last executing test programs: 50.167369983s ago: executing program 2 (id=161): mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',g']) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000400)=ANY=[@ANYBLOB="01000000000000000a000000"]) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000340)=ANY=[@ANYBLOB="01000000000000008e03"]) 50.131810396s ago: executing program 2 (id=162): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb80, &(0x7f0000000c40)="$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") chdir(&(0x7f0000000240)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x60) ioctl$FS_IOC_ENABLE_VERITY(r1, 0x8004587d, &(0x7f0000000140)={0x1, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000a80)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) 50.042893835s ago: executing program 2 (id=165): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x1000}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000017c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r1, 0x20e, 0xe40, 0xfd000004, &(0x7f00000004c0)="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", 0x0, 0x31, 0x6000000000000000, 0xfffffffffffffe7e, 0x1d4}, 0x28) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x6, 0x300, 0xfc}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000480)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00@\x00', 0x14, 0x6, 0x0, @private0, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 49.960820773s ago: executing program 2 (id=167): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x2000040, &(0x7f00000007c0)={[{@errors_remount}, {@nodiscard}, {@noquota}, {@init_itable}, {@stripe={'stripe', 0x3d, 0x79}}, {@resgid}, {@sysvgroups}, {@delalloc}, {@usrquota}]}, 0x10, 0x4d2, &(0x7f00000002c0)="$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") r0 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000100)='./bus\x00', 0x14113e, 0x0) write$binfmt_script(r1, &(0x7f0000000080), 0x208e24b) write$selinux_user(r0, 0x0, 0x29) 49.793551369s ago: executing program 2 (id=171): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r2}, 0x10) listen(r0, 0x3) 49.626750395s ago: executing program 2 (id=175): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xeef, 0x72d0, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220f000000a3"], 0x0}, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x0}, 0x0) 49.626467955s ago: executing program 32 (id=175): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xeef, 0x72d0, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220f000000a3"], 0x0}, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x0}, 0x0) 31.836407736s ago: executing program 1 (id=511): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r2}, 0x10) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0xb96, 0x0, 0x0) 31.824727017s ago: executing program 1 (id=512): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000089100007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='mm_page_alloc\x00', r1}, 0x10) syz_clone(0x40100000, 0x0, 0x0, 0x0, 0x0, 0x0) 31.787189801s ago: executing program 1 (id=513): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) readahead(r1, 0x2, 0x7) 31.775028021s ago: executing program 1 (id=514): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000880)={[{@errors_remount}, {@bsdgroups}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5e}}, {@noauto_da_alloc}, {@bsdgroups}, {@oldalloc}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x2, 0x44a, &(0x7f0000000400)="$eJzs281vFOUfAPDvzLbl9+OtFfEFRK0SY+NLSwsqBy8aTTxgNNEDHuu2EMJCDa2JECLVGLyYGBI9G48m/gXevBj1ZOJV74aEKBfQU83MzsDuslsobHcr+/kkA8+z82yf57vPPDPPzLMbwMAaz/5JIrZGxG8RMVrPNhcYr/939fLZ6t+Xz1aTWFl5688kL3fl8tlqWbR835YiM5FGpJ8kRSXNFk+fOT5bq82fKvJTSyfem1o8febZYydmj84fnT85c/Dggf3TLzw/81xX4sziurL7w4U9u15758Lr1cMX3v3p26y9W4v9jXF0y3gW+F8rudZ9T3S7sj7b1pBOhvrYENakEhFZdw3n4380KnG980bj1Y/72jhgXWXXpk2ddy+vAHexJPrdAqA/ygt9dv9bbj2aemwIl16q3wBlcV8ttvqeoUiLMsMt97fdNB4Rh5f/+SrbYp2eQwAANPqs+uWheKbd/C+N+xvKbS/WUMYi4p6I2BER90bEzoi4LyIv+0BEPLjG+luXhm6c/6QXbyuwW5TN/14s1raa53/l7C/GKkVuWx7/cHLkWG1+X/GZTMTwpiw/vUod37/y6+ed9jXO/7Itq7+cCxbtuDjU8oBubnZpNp+UdsGljyJ2D7WLP7m2EpBExK6I2L22P729TBx76ps9nQrdPP5VdGGdaeXriCfr/b8cLfGXktXXJ6f+F7X5fVPlUXGjn385/2an+u8o/i7I+n9z8/HfWmQsaVyvXVx7Hed//7TjPc3tHv8jydv5+WikeO2D2aWlU9MRI8mhPN/0+sz195b5snwW/8Te9uN/R/GeLP6HIiI7iB+OiEci4tGi7Y9FxOMRsXeV+H98ufO+jdD/c23Pf9eO/5b+X3uicvyH7zrVf2v9fyBPTRSv5Oe/m7jVBt7JZwcAAAD/FWn+HfgknbyWTtPJyfp3+HfG5rS2sLj09JGF90/O1b8rPxbDafmka7Theeh0slz8xXp+pnhWXO7fXzw3/qLy/zw/WV2ozfU5dhh0WzqM/8wflX63Dlh37dbRZkb60BCg51rHf9qcPfdGLxsD9JTfa8Pgusn4T3vVDqD3XP9hcLUb/+da8tYC4O7k+g+Dy/iHwWX8w+Ay/mEg3cnv+iUGORHphmiGxDol+n1mAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6I5/AwAA///K8u7c") mount(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) lseek(r0, 0x1, 0x0) getdents(r0, 0x0, 0x58) 31.617162557s ago: executing program 1 (id=515): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010bd28710000000000000109022400010000000009040100010300000009210200000122050009058103"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f00000002c0)={0x2c, &(0x7f0000000080)={0x0, 0xd, 0x5, {0x5, 0x22, "4a20ee"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, &(0x7f0000000040)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 31.418873826s ago: executing program 1 (id=522): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000080)='sys_enter\x00', r0}, 0x10) r1 = gettid() r2 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffe]}, 0x8) read(r2, &(0x7f0000000740)=""/384, 0x200008c0) tkill(r1, 0x7) 31.418605416s ago: executing program 33 (id=522): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000080)='sys_enter\x00', r0}, 0x10) r1 = gettid() r2 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffe]}, 0x8) read(r2, &(0x7f0000000740)=""/384, 0x200008c0) tkill(r1, 0x7) 23.806788364s ago: executing program 3 (id=654): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a000000030000000700000009"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000004e8100000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000080), &(0x7f0000000200)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) times(0x0) 23.794469915s ago: executing program 3 (id=658): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$FUSE_INIT(r2, &(0x7f0000000200)={0x50, 0x0, 0x0, {0x7, 0x28, 0x0, 0x0, 0x8000}}, 0x50) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) 23.7410524s ago: executing program 3 (id=661): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 23.654087398s ago: executing program 3 (id=662): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x2, &(0x7f0000000100)={[{@noblock_validity}, {@dioread_nolock}, {@errors_remount}, {@minixdf}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [{@appraise_type}], 0x2c}, 0x84, 0x463, &(0x7f0000000b00)="$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") mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) chdir(&(0x7f0000000180)='./file0\x00') rename(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') chdir(0x0) rename(&(0x7f0000000140)='./file0\x00', &(0x7f0000001180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 23.542593449s ago: executing