last executing test programs: 1m37.888364018s ago: executing program 32 (id=209): memfd_create(&(0x7f0000000000)='\xfb\"a&\x8fe\x11\x8c\xd64\xf9 \x00\x00\x00\x00\x00\x12\x1a\'<\xf5\xbeV\x12\xaal\xfa\xf0o\xd8\xb1,\xbd>M\xe3\x98?\xd9\x96\xab\xc7\x06\xfd\x9b\xab\xc8\x1e\x89]\x13bZ\x8d /#k\x95\x9eLV(\x8a\x0e\x93\x93Vc]mP\xbativ\xce\xa4K\xfb\xf2\xe0\xbf\x9d\xa1\xa2\xcd\xb39\xb4\x17a9\x1c\x82\x1aLT\xd0\xb9\x1a\xafB\x95\xb4\xcf\x91X\x8c\x87\xc2\xa1\x1b\xfe\xe7\xbc\xf7\xeb\xdeL\x1d\x98Zq\xcc%\x98\xb0Yc\xec\xb7\xb5m(9\xde\xd3\xefB\xd4\xee\xb5\xee\xe0\xaa\xdd\x00\xb1jOB\xdas\xe3\xb47}%)\xb9\xbf{\xce\x94^\xec\xdf\xbcW\xe0I\x0e\xa4\x1e}\x06\vK\xed\x11\x880\x0e\x9c\xaeVU\x88\xb0\x842kgA]\x1e\x88\xecif\xee]\x8b\xc6\"\xcej\x84\x06\x8a\x99\x80\xd7\xcf\x96\xed\x89\x1e6\x93+\xec#\x1d2\xb8\x80Z\xf7\x06\xbe\xc9[L\xc5\xc9\xb5\xd6{\xee\xce\x17\x89\xa6r\xc5j\xec\x1b\xaa\x996\x14e\xcf\x8axQ\x8fXeT\'0.\x85\xa2\xc8\xb3c\t\xe8\x1a\x89\xecL\xcf\xd8\xb5\xfb\xbc\tX\x88\xbe\xf4@[\xb2\xd5\x8c\xb9\x0e\x17\x8b\xce\xd09\xd2\xfb\x9e\xef\xabR\x88\x17\x9et\xf7\x9c\x01\x91\xacH\xdb\xf9\xcb\x7fh\x83>\x8e\xe1=\xedR\xc9\xe68h\x19\xafLY\x94\x93\xebT\x15\x817\x9d#\xea\xd2\xa8\xfb^\x8c\x87#\x10', 0x7) r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt(r0, 0x65, 0x1, &(0x7f0000000080), 0x1d0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000000)={0x1d, r1}, 0x10) 1m25.76257096s ago: executing program 33 (id=606): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x9, 0x7, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x200001ad, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff80, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) execveat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x0, 0x0, 0x1000) 1m22.74161872s ago: executing program 34 (id=657): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x8, 0x3, 0x450, 0x0, 0x1acc02, 0x148, 0x0, 0x10, 0x3b8, 0x2a8, 0x2a8, 0x3b8, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x40000, 0x2f8, 0x320, 0x0, {0x0, 0x5803}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x9, 0x1, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x10, './file0\x00'}}]}, @common=@inet=@SET1={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b0) 1m16.718199141s ago: executing program 35 (id=783): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="0a00000003000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) add_key$fscrypt_v1(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xffffffffffffffff) 1m9.377464019s ago: executing program 36 (id=948): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000540)={[{@test_dummy_encryption}]}, 0x1, 0x236, &(0x7f0000000300)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x82) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000040)={0x8, 0x40000cca8, 0x4010}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0xc0185879, &(0x7f0000000000)={@desc={0x1, 0x0, @desc3}}) 1m8.339290585s ago: executing program 0 (id=957): bpf$TOKEN_CREATE(0x24, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) syz_mount_image$f2fs(&(0x7f00000004c0), &(0x7f0000000240)='./file0\x00', 0x450, &(0x7f0000005f80)=ANY=[@ANYBLOB="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", @ANYRES32], 0x1, 0x5558, &(0x7f0000000a00)="$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") syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f00000003c0)={[{@nodiscard}, {}, {@acl}, {@alloc_mode_reuse}, {@fastboot}, {@discard_unit_block}, {@background_gc_on}, {@nouser_xattr}, {@fsync_mode_posix}, {@user_xattr}, {@data_flush}, {@adaptive_mode}, {@jqfmt_vfsold}, {@noinline_dentry}]}, 0x1, 0x5505, &(0x7f0000002480)="$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") syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000000)='.\x00', 0x18424bc, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000)) 1m7.901301063s ago: executing program 0 (id=965): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe2b, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00'}, 0x10) syz_emit_ethernet(0x5e, &(0x7f0000001340)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x28, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @remote, @private1}}}}}}, 0x0) 1m7.864670554s ago: executing program 0 (id=967): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file1\x00', 0x18000, &(0x7f0000003a00)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRESOCT, @ANYBLOB="b022fd84099290ab8ebe39cfc17f80bc2926131e9437a1dea9ca1756900531c14b67f7a9edd0d80c7c73649053153a8d8db6d3c0d3b3fa951f57d14071b61a27d968a0ae7bd580d2d9fd9034451c3ecffae80b234e72fb11e3a60c1208bd5262c5009e3e45582ed4203850292ed682fc5e26f5c2af47718ee5b4f2ed68f0b21b813ec22c4c61d3f22f5a01ebea6c484d8ef4ca90180b4587e0bee2f782fef574aa1e0ebc5d9e42452910d03c12feff7848f72ac5430476b9dc2457a09efdc6f181c408abe7b30cccd2c8fb85389e1cacd4f4b29a3d4a55941bf1bb416203732d6712d5a89470876ae6daec66f3fe1b39982c2781b115e20af7ce0a0c7c77db1073adc6e11597bd9f540f90f60b92dc84a5c764379c0b9426ff4f547182502633aa754dcfc63e46c7cef8e3a0c29bf5184ac150e90d884c59cba3dae7c531fb114534292629d8532c0f67ee37f2c349ea8f28199aff2aa335df5db411287a73adfbfff212cf7b6d277a361c55af160d98b5c3db84da37d80e07269c33f60f111ec3c09d8843e1f5499e71de9b48882b9415d45b20393888ec49f307d535580947b5a5b40b465382aa4a579f317d91792f8ed70e9401863bc0a21d7e15f828ae8f13c673a30cba6f10f89c8a018cc8bbe7072ffe1c5d4ef11f0f82cf967faef8608f8b289245f87607917b0c2578dbbe5186ac78b8cd9a5aff567aebe8a73dd547fdc503885a2df4953f3497688b7b1ede6a2e529b25ecc246a7bcb00077059d7e0100aa20cb4d1dbac6eec0a9f803601c799eddb9b271f0530842291167abffb982fe47a496e884ee3c17850f970cb3ac3342b832b8b984e2eb4836afb7727f7310a347add2a1094cfff7b44516593bbf15f3a9e0e2a788e99bdec6706ae9a39b4f8983ae38d4cdf866d9670de91036ea00006f195ec4b4ce462ea624b8875825262a301f9235496b935506109287bbcf4754e3fa637428a2e39a80cd07ffafd756839abddc721421754fcae705ab432fcdd6f3c004dfad9e6bfa87746dd41649dcd2bf1728a3d6d2ddf27a52957422a27f9e478530873d9f1861b71f2378540648b171bcbd44533723ae1a89e56e2f570c0571eb3c66fac65e3abad003a828f2d21cc990e57b80dd3762fe1204eb320591d6a93f9052b80494b2f52ad89d6374cf33040e2484c3384946450bb65835d65bebb4a91c0f82e598e5aa7ff9ba79f27bbd46240287721d2759fa24cec97658d8f17b3f424293f7253b74dae4b966c8089c546936953d8ce63463c26f1e296f56e17e7f890b6001ed5d9f739036842e989b40c02d3fe5227b1fb08a98f1b1f0c336346698e70171e74e40c5304a356b29c947672f8a0535b7ce3a66b276d09ca3d9fff030e41598649a310875f5b5801c471182c1f617c907f06b5f36a1f9294b0f4a95d0fc98682b1e38f2f94fb08f20c5e5c7afaa9fbbd84734a98dd9b33188f6b79334b09ca8e2de56457242f904b114a2c313b193fe421d7fa97da5ab77f363e83b4698bf903022d13826ded79a905f07f97dc0fc4cc290b969ee37075a4a80a0d86d0696eeea2048ebd1a97f8319b3342e515ae5c9e25ee933d926ae0f31af55aeb07da6508756ac9549ba8bbc0095a17cb647df12f926e595a531d7208ef75cfd6239f65a0584121c75e00f7c77990b90e6350b1a84eba4430979bb726ab02050573af29156bed8e243527593dc0c6de41d0b6775818a96ee97d153826a217e8d7e88c6c44baa781a495afeba3882a06f5b1a87b1e8ee1edf404ac3ade6f5af1f6cd22c01506b5f84befb55c86f79b56e4d5754be8f564f57852f991c2275cbf55937666e022c2b2f0d020156152377859b345f74fe66791421e5571a7900df89c9bef5c3cb19113fae5d524ae2edea5ca91baf096c02e1e860c9b5a97882da598ef1e39fcb61d83f997675a772ac37c0fbe65a9d379b9204a915fdb6a7c7cdbd14c0893cd5e8cfd56f4021756d6c6a25b258a69922a41f3c7bc43b69f46293b381a27ae5a3cfcf2526f8eadcb540ec87d6009d6a2939882140f9a447c5be4328a0681aa3002f6a9dfd836b362fb1d423d7c9571aeb50e2a6acb9ab4e85574baf27b1028db0f6647aa7fe995c1fbf8ab422bb15acf9ae6de73972c9549cb601297bbb1c740e8761af16c4785c4827b5dc5e52f4a82000f6f87670ec19fea4e04e564fc83c0ccf1b7fa2bb9ac3e56addfa7f5f6d1d3d3c92dea5de9fa42f1414a769b0cdc40e306fee0ad66573628b83a07fe087fcb3377848e1a7869e592c83bb594284da28a4f5db381059d56e5d4989042dadbbe6000b66184ca8fe9d293f6c70988f3d7b8ee00546a21aaeca498ae06fa7becc5a55914c7a1ab714d955a8b0bd72e8d6bbf4dd451b525fcbc9fb5c10747dee3c755d39be5c2d52345c56185a8d6cee878b72255acabf7dbefafaed94838532fd01ea6244c4ac929de6846084a07d19de7098e62b613775abe326d402f707c4fbb3968b0aac7f1f27537cbdecee19151b310bcbe2c848ef41eea747e85f87d5a160b2cb6b28d137e30c69770c1651e44a66f8e3394bec03c8256b89fd59bec449c6a2bdb351f53d05e463f75b834624b8c7b557dc38a398d726d0846fc2f062b5b32d10af38ce844c6811aaef73ace1d86813bc37433670f6180f9bd112ae00133077fc7a0bd12d7b4b3a53a3c16a9cb0e8112f18691aa3bd2215afdaa1d00c8ea4f4a302eaaad2549f646a8ae66b953fa9cd649a02c4b152cc6c7b55d99ddc3d0fd1fcd84da355eb02581dba9e4d9dd235d2d4c4e094161440e70926221d76ce70c8762485c8b801550cc208e5d1bfd184e622ff0950a912dd47163c838fd562f09ca1690e76da55a471ec67cb83bbb103975bd4683f0393ec8b843f55ba2c0bdc6c90b50031cfe751792bd5d0cb50c8ee93086794e18c4ed66d6bd09b499f8ff2f63a8920701ab0af5b4b75402b1d65b1eb515dc46e181a1699f21e67349c904f02f8358e28faff2ade65703d14dc2774b02acc731eee0941675502d95e0c32a7304f6e9af85ef220daea0de24cf79e35a59412e62835d3032f88d9ed7befd4f708bfd2d236bd188b6f951bbe13e3add84f111e20324a523426611ec15fb376e7306cbec6867f0b945047a4facf78154e68a66a36972d5a18af1403baa9b4b51fddd072ee1f0087add02485b40323bd708b76406e10a927a913d91c5d771d3aeb3cfafb54b1016785c61ed13060d5f1b550676a656b874fd392ae61c5044218df55cbb72b819990ffdb130fb17a14f7cb5a2a8aafedc6526d83762dbf320f15758030eeecf5652dccf04cdc68827400c768a21daff47212b87357ff0bcb36cae4d113a5d9815b07332cb42329321664d93e43e6dcd6115987007fc623088004f8ac943736eb2a045a25b1bbfbbc97571eabf875d924f6b7b0e524b1afa0ff499473aa7976de83b91928e84f8e445728778fe0e5a356a57f09ed254848cec31b7c5c9c7a2fca21befe15ffc9317e96f7ad582684ce625791b99563781bf64983e77be4f1a5893beec4b560fc15e9c21dd0c29bf2879dfaa257ba5ec97957050d5b2c1f25eb4064488c139dbf88f3b7c70850d6fdbf0603cdd4011bf76e0d9ee5c2b128b50dba5689a8f04d4caf62d777eab31aab4b4195da780901352d284885bf417eb05367ee1b5f2f8c5cfe7f0394fb977f3a3f96084375e22ccf6c3ee4659d68d2b1948a4a1783a4db2282c67d39613fa67be4dd144793b76c09dd563ef3d169f34318acbd62d3b2d64f9173d16e9801132918c3390172c6f64d049b4c894d593419e5f4d5a513fc5a64ddcd05b034e6d16fe88ff89a520c464f842ad5a62a6fc46f0e9d56d05d6f5e625d25f537cca62910981dd463255318d8273db13d27fdc6c17c2c54776ba3a246c413957f297b8ecb1adb5c3f1d4d8e4d7705bdb9268f956d2845b68511edd51cdc5d05de5d6d4b3f573592986fed325f1f3c6a9ef7740f9d843e11981d1ca515c7e722ec4d691c5e4d3a146e39bcf407f66418f754bb2508cb4cc843aa9d8eb63850e5b9103682ecc1fc8f972f394be9d31cb9efd0f693d4ec41fe8d0993b45d2f422f9ab604d3371c1bda1daa3206a027c4de5c8f2cf6d1fc7e6d1423a6c71e84f24e0a4dfbf4a331deff2ae649df9681a08846efc9f0001e7ef106f1bfa25ee2799b13f1f076e30e58078d186afb65301497e982478babf143972cc7072f70829b8faee46e56a1451ff7ddd0dd35816bfa29eee361de60fbc3222e89d70f1495be94d0e82072a0e572e3055c905552e6c45d2af3d4f505a99d947667059c1c92ce2d3549077539c4cec4c07337361eeb9f78813bf9e77b0a79f391ae6eb6987c98679c6c3629348e7f01171ffc63deb53317f61ef8ddffdbd0ca2d8095c10c106b0968325bc1e88829d92399b809f1b881e9b9f0aeada5c5ee20fd0866070e3d5d41e62f5b6d2d25441babcdf9d3dc8ae3c140a6f352daf00ed38e248b236acd27f24bdebae0f272a5820ef77fb603fe3cc910a9d842129259e61d25dcf546cd770e4cccab470b20fa5f5972a6dd15853483de6e032f9726c166e81e8e0f9db4df397cc4a10b6e58708a31f48d7d2bae4ef92828c37088068b2ae433110dc7c08e6017d8b26e4e0382ca8fa62dc6f53c4cc2f0f78af72335c494f57f2414afe247e2291c395895bb18f701b6f4331feb759110c543dd94a238e782ad552047677558a50e7683d71a9e222fd19a9343e1d64528640a8099dedd19e4c747dda18ff25b15bddf750a54533b6ecfc75ad4a2909485f7fd759d45c74727b2e7300eae71a8784f5dd7f25b4b000ed3254264131cbbae316fb3a3bfbeb309dd2d18104629db354f447791eb882bf0333a520b8dba745b673d071b07e1de3e02fe751a1cf5908435b1a38edbd60483abdb15452c868844ceb96c449ab72999a55c79f9ce7405797142ef7095b4caf99d7bbe51cd4e963e4ffbbd2648761abd3894b5420a0add261ff9c0eff61aafd1ac5195ff15cadb5b0c7ce34d4d2d68146f3dae677e833b8be0f8a876153bb65398def38e4bf539d3a00047b19c483062fc1c2547b7d4f7d99b7035212ccfffeeb21ed7bbd6165ac7fbafbca3cef86fff655305706dd0baa607c50543bb0d66f0f4dbdd9c365fdb7b875dc5e7ee59afccc321ad1e31cc84687afda71231bb2e4dc3ce79ff3ce4bbafed8821a5b71bbf3844f110e2dd9557b596ac792d97506d22c0410bce435e20fa2e2d435161b5b6ac85f44763769723a7b629258f45e10578f70bef2e9c05af8032e357697dfcd30de9b3e953a36d6cb7a03ce69288b663f692793904dd8fb4ab6dc31ddf7f6942ef84c1e68c78bf9974f830ee2fccca84113cee98b47ed41a87fe610c5348dc38d4ada19862772317a70754870347ad87dbbb4c52349b0261aa8e108fcf387b24d4e2a77ba76e8472fd74ab6fa021277a24ef7a48d395b0fd1f9c0cf83bac56b433ffbfe5984a362e337969febf259988162c2b4842bd2fc0b230fee93a085003e615088abfe41889f7b5e0f380ffe55b66c1f7419993c3dd4aac5891494a183ddca2e415e1749489c925715f3c44d94b90d2d735f2b923bdbbbf1646580ab135356a9ee29bc19e73ded9a33798a69d248574e0c9e9f40a1c1ba52bc66a578d08b75f271a9e9f447efede09d6b3b57e0aa6322c18fd6f5e1c9d2753e0a6513cc04124ab89802eb9c504f0e5550868ab597629d7cc7447ed1b01b2ff4cf511aa098710b208b5aa0f595039a2f0e7294c5fe3b0c3e6c40000000000000000000000000000000002588beb10115f4b22f4ac997c86c49201ee9dceb2142ae61555bbbc4ef8cdd468a8ffbe6cbfc8877dd87292c70e10669bc99d8d5710f7719cc2cffc86cd529b6da2511d07aef4a1d9533ab58a76f80ad7fe91a17397d3c834811aa82947a223b0710ff55657e1088c161bbc64fa0e97bfabaf0fe975075c2e254e", @ANYRES32, @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$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") statfs(&(0x7f0000000000)='./file1\x00', &(0x7f0000002a00)=""/4096) 1m7.825220093s ago: executing program 0 (id=968): mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='/'], 0x2) mount$fuse(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x8afa89, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x100) 1m7.800395604s ago: executing program 0 (id=969): r0 = syz_open_procfs(0x0, &(0x7f00000021c0)='maps\x00') read$char_usb(r0, &(0x7f0000000040)=""/4122, 0x101a) preadv(r0, &(0x7f0000002240)=[{&(0x7f0000001180)=""/4096, 0x1000}], 0x1, 0x29d3, 0x0) futex(&(0x7f0000002200)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) read$char_usb(r0, &(0x7f0000001080)=""/147, 0x93) 1m7.682093523s ago: executing program 0 (id=972): r0 = creat(&(0x7f0000000340)='./file0\x00', 0x28) close(r0) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 1m7.673112863s ago: executing program 37 (id=972): r0 = creat(&(0x7f0000000340)='./file0\x00', 0x28) close(r0) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 1m5.089102345s ago: executing program 3 (id=1031): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68000000000000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd3170400000085be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5eaff07000000000000b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df902aeec50e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f000000000100000000d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7167d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b909006f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f949170ef8cb9c13c12138116bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2c74664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677eff7c5c568a89d6e36b165c39132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc405a18ca0264400abf38e90000000000000000008faf2cddffbfa69bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942cc7cec21b7f337df5431bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de086553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c04f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c80f30505dd4cf2ae2a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265425d513a1294b8439276394945d94a589708e32a1cb30f1fa4b2f08e01dc5e8c6732e6dc59b5c8cb400000000000000592c9b68f09c8f5ddb20b4ae08b4d9df548e5ed6cd47b91a4bea8b6aa52edf64576aef1e43f2958437fdc20fbbd0d4e13d8cce1193b2f9b4f107e25af178d056e1b1e40bd75b013f7484fae0bc447b1ffaf34819fe3ad1a634c94345e26e1e68dec08723a37b05d1594a66a4718a51d4d67fc880c9d640f4eacc509873f1a103c87f69"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="0b00000073790101000000000000000000000000000af7f4f0c55de8ca0000000000000000000000000000000000000000f3c800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff00000000000000000000000000000020000000000000030000000000000000000000004119202532aeecfcdbb73887feb3"], 0x138) write$UHID_DESTROY(r1, &(0x7f0000000340), 0x4) 1m4.764925964s ago: executing program 3 (id=1038): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x6, 0x4, 0xdd, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0x43}}, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 1m4.685524784s ago: executing program 3 (id=1041): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f00000002c0), 0x0, 0x236, &(0x7f0000000300)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt\x00', 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f0000000580)={@id={0x2, 0x0, @a}, 0x40, 0x0, '\x00', @a}) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000580)={@id={0x2, 0x0, @a}, 0x40, 0x0, '\x00', @a}) 1m4.616955234s ago: executing program 3 (id=1043): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed0006, &(0x7f0000000280)={[{@nodiscard}, {@resgid={'resgid', 0x3d, 0xee00}}, {@init_itable}, {@noload}, {@minixdf}, {@usrjquota}]}, 0xfe, 0x43e, &(0x7f00000004c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x400, 0x80) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)={0xd2f0, 0x3000}) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c}) 1m4.376111852s ago: executing program 3 (id=1048): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x27, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000009c0)={r1, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1m4.214803042s ago: executing program 3 (id=1050): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x2d) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x5, 0x1, 0x8e, 0xe7c9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_DELETE_BATCH(0x18, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xe30a, r2}, 0x38) 1m4.157576242s ago: executing program 38 (id=1050): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x2d) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x5, 0x1, 0x8e, 0xe7c9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_DELETE_BATCH(0x18, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xe30a, r2}, 0x38) 54.484912642s ago: executing program 1 (id=1330): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x2, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x884, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) setfsuid(0x0) 54.484403082s ago: executing program 1 (id=1331): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f00000002c0), 0x0, 0x236, &(0x7f0000000300)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt\x00', 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f0000000580)={@id={0x2, 0x0, @a}, 0x40, 0x0, '\x00', @a}) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000580)={@id={0x2, 0x0, @a}, 0x40, 0x0, '\x00', @a}) 54.415991542s ago: executing program 1 (id=1335): openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) creat(0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0x541b, 0x0) 54.343975011s ago: executing program 1 (id=1337): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed0006, &(0x7f0000000280)={[{@nodiscard}, {@resgid={'resgid', 0x3d, 0xee00}}, {@init_itable}, {@noload}, {@minixdf}, {@usrjquota}]}, 0xfe, 0x43e, &(0x7f00000004c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x400, 0x80) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)={0xd2f0, 0x3000}) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c}) 54.251905551s ago: executing program 1 (id=1338): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40c8, &(0x7f0000000200), 0xfb, 0x496, &(0x7f0000000f40)="$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") lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f0000001400)=ANY=[@ANYBLOB="0200000001000000000000000400000000000000100000000000000020"], 0x24, 0x0) chdir(&(0x7f0000000240)='./file0\x00') bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) 54.194053351s ago: executing program 1 (id=1340): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000140)={0x8000000, 0x104000}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)={0xffff1000, 0x8000}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f0000000100)={0xdddd0000}) 54.14624364s ago: executing program 39 (id=1340): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000140)={0x8000000, 0x104000}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)={0xffff1000, 0x8000}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f0000000100)={0xdddd0000}) 42.651618414s ago: executing program 6 (id=1672): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56e, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x30, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0xb}]}}, 