T2898] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 74.039066][ T2894] 0-5 [ 74.044619][ T2894] EXT4-fs (loop1): mounted filesystem without journal. Opts: debug,delalloc,max_dir_size_kb=0x0000000000000007,test_dummy_encryption,mb_optimize_scan=0x0000000000000001,min_batch_time=0x0000000000000004,mblk_io_submit,debug_want_extra_isize=0x0000000000000004,,errors=continue. Quota mode: writeback. [ 74.288522][ T291] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 74.314651][ T291] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 74.334603][ T291] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 74.357014][ T2921] xt_bpf: check failed: parse error [ 74.368686][ T291] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 74.388416][ T291] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.399277][ T291] usb 7-1: config 0 descriptor?? [ 74.464318][ T2925] loop1: detected capacity change from 0 to 8192 [ 74.471828][ T6] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x7 [ 74.477853][ T2890] loop7: detected capacity change from 0 to 131072 [ 74.479971][ T6] plantronics 0003:047F:FFFF.0011: No inputs registered, leaving [ 74.494808][ T6] plantronics 0003:047F:FFFF.0011: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 74.526234][ T333] loop1: p3 p4 < > [ 74.532493][ T2890] F2FS-fs (loop7): Test dummy encryption mode enabled [ 74.533983][ T333] loop1: p3 start 327168 is beyond EOD, truncated [ 74.548449][ T2925] loop1: p3 p4 < > [ 74.551895][ T2890] F2FS-fs (loop7): invalid crc value [ 74.552625][ T2925] loop1: p3 start 327168 is beyond EOD, truncated [ 74.570163][ T2890] F2FS-fs (loop7): Found nat_bits in checkpoint [ 74.607938][ T2890] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 74.663535][ T401] udevd[401]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 74.689922][ T401] udevd[401]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 74.718382][ T26] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 74.759472][ T1912] usb 3-1: USB disconnect, device number 8 [ 74.821719][ T39] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 74.830041][ T39] hid-generic 0000:0000:0000.0012: hidraw0: HID v0.00 Device [syz1] on syz0 [ 74.862650][ T2940] fido_id[2940]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 74.889605][ T291] plantronics 0003:047F:FFFF.0013: No inputs registered, leaving [ 74.898898][ T291] plantronics 0003:047F:FFFF.0013: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 75.030938][ T2948] loop7: detected capacity change from 0 to 40427 [ 75.076141][ T2948] F2FS-fs (loop7): Small segment_count (9 < 1 * 24) [ 75.083081][ T2948] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 75.088565][ T26] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 75.104025][ T2948] F2FS-fs (loop7): Found nat_bits in checkpoint [ 75.133773][ T2948] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 75.140979][ T2948] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 75.159275][ T6] usb 7-1: USB disconnect, device number 5 [ 75.175788][ T2231] attempt to access beyond end of device [ 75.175788][ T2231] loop7: rw=2049, want=45104, limit=40427 [ 75.258500][ T26] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 75.267644][ T26] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.281921][ T26] usb 9-1: Product: syz [ 75.291419][ T26] usb 9-1: Manufacturer: syz [ 75.297622][ T26] usb 9-1: SerialNumber: syz [ 75.303141][ T2953] loop2: detected capacity change from 0 to 512 [ 75.339313][ T2953] EXT4-fs (loop2): Ignoring removed nobh option [ 75.340690][ T2955] loop7: detected capacity change from 0 to 512 [ 75.345808][ T2953] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 75.364877][ T2955] EXT4-fs (loop7): Ignoring removed mblk_io_submit option [ 75.368179][ T2953] EXT4-fs error (device loop2): ext4_orphan_get:1401: inode #15: comm syz.2.1069: iget: bad i_size value: 38620345925642 [ 75.377601][ T2955] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 75.385530][ T2953] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.1069: couldn't read orphan inode 15 (err -117) [ 75.396719][ T2955] EXT4-fs (loop7): 1 truncate cleaned up [ 75.407508][ T2953] EXT4-fs (loop2): mounted filesystem without journal. Opts: nobh,auto_da_alloc,data_err=ignore,nojournal_checksum,dioread_nolock,minixdf,,errors=continue. Quota mode: writeback. [ 75.412321][ T2955] EXT4-fs (loop7): mounted filesystem without journal. Opts: mb_optimize_scan=0x0000000000000001,nombcache,user_xattr,mblk_io_submit,resuid=0x0000000000000000,norecovery,,errors=continue. Quota mode: none. [ 75.526628][ T2960] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm syz.2.1069: bg 0: block 5: invalid block bitmap [ 75.539266][ T2960] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 75.551778][ T2960] EXT4-fs (loop2): This should not happen!! Data will be lost [ 75.551778][ T2960] [ 75.561910][ T2960] EXT4-fs (loop2): Total free blocks count 0 [ 75.588705][ T2960] EXT4-fs (loop2): Free/Dirty block details [ 75.594666][ T2960] EXT4-fs (loop2): free_blocks=0 [ 75.605295][ T2960] EXT4-fs (loop2): dirty_blocks=3688 [ 75.610806][ T2960] EXT4-fs (loop2): Block reservation details [ 75.616899][ T2960] EXT4-fs (loop2): i_reserved_data_blocks=3688 [ 75.655194][ T10] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 