program 3 (id=666): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) r1 = syz_io_uring_setup(0x68e9, &(0x7f0000000400)={0x0, 0x0, 0x2}, &(0x7f0000004000), &(0x7f0000000340)) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0x13, 0x2000ac0a, r2) 23.373313775s ago: executing program 3 (id=670): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x8, &(0x7f00000028c0)=ANY=[@ANYBLOB="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"/3985], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x49) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x2, 0x2, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x5, 0x0, @void, @value, @void, @value}, 0x48) r1 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @multicast1}, @address_request}}}}, 0x0) sendmsg(r1, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x2c, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x3e}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) 23.373052665s ago: executing program 34 (id=670): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x8, &(0x7f00000028c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6423cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa727bb13e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff90326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b47b5cca96c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263f49863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3abe0f34d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf169c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f816c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a9779571bf38ae1981c4238ecaee6f75cd0a6881bd1517b8250ddc8274152f94e3a409e2a3bce109b60000000000100000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee35e3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa544920605d3a78a1e73393d548961429549b083dbd334b47f067bbab40743b2a42010082008df75c1081920386f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f8005000000bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d3d80067d5fec121ea0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d7b0fdf974fcf36cbf6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e73979216faf565ef8df69e720413267a6ccea92753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd574d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97d8ecc467ace45feeb685c5870d05f88a0f463db88d373442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af975336e2172e3fcc01b8babb757a5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba291110000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc5d258789b24052137e9637f3efbab71720f88c3c44b3b7486f979e8a3174b531f573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d0104361c37c61a43b5afd865b60d4cae891b73220f17d25979a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e64701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867ec92d13a4faa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4e4a2689217380400a9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a000000000000000000000000000020bd79e41c6821000000000000000791ad640e12c12fe11d70fe495906f2d5d71778acbd4eee53a3996cb0de84bd2b059d60c0f96a53ea44e0b293865aa68d4739f87db976e36ad6c06912244d4c883c4aaa60b4a1392ce0b2f2c519663b4652ff871e0f6dfff9f7d34ecf04be0a58c3d53174b67d1886e34b81ad8c60da56acc64739c3acab24aa8d0ac92d465074f915608b1b60a948bad401b1a7fb3627bbe6c45123ed44bfdf8cc143bd1b7a663dc3d0476b8e39becffc429e41f66b1e37ae52aacaff0f1dc8ea70b68c25072e20586b19127d75fa71577f265c5100000000ff00000000000000001fd173f4c76085f035b092d94a40cda79e8f32ff2de749c21252e41809f1b9b529c0b9e02578e77c7f74dfbadc57e26a73528aa9b3404202c69e89d66156f4ef0ebb5036a4df0e4ddf2b75d96d5bec3135ac538720a0c5c704eba21d440b3fc7c3b17eee66800821d8a408f783b9338bb35696abe6cf46798661074e60adbd51550c663d3f0653829d0a612b2e378a1233097c38ad5595abe9f1b0e1924f75673ba3cdf88a2572d202dd462c75fd8d2f5cc680cbf36ca32a123faa00"/3985], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x49) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x2, 0x2, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x5, 0x0, @void, @value, @void, @value}, 0x48) r1 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @multicast1}, @address_request}}}}, 0x0) sendmsg(r1, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x2c, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x3e}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) 11.418218608s ago: executing program 4 (id=937): r0 = fsopen(&(0x7f0000000080)='sysfs\x00', 0x0) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x810412, &(0x7f0000000400)=ANY=[@ANYRES32=r2, @ANYBLOB="749235c63bc001e29d7d09ef375f63128afacfe8f0ceeecb4e94d802fcf7fb224c8e9d9df582f661c26d2970f7ab1e0f14f11584b083ba27367e9700cdb013122b6f248e89447aa3b0ffba27c76545e41126f8c5b59b3e9a839669f2a212105589ad1abd707ddc", @ANYRES32, @ANYRES16=r0, @ANYRES32, @ANYRESOCT=r1, @ANYBLOB="77664895cba8dfdce399457cc28f7ded08ead3c0ec4c625aa2c471c377f46988078d00df4dbf922b6d413f529ebd63fad7f2d1c2eb5b8f26cb542c036fdb58341f55efafb88cfb32b4463aed848c7d22bde6d7046c734381291393fdec64d930caf86895846a8189006de1f11a9c5f543adad2a65e2494c99e256287f4bb58ec0375b688db94f3c0053cc848a566f17fa3025e7d8e5f5750d14f7309d69fe58b4b5779e5f5259bfe19c0efe18aefa4d385e7", @ANYRESOCT], 0x2, 0x1e3, &(0x7f0000000b40)="$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") r3 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r3, 0x7, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r3, 0x7, 0x0, 0x0, 0x0) 11.380306462s ago: executing program 4 (id=938): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000800850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = dup(r2) sendmsg$netlink(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)=[{0x0, 0x1b8}], 0x1}, 0x0) 11.278796372s ago: executing program 4 (id=939): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000480)={0x1, &(0x7f0000000b00)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ff5}]}) get_robust_list(0x0, 0x0, 0x0) 11.226804317s ago: executing program 4 (id=940): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./bus\x00', 0x0, &(0x7f0000000240)={[{@errors_remount}, {@jqfmt_vfsold}, {@noquota}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x79}}, {@resgid}, {@data_err_ignore}, {@init_itable}, {@errors_continue}]}, 0x1, 0x4e2, &(0x7f0000000d80)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) mount$incfs(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, 0x0) mount$overlay(0x0, &(0x7f0000001340)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) 10.898231488s ago: executing program 4 (id=948): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x2, 0xc, 0x1400, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x4, 0x7fe2, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000006c0)={r2, &(0x7f0000000500), &(0x7f0000000600)=""/155}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r2, &(0x7f0000000040), &(0x7f0000000480)=""/146}, 0x1d) 10.736047673s ago: executing program 4 (id=956): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0xed7, &(0x7f0000000080)=0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000031c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf7cf39e3100c8acaa47684f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d7559f3b14820ed58b15627c95aa0b784625704f07372c29184ff7f4a7c0000070015006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e000000000000041201baa80b0b8ed8fb1ec577c377f627daaf787a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bdeda7be586602d985430cea080000000000fb1a26abfb0767192361448279b05d96a703a660587a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aab926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb155481ef836eb0f8c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaed2b25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec0271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761036eafed1fb2b98b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe514283707c70600000000000000b7561301bb997316db01ee601f2c9659db9bc04f7089a660d8dcc3ae83169cf331efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a515d83129cd857c775f9e7d6101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af403269b4a39ce40293947d9a631bcbe3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562e00e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb2214209ed2d5d776e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b55ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f608ce27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e30400000000000000000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a95d32f46ed9bd1f00fb8191bbab2dc599dda61ee2010000294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bfe2777e808fcba821a00e8c5c39609ff854256cb490000000000c1fee30a3f7a85d1b2b458c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd210819203828b202779d386ed295f023c67d867014d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff00004043060000005dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df40600000000000000e9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f00000000010000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b0600b805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1202000000b59fed817072a0da60160761fd3dffda0f7c742eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7000000000000000542954c167dd9b4acd946ffffffffffffffff1389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c9e281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b630500163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6e452a31bde54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f700400fa0c61d5fe6d8ff353f631080405547d65375ae04f44f0c2543c772c5ccb137be7dc87746e1785a8214454d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b036e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e010000005a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb3985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1428c0805b4031a667e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a9cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab9100781b9912160a3fd2a2e74dd690c57bdfdc1f069f9491bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c1227c8bed10591958c906321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b863af34bac64c247672a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677ec97c5c568a89d6e36b165c39132a0f27080ece2a94c360b002c77f82662675a7713c7067081cac1599a998c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc215a18ca0265400abf38e90000000000000000008faf2cddffbfa66bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942ce18e57bb7f337df5435bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de286553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c03f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c872a4882d21db2046a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265441d513a1294b8439276394945d94a589708e32a1cb30a8b07b391201385e0b92ecbb7b13d7a87284164018ace6ce58a82c5de321452461089cdd69259f5390f5f508646a524490583c30630bedb47e158ad41c0a653e86a4f4f255cd2a6e95f33b586823aef5564d9de1f5bdd8c80e193f0597b8003860302cd243c00bc5a82c52afb115d16258d507937966bb89409d6d47b8b652d0761d7c72875ae1efb9bc7c6807c2d783e31fd9cd7e84d3d50d8fc44ab8ac9ccd2c0d42e3bd4c029241320446bbf47e23d1320de30fbdf7ed13f80c28fb5c13fccc2e3f73509bdcddad8a2fe48cdd61f2f43611704af64eed8b0cbbd08754f93b8f3d6347aad5cde1ccc5cbd5eaa87e52cea257c856a4af5243eeb5e89f0000000000000000f420df5e4c6d856b3d55e455c08110b2ef4255a38f81555e8e1f22d59c0bc3c9013e66a1f5bda1b695e1602c0afb5c35b2f68f3b151b1e869f40ff4d1bef5e926e1ff95f6321131e4cb797f53455a093a95e67605222d6acc29c46e5db1ef3b8b07e2169fb24ced4b3ae87ebeca06df93212e465bbd1a7e41df2e1a0d508f86cfc7a469ac682685c44692877d03c34c23a65d2677acc73b5d276fdebd685c9b7a079eae228d8426188cb19b083548f5f29e493ab079f33d1965dcbb165015c46998ad410d60cc65fcfa73bd65a43fc024455c4bf530d663976cf71490577251780ab6b1cf8d397444b5be575229f687a3d95ea6b2aa62fce8acb3d4a6a130b4fefa55d0c1d6f3fa448ee24e588e2965c9a442f0baf90923dda91a6850fb7b9c7f432b63001423fedcf053fa28024cc9a178a07042dabc07176fc524032c2edb340c9c18a83565c431aeb0c869683507255254430f90f61e4eca9c8fa98c000b35fec357ee1ebd08439bd95c1ab0753dfd2603d1608bd8c589a1e160000a6ee0ad13346e08738c2d7b00b5d121d918f1dc8bceded939fa8605b54b37cdfcea0bf2bc63e655dc04a2e50212ff89d6587d49896ce18916cf3adc12839c345ca91bb232b891fae2fdd68aaa38281c0feb2c107af3e080d6cdd1c6646ec6804d7e9960c02aa0db9eda24bbcb287fd2a890fa7f9d6ae0c0b1f8dd1603c9ea2f66b572276f96a28b5b6dd9f9bf6ad4bdaa2139b90faf1f40b0f141258578bd825daaaf718d21b7ac05fe5d1b699e5422ca341fe1c944f68fe3a6d783dcf30b0e09d7688f696883b61cb64464b04d351a0a69b0733c348049b0430ed40e200f4ff0000000000000000000000996bcc1b721b152c892fab887e7d20466d90c049c0fdf51dcc16d226a2619c6f47bc25b7f5df5c09fed638922ed127ab36aa7b0c58a2ce5894b1b0f5375d340d96b69b966b05daaf585121a9c7605ed8e9964eef1f14b74cbb2ccdadc6d0b77cf0492b75e1cd11bfdcfddde91b20366715ba0cbe1041be2a65c25d7ca15ef8b71bd2ab9a4294899a1964b0152518fc2ac15a728bcb9e2bc4b551dfdf9011a2a607bc39ad2c4d7c64dcf967724e9b63c397d5265ad3f1da4395a5a800d8845257dcbf210d4f00fe0bd3deed05e506736e6bb6d40ee6cb960bcdb33633ee87f82beb665a9a4c2d4d2b06479ade3a4cd6bba765c9f52b52a0bdd0849ab92baae3775570accb5a57ee9f0035fc6d3df4eebec2e7eb4ff863d3979a20f4428ddca471037b49d4fd130743a97faa02c293b721e52bf53d64c6585e138162331ef98792e1e9b21a6a084fb7b42c64062ef1323a8a65a8ed6038f274f28ff4f78136a1ef108efbe8c4f4e347d50dcdbc33bf3ade4c3a39d316061930d7dd39b8acdecc3f27830e3eda40e648328d95a9aee65a9dd09fd4e96d5b852025dc53ec3f30cc753e6a796084b4e34f521dbb230ae0f3b79142073d437e1fd22d3b7503ffa95b1d5c7740b0ecbfd35dc0f8af895583dfcc2689f6e02c2dd4b57f3dcac54f40da013eb221fa3d65de760576031052c25a96ed4b20230b36d46d3d3fd6bb1d77cc8a48a6b10fa0149e55ccde4a2b26cca2d1ca9191c74ab006a602543fc24d1283e353cfb917620000000024bf3eed258c02a591ec4cd295212d9a98d38745f6f6c4530900000000000000f184f239098bf32551c7cf454e2865974f6520112743f73c619c3cab5609e00178f7393e53462f31559220c026bbde09837bf1b3ffe748a3247c9569f0c5e99f4494f93e0fa1badca90c888616eca97bddabd8003fc12a084d4b11d841979e161b998ddda92f194c4ec7947b7b303be11e0962d429a2c542a28c4932e14c123dfe2b8ec47a11cce134fd6e42a9f4e00ab6de6b45"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) io_submit(r1, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)="0200ffff0000", 0x6, 0x0, 0x0, 0x2}]) 10.706900096s ago: executing program 35 (id=956): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0xed7, &(0x7f0000000080)=0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000031c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) io_submit(r1, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)="0200ffff0000", 0x6, 0x0, 0x0, 0x2}]) 4.472859222s ago: executing program 8 (id=1083): syz_usb_connect(0x0, 0x2d, &(0x7f0000000800)=ANY=[@ANYBLOB="12010000256930108205050088000002030109021b000100000000090402000191baf20509050b02"], 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000015000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) 3.355668259s ago: executing program 5 (id=1113): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)="e6", 0x1}], 0x1}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x2a, &(0x7f0000000100)=r2, 0x4) recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x2) close(r1) 3.281578926s ago: executing program 5 (id=1114): syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000180)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)}]) r1 = openat$incfs(r0, &(0x7f00000001c0)='.pending_reads\x00', 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xc0386723, 0x20000000) 3.23947832s ago: executing program 5 (id=1115): mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = inotify_init() inotify_add_watch(r0, &(0x7f00000000c0)='./file0\x00', 0x4000001) inotify_add_watch(r0, &(0x7f0000000240)='./file0/bus\x00', 0x10000882) umount2(&(0x7f0000000000)='./file0\x00', 0x0) 3.201715654s ago: executing program 5 (id=1116): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) unlinkat(0xffffffffffffffff, 0x0, 0x0) 3.147789509s ago: executing program 5 (id=1117): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./file1\x00', 0x101880a, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x1, 0x550b, &(0x7f00000079c0)="$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") r0 = creat(&(0x7f0000000140)='./bus\x00', 0x41) io_setup(0x203, &(0x7f0000000040)=0x0) r2 = open(&(0x7f0000000300)='./bus\x00', 0x400141042, 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x1670e68) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0xe7030003, 0x9, 0x1, 0x0, r0, 0x0, 0x0, 0xffffffff}]) 2.693752622s ago: executing program 6 (id=1129): syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000001900)=ANY=[@ANYBLOB='nonumtail=0,iocharset=cp950,umask=00000000000000000000000,uni_xlate=1,uni_xlate=1,shortname=win95,utf8=0,shortname=win95,utf8=1,uid=', @ANYRESHEX=0x0, @ANYBLOB="2c73686f72746e616d653d77696e6e742c756e695f786c6174653d312c696f636861727365743d6d616363726f617469616e2c696f636861727365743d63703433372c757365667265652c726f6469722c7569643e74353a7bd912f41b207e4bc4478b479f5a21373fd412d72f65702b57308921a665e19ef4cc41aac5e7c09d211fd4c1fbf43833c769c6b16297c14d0d92df4f0371acd1b184d6", @ANYRES16, @ANYBLOB="2c2b8f688a63e7770600"], 0x6, 0x2aa, &(0x7f0000000500)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setfsuid(r2) utimensat(r0, 0x0, &(0x7f0000000080)={{}, {0x77359400}}, 0x0) 2.642920767s ago: executing program 7 (id=1131): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0xc9d7, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) rename(&(0x7f0000000300)='./control/file0\x00', &(0x7f0000000180)='./file1\x00') 2.629626628s ago: executing program 7 (id=1132): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$tipc(0x1e, 0x1, 0x0) listen(r1, 0x0) r2 = dup(r0) mount$9p_fd(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 2.579007643s ago: executing program 8 (id=1133): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x13, r2, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000000c0)={[0x4b88, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x5, 0x6, 0x0, 0x4], 0xf7ff1000, 0x204}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.578462013s ago: executing program 6 (id=1143): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000480)=0x5, 0x4) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000001000)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000640)="0036d551863e1902129da79f5986e05288f50e5398660c1a29b0f45c0cc36902e0251c8d34197b357b32b161f9ad72d55a0eab976aae24ed805271b43f0ce2fea5e764494873e0d82a172b3bb54f59b458fd35039c7d81e9ab07f2fb4dad61bd500a119b54c74a12e4569e47b69a95f92c6380", 0x73}], 0x1}}], 0x1, 0x0) 550.063068ms ago: executing program 0 (id=1135): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = dup(r0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000000080)=[{0x6}]}, 0x10) dup3(r1, r2, 0x0) 546.993868ms ago: executing program 6 (id=1136): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1801000000001f00000000000000ea1f850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0xff4d, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x180204}], 0x1) 541.282808ms ago: executing program 8 (id=1137): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = memfd_create(&(0x7f0000000080)='#}\x04\xe4\xfc\x1e\xff~\xb1\xe0\xa5\x9d\xc8\xca3\'\x12xY!\xa4\x9c\x97\xf1\xfc\xb0\xe8~\x91\xd5\x04i}\x03\x00@\x0e\xe6\x995b\x00\x00\x00\x00\x00\x00\x00\x8e\x96\xb7=\xb9OmILO\x8d\x00\x00\x00\x00\x00\xfe\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) ftruncate(r1, 0x40001) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000000)=0x7, 0x4) sendfile(r0, r1, 0x0, 0xffe4) 523.03642ms ago: executing program 7 (id=1138): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000001000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000300)={0xe0001, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 514.71035ms ago: executing program 0 (id=1139): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) getrlimit(0xb, &(0x7f0000000080)) 505.479941ms ago: executing program 8 (id=1140): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) lgetxattr(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0) 453.355256ms ago: executing program 8 (id=1141): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x10005, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0xc) 437.360048ms ago: executing program 7 (id=1142): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x10) epoll_create(0x8000) 431.637389ms ago: executing program 5 (id=1144): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000340)='sched_process_wait\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) waitid$P_PIDFD(0x2, r2, 0x0, 0x8, 0x0) 371.414065ms ago: executing program 6 (id=1145): process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) setgroups(0x0, 0x0) 370.792565ms ago: executing program 0 (id=1155): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x1, 0xa, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000240)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r3, &(0x7f0000000040)=0x1c8, 0x12) 277.606463ms ago: executing program 8 (id=1146): connect$tipc(0xffffffffffffffff, 0x0, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f00000002c0)={0x0, {'syz0\x00', 'syz0\x00', 'syz1\x00', &(0x7f0000000540)=""/32, 0x20}}, 0x120) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000000000040341a02080000000000010902"], 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGFEATURE(r1, 0x80084808, 0x0) 272.931154ms ago: executing program 6 (id=1147): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r1}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0x6, 0x4, 0x8000, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 266.276565ms ago: executing program 0 (id=1148): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000003c0)=[@increfs], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x10, 0x0, &(0x7f00000002c0)=[@request_death={0x400c6313}], 0x0, 0x0, 0x0}) 255.066576ms ago: executing program 7 (id=1149): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2000490, &(0x7f0000000000)={[{@orlov}, {@errors_remount}]}, 0x1, 0x784, &(0x7f00000007c0)="$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") r0 = open(&(0x7f0000000100)='.