last executing test programs: 1m53.180799654s ago: executing program 32 (id=111): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x1b05, 0x4) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000400)=0x2, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x24000800, &(0x7f00000000c0)={0xa, 0x4e23, 0x100, @local}, 0x1c) recvmmsg(r0, &(0x7f00000066c0)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x2000, 0x0) 1m50.243498926s ago: executing program 33 (id=184): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/locks\x00', 0x0, 0x0) fcntl$lock(r0, 0x7, &(0x7f0000002380)={0x0, 0x0, 0x0, 0x4}) preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000080)=""/4094, 0xffe}], 0x1, 0x33, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r1, 0xffffffffffffffff, 0x0) 1m46.848623884s ago: executing program 6 (id=286): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)="09268a92", 0x4, 0x11, 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000080)) 1m46.831823464s ago: executing program 6 (id=287): syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @rand_addr=0x64010100}]}}}, @IFLA_MASTER={0x8, 0x3, r2}]}, 0x40}}, 0x4000000) 1m46.754109106s ago: executing program 6 (id=291): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x20081e, &(0x7f00000020c0), 0x1, 0x4fb, &(0x7f0000000500)="$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") mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) syz_open_dev$tty1(0xc, 0x4, 0x1) mkdir(&(0x7f00000001c0)='./bus/file0\x00', 0x0) 1m46.610871308s ago: executing program 6 (id=295): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f00000004c0)={[{@resuid}, {@init_itable}, {@minixdf}, {@noblock_validity}]}, 0x3, 0x451, &(0x7f0000000f80)="$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") open(&(0x7f0000000140)='./bus\x00', 0x143142, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x8000000000000002, 0x8000000000000000, 0x0, 0x0, 0x8020, 0x4, "ef359f413bb90152f7d6d1ce5d29c3ee5e5ca9000f7c41499dc2aac63a01000000000000004faa2ad9c084a003eafffeffff00", "0347c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a12ffffffffffffffe000000000e8f20000000200", "b90000cd1a0900000000000000000002000000000200", [0x1]}) 1m46.368307811s ago: executing program 6 (id=302): unshare(0x2040400) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r0, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x11, 0x10, &(0x7f0000002e00), &(0x7f0000001000), 0x8, 0xa0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r0, 0xe8, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 1m46.093141775s ago: executing program 6 (id=308): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="002208000000a20100c3"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGREPORT(r1, 0x400c4807, &(0x7f0000000000)={0x1, 0x200, 0xfffffffe}) 1m46.089060655s ago: executing program 34 (id=308): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="002208000000a20100c3"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGREPORT(r1, 0x400c4807, &(0x7f0000000000)={0x1, 0x200, 0xfffffffe}) 1m45.107310609s ago: executing program 3 (id=341): r0 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) add_key$fscrypt_v1(&(0x7f00000004c0), 0x0, &(0x7f0000000440)={0x0, "c545c5b4bce38aac0c6ae260c1a86ff79adcf93cdc85cda7b415a11355db1f82288ecb56939cea090000000e09a86040feae070000006844a3126a02e2012bee", 0x27}, 0x48, 0xfffffffffffffffc) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x13, r0, 0xffffd000) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0xed5e2) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) 1m45.02209272s ago: executing program 3 (id=342): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000440)='1', 0x1}], 0x1, 0x0, 0x0, 0x40044}}], 0x1, 0x4) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x39000, 0x0) 1m44.983077181s ago: executing program 3 (id=343): timer_create(0x3, 0x0, &(0x7f0000001400)) timer_create(0xfffffffd, 0x0, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) syz_clone3(&(0x7f0000000680)={0x40004000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) 1m44.579326706s ago: executing program 3 (id=347): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x2000048, &(0x7f0000000240)={[{@errors_remount}, {@journal_dev={'journal_dev', 0x3d, 0x1}}, {@delalloc}]}, 0x1, 0x429, &(0x7f0000000740)="$eJzs3M1rXFUbAPDn3nzxNu2bWOtXW3XaIAbUpElUCLipqCgILnTnQkKTlGLalCZiW1y0IrgqblzpypX9A9y4EMS9K8GV7qUQpLiWK3fmXjNN5qaZJOMknd8Ppj3n3hPOee6ZM3PuOTMTQM+q5f8kEYcj4reIGGlk7y1Qa/z3191PzuWPJLLs3T+Terk8XxYt/264yIynEelnSZxoUe/Ktesfzi0tLVwp8pOrFy9Prly7/sKFi3PnF84vXJqZfenM9Mzsy7Mzexbrrbsnf13++p2/vzj9+/Crtz54LW/v4eJccxx7pRa1e69lk2f2urIuO9KUTvq72BDa0hcReXcN1Mf/SPTFeueNxOufdrVxQEdlWZYNVZ++kbUyEC0PAwdNYjBDjyrf6Mt7+07cB+9na2cbN0Cb4++PtCgztOH+di/VIuLq+5//kD+iQ+sQAADNfsznP8+3mv+k8WhTuf8Xe0OjEfFQRByNiIcj4lhEPBJRL/tYRDxeVdGN2y0P1zbkN89/0js7j+7+8vnfKy3nv+XsL0b7ityRevwDyeKFpYUzxTVJYmAoz09tUccvb93+tupc8/wvf+T1l3PBoh13+jcs0M3Prc7tJuZmazcjjrec/yblTsDNJCKeiIjjO6zj+7PZV1Xn7h9/Z2XfRDzbsv/Xd+6S9f3JPLtxf3Ky/nyYLJ8Vm538+PJ8Vf1txJ/uPtrN8v4/tHX8o0nzfu1K+3V8N3pqrercTp//g8l79fRgcezq3OrqlamIweTtzcen1/+2zJfl8/jHx1qP/6OxfiVO5P0YEU9GxFMR8XTR9lMRcToixraI/42xNxd2Hn9n5fHPt9X/7Sey7Kefq+rfXv+/WE+NF0e28/q33Qbu5toBAADAQZHWPwOfpBP/ptN0YqLxGf5jcShdWl5ZfW5x+aNL843Pyo/GQFqudI00rYdOFWvDZX56Q36mWDf+su9/9fzEueWlykUx4D8xXDH+c3/0dbt1QMdVf1+rI3tOwD7i+5rQu4x/6F2N8b/Y7WYAXeD9H3rX1uO/6iesgAeB93/oXcY/9C7jH3qX8Q89aTff63+gE4Nt/IiAxIFMlD8rsl/as78SXX5hAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2CP/BAAA//9TS9nx") mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f00000005c0)=""/188, 0xbc) lseek(r0, 0xfffffffffffffff8, 0x1) 1m44.488696218s ago: executing program 3 (id=349): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) listen(r0, 0x2) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x2, @local}, 0x10) 1m44.30898089s ago: executing program 3 (id=357): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000008b00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) ioctl$AUTOFS_IOC_FAIL(r0, 0x4c80, 0xffffffffffffffb6) 1m44.298764491s ago: executing program 35 (id=357): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000008b00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) ioctl$AUTOFS_IOC_FAIL(r0, 0x4c80, 0xffffffffffffffb6) 1m33.549978014s ago: executing program 4 (id=652): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) getrandom(0x0, 0x0, 0x0) 1m33.508064995s ago: executing program 4 (id=653): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x4e24, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x7, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0xb8}}, 0x4004) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}}}, 0xb8}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000015"], 0xb8}}, 0x0) 1m33.444567035s ago: executing program 4 (id=657): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0xffffffff}, 0x1c) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0x10, 0x0, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e0", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m33.353471917s ago: executing program 4 (id=659): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000ac0), 0x1, 0x44a, &(0x7f0000000400)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000600)={0x23e3, 0x0, 0xd, 0x2}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f}) stat(&(0x7f0000000080)='./file0\x00', 0x0) 1m33.192459399s ago: executing program 4 (id=662): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000007c0)) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)={0x7c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_DST={0x18, 0xd, 0x0, 0x1, [@CTA_NAT_PROTO={0x4, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6}, @CTA_PROTONAT_PORT_MAX={0x6}]}]}]}, 0x7c}}, 0x0) 1m31.993029366s ago: executing program 4 (id=666): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0) mkdirat$cgroup(r0, &(0x7f0000003b80)='syz0\x00', 0x1ff) write$cgroup_type(r1, &(0x7f0000000280), 0x9) 1m31.925269547s ago: executing program 36 (id=666): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0) mkdirat$cgroup(r0, &(0x7f0000003b80)='syz0\x00', 0x1ff) write$cgroup_type(r1, &(0x7f0000000280), 0x9) 35.437331444s ago: executing program 9 (id=2041): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$UHID_INPUT(r0, &(0x7f0000010140)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r1, 0x11b, 0x8, 0x0, &(0x7f0000000040)) 35.372599985s ago: executing program 9 (id=2043): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000072000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000200000000000000001809"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) removexattr(0x0, 0x0) 35.300316306s ago: executing program 9 (id=2048): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) mkdir(&(0x7f0000000200)='./file0\x00', 0x60) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, 0x0, 0x15) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 34.442171838s ago: executing program 9 (id=2079): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000240)=ANY=[], 0xdd, 0x11ff, &(0x7f0000003300)="$eJzs3E+LHEUYB+A348bdbNw/aowmBy3w4qnJ7sGTIItsQHZAiVkhEYSO26vDtjPD9LAwIkZPXv0cnr0JfoO9+Bm87cVjDmJLurMmEyeRHLIDyfMcpl+q6kd1wTDQQ1Ufv/fT1wf7Vbafj6Nz5kx0hhHpTooUnTjx5k57vXFzZ6vb3b6W0tWt6xvvppRW3/rts28XI+L8p7+s/roYR+ufH/+5+cfRxaNLx39f/6pXpV6V+oNxytOtwWCc3yqLtNerDrKUPi6LvCpSr18Vo6n+/XIwHE5S3t9bWR6OiqpKeX+SDopJGg/SeDRJ+Zd5r5+yLEsry8Ejnf3/Ibs/36nrOqKuz8aLUdd1fS6W43y8FCuxGt9HxMvxSrwaF+K1uBivxxtxqRl1GrcPAAAAAAAAAAAAAAAAAAAAz4/Hnf9fi3Xn/wEAAAAAAAAAAAAAAAAAAOAUfHLj5s5Wt7t9LaWliPLHw93D3fba9m/tRy/KKOJKrMVf0Zz+b7X11Q+721dSYz1+KG/fy98+3H2hzd/9uJvfaF4ncC+/0PSd5DfafJrOL8byg/NvxlpcmD3/5sz8Urzz9gP5LNbi9y9iEGXsNXPfz3+3kdIHH3Ufyl9uxgEAAMCzIEv/mvn8nmWP6m/zT/D/wEPP1wtxeWG+ayeimnxzkHfKYtQU5Umx9J8WxWOKxemWzlOaqxNzX6niWS3OxXTLvH+ZOA33vwbzvhMAAAAAAAAAAACexFPeV7gQM3aWvT+fpQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/sAPHAgAAAADC/K3T6NgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYKgAAAD///7lyMc=") open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x201000, 0x0) r0 = open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x0) preadv2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000002200)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0xa) 34.27821713s ago: executing program 9 (id=2084): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) lgetxattr(0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x0, &(0x7f0000000b00)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@default_permissions}, {@allow_other}, {@default_permissions}, {@allow_other}, {@allow_other}, {@allow_other}, {@max_read={'max_read', 0x3d, 0x280000000}}]}}, 0x0, 0x0, 0x0) utimes(&(0x7f0000000200)='./file0\x00', 0x0) 34.120860503s ago: executing program 9 (id=2086): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000080)={[{@user_xattr}]}, 0x1, 0x55a, &(0x7f0000000b80)="$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") mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$incfs(r0, &(0x7f0000000000)='.pending_reads\x00', 0x0, 0x0) syz_fuse_handle_req(r1, &(0x7f0000002080)="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", 0x2000, &(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 34.099638403s ago: executing program 37 (id=2086): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000080)={[{@user_xattr}]}, 0x1, 0x55a, &(0x7f0000000b80)="$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") mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$incfs(r0, &(0x7f0000000000)='.pending_reads\x00', 0x0, 0x0) syz_fuse_handle_req(r1, &(0x7f0000002080)="9a85352e333228f802c60513f11e1e990166b14fb7f62b9de9a62d0583107ca83bf931bcf6148ae626ef228df938ba8f3a2a12a89805c00ca236fac534e9c709b824242a5848b496ee7f2a842ab0dfdba53bb3663f689523a3556ea8df5edd6c6b5fd1a121a449d7e40694a67c57fd84e4bc8281be1dcc7c4094d3d50d9c25382bf2f07d07f66750bd124688164ffa5fcc8674eff2e7346b4dc9c5dd68e01800ece047b5876f959c400d7989838547cde3085ddeeadd371a1e1d615db54b82559d5c96d7fdb762d34e43cb4590b78ec6246f338c7fd8aab40d53e8d1c226d027ee879f1eb50cad811c23423d50d103c39bb7ef936d8de7836aa898c1eb83d6737a0d8420f0c919ba81db9727dea2bc107a43dc63ea0f51d34e67dea03342901d86e6b193b70c53fe209d424c93edfc55150814b8b1a5bd948bfe05a7e6ebb90f48b19c5f7877c3ff288d5a9cd18c9d60caa759aed36dd5554b0be5cf8e06213655dc59af9f8d3da039b922a9691bf55c1ef28779c8f33a66f3d75f67b651026930d03fedc7299364f0a53491eac548041c468f8ea8a80a8f0143039b67312611f02fe95c9075a99906130a4072882db4039d5359fa3c1a1ea92161917e7436d6105a1340c032b888cdbc18e39a3a3ba0216cd69352cf267e32773b511f42ee4a53c51f50caf5474525f98942b6eb479d34e1b5e919753a15043b2649e1a68db04a7d7cb69d56d5a65e451680700a78d741d9b268849fe17d7f04bf16fbd917a647203c9acd4703b14ba5778f050d01c8d9747541abbb72d4e601fd594b025bac165e2a5fdf6bb9c96da36e67df6d09822c5150255b82c6c6769a080b5885fe38e600d58ce0fb66d81b501fd7edada0229d072b10a6ca2a274766bfa6bae6c3305650ae7e8d52d961561564599f71e03c944279d8f28836369aea6a697ab2cf00294171e7d75c3ff80f2cc72e4b470dcc4da49629c426984dee74bce99e4ff49914d53f74fd4313ff253dc7dee87bf91b9293dbd15e8daff81da191257fc072679212eade8ab920e39079ff52a01aa2bbd1c8b51238ff61950fead6f122ceeb337d7b973d58ae117a237ec5a9ce297471b9a85b6694d470f4c3bfa2cccbf3601534d7b0af20e6722fc14b4a50cd899f3c157aadbc7377fb1104347739b6d635f04f79922a4d593d8ef7283e4d2b4fc5f66406f298ecc6ee2472066459eab5e0838fb07140ef753d47a20dc1e7ad1595797bc263c09c31cfb53ffaf152197eca27094f9be31dfac94bc489b25394b63bd9396a0960234be7655f5bbc4b44588029ee30a2f14fb6875ec3f5863cf5181399a783f04454adb18b04f4fb55346c7d63a8a65335b602c6d107111e260594ab138b9c4e076738a906d685a47e2feae529ebd280a3fbf1f19f9d52327cebc7c58fae21a192869549222794146784c72b92ebba244687e29868a8192b487a5083efd1d1d5917973cdbb9b840f431e05ff85cccce81c984d5d3eb0dba23d06079381820b6b037e4665a5a7fc9c6a92bbd4f20235ca77b1babd210a8e762d25fd7469d20462aca0886e42ca1e7220f4b8ff1073e0bc8feec26c4c6a8886d564638d225d4118f5dfd0f2bc4c6123bdc0c5bcdc99b75d30089fe31a5ab78af7601b46a49b7e90479f8fceaf4cc2e3fe55ef62523863c9e8cbdd145508cec29cb84edaac7a3e56fd74157dfdf9cc00dfc1f451f99a7d10d03fbb85cddc23cbe902d58f1b6ad4b7faffe1290e38c6b7d80cc8c501633a1adb5a4199ff1b3bde44ef0f277a6c65aa732c31278c8908bcad2ebbc8eed11f0878eec68d584eeec25fae9193783681e3e86c202f87dc6403c9986eea98c41045d2d58c72f3f86362f7bf17209218a89e46a948467bdf420121fe796e25946ce9f5bc9f2af51ea64f3d843477a5bab74803771350cc0ce17f99fc1131f2e56942bb5ab10291c08fc84049692ab8b8cf4651645eb6300c0d5552c8c579c1f90ef038dc5200b30796b2f1466001d2564673d0a803b1e74fd2f040cd950c961e2ea9dea0dd1ec6d78b100e4d1be6c6582afbb6aeba01865b6d27ac5199d26a5dec7f4573b15d1f0bbbb3aef4566dccbbfd3dac020e70c4c8cd76e567cdfc986b06b7d4f5c92dee98eb1a4c8f47a2fe6c6d9b3d2741a7f95bd887239c703815ab0e56fa29b390eb811044b1c641546f71c1645d26a051924d4a44f7cc2bf43c1e8ab69aea33f13798fb8a085e448275351217ad0a7e9249789de292e2a5400c64994b99379be7e4cd12beece9c3091c4735fe6f8a05c15189330dd305b0c76260dffdcfe5107cf8e5372afaea800002c3bafbbb2e276c9e16d0d3e64549eef785a1ebdf9ec29c670cae4b5c595c47fbcc65116f7f41f8a7b0a40145ac1a52040721be258b6525bb76c600153e42ffde9b81da49660e1fe8e549ab05c74d2c59a715bae9781b076c0fe2428c10dfbb2fab75e25f15656ea9812f787474b0320684192d454ce529cb7c52c4d601ae729717fb4d5663c47879b07be96f3bf29adb613555661b3c96b0c71d753f71771cb353010cca10a7b189b882ef05a5173aeeec8192a419ac6e2eb5183347cc5c475f10d585b67c14412afd50d496d12446e6b04fee71efa47eae8456e2d2a20920ad710e0d78cb5f2771ec8ac0eda7b1b2da3c4faded36185e0f404c93bb659928fde443c769f01597595de901c269d418c512098dd047a11a650279c793fd66db079f23e79427e43d7ca90dd049d6c881db68b55acd0ea937164e00e2857a24c00dbb4f253639dc31319cf65ffc276f34e448dd3c34fa69a0e078ad8af56ef206e529ed661e482f4b137964350b5189a0b53d9caebeb11519763f3320bed47682894df8e9d549fdcd789d6c93926c0d4590c5c0daed33828a5005c18a378b21b9f2055deb03211cc3f21defcac6d943e2799fd3477f7c6dc6bd446c30e45b12e4f6ec2a2d95b3897036fb2cfe9b15c8f5b266c7aa7a7fa902da15179c63de7422b2534b8d16b3969ed9870c797f42db1eccbbc809362b5b4ba981313b862ffc21239ca0add48e88aaab59844360e75ad547889adeb29ce24c2f54e7f15f06eb494dd82ab6984fdaea9203e50baa393e7240a1ebbd1f300ec90b8f68f9b90cdfe5c8106725e5d3d0fbc14a5bd3e736418620ecb81f0a46b5d51768c6f0497d2871f89e43986b5c6708b6b04b94d03f5de98b8614cc05e0e59757c2c4c18f6798856c1b4e0c2d00a9bdca1a4079cdd9277a8aab0b1e753b6eb8433e9d82d1d46bece012a00940fc536a6f9ab1c75284b87b6007c047641f2889d3d4607bdaa695728def81325ce4ea1648ecbce0a5958e19680f196f7a7bdc55ed89c002ff4a87600caeb31e0d3ef822b355ff87d855784f84e7a8b2a852494666f6fc4ceaf65f8e72cec79319dedde5042b7136e19e6aeb0da52f44c680fdb660c38dcc0fbc2fbae51d0d515ac7de0c4a80287ec3844cd2fa9dc79ba63ccd896fe9e5b7adb359ebe44fae63897f5780b5954f56a16bbeba2118be555cfd31df3b0ddd1739805f3f6a64b4220f20dd0e32006989591d95ed83012b14e00d76cd0a2f77de91361b6589af6da9f3e91e614064920d9757e974ed22751c1bd737c00bcafdc6f3f1993435dad04157526da055399e9aa940094f34be4ed504aa9d33e21d24a635448b9da44d6ddf8f946a3c02380a6ccd63464bb02a9e40e372fe60567c0c7bb51b17186661f9efb9774855f2591c526f0d8f1826cc88a15190c8482875e03613f90e6a55e2d3acd3c5163b6455c0c3252ed8d82e4515470f86a49a29705c5592f48260d738d3c4f74ff133b28cc229e1d8b1e120acc787d103c9b822621c8b5d37a6fe25452bdd4e3cdba6107b6364f988d225a7ac58e58fe5cb0102e6d1d6859e8ce257c2c592e4e4a8dc39c0513eff9355a7c7054267bff26d0d621af2c98f4467e3c6adb8c463bbf809d0ef3b2217d0a95b06756d8dd902b229f0a95e4c1a763db28455475befebd3f80b679ee4fd3478b921eefadb880d2784081c2ae817d1b101ee7857ba316bb253e32eb1f4e5932e1624b91a72c0742bc2fec7f999d366e8b366fe37cc408d2fc87b97f5da54dc96a2c4727f6f2a28308c9490dced27daf9702ac6d6c99ea5fa38e2d93c32bbcb756f72152938ccfc4ee910c4d19a69bba066c8af77722cf99dec87e65101ea210eeb70f1a84d3fd4a5debc728fc1736938be90d4cad5c5c9267d0e21eaf4e1d5862be6cef8d3309883419d0dc74e5b581745f36f3f72c36dcacf2c731db274ef899a8786068c12e19b08a0c78c60fa2e4e3ac4d4579d2e9efeb78e8b99b54ddc1662818d495e00304467f2b6a7e9d571bc8eabb4d9f60c318368be40ff00b8d9315eca42aba35820cb0f06e97ed7655c73e21ed6110afc661c598572a58305adbf35021a8c37c7a738bd835b0d432b01f9b8c691620e5cded66c2791d590f0bddad6d5dc1b53a3784e3b93785ee8cbee11cc7d95b4d7c197c885c6322b862d302a2e2f799bda743bd8dd560780727746691abce0f4b8cc363851211a309efeb006509166f05be52a5af3699461061d023a744c6ae161c488299838d8c5fecf02815e8a19751c658e124ef2ef57feeef040db0dba7bcc9946d4e7975ed1ed7c3431458a09b64ff86807f33f89c8b0a7f75061d25b4afedc04144e9562f06e39ac106fe78c5b28a0f857201aaa17f6ecf4db3ca8ac6b989bdcd755e3561ba072a897643b039a69dbd732854f9016859e44bc882090d58f8801fd05cf57277e6bbb033ae8603dd1fc69747e74773c35c76d9186e3bbdef0f3bfb109adbf7d2514d55cff2d331f3b110f08c61586deef072d6f5e2c1d370a3e777159a2315d5b1d43a832bb77703ce5e91cd1a2f01a4358df3119a78633cc45268ebb0b07fc6605a65d8dd3d753b52df7f936181ab30404e6636c4fc83231e915f3d58b5e6eb6e2b3a4fee7ccd90c89f414bd2914c6ecd9c973ac2561e313c160c6f5282e2213ca645fb2f136f247c8e82fe4ab68f93aa81d9afaf5027be24896558fd9918ab2d1b5e2c1537aa889d281e2d1c0242464d7716aa143b26220f2c7766541049ff9cb731fc20ba0809b301e1d7562aba476f989ed8bd37b755dd6a5a75ef86d428b7527de440e271de870240a9dcc5cb821acbaf6c80f3ffd6c6ffa21020a0d2d8912decf13132d19df203727a4c054a85396d06307b407292b6c9478c706158696c9398c3aa0d7c1902b0a8678422109c2b89126c608cc816da30142a144487320f01815343434befb747ee41217184b2767ff5e231f36e5af93036320c8edaba4c2debd39496a1bd6aa3750874ee9463aa4f37f22939ba49ba4527adbf0549af31d04f7a225c03b574e993e1dfca8a19a59337e1c93e6efbf7e003951ffdc06f7eaaf6e2c60e55e600da38abe233b97a8b50c2a2f2b34dc6d12fc191aaa8623f36659d0f5bab8cec8ae0516685599028de90c4f2d7c866c19e20505b4d3339920aa2ace78948aca6ec5de99e6e7c11dea82c589b19f5926f9ec85729fffbdcbf1cdbd29dd556a689e65c61b3bac2103197eed1b77bf7ec5b4bbf88c0bfadbf41afb2e349e0b4e7004039e1ac7571d9b24da85c1adcb76664a91280f56cf699f757ebbcb0e26469d7ed61780b619807e3b8d829ef8f01324b1bb258891d1943e5ffcc3fe8c563e71f6bf9bc979a6a6ddb2d2313de95680755a4e1b90f2b8ab44647d4d263a9904d88a84c1241dcc0a97f3d34e1d9f28598d807ddd554925f80ea740b7c152f3e69b1cb67837526bb2e10bde4e1cbdf5931747750178151c91f17a5c5a0a11fc0540666227ba422f7072fdbcda06f5569dcc8f2975fa3e9777adccf148bf40646fce340112e9b11dcc6e423d4525c47b0f6d13051a6d72777273ef9f6586dc2c47e3f97bcf5632c42421a363385e6c8fb88b5b65db2c5d404b1bce8c9eaf2617401af6d3d96defb79e51eea3e8b9081981ac46aaaafd123499a8104cb9c9d0d5e85ed76e9bc6dcb2888a4b2f7484da4e24b30d79f8198bc3460a901a5d95b1260af244e9e2ca48e579e7d43060cbb3937f6ade8b3762d08f2d3ca6eb5f6cdec01810a064d493d213c26efdf5a4132f071b717b8bc7636865402b880be88352d3e75501ff61f06c62702075a69edae088d8962e1f1a9800401757a3ea9b876528116ac17fc588c6fe63cb966edb7c9eaca1a1e5b9dc02aa97ca648f01b47c2cb691f41b296793f6e63811070070645227532e4d353b63e88e24c359f1ab7286a9da707ab68fd890ae0f1b29fbc995b21109b4f5f594ea01b8e71788fd342e18255e8039607c4481f742d904dbdccb2cad845afcfbd88d402350bffc1972614d93e4ef71244391e5d451842bd6d56b692afbe14a5ce03bc5997e7a58095852da45b6c218d49433c6acc660897e36d55530ecbfae3d76eec424da93e30265fed60203846e7da5ffb9ed2a51172cad0c37542662a2c9742a633bb237ecb8c1b33a76a59a48920c7e7ce9e47bb90ba9e17465f798102787f3c101a0d01d39a52b301ffacf55cae9933fa61dc92ad52784dee59e6bb8dc0fb8417243c749e3941616a3852b25a6ddfacfb52fbd37de1f53a585431272f97fb1b8eff5df51bec1c25738c26fe5c56d8ecf9b702fa2a70d696719c121e57c2fa4f5229f89778306da91b7516f161cafd719712be5d462032984b6f2eea9af5abadbf9a40fcb4d9a1d2f9b7cb95c0ee58aab0c9292fc423e36dc5d00f7f58c92b60958484123915db298b10df45d1ab313ffe9bb21