1636 with error 28 [ 75.682241][ T10] EXT4-fs (loop2): This should not happen!! Data will be lost [ 75.682241][ T10] [ 75.705214][ T2964] netlink: 104 bytes leftover after parsing attributes in process `syz.7.1071'. [ 75.788443][ T1912] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 76.018500][ T291] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 76.188509][ T1912] usb 2-1: unable to get BOS descriptor or descriptor too short [ 76.228479][ T1912] usb 2-1: not running at top speed; connect to a high speed hub [ 76.318465][ T1912] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 76.328600][ T1912] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 76.418471][ T291] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 76.426572][ T291] usb 7-1: config 0 has no interface number 0 [ 76.432697][ T291] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 76.443629][ T291] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 76.453426][ T291] usb 7-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 76.458473][ T26] cdc_ncm 9-1:1.0: bind() failure [ 76.466286][ T291] usb 7-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 76.475404][ T26] cdc_ncm 9-1:1.1: CDC Union missing and no IAD found [ 76.480416][ T291] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.487450][ T26] cdc_ncm 9-1:1.1: bind() failure [ 76.496358][ T291] usb 7-1: config 0 descriptor?? [ 76.507209][ T26] usb 9-1: USB disconnect, device number 4 [ 76.578576][ T1912] usb 2-1: string descriptor 0 read error: -22 [ 76.584954][ T1912] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 76.594090][ T1912] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.639197][ T1912] usb 2-1: 0:2 : does not exist [ 77.073061][ T2990] input: syz0 as /devices/virtual/input/input17 [ 77.126058][ T2997] loop7: detected capacity change from 0 to 512 [ 77.143001][ T2997] EXT4-fs (loop7): Test dummy encryption mode enabled [ 77.150018][ T2997] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 77.161755][ T2997] EXT4-fs (loop7): 1 truncate cleaned up [ 77.167445][ T2997] EXT4-fs (loop7): mounted filesystem without journal. Opts: test_dummy_encryption,journal_ioprio=0x0000000000000006,inode_readahead_blks=0x0000000000040000,,errors=continue. Quota mode: none. [ 77.194408][ T2997] EXT4-fs warning (device loop7): __ext4fs_dirhash:270: inode #12: comm syz.7.1086: Siphash requires key [ 77.209794][ T291] input: HID 28bd:0042 Pad as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.1/0003:28BD:0042.0014/input/input18 [ 77.212445][ T2231] EXT4-fs warning (device loop7): __ext4fs_dirhash:270: inode #2: comm syz-executor: Siphash requires key [ 77.224713][ T291] uclogic 0003:28BD:0042.0014: input,hidraw0: USB HID v0.00 Keypad [HID 28bd:0042] on usb-dummy_hcd.6-1/input1 [ 77.248590][ T6] usb 9-1: new full-speed USB device number 5 using dummy_hcd [ 77.414224][ T2720] usb 7-1: USB disconnect, device number 6 [ 77.459580][ T3002] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.466659][ T3002] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.474590][ T3002] device bridge_slave_0 entered promiscuous mode [ 77.484240][ T3002] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.491448][ T3002] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.499048][ T3002] device bridge_slave_1 entered promiscuous mode [ 77.554646][ T3002] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.561731][ T3002] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.569057][ T3002] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.576096][ T3002] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.597177][ T1353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 77.605198][ T1353] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.613149][ T1353] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.624838][ T1353] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 77.633149][ T1353] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.640222][ T1353] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.647639][ T6] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 77.660230][ T1353] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 77.668304][ T6] usb 9-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 77.668908][ T1353] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.677395][ T6] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.684524][ T1353] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.697102][ T6] usb 9-1: config 0 descriptor?? [ 77.707836][ T1353] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 77.720043][ T1353] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 77.729076][ T2979] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 77.737265][ T1353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 77.738485][ T1912] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5) [ 77.760073][ T1353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 77.768642][ T1353] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 77.776225][ T1353] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 77.777467][ T1912] usb 2-1: USB disconnect, device number 8 [ 77.793735][ T3002] device veth0_vlan entered promiscuous mode [ 77.807900][ T3002] device veth1_macvtap entered