0x0}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, 0x0, 0x0) 40.957978449s ago: executing program 6 (id=1722): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000b8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2041, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x4) 38.869415153s ago: executing program 6 (id=1770): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r2, r1, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x8, 0x0, 0x2}}}}}}, 0x0) 38.858888303s ago: executing program 6 (id=1771): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x1010e, &(0x7f0000000600)={[{@errors_remount}, {@data_journal}, {@data_err_ignore}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x20}}, {@resuid}, {@block_validity}]}, 0x1, 0x450, &(0x7f0000000bc0)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x887008, 0x0) 38.787003062s ago: executing program 6 (id=1773): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000700)=0x13) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x9) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000040)={0xfbfffff4, 0x802, 0xfffffff1, 0xf7d, 0xe, "010100"}) write(r0, 0x0, 0x0) 38.640532462s ago: executing program 6 (id=1779): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000580)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000600)=[@sack_perm], 0x8cbd752) getsockopt$inet_tcp_buf(r0, 0x6, 0xb, 0x0, &(0x7f0000000040)) 38.631346452s ago: executing program 40 (id=1779): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000580)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000600)=[@sack_perm], 0x8cbd752) getsockopt$inet_tcp_buf(r0, 0x6, 0xb, 0x0, &(0x7f0000000040)) 30.352898136s ago: executing program 8 (id=1998): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x2, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r1}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000000000000000000200000000010000000000000e0100000000000000002e"], 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) 30.340706776s ago: executing program 8 (id=1999): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r1, 0x1, 0x6, @broadcast}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000002c0)={r1, 0x11, 0x6, @random="08d32bfb45c9"}, 0x10) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f00000000c0)={r1, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, 0x10) 30.314503206s ago: executing program 8 (id=2001): ioctl$BTRFS_IOC_DEFRAG(0xffffffffffffffff, 0x50009402, 0x0) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) r0 = io_uring_setup(0x13b9, &(0x7f0000000100)) close(r0) clock_nanosleep(0x9, 0x0, &(0x7f0000000000)={0x77359400}, 0xfffffffffffffffe) 29.468294073s ago: executing program 8 (id=2038): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, 0x0, 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 29.381405833s ago: executing program 8 (id=2041): timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000001400)=0x0) timer_create(0xfffffffc, 0x0, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_settime(r0, 0x0, &(0x7f00000005c0)={{}, {0x0, 0x989680}}, &(0x7f0000000600)) 29.313687443s ago: executing program 8 (id=2048): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r1, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x74}], 0x1, 0x0) 29.226950792s ago: executing program 41 (id=2048): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r1, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x74}], 0x1, 0x0) 1.708644526s ago: executing program 5 (id=2778): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000100)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_all\x00', 0x275a, 0x0) quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000180)={0x4, 0x0, 0x10001, 0x1, 0x1, 0x0, 0x0, 0x36a, 0x20003f}) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000040)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) 1.543825625s ago: executing program 5 (id=2780): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c00000000000000f2ffffff850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r0}, 0x10) r1 = socket$inet6(0x10, 0x3, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="240000005800410f9c00f4f90085b3a85c91fddf080001", 0x17) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 1.501965405s ago: executing program 5 (id=2783): open(&(0x7f00009e1000)='./file0\x00', 0x40040, 0x137ec1bb08b37c96) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) r1 = dup(r0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x80, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 1.467753715s ago: executing program 9 (id=2785): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000680)={&(0x7f0000000000)=@ipv6_newnexthop={0x28, 0x68, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x4}, [@NHA_ID={0x8, 0x6, 0xffffffff}, @NHA_OIF={0x8, 0x5, r2}]}, 0x28}}, 0x0) 1.393382465s ago: executing program 9 (id=2787): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) chown(&(0x7f0000000500)='.\x00', 0xee01, 0x0) 1.393131955s ago: executing program 9 (id=2789): r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x42, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r1, @ANYBLOB="05", @ANYRES16=r1, @ANYRES16], 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.197352034s ago: executing program 2 (id=2798): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xefd) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$ASHMEM_SET_NAME(r0, 0x7709, &(0x7f0000000100)='\x00\x00\x03\x06\x00\x00\x00\x01\x00x\x92\x12\xbc\x00\x00\xbb\x0642\x9c\x1a\xd1\xcbx\xb0\xd6\x1e\x10gQ\xca\x0e;\xf7\'\x8c\x95\x83=\t7\x96\x00\x00\x00\x00\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn\x05\x00\x00\x00-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \xac\xc4K\x03\xfa\x17Vz\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafd%\xf1\xdbjE\x01\xd1sD5hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\x851Y9OB\xdeB\xe1\x02-&\"\x01\x00\x00\x00\x01\x00\x00\x00\x00\xe4\x8e\"\x85\xc9x\xef\x81E.r\x89\xe5\x00\x9e\x97\x96\xb8j\x81\xf0\xdca\xfb\xa6\xff\xff\xff\xff\x00\x00\x00\x00d\xf0\xf1j\x11\x12\xc0\xbb\xfdq~#\xf7\xa8\"$,\xf4\x84|\x89o\x00<\xa6-\xb0\xd3\x80\xbe\xcf\a\x00\xfc\xa6\xb1\x05\x94\x84l\xbfA\xeb\xd8\t\x00\x00\x00CvNhx461\x04N<\xed\x01\x01\x00\x00\x00\x00\x00\x00\xec\x92\x86uY\xf6\xb5\t?,~\xa67\\\xb9\xc9K\xf8\x9d\x96\xc0\xb5\xc7wF\x99\x12\x97T\x90.\x9c\xe3\x9a\xf1\xb9\x9c\x13\xbc\x19\xde/\xaahB\t\x97\a03\xcd\xb3\xc8\xd5l\x14!\xf9Xg2\x1d\xeeB\xccT\x0e\xd8\xef\xc8\xe9\xb4\xf3l\xc3\xf2\x998\xc8\xc2|2\xee\xb4W\x99f.\xeb\xe9\x05\xcbkz3;\xdd\xe1*8\x95@0t0\xad\xe3#\xd7\x19\xe7Q\xdfmI\xe5\x1e\xe4\x87\xc9\x8f\xa7\xe0\xd9v\xf6\x01\x9d\x8f`,\x1a&Df8\x81I\x86l\x8f2\r:\xc1\x02\xd6Z%\xa7Ks\x8bUolS\x05\xbe\x00\xff\x7f\x00') 1.197134264s ago: executing program 2 (id=2799): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x2, 0x4, 0x1, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x3, 0x7, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018100000", @ANYRES32=r0, @ANYBLOB="000000000000000018100000", @ANYRES32=r1, @ANYBLOB="000000000000000095"], &(0x7f0000000a00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f00000001c0), &(0x7f0000000200), 0x8, 0xfffffffe, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={r2, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 1.196861904s ago: executing program 2 (id=2800): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x5, 0x2, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r1}, 0x10) r2 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "69dcaf20127e9a8545d8db1daeccfda52c392e8d36b4ca43b5b11b1cab614f6c2236da7d88ea0f07797900100000000000000000000000000000000000d09200"}, 0x48, 0xfffffffffffffffe) keyctl$search(0xa, r2, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0) 1.191095814s ago: executing program 2 (id=2801): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="180100002100000000000000000000108500000075000000a50000002300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r1, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) 979.274453ms ago: executing program 2 (id=2802): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x2, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000e80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = dup2(r1, r0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r2}, 0x10) clock_getres(0x3, 0x0) 964.652263ms ago: executing program 2 (id=2803): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x2880, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008f00850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x0) 642.351643ms ago: executing program 5 (id=2813): syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x0, &(0x7f0000000580)={[{@bsdgroups}, {@data_err_ignore}, {@acl}, {@user_xattr}, {@nomblk_io_submit}]}, 0x2, 0xbb8, &(0x7f00000017c0)="$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") truncate(&(0x7f0000001080)='./file1\x00', 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x281c2, 0x0) fcntl$setlease(r0, 0x400, 0x1) truncate(&(0x7f0000000000)='./file1\x00', 0x8c) 545.898022ms ago: executing program 7 (id=2815): socket$nl_netfilter(0x10, 0x3, 0xc) open(&(0x7f0000000100)='./file0\x00', 0x80ff, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) futex(&(0x7f0000000000), 0x5, 0x0, 0x0, &(0x7f0000000300), 0xd1000004) 545.457692ms ago: executing program 7 (id=2817): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x1c, r1, 0x852dd6c070cd7e4d, 0x0, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}]}, 0x1c}, 0x4, 0x700000000000000}, 0x0) 493.029152ms ago: executing program 7 (id=2818): r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000080)=0x3, 0x4) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace00000000000000002100000002ff02000000000000000000000000000104004e200023b0"], 0x0) 472.361532ms ago: executing program 7 (id=2820): syz_mount_image$erofs(&(0x7f00000003c0), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000240)=ANY=[], 0x0, 0x17d, &(0x7f0000001ac0)="$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") chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000040)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000100)='./file0\x00') 453.097882ms ago: executing program 5 (id=2821): sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00008feff0)={0x0, 0x193}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x4, 0x0, &(0x7f00008feff0)={&(0x7f0000000180)=ANY=[@ANYBLOB="020d0000100000002f3144e90000000003000600eb1f00000200403fe0000001000000f5000000000800120002000100000000000000000030006c100201009f6eae02000000adb20200000000152c000000ffffffff00010a0014bb7acde1b8e96408d700000000030005000020000002"], 0x80}}, 0x60) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0x0}, 0x20) r0 = socket$key(0xf, 0x3, 0x2) sendmmsg(r0, &(0x7f00000000c0), 0x2c8, 0x0) 425.435272ms ago: executing program 4 (id=2823): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0xffffff1f, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @sit={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x26}}, @IFLA_IPTUN_ENCAP_SPORT={0x6, 0x11, 0x4e22}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x7}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x0) 416.270562ms ago: executing program 7 (id=2824): r0 = epoll_create1(0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000000)={0xa0000001}) 400.370352ms ago: executing program 5 (id=2825): syz_open_dev$evdev(&(0x7f0000000280), 0x80000000000003, 0x26e300) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') exit(0x7) read$eventfd(r0, &(0x7f0000000340), 0x8) 376.323372ms ago: executing program 4 (id=2826): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 366.625281ms ago: executing program 4 (id=2827): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) mount$incfs(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, 0x0) mount$overlay(0x0, &(0x7f0000001340)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000080)=""/48, 0x30) 355.470572ms ago: executing program 4 (id=2828): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000000040)=0x1000, 0x4) sendto$inet6(r0, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) close(r0) 301.407302ms ago: executing program 4 (id=2829): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) personality(0x4100001) 301.234471ms ago: executing program 4 (id=2830): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x9, 0x27, 0x2}]}) socket$nl_route(0x10, 0x3, 0x0) timer_delete(r1) 301.160341ms ago: executing program 7 (id=2831): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x4, 0x0, 0x30, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x89f0, &(0x7f0000000900)={'bridge0\x00', @random='\x00\x00\x00 \x00'}) 289.137251ms ago: executing program 42 (id=2831): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x4, 0x0, 0x30, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x89f0, &(0x7f0000000900)={'bridge0\x00', @random='\x00\x00\x00 \x00'}) 177.328961ms ago: executing program 9 (id=2833): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000000)=ANY=[@ANYBLOB="030000000000000000000080010077e5087fc878f49e2486"]) 29.40655ms ago: executing program 9 (id=2834): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="3b00000000000000400101c0"]) 0s ago: executing program 9 (id=2835): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000040)=@x86={0xe8, 0x7, 0x0, 0x0, 0x2, 0x0, 0x6, 0x81, 0x9, 0x5, 0x2, 0x0, 0x0, 0x1ff, 0x3, 0x6, 0x9, 0x9, 0x6, '\x00', 0xcf, 0x1}) kernel console output (not intermixed with test programs): e=1 [ 90.710731][ T4619] loop5: detected capacity change from 0 to 256 [ 90.722023][ T4619] FAT-fs (loop5): Directory bread(block 64) failed [ 90.728392][ T4619] FAT-fs (loop5): Directory bread(block 65) failed [ 90.735016][ T4619] FAT-fs (loop5): Directory bread(block 66) failed [ 90.742548][ T4619] FAT-fs (loop5): Directory bread(block 67) failed [ 90.748991][ T4619] FAT-fs (loop5): Directory bread(block 68) failed [ 90.755424][ T4619] FAT-fs (loop5): Directory bread(block 69) failed [ 90.762012][ T4619] FAT-fs (loop5): Directory bread(block 70) failed [ 90.768336][ T4619] FAT-fs (loop5): Directory bread(block 71) failed [ 90.774757][ T4619] FAT-fs (loop5): Directory bread(block 72) failed [ 90.781121][ T4619] FAT-fs (loop5): Directory bread(block 73) failed [ 90.817156][ T28] audit: type=1400 audit(2000000020.778:857): avc: denied { write } for pid=4630 comm="syz.8.1761" path="socket:[37242]" dev="sockfs" ino=37242 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 90.968841][ T4629] loop5: detected capacity change from 0 to 40427 [ 90.975846][ T4629] F2FS-fs (loop5): fault_injection options not supported [ 90.983673][ T4629] F2FS-fs (loop5): invalid crc value [ 90.990240][ T4629] F2FS-fs (loop5): Found nat_bits in checkpoint [ 91.028903][ T4639] loop8: detected capacity change from 0 to 40427 [ 91.035955][ T4639] F2FS-fs (loop8): fault_injection options not supported [ 91.037284][ T4629] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 91.042988][ T4639] F2FS-fs (loop8): Image doesn't support compression [ 91.056820][ T4639] F2FS-fs (loop8): Image doesn't support compression [ 91.058827][ T4629] netlink: 'syz.5.1760': attribute type 1 has an invalid length. [ 91.064424][ T4639] F2FS-fs (loop8): invalid crc value [ 91.071109][ T4629] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1760'. [ 91.077730][ T4639] F2FS-fs (loop8): Found nat_bits in checkpoint [ 91.131543][ T4639] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 91.148576][ T24] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 91.170453][ T28] audit: type=1400 audit(2000000021.138:858): avc: denied { remount } for pid=4638 comm="syz.8.1765" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 91.176746][ T4639] syz.8.1765: attempt to access beyond end of device [ 91.176746][ T4639] loop8: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 91.189956][ T28] audit: type=1326 audit(2000000021.138:859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4648 comm="syz.5.1767" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9f36f85d29 code=0x0 [ 91.213285][ T4639] syz.8.1765: attempt to access beyond end of device [ 91.213285][ T4639] loop8: rw=2049, sector=45112, nr_sectors = 8 limit=40427 [ 91.249930][ T2304] syz-executor: attempt to access beyond end of device [ 91.249930][ T2304] loop8: rw=2049, sector=45120, nr_sectors = 8 limit=40427 [ 91.358570][ T24] usb 10-1: Using ep0 maxpacket: 32 [ 91.364669][ T24] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 91.375511][ T24] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 91.385451][ T24] usb 10-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 91.394860][ T24] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.403743][ T24] usb 10-1: config 0 descriptor?? [ 91.812317][ T24] savu 0003:1E7D:2D5A.0019: hiddev96,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.9-1/input0 [ 91.838589][ T1624] Bluetooth: hci0: command 0x1003 tx timeout [ 91.838614][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 91.872822][ T4661] loop6: detected capacity change from 0 to 512 [ 91.879454][ T4661] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 91.891269][ T4661] EXT4-fs (loop6): 1 orphan inode deleted [ 91.896820][ T4661] EXT4-fs (loop6): 1 truncate cleaned up [ 91.906989][ T28] audit: type=1400 audit(2000000021.868:860): avc: denied { mounton } for pid=4660 comm="syz.6.1771" path="/49/bus/file0/file0/file0" dev="loop6" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 91.938995][ T3660] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 91.953407][ T3660] EXT4-fs (loop6): Remounting filesystem read-only [ 91.960273][ T3660] EXT4-fs error (device loop6): ext4_lookup:1862: inode #2: comm syz-executor: deleted inode referenced: 17 [ 91.972139][ T3660] EXT4-fs (loop6): Remounting filesystem read-only [ 91.978885][ T3660] EXT4-fs error (device loop6): ext4_lookup:1862: inode #2: comm syz-executor: deleted inode referenced: 17 [ 91.990837][ T3660] EXT4-fs (loop6): Remounting filesystem read-only [ 92.079349][ T24] usb 10-1: USB disconnect, device number 8 [ 92.245395][ T4683] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.256163][ T4683] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.269064][ T4683] device bridge_slave_0 entered promiscuous mode [ 92.282801][ T4683] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.293300][ T4683] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.301753][ T4692] loop7: detected capacity change from 0 to 128 [ 92.308388][ T4683] device bridge_slave_1 entered promiscuous mode [ 92.347037][ T4694] loop7: detected capacity change from 0 to 1024 [ 92.353658][ T4694] EXT4-fs: Ignoring removed i_version option [ 92.359669][ T4694] EXT4-fs: Ignoring removed bh option [ 92.369700][ T4694] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 92.426213][ T4683] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.433109][ T4683] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.440202][ T4683] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.446965][ T4683] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.490359][ T8] bridge0: port 3(gretap0) entered disabled state [ 92.497652][ T8] device gretap0 left promiscuous mode [ 92.503164][ T8] bridge0: port 3(gretap0) entered disabled state [ 92.515403][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 92.523204][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.530462][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.549469][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 92.557750][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.564610][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.572693][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 92.581440][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.588309][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.597365][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 92.629575][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 92.645691][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 92.659393][ T4683] device veth0_vlan entered promiscuous mode [ 92.670537][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 92.678900][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 92.686244][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 