dd9167c5e292d01128f400f27312c795ed272d5ced954be39287aa65a56375c837ccbc6e1858ae4a2f187bb83453963b9ed1f67ee11fb2fdd03e8f51ddebc6fe67613d9c015e29b31340ac9741c3f4749616a05b077e583c81f3f1d0d83be975007d0458beb08ad85a8d2dba236ce3c4b589420544f7f63fd08d70e2cb03e040bdeef7c41e321400b7ed0946600fe0b7c9206271278cdb4412d4e9eb1429106a85f098a24a30cef18fff5e6dcee6f3141a3d2f7392788482a1ab04f6a258ed36f753ffa48733583728f31f5a6ee4d6bbe689de2fdf16ab0e17114251a1140aab0f3bb1ec4483cac9ee9772ce18cfd0eb84a8b4c4e0b6cd7bad846523641873713cec260fc3a16603eaf104b4cbe701431f11bf80eb40120a71a43882e9b6ebcc70c9f35a0a71f047de6b15ea89f62272e1a92d0901fc48206f72aa608c86d7c111733c5fa8dd01fd5ab07955ea5c651f08c0b317e1b8214287a874724408237df3ccebf68bf43d0679f7e1b6f4b3cfcc78667cdb5bc235f855ff8de7a74dbefaf1629679596b59990845b8d41d7e3bcdf97ea1323ac4cc5d93c36b862f448b99c37202d6d71e25ec6c9ac7abedb5f92ea32b1bc9c244ff24bc79939d14ecb01de941c20e5830e43c5fb0634568e620371a8c6a15480c5e7edd06eeee0f9da10e9905dc83b522291d0796c2fb4197f35c69d1fe092406f3af8e5c25416a89ff729392121bdda1d8b3f7dd285a4504a2ebf442c7b8c615107d209ac81d26f7ccd6a6223b4337dd2ebcbacc5f137b8dc5b7190be622f5862a4c56c4f5c0f71b881fb41fdf096702f33dac0128b3b9d4c7fb526e26d411b5d25e170ec3793fa67e43b06f8696a9b2ca4a36879ae7840c9e10a42129d88cd7d7cf8e235d87196a7b069834d49533090c6411d1b7c13b3e885ccce7e078990c692ad7989695bfe47da32e361aa3916477df9d3f5aac4924b921b064cd0a542f5ba6df5d6aa0e6d62afaaba883da7a4c1d59b2e933b60af7b065a72b4707054f6fb5c9d0922f494826dd25125088475d0d166be74c4efdf0556b2efc77041090673bf2f182d6245101794d0273483af3f782aeeccaf4285e9d19b0c205a5946223795ffcd3cbb3333a9a3ef3e74feb1f4c39713ff53701fdb2b35f85521a5ae2eb46cdfd1d01278539d4f2cbf72aa6bf4f19e4c8930e90c8070dc769e4bfbf347da1c112248dcc2d4503e8797de97677b8bd501bc38f6141ea9d5570f071d6bcbc3cee6f09839d70d80fda977b334a7c1eb63aa40ee77d3bdd5dafc53ed6917b2a7bd7bc324447130099d0084788559b09c4da51ed81f225038563e24efc5cb2a6fe8711b29fb56ca1acee9c5a59fe9236d49ec1145f53b5a2a3612883de9caf4573593fd1db04c9f2a1c83da5a1725ee878fb82a4b0ae85151f5bc7448a4c13baa1d9d76d7c93898a18dd30d24e22357cd4d5ba9c6f8b1e7fa5a569cc368d3917b4fc428adfe0d87c875a72d05ed5789e832ac3423bb1d36a5426a8092f5c4a9e2a405f2e04d4a30b4cb93c09073d8300f2dd90f85e981be2a3a6f0d41c31996fde760a0afd978f3b9a9fda85c26197e8757eea6c69916e183946af3244fe87f4d9571939e9862e1790bf91b3274e057976084e8285106327f11ac0ba70ba74c9757a30650602065b927d8fcfa5d885b8d77d006feb180f0e5308f6dd583e28fa21d29ecb2d287069b4f5ea78f8ae26fcdd8621f936ab537d46cd1775e731d561c5f8fc482dcacfbb3bd835bdb7e8a914574411000c1a8c26be89a8b53eaddc88c010911764942c284456766bd5eec4f358e13484b6a04caa3a7cab3a277e7ddc5c31405a8246b6182b4e28434683aa93c99d30f995d6903d23b3a279d5ad452e6853bcf38c84d8b090667631508c69610a118cae2cf52a0e394830401998a5bef2e360661cb09a952fa519390e10291c1ecb40fe325c34a8eb5da57f19248411477152b51f9dcb08572c2efe1d644bc065184c513be639e1761611ac0e0a394c4773264faa0a4a381abd12eb61300a8ead3e0e3ef5ce091323fb614f8eda55267ae9a28d3c195e13f6cc85e054d0f7e54a3d952e2c6e120dbf24e65b4fb46a63eb4c90a597a7836257de484bbf634f8b9c6906e3c669a72c6b01160b4e331225eb137655481f1a26f6c7d1310bdab7a16311fe130a8998b18c27a572c78795c27b6a93d3392341f998d7d70539b9b5527a1d46a0ae37e85a7953d107e0f5c81eec096f0bfd5ec93205615843ec3495bd29eaf76da1119af80c58ab017e64470b3be17e0841b57f43ec6a1b7f624e157994ac80d0f23a2f3f3a987150c74828dd1860561fde0ad8bb035d2d035592c2083b0bb48d67f207202f00355d5a68027500c5475125dff2859ab31f19e9910a2c29d76c85e7c6ededde0a912f1cfa9fe804b7480cd58409a4b3fd8023b026c2cba564550c1eab329759a6fecadfdbc4d03d64767fb55a86a3cc50d80ea9552de16c39cf15b5face757d1899b905342dc506ccce0ce6ccc43aaafbd0bbe3d4ebe9a3eb83626e582e6d2eeda52a6f34d4d97301dd2c3b7af34ca776a09d20ee8472489c63ca7f8ca087c6b04cbe360e1b7a4a7766736a7df32432af1189f08a092062fe0a7b258a8487bcae1697f1c8bd56cebb025b02cd3ade4f82c380f042579fec6f6535a98e60b9bf98a542fee02a71abd4070216a9535b8d63dcb7d372dbf27a4859ebf66f48fb6fa5d703b09bc02b5bf8fe40113fa39887a63186eac4ca0c878d73744650ee2bcdcbf338b18f50fc10893e8935815c1c92f844a03f4516bdb445b67a680a2cf501587d9a4735370a3cf71975a9e9b489c487a41c2e2b9b2ae989b5b266ee3cfdb9defce618e3a17555938879200032e9328f03faea0fc2da03140ac3dbf0e0e7350b4a5e9639fa65d24578bf7bcc6b243ab4cef9fa67191f16092f099a4d87b2708ed2ef518b526fbfd842fb7102eff8660ffb0b228699b7e4505a2cdd12aa5f2548bb60bc03aff533d954539b40b07b4e8de02271a8692068cdce0ce59a7fc705f4f48b078504d30a80439e58ea87f990979ddefcb332a58ff175b53aff03cdaf5f6bbdad9c90c8fbea54564abfa24d5cc7e8c3384658ea1653659f52ac38aff032a7afeb31d005ee0596b429c593da96e84a5687c708e4a9905930c365c197b504480be868222f1e0a65958540c62f532f5bd32c0a3d7215f1858168b10ae389fae5ff8531a09cef30dbdb915874d6b0d8f7e6782210ca4cc11870400ded10f3c4bf20f489f8c7924c20e047e49494e5b62ffb855904a0c92852976bad64c5ca387eadd4bf3756838c88e46421f15402489c7b457f6dbea98eeef8f540786c11ffc901404f4b9f83b25d40f9a24c555af5049e34a8ed53e1b73bc2abc9addf69f4b74f564581dd2245f90987d9e6273ea591157a8cf74d706e4ac22bf9724da9dd56d3ec172e7d1cf665df332d23357cc0e95c47b7bcf2c605657ae1cf475ffc735fd98cf59c27a519ae676d8c8a8731b4b297f243d1bc75533a3f428a7f53723b2b4937b139b4b9b09370d917c14ffb92bc1b7dc45a9d7877f55c05cd3b35d42a320c6eec36996b143197c00b499189bb81d0c44f3e282962a4222b7f8441a1a311a975c81f20548a4a4ef29d2a7f083865ff650b47ac0d49c688eb74d995ec63507730bc634198e39efb801f37284d6f55add870e921e0393eefd3a01eaa32ff2fb45fe6f4c25132080ef82829abfc14f9b310022a4fb38d763830da898260a5549ad82f0ec0985a77b78f16ede79437edb2b7706597e6524e94570e8b57b51095e3a0ccfcb726b269bcc51bf1d85da5e8785a86ce12ce772342f2de8d497d3820a55ff7acf0cc1a5800ba914a96ecdc96d082f61604f473259401ed53907b263fba1df716db3db8f2932ac98310ea101a27fc6957c9a62e65cd6fdce470ae664f69b70d8c5587ccce3f1ca71b98fdbded6a52c7d64decd0b48343f9bb3ac4316b6c0194542c2ec017cee7bf5a1a2aecfa98707eadc8b1aebb0eb4b334e08450444e67883a65b672de4cc8b1a42dc448367c826e2f79321d6406ac8b02c122326fdbde790cd852bc14d0474777ce8329e5a7d76fb141846aa2481be5381d6fbb34ee3d08cabc9bd36ebe1dc56e6f3890a0d9f3dccfd8e8eaf1e265f3dbb82013e5c171efc6e8246f37b3b548628e9f518cda620d8ba54514aa5ffc3d8802d826a628c7a62651c42bb81de43e33e73e82d6554e4c4a8ea708dd03ca6871b38aa42cec1603d33849ee7dac6de81592360d3bba4714448649877b1e8c9d172ded40e4073f2be773bf0b0e99fb9312613097c297217400535bed47af0f6306170c5c967a60efee7c669b382110ce80edee76c85dafd251c98069ff5a586712cd555635314aa9326678441f952675022f72406cc112c125b2dcabcfe31904e67957f754a469b8079a8e63b52512f61c8c7ca402332a1ca2363bf6de4050cb89197294d25a6ff69006cbcfb894e646654155d4bb9af984b4d705625b5932f75a5bd28908d196571d68bb87e672019d1b292876c0bd325a10a722635f0a54d4f3948dcf06ebc157d0dcd74d22a28726e98417d1d9b72bf1f5d9df3a64e8f76ec0948c931caf845c0de3e81ec06c1ab75006eb7856e35c7b9bba8b9882d5bbf93fcaa2ccf0dc8643cc6b38b244413a7d7675d3d6b93e8d0d3db5ebe34e007788dc8f99513d228ece64cd6db3ed024159f9f3f3a22c197076f4e3ef8c2f390f635efc142e31e554c5ae", 0x2000, &(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 19.549133751s ago: executing program 7 (id=2430): r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) close(r0) 19.548660801s ago: executing program 7 (id=2431): socket$key(0xf, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802, 0x0, 0x0, 0x7}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000005200010003000000000000000a0000000c00", @ANYRES32=r0], 0x20}}, 0x0) 19.548215551s ago: executing program 7 (id=2432): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="ac0000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c00028005000100000000000800074000000000180006801400040020010000000000000000000000000001"], 0xac}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="ac0000000001010400000000000000000a0000003c0001802c000180140003000000000000000000000000000000000014000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8000000000000000000000000000aa0c00028005000100000000000800074000000000180006801400040020010000000000000000000000000001"], 0xac}, 0x1, 0x0, 0x0, 0x4000}, 0x4000894) 19.547770041s ago: executing program 7 (id=2433): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000240)=ANY=[], 0xdd, 0x11ff, &(0x7f0000003300)="$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") open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x201000, 0x0) r0 = open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x0) preadv2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000002200)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0xa) 19.478376252s ago: executing program 7 (id=2434): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x10) getrlimit(0xd, &(0x7f0000000200)) 19.313014295s ago: executing program 7 (id=2438): r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, r0) keyctl$chown(0x4, r1, 0xee01, 0x0) keyctl$setperm(0x5, r1, 0x30925) keyctl$read(0xb, r1, 0x0, 0x0) 19.287613075s ago: executing program 38 (id=2438): r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, r0) keyctl$chown(0x4, r1, 0xee01, 0x0) keyctl$setperm(0x5, r1, 0x30925) keyctl$read(0xb, r1, 0x0, 0x0) 3.926607974s ago: executing program 5 (id=2867): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[], 0xfffffea4) mount$9p_fd(0x0, &(0x7f00000025c0)='./file0\x00', &(0x7f0000002340), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) read$FUSE(r0, &(0x7f0000000300)={0x2020}, 0x2020) 3.787928816s ago: executing program 5 (id=2873): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x1003, 0x0, {0xa, 0x0, 0x5cb, @dev={0xfe, 0x80, '\x00', 0x1b}}}}, 0x32) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x180204}], 0x1) 3.736440067s ago: executing program 5 (id=2874): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) 3.718471487s ago: executing program 5 (id=2876): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2ced, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x20004000) read$FUSE(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000040)={0x0, 0x22, 0x6, {0x6, 0xa, "a73d9d9c"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 2.665328832s ago: executing program 0 (id=2911): unshare(0x22020600) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x10001}}}}}, 0x0) recvmmsg(r0, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001640)=""/42, 0x2a}, 0x296}], 0x1, 0x10022, 0x0) 2.649442702s ago: executing program 0 (id=2913): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x100) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f00000004c0)='./file0\x00', 0x80000000) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x1c927e, 0xf1) copy_file_range(r1, 0x0, r1, 0x0, 0x0, 0x0) 2.637308882s ago: executing program 0 (id=2914): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x10) rt_tgsigqueueinfo(0x0, 0x0, 0x25, 0x0) 2.615728323s ago: executing program 0 (id=2915): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f0000000ec0)={0x14, &(0x7f0000000d40)={0x20, 0x27, 0x8b, {0x8b, 0x12, "e28653ce5b14bd9e0c6f849e1d649ef2780605c36bcc505db078d21f3ee90fc53a055ca8fd39d9d3e0fc705f7085060b4e1baacd5402033f094401c2578aa3e627b1e7e645751cb059fc5f5b6e00370a38cba9312e4153edaf511790b2c596dc3b3f7e423d69e49f6e0bac3f7deef3d514b18176e0fca2a36438815a0bb97ae6fdfa45cb1e02bf6468"}}, &(0x7f0000000e80)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@local=@item_4={0x3, 0x2, 0x8, "c2c432a7"}, @main=@item_012={0x2, 0x0, 0xa, "103b"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x0, 0x2, 0x2}, @main=@item_4={0x3, 0x0, 0x9, "749e821c"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @main=@item_4={0x3, 0x0, 0x9, "85900eb7"}]}}, 0x0}, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) 2.019432321s ago: executing program 5 (id=2916): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) syz_clone3(&(0x7f0000000680)={0x40004000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) 1.755930375s ago: executing program 5 (id=2926): r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000000905810300020000000904010000020d00000904010102020d00000905050302"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 1.229136953s ago: executing program 1 (id=2927): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000180)=ANY=[@ANYRES8=0x0, @ANYRES16, @ANYRES64, @ANYRES16=0x0], 0x1, 0x36e, &(0x7f0000000c00)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000040000000000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020000838500000071000000850000005000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) setsockopt(0xffffffffffffffff, 0x84, 0x81, 0x0, 0x0) quotactl$Q_QUOTAOFF(0xffffffff80000300, &(0x7f0000000300)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) 1.203543963s ago: executing program 1 (id=2928): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b703000008000040850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000002c0)='sys_enter\x00', r1}, 0x10) r2 = syz_io_uring_setup(0x1249, &(0x7f00000000c0)={0x0, 0x2170, 0x1, 0x1, 0x1c1}, &(0x7f0000000180), &(0x7f0000000000)) io_uring_enter(r2, 0x47f6, 0x0, 0x0, 0x0, 0x0) 1.186340883s ago: executing program 1 (id=2929): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) mprotect(&(0x7f00006f0000/0x4000)=nil, 0x4000, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) 1.150418704s ago: executing program 1 (id=2930): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xa, 0x4, 0x9, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x3, &(0x7f0000000000)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0xff90, 0x71, 0x10, 0xb3}}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 1.137388464s ago: executing program 1 (id=2931): chdir(&(0x7f0000000480)='./cgroup\x00') munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x194) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 1.126712074s ago: executing program 1 (id=2932): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc534, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000240)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0xc, "f7efd19e"}]}}, 0x0}, 0x0) 883.951177ms ago: executing program 0 (id=2935): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x3, &(0x7f0000000040)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x18) recvmmsg(r0, &(0x7f0000002240)=[{{0x0, 0x0, &(0x7f0000000640), 0x2, &(0x7f00000006c0)=""/45, 0x7}, 0x4}], 0x1, 0x2, 0x0) syz_emit_ethernet(0x2e, &(0x7f0000000500)={@broadcast, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x17, 0x20, 0x3, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x2, 0x0, 0x0, @void}}}}}}}, 0x0) 804.101619ms ago: executing program 0 (id=2940): r0 = socket(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x10, 0x2}, 0x10) connect$inet(r0, &(0x7f00000000c0)={0xfffffffffffffe21, 0x2}, 0x10) sendto(r0, &(0x7f00000002c0)="8a74ae8f0b73df9f469c1ddac445d735b07f08c68187f8c2", 0x67, 0x20005, 0x0, 0x0) recvmsg(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=""/99, 0x63}, {&(0x7f0000000000)=""/58, 0x3a}], 0x2}, 0x40000) 646.190821ms ago: executing program 2 (id=2947): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) syz_clone3(&(0x7f0000000680)={0x40004000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) 349.570765ms ago: executing program 8 (id=2950): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 349.318475ms ago: executing program 2 (id=2951): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x800400, &(0x7f0000000100), 0x1, 0x793, &(0x7f0000001700)="$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") mount$incfs(&(0x7f0000000300)='./file0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f00000001c0), 0x1000440, 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000500)='./file0\x00', 0x6000425) umount2(&(0x7f0000000180)='./file0\x00', 0x1) 329.803886ms ago: executing program 8 (id=2952): syz_mount_image$msdos(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x2000c8, &(0x7f0000000800)={[{@fat=@showexec}, {@fat=@debug}, {@nodots}, {@nodots}, {@fat=@nfs}, {@nodots}, {@dots}, {@nodots}, {@dots}, {@dots}, {@fat=@allow_utime={'allow_utime', 0x3d, 0x40001}}, {@fat=@fmask={'fmask', 0x3d, 0x4}}, {@nodots}, {@nodots}, {@fat=@sys_immutable}, {@dots}, {@fat=@dos1xfloppy}, {@nodots}, {@dots}, {@fat=@usefree}, {@fat=@codepage={'codepage', 0x3d, '860'}}, {@nodots}, {@nodots}, {@dots}]}, 0xfd, 0x1d5, &(0x7f0000000500)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000640)='.\x00', 0x0, 0x0) renameat2(r0, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000200)='.\x02\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r1, 0x5) 300.871556ms ago: executing program 2 (id=2953): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x80000001, 0x0, 0xffffffffffffffff, 0x163, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b07080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf5af51d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d37266021"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x1400000000000000, 0x0, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="06000000040000007c0500000a"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001340), &(0x7f0000000900), 0x404, r0, 0x0, 0x1ba8847c99}, 0x38) 245.209016ms ago: executing program 8 (id=2954): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000100)='./bus\x00', 0x1000002, &(0x7f0000000500)=ANY=[@ANYBLOB="6e6f6e756d7461696c3d302c646973636172640061727365743d63703835322c757466383d202c6e6f6e756d7461696c3d302c6e6f6e75617461696c3d302c7574663c3d302c696f6368619615f9a9d8bc34fd234143727365743d69736f383835392d322c756e695f786c6174653d312c73686f72746e616d653d77696e6e742c756e695f786c6174653d312c757466383d312c756e695f786c6174653d302c756e695f786c6174653d302c73686f72746e616d653d6d697865642c726f6469722c756e695f786c"], 0x1, 0x368, &(0x7f0000000180)="$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") open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0) r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000100)=""/155, 0x9b) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f00000006c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) 244.792607ms ago: executing program 2 (id=2955): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000840)=@updpolicy={0x17c, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x19, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x10, 0x40800000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@tmpl={0xc4, 0x5, [{{@in=@remote, 0x4d2, 0x33}, 0xa, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x3503, 0x2, 0x3, 0x8, 0x400, 0xf, 0xfffffffe}, {{@in=@local, 0x4d6, 0x33}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3500, 0x1, 0x3, 0xe, 0xcc, 0x2, 0x1853}, {{@in=@remote, 0x4d3, 0x32}, 0xa, @in6=@loopback, 0x3502, 0x2, 0x2, 0x5, 0x2, 0xfffffffb, 0x2cd7}]}]}, 0x17c}}, 0x0) syz_emit_ethernet(0x7a, &(0x7f00000001c0)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "f84ec0", 0x44, 0x2f, 0x0, @ipv4, @local}}}}, 0x0) ioctl$sock_proto_private(0xffffffffffffffff, 0x891d, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 236.809047ms ago: executing program 2 (id=2956): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000380)=@framed={{}, [@printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x2d}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000940)='tlb_flush\x00', r0}, 0x10) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) 60.821209ms ago: executing program 8 (id=2958): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='neigh_create\x00', r0}, 0x18) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) write$binfmt_script(r1, 0x0, 0x0) 968.83µs ago: executing program 8 (id=2959): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0e000000040000000400000009"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x9113, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 542.9µs ago: executing program 8 (id=2960): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000180)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0x90}, 0x0) 0s ago: executing program 2 (id=2969): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000100)="1400000052004f7fb3e45f2024d2f1c9fb470000", 0x14) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a00)=ANY=[@ANYBLOB="340000001100010028fc7000fcdbdf2100000000", @ANYRES32=0x0, @ANYBLOB="420400008010000014003500776732"], 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x64000850) recvmmsg(r0, &(0x7f0000004b40)=[{{0x0, 0x0, 0x0}, 0xfffff000}], 0x1, 0x10122, 0x0) kernel console output (not intermixed with test programs): filesystem being mounted at /335/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 98.245274][ T4681] erofs: (device loop9): z_erofs_lz4_decompress_mem: failed to decompress -29 in[58, 4038] out[2639] [ 98.266259][ T4681] erofs: (device loop9): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 98.275599][ T4681] erofs: (device loop9): z_erofs_readahead: readahead error at page 47 @ nid 36 [ 98.284883][ T4681] erofs: (device loop9): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 98.289841][ T919] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 98.306041][ T4681] erofs: (device loop9): z_erofs_readahead: readahead error at page 46 @ nid 36 [ 98.314730][ T919] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 98.324678][ T4681] erofs: (device loop9): z_erofs_readahead: readahead error at page 45 @ nid 36 [ 98.327771][ T919] usb 1-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 98.337765][ T4681] erofs: (device loop9): z_erofs_lz4_decompress_mem: failed to decompress -29 in[58, 4038] out[3537] [ 98.343635][ T919] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.363618][ T919] usb 1-1: config 0 descriptor?? [ 98.369339][ T4690] incfs: Options parsing error. -22 [ 98.374595][ T4690] incfs: mount failed -22 [ 98.384540][ T1154] EXT4-fs (loop8): unmounting filesystem. [ 98.431471][ T4696] incfs: Backing dir is not set, filesystem can't be mounted. [ 98.442546][ T4699] netlink: 96 bytes leftover after parsing attributes in process `syz.7.1844'. [ 98.444223][ T4696] incfs: mount failed -2 [ 98.488103][ T60] usb 2-1: USB disconnect, device number 14 [ 98.785299][ T919] isku 0003:1E7D:319C.001E: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.0-1/input0 [ 98.856789][ T4725] loop8: detected capacity change from 0 to 40427 [ 98.877587][ T4725] F2FS-fs (loop8): Invalid SB checksum offset: 0 [ 98.884061][ T4725] F2FS-fs (loop8): Can't find valid F2FS filesystem in 2th superblock [ 98.895871][ T4725] F2FS-fs (loop8): invalid crc value [ 98.904850][ T4725] F2FS-fs (loop8): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 98.928686][ T60] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 98.934546][ T4725] F2FS-fs (loop8): Try to recover 2th superblock, ret: 0 [ 98.943410][ T4725] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 98.976818][ T919] isku 0003:1E7D:319C.001E: couldn't init struct isku_device [ 98.986678][ T919] isku 0003:1E7D:319C.001E: couldn't install keyboard [ 98.994342][ T919] isku: probe of 0003:1E7D:319C.001E failed with error -71 [ 99.019429][ T919] usb 1-1: USB disconnect, device number 11 [ 99.030874][ T4741] loop9: detected capacity change from 0 to 1024 [ 99.046803][ T4742] fido_id[4742]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 99.065009][ T4741] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 99.098973][ T1154] bio_check_eod: 6 callbacks suppressed [ 99.098989][ T1154] syz-executor: attempt to access beyond end of device [ 99.098989][ T1154] loop8: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 99.118734][ T60] usb 2-1: Using ep0 maxpacket: 32 [ 99.124944][ T4741] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 99.138730][ T19] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 99.148687][ T60] usb 2-1: config 4 has an invalid interface number: 128 but max is 0 [ 99.157604][ T60] usb 2-1: config 4 has no interface number 0 [ 99.164144][ T60] usb 2-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 99.175615][ T4741] EXT4-fs error (device loop9): ext4_xattr_inode_iget:404: inode #11: comm syz.9.1861: missing EA_INODE flag [ 99.175870][ T60] usb 2-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 99.197472][ T60] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 99.206566][ T60] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.214925][ T4741] EXT4-fs (loop9): Remounting filesystem read-only [ 99.216376][ T60] hub 2-1:4.128: USB hub found [ 99.229391][ T4741] EXT4-fs error (device loop9): ext4_xattr_inode_iget:409: comm syz.9.1861: error while reading EA inode 11 err=-117 [ 99.241879][ T4741] EXT4-fs (loop9): Remounting filesystem read-only [ 99.248499][ T4741] EXT4-fs error (device loop9): ext4_xattr_inode_iget:404: inode #11: comm syz.9.1861: missing EA_INODE flag [ 99.268164][ T4741] EXT4-fs (loop9): Remounting filesystem read-only [ 99.274865][ T4741] EXT4-fs error (device loop9): ext4_xattr_inode_iget:409: comm syz.9.1861: error while reading EA inode 11 err=-117 [ 99.287427][ T4741] EXT4-fs (loop9): Remounting filesystem read-only [ 99.301448][ T1871] EXT4-fs (loop9): unmounting filesystem. [ 99.328767][ T19] usb 8-1: Using ep0 maxpacket: 16 [ 99.335470][ T19] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 99.346620][ T19] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 99.356831][ T19] usb 8-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 99.366030][ T19] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.377445][ T19] usb 8-1: config 0 descriptor?? [ 99.417324][ T60] hub 2-1:4.128: 2 ports detected [ 99.422462][ T60] hub 2-1:4.128: Using single TT (err -22) [ 99.588721][ T1654] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 99.619978][ T60] hub 2-1:4.128: hub_hub_status failed (err = -71) [ 99.626553][ T60] hub 2-1:4.128: config failed, can't get hub status (err -71) [ 99.661266][ T60] usb 2-1: USB disconnect, device number 15 [ 99.785932][ T19] appleir 0003:05AC:8241.001F: unknown main item tag 0x0 [ 99.793226][ T1654] usb 9-1: Using ep0 maxpacket: 16 [ 99.798461][ T19] appleir 0003:05AC:8241.001F: unknown main item tag 0x0 [ 99.806002][ T19] appleir 0003:05AC:8241.001F: unknown main item tag 0x0 [ 99.813235][ T19] appleir 0003:05AC:8241.001F: unknown main item tag 0x0 [ 99.820551][ T19] appleir 0003:05AC:8241.001F: unknown main item tag 0x0 [ 99.828328][ T19] appleir 0003:05AC:8241.001F: No inputs registered, leaving [ 99.839053][ T1654] usb 9-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 99.848111][ T1654] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.856645][ T1654] usb 9-1: Product: syz [ 99.861437][ T19] appleir 0003:05AC:8241.001F: hiddev96,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.7-1/input0 [ 99.873480][ T1654] usb 9-1: Manufacturer: syz [ 99.878183][ T1654] usb 9-1: SerialNumber: syz [ 99.898959][ T1654] usb 9-1: config 0 descriptor?? [ 99.909142][ T1654] ums-onetouch 9-1:0.0: USB Mass Storage device detected [ 99.988703][ T314] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 100.059670][ T919] usb 8-1: USB disconnect, device number 14 [ 100.170445][ T314] usb 1-1: config 1 has an invalid descriptor of length 113, skipping remainder of the config [ 100.190402][ T314] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 100.204144][ T314] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 100.213757][ T314] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.227340][ T314] usb 1-1: Product: syz [ 100.231751][ T314] usb 1-1: Manufacturer: syz [ 100.236361][ T314] usb 1-1: SerialNumber: syz [ 100.360419][ T4770] loop9: detected capacity change from 0 to 40427 [ 100.375405][ T4770] F2FS-fs (loop9): invalid crc value [ 100.392545][ T4770] F2FS-fs (loop9): Found nat_bits in checkpoint [ 100.422979][ T19] hid-generic 0000:3000000:0000.0020: unknown main item tag 0x4 [ 100.434671][ T19] hid-generic 0000:3000000:0000.0020: unknown main item tag 0x2 [ 100.442260][ T4770] F2FS-fs (loop9): Start checkpoint disabled! [ 100.442396][ T19] hid-generic 0000:3000000:0000.0020: unknown main item tag 0x0 [ 100.459058][ T4770] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e6 [ 100.463115][ T19] hid-generic 0000:3000000:0000.0020: unknown main item tag 0x0 [ 100.467335][ T314] usb 1-1: 0:2 : does not exist [ 100.481986][ T314] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 100.488752][ T19] hid-generic 0000:3000000:0000.0020: unknown main item tag 0x0 [ 100.495665][ T314] usb 1-1: USB disconnect, device number 12 [ 100.496917][ T19] hid-generic 0000:3000000:0000.0020: unknown main item tag 0x0 [ 100.510901][ T19] hid-generic 0000:3000000:0000.0020: unknown main item tag 0x0 [ 100.518978][ T19] hid-generic 0000:3000000:0000.0020: unknown main item tag 0x0 [ 100.527003][ T19] hid-generic 0000:3000000:0000.0020: unknown main item tag 0x0 [ 100.534820][ T19] hid-generic 0000:3000000:0000.0020: unknown main item tag 0x0 [ 100.542552][ T19] hid-generic 0000:3000000:0000.0020: unknown main item tag 0x0 [ 100.542913][ T602] kworker/u4:6: attempt to access beyond end of device [ 100.542913][ T602] loop9: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 100.550397][ T19] hid-generic 0000:3000000:0000.0020: unknown main item tag 0x0 [ 100.550419][ T19] hid-generic 0000:3000000:0000.0020: unknown main item tag 0x0 [ 100.550437][ T19] hid-generic 0000:3000000:0000.0020: unknown main item tag 0x0 [ 100.550455][ T19] hid-generic 0000:3000000:0000.0020: unknown main item tag 0x0 [ 100.550473][ T19] hid-generic 0000:3000000:0000.0020: unknown main item tag 0x0 [ 100.551205][ T19] hid-generic 0000:3000000:0000.0020: hidraw0: HID v0.00 Device [sy] on syz0 [ 100.674481][ T4791] loop7: detected capacity change from 0 to 1024 [ 100.697915][ T4785] fido_id[4785]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 100.729157][ T4586] udevd[4586]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 100.747605][ T4791] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 100.796360][ T1048] EXT4-fs (loop7): unmounting filesystem. [ 100.851291][ T28] audit: type=1400 audit(1748014657.757:2254): avc: denied { append } for pid=4807 comm="syz.7.1886" name="ppp" dev="devtmpfs" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 100.897297][ T28] audit: type=1400 audit(1748014657.757:2255): avc: denied { shutdown } for pid=4807 comm="syz.7.1886" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 100.918012][ T28] audit: type=1400 audit(1748014657.757:2256): avc: denied { read } for pid=4807 comm="syz.7.1886" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 100.948767][ T4814] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1889'. [ 100.957772][ T4814] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1889'. [ 100.969322][ T4814] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1889'. [ 100.978378][ T4814] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1889'. [ 101.068704][ T314] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 101.084972][ T4824] loop7: detected capacity change from 0 to 512 [ 101.109821][ T4824] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 101.120133][ T4824] ext4 filesystem being mounted at /289/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 101.148393][ T1048] EXT4-fs (loop7): unmounting filesystem. [ 101.234130][ T4843] loop0: detected capacity change from 0 to 256 [ 101.258706][ T314] usb 2-1: Using ep0 maxpacket: 16 [ 101.272939][ T314] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 101.284725][ T314] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 101.294732][ T314] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 101.309101][ T314] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 101.318213][ T314] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.330641][ T314] usb 2-1: config 0 descriptor?? [ 101.414506][ T28] audit: type=1400 audit(1748014658.317:2257): avc: denied { bind } for pid=4858 comm="syz.7.1909" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 101.434270][ T28] audit: type=1400 audit(1748014658.317:2258): avc: denied { name_bind } for pid=4858 comm="syz.7.1909" src=28196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 101.455710][ T28] audit: type=1400 audit(1748014658.317:2259): avc: denied { node_bind } for pid=4858 comm="syz.7.1909" src=28196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 101.477546][ T28] audit: type=1400 audit(1748014658.317:2260): avc: denied { setopt } for pid=4858 comm="syz.7.1909" lport=28196 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 101.508252][ T4866] loop0: detected capacity change from 0 to 512 [ 101.521868][ T4866] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 101.565891][ T4866] EXT4-fs (loop0): 1 truncate cleaned up [ 101.571747][ T4866] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 101.668377][ T283] EXT4-fs (loop0): unmounting filesystem. [ 101.669206][ T28] audit: type=1400 audit(1748014658.577:2261): avc: denied { getopt } for pid=4880 comm="syz.9.1918" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 101.745250][ T314] microsoft 0003:045E:07DA.0021: unbalanced collection at end of report description [ 101.756908][ T314] microsoft 0003:045E:07DA.0021: parse failed [ 101.765133][ T314] microsoft: probe of 0003:045E:07DA.0021 failed with error -22 [ 101.826837][ T28] audit: type=1400 audit(1748014658.727:2262): avc: denied { write } for pid=4897 comm="syz.9.1927" name="/" dev="configfs" ino=7676 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 101.938722][ T314] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 101.967277][ T919] usb 2-1: USB disconnect, device number 16 [ 102.020335][ T4917] loop0: detected capacity change from 0 to 512 [ 102.070301][ T4917] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 102.079537][ T4917] ext4 filesystem being mounted at /467/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 102.111238][ T4917] EXT4-fs error (device loop0): ext4_acquire_dquot:6789: comm syz.0.1936: Failed to acquire dquot type 1 [ 102.132770][ T283] EXT4-fs (loop0): unmounting filesystem. [ 102.140347][ T314] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 102.145576][ T4915] loop9: detected capacity change from 0 to 40427 [ 102.151629][ T314] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 102.168150][ T4915] F2FS-fs (loop9): fault_injection options not supported [ 102.183428][ T314] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 102.187221][ T4915] F2FS-fs (loop9): invalid crc value [ 102.202942][ T314] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 102.212516][ T314] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.225960][ T314] usb 8-1: config 0 descriptor?? [ 102.231071][ T4915] F2FS-fs (loop9): Found nat_bits in checkpoint [ 102.273967][ T919] usb 9-1: USB disconnect, device number 11 [ 102.299734][ T4915] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 102.415937][ T4939] device batadv_slave_1 entered promiscuous mode [ 102.425514][ T4941] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 102.426974][ T4938] device batadv_slave_1 left promiscuous mode [ 102.435392][ T4941] SELinux: failed to load policy [ 102.494762][ T4946] loop0: detected capacity change from 0 to 128 [ 102.601612][ T4946] FAT-fs (loop0): Directory bread(block 162) failed [ 102.608291][ T4946] FAT-fs (loop0): Directory bread(block 163) failed [ 102.620256][ T4946] FAT-fs (loop0): Directory bread(block 164) failed [ 102.626908][ T4946] FAT-fs (loop0): Directory bread(block 165) failed [ 102.633629][ T4946] FAT-fs (loop0): Directory bread(block 166) failed [ 102.633927][ T1871] syz-executor: attempt to access beyond end of device [ 102.633927][ T1871] loop9: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 102.640548][ T4946] FAT-fs (loop0): Directory bread(block 167) failed [ 102.661381][ T4946] FAT-fs (loop0): Directory bread(block 168) failed [ 102.662319][ T314] plantronics 0003:047F:FFFF.0022: No inputs registered, leaving [ 102.676149][ T4946] FAT-fs (loop0): Directory bread(block 169) failed [ 102.699557][ T314] plantronics 0003:047F:FFFF.0022: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 102.752599][ T4946] FAT-fs (loop0): Directory bread(block 162) failed [ 102.773577][ T4946] FAT-fs (loop0): Directory bread(block 163) failed [ 102.799090][ T4946] syz.0.1947: attempt to access beyond end of device [ 102.799090][ T4946] loop0: rw=3, sector=226, nr_sectors = 6 limit=128 [ 102.843669][ T4946] syz.0.1947: attempt to access beyond end of device [ 102.843669][ T4946] loop0: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 102.991742][ T4982] tmpfs: Unknown parameter '[3' [ 103.000728][ T4987] SELinux: Context system_u:object_r:systemd_passwd_var_run_t:s0 is not valid (left unmapped). [ 103.024283][ T291] usb 8-1: USB disconnect, device number 15 [ 103.070703][ T4995] loop9: detected capacity change from 0 to 256 [ 103.083847][ T4995] FAT-fs (loop9): Directory bread(block 64) failed [ 103.090958][ T4995] FAT-fs (loop9): Directory bread(block 65) failed [ 103.097522][ T4995] FAT-fs (loop9): Directory bread(block 66) failed [ 103.104206][ T4995] FAT-fs (loop9): Directory bread(block 67) failed [ 103.110999][ T4995] FAT-fs (loop9): Directory bread(block 68) failed [ 103.118969][ T4995] FAT-fs (loop9): Directory bread(block 69) failed [ 103.126047][ T4995] FAT-fs (loop9): Directory bread(block 70) failed [ 103.132600][ T4995] FAT-fs (loop9): Directory bread(block 71) failed [ 103.139375][ T4995] FAT-fs (loop9): Directory bread(block 72) failed [ 103.145907][ T4995] FAT-fs (loop9): Directory bread(block 73) failed [ 103.208721][ T1654] usb 9-1: new full-speed USB device number 12 using dummy_hcd [ 103.308767][ T919] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 103.390727][ T1654] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 103.408210][ T1654] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 103.428215][ T1654] usb 9-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 103.441791][ T1654] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.458208][ T1654] usb 9-1: config 0 descriptor?? [ 103.480470][ T5021] loop9: detected capacity change from 0 to 512 [ 103.497713][ T5021] EXT4-fs (loop9): Test dummy encryption mode enabled [ 103.511605][ T919] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 103.522105][ T919] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 103.542257][ T919] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 103.544049][ T5021] EXT4-fs error (device loop9): ext4_xattr_inode_iget:404: comm syz.9.1979: inode #1: comm syz.9.1979: iget: illegal inode # [ 103.551602][ T919] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 103.572652][ T919] usb 1-1: SerialNumber: syz [ 103.579384][ T5021] EXT4-fs error (device loop9): ext4_xattr_inode_iget:409: comm syz.9.1979: error while reading EA inode 1 err=-117 [ 103.615339][ T5021] EXT4-fs error (device loop9): ext4_xattr_inode_iget:404: comm syz.9.1979: inode #1: comm syz.9.1979: iget: illegal inode # [ 103.632783][ T5021] EXT4-fs error (device loop9): ext4_xattr_inode_iget:409: comm syz.9.1979: error while reading EA inode 1 err=-117 [ 103.645978][ T5021] EXT4-fs (loop9): 1 orphan inode deleted [ 103.651888][ T5021] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 103.708567][ T1871] EXT4-fs (loop9): unmounting filesystem. [ 103.743140][ T5037] loop1: detected capacity change from 0 to 1024 [ 103.781970][ T919] usb 1-1: 0:2 : does not exist [ 103.798059][ T919] usb 1-1: USB disconnect, device number 13 [ 103.808224][ T5037] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 103.837807][ T2514] EXT4-fs (loop1): unmounting filesystem. [ 103.907332][ T5057] loop1: detected capacity change from 0 to 512 [ 103.917188][ T5057] EXT4-fs: Ignoring removed orlov option [ 103.923815][ T5057] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 103.935881][ T5057] EXT4-fs (loop1): 1 orphan inode deleted [ 103.941813][ T5057] EXT4-fs (loop1): 1 truncate cleaned up [ 103.947663][ T5057] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 103.963337][ T5057] EXT4-fs error (device loop1): ext4_check_all_de:666: inode #12: block 7: comm syz.1.1994: bad entry in directory: rec_len is too small for name_len - offset=0, inode=13, rec_len=16, size=124 fake=0 [ 103.983454][ T5057] EXT4-fs (loop1): Remounting filesystem read-only [ 103.991916][ T5057] EXT4-fs error (device loop1): ext4_generic_delete_entry:2729: inode #12: block 7: comm syz.1.1994: bad entry in directory: rec_len is too small for name_len - offset=0, inode=13, rec_len=16, size=56 fake=0 [ 104.012696][ T5057] EXT4-fs (loop1): Remounting filesystem read-only [ 104.019496][ T5057] EXT4-fs error (device loop1) in ext4_delete_inline_entry:1804: Corrupt filesystem [ 104.029400][ T5057] EXT4-fs (loop1): Remounting filesystem read-only [ 104.039412][ T346] udevd[346]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 104.056056][ T2514] EXT4-fs (loop1): unmounting filesystem. [ 104.058702][ T6] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 104.081283][ T291] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 104.089452][ T1654] usb 9-1: language id specifier not provided by device, defaulting to English [ 104.201478][ T5060] loop1: detected capacity change from 0 to 40427 [ 104.209055][ T5060] F2FS-fs (loop1): fault_injection options not supported [ 104.218462][ T5060] F2FS-fs (loop1): invalid crc value [ 104.229307][ T5060] F2FS-fs (loop1): Found nat_bits in checkpoint [ 104.248773][ T6] usb 8-1: Using ep0 maxpacket: 32 [ 104.256985][ T6] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 104.268343][ T6] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 104.277043][ T5060] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 104.279035][ T6] usb 8-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 104.300220][ T1654] uclogic 0003:256C:006D.0023: failed retrieving Huion firmware version: -71 [ 104.309538][ T291] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 104.323602][ T2514] syz-executor: attempt to access beyond end of device [ 104.323602][ T2514] loop1: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 104.332520][ T1654] uclogic 0003:256C:006D.0023: failed probing parameters: -71 [ 104.347445][ T291] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 104.357235][ T5065] loop0: detected capacity change from 0 to 1024 [ 104.358366][ T6] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.371718][ T291] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 104.381685][ T5065] EXT4-fs: Ignoring removed nobh option [ 104.386539][ T1654] uclogic: probe of 0003:256C:006D.0023 failed with error -71 [ 104.403622][ T5065] EXT4-fs: Ignoring removed oldalloc option [ 104.413332][ T1654] usb 9-1: USB disconnect, device