promiscuous mode [ 77.824762][ T1353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 77.837939][ T1353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 77.858782][ T1353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 77.873421][ T10] device bridge_slave_1 left promiscuous mode [ 77.879805][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.887468][ T10] device bridge_slave_0 left promiscuous mode [ 77.894104][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.902486][ T10] device veth1_macvtap left promiscuous mode [ 77.908914][ T10] device veth0_vlan left promiscuous mode [ 77.942139][ T30] kauditd_printk_skb: 87 callbacks suppressed [ 77.942155][ T30] audit: type=1326 audit(2000000014.373:1291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3015 comm="syz.6.1092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f1d609ec9 code=0x7ffc0000 [ 77.984341][ T30] audit: type=1326 audit(2000000014.403:1292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3015 comm="syz.6.1092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f1d609ec9 code=0x7ffc0000 [ 78.030668][ T3020] loop6: detected capacity change from 0 to 1024 [ 78.044928][ T30] audit: type=1326 audit(2000000014.403:1293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3015 comm="syz.6.1092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4f1d609ec9 code=0x7ffc0000 [ 78.069004][ T3022] loop2: detected capacity change from 0 to 256 [ 78.076304][ T30] audit: type=1326 audit(2000000014.403:1294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3015 comm="syz.6.1092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f1d609ec9 code=0x7ffc0000 [ 78.099963][ T30] audit: type=1326 audit(2000000014.403:1295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3015 comm="syz.6.1092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f1d609ec9 code=0x7ffc0000 [ 78.104929][ T3020] EXT4-fs (loop6): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 78.126737][ T30] audit: type=1326 audit(2000000014.403:1296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3015 comm="syz.6.1092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4f1d609ec9 code=0x7ffc0000 [ 78.161923][ T30] audit: type=1326 audit(2000000014.403:1297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3015 comm="syz.6.1092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f1d609ec9 code=0x7ffc0000 [ 78.187152][ T30] audit: type=1326 audit(2000000014.403:1298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3015 comm="syz.6.1092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f1d609ec9 code=0x7ffc0000 [ 78.212463][ T3022] exFAT-fs (loop2): bogus sectors bits per cluster : 193 [ 78.212463][ T3022] [ 78.221826][ T3022] exFAT-fs (loop2): failed to read boot sector [ 78.223170][ T6] hid-generic 0003:04F3:0755.0015: unknown main item tag 0x0 [ 78.228140][ T30] audit: type=1326 audit(2000000014.403:1299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3015 comm="syz.6.1092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4f1d609ec9 code=0x7ffc0000 [ 78.258982][ T6] hid-generic 0003:04F3:0755.0015: unknown main item tag 0x0 [ 78.259110][ T3022] exFAT-fs (loop2): failed to recognize exfat type [ 78.266434][ T6] hid-generic 0003:04F3:0755.0015: unknown main item tag 0x0 [ 78.281040][ T30] audit: type=1326 audit(2000000014.403:1300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3015 comm="syz.6.1092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f1d609ec9 code=0x7ffc0000 [ 78.309906][ T3020] EXT4-fs (loop6): mounted filesystem without journal. Opts: dioread_nolock,stripe=0x0000000000000003,min_batch_time=0x0000000000000001,nogrpid,debug_want_extra_isize=0x0000000000000080,nodelalloc,errors=remount-ro,acl,auto_da_alloc=0x0000000000000343,jqfmt=vfsold,barrier=0x0000000000. Quota mode: none. [ 78.318461][ T6] hid-generic 0003:04F3:0755.0015: unknown main item tag 0x0 [ 78.346356][ T6] hid-generic 0003:04F3:0755.0015: unknown main item tag 0x0 [ 78.355713][ T6] hid-generic 0003:04F3:0755.0015: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.8-1/input0 [ 78.502304][ T3020] SELinux: Context @ is not valid (left unmapped). [ 78.514889][ T3034] loop2: detected capacity change from 0 to 256 [ 78.593141][ T3042] loop6: detected capacity change from 0 to 256 [ 78.612627][ T3034] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 78.626983][ T3042] exfat: Unknown parameter '017777777777777777777770x0000000000000000' [ 78.647185][ T3034] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 78.667530][ T3034] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 78.670145][ T1353] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 78.693848][ T1353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 78.704260][ T1353] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 78.717847][ T1353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 78.728027][ T1353] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 78.744929][ T1353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 78.753707][ T1353] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 78.762757][ T1353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 78.872491][ T3056] blk_update_request: I/O error, dev loop19, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 