92.705881][ T4683] device veth1_macvtap entered promiscuous mode [ 92.718242][ T8] device bridge_slave_1 left promiscuous mode [ 92.724589][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.732142][ T8] device bridge_slave_0 left promiscuous mode [ 92.739006][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.747311][ T8] device veth1_macvtap left promiscuous mode [ 92.753809][ T8] device veth0_vlan left promiscuous mode [ 92.880954][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 92.896383][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 92.908750][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 92.984222][ T4718] mmap: syz.9.1795 (4718): VmData 29036544 exceed data ulimit 3626. Update limits or use boot option ignore_rlimit_data. [ 93.049436][ T4724] loop9: detected capacity change from 0 to 256 [ 93.141355][ T28] audit: type=1400 audit(2000000023.108:861): avc: denied { ioctl } for pid=4737 comm="syz.5.1805" path="socket:[37546]" dev="sockfs" ino=37546 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 93.238594][ T24] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 93.281323][ T28] audit: type=1326 audit(2000000023.248:862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4753 comm="syz.5.1812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f36f85d29 code=0x7ffc0000 [ 93.305052][ T28] audit: type=1326 audit(2000000023.248:863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4753 comm="syz.5.1812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f36f85d29 code=0x7ffc0000 [ 93.328317][ T28] audit: type=1326 audit(2000000023.248:864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4753 comm="syz.5.1812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9f36f85d29 code=0x7ffc0000 [ 93.418586][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 93.426654][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 93.437458][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 93.458895][ T24] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 93.467862][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.476599][ T24] usb 5-1: config 0 descriptor?? [ 93.502156][ T4774] loop5: detected capacity change from 0 to 128 [ 93.621901][ T4785] loop9: detected capacity change from 0 to 8192 [ 93.886307][ T24] savu 0003:1E7D:2D5A.001A: report_id 0 is invalid [ 93.898529][ T24] savu 0003:1E7D:2D5A.001A: item 0 1 1 8 parsing failed [ 93.905672][ T24] savu 0003:1E7D:2D5A.001A: parse failed [ 93.911206][ T24] savu: probe of 0003:1E7D:2D5A.001A failed with error -22 [ 94.079436][ T296] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 94.090125][ T24] usb 5-1: USB disconnect, device number 8 [ 94.268629][ T296] usb 10-1: Using ep0 maxpacket: 32 [ 94.275009][ T296] usb 10-1: config 0 has an invalid interface number: 67 but max is 0 [ 94.283108][ T296] usb 10-1: config 0 has no interface number 0 [ 94.290462][ T296] usb 10-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 94.299443][ T296] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.307319][ T296] usb 10-1: Product: syz [ 94.311432][ T2782] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 94.318707][ T296] usb 10-1: Manufacturer: syz [ 94.323175][ T296] usb 10-1: SerialNumber: syz [ 94.329272][ T296] usb 10-1: config 0 descriptor?? [ 94.334867][ T296] smsc95xx v2.0.0 [ 94.508629][ T2782] usb 6-1: Using ep0 maxpacket: 32 [ 94.514735][ T2782] usb 6-1: config 254 has an invalid interface number: 205 but max is 0 [ 94.522977][ T2782] usb 6-1: config 254 has no interface number 0 [ 94.530484][ T2782] usb 6-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=52.c6 [ 94.539772][ T2782] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.547605][ T2782] usb 6-1: Product: syz [ 94.551592][ T2782] usb 6-1: Manufacturer: syz [ 94.555994][ T2782] usb 6-1: SerialNumber: syz [ 94.622242][ T4825] loop8: detected capacity change from 0 to 2048 [ 94.640750][ T4825] ext4 filesystem being mounted at /220/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.653514][ T4825] fs-verity: sha512 using implementation "sha512-avx2" [ 94.739708][ T296] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 94.750368][ T296] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 94.759886][ T4826] loop4: detected capacity change from 0 to 40427 [ 94.766527][ T4816] TCP: tcp_parse_options: Illegal window scaling value 249 > 14 received [ 94.767531][ T4826] F2FS-fs (loop4): invalid crc value [ 94.775850][ T24] usb 6-1: USB disconnect, device number 8 [ 94.781981][ T4826] F2FS-fs (loop4): Found nat_bits in checkpoint [ 94.827642][ T4826] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 94.857864][ T4826] syz.4.1844: attempt to access beyond end of device [ 94.857864][ T4826] loop4: rw=0, sector=77824, nr_sectors = 8 limit=40427 [ 94.877841][ T4683] syz-executor: attempt to access beyond end of device [ 94.877841][ T4683] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 95.160704][ T296] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000108: -71 [ 95.161759][ T4846] loop4: detected capacity change from 0 to 40427 [ 95.171688][ T296] smsc95xx: probe of 10-1:0.67 failed with error -71 [ 95.178218][ T4846] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 95.185357][ T296] usb 10-1: USB disconnect, device number 9 [ 95.191740][ T4846] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 95.206438][ T4846] F2FS-fs (loop4): invalid crc value [ 95.213081][ T4846] F2FS-fs (loop4): Found nat_bits in checkpoint [ 95.248120][ T4846] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 95.255080][ T4846] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 95.330765][ T4854] loop5: detected capacity change from 0 to 256 [ 95.411239][ T4683] syz-executor: attempt to access beyond end of device [ 95.411239][ T4683] loop4: rw=2051, sector=49152, nr_sectors = 4096 limit=40427 [ 95.425676][ T4683] syz-executor: attempt to access beyond end of device [ 95.425676][ T4683] loop4: rw=2051, sector=57344, nr_sectors = 20480 limit=40427 [ 95.440207][ T4683] syz-executor: attempt to access beyond end of device [ 95.440207][ T4683] loop4: rw=2051, sector=81920, nr_sectors = 4096 limit=40427 [ 95.455238][ T4683] F2FS-fs (loop4): Issue discard(6144, 6144, 512) failed, ret: -5 [ 95.455273][ T4683] F2FS-fs (loop4): Issue discard(7168, 7168, 2560) failed, ret: -5 [ 95.463002][ T4683] F2FS-fs (loop4): Issue discard(10240, 10240, 512) failed, ret: -5 [ 95.531561][ T28] kauditd_printk_skb: 83 callbacks suppressed [ 95.531578][ T28] audit: type=1400 audit(2000000025.498:948): avc: denied { getopt } for pid=4867 comm="syz.8.1862" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 95.620679][ T4873] loop8: detected capacity change from 0 to 1024 [ 95.634716][ T4873] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 95.643396][ T4873] EXT4-fs (loop8): orphan cleanup on readonly fs [ 95.650284][ T4873] EXT4-fs error (device loop8) in ext4_reserve_inode_write:5887: Corrupt filesystem [ 95.661589][ T4873] EXT4-fs (loop8): Remounting filesystem read-only [ 95.667929][ T4873] EXT4-fs error (device loop8): ext4_dirty_inode:6091: inode #3: comm syz.8.1864: mark_inode_dirty error [ 95.685353][ T4873] EXT4-fs (loop8): Remounting filesystem read-only [ 95.693302][ T4873] EXT4-fs error (device loop8): ext4_read_block_bitmap_nowait:477: comm syz.8.1864: Invalid block bitmap block 3 in block_group 0 [ 95.706803][ T4873] EXT4-fs (loop8): Remounting filesystem read-only [ 95.713217][ T4873] EXT4-fs error (device loop8) in ext4_reserve_inode_write:5887: Corrupt filesystem [ 95.722863][ T4873] EXT4-fs (loop8): Remounting filesystem read-only [ 95.729328][ T4873] EXT4-fs error (device loop8): ext4_dirty_inode:6091: inode #3: comm syz.8.1864: mark_inode_dirty error [ 95.740650][ T4873] EXT4-fs (loop8): Remounting filesystem read-only [ 95.747000][ T4873] Quota error (device loop8): write_blk: dquota write failed [ 95.754255][ T4873] EXT4-fs error (device loop8): ext4_map_blocks:634: inode #3: block 1: comm syz.8.1864: lblock 6 mapped to illegal pblock 1 (length 1) [ 95.775087][ T4873] EXT4-fs (loop8): Remounting filesystem read-only [ 95.781702][ T4873] Quota error (device loop8): write_blk: dquota write failed [ 95.789013][ T4873] Quota error (device loop8): qtree_write_dquot: Error -28 occurred while creating quota [ 95.798837][ T4873] EXT4-fs error (device loop8): ext4_map_blocks:634: inode #3: block 48: comm syz.8.1864: lblock 0 mapped to illegal pblock 48 (length 1) [ 95.819469][ T4873] EXT4-fs (loop8): Remounting filesystem read-only [ 95.819745][ T4880] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1875'. [ 95.825979][ T4873] Quota error (device loop8): v2_write_file_info: Can't write info structure [ 95.859102][ T4873] EXT4-fs error (device loop8): ext4_acquire_dquot:6788: comm syz.8.1864: Failed to acquire dquot type 0 [ 95.879092][ T4873] EXT4-fs (loop8): Remounting filesystem read-only [ 95.891250][ T4873] EXT4-fs error (device loop8): ext4_map_blocks:634: inode #3: block 49: comm syz.8.1864: lblock 1 mapped to illegal pblock 49 (length 1) [ 95.899167][ T4895] input: syz1 as /devices/virtual/input/input23 [ 95.911939][ T4895] input: failed to attach handler leds to device input23, error: -6 [ 95.916745][ T4873] EXT4-fs (loop8): Remounting filesystem read-only [ 95.927095][ T4873] Quota error (device loop8): do_insert_tree: Can't read tree quota block 1 [ 95.935767][ T4873] Quota error (device loop8): qtree_write_dquot: Error -117 occurred while creating quota [ 95.945799][ T4873] EXT4-fs error (device loop8): ext4_acquire_dquot:6788: comm syz.8.1864: Failed to acquire dquot type 0 [ 95.960740][ T4900] loop9: detected capacity change from 0 to 16 [ 95.965745][ T4873] EXT4-fs (loop8): Remounting filesystem read-only [ 95.970958][ T4900] erofs: (device loop9): mounted with root inode @ nid 36. [ 95.984726][ T4873] EXT4-fs error (device loop8) in ext4_reserve_inode_write:5887: Corrupt filesystem [ 95.994594][ T4873] EXT4-fs (loop8): Remounting filesystem read-only [ 96.006876][ T4873] EXT4-fs error (device loop8): ext4_evict_inode:279: inode #15: comm syz.8.1864: mark_inode_dirty error [ 96.024083][ T4873] EXT4-fs (loop8): Remounting filesystem read-only [ 96.030567][ T4873] EXT4-fs warning (device loop8): ext4_evict_inode:282: couldn't mark inode dirty (err -117) [ 96.041160][ T4873] EXT4-fs (loop8): 1 orphan inode deleted [ 96.335107][ T4925] loop5: detected capacity change from 0 to 40427 [ 96.347931][ T4925] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 96.355870][ T4925] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 96.375032][ T4925] F2FS-fs (loop5): invalid crc value [ 96.384087][ T4925] F2FS-fs (loop5): Found nat_bits in checkpoint [ 96.394922][ T2304] EXT4-fs unmount: 19 callbacks suppressed [ 96.394941][ T2304] EXT4-fs (loop8): unmounting filesystem. [ 96.454301][ T4947] loop4: detected capacity change from 0 to 2048 [ 96.460803][ T4925] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 96.467736][ T4925] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 96.488299][ T4947] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 96.506902][ T4947] ext4 filesystem being mounted at /13/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 96.551161][ T4683] EXT4-fs (loop4): unmounting filesystem. [ 96.644418][ T4945] loop8: detected capacity change from 0 to 40427 [ 96.651723][ T4945] F2FS-fs (loop8): Invalid log_blocksize (268), supports only 12 [ 96.659666][ T4945] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 96.668831][ T4945] F2FS-fs (loop8): invalid crc value [ 96.677213][ T4945] F2FS-fs (loop8): Found nat_bits in checkpoint [ 96.720523][ T4963] loop4: detected capacity change from 0 to 512 [ 96.732166][ T4945] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0 [ 96.739270][ T4945] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 96.758990][ T4963] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 96.778740][ T4963] ext4 filesystem being mounted at /18/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 96.792414][ T28] audit: type=1400 audit(2000000026.758:949): avc: denied { link } for pid=4944 comm="syz.8.1893" name="file1" dev="loop8" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 96.815205][ T4683] EXT4-fs (loop4): unmounting filesystem. [ 96.858096][ T4971] loop4: detected capacity change from 0 to 512 [ 96.864628][ T4971] EXT4-fs: Ignoring removed nobh option [ 96.871614][ T4971] EXT4-fs: Ignoring removed mblk_io_submit option [ 96.880894][ T4973] loop9: detected capacity change from 0 to 128 [ 96.893672][ T4971] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 96.920916][ T4683] EXT4-fs (loop4): unmounting filesystem. [ 96.941297][ T4976] loop4: detected capacity change from 0 to 512 [ 96.964336][ T4976] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 96.975580][ T4976] EXT4-fs warning (device loop4): dx_probe:869: inode #2: comm syz.4.1906: Unimplemented hash flags: 0x0001 [ 96.987387][ T4976] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.1906: Corrupt directory, running e2fsck is recommended [ 97.000687][ T4976] EXT4-fs error (device loop4): ext4_readdir:260: inode #2: block 3: comm syz.4.1906: path /21/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=4294967295, rec_len=7, size=1024 fake=0 [ 97.003716][ T8] Bluetooth: hci0: Frame reassembly failed (-84) [ 97.044693][ T4985] loop5: detected capacity change from 0 to 4096 [ 97.053263][ T4985] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 97.062483][ T4683] EXT4-fs (loop4): unmounting filesystem. [ 97.078910][ T4988] incfs: Options parsing error. -22 [ 97.079147][ T2969] EXT4-fs (loop5): unmounting filesystem. [ 97.084190][ T4988] incfs: mount failed -22 [ 97.188567][ T296] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 97.267429][ T5009] loop4: detected capacity change from 0 to 1024 [ 97.279722][ T5009] EXT4-fs: Ignoring removed i_version option [ 97.286549][ T5009] EXT4-fs: Ignoring removed mblk_io_submit option [ 97.293187][ T5009] EXT4-fs (loop4): Test dummy encryption mode enabled [ 97.301807][ T5009] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 97.324424][ T4683] EXT4-fs (loop4): unmounting filesystem. [ 97.380574][ T296] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 97.392809][ T296] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 97.402431][ T296] usb 10-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 97.411445][ T296] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 97.419346][ T296] usb 10-1: SerialNumber: syz [ 97.482294][ T5014] loop4: detected capacity change from 0 to 40427 [ 97.491533][ T5014] F2FS-fs (loop4): Found nat_bits in checkpoint [ 97.533307][ T5014] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 97.564458][ T5014] syz.4.1921: attempt to access beyond end of device [ 97.564458][ T5014] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 97.584078][ T4683] syz-executor: attempt to access beyond end of device [ 97.584078][ T4683] loop4: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 97.606331][ T28] audit: type=1400 audit(2000000027.568:950): avc: denied { setopt } for pid=5026 comm="syz.5.1925" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 97.629250][ T296] usb 10-1: 0:2 : does not exist [ 97.640870][ T296] usb 10-1: USB disconnect, device number 10 [ 97.757501][ T5035] loop4: detected capacity change from 0 to 512 [ 97.764094][ T5035] EXT4-fs: Ignoring removed i_version option [ 97.770264][ T5035] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 97.781434][ T5035] EXT4-fs (loop4): 1 truncate cleaned up [ 97.786904][ T5035] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 97.802293][ T5031] loop5: detected capacity change from 0 to 40427 [ 97.809877][ T4683] EXT4-fs (loop4): unmounting filesystem. [ 97.811762][ T5031] F2FS-fs (loop5): Found nat_bits in checkpoint [ 97.863040][ T5031] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 97.894691][ T5031] syz.5.1927: attempt to access beyond end of device [ 97.894691][ T5031] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 97.914252][ T2969] syz-executor: attempt to access beyond end of device [ 97.914252][ T2969] loop5: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 98.024811][ T5055] loop5: detected capacity change from 0 to 256 [ 98.034349][ T5055] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 98.148053][ T28] audit: type=1400 audit(2000000028.108:951): avc: denied { append } for pid=5058 comm="syz.9.1937" name="001" dev="devtmpfs" ino=184 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 98.148466][ T5059] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 98.178588][ T5059] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 98.283810][ T5069] loop9: detected capacity change from 0 to 2048 [ 98.300767][ T5069] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 98.317154][ T2711] EXT4-fs (loop9): unmounting filesystem. [ 98.348551][ T315] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 98.508964][ T5084] tmpfs: Unknown parameter 'in' [ 98.525387][ T5086] loop9: detected capacity change from 0 to 512 [ 98.538712][ T315] usb 6-1: Using ep0 maxpacket: 16 [ 98.540743][ T5086] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 98.545162][ T315] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 98.561529][ T5086] ext4 filesystem being mounted at /209/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 98.572579][ T315] usb 6-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 98.575566][ T5086] overlayfs: './file1' not a directory [ 98.582095][ T315] usb 6-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 98.596839][ T315] usb 6-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 98.606382][ T315] usb 6-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 98.616077][ T315] usb 6-1: config 1 interface 0 has no altsetting 0 [ 98.622529][ T315] usb 6-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 98.631611][ T315] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.632681][ T2711] EXT4-fs (loop9): unmounting filesystem. [ 98.642590][ T315] ums-sddr09 6-1:1.0: USB Mass Storage device detected [ 98.843517][ T315] scsi host1: usb-storage 6-1:1.0 [ 98.925901][ T5112] loop9: detected capacity change from 0 to 256 [ 98.933364][ T5112] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 99.048545][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 99.048555][ T1624] Bluetooth: hci0: command 0x1003 tx timeout [ 99.070797][ T5116] loop9: detected capacity change from 0 to 128 [ 99.078860][ T5116] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 99.087289][ T5116] ext4 filesystem being mounted at /219/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 99.133142][ T2711] EXT4-fs (loop9): unmounting filesystem. [ 99.219314][ T5132] xt_hashlimit: size too large, truncated to 1048576 [ 99.644940][ T5141] loop8: detected capacity change from 0 to 40427 [ 99.654117][ T5141] F2FS-fs (loop8): Found nat_bits in checkpoint [ 99.698205][ T5141] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 99.710910][ T5141] syz.8.1971: attempt to access beyond end of device [ 99.710910][ T5141] loop8: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 99.725047][ T5141] loop9: detected capacity change from 0 to 6 [ 99.739551][ T2304] syz-executor: attempt to access beyond end of device [ 99.739551][ T2304] loop8: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 99.873273][ T5162] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1978'. [ 99.899297][ T5164] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1979'. [ 99.921618][ T315] scsi 1:0:0:0: Direct-Access Sandisk ImageMate SDDR09 0177 PQ: 0 ANSI: 0 [ 99.951151][ T5170] loop4: detected capacity change from 0 to 512 [ 99.970306][ T5170] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 99.979667][ T5170] ext4 filesystem being mounted at /46/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 100.001578][ T5170] EXT4-fs (loop4): re-mounted. Quota mode: writeback. [ 100.016342][ T5170] EXT4-fs: Ignoring removed orlov option [ 100.021998][ T5170] EXT4-fs: Remounting file system with no journal so ignoring journalled data option [ 100.031517][ T5170] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 100.049353][ T5170] EXT4-fs error (device loop4): __ext4_remount:6436: comm syz.4.1982: Abort forced by user [ 100.069978][ T4683] EXT4-fs (loop4): unmounting filesystem. [ 100.070322][ T5178] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 100.112214][ T5186] loop8: detected capacity change from 0 to 128 [ 100.119998][ T5186] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 100.131977][ T5186] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 100.141461][ T296] usb 6-1: USB disconnect, device number 9 [ 100.147208][ T5103] sddr09: could not read card info [ 100.152202][ T8] sd 1:0:0:0: [sdb] 0 512-byte logical blocks: (0 B/0 B) [ 100.159697][ T8] sd 1:0:0:0: [sdb] 0-byte physical blocks [ 100.165399][ T8] sd 1:0:0:0: [sdb] Write Protect is off [ 100.171475][ T8] sd 1:0:0:0: [sdb] Asking for cache data failed [ 100.177874][ T8] sd 1:0:0:0: [sdb] Assuming drive cache: write through [ 100.195936][ T8] sd 1:0:0:0: [sdb] Attached SCSI removable disk [ 100.230965][ T5192] loop4: detected capacity change from 0 to 512 [ 100.255618][ T5192] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #15: comm syz.4.1992: casefold flag without casefold feature [ 100.268852][ T5192] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.1992: couldn't read orphan inode 15 (err -117) [ 100.280725][ T5192] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 100.324547][ T4683] EXT4-fs (loop4): unmounting filesystem. [ 100.348593][ T461] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 100.358754][ T5204] netlink: 'syz.8.1997': attribute type 11 has an invalid length. [ 100.391135][ T5209] device batadv_slave_1 entered promiscuous mode [ 100.397593][ T5207] device batadv_slave_1 left promiscuous mode [ 100.539717][ T461] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 100.550182][ T461] usb 10-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 100.559446][ T461] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.570797][ T461] usb 10-1: config 0 descriptor?? [ 100.672866][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 100.672883][ T28] audit: type=1400 audit(2000000030.638:956): avc: denied { mount } for pid=5240 comm="syz.5.2014" name="/" dev="configfs" ino=13178 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 100.702360][ T28] audit: type=1400 audit(2000000030.668:957): avc: denied { search } for pid=5240 comm="syz.5.2014" name="/" dev="configfs" ino=13178 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 100.725107][ T5245] SELinux: policydb version 4376 does not match my version range 15-33 [ 100.735956][ T5245] SELinux: failed to load policy [ 100.780832][ T24] usb 10-1: USB disconnect, device number 11 [ 100.843302][ T5264] loop5: detected capacity change from 0 to 512 [ 100.850145][ T5264] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 100.870651][ T5264] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 100.879590][ T5264] ext4 filesystem being mounted at /208/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 100.892855][ T5264] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 100.909035][ T28] audit: type=1400 audit(2000000000.080:958): avc: denied { create } for pid=5263 comm="syz.5.2024" name=E91F7189591E9233614B scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=sock_file permissive=1 [ 100.932419][ T2969] EXT4-fs (loop5): unmounting filesystem. [ 100.946135][ T5271] loop5: detected capacity change from 0 to 256 [ 100.952539][ T5271] exfat: Deprecated parameter 'utf8' [ 100.957669][ T5271] exfat: Deprecated parameter 'namecase' [ 100.963141][ T5271] exfat: Deprecated parameter 'utf8' [ 100.970772][ T5271] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x589b2fed, utbl_chksum : 0xe619d30d) [ 100.992586][ T28] audit: type=1400 audit(2000000000.160:959): avc: denied { remove_name } for pid=5270 comm="syz.5.2026" name="file0" dev="loop5" ino=1048716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 101.019278][ T5275] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2028'. [ 101.034846][ T28] audit: type=1400 audit(2000000000.160:960): avc: denied { rmdir } for pid=5270 comm="syz.5.2026" name="file0" dev="loop5" ino=1048716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 101.049135][ T5281] netlink: 'syz.5.2030': attribute type 3 has an invalid length. [ 101.057347][ T28] audit: type=1400 audit(2000000000.190:961): avc: denied { nlmsg_read } for pid=5274 comm="syz.4.2028" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 101.111880][ T5290] loop4: detected capacity change from 0 to 128 [ 101.119554][ T5290] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 101.128021][ T5290] ext4 filesystem being mounted at /66/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 101.148507][ T4683] EXT4-fs (loop4): unmounting filesystem. [ 101.185178][ T5293] loop4: detected capacity change from 0 to 256 [ 101.194428][ T5293] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 101.225034][ T28] audit: type=1400 audit(2000000000.390:962): avc: denied { sqpoll } for pid=5294 comm="syz.5.2036" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 101.261893][ T28] audit: type=1400 audit(2000000000.420:963): avc: denied { write } for pid=5296 comm="syz.4.2037" path="socket:[40730]" dev="sockfs" ino=40730 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 101.382046][ T5324] input: syz0 as /devices/virtual/input/input24 [ 101.731048][ T5306] bridge0: port 3(gretap0) entered disabled state [ 101.742577][ T5306] device gretap0 left promiscuous mode [ 101.754529][ T5306] bridge0: port 3(gretap0) entered disabled state [ 101.811445][ T5354] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.820235][ T5354] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.827999][ T5354] device bridge_slave_0 entered promiscuous mode [ 101.844575][ T5354] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.858158][ T5354] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.875853][ T5354] device bridge_slave_1 entered promiscuous mode [ 101.883914][ T5351] loop7: detected capacity change from 0 to 40427 [ 101.892094][ T5351] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12 [ 101.900446][ T5351] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 101.921848][ T5351] F2FS-fs (loop7): invalid crc value [ 101.941757][ T5351] F2FS-fs (loop7): Found nat_bits in checkpoint [ 101.964602][ T5306] device bridge_slave_1 left promiscuous mode [ 101.971816][ T5306] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.987805][ T5306] device bridge_slave_0 left promiscuous mode [ 101.994454][ T5306] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.003708][ T5306] device veth0_vlan left promiscuous mode [ 102.006485][ T5351] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 102.016794][ T5351] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 102.035556][ T28] audit: type=1400 audit(2000000001.200:964): avc: denied { lock } for pid=5350 comm="syz.7.2053" path="/208/file0/file1" dev="loop7" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 102.201536][ T5354] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.208425][ T5354] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.215677][ T5354] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.222468][ T5354] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.250344][ T5381] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 102.250507][ T5304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 102.259236][ T5381] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 102.259259][ T5381] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 102.259277][ T5381] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 102.259295][ T5381] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 102.259313][ T5381] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 102.310856][ T5381] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 102.319701][ T5381] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 102.328556][ T5381] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 102.337369][ T5381] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 102.410468][ T5304] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.423779][ T5304] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.450131][ T5304] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 102.468832][ T5304] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.475700][ T5304] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.489508][ T5304] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 102.501921][ T5304] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.508798][ T5304] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.526419][ T5304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 102.535398][ T5304] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 102.543849][ T5304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 102.551895][ T5304] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 102.568590][ T5304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 102.579465][ T5304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 102.589642][ T5392] loop4: detected capacity change from 0 to 128 [ 102.593842][ T5354] device veth0_vlan entered promiscuous mode [ 102.601836][ T5304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 102.611928][ T5304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 102.628975][ T5392] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 102.642755][ T5304] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 102.651235][ T5304] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 102.658800][ T5304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 102.664745][ T5392] ext4 filesystem being mounted at /75/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 102.679087][ T5304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 102.707541][ T5354] device veth1_macvtap entered promiscuous mode [ 102.725266][ T4683] EXT4-fs (loop4): unmounting filesystem. [ 102.735641][ T5320] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 102.744712][ T5320] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 102.759833][ T5320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 102.768992][ T28] audit: type=1400 audit(2000000001.940:965): avc: denied { map } for pid=5397 comm="syz.4.2064" path="/dev/ashmem" dev="devtmpfs" ino=265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 102.796131][ T5320] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 102.819172][ T5320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 102.831532][ T5402] overlayfs: invalid origin (000000790066696c65300000000000000000000000000000000000000000000000000000000000000000000000000000) [ 102.876461][ T315] kernel write not supported for file /2/net/sockstat (pid: 315 comm: kworker/1:3) [ 103.016739][ T5440] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2083'. [ 103.032573][ T5432] block device autoloading is deprecated and will be removed. [ 103.057914][ T5432] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 103.122638][ T5460] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 103.131954][ T5460] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 103.184327][ T5472] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2100'. [ 103.389459][ T5509] loop2: detected capacity change from 0 to 256 [ 103.398403][ T5509] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 103.423549][ T5513] syz.7.2120[5513] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 103.423629][ T5513] syz.7.2120[5513] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 103.429247][ T5229] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 103.519256][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 103.519631][ T1624] Bluetooth: hci0: command 0x1003 tx timeout [ 103.649709][ T5229] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 103.664635][ T5509] exFAT-fs (loop2): error, tried to truncate zeroed cluster. [ 103.671858][ T5229] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 103.671892][ T5229] usb 5-1: config 0 interface 0 has no altsetting 0 [ 103.671921][ T5229] usb 5-1: New USB device found, idVendor=0810, idProduct=0002, bcdDevice= 0.00 [ 103.682452][ T5509] exFAT-fs (loop2): Filesystem has been set read-only [ 103.703615][ T5229] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.703792][ T5509] exFAT-fs (loop2): error, tried to truncate zeroed cluster. [ 103.719377][ T5229] usb 5-1: config 0 descriptor?? [ 103.767886][ T5532] input: syz0 as /devices/virtual/input/input25 [ 103.911524][ T5529] loop2: detected capacity change from 0 to 40427 [ 103.919140][ T5529] F2FS-fs (loop2): fault_type options not supported [ 103.926530][ T5529] F2FS-fs (loop2): invalid crc value [ 103.933049][ T5529] F2FS-fs (loop2): Found nat_bits in checkpoint [ 103.975934][ T5529] F2FS-fs (loop2): Start checkpoint disabled! [ 103.982901][ T5529] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 104.056405][ T5548] loop9: detected capacity change from 0 to 256 [ 104.085204][ T5548] FAT-fs (loop9): Directory bread(block 64) failed [ 104.091723][ T5548] FAT-fs (loop9): Directory bread(block 65) failed [ 104.093129][ T5304] kworker/u4:9: attempt to access beyond end of device [ 104.093129][ T5304] loop2: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 104.098083][ T5548] FAT-fs (loop9): Directory bread(block 66) failed [ 104.118829][ T5548] FAT-fs (loop9): Directory bread(block 67) failed [ 104.125219][ T5548] FAT-fs (loop9): Directory bread(block 68) failed [ 104.131534][ T5548] FAT-fs (loop9): Directory bread(block 69) failed [ 104.134674][ T5229] pantherlord 0003:0810:0002.001B: unknown main item tag 0x0 [ 104.139038][ T5548] FAT-fs (loop9): Directory bread(block 70) failed [ 104.151473][ T5548] FAT-fs (loop9): Directory bread(block 71) failed [ 104.151585][ T5229] pantherlord 0003:0810:0002.001B: unknown main item tag 0x0 [ 104.158541][ T5548] FAT-fs (loop9): Directory bread(block 72) failed [ 104.185309][ T5229] pantherlord 0003:0810:0002.001B: unknown main item tag 0x0 [ 104.188278][ T5548] FAT-fs (loop9): Directory bread(block 73) failed [ 104.192723][ T5229] pantherlord 0003:0810:0002.001B: unknown main item tag 0x0 [ 104.216316][ T5229] pantherlord 0003:0810:0002.001B: unknown main item tag 0x0 [ 104.226415][ T5229] pantherlord 0003:0810:0002.001B: unknown main item tag 0x0 [ 104.241757][ T5546] loop5: detected capacity change from 0 to 40427 [ 104.248152][ T5229] pantherlord 0003:0810:0002.001B: unknown main item tag 0x0 [ 104.257032][ T5229] pantherlord 0003:0810:0002.001B: hidraw0: USB HID v2.00 Device [HID 0810:0002] on usb-dummy_hcd.4-1/input0 [ 104.269214][ T5229] pantherlord 0003:0810:0002.001B: no output reports found [ 104.309995][ T5546] F2FS-fs (loop5): Found nat_bits in checkpoint [ 104.343370][ T461] usb 5-1: USB disconnect, device number 9 [ 104.379313][ T5559] devtmpfs: Unknown parameter '' [ 104.396292][ T5546] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 104.407252][ T5566] loop9: detected capacity change from 0 to 512 [ 104.430611][ T5566] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 104.439691][ T5566] ext4 filesystem being mounted at /243/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 104.440082][ T2969] syz-executor: attempt to access beyond end of device [ 104.440082][ T2969] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 104.464630][ T2711] EXT4-fs (loop9): unmounting filesystem. [ 104.496946][ T5574] loop9: detected capacity change from 0 to 512 [ 104.503562][ T5574] EXT4-fs: Ignoring removed i_version option [ 104.509924][ T5574] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 104.521919][ T5574] EXT4-fs (loop9): 1 truncate cleaned up [ 104.527391][ T5574] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 104.545874][ T2711] EXT4-fs (loop9): unmounting filesystem. [ 104.688549][ T24] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 104.707292][ T5590] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2151'. [ 104.823747][ T5592] loop9: detected capacity change from 0 to 40427 [ 104.830672][ T5592] F2FS-fs (loop9): fault_injection options not supported [ 104.838200][ T5592] F2FS-fs (loop9): invalid crc value [ 104.844618][ T5592] F2FS-fs (loop9): Found nat_bits in checkpoint [ 104.868592][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 104.877110][ T5597] loop4: detected capacity change from 0 to 512 [ 104.889711][ T24] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 104.891598][ T5592] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 104.898728][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.913801][ T24] usb 3-1: Product: syz [ 104.914633][ T5593] f2fs_ckpt-7:9: attempt to access beyond end of device [ 104.914633][ T5593] loop9: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 104.918076][ T24] usb 3-1: Manufacturer: syz [ 104.936058][ T24] usb 3-1: SerialNumber: syz [ 104.941113][ T24] r8152-cfgselector 3-1: config 0 descriptor?? [ 105.014279][ T5601] netlink: 'syz.4.2155': attribute type 3 has an invalid length. [ 105.022461][ T5601] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2155'. [ 105.286601][ T5614] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 105.352068][ T24] r8152-cfgselector 3-1: Unknown version 0x0000 [ 105.358202][ T24] r8152-cfgselector 3-1: bad CDC descriptors [ 105.378976][ T24] r8152-cfgselector 3-1: Unknown version 0x0000 [ 105.398589][ T24] r8152-cfgselector 3-1: USB disconnect, device number 9 [ 105.465643][ T5629] loop5: detected capacity change from 0 to 128 [ 105.480261][ T5629] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 105.488864][ T5629] ext4 filesystem being mounted at /230/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 105.533533][ T2969] EXT4-fs (loop5): unmounting filesystem. [ 105.663913][ T5644] device batadv_slave_1 entered promiscuous mode [ 105.670803][ T5643] device batadv_slave_1 left promiscuous mode [ 105.889519][ T461] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 105.923918][ T5651] loop2: detected capacity change from 0 to 256 [ 105.936177][ T5651] FAT-fs (loop2): Directory bread(block 64) failed [ 105.943077][ T5651] FAT-fs (loop2): Directory bread(block 65) failed [ 105.949569][ T5651] FAT-fs (loop2): Directory bread(block 66) failed [ 105.956013][ T5651] FAT-fs (loop2): Directory bread(block 67) failed [ 105.962576][ T5651] FAT-fs (loop2): Directory bread(block 68) failed [ 105.969164][ T5651] FAT-fs (loop2): Directory bread(block 69) failed [ 105.975604][ T5651] FAT-fs (loop2): Directory bread(block 70) failed [ 105.982219][ T5651] FAT-fs (loop2): Directory bread(block 71) failed [ 105.988796][ T5651] FAT-fs (loop2): Directory bread(block 72) failed [ 105.995253][ T5651] FAT-fs (loop2): Directory bread(block 73) failed [ 106.004094][ T28] kauditd_printk_skb: 164 callbacks suppressed [ 106.004110][ T28] audit: type=1400 audit(2000000006.176:1130): avc: denied { read write } for pid=2711 comm="syz-executor" name="loop9" dev="devtmpfs" ino=123 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 106.038070][ T28] audit: type=1400 audit(2000000006.176:1131): avc: denied { open } for pid=2711 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=123 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 106.062344][ T28] audit: type=1400 audit(2000000006.176:1132): avc: denied { ioctl } for pid=2711 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=123 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 106.088346][ T28] audit: type=1400 audit(2000000006.186:1133): avc: denied { mount } for pid=5650 comm="syz.2.2177" name="/" dev="loop2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 106.110661][ T5304] kworker/u4:9: attempt to access beyond end of device [ 106.110661][ T5304] loop2: rw=1, sector=1224, nr_sectors = 12 limit=256 [ 106.124682][ T461] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 106.135830][ T461] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 106.145535][ T28] audit: type=1400 audit(2000000006.236:1134): avc: denied { unmount } for pid=5354 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 106.165474][ T461] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 106.178135][ T461] usb 5-1: New USB device found, idVendor=046d, idProduct=c50c, bcdDevice= 0.00 [ 106.178167][ T461] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.178713][ T28] audit: type=1400 audit(2000000006.256:1135): avc: denied { ioctl } for pid=5624 comm="syz.4.2165" path="/dev/raw-gadget" dev="devtmpfs" ino=254 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 106.178746][ T28] audit: type=1400 audit(2000000006.266:1136): avc: denied { bpf } for pid=5660 comm="syz.9.2183" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 106.178771][ T28] audit: type=1400 audit(2000000006.266:1137): avc: denied { prog_load } for pid=5660 comm="syz.9.2183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 106.178796][ T28] audit: type=1400 audit(2000000006.266:1138): avc: denied { perfmon } for pid=5660 comm="syz.9.2183" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 106.178820][ T28] audit: type=1400 audit(2000000006.266:1139): avc: denied { prog_run } for pid=5660 comm="syz.9.2183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 106.220867][ T461] usb 5-1: config 0 descriptor?? [ 106.446311][ T461] usbhid 5-1:0.0: can't add hid device: -71 [ 106.452191][ T461] usbhid: probe of 5-1:0.0 failed with error -71 [ 106.459207][ T461] usb 5-1: USB disconnect, device number 10 [ 106.540247][ T5677] loop5: detected capacity change from 0 to 512 [ 106.550211][ T5677] journal_path: Lookup failure for './file0' [ 106.556162][ T5677] EXT4-fs: error: could not find journal device path [ 106.588532][ T315] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 106.612959][ T5683] loop7: detected capacity change from 0 to 1024 [ 106.639931][ T5683] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 106.660896][ T5683] EXT4-fs (loop7): shut down requested (0) [ 106.693220][ T1950] EXT4-fs (loop7): unmounting filesystem. [ 106.759570][ T5675] loop2: detected capacity change from 0 to 131072 [ 106.768780][ T5675] F2FS-fs (loop2): Found nat_bits in checkpoint [ 106.788565][ T315] usb 10-1: Using ep0 maxpacket: 16 [ 106.796302][ T315] usb 10-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 106.805426][ T315] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.812415][ T5675] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 106.813307][ T315] usb 10-1: Product: syz [ 106.824640][ T315] usb 10-1: Manufacturer: syz [ 106.829234][ T315] usb 10-1: SerialNumber: syz [ 106.834526][ T315] r8152-cfgselector 10-1: config 0 descriptor?? [ 107.049648][ T5707] loop2: detected capacity change from 0 to 512 [ 107.056354][ T5707] EXT4-fs: Ignoring removed nobh option [ 107.062022][ T5707] EXT4-fs: Ignoring removed mblk_io_submit option [ 107.070456][ T5707] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 107.090993][ T5354] EXT4-fs (loop2): unmounting filesystem. [ 107.157801][ T5705] loop4: detected capacity change from 0 to 40427 [ 107.165196][ T5705] F2FS-fs (loop4): fault_type options not supported [ 107.173146][ T5705] F2FS-fs (loop4): invalid crc value [ 107.179722][ T5705] F2FS-fs (loop4): Found nat_bits in checkpoint [ 107.228867][ T5705] F2FS-fs (loop4): Start checkpoint disabled! [ 107.235576][ T5705] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 107.248889][ T315] r8152-cfgselector 10-1: Unknown version 0x0000 [ 107.255277][ T315] r8152-cfgselector 10-1: bad CDC descriptors [ 107.261715][ T315] r8152-cfgselector 10-1: Unknown version 0x0000 [ 107.268758][ T315] r8152-cfgselector 10-1: USB disconnect, device number 12 [ 107.317924][ T5320] kworker/u4:15: attempt to access beyond end of device [ 107.317924][ T5320] loop4: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 107.362339][ T5728] loop2: detected capacity change from 0 to 512 [ 107.368821][ T5728] EXT4-fs: Ignoring removed mblk_io_submit option [ 107.377395][ T5728] EXT4-fs error (device loop2): ext4_get_branch:178: inode #13: block 2: comm syz.2.2209: invalid block [ 107.388961][ T5728] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.2209: invalid indirect mapped block 10 (level 1) [ 107.402654][ T5728] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.2209: invalid indirect mapped block 8 (level 1) [ 107.416291][ T5728] EXT4-fs (loop2): 1 truncate cleaned up [ 107.421813][ T5728] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 107.444478][ T5354] EXT4-fs (loop2): unmounting filesystem. [ 107.498819][ T5731] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.505845][ T5731] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.642104][ T5733] loop2: detected capacity change from 0 to 40427 [ 107.649208][ T5733] F2FS-fs (loop2): fault_injection options not supported [ 107.659741][ T5738] tipc: Enabling of bearer rejected, failed to enable media [ 107.679868][ T5733] F2FS-fs (loop2): invalid crc value [ 107.698787][ T5743] loop5: detected capacity change from 0 to 256 [ 107.709667][ T5733] F2FS-fs (loop2): Found nat_bits in checkpoint [ 107.737821][ T5743] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 107.828743][ T5733] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 107.840498][ T5751] loop4: detected capacity change from 0 to 2048 [ 107.870413][ T5354] syz-executor: attempt to access beyond end of device [ 107.870413][ T5354] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 107.884240][ T5763] loop7: detected capacity change from 0 to 256 [ 107.893968][ T5763] exfat: Deprecated parameter 'namecase' [ 107.905117][ T5751] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 107.907556][ T5763] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 107.932959][ T5751] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 107.951131][ T5751] overlayfs: failed to set xattr on upper [ 107.999875][ T4683] EXT4-fs (loop4): unmounting filesystem. [ 108.031755][ T5304] Bluetooth: hci0: Frame reassembly failed (-84) [ 108.056453][ T5777] loop4: detected capacity change from 0 to 2048 [ 108.101335][ T5777] Alternate GPT is invalid, using primary GPT. [ 108.108683][ T5777] loop4: p2 p3 p7 [ 108.163897][ T5792] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 108.215668][ T5800] loop9: detected capacity change from 0 to 128 [ 108.229170][ T5802] loop4: detected capacity change from 0 to 2048 [ 108.235625][ T5800] EXT4-fs: Ignoring removed nobh option [ 108.242961][ T5800] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 108.251862][ T5800] ext4 filesystem being mounted at /266/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 108.264497][ T5802] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 108.275566][ T5802] EXT4-fs (loop4): shut down requested (1) [ 108.281428][ T5802] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 108.290179][ T5802] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 108.300491][ T2711] EXT4-fs (loop9): unmounting filesystem. [ 108.300554][ T5802] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=14 [ 108.314927][ T5802] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=14 [ 108.325257][ T5802] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 108.338174][ T5802] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 108.352278][ T5802] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 108.357341][ T5791] loop7: detected capacity change from 0 to 40427 [ 108.361065][ T5802] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=14 [ 108.384495][ T5791] F2FS-fs (loop7): Found nat_bits in checkpoint [ 108.391511][ T4683] EXT4-fs (loop4): unmounting filesystem. [ 108.426004][ T5791] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 108.453808][ T5820] Invalid ELF header magic: != ELF [ 108.460935][ T5791] syz.7.2234: attempt to access beyond end of device [ 108.460935][ T5791] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 108.483108][ T1950] syz-executor: attempt to access beyond end of device [ 108.483108][ T1950] loop7: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 108.598546][ T296] usb 3-1: new low-speed USB device number 10 using dummy_hcd [ 108.678571][ T461] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 108.780959][ T296] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 108.798709][ T296] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 108.817896][ T296] usb 3-1: string descriptor 0 read error: -22 [ 108.827710][ T296] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 108.846400][ T296] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.859808][ T461] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 108.877530][ T461] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 108.886740][ T461] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.907817][ T461] usb 5-1: config 0 descriptor?? [ 108.914035][ T5840] loop7: detected capacity change from 0 to 40427 [ 108.921311][ T5840] F2FS-fs (loop7): fault_type options not supported [ 108.928415][ T5840] F2FS-fs (loop7): invalid crc value [ 108.934800][ T5840] F2FS-fs (loop7): Found nat_bits in checkpoint [ 108.983861][ T5840] F2FS-fs (loop7): Start checkpoint disabled! [ 108.990675][ T5840] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e6 [ 109.063924][ T5229] usb 3-1: USB disconnect, device number 10 [ 109.070025][ T5849] loop9: detected capacity change from 0 to 40427 [ 109.078677][ T5849] F2FS-fs (loop9): Invalid log_blocksize (268), supports only 12 [ 109.084935][ T5320] kworker/u4:15: attempt to access beyond end of device [ 109.084935][ T5320] loop7: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 109.086219][ T5849] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 109.088663][ T5849] F2FS-fs (loop9): Found nat_bits in checkpoint [ 109.148547][ T5849] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0 [ 109.155625][ T5849] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 109.314233][ T5862] bridge0: port 3(gretap0) entered disabled state [ 109.321727][ T461] keytouch 0003:0926:3333.001C: fixing up Keytouch IEC report descriptor [ 109.333662][ T461] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.001C/input/input26 [ 109.352622][ T5862] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.359658][ T5862] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.371607][ T5849] F2FS-fs (loop9): Start checkpoint disabled! [ 109.420975][ T461] keytouch 0003:0926:3333.001C: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 109.462137][ T5865] loop7: detected capacity change from 0 to 512 [ 109.480304][ T5865] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 109.489452][ T5865] ext4 filesystem being mounted at /252/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 109.508779][ T5869] loop9: detected capacity change from 0 to 512 [ 109.515725][ T1950] EXT4-fs (loop7): unmounting filesystem. [ 109.521551][ T5869] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 109.523313][ T5817] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.538100][ T5817] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.557412][ T5869] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 109.566447][ T5869] ext4 filesystem being mounted at /278/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 109.604833][ T2711] EXT4-fs (loop9): unmounting filesystem. [ 109.638272][ T5886] syz.2.2269[5886] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 109.638366][ T5886] syz.2.2269[5886] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 109.721517][ T5892] netlink: 'syz.7.2272': attribute type 11 has an invalid length. [ 109.835502][ T39] usb 5-1: USB disconnect, device number 11 [ 109.850317][ T5905] loop7: detected capacity change from 0 to 128 [ 109.858381][ T5905] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 109.866884][ T5905] ext4 filesystem being mounted at /260/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 109.899041][ T461] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 109.911464][ T1950] EXT4-fs (loop7): unmounting filesystem. [ 109.925500][ T5909] loop7: detected capacity change from 0 to 16 [ 109.931978][ T5909] erofs: (device loop7): erofs_read_inode: unsupported chunk format 7fff of nid 36 [ 110.078556][ T1624] Bluetooth: hci0: command 0x1003 tx timeout [ 110.084543][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 110.097667][ T461] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 110.108847][ T461] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 110.118794][ T461] usb 10-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 110.127685][ T461] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.136277][ T461] usb 10-1: config 0 descriptor?? [ 110.180453][ T5925] SELinux: Context system_u:object_r:run_init_exec_t:s0 is not valid (left unmapped). [ 110.186010][ T5927] loop7: detected capacity change from 0 to 512 [ 110.200194][ T5927] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 110.209397][ T5927] ext4 filesystem being mounted at /266/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 110.230726][ T5927] EXT4-fs (loop7): re-mounted. Quota mode: writeback. [ 110.238256][ T5927] EXT4-fs: Ignoring removed orlov option [ 110.243901][ T5927] EXT4-fs: Remounting file system with no journal so ignoring journalled data option [ 110.244489][ T5933] netlink: 'syz.5.2288': attribute type 11 has an invalid length. [ 110.253522][ T5927] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 110.253543][ T5927] EXT4-fs error (device loop7): __ext4_remount:6436: comm syz.7.2286: Abort forced by user [ 110.287513][ T1950] EXT4-fs (loop7): unmounting filesystem. [ 110.303828][ T5935] loop5: detected capacity change from 0 to 1024 [ 110.320224][ T5935] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 110.389265][ T2969] EXT4-fs (loop5): unmounting filesystem. [ 110.551432][ T461] hid-steam 0003:28DE:1142.001D: unknown main item tag 0x0 [ 110.558741][ T461] hid-steam 0003:28DE:1142.001D: unknown main item tag 0x0 [ 110.565835][ T461] hid-steam 0003:28DE:1142.001D: unknown main item tag 0x0 [ 110.573108][ T461] hid-steam 0003:28DE:1142.001D: unknown main item tag 0x0 [ 110.580299][ T461] hid-steam 0003:28DE:1142.001D: unknown main item tag 0x0 [ 110.588166][ T461] hid-steam 0003:28DE:1142.001D: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.9-1/input0 [ 110.726604][ T5962] loop2: detected capacity change from 0 to 512 [ 110.740842][ T5962] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 110.749758][ T5962] ext4 filesystem being mounted at /55/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 110.765556][ T461] usb 10-1: USB disconnect, device number 13 [ 110.787123][ T5966] loop5: detected capacity change from 0 to 1024 [ 110.795161][ T5962] EXT4-fs (loop2): re-mounted. Quota mode: writeback. [ 110.802039][ T5966] EXT4-fs: Ignoring removed orlov option [ 110.807635][ T5966] EXT4-fs: Ignoring removed nomblk_io_submit option [ 110.814873][ T5962] EXT4-fs: Ignoring removed orlov option [ 110.820498][ T5962] EXT4-fs: Remounting file system with no journal so ignoring journalled data option [ 110.830293][ T5962] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 110.838878][ T5962] EXT4-fs error (device loop2): __ext4_remount:6436: comm syz.2.2300: Abort forced by user [ 110.840017][ T5946] loop7: detected capacity change from 0 to 131072 [ 110.855688][ T5946] F2FS-fs (loop7): fault_type options not supported [ 110.862313][ T5946] F2FS-fs (loop7): Test dummy encryption mode enabled [ 110.863730][ T5354] EXT4-fs (loop2): unmounting filesystem. [ 110.870266][ T5946] F2FS-fs (loop7): invalid crc value [ 110.880585][ T5966] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 110.900511][ T5946] F2FS-fs (loop7): Found nat_bits in checkpoint [ 110.912195][ T2969] EXT4-fs (loop5): unmounting filesystem. [ 110.973630][ T5946] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 111.284100][ T28] kauditd_printk_skb: 216 callbacks suppressed [ 111.284119][ T28] audit: type=1400 audit(2000000011.456:1356): avc: denied { create } for pid=5998 comm="syz.9.2312" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 111.318542][ T39] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 111.324470][ T28] audit: type=1400 audit(2000000011.486:1357): avc: denied { write } for pid=5998 comm="syz.9.2312" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 111.360315][ T28] audit: type=1400 audit(2000000011.536:1358): avc: denied { read } for pid=6005 comm="syz.4.2315" name="usbmon7" dev="devtmpfs" ino=176 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 111.384299][ T28] audit: type=1400 audit(2000000011.536:1359): avc: denied { open } for pid=6005 comm="syz.4.2315" path="/dev/usbmon7" dev="devtmpfs" ino=176 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 111.528599][ T39] usb 3-1: Using ep0 maxpacket: 16 [ 111.535032][ T39] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 111.545939][ T39] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 111.555620][ T39] usb 3-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 111.564508][ T39] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.572882][ T39] usb 3-1: config 0 descriptor?? [ 111.601151][ T6018] device batadv_slave_1 entered promiscuous mode [ 111.607854][ T6017] device batadv_slave_1 left promiscuous mode [ 111.737925][ T6027] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 111.747261][ T6027] FAT-fs (loop4): unable to read boot sector [ 111.808961][ T28] audit: type=1326 audit(2000000011.986:1360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6030 comm="syz.4.2327" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff073d85d29 code=0x0 [ 111.864370][ T28] audit: type=1400 audit(2000000012.036:1361): avc: denied { write } for pid=6032 comm="syz.5.2328" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 111.980638][ T39] appleir 0003:05AC:8241.001E: unknown main item tag 0x0 [ 111.987606][ T39] appleir 0003:05AC:8241.001E: unknown main item tag 0x0 [ 111.994540][ T39] appleir 0003:05AC:8241.001E: unknown main item tag 0x0 [ 112.001529][ T39] appleir 0003:05AC:8241.001E: unknown main item tag 0x0 [ 112.008390][ T39] appleir 0003:05AC:8241.001E: unknown main item tag 0x0 [ 112.015448][ T39] appleir 0003:05AC:8241.001E: No inputs registered, leaving [ 112.028842][ T39] appleir 0003:05AC:8241.001E: hiddev96,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.2-1/input0 [ 112.069251][ T6043] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 112.077658][ T28] audit: type=1400 audit(2000000012.246:1362): avc: denied { load_policy } for pid=6042 comm="syz.5.2331" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 112.077753][ T6043] SELinux: failed to load policy [ 112.239783][ T6045] loop7: detected capacity change from 0 to 40427 [ 112.246850][ T6045] F2FS-fs (loop7): fault_type options not supported [ 112.254333][ T315] usb 3-1: USB disconnect, device number 11 [ 112.261038][ T6045] F2FS-fs (loop7): invalid crc value [ 112.268970][ T6045] F2FS-fs (loop7): Found nat_bits in checkpoint [ 112.284521][ T6056] SELinux: policydb version 4376 does not match my version range 15-33 [ 112.296472][ T6056] SELinux: failed to load policy [ 112.318086][ T28] audit: type=1400 audit(2000000012.486:1363): avc: denied { read } for pid=6059 comm="syz.5.2338" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 112.344135][ T6045] F2FS-fs (loop7): Start checkpoint disabled! [ 112.349418][ T28] audit: type=1400 audit(2000000012.516:1364): avc: denied { open } for pid=6059 comm="syz.5.2338" path="/270/file0/.pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 112.383214][ T6045] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e6 [ 112.535064][ T6073] loop5: detected capacity change from 0 to 2048 [ 112.579649][ T6073] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 112.601677][ T28] audit: type=1400 audit(2000000012.776:1365): avc: denied { read } for pid=6072 comm="syz.5.2342" name="msr" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 112.654501][ T6078] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 112.672272][ T6067] kworker/u4:44: attempt to access beyond end of device [ 112.672272][ T6067] loop7: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 112.684500][ T6078] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 112.701051][ T315] kernel write not supported for file /uinput (pid: 315 comm: kworker/1:3) [ 112.731807][ T6078] EXT4-fs (loop5): This should not happen!! Data will be lost [ 112.731807][ T6078] [ 112.753957][ T6078] EXT4-fs (loop5): Total free blocks count 0 [ 112.761294][ T6087] loop4: detected capacity change from 0 to 512 [ 112.767507][ T6078] EXT4-fs (loop5): Free/Dirty block details [ 112.774322][ T6087] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 112.789276][ T6078] EXT4-fs (loop5): free_blocks=2415919104 [ 112.794924][ T6087] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 112.804611][ T6078] EXT4-fs (loop5): dirty_blocks=16 [ 112.810830][ T6078] EXT4-fs (loop5): Block