number 12 [ 104.421003][ T5065] EXT4-fs: Ignoring removed bh option [ 104.422635][ T6] usb 8-1: config 0 descriptor?? [ 104.435400][ T291] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 104.445623][ T291] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.455367][ T291] usb 10-1: config 0 descriptor?? [ 104.459756][ T5065] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a803c119, mo2=0102] [ 104.472335][ T5065] System zones: 0-1, 3-12 [ 104.477513][ T5065] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 104.615019][ T283] EXT4-fs (loop0): unmounting filesystem. [ 104.858959][ T6] savu 0003:1E7D:2D5A.0024: hiddev96,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.7-1/input0 [ 104.872426][ T291] plantronics 0003:047F:FFFF.0025: No inputs registered, leaving [ 104.888049][ T5075] loop0: detected capacity change from 0 to 40427 [ 104.895635][ T291] plantronics 0003:047F:FFFF.0025: hiddev97,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0 [ 104.918827][ T5075] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 104.926602][ T5075] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 104.953956][ T5083] loop8: detected capacity change from 0 to 512 [ 104.971424][ T5075] F2FS-fs (loop0): invalid crc value [ 104.979388][ T5083] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 104.995710][ T5075] F2FS-fs (loop0): Found nat_bits in checkpoint [ 105.005258][ T5083] EXT4-fs error (device loop8): ext4_validate_block_bitmap:438: comm syz.8.2003: bg 0: block 384: padding at end of block bitmap is not set [ 105.039166][ T5083] EXT4-fs (loop8): Remounting filesystem read-only [ 105.046150][ T5083] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 105.062708][ T5083] EXT4-fs (loop8): Remounting filesystem read-only [ 105.069779][ T5075] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 105.095790][ T5075] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 105.103398][ T5083] EXT4-fs error (device loop8): ext4_clear_blocks:883: inode #11: comm syz.8.2003: attempt to clear invalid blocks 983260 len 1 [ 105.126915][ T5083] EXT4-fs (loop8): Remounting filesystem read-only [ 105.133679][ T5083] EXT4-fs error (device loop8): __ext4_get_inode_loc:4508: comm syz.8.2003: Invalid inode table block 0 in block_group 0 [ 105.139669][ T5075] syz.0.2000: attempt to access beyond end of device [ 105.139669][ T5075] loop0: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 105.160327][ T5083] EXT4-fs (loop8): Remounting filesystem read-only [ 105.167235][ T5083] EXT4-fs error (device loop8) in ext4_reserve_inode_write:5887: Corrupt filesystem [ 105.169705][ T919] usb 8-1: USB disconnect, device number 16 [ 105.208271][ T5083] EXT4-fs (loop8): Remounting filesystem read-only [ 105.218024][ T283] syz-executor: attempt to access beyond end of device [ 105.218024][ T283] loop0: rw=2051, sector=45096, nr_sectors = 8 limit=40427 [ 105.232506][ T5083] EXT4-fs error (device loop8) in ext4_orphan_del:305: Corrupt filesystem [ 105.245561][ T291] usb 10-1: USB disconnect, device number 13 [ 105.255804][ T283] F2FS-fs (loop0): Issue discard(5637, 5637, 1) failed, ret: -5 [ 105.258854][ T5083] EXT4-fs (loop8): Remounting filesystem read-only [ 105.288676][ T5083] EXT4-fs error (device loop8): __ext4_get_inode_loc:4508: comm syz.8.2003: Invalid inode table block 0 in block_group 0 [ 105.321601][ T5083] EXT4-fs (loop8): Remounting filesystem read-only [ 105.328159][ T5083] EXT4-fs error (device loop8) in ext4_reserve_inode_write:5887: Corrupt filesystem [ 105.354526][ T5083] EXT4-fs (loop8): Remounting filesystem read-only [ 105.366254][ T5083] EXT4-fs error (device loop8): ext4_truncate:4313: inode #11: comm syz.8.2003: mark_inode_dirty error [ 105.378959][ T5083] EXT4-fs (loop8): Remounting filesystem read-only [ 105.385629][ T5083] EXT4-fs error (device loop8) in ext4_process_orphan:347: Corrupt filesystem [ 105.395012][ T5083] EXT4-fs (loop8): Remounting filesystem read-only [ 105.401698][ T5083] EXT4-fs (loop8): 1 truncate cleaned up [ 105.407365][ T5083] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 105.431422][ T5083] EXT4-fs error (device loop8): __ext4_get_inode_loc:4508: comm syz.8.2003: Invalid inode table block 0 in block_group 0 [ 105.445092][ T5083] EXT4-fs (loop8): Remounting filesystem read-only [ 105.456641][ T1154] EXT4-fs (loop8): unmounting filesystem. [ 105.475179][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 105.475195][ T28] audit: type=1400 audit(1748014662.377:2269): avc: denied { mount } for pid=5096 comm="syz.1.2007" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 105.516488][ T5099] loop8: detected capacity change from 0 to 256 [ 105.536695][ T28] audit: type=1400 audit(1748014662.437:2270): avc: denied { watch_reads } for pid=5098 comm="syz.8.2006" path="/356/file0/file0/file0" dev="loop8" ino=1048659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=file permissive=1 [ 105.556573][ T5103] overlayfs: invalid origin (000000790066696c6530000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 105.601488][ T5108] loop1: detected capacity change from 0 to 256 [ 105.612901][ T5108] FAT-fs (loop1): Directory bread(block 1285) failed [ 105.637766][ T5108] FAT-fs (loop1): FAT read failed (blocknr 1281) [ 105.790909][ T5133] loop7: detected capacity change from 0 to 512 [ 105.844824][ T5133] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 105.859416][ T5133] ext4 filesystem being mounted at /309/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 105.919452][ T1048] EXT4-fs (loop7): unmounting filesystem. [ 105.983598][ T5160] loop8: detected capacity change from 0 to 512 [ 106.003925][ T5160] EXT4-fs: Ignoring removed nobh option [ 106.011850][ T5160] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #11: comm syz.8.2035: invalid indirect mapped block 256 (level 2) [ 106.039504][ T5160] EXT4-fs (loop8): 2 truncates cleaned up [ 106.045493][ T5160] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 106.070346][ T5160] EXT4-fs error (device loop8): ext4_validate_block_bitmap:429: comm syz.8.2035: bg 0: block 5: invalid block bitmap [ 106.109088][ T5160] EXT4-fs warning (device loop8): ext4_block_to_path:107: block 3355443200 > max in inode 15 [ 106.120436][ T5160] EXT4-fs warning (device loop8): ext4_block_to_path:107: block 3355443201 > max in inode 15 [ 106.130717][ T28] audit: type=1400 audit(1748014663.027:2271): avc: denied { getopt } for pid=5172 comm="syz.9.2041" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 106.189492][ T1154] EXT4-fs (loop8): unmounting filesystem. [ 106.301380][ T5194] loop8: detected capacity change from 0 to 256 [ 106.422857][ T5211] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.433451][ T5211] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.473479][ T5211] device sit0 left promiscuous mode [ 106.479654][ T5211] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 106.486929][ T5211] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 106.495651][ T5211] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.502727][ T5211] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.510708][ T5211] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.517736][ T5211] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.577515][ T602] Bluetooth: hci0: Frame reassembly failed (-84) [ 106.598765][ T291] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 106.608237][ T5220] Dead loop on virtual device ip6_vti0, fix it urgently! [ 106.618539][ T5222] loop1: detected capacity change from 0 to 512 [ 106.645437][ T5222] EXT4-fs (loop1): Test dummy encryption mode enabled [ 106.654358][ T5222] EXT4-fs error (device loop1): __ext4_iget:5057: inode #11: block 1: comm syz.1.2063: invalid block [ 106.671161][ T5222] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.2063: couldn't read orphan inode 11 (err -117) [ 106.680632][ T5229] input: syz1 as /devices/virtual/input/input40 [ 106.685667][ T5222] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 106.721165][ T28] audit: type=1400 audit(1748014663.627:2272): avc: denied { create } for pid=5221 comm="syz.1.2063" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 106.739129][ T5222] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 216 vs 220 free clusters [ 106.792894][ T291] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 106.812018][ T291] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 170, changing to 11 [ 106.823636][ T291] usb 1-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 106.824300][ T2514] EXT4-fs (loop1): unmounting filesystem. [ 106.838047][ T291] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 106.851723][ T291] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.869533][ T291] usb 1-1: Product: syz [ 106.874120][ T291] usb 1-1: Manufacturer: syz [ 106.884197][ T291] usb 1-1: SerialNumber: syz [ 107.019641][ T28] audit: type=1400 audit(1748014663.927:2273): avc: denied { accept } for pid=5249 comm="syz.7.2076" path="socket:[39200]" dev="sockfs" ino=39200 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 107.158005][ T5256] loop9: detected capacity change from 0 to 8192 [ 107.176706][ T5256] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 107.183169][ T5248] loop1: detected capacity change from 0 to 40427 [ 107.198764][ T28] audit: type=1400 audit(1748014664.097:2274): avc: denied { mounton } for pid=5255 comm="syz.9.2079" path="/266/file0/bus" dev="loop9" ino=1048660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=file permissive=1 [ 107.199645][ T5248] F2FS-fs (loop1): Wrong segment_count / block_count (31 > 0) [ 107.245907][ T5248] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 107.278466][ T5248] F2FS-fs (loop1): invalid crc value [ 107.287659][ T5248] F2FS-fs (loop1): Found nat_bits in checkpoint [ 107.325582][ T5248] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 107.332812][ T5248] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 107.381224][ T5248] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2075'. [ 107.609199][ T5277] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.616481][ T5277] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.624160][ T5277] device bridge_slave_0 entered promiscuous mode [ 107.633812][ T5277] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.640002][ T5276] loop1: detected capacity change from 0 to 40427 [ 107.640987][ T5277] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.651390][ T5276] F2FS-fs (loop1): fault_injection options not supported [ 107.655956][ T5277] device bridge_slave_1 entered promiscuous mode [ 107.662482][ T5276] F2FS-fs (loop1): invalid crc value [ 107.677975][ T5276] F2FS-fs (loop1): Found nat_bits in checkpoint [ 107.711590][ T5276] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 107.748768][ T6] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 107.781999][ T5277] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.789132][ T5277] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.796410][ T5277] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.803481][ T5277] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.840157][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 107.848228][ T304] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.855763][ T304] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.875308][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 107.883722][ T304] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.890828][ T304] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.899018][ T291] cdc_ncm 1-1:1.0: bind() failure [ 107.900932][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 107.905725][ T291] cdc_ncm: probe of 1-1:1.1 failed with error -71 [ 107.912664][ T304] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.925641][ T304] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.928699][ T291] cdc_mbim: probe of 1-1:1.1 failed with error -71 [ 107.941639][ T291] usb 1-1: USB disconnect, device number 14 [ 107.949940][ T6] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 107.960881][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 107.967202][ T6] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 107.978269][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 107.986209][ T6] usb 8-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 107.996163][ T6] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 108.004292][ T6] usb 8-1: SerialNumber: syz [ 108.009673][ T602] device bridge_slave_1 left promiscuous mode [ 108.019052][ T602] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.036287][ T602] device bridge_slave_0 left promiscuous mode [ 108.042591][ T602] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.050220][ T2514] syz-executor: attempt to access beyond end of device [ 108.050220][ T2514] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 108.065238][ T602] device veth1_macvtap left promiscuous mode [ 108.071360][ T602] device veth0_vlan left promiscuous mode [ 108.207136][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 108.221380][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 108.230165][ T6] usb 8-1: 0:2 : does not exist [ 108.238240][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 108.249033][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 108.256308][ T6] usb 8-1: 5:0: failed to get current value for ch 0 (-22) [ 108.264211][ T5277] device veth0_vlan entered promiscuous mode [ 108.274847][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 108.287101][ T6] usb 8-1: USB disconnect, device number 17 [ 108.293196][ T5277] device veth1_macvtap entered promiscuous mode [ 108.305487][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 108.315443][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 108.518678][ T24] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 108.526401][ T28] audit: type=1400 audit(1748014665.427:2275): avc: denied { connect } for pid=5306 comm="syz.2.2101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 108.578711][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 108.579833][ T1271] Bluetooth: hci0: command 0x1003 tx timeout [ 108.729812][ T24] usb 2-1: config 0 has an invalid interface number: 156 but max is 0 [ 108.738349][ T24] usb 2-1: config 0 has no interface number 0 [ 108.744732][ T24] usb 2-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 108.768860][ T24] usb 2-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 108.796179][ T24] usb 2-1: config 0 interface 156 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 108.816301][ T24] usb 2-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 108.826582][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.848753][ T24] usb 2-1: config 0 descriptor?? [ 108.857124][ T24] usb 2-1: MIDIStreaming interface descriptor not found [ 108.875459][ T24] snd-usb-audio: probe of 2-1:0.156 failed with error -12 [ 108.891211][ T346] udevd[346]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.156/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 108.932526][ T5356] incfs: iterate_incfs_dir / -22 [ 108.937721][ T5356] incfs: iterate_incfs_dir / -22 [ 109.035081][ T5367] kvm [5366]: vcpu0, guest rIP: 0xfff0 unimplemented HWCR wrmsr: 0x200000000a80 [ 109.065686][ T6] usb 2-1: USB disconnect, device number 17 [ 109.118454][ T5376] loop8: detected capacity change from 0 to 128 [ 109.124869][ T314] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 109.136593][ T5378] xt_hashlimit: size too large, truncated to 1048576 [ 109.148561][ T5376] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 109.245351][ T28] audit: type=1400 audit(1748014666.147:2276): avc: denied { unmount } for pid=1154 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 109.308750][ T314] usb 1-1: Using ep0 maxpacket: 8 [ 109.315147][ T314] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 109.361454][ T314] usb 1-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 109.371328][ T314] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.379490][ T314] usb 1-1: Product: syz [ 109.383811][ T314] usb 1-1: Manufacturer: syz [ 109.388413][ T314] usb 1-1: SerialNumber: syz [ 109.397966][ T314] usb 1-1: config 0 descriptor?? [ 109.466484][ T5403] tipc: Started in network mode [ 109.473343][ T5403] tipc: Node identity 7, cluster identity 4711 [ 109.475796][ T5405] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2142'. [ 109.479657][ T5403] tipc: Node number set to 7 [ 109.516461][ T28] audit: type=1400 audit(1748014666.417:2277): avc: denied { mount } for pid=5406 comm="syz.2.2144" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 109.554363][ T28] audit: type=1400 audit(1748014666.457:2278): avc: denied { bind } for pid=5410 comm="syz.2.2145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 109.626464][ T314] usb 1-1: USB disconnect, device number 15 [ 109.685906][ T5432] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2154'. [ 109.691518][ T5434] loop1: detected capacity change from 0 to 512 [ 109.714639][ T5434] EXT4-fs (loop1): 1 orphan inode deleted [ 109.721281][ T5434] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 109.730581][ T5434] ext4 filesystem being mounted at /213/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 109.730747][ T588] EXT4-fs error (device loop1): ext4_release_dquot:6812: comm kworker/u4:5: Failed to release dquot type 1 [ 109.769238][ T2514] EXT4-fs (loop1): unmounting filesystem. [ 109.982369][ T5458] loop7: detected capacity change from 0 to 512 [ 110.010514][ T5458] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 110.032475][ T5458] ext4 filesystem being mounted at /349/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 110.086060][ T1048] EXT4-fs (loop7): unmounting filesystem. [ 110.207074][ T5483] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=5483 comm=syz.7.2180 [ 110.219867][ T5483] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2180'. [ 110.335023][ T5496] loop1: detected capacity change from 0 to 512 [ 110.350637][ T5496] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 110.359825][ T5496] ext4 filesystem being mounted at /219/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 110.388571][ T2514] EXT4-fs (loop1): unmounting filesystem. [ 110.891153][ T5510] loop0: detected capacity change from 0 to 128 [ 110.895666][ T103] udevd[103]: worker [581] terminated by signal 33 (Unknown signal 33) [ 110.907171][ T103] udevd[103]: worker [581] failed while handling '/devices/virtual/block/loop2' [ 111.148888][ T6] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 111.273977][ T5522] incfs: Options parsing error. -22 [ 111.285086][ T5522] incfs: mount failed -22 [ 111.307152][ T24] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 111.320386][ T5529] loop8: detected capacity change from 0 to 2048 [ 111.327034][ T24] hid-generic 0000:0000:0000.0026: hidraw0: HID v0.00 Device [syz1] on syz0 [ 111.328717][ T6] usb 3-1: Using ep0 maxpacket: 8 [ 111.352027][ T6] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 111.381216][ T6] usb 3-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 111.393057][ T6] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.401496][ T6] usb 3-1: Product: syz [ 111.405849][ T6] usb 3-1: Manufacturer: syz [ 111.410578][ T6] usb 3-1: SerialNumber: syz [ 111.416008][ T6] usb 3-1: config 0 descriptor?? [ 111.642865][ T919] usb 3-1: USB disconnect, device number 2 [ 111.738738][ T24] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 111.785161][ T5542] loop0: detected capacity change from 0 to 128 [ 111.791865][ T5542] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 111.929726][ T24] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 111.939900][ T24] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 170, changing to 11 [ 111.951164][ T24] usb 9-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 111.965354][ T24] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 111.974463][ T24] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.982459][ T24] usb 9-1: Product: syz [ 111.986613][ T24] usb 9-1: Manufacturer: syz [ 111.991219][ T24] usb 9-1: SerialNumber: syz [ 112.118684][ T291] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 112.298776][ T291] usb 1-1: Using ep0 maxpacket: 32 [ 112.305300][ T291] usb 1-1: config 4 has an invalid interface number: 128 but max is 0 [ 112.328684][ T291] usb 1-1: config 4 has no interface number 0 [ 112.335350][ T291] usb 1-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 112.360950][ T291] usb 1-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 112.380796][ T291] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 112.391115][ T291] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.402113][ T291] hub 1-1:4.128: USB hub found [ 112.428786][ T6] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 112.602675][ T291] hub 1-1:4.128: 2 ports detected [ 112.607748][ T291] hub 1-1:4.128: Using single TT (err -22) [ 112.614723][ T6] usb 3-1: config 0 has an invalid interface number: 156 but max is 0 [ 112.622995][ T6] usb 3-1: config 0 has no interface number 0 [ 112.629172][ T6] usb 3-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 112.640294][ T6] usb 3-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 112.650258][ T6] usb 3-1: config 0 interface 156 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 112.660299][ T6] usb 3-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 112.668749][ T919] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 112.669503][ T6] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.686271][ T6] usb 3-1: config 0 descriptor?? [ 112.692907][ T6] usb 3-1: MIDIStreaming interface descriptor not found [ 112.702960][ T6] snd-usb-audio: probe of 3-1:0.156 failed with error -12 [ 112.718675][ T386] udevd[386]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.156/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 112.803674][ T291] hub 1-1:4.128: hub_hub_status failed (err = -71) [ 112.810361][ T291] hub 1-1:4.128: config failed, can't get hub status (err -71) [ 112.849095][ T291] usb 1-1: USB disconnect, device number 16 [ 112.849872][ T919] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 112.866386][ T919] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 112.876236][ T919] usb 8-1: New USB device found, idVendor=172f, idProduct=0500, bcdDevice= 0.00 [ 112.885510][ T919] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.897010][ T919] usb 8-1: config 0 descriptor?? [ 112.911235][ T319] usb 3-1: USB disconnect, device number 3 [ 113.001319][ T24] cdc_ncm 9-1:1.0: bind() failure [ 113.007348][ T24] cdc_ncm: probe of 9-1:1.1 failed with error -71 [ 113.014310][ T24] cdc_mbim: probe of 9-1:1.1 failed with error -71 [ 113.021979][ T24] usb 9-1: USB disconnect, device number 13 [ 113.305360][ T919] waltop 0003:172F:0500.0027: item fetching failed at offset 5/7 [ 113.313369][ T919] waltop: probe of 0003:172F:0500.0027 failed with error -22 [ 113.445684][ T5597] loop0: detected capacity change from 0 to 256 [ 113.452835][ T5597] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 113.465222][ T5597] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 113.516323][ T919] usb 8-1: USB disconnect, device number 18 [ 113.530572][ T5605] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2227'. [ 113.541093][ T5605] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2227'. [ 113.551935][ T5605] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2227'. [ 113.561179][ T5605] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2227'. [ 113.808732][ T291] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 113.816408][ T319] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 113.998758][ T291] usb 9-1: Using ep0 maxpacket: 32 [ 114.005244][ T319] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 114.015372][ T291] usb 9-1: config 4 has an invalid interface number: 128 but max is 0 [ 114.023736][ T319] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 170, changing to 11 [ 114.034932][ T291] usb 9-1: config 4 has no interface number 0 [ 114.041163][ T291] usb 9-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 114.054300][ T319] usb 2-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 114.068373][ T5608] loop0: detected capacity change from 0 to 128 [ 114.074753][ T291] usb 9-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 114.085137][ T5608] EXT4-fs: Ignoring removed nobh option [ 114.090891][ T291] usb 9-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 114.100186][ T291] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.109495][ T319] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 114.118563][ T319] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.127438][ T5608] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 114.136300][ T319] usb 2-1: Product: syz [ 114.138750][ T5608] ext4 filesystem being mounted at /523/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 114.141155][ T291] hub 9-1:4.128: USB hub found [ 114.156030][ T319] usb 2-1: Manufacturer: syz [ 114.160754][ T319] usb 2-1: SerialNumber: syz [ 114.168968][ T5608] fscrypt (loop0, inode 12): Mutually exclusive encryption flags (0x16) [ 114.183152][ T283] EXT4-fs (loop0): unmounting filesystem. [ 114.231259][ T5620] loop0: detected capacity change from 0 to 512 [ 114.271672][ T5620] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 114.280878][ T5620] ext4 filesystem being mounted at /525/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 114.330315][ T283] EXT4-fs (loop0): unmounting filesystem. [ 114.342248][ T291] hub 9-1:4.128: 2 ports detected [ 114.347387][ T291] hub 9-1:4.128: Using single TT (err -22) [ 114.488268][ T5642] loop0: detected capacity change from 0 to 16 [ 114.502312][ T5626] loop7: detected capacity change from 0 to 40427 [ 114.510220][ T5626] F2FS-fs (loop7): invalid crc value [ 114.515825][ T5642] erofs: (device loop0): mounted with root inode @ nid 36. [ 114.531983][ T5626] F2FS-fs (loop7): Found nat_bits in checkpoint [ 114.532860][ T5642] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 114.550707][ T291] hub 9-1:4.128: hub_hub_status failed (err = -71) [ 114.557286][ T291] hub 9-1:4.128: config failed, can't get hub status (err -71) [ 114.565670][ T5626] F2FS-fs (loop7): Start checkpoint disabled! [ 114.568552][ T5642] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -29 in[58, 4038] out[1851] [ 114.583261][ T5642] erofs: (device loop0): z_erofs_read_folio: failed to read, err [-117] [ 114.584096][ T5626] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e6 [ 114.592499][ T291] usb 9-1: USB disconnect, device number 14 [ 114.605911][ T5645] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 114.628828][ T5645] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 114.640586][ T5645] erofs: (device loop0): z_erofs_readahead: readahead error at page 42 @ nid 36 [ 114.649734][ T5645] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 114.695583][ T5645] erofs: (device loop0): z_erofs_readahead: readahead error at page 41 @ nid 36 [ 114.705023][ T5645] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 114.714476][ T5645] erofs: (device loop0): z_erofs_readahead: readahead error at page 40 @ nid 36 [ 114.723613][ T5645] erofs: (device loop0): z_erofs_readahead: readahead error at page 39 @ nid 36 [ 114.730547][ T602] kworker/u4:6: attempt to access beyond end of device [ 114.730547][ T602] loop7: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 114.732854][ T5645] erofs: (device loop0): z_erofs_readahead: readahead error at page 38 @ nid 36 [ 114.757732][ T5645] erofs: (device loop0): z_erofs_readahead: readahead error at page 36 @ nid 36 [ 114.767644][ T5645] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 114.776976][ T5645] erofs: (device loop0): z_erofs_readahead: readahead error at page 31 @ nid 36 [ 114.788904][ T5645] erofs: (device loop0): z_erofs_readahead: readahead error at page 25 @ nid 36 [ 114.798329][ T5645] erofs: (device loop0): z_erofs_readahead: readahead error at page 24 @ nid 36 [ 114.818490][ T5645] erofs: (device loop0): z_erofs_readahead: readahead error at page 19 @ nid 36 [ 114.827780][ T5645] syz.0.2243: attempt to access beyond end of device [ 114.827780][ T5645] loop0: rw=524288, sector=784, nr_sectors = 64 limit=16 [ 114.842006][ T5645] syz.0.2243: attempt to access beyond end of device [ 114.842006][ T5645] loop0: rw=524288, sector=13478624080, nr_sectors = 24 limit=16 [ 114.868718][ T5645] syz.0.2243: attempt to access beyond end of device [ 114.868718][ T5645] loop0: rw=524288, sector=13478624032, nr_sectors = 48 limit=16 [ 114.883408][ T5645] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -29 in[58, 4038] out[2639] [ 114.903573][ T5645] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 114.922638][ T5657] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 114.924118][ T5645] erofs: (device loop0): z_erofs_readahead: readahead error at page 47 @ nid 36 [ 114.932564][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 114.932577][ T28] audit: type=1400 audit(1748014671.837:2280): avc: denied { relabelto } for pid=5656 comm="syz.7.2247" name="365" dev="tmpfs" ino=1924 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 114.941617][ T5645] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 114.984584][ T28] audit: type=1400 audit(1748014671.847:2281): avc: denied { associate } for pid=5656 comm="syz.7.2247" name="365" dev="tmpfs" ino=1924 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:fsadm_exec_t:s0" [ 115.011952][ T5645] erofs: (device loop0): z_erofs_readahead: readahead error at page 46 @ nid 36 [ 115.021266][ T5645] erofs: (device loop0): z_erofs_readahead: readahead error at page 45 @ nid 36 [ 115.031465][ T5645] syz.0.2243: attempt to access beyond end of device [ 115.031465][ T5645] loop0: rw=524288, sector=24, nr_sectors = 8 limit=16 [ 115.045086][ T5645] syz.0.2243: attempt to access beyond end of device [ 115.045086][ T5645] loop0: rw=524288, sector=16, nr_sectors = 8 limit=16 [ 115.049464][ T28] audit: type=1400 audit(1748014671.947:2282): avc: denied { write } for pid=1048 comm="syz-executor" name="365" dev="tmpfs" ino=1924 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 115.059062][ T5645] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -29 in[58, 4038] out[3537] [ 115.092970][ T28] audit: type=1400 audit(1748014671.987:2283): avc: denied { remove_name } for pid=1048 comm="syz-executor" name="binderfs" dev="tmpfs" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 115.148404][ T28] audit: type=1400 audit(1748014671.987:2284): avc: denied { rmdir } for pid=1048 comm="syz-executor" name="365" dev="tmpfs" ino=1924 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 115.202871][ T5665] loop7: detected capacity change from 0 to 512 [ 115.221789][ T319] cdc_ncm 2-1:1.0: bind() failure [ 115.230010][ T319] cdc_ncm: probe of 2-1:1.1 failed with error -71 [ 115.242363][ T319] cdc_mbim: probe of 2-1:1.1 failed with error -71 [ 115.250648][ T319] usb 2-1: USB disconnect, device number 18 [ 115.263084][ T5665] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 115.272150][ T5665] ext4 filesystem being mounted at /368/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 115.301705][ T5665] Quota error (device loop7): write_blk: dquota write failed [ 115.309302][ T5665] Quota error (device loop7): qtree_write_dquot: Error -28 occurred while creating quota [ 115.320410][ T5665] EXT4-fs error (device loop7): ext4_acquire_dquot:6789: comm syz.7.2253: Failed to acquire dquot type 1 [ 115.342446][ T1048] EXT4-fs (loop7): unmounting filesystem. [ 115.453340][ T5697] loop7: detected capacity change from 0 to 128 [ 115.470654][ T103] udevd[103]: worker [4586] terminated by signal 33 (Unknown signal 33) [ 115.479603][ T103] udevd[103]: worker [4586] failed while handling '/devices/virtual/block/loop7' [ 115.590883][ T5706] netem: change failed [ 115.658762][ T291] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 115.838739][ T291] usb 3-1: Using ep0 maxpacket: 32 [ 115.845050][ T291] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 115.856020][ T291] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 115.865848][ T291] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 115.875022][ T291] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.884019][ T291] usb 3-1: config 0 descriptor?? [ 116.008957][ T919] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 116.124432][ T602] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 116.150591][ T5728] loop0: detected capacity change from 0 to 128 [ 116.188810][ T919] usb 2-1: Using ep0 maxpacket: 16 [ 116.195705][ T919] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 116.207620][ T5728] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 116.216141][ T919] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 116.227466][ T5728] ext4 filesystem being mounted at /531/file supports timestamps until 2038-01-19 (0x7fffffff) [ 116.238013][ T919] usb 2-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 116.247201][ T919] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.271296][ T919] usb 2-1: config 0 descriptor?? [ 116.279748][ T28] audit: type=1400 audit(1748014673.187:2285): avc: denied { execute } for pid=5726 comm="syz.0.2280" name="file1" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 116.302565][ T28] audit: type=1400 audit(1748014673.207:2286): avc: denied { execute_no_trans } for pid=5726 comm="syz.0.2280" path="/531/file/file1" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 116.305069][ T291] savu 0003:1E7D:2D5A.0028: hiddev96,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0 [ 116.345632][ T283] EXT4-fs (loop0): unmounting filesystem. [ 116.348886][ T5729] loop7: detected capacity change from 0 to 40427 [ 116.359267][ T5729] F2FS-fs (loop7): fault_injection options not supported [ 116.386490][ T5729] F2FS-fs (loop7): invalid crc value [ 116.418667][ T5729] F2FS-fs (loop7): Found nat_bits in checkpoint [ 116.471315][ T5729] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 116.575369][ T28] audit: type=1400 audit(1748014673.477:2287): avc: denied { getopt } for pid=5747 comm="syz.0.2286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 116.630841][ T602] kworker/u4:6: attempt to access beyond end of device [ 116.630841][ T602] loop7: rw=1, sector=77824, nr_sectors = 2056 limit=40427 [ 116.664306][ T602] kworker/u4:6: attempt to access beyond end of device [ 116.664306][ T602] loop7: rw=1, sector=79880, nr_sectors = 2040 limit=40427 [ 116.695607][ T602] kworker/u4:6: attempt to access beyond end of device [ 116.695607][ T602] loop7: rw=1, sector=49152, nr_sectors = 2408 limit=40427 [ 116.710608][ T602] kworker/u4:6: attempt to access beyond end of device [ 116.710608][ T602] loop7: rw=1, sector=51560, nr_sectors = 8 limit=40427 [ 116.712435][ T60] usb 3-1: USB disconnect, device number 4 [ 116.744886][ T919] appleir 0003:05AC:8241.0029: unknown main item tag 0x0 [ 116.761392][ T919] appleir 0003:05AC:8241.0029: unknown main item tag 0x0 [ 116.768549][ T919] appleir 0003:05AC:8241.0029: unknown main item tag 0x0 [ 116.786461][ T919] appleir 0003:05AC:8241.0029: unknown main item tag 0x0 [ 116.788480][ T5757] loop8: detected capacity change from 0 to 256 [ 116.799900][ T919] appleir 0003:05AC:8241.0029: unknown main item tag 0x0 [ 116.803989][ T5757] exfat: Deprecated parameter 'utf8' [ 116.812681][ T919] appleir 0003:05AC:8241.0029: No inputs registered, leaving [ 116.830447][ T919] appleir 0003:05AC:8241.0029: hiddev96,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.1-1/input0 [ 116.847071][ T5757] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0xf6dff195, utbl_chksum : 0xe619d30d) [ 117.024422][ T5768] loop8: detected capacity change from 0 to 512 [ 117.045127][ T5768] EXT4-fs: Ignoring removed orlov option [ 117.059015][ T5768] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 117.059717][ T60] usb 2-1: USB disconnect, device number 19 [ 117.093282][ T5768] EXT4-fs (loop8): 1 orphan inode deleted [ 117.108694][ T5768] EXT4-fs (loop8): 1 truncate cleaned up [ 117.115966][ T5768] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 117.134921][ T5768] EXT4-fs error (device loop8): ext4_check_all_de:666: inode #12: block 7: comm syz.8.2305: bad entry in directory: rec_len is too small for name_len - offset=0, inode=13, rec_len=16, size=124 fake=0 [ 117.155091][ T5768] EXT4-fs (loop8): Remounting filesystem read-only [ 117.164233][ T5768] EXT4-fs error (device loop8): ext4_generic_delete_entry:2729: inode #12: block 7: comm syz.8.2305: bad entry in directory: rec_len is too small for name_len - offset=0, inode=13, rec_len=16, size=56 fake=0 [ 117.195278][ T5768] EXT4-fs (loop8): Remounting filesystem read-only [ 117.202108][ T5768] EXT4-fs error (device loop8) in ext4_delete_inline_entry:1804: Corrupt filesystem [ 117.211838][ T5768] EXT4-fs (loop8): Remounting filesystem read-only [ 117.229528][ T1154] EXT4-fs (loop8): unmounting filesystem. [ 117.374836][ T5794] loop7: detected capacity change from 0 to 1024 [ 117.413831][ T5794] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 117.459857][ T1048] EXT4-fs (loop7): unmounting filesystem. [ 117.556836][ T5792] loop8: detected capacity change from 0 to 40427 [ 117.564094][ T5792] F2FS-fs (loop8): fault_injection options not supported [ 117.578767][ T5792] F2FS-fs (loop8): invalid crc value [ 117.593312][ T5792] F2FS-fs (loop8): Found nat_bits in checkpoint [ 117.659186][ T5792] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 117.700553][ T5803] loop7: detected capacity change from 0 to 40427 [ 117.707810][ T5803] F2FS-fs (loop7): fault_injection options not supported [ 117.715787][ T5803] F2FS-fs (loop7): invalid crc value [ 117.739497][ T5803] F2FS-fs (loop7): Found nat_bits in checkpoint [ 117.787231][ T5803] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 117.808714][ T60] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 117.844211][ T5821] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 117.854474][ T5821] FAT-fs (loop3): unable to read boot sector [ 117.988750][ T60] usb 3-1: Using ep0 maxpacket: 32 [ 117.995083][ T60] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 118.026732][ T60] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 118.069195][ T60] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 118.097858][ T60] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.129109][ T60] usb 3-1: config 0 descriptor?? [ 118.175620][ T5840] loop0: detected capacity change from 0 to 256 [ 118.185333][ T5840] exfat: Deprecated parameter 'utf8' [ 118.201954][ T5840] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xf6dff195, utbl_chksum : 0xe619d30d) [ 118.458678][ T24] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 118.540159][ T60] savu 0003:1E7D:2D5A.002A: hiddev96,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0 [ 118.554269][ T5854] loop0: detected capacity change from 0 to 40427 [ 118.568033][ T5854] F2FS-fs (loop0): fault_injection options not supported [ 118.578599][ T5854] F2FS-fs (loop0): invalid crc value [ 118.578699][ T919] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 118.596102][ T5854] F2FS-fs (loop0): Found nat_bits in checkpoint [ 118.635194][ T5827] loop1: detected capacity change from 0 to 131072 [ 118.647132][ T5827] F2FS-fs (loop1): invalid crc value [ 118.656517][ T5854] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 118.668962][ T24] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 118.691098][ T24] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 118.700191][ T5827] F2FS-fs (loop1): Found nat_bits in checkpoint [ 118.702069][ T24] usb 9-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 118.716330][ T24] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.736361][ T24] usb 9-1: config 0 descriptor?? [ 118.768759][ T5827] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 118.780799][ T919] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 118.791250][ T919] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 170, changing to 11 [ 118.808782][ T919] usb 8-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 118.825197][ T60] usb 3-1: USB disconnect, device number 5 [ 118.833842][ T919] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 118.843766][ T919] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.855834][ T919] usb 8-1: Product: syz [ 118.867099][ T919] usb 8-1: Manufacturer: syz [ 118.871861][ T919] usb 8-1: SerialNumber: syz [ 119.154468][ T24] arvo 0003:1E7D:30D4.002B: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.8-1/input0 [ 119.354138][ T24] arvo 0003:1E7D:30D4.002B: couldn't init struct arvo_device [ 119.368731][ T24] arvo 0003:1E7D:30D4.002B: couldn't install keyboard [ 119.385660][ T24] arvo: probe of 0003:1E7D:30D4.002B failed with error -71 [ 119.400764][ T24] usb 9-1: USB disconnect, device number 15 [ 119.436637][ T5877] fido_id[5877]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory [ 119.882105][ T919] cdc_ncm 8-1:1.0: bind() failure [ 119.897341][ T919] cdc_ncm: probe of 8-1:1.1 failed with error -71 [ 119.919123][ T919] cdc_mbim: probe of 8-1:1.1 failed with error -71 [ 119.939671][ T919] usb 8-1: USB disconnect, device number 19 [ 119.986785][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 119.986803][ T28] audit: type=1326 audit(1748014676.887:2292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5884 comm="syz.1.2339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0e2f8e969 code=0x7ffc0000 [ 120.028990][ T28] audit: type=1326 audit(1748014676.917:2293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5884 comm="syz.1.2339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe0e2f2ab39 code=0x7ffc0000 [ 120.057381][ T28] audit: type=1326 audit(1748014676.917:2294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5884 comm="syz.1.2339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0e2f8e969 code=0x7ffc0000 [ 120.081233][ T28] audit: type=1326 audit(1748014676.917:2295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5884 comm="syz.1.2339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0e2f8e969 code=0x7ffc0000 [ 120.128716][ T28] audit: type=1326 audit(1748014676.917:2296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5884 