78.884720][ T3056] FAT-fs (loop19): unable to read boot sector [ 79.224902][ T3100] loop6: detected capacity change from 0 to 512 [ 79.248873][ T3100] FAT-fs (loop6): Unrecognized mount option "dont_measure" or missing value [ 79.408443][ T291] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 79.432233][ T3126] loop6: detected capacity change from 0 to 256 [ 79.536456][ T3126] FAT-fs (loop6): Directory bread(block 64) failed [ 79.543152][ T3126] FAT-fs (loop6): Directory bread(block 65) failed [ 79.549832][ T3126] FAT-fs (loop6): Directory bread(block 66) failed [ 79.556419][ T3126] FAT-fs (loop6): Directory bread(block 67) failed [ 79.563205][ T3126] FAT-fs (loop6): Directory bread(block 68) failed [ 79.570171][ T3126] FAT-fs (loop6): Directory bread(block 69) failed [ 79.576832][ T3126] FAT-fs (loop6): Directory bread(block 70) failed [ 79.583629][ T3126] FAT-fs (loop6): Directory bread(block 71) failed [ 79.590283][ T3126] FAT-fs (loop6): Directory bread(block 72) failed [ 79.596918][ T3126] FAT-fs (loop6): Directory bread(block 73) failed [ 79.628412][ T356] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 79.768471][ T291] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 79.780051][ T3141] loop6: detected capacity change from 0 to 128 [ 79.780785][ T291] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 79.797605][ T291] usb 10-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 79.807097][ T291] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.816849][ T291] usb 10-1: config 0 descriptor?? [ 79.831464][ T3141] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 79.845241][ T3141] ext4 filesystem being mounted at /135/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 79.863374][ T3143] syz.2.1148 (3143) used greatest stack depth: 18912 bytes left [ 79.951447][ T3157] loop8: detected capacity change from 0 to 512 [ 79.985198][ T3157] EXT4-fs (loop8): Ignoring removed orlov option [ 79.998583][ T356] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 80.006417][ T3157] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 80.014528][ T356] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 80.029860][ T3157] EXT4-fs error (device loop8): ext4_xattr_ibody_find:2228: inode #15: comm syz.8.1153: corrupted in-inode xattr [ 80.037797][ T356] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 80.050380][ T3157] EXT4-fs error (device loop8): ext4_orphan_get:1406: comm syz.8.1153: couldn't read orphan inode 15 (err -117) [ 80.066956][ T3157] EXT4-fs (loop8): mounted filesystem without journal. Opts: jqfmt=vfsold,orlov,user_xattr,noload,nombcache,noblock_validity,init_itable=0x0000000000000601,nodiscard,,errors=continue. Quota mode: none. [ 80.088319][ T356] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 80.097568][ T356] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.115577][ T3157] EXT4-fs error (device loop8): ext4_check_dx_root:2266: inode #2: comm syz.8.1153: Corrupt dir, invalid name_len for '..', running e2fsck is recommended [ 80.133015][ T356] usb 2-1: config 0 descriptor?? [ 80.168471][ T1912] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 80.230573][ T58] usb 9-1: USB disconnect, device number 5 [ 80.341416][ T291] keytouch 0003:0926:3333.0016: fixing up Keytouch IEC report descriptor [ 80.360644][ T291] input: HID 0926:3333 as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:0926:3333.0016/input/input19 [ 80.482399][ T3182] loop2: detected capacity change from 0 to 40427 [ 80.491622][ T291] keytouch 0003:0926:3333.0016: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.9-1/input0 [ 80.538422][ T1912] usb 7-1: Using ep0 maxpacket: 8 [ 80.553658][ T58] usb 10-1: USB disconnect, device number 2 [ 80.559856][ T3182] F2FS-fs (loop2): fault_injection options not supported [ 80.570406][ T3182] F2FS-fs (loop2): invalid crc value [ 80.585777][ T3182] F2FS-fs (loop2): Found nat_bits in checkpoint [ 80.615420][ T356] plantronics 0003:047F:FFFF.0017: No inputs registered, leaving [ 80.627809][ T3182] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 80.629386][ T356] plantronics 0003:047F:FFFF.0017: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 80.636988][ T3196] fido_id[3196]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/report_descriptor': No such file or directory [ 80.674924][ T285] attempt to access beyond end of device [ 80.674924][ T285] loop2: rw=2049, want=45104, limit=40427 [ 80.703996][ T1912] usb 7-1: unable to get BOS descriptor or descriptor too short [ 80.884497][ T3216] loop8: detected capacity change from 0 to 128 [ 80.902731][ T356] usb 2-1: USB disconnect, device number 9 [ 81.021130][ T3220] loop8: detected capacity change from 0 to 1024 [ 81.028491][ T1912] usb 7-1: string descriptor 0 read error: -22 [ 81.034794][ T1912] usb 7-1: New USB device found, idVendor=0789, idProduct=0160, bcdDevice=82.fe [ 81.044071][ T1912] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.081421][ T3220] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 81.093833][ T3220] ext4 filesystem being mounted at /67/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 81.108203][ T3220] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1147: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 81.125058][ T3220] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28 [ 81.137413][ T3220] EXT4-fs (loop8): This should not happen!! Data will be lost [ 81.137413][ T3220] [ 81.147323][ T3220] EXT4-fs (loop8): Total free blocks count 0 [ 81.153551][ T3220] EXT4-fs (loop8): Free/Dirty block details [ 81.159584][ T3220] EXT4-fs (loop8): free_blocks=4293918736 [ 81.165333][ T3220] EXT4-fs (loop8): dirty_blocks=16 [ 81.170562][ T26] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 81.178122][ T3220] EXT4-fs (loop8): Block reservation details [ 81.184203][ T3220] EXT4-fs (loop8): i_reserved_data_blocks=1 [ 81.410605][ T26] usb 3-1: Using ep0 maxpacket: 16 [ 81.483176][ T3251] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=3251 comm=syz.8.1192 [ 81.496123][ T3251] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=3251 comm=syz.8.1192 [ 81.538619][ T26] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 81.557470][ T26] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 81.569051][ T3253] loop8: detected capacity change from 0 to 128 [ 81.575502][ T26] usb 3-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 81.584890][ T26] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.594475][ T26] usb 3-1: config 0 descriptor?? [ 81.604739][ T58] usb 10-1: new full-speed USB device number 3 using dummy_hcd [ 81.668912][ T3268] xt_hashlimit: max too large, truncated to 1048576 [ 81.758473][ T1912] asix 7-1:7.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 81.778417][ T1912] asix 7-1:7.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 81.837183][ T3277] loop1: detected capacity change from 0 to 16 [ 81.853877][ T3275] loop8: detected capacity change from 0 to 40427 [ 81.895084][ T3277] erofs: (device loop1): mounted with root inode @ nid 36. [ 81.899369][ T3275] F2FS-fs (loop8): Small segment_count (9 < 1 * 24) [ 81.922918][ T3275] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 81.933943][ T3275] F2FS-fs (loop8): Found nat_bits in checkpoint [ 81.973666][ T3275] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0 [ 81.980906][ T3275] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 81.988653][ T1912] asix 7-1:7.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 81.999000][ T58] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 82.011450][ T58] usb 10-1: New USB device found, idVendor=056a, idProduct=00b5, bcdDevice= 0.00 [ 82.020861][ T1912] asix 7-1:7.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 82.031299][ T58] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.040525][ T58] usb 10-1: config 0 descriptor?? [ 82.063551][ T2242] attempt to access beyond end of device [ 82.063551][ T2242] loop8: rw=2049, want=45104, limit=40427 [ 82.089344][ T26] apple 0003:05AC:024B.0018: unknown main item tag 0x0 [ 82.096260][ T26] apple 0003:05AC:024B.0018: unknown main item tag 0x0 [ 82.103443][ T26] apple 0003:05AC:024B.0018: unknown main item tag 0x0 [ 82.110599][ T26] apple 0003:05AC:024B.0018: unknown main item tag 0x0 [ 82.117499][ T26] apple 0003:05AC:024B.0018: unknown main item tag 0x0 [ 82.124645][ T26] apple 0003:05AC:024B.0018: unknown main item tag 0x0 [ 82.131944][ T26] apple 0003:05AC:024B.0018: unknown main item tag 0x0 [ 82.139029][ T26] apple 0003:05AC:024B.0018: unknown main item tag 0x0 [ 82.146234][ T26] apple 0003:05AC:024B.0018: unknown main item tag 0x0 [ 82.153653][ T26] apple 0003:05AC:024B.0018: unknown main item tag 0x0 [ 82.160933][ T26] apple 0003:05AC:024B.0018: unknown main item tag 0x0 [ 82.167830][ T26] apple 0003:05AC:024B.0018: unknown main item tag 0x0 [ 82.174975][ T26] apple 0003:05AC:024B.0018: unknown main item tag 0x0 [ 82.182083][ T26] apple 0003:05AC:024B.0018: unknown main item tag 0x0 [ 82.189413][ T26] apple 0003:05AC:024B.0018: unknown main item tag 0x0 [ 82.196337][ T26] apple 0003:05AC:024B.0018: unknown main item tag 0x0 [ 82.203479][ T26] apple 0003:05AC:024B.0018: unknown main item tag 0x0 [ 82.212216][ T1912] asix 7-1:7.0 eth1: register 'asix' at usb-dummy_hcd.6-1, ASIX AX88178 USB 2.0 Ethernet, 90:c1:af:eb:da:c3 [ 82.224117][ T26] apple 0003:05AC:024B.0018: unknown main item tag 0x0 [ 82.231300][ T26] apple 0003:05AC:024B.0018: unknown main item tag 0x0 [ 82.242523][ T1912] usb 7-1: USB disconnect, device number 7 [ 82.275812][ T26] apple 0003:05AC:024B.0018: unknown main item tag 0x0 [ 82.288675][ T1912] asix 7-1:7.0 eth1: unregister 'asix' usb-dummy_hcd.6-1, ASIX AX88178 USB 2.0 Ethernet [ 82.301548][ T26] apple 0003:05AC:024B.0018: unknown main item tag 0x0 [ 82.308701][ T26] apple 0003:05AC:024B.0018: unknown main item tag 0x0 [ 82.319519][ T26] apple 0003:05AC:024B.0018: unknown main item tag 0x0 [ 82.328733][ T26] apple 0003:05AC:024B.0018: unknown main item tag 0x0 [ 82.335641][ T26] apple 0003:05AC:024B.0018: unknown main item tag 0x0 [ 82.345754][ T26] apple 0003:05AC:024B.0018: unknown main item tag 0x0 [ 82.365437][ T26] apple 0003:05AC:024B.0018: unknown main item tag 0x0 [ 82.378426][ T26] apple 0003:05AC:024B.0018: unknown main item tag 0x0 [ 82.411491][ T26] apple 0003:05AC:024B.0018: unknown main item tag 0x0 [ 82.418978][ T26] apple 0003:05AC:024B.0018: unknown main item tag 0x0 [ 82.429383][ T3310] loop1: detected capacity change from 0 to 512 [ 82.436116][ T26] apple 0003:05AC:024B.0018: unknown