\x00', 0x0, 0x0) fstat(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r1, 0x0) syz_genetlink_get_family_id$ethtool(0x0, r0) ioctl$EXT4_IOC_MIGRATE(r0, 0x40086604) 191.637112ms ago: executing program 0 (id=1150): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f00000000c0)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r0, &(0x7f0000004b80)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="8252", 0x2}], 0x1}}], 0x1, 0x4000c000) sendto$inet6(r0, &(0x7f0000000140)="a1319315d8a511221bde21ebc5b6687ca71c359d8087a7", 0x17, 0x0, 0x0, 0x0) 80.071592ms ago: executing program 0 (id=1151): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000002c0)='mm_page_alloc\x00', r2}, 0x10) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, 0x0, 0x5000) 62.454424ms ago: executing program 6 (id=1152): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"/15], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='fib_table_lookup\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a2809302060000fd41fd01020400000a00120002002800000019002d007fffffff0022de1330d54400009b84136ef75afb83de066a5900e1baac968300000000f2ff000001000000", 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x0) 0s ago: executing program 7 (id=1153): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000012c0)='scsi_dispatch_cmd_start\x00', r1}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) kernel console output (not intermixed with test programs): x7437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 34.662219][ T325] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 34.670200][ T325] usb 5-1: config 0 has no interface number 0 [ 34.676498][ T30] audit: type=1400 audit(1730743006.595:370): avc: denied { read } for pid=950 comm="syz.1.268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 34.787291][ T963] input: syz0 as /devices/virtual/input/input4 [ 34.860832][ T325] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 34.868125][ T324] usb 6-1: USB disconnect, device number 2 [ 34.869873][ T325] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 34.883296][ T370] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 34.894045][ T370] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 34.903589][ T325] usb 5-1: Product: syz [ 34.907632][ T325] usb 5-1: Manufacturer: syz [ 34.912453][ T370] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 34.921854][ T325] usb 5-1: SerialNumber: syz [ 34.926818][ T370] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 34.935344][ T325] usb 5-1: config 0 descriptor?? [ 34.944443][ T370] usb 4-1: config 0 descriptor?? [ 34.971448][ T325] smsc95xx v2.0.0 [ 34.994770][ T975] loop0: detected capacity change from 0 to 128 [ 35.010060][ T975] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 35.020545][ T975] ext4 filesystem being mounted at /45/file0 supports timestamps until 2038 (0x7fffffff) [ 35.037897][ T30] audit: type=1400 audit(1730743006.995:371): avc: denied { setattr } for pid=974 comm="syz.0.279" name="work" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 35.038005][ T975] overlayfs: upper fs needs to support d_type. [ 35.059478][ T6] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 35.081903][ T975] overlayfs: upper fs needs to support d_type. [ 36.130823][ T325] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 36.150715][ T325] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 36.658885][ T995] loop5: detected capacity change from 0 to 128 [ 36.689786][ T995] EXT4-fs (loop5): mounted filesystem without journal. Opts: errors=continue,nouid32,,errors=continue. Quota mode: none. [ 36.702447][ T995] ext4 filesystem being mounted at /11/file0 supports timestamps until 2038 (0x7fffffff) [ 36.720748][ T6] usb 2-1: device descriptor read/all, error -71 [ 36.902460][ T1025] loop5: detected capacity change from 0 to 2048 [ 36.933660][ T1027] loop0: detected capacity change from 0 to 8192 [ 36.962515][ T1025] EXT4-fs (loop5): mounted filesystem without journal. Opts: abort,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 37.001465][ T1026] FAT-fs (loop0): error, fat_free_clusters: deleting FAT entry beyond EOF [ 37.009874][ T1026] FAT-fs (loop0): Filesystem has been set read-only [ 37.200307][ T1048] loop1: detected capacity change from 0 to 512 [ 37.249636][ T1048] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=continue,,errors=continue. Quota mode: writeback. [ 37.262299][ T1048] ext4 filesystem being mounted at /82/file0 supports timestamps until 2038 (0x7fffffff) [ 37.301504][ T325] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 37.328823][ T1061] loop1: detected capacity change from 0 to 2048 [ 37.335093][ T325] smsc95xx: probe of 5-1:0.67 failed with error -71 [ 37.343620][ T325] usb 5-1: USB disconnect, device number 4 [ 37.404044][ T1061] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 37.456188][ T1080] loop0: detected capacity change from 0 to 2048 [ 37.469527][ T1082] netlink: 8 bytes leftover after parsing attributes in process `syz.1.320'. [ 37.552204][ T1080] EXT4-fs (loop0): mounted filesystem without journal. Opts: commit=0x0000000000000005,,errors=continue. Quota mode: none. [ 37.731439][ T370] usbhid 4-1:0.0: can't add hid device: -71 [ 37.739833][ T370] usbhid: probe of 4-1:0.0 failed with error -71 [ 37.748493][ T370] usb 4-1: USB disconnect, device number 5 [ 37.840723][ T6] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 37.855117][ T1101] loop4: detected capacity change from 0 to 256 [ 37.891031][ T1101] FAT-fs (loop4): Directory bread(block 64) failed [ 37.897490][ T1101] FAT-fs (loop4): Directory bread(block 65) failed [ 37.904245][ T1101] FAT-fs (loop4): Directory bread(block 66) failed [ 37.910921][ T1101] FAT-fs (loop4): Directory bread(block 67) failed [ 37.917382][ T1101] FAT-fs (loop4): Directory bread(block 68) failed [ 37.924158][ T1101] FAT-fs (loop4): Directory bread(block 69) failed [ 37.931020][ T1101] FAT-fs (loop4): Directory bread(block 70) failed [ 37.937471][ T1101] FAT-fs (loop4): Directory bread(block 71) failed [ 37.944204][ T1101] FAT-fs (loop4): Directory bread(block 72) failed [ 37.950877][ T1101] FAT-fs (loop4): Directory bread(block 73) failed [ 38.100720][ T370] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 38.240752][ T6] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 38.251895][ T6] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 38.263119][ T6] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 38.276015][ T6] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 38.285083][ T6] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 