comm="syz.1.2339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0e2f8e969 code=0x7ffc0000 [ 120.172911][ T28] audit: type=1326 audit(1748014676.917:2297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5884 comm="syz.1.2339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0e2f8e969 code=0x7ffc0000 [ 120.206965][ T28] audit: type=1326 audit(1748014676.917:2298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5884 comm="syz.1.2339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe0e2f2ab39 code=0x7ffc0000 [ 120.232091][ T28] audit: type=1326 audit(1748014676.917:2299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5884 comm="syz.1.2339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0e2f8e969 code=0x7ffc0000 [ 120.258792][ T28] audit: type=1326 audit(1748014676.917:2300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5884 comm="syz.1.2339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe0e2f2ab39 code=0x7ffc0000 [ 120.284447][ T28] audit: type=1326 audit(1748014676.927:2301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5884 comm="syz.1.2339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0e2f8e969 code=0x7ffc0000 [ 120.644042][ T5955] Dead loop on virtual device ip6_vti0, fix it urgently! [ 120.693928][ T5961] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.754689][ T5961] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.801513][ T5971] device sit0 left promiscuous mode [ 120.823587][ T5971] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 120.862989][ T5971] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 120.878575][ T5971] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.885714][ T5971] bridge0: port 1(bridge_slave_0) entered forwarding state [ 120.896335][ T5971] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.903465][ T5971] bridge0: port 2(bridge_slave_1) entered forwarding state [ 120.921498][ T5974] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2376'. [ 120.948955][ T6] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 121.278689][ T319] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 121.368209][ T6039] loop8: detected capacity change from 0 to 1024 [ 121.385256][ T6039] EXT4-fs (loop8): can't read group descriptor 0 [ 121.409308][ T291] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 121.478766][ T319] usb 1-1: Using ep0 maxpacket: 16 [ 121.485350][ T319] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 121.521162][ T319] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 121.536557][ T319] usb 1-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 121.550420][ T319] usb 1-1: config 0 interface 0 has no altsetting 0 [ 121.558682][ T319] usb 1-1: New USB device found, idVendor=045e, idProduct=05da, bcdDevice= 0.00 [ 121.576589][ T319] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.599386][ T319] usb 1-1: config 0 descriptor?? [ 121.633137][ T602] Bluetooth: hci0: Frame reassembly failed (-84) [ 121.725943][ T6069] loop7: detected capacity change from 0 to 40427 [ 121.733440][ T6069] F2FS-fs (loop7): Wrong segment_count / block_count (31 > 0) [ 121.741148][ T6069] F2FS-fs (loop7): Can't find valid F2FS filesystem in 2th superblock [ 121.754430][ T6069] F2FS-fs (loop7): invalid crc value [ 121.761112][ T6069] F2FS-fs (loop7): Found nat_bits in checkpoint [ 121.787420][ T6069] F2FS-fs (loop7): Try to recover 2th superblock, ret: 0 [ 121.794624][ T6069] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 121.829236][ T6069] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2423'. [ 121.858690][ T2740] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 121.889382][ T6079] loop7: detected capacity change from 0 to 256 [ 121.996564][ T6091] loop7: detected capacity change from 0 to 8192 [ 122.004374][ T6091] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 122.018040][ T319] hid-generic 0003:045E:05DA.002C: unknown main item tag 0x0 [ 122.025562][ T319] hid-generic 0003:045E:05DA.002C: unknown main item tag 0x0 [ 122.033222][ T319] hid-generic 0003:045E:05DA.002C: unknown main item tag 0x0 [ 122.047430][ T319] hid-generic 0003:045E:05DA.002C: ignoring exceeding usage max [ 122.049702][ T2740] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 122.061995][ T319] hid-generic 0003:045E:05DA.002C: unknown main item tag 0x0 [ 122.072575][ T2740] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 122.083575][ T2740] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 122.096829][ T319] hid-generic 0003:045E:05DA.002C: unknown main item tag 0x0 [ 122.096827][ T2740] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 122.096853][ T2740] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.113491][ T319] hid-generic 0003:045E:05DA.002C: unbalanced collection at end of report description [ 122.135245][ T319] hid-generic: probe of 0003:045E:05DA.002C failed with error -22 [ 122.138762][ T2740] usb 3-1: config 0 descriptor?? [ 122.230435][ T919] usb 1-1: USB disconnect, device number 17 [ 122.307148][ T6106] loop1: detected capacity change from 0 to 512 [ 122.313883][ T6106] EXT4-fs: Ignoring removed orlov option [ 122.328832][ T6106] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 122.359564][ T6106] EXT4-fs (loop1): 1 orphan inode deleted [ 122.365450][ T6106] EXT4-fs (loop1): 1 truncate cleaned up [ 122.371233][ T6106] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 122.386684][ T6106] EXT4-fs error (device loop1): ext4_lookup:1858: inode #15: comm syz.1.2443: iget: bad extra_isize 46 (inode size 256) [ 122.404306][ T6106] EXT4-fs (loop1): Remounting filesystem read-only [ 122.411588][ T6107] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.418776][ T6107] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.420029][ T2514] EXT4-fs (loop1): unmounting filesystem. [ 122.426374][ T6107] device bridge_slave_0 entered promiscuous mode [ 122.442060][ T6107] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.451782][ T6107] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.459398][ T6107] device bridge_slave_1 entered promiscuous mode [ 122.523897][ T6107] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.531020][ T6107] bridge0: port 2(bridge_slave_1) entered forwarding state [ 122.538282][ T6107] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.545367][ T6107] bridge0: port 1(bridge_slave_0) entered forwarding state [ 122.573629][ T602] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 122.581487][ T602] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.583244][ T2740] plantronics 0003:047F:FFFF.002D: No inputs registered, leaving [ 122.596460][ T602] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.605340][ T2740] plantronics 0003:047F:FFFF.002D: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 122.621648][ T588] device bridge_slave_1 left promiscuous mode [ 122.627920][ T588] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.638072][ T588] device bridge_slave_0 left promiscuous mode [ 122.644512][ T588] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.653132][ T588] device veth1_macvtap left promiscuous mode [ 122.659873][ T588] device veth0_vlan left promiscuous mode [ 122.802885][ T6125] netlink: 4344 bytes leftover after parsing attributes in process `syz.0.2449'. [ 122.873720][ T602] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 122.882242][ T602] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.889339][ T602] bridge0: port 1(bridge_slave_0) entered forwarding state [ 122.902754][ T2740] usb 3-1: USB disconnect, device number 6 [ 122.909441][ T602] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 122.917767][ T602] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.924879][ T602] bridge0: port 2(bridge_slave_1) entered forwarding state [ 122.940113][ T602] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 122.948072][ T602] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 122.959342][ T602] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 122.971492][ T602] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 122.979633][ T602] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 122.987073][ T602] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 122.995342][ T6107] device veth0_vlan entered promiscuous mode [ 123.005462][ T602] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 123.014980][ T6107] device veth1_macvtap entered promiscuous mode [ 123.024849][ T602] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 123.034625][ T602] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 123.042992][ T602] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 123.106559][ T6138] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.126422][ T6140] loop5: detected capacity change from 0 to 128 [ 123.167300][ T6144] loop5: detected capacity change from 0 to 256 [ 123.175492][ T6144] exFAT-fs (loop5): Invalid boot checksum (boot checksum : 0x1119ac00, checksum : 0x111aac00) [ 123.188434][ T6144] exFAT-fs (loop5): invalid boot region [ 123.194368][ T6144] exFAT-fs (loop5): failed to recognize exfat type [ 123.369447][ T6154] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 123.379273][ T6154] SELinux: failed to load policy [ 123.423927][ T6162] syz.1.2466[6162] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 123.424016][ T6162] syz.1.2466[6162] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 123.441246][ T6164] netlink: 'syz.2.2467': attribute type 12 has an invalid length. [ 123.460613][ T6164] netlink: 'syz.2.2467': attribute type 29 has an invalid length. [ 123.468548][ T6164] netlink: 148 bytes leftover after parsing attributes in process `syz.2.2467'. [ 123.568831][ T6] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 123.651270][ T6196] overlayfs: failed to set xattr on upper [ 123.657246][ T6196] overlayfs: ...falling back to index=off,metacopy=off. [ 123.664724][ T6196] overlayfs: ...falling back to xino=off. [ 123.670988][ T6196] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 123.700421][ T5314] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 123.758699][ T6] usb 6-1: Using ep0 maxpacket: 16 [ 123.769595][ T6] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 123.788723][ T6] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 123.799075][ T6] usb 6-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 123.808552][ T6] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.817702][ T6] usb 6-1: config 0 descriptor?? [ 124.083542][ T6244] loop1: detected capacity change from 0 to 512 [ 124.106734][ T6244] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 124.130035][ T6244] EXT4-fs error (device loop1): ext4_get_branch:178: inode #11: block 4294967295: comm syz.1.2505: invalid block [ 124.142550][ T6244] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.2505: invalid indirect mapped block 4294967295 (level 1) [ 124.156745][ T6244] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.2505: invalid indirect mapped block 4294967295 (level 1) [ 124.171039][ T6244] EXT4-fs (loop1): 2 truncates cleaned up [ 124.176833][ T6244] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 124.225854][ T2514] EXT4-fs (loop1): unmounting filesystem. [ 124.226430][ T6] appleir 0003:05AC:8241.002E: unknown main item tag 0x0 [ 124.248672][ T6] appleir 0003:05AC:8241.002E: unknown main item tag 0x0 [ 124.255844][ T6] appleir 0003:05AC:8241.002E: unknown main item tag 0x0 [ 124.262975][ T6] appleir 0003:05AC:8241.002E: unknown main item tag 0x0 [ 124.270129][ T6] appleir 0003:05AC:8241.002E: unknown main item tag 0x0 [ 124.277375][ T6] appleir 0003:05AC:8241.002E: No inputs registered, leaving [ 124.299265][ T6] appleir 0003:05AC:8241.002E: hiddev96,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.5-1/input0 [ 124.499685][ T2740] usb 6-1: USB disconnect, device number 3 [ 124.635685][ T6075] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 124.734375][ T6256] loop8: detected capacity change from 0 to 128 [ 124.743021][ T6257] loop1: detected capacity change from 0 to 256 [ 124.779441][ T6257] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011bf5, chksum : 0xcea91b8a, utbl_chksum : 0xe619d30d) [ 124.809062][ T6257] exFAT-fs (loop1): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 124.820020][ T6259] loop8: detected capacity change from 0 to 512 [ 124.876453][ T6259] EXT4-fs error (device loop8): ext4_do_update_inode:5226: inode #16: comm syz.8.2510: corrupted inode contents [ 124.895871][ T6259] EXT4-fs error (device loop8): ext4_dirty_inode:6091: inode #16: comm syz.8.2510: mark_inode_dirty error [ 124.908305][ T6259] EXT4-fs error (device loop8): ext4_do_update_inode:5226: inode #16: comm syz.8.2510: corrupted inode contents [ 124.920523][ T6259] EXT4-fs error (device loop8): __ext4_ext_dirty:202: inode #16: comm syz.8.2510: mark_inode_dirty error [ 124.932040][ T6259] EXT4-fs error (device loop8): ext4_do_update_inode:5226: inode #16: comm syz.8.2510: corrupted inode contents [ 124.949870][ T6259] EXT4-fs error (device loop8) in ext4_orphan_del:305: Corrupt filesystem [ 124.958919][ T6259] EXT4-fs error (device loop8): ext4_do_update_inode:5226: inode #16: comm syz.8.2510: corrupted inode contents [ 124.971259][ T6259] EXT4-fs error (device loop8): ext4_truncate:4313: inode #16: comm syz.8.2510: mark_inode_dirty error [ 124.982921][ T6259] EXT4-fs error (device loop8) in ext4_process_orphan:347: Corrupt filesystem [ 124.992309][ T6259] EXT4-fs (loop8): 1 truncate cleaned up [ 124.998060][ T6259] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 125.007019][ T6259] ext4 filesystem being mounted at /433/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 125.027934][ T588] __quota_error: 1092 callbacks suppressed [ 125.027952][ T588] Quota error (device loop8): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 125.063765][ T588] EXT4-fs error (device loop8): ext4_release_dquot:6812: comm kworker/u4:5: Failed to release dquot type 1 [ 125.095116][ T1154] EXT4-fs (loop8): unmounting filesystem. [ 125.114326][ T6272] loop0: detected capacity change from 0 to 512 [ 125.176452][ T6272] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 125.218820][ T6272] ext4 filesystem being mounted at /590/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 125.279176][ T6272] EXT4-fs (loop0): re-mounted. Quota mode: writeback. [ 125.306532][ T283] EXT4-fs (loop0): unmounting filesystem. [ 125.436015][ T6308] loop0: detected capacity change from 0 to 512 [ 125.488084][ T6308] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 125.517158][ T6308] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 125.527059][ T6319] netlink: 'syz.8.2538': attribute type 34 has an invalid length. [ 125.527847][ T6308] EXT4-fs error (device loop0): ext4_get_branch:178: inode #11: block 4294967295: comm syz.0.2532: invalid block [ 125.547316][ T6308] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.2532: invalid indirect mapped block 4294967295 (level 1) [ 125.561770][ T6308] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.2532: invalid indirect mapped block 4294967295 (level 1) [ 125.578959][ T6308] EXT4-fs (loop0): 2 truncates cleaned up [ 125.584989][ T6308] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 125.618372][ T283] EXT4-fs (loop0): unmounting filesystem. [ 125.677043][ T6330] loop0: detected capacity change from 0 to 256 [ 125.707393][ T6330] exFAT-fs (loop0): Invalid boot checksum (boot checksum : 0x1119ac00, checksum : 0x111aac00) [ 125.718126][ T6330] exFAT-fs (loop0): invalid boot region [ 125.725637][ T6330] exFAT-fs (loop0): failed to recognize exfat type [ 125.861868][ T6344] loop0: detected capacity change from 0 to 256 [ 126.139150][ T6353] loop1: detected capacity change from 0 to 512 [ 126.151674][ T6353] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.2552: inode #1: comm syz.1.2552: iget: illegal inode # [ 126.165081][ T6353] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.2552: error while reading EA inode 1 err=-117 [ 126.177913][ T6353] EXT4-fs (loop1): 1 orphan inode deleted [ 126.184100][ T6353] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 126.198858][ T291] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 126.211055][ T6353] fscrypt (loop1, inode 15): Direct key flag not allowed with different contents and filenames modes [ 126.249474][ T2514] EXT4-fs (loop1): unmounting filesystem. [ 126.363682][ T2740] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 126.373747][ T2740] hid-generic 0000:0000:0000.002F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 126.408699][ T291] usb 1-1: Using ep0 maxpacket: 16 [ 126.419521][ T291] usb 1-1: config 0 has an invalid interface number: 164 but max is 0 [ 126.438697][ T291] usb 1-1: config 0 has no interface number 0 [ 126.444843][ T291] usb 1-1: too many endpoints for config 0 interface 164 altsetting 34: 89, using maximum allowed: 30 [ 126.468657][ T291] usb 1-1: config 0 interface 164 altsetting 34 has 0 endpoint descriptors, different from the interface descriptor's value: 89 [ 126.493212][ T291] usb 1-1: config 0 interface 164 has no altsetting 0 [ 126.519428][ T291] usb 1-1: New USB device found, idVendor=0a5c, idProduct=2033, bcdDevice=79.b0 [ 126.528519][ T291] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.545392][ T291] usb 1-1: Product: syz [ 126.551062][ T291] usb 1-1: Manufacturer: syz [ 126.555692][ T291] usb 1-1: SerialNumber: syz [ 126.561243][ T291] usb 1-1: config 0 descriptor?? [ 126.571125][ T28] audit: type=1400 audit(1748014683.477:3394): avc: denied { ioctl } for pid=6369 comm="syz.2.2558" path="socket:[44550]" dev="sockfs" ino=44550 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 126.770198][ T291] usb 1-1: USB disconnect, device number 18 [ 126.998692][ T919] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 127.036827][ T6391] loop8: detected capacity change from 0 to 131072 [ 127.056870][ T6391] F2FS-fs (loop8): invalid crc value [ 127.063882][ T6391] F2FS-fs (loop8): Found nat_bits in checkpoint [ 127.087192][ T6391] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e4 [ 127.179842][ T919] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 127.190802][ T919] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 127.200871][ T919] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 127.213754][ T919] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 127.222795][ T919] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.241569][ T919] usb 6-1: config 0 descriptor?? [ 127.248877][ T919] hub 6-1:0.0: USB hub found [ 127.448121][ T919] hub 6-1:0.0: 9 ports detected [ 127.453312][ T919] hub 6-1:0.0: insufficient power available to use all downstream ports [ 127.650182][ T919] hub 6-1:0.0: hub_hub_status failed (err = -71) [ 127.656592][ T919] hub 6-1:0.0: config failed, can't get hub status (err -71) [ 127.689040][ T919] usb 6-1: USB disconnect, device number 4 [ 128.173009][ T28] audit: type=1400 audit(1748014685.077:3395): avc: denied { remount } for pid=6405 comm="syz.0.2580" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 128.205356][ T28] audit: type=1400 audit(1748014685.107:3396): avc: denied { unmount } for pid=283 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 128.296247][ T6422] loop8: detected capacity change from 0 to 2048 [ 128.348328][ T6422] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 128.376222][ T1154] EXT4-fs (loop8): unmounting filesystem. [ 128.389439][ T6439] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2587'. [ 128.438690][ T291] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 128.619830][ T291] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 128.628701][ T919] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 128.630230][ T291] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 128.646981][ T291] usb 2-1: config 1 has no interface number 0 [ 128.653426][ T291] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 128.665003][ T291] usb 2-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 128.681834][ T291] usb 2-1: New USB device found, idVendor=0525, idProduct=a4c3, bcdDevice= 0.40 [ 128.691143][ T291] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.699284][ T291] usb 2-1: Product: syz [ 128.703471][ T291] usb 2-1: Manufacturer: syz [ 128.708051][ T291] usb 2-1: SerialNumber: syz [ 128.758758][ T2740] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 128.820376][ T919] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 128.832345][ T919] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 128.842545][ T919] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 128.851842][ T919] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.861155][ T919] usb 1-1: config 0 descriptor?? [ 128.948713][ T2740] usb 9-1: Using ep0 maxpacket: 32 [ 128.955334][ T2740] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 128.966545][ T2740] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 128.976767][ T2740] usb 9-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 128.985913][ T2740] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.995107][ T2740] usb 9-1: config 0 descriptor?? [ 129.069458][ T6484] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2609'. [ 