main item tag 0x0 [ 82.450124][ T26] apple 0003:05AC:024B.0018: unknown main item tag 0x0 [ 82.463684][ T26] apple 0003:05AC:024B.0018: unknown main item tag 0x0 [ 82.474918][ T26] apple 0003:05AC:024B.0018: unknown main item tag 0x0 [ 82.485174][ T26] apple 0003:05AC:024B.0018: unknown main item tag 0x0 [ 82.493687][ T26] apple 0003:05AC:024B.0018: unknown main item tag 0x0 [ 82.499697][ T3310] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 82.506597][ T26] apple 0003:05AC:024B.0018: unknown main item tag 0x0 [ 82.520413][ T58] wacom 0003:056A:00B5.0019: unknown main item tag 0x0 [ 82.527317][ T58] wacom 0003:056A:00B5.0019: unknown main item tag 0x0 [ 82.530339][ T3310] ext4 filesystem being mounted at /272/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 82.534677][ T26] apple 0003:05AC:024B.0018: unknown main item tag 0x0 [ 82.551997][ T58] wacom 0003:056A:00B5.0019: unknown main item tag 0x0 [ 82.559049][ T58] wacom 0003:056A:00B5.0019: unknown main item tag 0x0 [ 82.565967][ T58] wacom 0003:056A:00B5.0019: unknown main item tag 0x0 [ 82.572928][ T26] apple 0003:05AC:024B.0018: unknown main item tag 0x0 [ 82.580019][ T58] wacom 0003:056A:00B5.0019: unknown main item tag 0x0 [ 82.583258][ T3310] EXT4-fs error (device loop1): ext4_do_update_inode:5235: inode #2: comm syz.1.1211: corrupted inode contents [ 82.586915][ T58] wacom 0003:056A:00B5.0019: unknown main item tag 0x0 [ 82.605973][ T26] apple 0003:05AC:024B.0018: unknown main item tag 0x0 [ 82.612937][ T26] apple 0003:05AC:024B.0018: unknown main item tag 0x0 [ 82.619921][ T26] apple 0003:05AC:024B.0018: unknown main item tag 0x0 [ 82.626813][ T26] apple 0003:05AC:024B.0018: unknown main item tag 0x0 [ 82.633898][ T3310] EXT4-fs error (device loop1): ext4_dirty_inode:6071: inode #2: comm syz.1.1211: mark_inode_dirty error [ 82.634007][ T58] wacom 0003:056A:00B5.0019: Unknown device_type for 'HID 056a:00b5'. Assuming pen. [ 82.654781][ T26] apple 0003:05AC:024B.0018: unknown main item tag 0x0 [ 82.661819][ T26] apple 0003:05AC:024B.0018: unknown main item tag 0x0 [ 82.669512][ T26] apple 0003:05AC:024B.0018: unknown main item tag 0x0 [ 82.673833][ T3310] EXT4-fs error (device loop1): ext4_do_update_inode:5235: inode #2: comm syz.1.1211: corrupted inode contents [ 82.676591][ T58] wacom 0003:056A:00B5.0019: hidraw0: USB HID v0.02 Device [HID 056a:00b5] on usb-dummy_hcd.9-1/input0 [ 82.699692][ T26] apple 0003:05AC:024B.0018: unknown main item tag 0x0 [ 82.706590][ T26] apple 0003:05AC:024B.0018: unknown main item tag 0x0 [ 82.713578][ T26] apple 0003:05AC:024B.0018: unknown main item tag 0x0 [ 82.720077][ T3310] EXT4-fs error (device loop1): __ext4_ext_dirty:183: inode #2: comm syz.1.1211: mark_inode_dirty error [ 82.720897][ T26] apple 0003:05AC:024B.0018: unknown main item tag 0x0 [ 82.739484][ T58] input: Wacom Intuos3 6x11 Pen as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:056A:00B5.0019/input/input20 [ 82.765701][ T26] apple 0003:05AC:024B.0018: unknown main item tag 0x0 [ 82.773021][ T26] apple 0003:05AC:024B.0018: unknown main item tag 0x0 [ 82.782092][ T58] usb 10-1: USB disconnect, device number 3 [ 82.788786][ T26] apple 0003:05AC:024B.0018: unknown main item tag 0x0 [ 82.795822][ T26] apple 0003:05AC:024B.0018: unknown main item tag 0x0 [ 82.803245][ T26] apple 0003:05AC:024B.0018: unknown main item tag 0x0 [ 82.810317][ T26] apple 0003:05AC:024B.0018: unknown main item tag 0x0 [ 82.834734][ T26] apple 0003:05AC:024B.0018: unknown main item tag 0x0 [ 82.842151][ T26] apple 0003:05AC:024B.0018: unknown main item tag 0x0 [ 82.862716][ T26] apple 0003:05AC:024B.0018: unknown main item tag 0x0 [ 82.867894][ T3337] fido_id[3337]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/report_descriptor': No such file or directory [ 82.885393][ T26] apple 0003:05AC:024B.0018: unknown main item tag 0x0 [ 82.892570][ T26] apple 0003:05AC:024B.0018: unknown main item tag 0x0 [ 82.899821][ T26] apple 0003:05AC:024B.0018: unknown main item tag 0x0 [ 82.906962][ T26] apple 0003:05AC:024B.0018: unknown main item tag 0x0 [ 82.914245][ T26] apple 0003:05AC:024B.0018: unknown main item tag 0x0 [ 82.921540][ T26] apple 0003:05AC:024B.0018: unknown main item tag 0x0 [ 82.928777][ T26] apple 0003:05AC:024B.0018: unknown main item tag 0x0 [ 82.935850][ T26] apple 0003:05AC:024B.0018: unknown main item tag 0x0 [ 82.943294][ T1912] ================================================================== [ 82.951387][ T1912] BUG: KASAN: use-after-free in __list_del_entry_valid+0xa6/0x120 [ 82.959302][ T1912] Read of size 8 at addr ffff888101dbac70 by task kworker/1:5/1912 [ 82.967193][ T1912] [ 82.969521][ T1912] CPU: 1 PID: 1912 Comm: kworker/1:5 Not tainted syzkaller #0 [ 82.976971][ T1912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 82.987027][ T1912] Workqueue: 0x0 (usb_hub_wq) [ 82.991816][ T1912] Call Trace: [ 82.995127][ T1912] [ 82.998161][ T1912] __dump_stack+0x21/0x30 [ 83.002501][ T1912] dump_stack_lvl+0xee/0x150 [ 83.007204][ T1912] ? show_regs_print_info+0x20/0x20 [ 83.012405][ T1912] ? load_image+0x3a0/0x3a0 [ 83.016925][ T1912] ? __schedule+0xb76/0x14c0 [ 83.021514][ T1912] print_address_description+0x7f/0x2c0 [ 83.027080][ T1912] ? __list_del_entry_valid+0xa6/0x120 [ 83.032571][ T1912] kasan_report+0xf1/0x140 [ 83.037023][ T1912] ? __kasan_check_write+0x14/0x20 [ 83.042141][ T1912] ? __list_del_entry_valid+0xa6/0x120 [ 83.047612][ T1912] __asan_report_load8_noabort+0x14/0x20 [ 83.053249][ T1912] __list_del_entry_valid+0xa6/0x120 [ 83.058548][ T1912] worker_thread+0xb0a/0x1200 [ 83.063233][ T1912] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 83.068693][ T1912] kthread+0x411/0x500 [ 83.072757][ T1912] ? worker_clr_flags+0x190/0x190 [ 83.077780][ T1912] ? kthread_blkcg+0xd0/0xd0 [ 83.082368][ T1912] ret_from_fork+0x1f/0x30 [ 83.086774][ T1912] [ 83.089787][ T1912] [ 83.092110][ T1912] Allocated by task 1912: [ 83.096425][ T1912] __kasan_kmalloc+0xda/0x110 [ 83.101095][ T1912] __kmalloc+0x13d/0x2c0 [ 83.105331][ T1912] kvmalloc_node+0x206/0x300 [ 83.110024][ T1912] alloc_netdev_mqs+0x8d/0xc90 [ 83.114788][ T1912] alloc_etherdev_mqs+0x34/0x40 [ 83.119687][ T1912] usbnet_probe+0x219/0x2860 [ 83.124275][ T1912] usb_probe_interface+0x5ff/0xae0 [ 83.129379][ T1912] really_probe+0x285/0x970 [ 83.133986][ T1912] __driver_probe_device+0x198/0x280 [ 83.139282][ T1912] driver_probe_device+0x54/0x3e0 [ 83.144300][ T1912] __device_attach_driver+0x2a6/0x460 [ 83.149684][ T1912] bus_for_each_drv+0x175/0x200 [ 83.154551][ T1912] __device_attach+0x2a2/0x400 [ 83.159308][ T1912] device_initial_probe+0x1a/0x20 [ 83.164322][ T1912] bus_probe_device+0xc0/0x1e0 [ 83.169085][ T1912] device_add+0xb31/0xed0 [ 83.173411][ T1912] usb_set_configuration+0x19c2/0x1f10 [ 83.178858][ T1912] usb_generic_driver_probe+0x91/0x150 [ 83.184306][ T1912] usb_probe_device+0x148/0x260 [ 83.189152][ T1912] really_probe+0x285/0x970 [ 83.193928][ T1912] __driver_probe_device+0x198/0x280 [ 83.199202][ T1912] driver_probe_device+0x54/0x3e0 [ 83.204222][ T1912] __device_attach_driver+0x2a6/0x460 [ 83.209601][ T1912] bus_for_each_drv+0x175/0x200 [ 83.214446][ T1912] __device_attach+0x2a2/0x400 [ 83.219200][ T1912] device_initial_probe+0x1a/0x20 [ 83.224217][ T1912] bus_probe_device+0xc0/0x1e0 [ 83.228986][ T1912] device_add+0xb31/0xed0 [ 83.233302][ T1912] usb_new_device+0xd06/0x1620 [ 83.238058][ T1912] hub_event+0x29c4/0x4480 [ 83.242489][ T1912] process_one_work+0x6be/0xba0 [ 83.247333][ T1912] worker_thread+0xa59/0x1200 [ 83.252000][ T1912] kthread+0x411/0x500 [ 83.256149][ T1912] ret_from_fork+0x1f/0x30 [ 83.260553][ T1912] [ 83.262960][ T1912] Freed by task 1912: [ 83.266941][ T1912] kasan_set_track+0x4a/0x70 [ 83.271520][ T1912] kasan_set_free_info+0x23/0x40 [ 83.276450][ T1912] ____kasan_slab_free+0x125/0x160 [ 83.281556][ T1912] __kasan_slab_free+0x11/0x20 [ 83.286333][ T1912] slab_free_freelist_hook+0xc2/0x190 [ 83.291741][ T1912] kfree+0xc4/0x270 [ 83.295546][ T1912] kvfree+0x35/0x40 [ 83.299343][ T1912] netdev_freemem+0x3f/0x60 [ 83.303834][ T1912] netdev_release+0x7f/0xb0 [ 83.308324][ T1912] device_release+0x96/0x1c0 [ 83.312902][ T1912] kobject_put+0x18a/0x270 [ 83.317309][ T1912] put_device+0x1f/0x30 [ 83.321456][ T1912] free_netdev+0x34b/0x450 [ 83.325869][ T1912] usbnet_disconnect+0x24b/0x3a0 [ 83.330795][ T1912] usb_unbind_interface+0x212/0x8c0 [ 83.335985][ T1912] device_release_driver_internal+0x4c1/0x760 [ 83.342039][ T1912] device_release_driver+0x19/0x20 [ 83.347145][ T1912] bus_remove_device+0x2dd/0x340 [ 83.352075][ T1912] device_del+0x696/0xe90 [ 83.356409][ T1912] usb_disable_device+0x3a8/0x750 [ 83.361420][ T1912] usb_disconnect+0x31e/0x850 [ 83.366086][ T1912] hub_event+0x1a96/0x4480 [ 83.370491][ T1912] process_one_work+0x6be/0xba0 [ 83.375343][ T1912] worker_thread+0xd7b/0x1200 [ 83.380024][ T1912] kthread+0x411/0x500 [ 83.384078][ T1912] ret_from_fork+0x1f/0x30 [ 83.388489][ T1912] [ 83.390807][ T1912] Last potentially related work creation: [ 83.396531][ T1912] kasan_save_stack+0x3a/0x60 [ 83.401198][ T1912] __kasan_record_aux_stack+0xd2/0x100 [ 83.406646][ T1912] kasan_record_aux_stack_noalloc+0xb/0x10 [ 83.412441][ T1912] insert_work+0x51/0x310 [ 83.416760][ T1912] __queue_work+0x8e5/0xc60 [ 83.421251][ T1912] queue_work_on+0xd2/0x140 [ 83.425744][ T1912] usbnet_link_change+0x189/0x1b0 [ 83.430774][ T1912] usbnet_probe+0x1dfd/0x2860 [ 83.435455][ T1912] usb_probe_interface+0x5ff/0xae0 [ 83.440556][ T1912] really_probe+0x285/0x970 [ 83.445046][ T1912] __driver_probe_device+0x198/0x280 [ 83.450322][ T1912] driver_probe_device+0x54/0x3e0 [ 83.455331][ T1912] __device_attach_driver+0x2a6/0x460 [ 83.460691][ T1912] bus_for_each_drv+0x175/0x200 [ 83.465530][ T1912] __device_attach+0x2a2/0x400 [ 83.470365][ T1912] device_initial_probe+0x1a/0x20 [ 83.475378][ T1912] bus_probe_device+0xc0/0x1e0 [ 83.480129][ T1912] device_add+0xb31/0xed0 [ 83.484448][ T1912] usb_set_configuration+0x19c2/0x1f10 [ 83.489992][ T1912] usb_generic_driver_probe+0x91/0x150 [ 83.495435][ T1912] usb_probe_device+0x148/0x260 [ 83.500287][ T1912] really_probe+0x285/0x970 [ 83.504777][ T1912] __driver_probe_device+0x198/0x280 [ 83.510047][ T1912] driver_probe_device+0x54/0x3e0 [ 83.515059][ T1912] __device_attach_driver+0x2a6/0x460 [ 83.520422][ T1912] bus_for_each_drv+0x175/0x200 [ 83.525261][ T1912] __device_attach+0x2a2/0x400 [ 83.530014][ T1912] device_initial_probe+0x1a/0x20 [ 83.535025][ T1912] bus_probe_device+0xc0/0x1e0 [ 83.539790][ T1912] device_add+0xb31/0xed0 [ 83.544109][ T1912] usb_new_device+0xd06/0x1620 [ 