38.296263][ T6] usb 2-1: config 0 descriptor?? [ 38.330776][ T1084] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 38.340853][ T370] usb 4-1: Using ep0 maxpacket: 16 [ 38.460841][ T370] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 38.471829][ T370] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 38.482215][ T370] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 38.495136][ T370] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 38.504293][ T370] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 38.524517][ T370] usb 4-1: config 0 descriptor?? [ 38.657214][ T1112] loop0: detected capacity change from 0 to 2048 [ 38.694272][ T1112] Alternate GPT is invalid, using primary GPT. [ 38.700473][ T1112] loop0: p2 p3 p7 [ 38.734840][ T1114] loop0: detected capacity change from 0 to 16 [ 38.742105][ T1114] erofs: (device loop0): mounted with root inode @ nid 36. [ 38.751150][ T1114] erofs: (device loop0): erofs_readdir: invalid de[0].nameoff 0 @ nid 36 [ 38.754191][ T319] udevd[319]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 38.760255][ T1114] attempt to access beyond end of device [ 38.760255][ T1114] loop0: rw=0, want=24, limit=16 [ 38.772113][ T311] udevd[311]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 38.781770][ T375] udevd[375]: inotify_add_watch(7, /dev/loop0p7, 10) failed: No such file or directory [ 38.799378][ T6] plantronics 0003:047F:FFFF.000A: unknown main item tag 0xd [ 38.808689][ T6] plantronics 0003:047F:FFFF.000A: No inputs registered, leaving [ 38.813696][ T319] udevd[319]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 38.819186][ T375] udevd[375]: inotify_add_watch(7, /dev/loop0p7, 10) failed: No such file or directory [ 38.831606][ T311] udevd[311]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 38.848949][ T6] plantronics 0003:047F:FFFF.000A: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 38.967923][ T1126] loop4: detected capacity change from 0 to 256 [ 38.982550][ T1126] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xb69a62dc, utbl_chksum : 0xe619d30d) [ 39.035154][ T370] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.000B/input/input6 [ 39.081448][ T6] usb 2-1: USB disconnect, device number 4 [ 39.113164][ T370] microsoft 0003:045E:07DA.000B: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 39.187750][ T1136] binfmt_misc: register: failed to install interpreter file ./file0 [ 39.225123][ T1138] loop4: detected capacity change from 0 to 2048 [ 39.240467][ T370] usb 4-1: USB disconnect, device number 6 [ 39.260310][ T1138] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsv0,errors=remount-ro,. Quota mode: none. [ 39.295649][ T1138] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 39.310635][ T1138] EXT4-fs (loop4): Remounting filesystem read-only [ 39.617866][ T30] kauditd_printk_skb: 65 callbacks suppressed [ 39.617882][ T30] audit: type=1400 audit(1730743011.575:437): avc: denied { setopt } for pid=1153 comm="syz.1.351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 39.664149][ T1156] capability: warning: `syz.1.352' uses deprecated v2 capabilities in a way that may be insecure [ 39.680719][ T607] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 39.884235][ T1168] loop1: detected capacity change from 0 to 512 [ 39.920718][ T607] usb 5-1: Using ep0 maxpacket: 8 [ 39.949663][ T1168] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e01c, mo2=0002] [ 39.957544][ T1168] System zones: 1-12 [ 39.962274][ T1168] EXT4-fs (loop1): orphan cleanup on readonly fs [ 39.968972][ T1168] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.357: bg 0: block 328: padding at end of block bitmap is not set [ 39.984811][ T1163] loop3: detected capacity change from 0 to 40427 [ 39.985089][ T1168] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6185: Corrupt filesystem [ 40.001357][ T1168] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.357: invalid indirect mapped block 65280 (level 0) [ 40.015384][ T1168] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #13: comm syz.1.357: attempt to clear invalid blocks 33619980 len 1 [ 40.032993][ T1163] F2FS-fs (loop3): Invalid log blocks per segment (4278190089) [ 40.040128][ T1168] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.357: invalid indirect mapped block 1819239214 (level 0) [ 40.045838][ T1163] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 40.054467][ T607] usb 5-1: config index 0 descriptor too short (expected 5924, got 36) [ 40.070430][ T1168] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.357: invalid indirect mapped block 1819239214 (level 1) [ 40.084960][ T1163] F2FS-fs (loop3): invalid crc value [ 40.090145][ T607] usb 5-1: config 250 has an invalid interface number: 228 but max is -1 [ 40.099385][ T1168] EXT4-fs (loop1): 1 orphan inode deleted [ 40.105134][ T607] usb 5-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 40.114610][ T1168] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 40.114822][ T607] usb 5-1: config 250 has no interface number 0 [ 40.134518][ T1163] F2FS-fs (loop3): Found nat_bits in checkpoint [ 40.173530][ T607] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 40.200265][ T1163] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 40.207545][ T1163] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 40.229153][ T607] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 40.240044][ T607] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 26 [ 40.251723][ T607] usb 5-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 40.273902][ T607] usb 5-1: config 250 interface 228 has no altsetting 0 [ 40.287888][ T292] attempt to access beyond end of device [ 40.287888][ T292] loop3: rw=2049, want=45112, limit=40427 [ 40.323253][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 40.354327][ T30] audit: type=1400 audit(1730743012.315:438): avc: denied { create } for pid=1188 comm="syz.1.365" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 40.390786][ T30] audit: type=1400 audit(1730743012.315:439): avc: denied { bind } for pid=1188 comm="syz.1.365" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 40.412566][ T607] usb 5-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 40.432525][ T1187] loop0: detected capacity change from 0 to 8192 [ 40.432659][ T607] usb 5-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 40.438872][ T30] audit: type=1400 audit(1730743012.335:440): avc: denied { create } for pid=1190 comm="syz.1.366" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 40.450149][ T607] usb 5-1: Product: syz [ 40.466763][ T30] audit: type=1400 audit(1730743012.335:441): avc: denied { setopt } for pid=1190 comm="syz.1.366" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 40.489309][ T607] usb 5-1: SerialNumber: syz [ 40.509626][ T1197] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 40.531475][ T607] hub 5-1:250.228: bad descriptor, ignoring hub [ 40.537568][ T607] hub: probe of 5-1:250.228 failed with error -5 [ 40.548090][ T1199] loop1: detected capacity change from 0 to 512 [ 40.605349][ T1199] EXT4-fs error (device loop1): ext4_orphan_get:1423: comm syz.1.370: bad orphan inode 17 [ 40.615531][ T1199] ext4_test_bit(bit=16, block=4) = 1 [ 40.621408][ T1199] is_bad_inode(inode)=0 [ 40.626172][ T1199] NEXT_ORPHAN(inode)=0 [ 40.630235][ T1199] max_ino=32 [ 40.633400][ T1199] i_nlink=1 [ 40.636464][ T1199] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 40.661917][ T1199] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm syz.1.370: bg 0: block 7: invalid block bitmap [ 40.752620][ T607] usblp 5-1:250.228: usblp0: USB Bidirectional printer dev 5 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 40.879597][ T1215] loop0: detected capacity change from 0 to 256 [ 40.949158][ T1215] FAT-fs (loop0): Directory bread(block 64) failed [ 40.955658][ T1215] FAT-fs (loop0): Directory bread(block 65) failed [ 40.962163][ T1215] FAT-fs (loop0): Directory bread(block 66) failed [ 40.969048][ T1215] FAT-fs (loop0): Directory bread(block 67) failed [ 40.975592][ T1215] FAT-fs (loop0): Directory bread(block 68) failed [ 40.982047][ T1215] FAT-fs (loop0): Directory bread(block 69) failed [ 40.982882][ T30] audit: type=1400 audit(1730743012.945:442): avc: denied { read write } for pid=1151 comm="syz.4.350" name="lp0" dev="devtmpfs" ino=616 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 40.988597][ T1215] FAT-fs (loop0): Directory bread(block 70) failed [ 41.018419][ T370] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 41.018431][ T1215] FAT-fs (loop0): Directory bread(block 71) failed [ 41.018587][ T1215] FAT-fs (loop0): Directory bread(block 72) failed [ 41.026467][ T30] audit: type=1400 audit(1730743012.945:443): avc: denied { open } for pid=1151 comm="syz.4.350" path="/dev/usb/lp0" dev="devtmpfs" ino=616 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 41.038411][ T1215] FAT-fs (loop0): Directory bread(block 73) failed [ 41.090894][ T647] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 41.130726][ C1] usblp0: nonzero read bulk status received: -71 [ 41.220261][ T321] attempt to access beyond end of device [ 41.220261][ T321] loop0: rw=1, want=1832, limit=256 [ 41.234158][ T321] attempt to access beyond end of device [ 41.234158][ T321] loop0: rw=1, want=8536, limit=256 [ 41.247876][ T321] attempt to access beyond end of device [ 41.247876][ T321] loop0: rw=1, want=12048, limit=256 [ 41.263864][ T6] usb 5-1: USB disconnect, device number 5 [ 41.266071][ T321] attempt to access beyond end of device [ 41.266071][ T321] loop0: rw=1, want=21832, limit=256 [ 41.285667][ T321] attempt to access beyond end of device [ 41.285667][ T321] loop0: rw=1, want=29008, limit=256 [ 41.300402][ T321] attempt to access beyond end of device [ 41.300402][ T321] loop0: rw=1, want=33072, limit=256 [ 41.311214][ T370] usb 2-1: Using ep0 maxpacket: 16 [ 41.313381][ T321] attempt to access beyond end of device [ 41.313381][ T321] loop0: rw=1, want=33800, limit=256 [ 41.340712][ T647] usb 4-1: Using ep0 maxpacket: 32 [ 41.399600][ T1220] tmpfs: Bad value for 'mpol' [ 41.430891][ T370] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 41.442123][ T370] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 41.451967][ T370] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 41.464106][ T1151] usblp0: removed [ 41.465189][ T370] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 41.477293][ T370] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 41.501052][ T1209] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 41.521279][ T370] cdc_acm 2-1:1.0: Control and data interfaces are not separated! [ 41.527997][ T1232] loop0: detected capacity change from 0 to 1024 [ 41.564056][ T1232] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,debug_want_extra_isize=0x0000000000000088,resuid=0x0000000000000000,max_batch_time=0x0000000000000003,lazytime,usrquota,data_err=abort,data_err=abort,,errors=continue. Quota mode: writeback. [ 41.589169][ T30] audit: type=1400 audit(1730743013.555:444): avc: denied { mount } for pid=1231 comm="syz.0.383" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 41.611733][ T30] audit: type=1400 audit(1730743013.575:445): avc: denied { unmount } for pid=290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 41.631295][ T647] usb 4-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 41.640148][ T647] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 41.648063][ T647] usb 4-1: Product: syz [ 41.652122][ T647] usb 4-1: Manufacturer: syz [ 41.656530][ T647] usb 4-1: SerialNumber: syz [ 41.661774][ T647] usb 4-1: config 0 descriptor?? [ 41.701562][ T1238] mmap: syz.0.385 (1238): VmData 29020160 exceed data ulimit 8. Update limits or use boot option ignore_rlimit_data. [ 41.731361][ T370] cdc_acm 2-1:1.0: ttyACM0: USB ACM device [ 41.738665][ T370] usb 2-1: USB disconnect, device number 5 [ 41.990733][ T325] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 42.191601][ T30] audit: type=1326 audit(1730743014.155:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1250 comm="syz.4.390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b28af7719 code=0x7ffc0000 [ 42.350792][ T647] (unnamed net_device) (uninitialized): Assigned a random MAC address: 46:dc:2c:64:cf:52 [ 42.360930][ T325] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 42.373994][ T647] rtl8150 4-1:0.0: eth1: rtl8150 is detected [ 42.380546][ T647] usb 4-1: USB disconnect, device number 7 [ 42.386253][ T325] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 42.398348][ T325] usb 1-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 42.407836][ T325] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 42.421842][ T325] usb 1-1: config 0 descriptor?? [ 42.587286][ T1280] loop1: detected capacity change from 0 to 40427 [ 42.684241][ T1280] F2FS-fs (loop1): fault_injection options not supported [ 42.701868][ T1280] F2FS-fs (loop1): invalid crc value [ 42.708250][ T1280] F2FS-fs (loop1): Found nat_bits in checkpoint [ 42.709338][ T1286] netlink: 20 bytes leftover after parsing attributes in process `syz.4.406'. [ 42.766678][ T1280] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 42.796419][ T1280] attempt to access beyond end of device [ 42.796419][ T1280] loop1: rw=16812033, want=78672, limit=40427 [ 42.832228][ T1299] loop4: detected capacity change from 0 to 1024 [ 42.902914][ T325] hid-led 0003:1D34:000A.000C: unknown main item tag 0x0 [ 42.910025][ T1299] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 42.964808][ T1307] IPv6: NLM_F_CREATE should be specified when creating new route [ 42.977967][ T1307] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 42.985051][ T1307] IPv6: NLM_F_CREATE should be set when creating new route [ 42.992089][ T1307] IPv6: NLM_F_CREATE should be set when creating new route [ 43.101529][ T325] hid-led 0003:1D34:000A.000C: hidraw0: USB HID v0.00 Device [HID 1d34:000a] on usb-dummy_hcd.0-1/input0 [ 43.125425][ T325] hid-led 0003:1D34:000A.000C: Dream Cheeky Webmail Notifier initialized [ 43.220733][ T324] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 43.308629][ T607] usb 1-1: USB disconnect, device number 5 [ 44.290773][ T324] usb 2-1: device descriptor read/all, error -71 [ 44.337042][ T1344] loop3: detected capacity change from 0 to 1024 [ 44.352756][ T1344] EXT4-fs (loop3): Ignoring removed orlov option [ 