129.078592][ T6484] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2609'. [ 129.184974][ T6489] loop5: detected capacity change from 0 to 1024 [ 129.192099][ T6489] EXT4-fs: Ignoring removed orlov option [ 129.198188][ T6489] EXT4-fs (loop5): Test dummy encryption mode enabled [ 129.207719][ T6489] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 129.229987][ T6107] EXT4-fs (loop5): unmounting filesystem. [ 129.271596][ T919] kone 0003:1E7D:2CED.0030: hidraw0: USB HID v0.00 Device [HID 1e7d:2ced] on usb-dummy_hcd.0-1/input0 [ 129.332650][ T6502] netlink: 'syz.2.2616': attribute type 4 has an invalid length. [ 129.411157][ T2740] savu 0003:1E7D:2D5A.0031: hiddev96,hidraw1: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.8-1/input0 [ 129.482217][ T2740] usb 1-1: USB disconnect, device number 19 [ 129.506886][ T28] audit: type=1326 audit(1748014686.407:3397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6514 comm="syz.5.2621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc65bf8e969 code=0x7ffc0000 [ 129.531267][ T291] cdc_ncm 2-1:1.1: bind() failure [ 129.543872][ T28] audit: type=1326 audit(1748014686.437:3398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6514 comm="syz.5.2621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc65bf2ab39 code=0x7ffc0000 [ 129.567600][ T28] audit: type=1326 audit(1748014686.437:3399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6514 comm="syz.5.2621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc65bf2ab39 code=0x7ffc0000 [ 129.591130][ T28] audit: type=1326 audit(1748014686.437:3400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6514 comm="syz.5.2621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc65bf2ab39 code=0x7ffc0000 [ 129.621941][ T28] audit: type=1326 audit(1748014686.437:3401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6514 comm="syz.5.2621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc65bf2ab39 code=0x7ffc0000 [ 129.646306][ T28] audit: type=1326 audit(1748014686.437:3402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6514 comm="syz.5.2621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc65bf2ab39 code=0x7ffc0000 [ 129.686222][ T6517] loop5: detected capacity change from 0 to 512 [ 129.693311][ T6517] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 129.708268][ T6517] EXT4-fs (loop5): 1 truncate cleaned up [ 129.715474][ T6] usb 9-1: USB disconnect, device number 16 [ 129.721729][ T6517] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 129.735842][ T919] usb 2-1: USB disconnect, device number 20 [ 129.751672][ T6107] EXT4-fs (loop5): unmounting filesystem. [ 129.851791][ T6526] loop5: detected capacity change from 0 to 1024 [ 129.858576][ T6526] EXT4-fs: Ignoring removed orlov option [ 129.865025][ T6526] EXT4-fs: Ignoring removed nomblk_io_submit option [ 129.880201][ T6526] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 129.916985][ T6107] EXT4-fs (loop5): unmounting filesystem. [ 129.950886][ T6532] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2628'. [ 129.990930][ T6534] loop5: detected capacity change from 0 to 2048 [ 130.003865][ T6534] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 130.012659][ T291] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 130.029654][ T6107] EXT4-fs (loop5): unmounting filesystem. [ 130.048726][ T291] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 130.064848][ T6542] loop5: detected capacity change from 0 to 512 [ 130.073717][ T6542] EXT4-fs error (device loop5): ext4_orphan_get:1400: inode #15: comm syz.5.2631: casefold flag without casefold feature [ 130.087363][ T6542] EXT4-fs error (device loop5): ext4_orphan_get:1405: comm syz.5.2631: couldn't read orphan inode 15 (err -117) [ 130.099499][ T291] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 130.107231][ T6542] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 130.124462][ T6107] EXT4-fs (loop5): unmounting filesystem. [ 130.130401][ T291] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 130.168774][ T291] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 130.198768][ T291] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 130.269363][ T291] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 130.292947][ T6562] bridge0: port 3(vlan2) entered blocking state [ 130.299457][ T6562] bridge0: port 3(vlan2) entered disabled state [ 130.306358][ T6562] device vlan2 entered promiscuous mode [ 130.313295][ T6562] bridge0: mtu less than device minimum [ 130.319027][ T291] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 130.348739][ T291] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 130.428735][ T291] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 130.748194][ T6579] loop1: detected capacity change from 0 to 40427 [ 130.762463][ T6579] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 130.770881][ T6579] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 130.790155][ T6579] F2FS-fs (loop1): invalid crc value [ 130.829574][ T6579] F2FS-fs (loop1): Found nat_bits in checkpoint [ 130.892753][ T6579] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 130.909825][ T6579] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 131.013858][ T6579] bio_check_eod: 4 callbacks suppressed [ 131.013880][ T6579] syz.1.2648: attempt to access beyond end of device [ 131.013880][ T6579] loop1: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 131.080024][ T2514] syz-executor: attempt to access beyond end of device [ 131.080024][ T2514] loop1: rw=2051, sector=45096, nr_sectors = 8 limit=40427 [ 131.113553][ T2514] F2FS-fs (loop1): Issue discard(5637, 5637, 1) failed, ret: -5 [ 131.229215][ T6613] loop8: detected capacity change from 0 to 256 [ 131.278999][ T6613] exfat: Deprecated parameter 'namecase' [ 131.290193][ T6613] exfat: Deprecated parameter 'utf8' [ 131.313533][ T6613] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x23633d53, utbl_chksum : 0xe619d30d) [ 131.533229][ T6648] loop1: detected capacity change from 0 to 2048 [ 131.599148][ T5735] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 131.778836][ T319] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 131.798221][ T28] kauditd_printk_skb: 117 callbacks suppressed [ 131.798237][ T28] audit: type=1400 audit(1748014688.697:3520): avc: denied { name_bind } for pid=6657 comm="syz.1.2681" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1 [ 131.899409][ T6664] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 131.906793][ T6664] IPv6: NLM_F_CREATE should be set when creating new route [ 131.914062][ T6664] IPv6: NLM_F_CREATE should be set when creating new route [ 131.943017][ T6670] loop1: detected capacity change from 0 to 512 [ 131.962377][ T319] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 131.980150][ T319] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 131.990416][ T319] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 131.991606][ T6670] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a802c01c, mo2=0002] [ 132.003479][ T319] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 132.021213][ T6670] System zones: 0-2, 18-18, 34-35 [ 132.021259][ T319] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.027194][ T6670] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 132.035000][ T319] usb 9-1: config 0 descriptor?? [ 132.048397][ T6670] ext4 filesystem being mounted at /317/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 132.088544][ T2514] EXT4-fs (loop1): unmounting filesystem. [ 132.236522][ T6699] loop1: detected capacity change from 0 to 512 [ 132.256461][ T6699] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.2699: inode #1: comm syz.1.2699: iget: illegal inode # [ 132.270199][ T6699] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.2699: error while reading EA inode 1 err=-117 [ 132.282823][ T6699] EXT4-fs (loop1): 1 orphan inode deleted [ 132.288750][ T6699] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 132.379542][ T2514] EXT4-fs (loop1): unmounting filesystem. [ 132.422994][ T2740] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 132.452957][ T319] plantronics 0003:047F:FFFF.0032: unknown main item tag 0x0 [ 132.462180][ T319] plantronics 0003:047F:FFFF.0032: unknown main item tag 0x0 [ 132.470421][ T319] plantronics 0003:047F:FFFF.0032: unknown main item tag 0x0 [ 132.492593][ T319] plantronics 0003:047F:FFFF.0032: unknown main item tag 0x0 [ 132.503995][ T319] plantronics 0003:047F:FFFF.0032: unknown main item tag 0x0 [ 132.512300][ T6730] loop1: detected capacity change from 0 to 512 [ 132.512889][ T319] plantronics 0003:047F:FFFF.0032: unknown main item tag 0x0 [ 132.526489][ T319] plantronics 0003:047F:FFFF.0032: No inputs registered, leaving [ 132.536878][ T319] plantronics 0003:047F:FFFF.0032: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 132.549567][ T6730] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 132.560750][ T6730] EXT4-fs (loop1): invalid journal inode [ 132.566458][ T6730] EXT4-fs (loop1): can't get journal size [ 132.575989][ T6730] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e016c118, mo2=0002] [ 132.591858][ T6730] System zones: 1-12, 13-13 [ 132.609296][ T6730] EXT4-fs (loop1): 1 truncate cleaned up [ 132.618658][ T2740] usb 6-1: Using ep0 maxpacket: 32 [ 132.619624][ T6730] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 132.625142][ T2740] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 132.673796][ T2740] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 132.690554][ T2740] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 132.700545][ T2740] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.711206][ T2514] EXT4-fs (loop1): unmounting filesystem. [ 132.718900][ T2740] usb 6-1: config 0 descriptor?? [ 132.791804][ T319] usb 9-1: USB disconnect, device number 17 [ 132.835403][ T6766] SELinux: Context system_u:object_r:systemd_logind_var_run_t:s0 is not valid (left unmapped). [ 132.846338][ T28] audit: type=1400 audit(1748014689.747:3521): avc: denied { relabelto } for pid=6764 comm="syz.0.2729" name="" dev="pipefs" ino=45667 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=fifo_file permissive=1 trawcon="system_u:object_r:systemd_logind_var_run_t:s0" [ 132.906478][ T6769] input: syz0 as /devices/virtual/input/input45 [ 133.138089][ T2740] savu 0003:1E7D:2D5A.0033: hiddev96,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.5-1/input0 [ 133.432152][ T319] usb 6-1: USB disconnect, device number 5 [ 133.482199][ T6819] loop1: detected capacity change from 0 to 40427 [ 133.491831][ T6819] F2FS-fs (loop1): fault_injection options not supported [ 133.507615][ T6819] F2FS-fs (loop1): invalid crc value [ 133.514185][ T6819] F2FS-fs (loop1): Found nat_bits in checkpoint [ 133.552233][ T6819] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 133.590226][ T2514] syz-executor: attempt to access beyond end of device [ 133.590226][ T2514] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 133.688685][ T2740] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 133.888748][ T2740] usb 9-1: Using ep0 maxpacket: 16 [ 133.895906][ T2740] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 133.907190][ T2740] usb 9-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 133.916523][ T2740] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.928433][ T2740] usb 9-1: config 0 descriptor?? [ 133.999575][ T6848] input: syz0 as /devices/virtual/input/input46 [ 134.061237][ T6856] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2771'. [ 134.149409][ T60] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 134.336071][ T2740] hid-steam 0003:28DE:1102.0034: unknown main item tag 0x0 [ 134.347739][ T2740] hid-steam 0003:28DE:1102.0034: unknown main item tag 0x0 [ 134.358648][ T60] usb 2-1: Using ep0 maxpacket: 16 [ 134.364230][ T2740] hid-steam 0003:28DE:1102.0034: : USB HID v0.00 Device [HID 28de:1102] on usb-dummy_hcd.8-1/input0 [ 134.375734][ T60] usb 2-1: config 0 has no interfaces? [ 134.384142][ T60] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 134.394313][ T2740] hid-steam 0003:28DE:1102.0035: unknown main item tag 0x0 [ 134.404444][ T2740] hid-steam 0003:28DE:1102.0035: unknown main item tag 0x0 [ 134.411746][ T60] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 134.420532][ T60] usb 2-1: SerialNumber: syz [ 134.425903][ T2740] hid-steam 0003:28DE:1102.0035: hidraw0: USB HID v0.00 Device [HID 28de:1102] on usb-dummy_hcd.8-1/input0 [ 134.447826][ T60] usb 2-1: config 0 descriptor?? [ 134.518710][ T2740] hid-steam 0003:28DE:1102.0034: Steam Controller 'XXXXXXXXXX' connected [ 134.529932][ T2740] input: Steam Controller as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:28DE:1102.0034/input/input47 [ 134.560066][ T6881] overlayfs: missing 'lowerdir' [ 134.577823][ T2740] usb 9-1: USB disconnect, device number 18 [ 134.608044][ T2740] hid-steam 0003:28DE:1102.0034: Steam Controller 'XXXXXXXXXX' disconnected [ 134.626674][ T6882] fido_id[6882]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/9-1/report_descriptor': No such file or directory [ 134.655916][ T319] usb 2-1: USB disconnect, device number 21 [ 134.710314][ T6888] SELinux: policydb table sizes (8,-2145189879) do not match mine (8,9) [ 134.728805][ T6888] SELinux: failed to load policy [ 134.870579][ T28] audit: type=1326 audit(1748014691.777:3522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6863 comm="syz.5.2775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc65bf2ab39 code=0x7ffc0000 [ 134.919675][ T28] audit: type=1326 audit(1748014691.777:3523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6863 comm="syz.5.2775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc65bf2ab39 code=0x7ffc0000 [ 134.943759][ T28] audit: type=1326 audit(1748014691.777:3524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6863 comm="syz.5.2775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc65bf2ab39 code=0x7ffc0000 [ 134.969529][ T28] audit: type=1326 audit(1748014691.777:3525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6863 comm="syz.5.2775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc65bf2ab39 code=0x7ffc0000 [ 134.993008][ T28] audit: type=1326 audit(1748014691.777:3526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6863 comm="syz.5.2775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc65bf2ab39 code=0x7ffc0000 [ 135.016551][ T28] audit: type=1326 audit(1748014691.777:3527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6863 comm="syz.5.2775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc65bf2ab39 code=0x7ffc0000 [ 135.040068][ T28] audit: type=1326 audit(1748014691.777:3528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6863 comm="syz.5.2775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc65bf2ab39 code=0x7ffc0000 [ 135.063645][ T28] audit: type=1326 audit(1748014691.777:3529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6863 comm="syz.5.2775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc65bf2ab39 code=0x7ffc0000 [ 135.438598][ T6943] xt_hashlimit: size too large, truncated to 1048576 [ 135.452264][ T6945] loop8: detected capacity change from 0 to 512 [ 135.529649][ T6945] EXT4-fs error (device loop8): ext4_xattr_inode_iget:404: comm syz.8.2811: inode #1: comm syz.8.2811: iget: illegal inode # [ 135.568485][ T6945] EXT4-fs error (device loop8): ext4_xattr_inode_iget:409: comm syz.8.2811: error while reading EA inode 1 err=-117 [ 135.581060][ T6945] EXT4-fs (loop8): 1 orphan inode deleted [ 135.586849][ T6945] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 135.674949][ T1154] EXT4-fs (loop8): unmounting filesystem. [ 135.744842][ T6954] loop8: detected capacity change from 0 to 512 [ 135.784420][ T6956] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2815'. [ 135.803746][ T6926] loop1: detected capacity change from 0 to 40427 [ 135.819069][ T6954] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a802c01c, mo2=0002] [ 135.833900][ T6954] System zones: 0-2, 18-18, 34-35 [ 135.834043][ T6926] F2FS-fs (loop1): Wrong SSA boundary, start(3584) end(4096) blocks(0) [ 135.858712][ T6926] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 135.867038][ T6926] F2FS-fs (loop1): fault_type options not supported [ 135.867735][ T6954] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 135.873995][ T6926] F2FS-fs (loop1): Image doesn't support compression [ 135.890529][ T6926] F2FS-fs (loop1): invalid crc value [ 135.916238][ T6926] F2FS-fs (loop1): Found nat_bits in checkpoint [ 135.947468][ T6954] ext4 filesystem being mounted at /472/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 135.998873][ T6926] F2FS-fs (loop1): Start checkpoint disabled! [ 136.065555][ T1154] EXT4-fs (loop8): unmounting filesystem. [ 136.088296][ T6926] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 136.100852][ T6926] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 136.261417][ T304] kworker/u4:3: attempt to access beyond end of device [ 136.261417][ T304] loop1: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 136.511963][ T6992] input: syz0 as /devices/virtual/input/input48 [ 136.602751][ T7002] tmpfs: Unknown parameter 'n' [ 136.620712][ T7006] loop1: detected capacity change from 0 to 128 [ 136.643154][ T7006] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 136.662242][ T7006] ext4 filesystem being mounted at /356/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 136.700995][ T2514] EXT4-fs (loop1): unmounting filesystem. [ 136.799506][ T28] kauditd_printk_skb: 4998 callbacks suppressed [ 136.799524][ T28] audit: type=1326 audit(1748014693.707:8528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6863 comm="syz.5.2775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc65bf2ab39 code=0x7ffc0000 [ 136.854610][ T7032] device ip6tnl1 entered promiscuous mode [ 136.863288][ T28] audit: type=1326 audit(1748014693.737:8529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6863 comm="syz.5.2775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc65bf2ab39 code=0x7ffc0000 [ 136.886848][ T28] audit: type=1326 audit(1748014693.737:8530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6863 comm="syz.5.2775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc65bf2ab39 code=0x7ffc0000 [ 136.930342][ T28] audit: type=1326 audit(1748014693.737:8531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6863 comm="syz.5.2775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc65bf2ab39 code=0x7ffc0000 [ 136.990817][ T28] audit: type=1326 audit(1748014693.737:8532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6863 comm="syz.5.2775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc65bf2ab39 code=0x7ffc0000 [ 137.049975][ T28] audit: type=1326 audit(1748014693.737:8533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6863 comm="syz.5.2775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc65bf2ab39 code=0x7ffc0000 [ 137.073446][ T28] audit: type=1326 audit(1748014693.737:8534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6863 comm="syz.5.2775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc65bf2ab39 code=0x7ffc0000 [ 137.097233][ T28] audit: type=1326 audit(1748014693.737:8535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6863 comm="syz.5.2775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc65bf2ab39 code=0x7ffc0000 [ 137.129328][ T28] audit: type=1326 audit(1748014693.737:8536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6863 comm="syz.5.2775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc65bf2ab39 code=0x7ffc0000 [ 137.154457][ T28] audit: type=1326 audit(1748014693.737:8537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6863 comm="syz.5.2775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc65bf2ab39 code=0x7ffc0000 [ 137.180696][ T7044] loop8: detected capacity change from 0 to 256 [ 137.212712][ T7044] exFAT-fs (loop8): failed to load upcase table (idx : 0x0001e4a3, chksum : 0x009ea0b8, utbl_chksum : 0x7319d30d) [ 137.699157][ T7083] netem: change failed [ 137.880409][ T7106] netlink: 'syz.2.2879': attribute type 6 has an invalid length. [ 138.000947][ T7121] loop8: detected capacity change from 0 to 128 [ 138.026162][ T7121] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 138.035962][ T7121] ext4 filesystem being mounted at /491/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 138.044995][ T7064] loop1: detected capacity change from 0 to 131072 [ 138.082542][ T7121] EXT4-fs warning (device loop8): verify_group_input:151: Cannot add at group 3 (only 1 groups) [ 138.094402][ T7064] F2FS-fs (loop1): Found nat_bits in checkpoint [ 138.096642][ T2740] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 138.121051][ T1154] EXT4-fs (loop8): unmounting filesystem. [ 138.187026][ T7064] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 138.309840][ T2740] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 138.323337][ T2740] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 138.333502][ T2740] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 138.342738][ T2740] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.356195][ T2740] usb 6-1: config 0 descriptor?? [ 138.434976][ T588] Bluetooth: hci0: Frame