reservation details [ 112.817735][ T6078] EXT4-fs (loop5): i_reserved_data_blocks=1 [ 112.824193][ T6087] EXT4-fs (loop4): warning: checktime reached, running e2fsck is recommended [ 112.838205][ T6087] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 112.866714][ T6087] System zones: 0-2, 18-18, 34-34 [ 112.886711][ T6087] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1087: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 112.943702][ T6087] EXT4-fs (loop4): 1 truncate cleaned up [ 113.124085][ T6102] loop2: detected capacity change from 0 to 256 [ 113.170053][ T6102] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 113.261407][ T6114] loop9: detected capacity change from 0 to 128 [ 113.331845][ T6116] net_ratelimit: 3319 callbacks suppressed [ 113.331868][ T6116] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 113.346425][ T6116] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 113.355356][ T6116] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 113.364206][ T6116] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 113.373068][ T6116] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 113.381907][ T6116] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 113.390762][ T6116] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 113.399619][ T6116] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 113.408552][ T6116] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 113.417381][ T6116] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 113.484955][ T6112] loop2: detected capacity change from 0 to 40427 [ 113.499188][ T6112] F2FS-fs (loop2): fault_type options not supported [ 113.509308][ T6112] F2FS-fs (loop2): invalid crc value [ 113.523288][ T6112] F2FS-fs (loop2): Found nat_bits in checkpoint [ 113.534938][ T6119] loop7: detected capacity change from 0 to 1024 [ 113.546159][ T6104] loop4: detected capacity change from 0 to 40427 [ 113.553049][ T6104] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 113.561122][ T6119] EXT4-fs: Ignoring removed orlov option [ 113.563593][ T6108] loop5: detected capacity change from 0 to 40427 [ 113.566924][ T6119] EXT4-fs: Ignoring removed nomblk_io_submit option [ 113.579767][ T6104] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 113.591459][ T6104] F2FS-fs (loop4): Found nat_bits in checkpoint [ 113.599496][ T6108] F2FS-fs (loop5): Found nat_bits in checkpoint [ 113.622038][ T6112] F2FS-fs (loop2): Start checkpoint disabled! [ 113.648200][ T6112] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 113.683485][ T6104] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 113.690473][ T6108] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 113.697805][ T6104] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 113.831217][ T6135] loop7: detected capacity change from 0 to 512 [ 113.859198][ T6135] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 113.868068][ T6135] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 113.914516][ T6135] EXT4-fs (loop7): warning: checktime reached, running e2fsck is recommended [ 113.928684][ T6135] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 113.936539][ T6135] System zones: 0-2, 18-18, 34-34 [ 113.949354][ T6135] EXT4-fs warning (device loop7): ext4_update_dynamic_rev:1087: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 113.979874][ T2969] syz-executor: attempt to access beyond end of device [ 113.979874][ T2969] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 114.004135][ T6135] EXT4-fs (loop7): 1 truncate cleaned up [ 114.062902][ T5370] kworker/u4:41: attempt to access beyond end of device [ 114.062902][ T5370] loop2: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 114.139178][ T6137] loop9: detected capacity change from 0 to 40427 [ 114.146074][ T6137] F2FS-fs (loop9): fault_type options not supported [ 114.179504][ T6137] F2FS-fs (loop9): invalid crc value [ 114.189411][ T6137] F2FS-fs (loop9): Found nat_bits in checkpoint [ 114.280672][ T6137] F2FS-fs (loop9): Start checkpoint disabled! [ 114.305793][ T6157] loop4: detected capacity change from 0 to 256 [ 114.306962][ T6137] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e6 [ 114.329439][ T6157] exfat: Deprecated parameter 'namecase' [ 114.344129][ T6157] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 114.416514][ T6161] input: syz0 as /devices/virtual/input/input27 [ 114.486996][ T6152] loop7: detected capacity change from 0 to 40427 [ 114.494590][ T6152] F2FS-fs (loop7): fault_injection options not supported [ 114.504530][ T6152] F2FS-fs (loop7): invalid crc value [ 114.512069][ T6152] F2FS-fs (loop7): Found nat_bits in checkpoint [ 114.528573][ T5229] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 114.572986][ T6152] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 114.580170][ T6090] kworker/u4:48: attempt to access beyond end of device [ 114.580170][ T6090] loop9: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 114.632579][ T6152] syz.7.2369: attempt to access beyond end of device [ 114.632579][ T6152] loop7: rw=2049, sector=45096, nr_sectors = 96 limit=40427 [ 114.647557][ T6152] syz.7.2369: attempt to access beyond end of device [ 114.647557][ T6152] loop7: rw=2049, sector=45192, nr_sectors = 8 limit=40427 [ 114.662383][ T6152] syz.7.2369: attempt to access beyond end of device [ 114.662383][ T6152] loop7: rw=2049, sector=45192, nr_sectors = 8 limit=40427 [ 114.676253][ T6152] syz.7.2369: attempt to access beyond end of device [ 114.676253][ T6152] loop7: rw=2049, sector=45200, nr_sectors = 32 limit=40427 [ 114.690255][ T6152] syz.7.2369: attempt to access beyond end of device [ 114.690255][ T6152] loop7: rw=2049, sector=45096, nr_sectors = 88 limit=40427 [ 114.723925][ T1950] syz-executor: attempt to access beyond end of device [ 114.723925][ T1950] loop7: rw=2049, sector=45232, nr_sectors = 8 limit=40427 [ 114.743476][ T5229] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 114.758802][ T5229] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 114.777590][ T5229] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 114.794616][ T5229] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 114.807786][ T6186] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2382'. [ 114.832303][ T5229] usb 6-1: New USB device found, idVendor=17ef, idProduct=6085, bcdDevice= 0.00 [ 114.858922][ T5229] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.877505][ T5229] usb 6-1: config 0 descriptor?? [ 114.985104][ T39] hid-generic 0000:0000:0000.001F: unknown main item tag 0x1 [ 114.992553][ T39] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 115.010001][ T39] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 115.027548][ T39] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 115.034847][ T39] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 115.048838][ T39] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 115.066272][ T39] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 115.083727][ T39] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 115.093361][ T6191] loop9: detected capacity change from 0 to 40427 [ 115.098536][ T39] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 115.100554][ T6191] F2FS-fs (loop9): fault_type options not supported [ 115.114261][ T6191] F2FS-fs (loop9): invalid crc value [ 115.117127][ T39] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 115.120850][ T6191] F2FS-fs (loop9): Found nat_bits in checkpoint [ 115.126622][ T39] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 115.126650][ T39] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 115.167405][ T39] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 115.177498][ T39] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 115.181733][ T6191] F2FS-fs (loop9): Start checkpoint disabled! [ 115.190715][ T39] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 115.191684][ T6191] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e6 [ 115.206922][ T39] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 115.224654][ T39] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 115.234751][ T39] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 115.246140][ T6197] loop2: detected capacity change from 0 to 40427 [ 115.252588][ T39] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 115.260319][ T39] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 115.267636][ T39] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 115.275016][ T6197] F2FS-fs (loop2): fault_type options not supported [ 115.281509][ T39] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 115.287224][ T5229] hid-rmi 0003:17EF:6085.0020: hidraw0: USB HID v0.00 Device [HID 17ef:6085] on usb-dummy_hcd.5-1/input0 [ 115.289251][ T39] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 115.306987][ T39] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 115.314360][ T39] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 115.321721][ T39] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 115.328968][ T6197] F2FS-fs (loop2): invalid crc value [ 115.334113][ T39] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 115.341560][ T39] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 115.349043][ T39] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 115.356389][ T39] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 115.363947][ T39] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 115.371273][ T6197] F2FS-fs (loop2): Found nat_bits in checkpoint [ 115.388582][ T39] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 115.395817][ T39] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 115.403333][ T39] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 115.410869][ T39] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 115.418394][ T39] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 115.428037][ T39] hid-generic 0000:0000:0000.001F: hidraw1: HID v0.00 Device [syz0] on syz1 [ 115.452888][ T6197] F2FS-fs (loop2): Start checkpoint disabled! [ 115.461932][ T6197] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 115.491343][ T5229] usb 6-1: USB disconnect, device number 10 [ 115.528635][ T6214] loop4: detected capacity change from 0 to 512 [ 115.535276][ T6214] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 115.575999][ T6214] EXT4-fs (loop4): 1 truncate cleaned up [ 115.586149][ T6214] EXT4-fs (loop4): re-mounted. Quota mode: none. [ 116.013103][ T6246] loop9: detected capacity change from 0 to 512 [ 116.026493][ T6246] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 116.071094][ T6246] EXT4-fs error (device loop9): ext4_acquire_dquot:6788: comm syz.9.2404: Failed to acquire dquot type 0 [ 116.110998][ T6246] EXT4-fs warning (device loop9): ext4_update_dynamic_rev:1087: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 116.135761][ T6246] EXT4-fs (loop9): 1 truncate cleaned up [ 116.157619][ T6246] EXT4-fs error (device loop9): ext4_acquire_dquot:6788: comm syz.9.2404: Failed to acquire dquot type 0 [ 116.221144][ T6257] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 116.364284][ T6252] loop4: detected capacity change from 0 to 40427 [ 116.385726][ T6250] loop5: detected capacity change from 0 to 40427 [ 116.392868][ T6252] F2FS-fs (loop4): invalid crc value [ 116.405816][ T6250] F2FS-fs (loop5): fault_type options not supported [ 116.421001][ T6252] F2FS-fs (loop4): Found nat_bits in checkpoint [ 116.431375][ T6250] F2FS-fs (loop5): invalid crc value [ 116.448337][ T6250] F2FS-fs (loop5): Found nat_bits in checkpoint [ 116.513139][ T6252] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 116.540235][ T6250] F2FS-fs (loop5): Start checkpoint disabled! [ 116.562460][ T6250] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 116.809242][ T6285] hub 6-0:1.0: USB hub found [ 116.828670][ T6285] hub 6-0:1.0: 1 port detected [ 116.896033][ T6287] loop2: detected capacity change from 0 to 2048 [ 116.930177][ T28] kauditd_printk_skb: 31 callbacks suppressed [ 116.930194][ T28] audit: type=1400 audit(2000000017.106:1393): avc: denied { read } for pid=6288 comm="syz.4.2416" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 116.930956][ T6282] loop9: detected capacity change from 0 to 40427 [ 116.966875][ T6287] ext4 filesystem being mounted at /75/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 116.979468][ T6287] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.2418: bg 0: block 448: padding at end of block bitmap is not set [ 116.994059][ T6287] fs-verity (loop2, inode 13): ext4_end_enable_verity() failed with err -117 [ 117.019538][ T6282] F2FS-fs (loop9): Found nat_bits in checkpoint [ 117.029276][ T6297] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2420'. [ 117.065535][ T28] audit: type=1326 audit(2000000017.236:1394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6298 comm="syz.5.2419" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9f36f85d29 code=0x0 [ 117.092865][ T6282] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 117.197382][ T6301] mmap: syz.2.2421 (6301) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 117.252691][ T6307] input: syz1 as /devices/virtual/input/input28 [ 117.252950][ T6308] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 117.258915][ T6307] input: failed to attach handler leds to device input28, error: -6 [ 117.267945][ T6308] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 117.320091][ T28] audit: type=1400 audit(2000000017.496:1395): avc: denied { ioctl } for pid=6313 comm="syz.2.2426" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=44672 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 117.355409][ T6318] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 117.365194][ T6318] FAT-fs (loop9): unable to read boot sector [ 117.382650][ T28] audit: type=1400 audit(2000000017.556:1396): avc: denied { nlmsg_write } for pid=6320 comm="syz.9.2429" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 117.510664][ T6323] loop9: detected capacity change from 0 to 40427 [ 117.518269][ T6323] F2FS-fs (loop9): invalid crc value [ 117.526506][ T6323] F2FS-fs (loop9): Found nat_bits in checkpoint [ 117.566998][ T6329] loop2: detected capacity change from 0 to 256 [ 117.572994][ T6323] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 117.576001][ T6329] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011a39, chksum : 0xd7c18d7b, utbl_chksum : 0xe619d30d) [ 117.600733][ T28] audit: type=1400 audit(2000000017.776:1397): avc: denied { setattr } for pid=6328 comm="syz.2.2432" name="file0" dev="loop2" ino=1048739 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 117.624325][ T6329] exFAT-fs (loop2): error, invalid size(size(0) > aligned(9223372036854777344) [ 117.624325][ T6329] [ 117.635398][ T6329] exFAT-fs (loop2): Filesystem has been set read-only [ 117.707681][ T6335] loop2: detected capacity change from 0 to 2048 [ 117.720040][ T6335] ext4 filesystem being mounted at /85/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 117.778585][ T6344] loop4: detected capacity change from 0 to 512 [ 117.786864][ T6344] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #15: comm syz.4.2437: casefold flag without casefold feature [ 117.799717][ T6344] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.2437: couldn't read orphan inode 15 (err -117) [ 117.920936][ T6360] loop5: detected capacity change from 0 to 512 [ 117.928963][ T6360] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 117.940521][ T6360] EXT4-fs (loop5): 1 truncate cleaned up [ 117.957741][ T6360] EXT4-fs (loop5): re-mounted. Quota mode: none. [ 118.051228][ T28] audit: type=1400 audit(2000000018.226:1398): avc: denied { append } for pid=6375 comm="syz.7.2450" name="001" dev="devtmpfs" ino=160 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 118.051526][ T6377] usb usb1: usbfs: process 6377 (syz.7.2450) did not claim interface 0 before use [ 118.100806][ T6379] loop5: detected capacity change from 0 to 256 [ 118.120811][ T6379] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xb107716d, utbl_chksum : 0xe619d30d) [ 118.174156][ T28] audit: type=1400 audit(2000000018.346:1399): avc: denied { append } for pid=6378 comm="syz.5.2451" path="/281/file0/blkio.bfq.io_service_bytes_recursive" dev="loop5" ino=1048740 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 118.227358][ T28] audit: type=1400 audit(2000000018.346:1400): avc: denied { map } for pid=6378 comm="syz.5.2451" path="/281/file0/blkio.bfq.io_service_bytes_recursive" dev="loop5" ino=1048740 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 118.256048][ T6386] loop5: detected capacity change from 0 to 512 [ 118.273775][ T6367] loop4: detected capacity change from 0 to 40427 [ 118.282220][ T6367] F2FS-fs (loop4): invalid crc value [ 118.298913][ T6386] ext4 filesystem being mounted at /282/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 118.320374][ T6367] F2FS-fs (loop4): Found nat_bits in checkpoint [ 118.399174][ T6398] loop2: detected capacity change from 0 to 512 [ 118.408410][ T6401] net_ratelimit: 3320 callbacks suppressed [ 118.408432][ T6401] sock: sock_set_timeout: `syz.7.2459' (pid 6401) tries to set negative timeout [ 118.416102][ T6367] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 118.430837][ T6398] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 118.469787][ T6398] EXT4-fs (loop2): 1 truncate cleaned up [ 118.488732][ T6398] EXT4-fs (loop2): re-mounted. Quota mode: none. [ 118.500974][ T28] audit: type=1400 audit(2000000018.676:1401): avc: denied { create } for pid=6406 comm="syz.7.2461" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 118.558408][ T6409] loop9: detected capacity change from 0 to 128 [ 118.564657][ T28] audit: type=1400 audit(2000000018.706:1402): avc: denied { write } for pid=6406 comm="syz.7.2461" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 118.586813][ T6409] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 118.613289][ T6396] loop5: detected capacity change from 0 to 40427 [ 118.622004][ T6396] F2FS-fs (loop5): fault_type options not supported [ 118.626826][ T6409] FAT-fs (loop9): FAT read failed (blocknr 128) [ 118.630651][ T6396] F2FS-fs (loop5): invalid crc value [ 118.648089][ T6243] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 118.649727][ T6396] F2FS-fs (loop5): Found nat_bits in checkpoint [ 118.705879][ T4683] bio_check_eod: 6 callbacks suppressed [ 118.705900][ T4683] syz-executor: attempt to access beyond end of device [ 118.705900][ T4683] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 118.736968][ T6396] F2FS-fs (loop5): Start checkpoint disabled! [ 118.757246][ T6396] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 118.921183][ T6437] loop2: detected capacity change from 0 to 512 [ 118.933308][ T6437] EXT4-fs (loop2): Test dummy encryption mode enabled [ 118.940745][ T6437] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 118.958912][ T6437] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00cc018, mo2=0002] [ 118.964565][ T6066] kworker/u4:43: attempt to access beyond end of device [ 118.964565][ T6066] loop5: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 118.973227][ T6437] System zones: 1-12 [ 118.998815][ T6437] EXT4-fs (loop2): 1 truncate cleaned up [ 119.058523][ T24] usb 10-1: new full-speed USB device number 14 using dummy_hcd [ 119.163161][ T6443] loop4: detected capacity change from 0 to 40427 [ 119.171878][ T6443] F2FS-fs (loop4): invalid crc value [ 119.178511][ T6443] F2FS-fs (loop4): Found nat_bits in checkpoint [ 119.213543][ T6443] F2FS-fs (loop4): Start checkpoint disabled! [ 119.220231][ T6443] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 119.259682][ T24] usb 10-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 119.270641][ T24] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 119.281685][ T24] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 119.291514][ T24] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 119.309647][ T24] usb 10-1: New USB device found, idVendor=17ef, idProduct=6085, bcdDevice= 0.00 [ 119.318723][ T24] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.338758][ T24] usb 10-1: config 0 descriptor?? [ 119.439699][ T5339] kworker/u4:29: attempt to access beyond end of device [ 119.439699][ T5339] loop4: rw=1, sector=77824, nr_sectors = 2152 limit=40427 [ 119.458655][ T5339] kworker/u4:29: attempt to access beyond end of device [ 119.458655][ T5339] loop4: rw=1, sector=79976, nr_sectors = 1944 limit=40427 [ 119.479978][ T5339] kworker/u4:29: attempt to access beyond end of device [ 119.479978][ T5339] loop4: rw=1, sector=49152, nr_sectors = 2992 limit=40427 [ 119.497551][ T5339] kworker/u4:29: attempt to access beyond end of device [ 119.497551][ T5339] loop4: rw=1, sector=52144, nr_sectors = 1104 limit=40427 [ 119.530064][ T5339] kworker/u4:29: attempt to access beyond end of device [ 119.530064][ T5339] loop4: rw=1, sector=57344, nr_sectors = 7480 limit=40427 [ 119.547002][ T5339] kworker/u4:29: attempt to access beyond end of device [ 119.547002][ T5339] loop4: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 119.748562][ T24] hid-rmi 0003:17EF:6085.0021: hidraw0: USB HID v0.00 Device [HID 17ef:6085] on usb-dummy_hcd.9-1/input0 [ 119.950954][ T24] usb 10-1: USB disconnect, device number 14 [ 120.027359][ T6466] loop4: detected capacity change from 0 to 512 [ 120.034151][ T6466] EXT4-fs (loop4): Test dummy encryption mode enabled [ 120.041192][ T6466] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 120.060342][ T6470] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2487'. [ 120.069049][ T6466] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00cc018, mo2=0002] [ 120.077386][ T6466] System zones: 1-12 [ 120.082253][ T6466] EXT4-fs (loop4): 1 truncate cleaned up [ 120.133362][ T6477] loop4: detected capacity change from 0 to 512 [ 120.139929][ T6477] EXT4-fs: Ignoring removed i_version option [ 120.146144][ T6477] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 120.158123][ T6477] EXT4-fs (loop4): 1 truncate cleaned up [ 120.227948][ T6485] hub 6-0:1.0: USB hub found [ 120.233397][ T6485] hub 6-0:1.0: 1 port detected [ 120.266168][ T6490] loop5: detected capacity change from 0 to 1024 [ 120.278833][ T6490] EXT4-fs: Ignoring removed i_version option [ 120.285271][ T6490] EXT4-fs: Ignoring removed mblk_io_submit option [ 120.293173][ T6492] loop4: detected capacity change from 0 to 128 [ 120.299902][ T6490] EXT4-fs (loop5): Test dummy encryption mode enabled [ 120.308449][ T6492] ext4 filesystem being mounted at /161/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 120.342078][ T6497] loop2: detected capacity change from 0 to 256 [ 120.352992][ T6497] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 120.391330][ T6500] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2500'. [ 120.397754][ T6504] loop5: detected capacity change from 0 to 256 [ 120.400657][ T6500] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2500'. [ 120.408124][ T6504] exfat: Deprecated parameter 'namecase' [ 120.426466][ T6504] exFAT-fs (loop5): Invalid boot checksum (boot checksum : 0x110001d0, checksum : 0x1119abd0) [ 120.436920][ T6504] exFAT-fs (loop5): invalid boot region [ 120.444086][ T6504] exFAT-fs (loop5): failed to recognize exfat type [ 120.450012][ T6508] loop2: detected capacity change from 0 to 1024 [ 120.485255][ T6513] loop4: detected capacity change from 0 to 128 [ 120.498774][ T6513] EXT4-fs: Ignoring removed nobh option [ 120.519595][ T6513] ext4 filesystem being mounted at /164/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 120.576767][ T6518] loop9: detected capacity change from 0 to 2048 [ 120.589244][ T6522] hub 6-0:1.0: USB hub found [ 120.603884][ T6522] hub 6-0:1.0: 1 port detected [ 120.631072][ T6518] Alternate GPT is invalid, using primary GPT. [ 120.652082][ T6518] loop9: p2 p3 p7 [ 120.695308][ T6515] loop2: detected capacity change from 0 to 40427 [ 120.711825][ T6515] F2FS-fs (loop2): fault_type options not supported [ 120.729106][ T6515] F2FS-fs (loop2): invalid crc value [ 120.747230][ T6515] F2FS-fs (loop2): Found nat_bits in checkpoint [ 120.825039][ T6515] F2FS-fs (loop2): Start checkpoint disabled! [ 120.838649][ T6515] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 120.859917][ T6515] syz.2.2506: attempt to access beyond end of device [ 120.859917][ T6515] loop2: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 120.914920][ T5339] kworker/u4:29: attempt to access beyond end of device [ 120.914920][ T5339] loop2: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 120.997722][ T6540] loop5: detected capacity change from 0 to 1024 [ 121.016113][ T6540] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 121.024434][ T6540] EXT4-fs (loop5): orphan cleanup on readonly fs [ 121.031392][ T6540] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5887: Corrupt filesystem [ 121.041245][ T6540] EXT4-fs (loop5): Remounting filesystem read-only [ 121.047583][ T6540] EXT4-fs error (device loop5): ext4_dirty_inode:6091: inode #3: comm syz.5.2514: mark_inode_dirty error [ 121.058912][ T6540] EXT4-fs (loop5): Remounting filesystem read-only [ 121.065268][ T6540] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:477: comm syz.5.2514: Invalid block bitmap block 3 in block_group 0 [ 121.078729][ T6540] EXT4-fs (loop5): Remounting filesystem read-only [ 121.085127][ T6540] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5887: Corrupt filesystem [ 121.094535][ T6540] EXT4-fs (loop5): Remounting filesystem read-only [ 121.100924][ T6540] EXT4-fs error (device loop5): ext4_dirty_inode:6091: inode #3: comm syz.5.2514: mark_inode_dirty error [ 121.113834][ T6540] EXT4-fs (loop5): Remounting filesystem read-only [ 121.120277][ T6540] EXT4-fs error (device loop5): ext4_map_blocks:634: inode #3: block 1: comm syz.5.2514: lblock 6 mapped to illegal pblock 1 (length 1) [ 121.134319][ T6540] EXT4-fs (loop5): Remounting filesystem read-only [ 121.140748][ T6540] EXT4-fs error (device loop5): ext4_map_blocks:634: inode #3: block 48: comm syz.5.2514: lblock 0 mapped to illegal pblock 48 (length 1) [ 121.154939][ T6540] EXT4-fs (loop5): Remounting filesystem read-only [ 121.161345][ T6540] EXT4-fs error (device loop5): ext4_acquire_dquot:6788: comm syz.5.2514: Failed to acquire dquot type 0 [ 121.172597][ T6540] EXT4-fs (loop5): Remounting filesystem read-only [ 121.179008][ T6540] EXT4-fs error (device loop5): ext4_map_blocks:634: inode #3: block 49: comm syz.5.2514: lblock 1 mapped to illegal pblock 49 (length 1) [ 121.193228][ T6540] EXT4-fs (loop5): Remounting filesystem read-only [ 121.199661][ T6540] EXT4-fs error (device loop5): ext4_acquire_dquot:6788: comm syz.5.2514: Failed to acquire dquot type 0 [ 121.210988][ T6540] EXT4-fs (loop5): Remounting filesystem read-only [ 121.217333][ T6540] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5887: Corrupt filesystem [ 121.227155][ T6540] EXT4-fs (loop5): Remounting filesystem read-only [ 121.233753][ T6540] EXT4-fs error (device loop5): ext4_evict_inode:279: inode #15: comm syz.5.2514: mark_inode_dirty error [ 121.245225][ T6540] EXT4-fs (loop5): Remounting filesystem read-only [ 121.251625][ T6540] EXT4-fs warning (device loop5): ext4_evict_inode:282: couldn't mark inode dirty (err -117) [ 121.261902][ T6540] EXT4-fs (loop5): 1 orphan inode deleted [ 121.365228][ T6555] loop2: detected capacity change from 0 to 128 [ 121.386506][ T6555] EXT4-fs: Ignoring removed nobh option [ 121.416250][ T6555] ext4 filesystem being mounted at /110/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 121.447334][ T6559] loop4: detected capacity change from 0 to 256 [ 121.477064][ T6561] loop2: detected capacity change from 0 to 256 [ 121.496296][ T6561] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xb107716d, utbl_chksum : 0xe619d30d) [ 121.598423][ T6563] loop2: detected capacity change from 0 to 128 [ 121.605377][ T6563] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 121.626429][ T6567] loop4: detected capacity change from 0 to 256 [ 121.648202][ T6563] FAT-fs (loop2): FAT read failed (blocknr 128) [ 121.686062][ T5339] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 121.877473][ T6598] overlayfs: failed to resolve './file0': -2 [ 121.944952][ T6613] loop5: detected capacity change from 0 to 128 [ 121.988599][ T296] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 122.074963][ T28] kauditd_printk_skb: 111 callbacks suppressed [ 122.074981][ T28] audit: type=1400 audit(2000000022.246:1508): avc: denied { read write } for pid=5354 comm="syz-executor" name="loop2" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 122.126477][ T28] audit: type=1400 audit(2000000022.276:1509): avc: denied { open } for pid=5354 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 122.162305][ T28] audit: type=1400 audit(2000000022.276:1510): avc: denied { ioctl } for pid=5354 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=116 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 122.190705][ T6634] usb usb1: usbfs: process 6634 (syz.9.2555) did not claim interface 0 before use [ 122.210316][ T28] audit: type=1400 audit(2000000022.286:1511): avc: denied { bpf } for pid=6628 comm="syz.2.2554" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 122.231535][ T296] usb 5-1: Using ep0 maxpacket: 32 [ 122.237264][ T28] audit: type=1400 audit(2000000022.296:1512): avc: denied { map_create } for pid=6628 comm="syz.2.2554" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 122.266946][ T296] usb 5-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 122.280740][ T296] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.289890][ T296] usb 5-1: Product: syz [ 122.293928][ T28] audit: type=1400 audit(2000000022.296:1513): avc: denied { map_read map_write } for pid=6628 comm="syz.2.2554" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 122.313871][ T296] usb 5-1: Manufacturer: syz [ 122.318326][ T296] usb 5-1: SerialNumber: syz [ 122.324096][ T296] usb 5-1: config 0 descriptor?? [ 122.329060][ T28] audit: type=1400 audit(2000000022.296:1514): avc: denied { prog_load } for pid=6628 comm="syz.2.2554" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 122.342591][ T6644] loop2: detected capacity change from 0 to 2048 [ 122.363488][ T6644] EXT4-fs: Ignoring removed mblk_io_submit option [ 122.368391][ T28] audit: type=1400 audit(2000000022.296:1515): avc: denied { perfmon } for pid=6628 comm="syz.2.2554" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 122.391973][ T6646] loop9: detected capacity change from 0 to 4096 [ 122.398767][ T28] audit: type=1400 audit(2000000022.296:1516): avc: denied { prog_run } for pid=6628 comm="syz.2.2554" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 122.418173][ T28] audit: type=1400 audit(2000000022.336:1517): avc: denied { create } for pid=6631 comm="syz.5.2556" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 122.432608][ T6644] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.2561: bg 0: block 234: padding at end of block bitmap is not set [ 122.452301][ T6644] EXT4-fs (loop2): Remounting filesystem read-only [ 122.460012][ T6646] EXT4-fs (loop9): shut down requested (0) [ 122.525879][ T6662] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 122.568072][ T6666] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 122.577323][ T6666] FAT-fs (loop5): unable to read boot sector [ 122.708679][ T6677] loop9: detected capacity change from 0 to 1024 [ 122.830790][ T6691] device vlan2 entered promiscuous mode [ 122.851841][ T6693] loop9: detected capacity change from 0 to 512 [ 122.978017][ T296] rtl8150 5-1:0.0: couldn't reset the device [ 122.984016][ T296] rtl8150: probe of 5-1:0.0 failed with error -5 [ 123.001489][ T296] usb 5-1: USB disconnect, device number 12 [ 123.011162][ T6710] loop7: detected capacity change from 0 to 1024 [ 123.091207][ T6720] incfs: Error accessing: ./file0/file0. [ 123.094990][ T6726] loop7: detected capacity change from 0 to 128 [ 123.096759][ T6720] incfs: mount failed -2 [ 123.104227][ T6726] EXT4-fs: Ignoring removed nobh option [ 123.114160][ T6726] ext4 filesystem being mounted at /306/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 123.187521][ T6737] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 123.215017][ T6739] loop7: detected capacity change from 0 to 2048 [ 123.221652][ T6739] EXT4-fs: Ignoring removed mblk_io_submit option [ 123.242437][ T6739] EXT4-fs error (device loop7): ext4_validate_block_bitmap:438: comm syz.7.2599: bg 0: block 234: padding at end of block bitmap is not set [ 123.257021][ T6739] EXT4-fs (loop7): Remounting filesystem read-only [ 123.358584][ T5229] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 123.481916][ T6751] loop4: detected capacity change from 0 to 1024 [ 123.548560][ T5229] usb 6-1: Using ep0 maxpacket: 32 [ 123.554946][ T5229] usb 6-1: config 0 interface 0 altsetting 30 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 123.565726][ T5229] usb 6-1: config 0 interface 0 altsetting 30 endpoint 0x81 has invalid wMaxPacketSize 0 [ 123.575372][ T5229] usb 6-1: config 0 interface 0 has no altsetting 0 [ 123.581770][ T5229] usb 6-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 123.590616][ T5229] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.598975][ T5229] usb 6-1: config 0 descriptor?? [ 124.007164][ T5229] hkems 0003:2006:0118.0022: item fetching failed at offset 1/5 [ 124.014793][ T5229] hkems 0003:2006:0118.0022: parse failed [ 124.020355][ T5229] hkems: probe of 0003:2006:0118.0022 failed with error -22 [ 124.207675][ T24] usb 6-1: USB disconnect, device number 11 [ 124.731277][ T6767] loop5: detected capacity change from 0 to 128 [ 124.738200][ T6767] EXT4-fs: Ignoring removed nobh option [ 124.749148][ T6767] ext4 filesystem being mounted at /308/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 124.776467][ T6775] loop4: detected capacity change from 0 to 512 [ 124.836358][ T6787] syz.4.2618[6787] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 124.836436][ T6787] syz.4.2618[6787] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 125.733112][ T6884] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2661'. [ 125.878345][ T6891] loop4: detected capacity change from 0 to 4096 [ 125.899115][ T6891] EXT4-fs (loop4): unsupported descriptor size 1344 [ 126.021754][ T6876] loop7: detected capacity change from 0 to 256 [ 126.076571][ T6917] overlayfs: invalid origin (0000) [ 126.093358][ T6895] loop2: detected capacity change from 0 to 40427 [ 126.110225][ T6895] F2FS-fs (loop2): fault_injection options not supported [ 126.126459][ T6895] F2FS-fs (loop2): invalid crc value [ 126.143737][ T6895] F2FS-fs (loop2): Found nat_bits in checkpoint [ 126.159704][ T6932] Invalid ELF header magic: != ELF [ 126.200218][ T6895] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 126.259338][ T6940] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2684'. [ 126.261916][ T6944] input: syz0 as /devices/virtual/input/input29 [ 126.277727][ T5354] syz-executor: attempt to access beyond end of device [ 126.277727][ T5354] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 126.287327][ T6940] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2684'. [ 126.440924][ T6961] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.703089][ T6243] Bluetooth: hci0: Frame reassembly failed (-84) [ 126.788565][ T39] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 126.891133][ T7019] input: syz0 as /devices/virtual/input/input30 [ 126.912236][ T7021] syz.2.2720[7021] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 126.912302][ T7021] syz.2.2720[7021] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 126.988578][ T39] usb 6-1: Using ep0 maxpacket: 16 [ 127.007357][ T39] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=d3.06 [ 127.016414][ T39] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=67 [ 127.031999][ T39] usb 6-1: Product: syz [ 127.036046][ T39] usb 6-1: Manufacturer: syz [ 127.040532][ T39] usb 6-1: SerialNumber: syz [ 127.046812][ T39] r8152-cfgselector 6-1: config 0 descriptor?? [ 127.080908][ T7041] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7041 comm=syz.4.2729 [ 127.107881][ T7046] input: syz0 as /devices/virtual/input/input31 [ 127.132198][ T28] kauditd_printk_skb: 120 callbacks suppressed [ 127.132217][ T28] audit: type=1400 audit(2000000027.306:1638): avc: denied { map } for pid=7047 comm="syz.4.2732" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=47912 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 127.162325][ T28] audit: type=1400 audit(2000000027.306:1639): avc: denied { read write } for pid=7047 comm="syz.4.2732" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=47912 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 127.455147][ T39] r8152-cfgselector 6-1: Unknown version 0x0000 [ 127.461410][ T39] r8152-cfgselector 6-1: bad CDC descriptors [ 127.467647][ T39] r8152-cfgselector 6-1: Unknown version 0x0000 [ 127.474279][ T39] r8152-cfgselector 6-1: USB disconnect, device number 12 [ 127.956172][ T7055] loop2: detected capacity change from 0 to 2048 [ 127.973531][ T28] audit: type=1400 audit(2000000028.146:1640): avc: denied { name_bind } for pid=7057 comm="syz.5.2735" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 128.001824][ T7055] Alternate GPT is invalid, using primary GPT. [ 128.008024][ T7055] loop2: p2 p3 p7 [ 128.126999][ T7074] loop5: detected capacity change from 0 to 128 [ 128.134448][ T28] audit: type=1400 audit(2000000028.306:1641): avc: denied { mount } for pid=7073 comm="syz.5.2741" name="/" dev="loop5" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 128.189347][ T28] audit: type=1400 audit(2000000028.366:1642): avc: denied { unmount } for pid=2969 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 128.244103][ T28] audit: type=1400 audit(2000000028.416:1643): avc: denied { nlmsg_read } for pid=7079 comm="syz.5.2745" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 128.288242][ T28] audit: type=1400 audit(2000000028.456:1644): avc: denied { write } for pid=7087 comm="syz.4.2748" name="/" dev="configfs" ino=13178 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 128.388659][ T7076] loop2: detected capacity change from 0 to 40427 [ 128.392720][ T28] audit: type=1400 audit(2000000028.566:1645): avc: denied { create } for pid=7099 comm="syz.4.2754" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 128.395734][ T7076] F2FS-fs (loop2): Image doesn't support compression [ 128.421739][ T7076] F2FS-fs (loop2): Image doesn't support compression [ 128.428412][ T7076] F2FS-fs (loop2): fault_type options not supported [ 128.436467][ T7076] F2FS-fs (loop2): invalid crc value [ 128.436879][ T28] audit: type=1400 audit(2000000028.596:1646): avc: denied { read write } for pid=7097 comm="syz.5.2753" name="uhid" dev="devtmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 128.471212][ T28] audit: type=1400 audit(2000000028.596:1647): avc: denied { open } for pid=7097 comm="syz.5.2753" path="/dev/uhid" dev="devtmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 128.495955][ T7102] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2755'. [ 128.498438][ T7076] F2FS-fs (loop2): Found nat_bits in checkpoint [ 128.551904][ T7076] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 128.563880][ T7111] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2758'. [ 128.590234][ T7112] f2fs_ckpt-7:2: attempt to access beyond end of device [ 128.590234][ T7112] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 128.656139][ T7121] netlink: 'syz.4.2762': attribute type 4 has an invalid length. [ 128.693632][ T7126] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 128.701105][ T7126] SELinux: failed to load policy [ 128.718590][ T1624] Bluetooth: hci0: command 0x1003 tx timeout [ 128.724475][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 128.731288][ T6996] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 128.903985][ T7132] loop2: detected capacity change from 0 to 40427 [ 128.931442][ T7132] F2FS-fs (loop2): Found nat_bits in checkpoint [ 129.026571][ T7159] loop5: detected capacity change from 0 to 512 [ 129.037654][ T7132] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 129.065037][ T7159] EXT4-fs mount: 61 callbacks suppressed [ 129.065060][ T7159] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 129.077979][ T7132] syz.2.2767: attempt to access beyond end of device [ 129.077979][ T7132] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 129.098597][ T7159] ext4 filesystem being mounted at /356/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 129.118937][ T5354] syz-executor: attempt to access beyond end of device [ 129.118937][ T5354] loop2: rw=2049, sector=45104, nr_sectors = 16 limit=40427 [ 129.133752][ T2969] EXT4-fs (loop5): unmounting filesystem. [ 129.175582][ T7168] netlink: 87 bytes leftover after parsing attributes in process `syz.5.2780'. [ 129.363296][ T7188] xt_TCPMSS: Only works on TCP SYN packets [ 129.371586][ T7190] loop2: detected capacity change from 0 to 16 [ 129.378064][ T7190] erofs: (device loop2): mounted with root inode @ nid 36. [ 129.397316][ T7194] Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 129.442877][ T7200] loop2: detected capacity change from 0 to 256 [ 129.449258][ T7200] exfat: Deprecated parameter 'namecase' [ 129.454791][ T7200] exfat: Deprecated parameter 'namecase' [ 129.462712][ T7200] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x1fdf94bc, utbl_chksum : 0xe619d30d) [ 129.588554][ T39] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 129.769869][ T6243] Bluetooth: hci0: Frame reassembly failed (-84) [ 129.779916][ T39] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 129.790135][ T39] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 129.799919][ T39] usb 10-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 129.809383][ T39] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 129.817457][ T39] usb 10-1: SerialNumber: syz [ 129.845943][ T7221] tipc: Started in network mode [ 129.850813][ T7221] tipc: Node identity ac14142f, cluster identity 4711 [ 129.857564][ T7221] tipc: New replicast peer: 0.0.0.0 [ 129.862874][ T7221] tipc: Enabled bearer , priority 10 [ 129.869212][ T7221] tipc: New replicast peer: 100.1.1.1 [ 130.031543][ T39] usb 10-1: 0:2 : does not exist [ 130.036392][ T39] usb 10-1: unit 255 not found! [ 130.043043][ T39] usb 10-1: USB disconnect, device number 15 [ 130.103323][ T7240] loop5: detected capacity change from 0 to 4096 [ 130.109807][ T7240] EXT4-fs: Ignoring removed nomblk_io_submit option [ 130.118301][ T7240] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 130.131272][ T7240] EXT4-fs error (device loop5): ext4_do_update_inode:5226: inode #15: comm syz.5.2813: corrupted inode contents [ 130.143335][ T7240] EXT4-fs error (device loop5): ext4_dirty_inode:6091: inode #15: comm syz.5.2813: mark_inode_dirty error [ 130.156121][ T7240] EXT4-fs error (device loop5): ext4_do_update_inode:5226: inode #15: comm syz.5.2813: corrupted inode contents [ 130.168290][ T7240] EXT4-fs error (device loop5): __ext4_ext_dirty:202: inode #15: comm syz.5.2813: mark_inode_dirty error [ 130.179828][ T7240] EXT4-fs error (device loop5): ext4_do_update_inode:5226: inode #15: comm syz.5.2813: corrupted inode contents [ 130.191833][ T7240] EXT4-fs error (device loop5): __ext4_ext_dirty:202: inode #15: comm syz.5.2813: mark_inode_dirty error [ 130.204742][ T7240] EXT4-fs error (device loop5): ext4_do_update_inode:5226: inode #15: comm syz.5.2813: corrupted inode contents [ 130.216628][ T7240] EXT4-fs error (device loop5): ext4_truncate:4313: inode #15: comm syz.5.2813: mark_inode_dirty error [ 130.227759][ T7240] EXT4-fs error (device loop5) in ext4_setattr:5630: Corrupt filesystem [ 130.236170][ T7249] EXT4-fs error (device loop5): ext4_do_update_inode:5226: inode #15: comm syz.5.2813: corrupted inode contents [ 130.259496][ T7257] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2819'. [ 130.263829][ T7256] loop7: detected capacity change from 0 to 16 [ 130.275262][ T2969] EXT4-fs (loop5): unmounting filesystem. [ 130.281409][ T7256] erofs: (device loop7): mounted with root inode @ nid 36. [ 130.524117][ T7278] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.531167][ T7278] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.538620][ T7278] device bridge_slave_0 entered promiscuous mode [ 130.545587][ T7278] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.552574][ T7278] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.560167][ T7278] device bridge_slave_1 entered promiscuous mode [ 130.617248][ T7278] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.624125][ T7278] bridge0: port 2(bridge_slave_1) entered forwarding state [ 130.631197][ T7278] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.637984][ T7278] bridge0: port 1(bridge_slave_0) entered forwarding state [ 130.667367][ T5339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 130.675750][ T5339] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.683285][ T5339] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.693854][ T5339] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 130.701962][ T5339] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.708826][ T5339] bridge0: port 1(bridge_slave_0) entered forwarding state [ 130.724348][ T5339] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 130.732896][ T5339] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.739773][ T5339] bridge0: port 2(bridge_slave_1) entered forwarding state [ 130.764435][ T7278] device veth0_vlan entered promiscuous mode [ 130.771071][ T5339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 130.779421][ T5339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 130.787322][ T5339] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 130.794760][ T5339] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 130.802093][ T5339] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 130.808493][ C1] ================================================================== [ 130.810952][ T5339] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 130.817512][ C1] BUG: KASAN: use-after-free in __run_timers+0x34a/0xa10 [ 130.831924][ C1] Write of size 8 at addr ffff888115f60a00 by task swapper/1/0 [ 130.839293][ C1] [ 130.841465][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted 6.1.118-syzkaller-00015-g770852bf7d99 #0 [ 130.850751][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 130.860649][ C1] Call Trace: [ 130.863779][ C1] [ 130.866483][ C1] dump_stack_lvl+0x151/0x1b7 [ 130.870977][ C1] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 130.876276][ C1] ? _printk+0xd1/0x111 [ 130.880264][ C1] ? __virt_addr_valid+0x242/0x2f0 [ 130.885211][ C1] print_report+0x158/0x4e0 [ 130.889555][ C1] ? __virt_addr_valid+0x242/0x2f0 [ 130.894497][ C1] ? kasan_complete_mode_report_info+0x90/0x1b0 [ 130.900573][ C1] ? __run_timers+0x34a/0xa10 [ 130.905086][ C1] kasan_report+0x13c/0x170 [ 130.909427][ C1] ? __run_timers+0x34a/0xa10 [ 130.913939][ C1] __asan_report_store8_noabort+0x17/0x20 [ 130.919494][ C1] __run_timers+0x34a/0xa10 [ 130.923832][ C1] ? kvm_sched_clock_read+0x18/0x40 [ 130.928870][ C1] ? calc_index+0x270/0x270 [ 130.933205][ C1] ? sched_clock+0x9/0x10 [ 130.937371][ C1] ? sched_clock_cpu+0x71/0x2b0 [ 130.942062][ C1] run_timer_softirq+0x69/0xf0 [ 130.946688][ C1] handle_softirqs+0x1db/0x650 [ 130.951258][ C1] ? irqtime_account_irq+0xdc/0x260 [ 130.956293][ C1] __irq_exit_rcu+0x52/0xf0 [ 130.960636][ C1] irq_exit_rcu+0x9/0x10 [ 130.964712][ C1] sysvec_apic_timer_interrupt+0xa9/0xc0 [ 130.970179][ C1] [ 130.972955][ C1] [ 130.975734][ C1] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 130.981560][ C1] RIP: 0010:acpi_idle_enter+0x416/0x760 [ 130.986938][ C1] Code: 89 de 48 83 e6 08 31 ff e8 97 bb 53 fc 48 83 e3 08 0f 85 b1 00 00 00 0f 1f 44 00 00 e8 43 b7 53 fc 0f 00 2d 5c 8e ce 00 fb f4 e9 e3 00 00 00 49 83 c7 04 4c 89 f8 48 c1 e8 03 42 0f b6 04 30 [ 131.006467][ C1] RSP: 0018:ffffc90000147c50 EFLAGS: 000002d3 [ 131.012368][ C1] RAX: ffffffff8521cefd RBX: 0000000000000000 RCX: ffff8881003ae540 [ 131.020299][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 131.028101][ C1] RBP: ffffc90000147c90 R08: ffffffff8521cee9 R09: ffffed1020075ca9 [ 131.035904][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000001 [ 131.043722][ C1] R13: ffff888109c7a804 R14: dffffc0000000000 R15: ffff888109871864 [ 131.051537][ C1] ? acpi_idle_enter+0x3f9/0x760 [ 131.056312][ C1] ? acpi_idle_enter+0x40d/0x760 [ 131.061080][ C1] ? intel_idle_xstate+0xa0/0xa0 [ 131.065852][ C1] cpuidle_enter_state+0x5eb/0x17f0 [ 131.070886][ C1] ? cpuidle_enter_s2idle+0x600/0x600 [ 131.076096][ C1] ? menu_enable_device+0x380/0x380 [ 131.081139][ C1] ? __sched_text_start+0x8/0x8 [ 131.085813][ C1] cpuidle_enter+0x5f/0xa0 [ 131.090070][ C1] do_idle+0x3d1/0x580 [ 131.094086][ C1] ? idle_inject_timer_fn+0x60/0x60 [ 131.099112][ C1] ? schedule_idle+0x5b/0x90 [ 131.103540][ C1] cpu_startup_entry+0x44/0x60 [ 131.108287][ C1] start_secondary+0xe3/0xf0 [ 131.112859][ C1] secondary_startup_64_no_verify+0xce/0xdb [ 131.118548][ C1] [ 131.121415][ C1] [ 131.123588][ C1] Allocated by task 6996: [ 131.127759][ C1] kasan_set_track+0x4b/0x70 [ 131.132174][ C1] kasan_save_alloc_info+0x1f/0x30 [ 131.137291][ C1] __kasan_kmalloc+0x9c/0xb0 [ 131.141689][ C1] __kmalloc+0xb4/0x1e0 [ 131.145682][ C1] hci_alloc_dev_priv+0x27/0x1c00 [ 131.150548][ C1] hci_uart_tty_ioctl+0x401/0xa70 [ 131.155409][ C1] tty_ioctl+0x903/0xc50 [ 131.159483][ C1] __se_sys_ioctl+0x114/0x190 [ 131.163997][ C1] __x64_sys_ioctl+0x7b/0x90 [ 131.168427][ C1] x64_sys_call+0x98/0x9a0 [ 131.172675][ C1] do_syscall_64+0x3b/0xb0 [ 131.176924][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 131.182656][ C1] [ 131.184824][ C1] Freed by task 6996: [ 131.188646][ C1] kasan_set_track+0x4b/0x70 [ 131.193070][ C1] kasan_save_free_info+0x2b/0x40 [ 131.197929][ C1] ____kasan_slab_free+0x131/0x180 [ 131.202883][ C1] __kasan_slab_free+0x11/0x20 [ 131.207495][ C1] __kmem_cache_free+0x21d/0x410 [ 131.212255][ C1] kfree+0x7a/0xf0 [ 131.215811][ C1] hci_release_dev+0x14d3/0x1640 [ 131.220584][ C1] bt_host_release+0x83/0xa0 [ 131.225008][ C1] device_release+0x95/0x1c0 [ 131.229441][ C1] kobject_put+0x178/0x260 [ 131.233688][ C1] put_device+0x1f/0x30 [ 131.237679][ C1] hci_dev_cmd+0x2be/0x9b0 [ 131.241931][ C1] hci_sock_ioctl+0x415/0x7f0 [ 131.246445][ C1] sock_do_ioctl+0x152/0x450 [ 131.250875][ C1] sock_ioctl+0x455/0x740 [ 131.255046][ C1] __se_sys_ioctl+0x114/0x190 [ 131.259553][ C1] __x64_sys_ioctl+0x7b/0x90 [ 131.263977][ C1] x64_sys_call+0x98/0x9a0 [ 131.268231][ C1] do_syscall_64+0x3b/0xb0 [ 131.272483][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 131.278220][ C1] [ 131.280382][ C1] Last potentially related work creation: [ 131.285939][ C1] kasan_save_stack+0x3b/0x60 [ 131.290453][ C1] __kasan_record_aux_stack+0xb4/0xc0 [ 131.295659][ C1] kasan_record_aux_stack_noalloc+0xb/0x10 [ 131.301298][ C1] insert_work+0x56/0x310 [ 131.305465][ C1] __queue_work+0x9b6/0xd70 [ 131.309809][ C1] queue_work_on+0x105/0x170 [ 131.314237][ C1] __hci_cmd_sync_sk+0xc2a/0xf70 [ 131.319007][ C1] hci_cmd_sync_status+0x52/0x130 [ 131.323867][ C1] hci_dev_cmd+0x771/0x9b0 [ 131.328119][ C1] hci_sock_ioctl+0x415/0x7f0 [ 131.332632][ C1] sock_do_ioctl+0x152/0x450 [ 131.337063][ C1] sock_ioctl+0x455/0x740 [ 131.341222][ C1] __se_sys_ioctl+0x114/0x190 [ 131.345736][ C1] __x64_sys_ioctl+0x7b/0x90 [ 131.350175][ C1] x64_sys_call+0x98/0x9a0 [ 131.354419][ C1] do_syscall_64+0x3b/0xb0 [ 131.358672][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 131.364409][ C1] [ 131.366569][ C1] Second to last potentially related work creation: [ 131.372992][ C1] kasan_save_stack+0x3b/0x60 [ 131.377511][ C1] __kasan_record_aux_stack+0xb4/0xc0 [ 131.382712][ C1] kasan_record_aux_stack_noalloc+0xb/0x10 [ 131.388352][ C1] insert_work+0x56/0x310 [ 131.392846][ C1] __queue_work+0x9b6/0xd70 [ 131.397176][ C1] queue_work_on+0x105/0x170 [ 131.401600][ C1] hci_cmd_timeout+0x199/0x200 [ 131.406213][ C1] process_one_work+0x73d/0xcb0 [ 131.410887][ C1] worker_thread+0xa60/0x1260 [ 131.415401][ C1] kthread+0x26d/0x300 [ 131.419302][ C1] ret_from_fork+0x1f/0x30 [ 131.423555][ C1] [ 131.425723][ C1] The buggy address belongs to the object at ffff888115f60000 [ 131.425723][ C1] which belongs to the cache kmalloc-8k of size 8192 [ 131.439724][ C1] The buggy address is located 2560 bytes inside of [ 131.439724][ C1] 8192-byte region [ffff888115f60000, ffff888115f62000) [ 131.453009][ C1] [ 131.455172][ C1] The buggy address belongs to the physical page: [ 131.461425][ C1] page:ffffea000457d800 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x115f60 [ 131.471502][ C1] head:ffffea000457d800 order:3 compound_mapcount:0 compound_pincount:0 [ 131.479647][ C1] flags: 0x4000000000010200(slab|head|zone=1) [ 131.485556][ C1] raw: 4000000000010200 dead000000000100 dead000000000122 ffff888100043500 [ 131.493975][ C1] raw: 0000000000000000 0000000000020002 00000001ffffffff 0000000000000000 [ 131.502409][ C1] page dumped because: kasan: bad access detected [ 131.508648][ C1] page_owner tracks the page as allocated [ 131.514207][ C1] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 5420, tgid 5419 (syz.4.2074), ts 102954787261, free_ts 102954565328 [ 131.536756][ C1] post_alloc_hook+0x213/0x220 [ 131.541356][ C1] prep_new_page+0x1b/0x110 [ 131.545782][ C1] get_page_from_freelist+0x2f41/0x2fc0 [ 131.551162][ C1] __alloc_pages+0x234/0x610 [ 131.555588][ C1] alloc_slab_page+0x6c/0xf0 [ 131.560015][ C1] new_slab+0x90/0x3e0 [ 131.563924][ C1] ___slab_alloc+0x6f9/0xb80 [ 131.568348][ C1] __slab_alloc+0x5d/0xa0 [ 131.572513][ C1] __kmem_cache_alloc_node+0x207/0x2a0 [ 131.577808][ C1] kmalloc_trace+0x2a/0xa0 [ 131.582063][ C1] audit_log_d_path+0xb9/0x170 [ 131.586661][ C1] audit_log_d_path_exe+0x42/0x70 [ 131.591521][ C1] audit_log_task+0x20d/0x2e0 [ 131.596033][ C1] audit_seccomp+0x7a/0x1e0 [ 131.600376][ C1] __seccomp_filter+0xca1/0x1f90 [ 131.605146][ C1] __secure_computing+0xf0/0x300 [ 131.609921][ C1] page last free stack trace: [ 131.614436][ C1] free_unref_page_prepare+0x83d/0x850 [ 131.619728][ C1] free_unref_page+0xb2/0x5c0 [ 131.624250][ C1] __free_pages+0x61/0xf0 [ 131.628494][ C1] __free_slab+0xce/0x1a0 [ 131.632661][ C1] __unfreeze_partials+0x165/0x1a0 [ 131.637607][ C1] put_cpu_partial+0xa9/0x100 [ 131.642120][ C1] __slab_free+0x1c8/0x280 [ 131.646375][ C1] ___cache_free+0xc6/0xd0 [ 131.650630][ C1] qlist_free_all+0xc5/0x140 [ 131.655054][ C1] kasan_quarantine_reduce+0x15a/0x180 [ 131.660350][ C1] __kasan_slab_alloc+0x24/0x80 [ 131.665036][ C1] slab_post_alloc_hook+0x53/0x2c0 [ 131.669982][ C1] kmem_cache_alloc+0x175/0x320 [ 131.674669][ C1] audit_log_start+0x42f/0xa80 [ 131.679266][ C1] audit_seccomp+0x61/0x1e0 [ 131.683607][ C1] __seccomp_filter+0xca1/0x1f90 [ 131.688508][ C1] [ 131.690668][ C1] Memory state around the buggy address: [ 131.696140][ C1] ffff888115f60900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 131.704038][ C1] ffff888115f60980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 131.711939][ C1] >ffff888115f60a00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 131.719831][ C1] ^ [ 131.723739][ C1] ffff888115f60a80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 131.731645][ C1] ffff888115f60b00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 131.739536][ C1] ================================================================== [ 131.747444][ C1] Disabling lock debugging due to kernel taint [ 131.753498][ C1] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN [ 131.754654][ T461] tipc: Node number set to 2886997039 [ 131.764965][ C1] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 131.764986][ C1] CPU: 1 PID: 0 Comm: swapper/1 Tainted: G B 6.1.118-syzkaller-00015-g770852bf7d99 #0 [ 131.765009][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 131.765022][ C1] RIP: 0010:__queue_work+0x4f1/0xd70 [ 131.804204][ C1] Code: 39 03 0f 84 40 01 00 00 e8 8c 6b 2a 00 4c 89 e7 e8 e4 d3 d6 03 49 bd 00 00 00 00 00 fc ff df 4c 8b 65 d0 4c 89 f0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 f7 e8 a0 df 71 00 49 8b 3e e8 98 cc d6 [ 131.823642][ C1] RSP: 0018:ffffc900001b0c78 EFLAGS: 00010046 [ 131.829537][ C1] RAX: 0000000000000000 RBX: 000000007fffffff RCX: ffff8881003ae540 [ 131.837481][ C1] RDX: 0000000000000100 RSI: 000000007fffffff RDI: 000000007fffffff [ 131.845289][ C1] RBP: ffffc900001b0d00 R08: ffffffff814b186b R09: 0000000000000007 [ 131.853103][ C1] R10: ffffffffffffffff R11: dffffc0000000001 R12: ffff888115f609c8 [ 131.860911][ C1] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff888115f609e0 [ 131.868726][ C1] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 131.877490][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 131.883911][ C1] CR2: 0000555558f2d4a8 CR3: 0000000137cad000 CR4: 00000000003526a0 [ 131.891727][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 131.899538][ C1] DR3: 0000000000000074 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 131.907349][ C1] Call Trace: [ 131.910474][ C1] [ 131.913163][ C1] ? __die_body+0x62/0xb0 [ 131.917334][ C1] ? die_addr+0x9f/0xd0 [ 131.921324][ C1] ? exc_general_protection+0x317/0x4c0 [ 131.926707][ C1] ? asm_exc_general_protection+0x27/0x30 [ 131.932259][ C1] ? __queue_work+0x28b/0xd70 [ 131.936771][ C1] ? __queue_work+0x4f1/0xd70 [ 131.941281][ C1] ? __queue_work+0x29c/0xd70 [ 131.945802][ C1] delayed_work_timer_fn+0x61/0x80 [ 131.950742][ C1] ? queue_work_node+0x1d0/0x1d0 [ 131.955517][ C1] call_timer_fn+0x3b/0x2d0 [ 131.959860][ C1] ? queue_work_node+0x1d0/0x1d0 [ 131.964631][ C1] __run_timers+0x756/0xa10 [ 131.968975][ C1] ? calc_index+0x270/0x270 [ 131.973313][ C1] ? sched_clock+0x9/0x10 [ 131.977476][ C1] ? sched_clock_cpu+0x71/0x2b0 [ 131.982176][ C1] run_timer_softirq+0x69/0xf0 [ 131.986762][ C1] handle_softirqs+0x1db/0x650 [ 131.991372][ C1] ? irqtime_account_irq+0xdc/0x260 [ 131.996397][ C1] __irq_exit_rcu+0x52/0xf0 [ 132.000736][ C1] irq_exit_rcu+0x9/0x10 [ 132.004814][ C1] sysvec_apic_timer_interrupt+0xa9/0xc0 [ 132.010284][ C1] [ 132.013061][ C1] [ 132.015838][ C1] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 132.021652][ C1] RIP: 0010:acpi_idle_enter+0x416/0x760 [ 132.027036][ C1] Code: 89 de 48 83 e6 08 31 ff e8 97 bb 53 fc 48 83 e3 08 0f 85 b1 00 00 00 0f 1f 44 00 00 e8 43 b7 53 fc 0f 00 2d 5c 8e ce 00 fb f4 e9 e3 00 00 00 49 83 c7 04 4c 89 f8 48 c1 e8 03 42 0f b6 04 30 [ 132.046481][ C1] RSP: 0018:ffffc90000147c50 EFLAGS: 000002d3 [ 132.052385][ C1] RAX: ffffffff8521cefd RBX: 0000000000000000 RCX: ffff8881003ae540 [ 132.060196][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 132.068000][ C1] RBP: ffffc90000147c90 R08: ffffffff8521cee9 R09: ffffed1020075ca9 [ 132.075810][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000001 [ 132.083630][ C1] R13: ffff888109c7a804 R14: dffffc0000000000 R15: ffff888109871864 [ 132.091442][ C1] ? acpi_idle_enter+0x3f9/0x760 [ 132.096208][ C1] ? acpi_idle_enter+0x40d/0x760 [ 132.100985][ C1] ? intel_idle_xstate+0xa0/0xa0 [ 132.105756][ C1] cpuidle_enter_state+0x5eb/0x17f0 [ 132.110792][ C1] ? cpuidle_enter_s2idle+0x600/0x600 [ 132.115996][ C1] ? menu_enable_device+0x380/0x380 [ 132.121030][ C1] ? __sched_text_start+0x8/0x8 [ 132.125720][ C1] cpuidle_enter+0x5f/0xa0 [ 132.129971][ C1] do_idle+0x3d1/0x580 [ 132.133875][ C1] ? idle_inject_timer_fn+0x60/0x60 [ 132.138912][ C1] ? schedule_idle+0x5b/0x90 [ 132.143347][ C1] cpu_startup_entry+0x44/0x60 [ 132.147935][ C1] start_secondary+0xe3/0xf0 [ 132.152364][ C1] secondary_startup_64_no_verify+0xce/0xdb [ 132.158096][ C1] [ 132.161074][ C1] Modules linked in: [ 132.164816][ C1] ---[ end trace 0000000000000000 ]--- [ 132.170097][ C1] RIP: 0010:__queue_work+0x4f1/0xd70 [ 132.175215][ C1] Code: 39 03 0f 84 40 01 00 00 e8 8c 6b 2a 00 4c 89 e7 e8 e4 d3 d6 03 49 bd 00 00 00 00 00 fc ff df 4c 8b 65 d0 4c 89 f0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 f7 e8 a0 df 71 00 49 8b 3e e8 98 cc d6 [ 132.194657][ C1] RSP: 0018:ffffc900001b0c78 EFLAGS: 00010046 [ 132.200555][ C1] RAX: 0000000000000000 RBX: 000000007fffffff RCX: ffff8881003ae540 [ 132.208370][ C1] RDX: 0000000000000100 RSI: 000000007fffffff RDI: 000000007fffffff [ 132.216189][ C1] RBP: ffffc900001b0d00 R08: ffffffff814b186b R09: 0000000000000007 [ 132.223990][ C1] R10: ffffffffffffffff R11: dffffc0000000001 R12: ffff888115f609c8 [ 132.231801][ C1] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff888115f609e0 [ 132.239612][ C1] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 132.248380][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 132.254803][ C1] CR2: 0000555558f2d4a8 CR3: 0000000137cad000 CR4: 00000000003526a0 [ 132.262614][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 132.270422][ C1] DR3: 0000000000000074 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 132.278240][ C1] Kernel panic - not syncing: Fatal exception in interrupt [ 132.285582][ C1] Kernel Offset: disabled [ 132.289719][ C1] Rebooting in 86400 seconds..