83.548885][ T1912] hub_event+0x29c4/0x4480 [ 83.553303][ T1912] process_one_work+0x6be/0xba0 [ 83.558142][ T1912] worker_thread+0xa59/0x1200 [ 83.562809][ T1912] kthread+0x411/0x500 [ 83.566865][ T1912] ret_from_fork+0x1f/0x30 [ 83.571272][ T1912] [ 83.573587][ T1912] The buggy address belongs to the object at ffff888101dba000 [ 83.573587][ T1912] which belongs to the cache kmalloc-4k of size 4096 [ 83.587624][ T1912] The buggy address is located 3184 bytes inside of [ 83.587624][ T1912] 4096-byte region [ffff888101dba000, ffff888101dbb000) [ 83.601059][ T1912] The buggy address belongs to the page: [ 83.606674][ T1912] page:ffffea0004076e00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x101db8 [ 83.616894][ T1912] head:ffffea0004076e00 order:3 compound_mapcount:0 compound_pincount:0 [ 83.625203][ T1912] flags: 0x4000000000010200(slab|head|zone=1) [ 83.631277][ T1912] raw: 4000000000010200 dead000000000100 dead000000000122 ffff888100043380 [ 83.639865][ T1912] raw: 0000000000000000 0000000000040004 00000001ffffffff 0000000000000000 [ 83.648521][ T1912] page dumped because: kasan: bad access detected [ 83.654915][ T1912] page_owner tracks the page as allocated [ 83.660615][ T1912] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, ts 2305890100, free_ts 0 [ 83.678486][ T1912] post_alloc_hook+0x192/0x1b0 [ 83.683259][ T1912] prep_new_page+0x1c/0x110 [ 83.687749][ T1912] get_page_from_freelist+0x2cc5/0x2d50 [ 83.693288][ T1912] __alloc_pages+0x18f/0x440 [ 83.697870][ T1912] new_slab+0xa1/0x4d0 [ 83.701930][ T1912] ___slab_alloc+0x381/0x810 [ 83.706512][ T1912] __slab_alloc+0x49/0x90 [ 83.710831][ T1912] kmem_cache_alloc_trace+0x146/0x270 [ 83.716203][ T1912] kobject_uevent_env+0x272/0x700 [ 83.721241][ T1912] kobject_uevent+0x1d/0x30 [ 83.725737][ T1912] device_add+0xa40/0xed0 [ 83.730058][ T1912] wakeup_source_sysfs_add+0x1b7/0x290 [ 83.735510][ T1912] wakeup_source_register+0x1a5/0x3d0 [ 83.740870][ T1912] device_wakeup_enable+0xc7/0x200 [ 83.745970][ T1912] device_init_wakeup+0x24b/0x350 [ 83.751000][ T1912] acpi_button_add+0x8eb/0xa50 [ 83.755753][ T1912] page_owner free stack trace missing [ 83.761191][ T1912] [ 83.763504][ T1912] Memory state around the buggy address: [ 83.769118][ T1912] ffff888101dbab00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 83.777166][ T1912] ffff888101dbab80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 83.785212][ T1912] >ffff888101dbac00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 83.793277][ T1912] ^ [ 83.800976][ T1912] ffff888101dbac80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 83.809111][ T1912] ffff888101dbad00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 83.817163][ T1912] ================================================================== [ 83.825205][ T1912] Disabling lock debugging due to kernel taint [ 83.834770][ T30] kauditd_printk_skb: 97 callbacks suppressed [ 83.834784][ T30] audit: type=1326 audit(2000000020.273:1398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3338 comm="syz.2.1216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf5f943ec9 code=0x7ffc0000 [ 83.843824][ T26] apple 0003:05AC:024B.0018: hidraw0: USB HID v0.00 Device [HID 05ac:024b] on usb-dummy_hcd.2-1/input0 [ 83.883427][ T30] audit: type=1326 audit(2000000020.273:1399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3338 comm="syz.2.1216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf5f943ec9 code=0x7ffc0000 [ 83.892760][ T26] usb 3-1: USB disconnect, device number 9 [ 83.907315][ T30] audit: type=1326 audit(2000000020.273:1400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3338 comm="syz.2.1216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7fcf5f943ec9 code=0x7ffc0000 [ 83.927526][ T3345] loop6: detected capacity change from 0 to 4096 [ 83.936930][ T30] audit: type=1326 audit(2000000020.273:1401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3338 comm="syz.2.1216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf5f943ec9 code=0x7ffc0000 [ 83.968042][ T30] audit: type=1326 audit(2000000020.313:1402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3338 comm="syz.2.1216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf5f943ec9 code=0x7ffc0000 [ 83.994414][ T30] audit: type=1326 audit(2000000020.313:1403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3344 comm="syz.2.1216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fcf5f976785 code=0x7ffc0000 [ 83.994747][ T3346] fido_id[3346]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 84.034677][ T30] audit: type=1326 audit(2000000020.473:1404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3344 comm="syz.2.1216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7fcf5f943ec9 code=0x7ffc0000 [ 84.082728][ T3345] EXT4-fs (loop6): mounted filesystem without journal. Opts: noload,usrquota,sysvgroups,auto_da_alloc=0x0000000000000003,barrier=0x0000000000000453,dioread_nolock,resgid=0x0000000000000000,barrier,,errors=continue. Quota mode: writeback. [ 84.126756][ T3342] EXT4-fs error (device loop6): ext4_empty_dir:3154: inode #12: block 80: comm syz.6.1218: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 84.201913][ T3342] EXT4-fs warning (device loop6): ext4_empty_dir:3156: inode #12: comm syz.6.1218: directory missing '..'