reassembly failed (-84) [ 138.611327][ T7162] loop8: detected capacity change from 0 to 40427 [ 138.629855][ T7162] F2FS-fs (loop8): Invalid log_blocksize (268), supports only 12 [ 138.637699][ T7162] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 138.670544][ T7162] F2FS-fs (loop8): Found nat_bits in checkpoint [ 138.710790][ T7162] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0 [ 138.718959][ T7162] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 138.775467][ T2740] kone 0003:1E7D:2CED.0036: hidraw0: USB HID v0.00 Device [HID 1e7d:2ced] on usb-dummy_hcd.5-1/input0 [ 138.863687][ T7184] loop1: detected capacity change from 0 to 256 [ 138.909705][ T5735] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 138.981986][ T319] usb 6-1: USB disconnect, device number 6 [ 139.188740][ T291] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 139.198813][ T60] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 139.368767][ T291] usb 1-1: Using ep0 maxpacket: 16 [ 139.375067][ T291] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 139.379135][ T60] usb 2-1: Using ep0 maxpacket: 16 [ 139.385992][ T291] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 139.392330][ T60] usb 2-1: config 0 has an invalid interface number: 164 but max is 0 [ 139.400849][ T291] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 139.409137][ T60] usb 2-1: config 0 has no interface number 0 [ 139.421820][ T291] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 139.427998][ T60] usb 2-1: too many endpoints for config 0 interface 164 altsetting 34: 89, using maximum allowed: 30 [ 139.436963][ T291] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.448033][ T60] usb 2-1: config 0 interface 164 altsetting 34 has 0 endpoint descriptors, different from the interface descriptor's value: 89 [ 139.456967][ T291] usb 1-1: config 0 descriptor?? [ 139.474176][ T60] usb 2-1: config 0 interface 164 has no altsetting 0 [ 139.482739][ T60] usb 2-1: New USB device found, idVendor=0a5c, idProduct=2033, bcdDevice=79.b0 [ 139.495609][ T60] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.503907][ T60] usb 2-1: Product: syz [ 139.510088][ T60] usb 2-1: Manufacturer: syz [ 139.515410][ T60] usb 2-1: SerialNumber: syz [ 139.520968][ T60] usb 2-1: config 0 descriptor?? [ 139.541851][ T7201] tipc: Started in network mode [ 139.546816][ T7201] tipc: Node identity ff75, cluster identity 4711 [ 139.553540][ T7201] tipc: Enabling of bearer rejected, failed to enable media [ 139.745517][ T60] usb 2-1: USB disconnect, device number 22 [ 139.881172][ T291] microsoft 0003:045E:07DA.0037: unbalanced collection at end of report description [ 139.890813][ T291] microsoft 0003:045E:07DA.0037: parse failed [ 139.896887][ T291] microsoft: probe of 0003:045E:07DA.0037 failed with error -22 [ 140.038719][ T2740] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 140.120608][ T319] usb 1-1: USB disconnect, device number 20 [ 140.229867][ T2740] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 140.240077][ T2740] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 140.250996][ T2740] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 140.261792][ T2740] usb 6-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 140.276128][ T2740] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 140.285693][ T2740] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.291907][ T7223] loop1: detected capacity change from 0 to 128 [ 140.294033][ T2740] usb 6-1: Product: syz [ 140.304504][ T2740] usb 6-1: Manufacturer: syz [ 140.309177][ T2740] usb 6-1: SerialNumber: syz [ 140.498680][ T5314] Bluetooth: hci0: command 0x1003 tx timeout [ 140.498694][ T1270] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 140.511120][ T7161] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 140.672691][ T291] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 140.796574][ T7259] fuse: Unknown parameter '' [ 140.860174][ T291] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 140.874193][ T291] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 140.885733][ T291] usb 2-1: New USB device found, idVendor=046d, idProduct=c534, bcdDevice= 0.00 [ 140.895366][ T291] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.918528][ T291] usb 2-1: config 0 descriptor?? [ 140.921687][ T7272] loop8: detected capacity change from 0 to 512 [ 140.939696][ T7272] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 140.947811][ T7272] System zones: 0-2, 18-18, 34-34 [ 140.955214][ T7272] EXT4-fs error (device loop8): ext4_validate_block_bitmap:438: comm syz.8.2948: bg 0: block 248: padding at end of block bitmap is not set [ 140.974220][ T7272] EXT4-fs error (device loop8): ext4_acquire_dquot:6789: comm syz.8.2948: Failed to acquire dquot type 1 [ 140.986319][ T7272] EXT4-fs (loop8): 1 truncate cleaned up [ 140.992110][ T7272] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 141.001230][ T7272] ext4 filesystem being mounted at /514/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 141.030957][ T8] EXT4-fs error (device loop8): ext4_release_dquot:6812: comm kworker/u4:0: Failed to release dquot type 1 [ 141.043607][ T1154] EXT4-fs (loop8): unmounting filesystem. [ 141.207671][ T7285] loop8: detected capacity change from 0 to 256 [ 141.256206][ T7289] loop8: detected capacity change from 0 to 256 [ 141.276338][ T7289] FAT-fs (loop8): Directory bread(block 64) failed [ 141.286656][ T7289] FAT-fs (loop8): Directory bread(block 65) failed [ 141.293344][ T7289] FAT-fs (loop8): Directory bread(block 66) failed [ 141.299975][ T7289] FAT-fs (loop8): Directory bread(block 67) failed [ 141.306559][ T7289] FAT-fs (loop8): Directory bread(block 68) failed [ 141.313338][ T7289] FAT-fs (loop8): Directory bread(block 69) failed [ 141.320106][ T7289] FAT-fs (loop8): Directory bread(block 70) failed [ 141.325241][ T2740] cdc_ncm 6-1:1.0: bind() failure [ 141.326662][ T7289] FAT-fs (loop8): Directory bread(block 71) failed [ 141.337631][ T2740] cdc_ncm: probe of 6-1:1.1 failed with error -71 [ 141.340057][ T291] logitech-djreceiver 0003:046D:C534.0038: collection stack underflow [ 141.352288][ T2740] cdc_mbim: probe of 6-1:1.1 failed with error -71 [ 141.353253][ T7289] FAT-fs (loop8): Directory bread(block 72) failed [ 141.365850][ T291] logitech-djreceiver 0003:046D:C534.0038: item 0 4 0 12 parsing failed [ 141.371239][ T2740] usb 6-1: USB disconnect, device number 7 [ 141.375610][ T291] logitech-djreceiver 0003:046D:C534.0038: logi_dj_probe: parse failed [ 141.388873][ T7289] FAT-fs (loop8): Directory bread(block 73) failed [ 141.395654][ T291] logitech-djreceiver: probe of 0003:046D:C534.0038 failed with error -22 [ 141.551892][ T291] ================================================================== [ 141.559997][ T291] BUG: KASAN: use-after-free in enqueue_timer+0xae/0x480 [ 141.567053][ T291] Write of size 8 at addr ffff8881264c8a00 by task kworker/0:2/291 [ 141.574941][ T291] [ 141.577266][ T291] CPU: 0 PID: 291 Comm: kworker/0:2 Not tainted 6.1.134-syzkaller-00039-g3c6d0251e1fb #0 [ 141.587322][ T291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 141.597463][ T291] Workqueue: usb_hub_wq hub_event [ 141.602485][ T291] Call Trace: [ 141.605749][ T291] [ 141.608665][ T291] __dump_stack+0x21/0x24 [ 141.612996][ T291] dump_stack_lvl+0xee/0x150 [ 141.617584][ T291] ? __cfi_dump_stack_lvl+0x8/0x8 [ 141.622598][ T291] ? enqueue_timer+0xae/0x480 [ 141.627260][ T291] print_address_description+0x71/0x210 [ 141.632793][ T291] print_report+0x4a/0x60 [ 141.637107][ T291] kasan_report+0x122/0x150 [ 141.641781][ T291] ? enqueue_timer+0xae/0x480 [ 141.646448][ T291] __asan_report_store8_noabort+0x17/0x20 [ 141.652157][ T291] enqueue_timer+0xae/0x480 [ 141.656732][ T291] __mod_timer+0x79f/0xb30 [ 141.661137][ T291] schedule_timeout+0x127/0x2e0 [ 141.665973][ T291] ? __cfi_schedule_timeout+0x10/0x10 [ 141.671329][ T291] ? __cfi_process_timeout+0x10/0x10 [ 141.676597][ T291] ? __cfi__raw_spin_lock+0x10/0x10 [ 141.681781][ T291] ? _raw_spin_lock+0x8e/0xe0 [ 141.686440][ T291] wait_for_common+0x354/0x620 [ 141.691188][ T291] ? usb_hcd_giveback_urb+0x351/0x410 [ 141.696552][ T291] ? wait_for_completion+0x20/0x20 [ 141.701650][ T291] ? usb_submit_urb+0x122d/0x1900 [ 141.706661][ T291] wait_for_completion_timeout+0xe/0x10 [ 141.712190][ T291] usb_start_wait_urb+0x166/0x2f0 [ 141.717200][ T291] ? usb_api_blocking_completion+0xb0/0xb0 [ 141.722992][ T291] ? usb_alloc_urb+0x44/0x140 [ 141.727652][ T291] ? __kasan_check_write+0x14/0x20 [ 141.732761][ T291] usb_control_msg+0x241/0x3f0 [ 141.737510][ T291] hub_ext_port_status+0x100/0x6b0 [ 141.742608][ T291] hub_event+0x7e6/0x4680 [ 141.746939][ T291] ? sched_clock+0x9/0x10 [ 141.751258][ T291] ? __cfi___switch_to+0x10/0x10 [ 141.756182][ T291] ? _raw_spin_unlock+0x4c/0x70 [ 141.761018][ T291] ? __cfi_hub_event+0x10/0x10 [ 141.765779][ T291] ? __schedule+0xb8f/0x14e0 [ 141.770380][ T291] ? __kasan_check_read+0x11/0x20 [ 141.775589][ T291] ? read_word_at_a_time+0x12/0x20 [ 141.780707][ T291] ? strscpy+0x9b/0x290 [ 141.784867][ T291] process_one_work+0x71f/0xc40 [ 141.789716][ T291] worker_thread+0xa29/0x11f0 [ 141.794385][ T291] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 141.799837][ T291] kthread+0x281/0x320 [ 141.804002][ T291] ? __cfi_worker_thread+0x10/0x10 [ 141.809119][ T291] ? __cfi_kthread+0x10/0x10 [ 141.813716][ T291] ret_from_fork+0x1f/0x30 [ 141.818127][ T291] [ 141.821133][ T291] [ 141.823437][ T291] Allocated by task 7161: [ 141.827764][ T291] kasan_set_track+0x4b/0x70 [ 141.832339][ T291] kasan_save_alloc_info+0x25/0x30 [ 141.837436][ T291] __kasan_kmalloc+0x95/0xb0 [ 141.842009][ T291] __kmalloc+0xb1/0x1e0 [ 141.846151][ T291] hci_alloc_dev_priv+0x27/0x1bd0 [ 141.851166][ T291] hci_uart_tty_ioctl+0x3c8/0xa00 [ 141.856188][ T291] tty_ioctl+0x8ef/0xc60 [ 141.860415][ T291] __se_sys_ioctl+0x12f/0x1b0 [ 141.865079][ T291] __x64_sys_ioctl+0x7b/0x90 [ 141.869657][ T291] x64_sys_call+0x58b/0x9a0 [ 141.874159][ T291] do_syscall_64+0x4c/0xa0 [ 141.878562][ T291] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 141.884444][ T291] [ 141.886760][ T291] Freed by task 7161: [ 141.890719][ T291] kasan_set_track+0x4b/0x70 [ 141.895291][ T291] kasan_save_free_info+0x31/0x50 [ 141.900303][ T291] ____kasan_slab_free+0x132/0x180 [ 141.905423][ T291] __kasan_slab_free+0x11/0x20 [ 141.910166][ T291] slab_free_freelist_hook+0xc2/0x190 [ 141.915621][ T291] __kmem_cache_free+0xb7/0x1b0 [ 141.920474][ T291] kfree+0x6f/0xf0 [ 141.924183][ T291] hci_release_dev+0x13ad/0x1500 [ 141.929103][ T291] bt_host_release+0x82/0x90 [ 141.933681][ T291] device_release+0xa4/0x1d0 [ 141.938278][ T291] kobject_put+0x19d/0x280 [ 141.942681][ T291] put_device+0x1f/0x30 [ 141.946818][ T291] hci_dev_cmd+0x265/0x720 [ 141.951307][ T291] hci_sock_ioctl+0x41e/0x7f0 [ 141.955966][ T291] sock_do_ioctl+0x101/0x310 [ 141.960537][ T291] sock_ioctl+0x4d8/0x6e0 [ 141.964861][ T291] __se_sys_ioctl+0x12f/0x1b0 [ 141.969524][ T291] __x64_sys_ioctl+0x7b/0x90 [ 141.974118][ T291] x64_sys_call+0x58b/0x9a0 [ 141.978620][ T291] do_syscall_64+0x4c/0xa0 [ 141.983041][ T291] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 141.988923][ T291] [ 141.991318][ T291] Last potentially related work creation: [ 141.997010][ T291] kasan_save_stack+0x3a/0x60 [ 142.001667][ T291] __kasan_record_aux_stack+0xb6/0xc0 [ 142.007027][ T291] kasan_record_aux_stack_noalloc+0xb/0x10 [ 142.012833][ T291] insert_work+0x51/0x300 [ 142.017149][ T291] __queue_work+0x9b1/0xd30 [ 142.021636][ T291] queue_work_on+0xd2/0x140 [ 142.026122][ T291] __hci_cmd_sync_sk+0xa3e/0xcf0 [ 142.031129][ T291] hci_cmd_sync_status+0x53/0x120 [ 142.036145][ T291] hci_dev_cmd+0x628/0x720 [ 142.040632][ T291] hci_sock_ioctl+0x41e/0x7f0 [ 142.045290][ T291] sock_do_ioctl+0x101/0x310 [ 142.049878][ T291] sock_ioctl+0x4d8/0x6e0 [ 142.054197][ T291] __se_sys_ioctl+0x12f/0x1b0 [ 142.058918][ T291] __x64_sys_ioctl+0x7b/0x90 [ 142.063498][ T291] x64_sys_call+0x58b/0x9a0 [ 142.067997][ T291] do_syscall_64+0x4c/0xa0 [ 142.072419][ T291] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 142.078408][ T291] [ 142.080733][ T291] Second to last potentially related work creation: [ 142.087296][ T291] kasan_save_stack+0x3a/0x60 [ 142.091964][ T291] __kasan_record_aux_stack+0xb6/0xc0 [ 142.097321][ T291] kasan_record_aux_stack_noalloc+0xb/0x10 [ 142.103113][ T291] insert_work+0x51/0x300 [ 142.107441][ T291] __queue_work+0x9b1/0xd30 [ 142.111948][ T291] queue_work_on+0xd2/0x140 [ 142.116460][ T291] hci_cmd_timeout+0x191/0x200 [ 142.121223][ T291] process_one_work+0x71f/0xc40 [ 142.126066][ T291] worker_thread+0xa29/0x11f0 [ 142.130740][ T291] kthread+0x281/0x320 [ 142.134809][ T291] ret_from_fork+0x1f/0x30 [ 142.139223][ T291] [ 142.141543][ T291] The buggy address belongs to the object at ffff8881264c8000 [ 142.141543][ T291] which belongs to the cache kmalloc-8k of size 8192 [ 142.155574][ T291] The buggy address is located 2560 bytes inside of [ 142.155574][ T291] 8192-byte region [ffff8881264c8000, ffff8881264ca000) [ 142.169091][ T291] [ 142.171398][ T291] The buggy address belongs to the physical page: [ 142.177796][ T291] page:ffffea0004993200 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1264c8 [ 142.188031][ T291] head:ffffea0004993200 order:3 compound_mapcount:0 compound_pincount:0 [ 142.196775][ T291] flags: 0x4000000000010200(slab|head|zone=1) [ 142.202832][ T291] raw: 4000000000010200 0000000000000000 dead000000000122 ffff888100043500 [ 142.211496][ T291] raw: 0000000000000000 0000000000020002 00000001ffffffff 0000000000000000 [ 142.220155][ T291] page dumped because: kasan: bad access detected [ 142.226567][ T291] page_owner tracks the page as allocated [ 142.232263][ T291] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 2740, tgid 2740 (kworker/1:5), ts 138363704667, free_ts 138361508397 [ 142.255080][ T291] post_alloc_hook+0x1f5/0x210 [ 142.259932][ T291] prep_new_page+0x1c/0x110 [ 142.264418][ T291] get_page_from_freelist+0x2c6e/0x2ce0 [ 142.269969][ T291] __alloc_pages+0x19e/0x3a0 [ 142.274545][ T291] alloc_slab_page+0x6e/0xf0 [ 142.279125][ T291] new_slab+0x98/0x3d0 [ 142.283180][ T291] ___slab_alloc+0x6f6/0xb50 [ 142.287752][ T291] __slab_alloc+0x5e/0xa0 [ 142.292077][ T291] __kmem_cache_alloc_node+0x203/0x2c0 [ 142.297519][ T291] kmalloc_trace+0x29/0xb0 [ 142.301925][ T291] hid_allocate_device+0x50/0x2f0 [ 142.306934][ T291] usbhid_probe+0x396/0xfa0 [ 142.311506][ T291] usb_probe_interface+0x610/0xaf0 [ 142.316600][ T291] really_probe+0x2cb/0x960 [ 142.321103][ T291] __driver_probe_device+0x198/0x280 [ 142.326373][ T291] driver_probe_device+0x54/0x3e0 [ 142.331475][ T291] page last free stack trace: [ 142.336133][ T291] free_unref_page_prepare+0x742/0x750 [ 142.341589][ T291] free_unref_page+0x8f/0x530 [ 142.346249][ T291] __free_pages+0x67/0x100 [ 142.350647][ T291] __free_slab+0xca/0x1a0 [ 142.354959][ T291] __unfreeze_partials+0x160/0x190 [ 142.360053][ T291] put_cpu_partial+0xa9/0x100 [ 142.364713][ T291] __slab_free+0x1c4/0x280 [ 142.369130][ T291] ___cache_free+0xbf/0xd0 [ 142.373538][ T291] qlist_free_all+0xc6/0x140 [ 142.378151][ T291] kasan_quarantine_reduce+0x14a/0x170 [ 142.383698][ T291] __kasan_slab_alloc+0x24/0x80 [ 142.388536][ T291] slab_post_alloc_hook+0x4f/0x2d0 [ 142.393628][ T291] __kmem_cache_alloc_node+0x192/0x2c0 [ 142.399085][ T291] __kmalloc+0xa1/0x1e0 [ 142.403328][ T291] usb_set_configuration+0x335/0x1f10 [ 142.408686][ T291] usb_generic_driver_probe+0x91/0x150 [ 142.414158][ T291] [ 142.416472][ T291] Memory state around the buggy address: [ 142.422085][ T291] ffff8881264c8900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 142.430127][ T291] ffff8881264c8980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 142.438172][ T291] >ffff8881264c8a00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 142.446211][ T291] ^ [ 142.450258][ T291] ffff8881264c8a80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 142.458387][ T291] ffff8881264c8b00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 142.466430][ T291] ================================================================== [ 142.474469][ T291] Disabling lock debugging due to kernel taint [ 142.482607][ T7303] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=3 sclass=netlink_route_socket pid=7303 comm=syz.8.2960 [ 142.499695][ T291] usb 2-1: USB disconnect, device number 23 [ 142.588686][ C0] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN [ 142.600421][ C0] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 142.608829][ C0] CPU: 0 PID: 0 Comm: swapper/0 Tainted: G B 6.1.134-syzkaller-00039-g3c6d0251e1fb #0 [ 142.619759][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 142.629884][ C0] RIP: 0010:__queue_work+0x575/0xd30 [ 142.635170][ C0] Code: 39 2b 0f 84 b9 00 00 00 e8 28 d0 28 00 4c 89 ff e8 30 8d a8 03 49 bc 00 00 00 00 00 fc ff df 4c 8b 6d d0 4c 89 e8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ef e8 7c 21 6d 00 49 8b 7d 00 e8 13 89 [ 142.654795][ C0] RSP: 0018:ffffc90000007c70 EFLAGS: 00010046 [ 142.661059][ C0] RAX: 0000000000000000 RBX: 000000007fffffff RCX: ffffffff86e1c500 [ 142.669019][ C0] RDX: 0000000000000100 RSI: 000000007fffffff RDI: 000000007fffffff [ 142.676995][ C0] RBP: ffffc90000007d08 R08: fffffffffffffffb R09: 0000000000000007 [ 142.684979][ C0] R10: ffffed1024c99139 R11: 1ffff11024c99139 R12: dffffc0000000000 [ 142.692978][ C0] R13: 0000000000000000 R14: ffff8881264c89c8 R15: 0000000000000008 [ 142.700949][ C0] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 142.709895][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 142.716485][ C0] CR2: 000000110c3223d7 CR3: 000000010b6cf000 CR4: 00000000003526b0 [ 142.724460][ C0] Call Trace: [ 142.727728][ C0] [ 142.730575][ C0] delayed_work_timer_fn+0x61/0x80 [ 142.735703][ C0] ? __cfi_delayed_work_timer_fn+0x10/0x10 [ 142.741682][ C0] call_timer_fn+0x46/0x2a0 [ 142.746196][ C0] ? __cfi_delayed_work_timer_fn+0x10/0x10 [ 142.752011][ C0] __run_timers+0x667/0x9a0 [ 142.756508][ C0] ? calc_index+0x200/0x200 [ 142.760998][ C0] ? kvm_sched_clock_read+0x18/0x40 [ 142.766272][ C0] run_timer_softirq+0x6a/0xf0 [ 142.771029][ C0] handle_softirqs+0x1d7/0x600 [ 142.775777][ C0] ? irqtime_account_irq+0xc4/0x240 [ 142.780960][ C0] __irq_exit_rcu+0x52/0xf0 [ 142.785474][ C0] irq_exit_rcu+0x9/0x10 [ 142.789740][ C0] sysvec_apic_timer_interrupt+0xa9/0xc0 [ 142.795369][ C0] [ 142.798293][ C0] [ 142.801213][ C0] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 142.807184][ C0] RIP: 0010:default_idle+0xf/0x20 [ 142.812193][ C0] Code: e9 47 ff ff ff 00 00 cc cc 00 00 90 90 90 90 90 90 90 90 90 90 90 b8 0c 67 40 a5 55 48 89 e5 66 90 0f 00 2d 83 ba 56 00 fb f4 <5d> c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 90 90 90 90 90 [ 142.831791][ C0] RSP: 0018:ffffffff86e07d58 EFLAGS: 00000257 [ 142.837969][ C0] RAX: ffff8881f7000000 RBX: ffffffff86e1c500 RCX: df61585c4113a000 [ 142.845934][ C0] RDX: 0000000000000001 RSI: ffffffff85a9f840 RDI: ffffffff85a9f800 [ 142.853893][ C0] RBP: ffffffff86e07d58 R08: dffffc0000000000 R09: ffffed103ee068ff [ 142.861859][ C0] R10: 0000000000000000 R11: ffffffff84ef7b70 R12: 0000000000000000 [ 142.869819][ C0] R13: 0000000000000000 R14: ffffffff86e1c500 R15: dffffc0000000000 [ 142.877962][ C0] ? __cfi_default_idle+0x10/0x10 [ 142.882988][ C0] arch_cpu_idle+0x1c/0x20 [ 142.887401][ C0] default_idle_call+0x71/0x1d0 [ 142.892240][ C0] do_idle+0x1a7/0x520 [ 142.896304][ C0] ? ct_irq_exit+0x9/0x10 [ 142.900620][ C0] ? idle_inject_timer_fn+0x60/0x60 [ 142.905804][ C0] cpu_startup_entry+0x43/0x60 [ 142.910574][ C0] rest_init+0x10a/0x130 [ 142.914817][ C0] ? __cfi_x86_late_time_init+0x8/0x8 [ 142.920180][ C0] arch_call_rest_init+0xe/0x10 [ 142.925014][ C0] start_kernel+0x47d/0x4eb [ 142.929510][ C0] x86_64_start_reservations+0x2a/0x2c [ 142.934993][ C0] x86_64_start_kernel+0x7c/0x81 [ 142.939939][ C0] secondary_startup_64_no_verify+0xce/0xdb [ 142.945829][ C0] [ 142.948838][ C0] Modules linked in: [ 142.952738][ C0] ---[ end trace 0000000000000000 ]--- [ 142.958196][ C0] RIP: 0010:__queue_work+0x575/0xd30 [ 142.963468][ C0] Code: 39 2b 0f 84 b9 00 00 00 e8 28 d0 28 00 4c 89 ff e8 30 8d a8 03 49 bc 00 00 00 00 00 fc ff df 4c 8b 6d d0 4c 89 e8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ef e8 7c 21 6d 00 49 8b 7d 00 e8 13 89 [ 142.983058][ C0] RSP: 0018:ffffc90000007c70 EFLAGS: 00010046 [ 142.989141][ C0] RAX: 0000000000000000 RBX: 000000007fffffff RCX: ffffffff86e1c500 [ 142.997102][ C0] RDX: 0000000000000100 RSI: 000000007fffffff RDI: 000000007fffffff [ 143.005058][ C0] RBP: ffffc90000007d08 R08: fffffffffffffffb R09: 0000000000000007 [ 143.013106][ C0] R10: ffffed1024c99139 R11: 1ffff11024c99139 R12: dffffc0000000000 [ 143.021061][ C0] R13: 0000000000000000 R14: ffff8881264c89c8 R15: 0000000000000008 [ 143.029018][ C0] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 143.037930][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 143.044501][ C0] CR2: 000000110c3223d7 CR3: 000000010b6cf000 CR4: 00000000003526b0 [ 143.052478][ C0] Kernel panic - not syncing: Fatal exception in interrupt [ 143.059966][ C0] Kernel Offset: disabled [ 143.064366][ C0] Rebooting in 86400 seconds..