44.362949][ T1344] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 44.396762][ T1344] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 44.588934][ T1372] syz.4.443[1372] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 44.589012][ T1372] syz.4.443[1372] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 44.754875][ T30] kauditd_printk_skb: 4124 callbacks suppressed [ 44.754891][ T30] audit: type=1400 audit(1730743016.715:4571): avc: denied { unlink } for pid=1375 comm="syz.1.445" name="#5" dev="tmpfs" ino=579 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 44.880749][ T325] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 44.888460][ T647] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 44.945850][ T1382] loop1: detected capacity change from 0 to 40427 [ 45.029683][ T1384] netlink: 8 bytes leftover after parsing attributes in process `syz.0.449'. [ 45.039127][ T1382] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 45.051552][ T1382] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 45.064757][ T1382] F2FS-fs (loop1): invalid crc value [ 45.071983][ T1382] F2FS-fs (loop1): Found nat_bits in checkpoint [ 45.117071][ T1382] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 45.124043][ T1382] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 45.131286][ T325] usb 4-1: Using ep0 maxpacket: 32 [ 45.136234][ T647] usb 5-1: Using ep0 maxpacket: 16 [ 45.170013][ T1382] handle_bad_sector: 1 callbacks suppressed [ 45.170035][ T1382] attempt to access beyond end of device [ 45.170035][ T1382] loop1: rw=2049, want=45104, limit=40427 [ 45.197381][ T321] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 45.206767][ T321] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 45.270783][ T325] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 45.273505][ T1386] loop0: detected capacity change from 0 to 40427 [ 45.281991][ T647] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 45.299828][ T325] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 45.311114][ T647] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 45.320826][ T325] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 45.329762][ T647] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 45.342513][ T325] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 45.350603][ T647] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 45.359770][ T325] usb 4-1: config 0 descriptor?? [ 45.364615][ T647] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 45.372968][ T1386] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 45.380830][ T1371] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 45.388530][ T647] usb 5-1: config 0 descriptor?? [ 45.389868][ T1386] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 45.402402][ T1386] F2FS-fs (loop0): invalid crc value [ 45.409024][ T1386] F2FS-fs (loop0): Found nat_bits in checkpoint [ 45.412059][ T325] hub 4-1:0.0: USB hub found [ 45.464305][ T1386] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 45.471296][ T1386] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 45.493441][ T30] audit: type=1400 audit(1730743017.455:4572): avc: denied { read } for pid=1396 comm="syz.1.451" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=19909 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 45.493866][ T1386] attempt to access beyond end of device [ 45.493866][ T1386] loop0: rw=2049, want=45224, limit=40427 [ 45.535464][ T1386] attempt to access beyond end of device [ 45.535464][ T1386] loop0: rw=2049, want=45224, limit=40427 [ 45.552564][ T45] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 45.561807][ T45] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 45.700760][ T325] hub 4-1:0.0: config failed, can't read hub descriptor (err -22) [ 45.714849][ T30] audit: type=1400 audit(1730743017.675:4573): avc: denied { audit_write } for pid=1401 comm="syz.0.453" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 45.735932][ T30] audit: type=1107 audit(1730743017.675:4574): pid=1401 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 45.810801][ T325] usbhid 4-1:0.0: can't add hid device: -71 [ 45.816570][ T325] usbhid: probe of 4-1:0.0 failed with error -71 [ 45.851089][ T325] usb 4-1: USB disconnect, device number 8 [ 45.891942][ T647] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 45.899041][ T647] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 45.908727][ T647] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 45.916255][ T647] microsoft 0003:045E:07DA.000D: unbalanced collection at end of report description [ 45.925869][ T647] microsoft 0003:045E:07DA.000D: parse failed [ 45.931989][ T647] microsoft: probe of 0003:045E:07DA.000D failed with error -22 [ 46.005980][ T1410] loop0: detected capacity change from 0 to 40427 [ 46.096138][ T325] usb 5-1: USB disconnect, device number 6 [ 46.121193][ T1410] F2FS-fs (loop0): Invalid log blocks per segment (83886089) [ 46.129017][ T1410] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 46.138122][ T1410] F2FS-fs (loop0): invalid crc value [ 46.144452][ T1410] F2FS-fs (loop0): Found nat_bits in checkpoint [ 46.179061][ T30] audit: type=1400 audit(1730743018.135:4575): avc: denied { create } for pid=1412 comm="syz.3.458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 46.180016][ T1413] incfs: Error accessing: ./file0. [ 46.204736][ T1413] incfs: mount failed -20 [ 46.208908][ T1410] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 46.216153][ T1410] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 46.236084][ T30] audit: type=1326 audit(1730743018.195:4576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1416 comm="syz.3.459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a46226719 code=0x7ffc0000 [ 46.248794][ T1410] attempt to access beyond end of device [ 46.248794][ T1410] loop0: rw=2049, want=45104, limit=40427 [ 46.276307][ T1410] attempt to access beyond end of device [ 46.276307][ T1410] loop0: rw=34817, want=45104, limit=40427 [ 46.280482][ T30] audit: type=1326 audit(1730743018.225:4577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1416 comm="syz.3.459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2a46226719 code=0x7ffc0000 [ 46.315688][ T30] audit: type=1326 audit(1730743018.225:4578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1416 comm="syz.3.459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a46226719 code=0x7ffc0000 [ 46.343818][ T290] attempt to access beyond end of device [ 46.343818][ T290] loop0: rw=2049, want=45112, limit=40427 [ 46.358641][ T30] audit: type=1326 audit(1730743018.225:4579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1416 comm="syz.3.459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2a46226719 code=0x7ffc0000 [ 46.394514][ T1425] loop3: detected capacity change from 0 to 512 [ 46.400907][ T30] audit: type=1326 audit(1730743018.225:4580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1416 comm="syz.3.459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a46226719 code=0x7ffc0000 [ 46.401765][ T1423] loop1: detected capacity change from 0 to 128 [ 46.501126][ T1425] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 46.512068][ T1425] ext4 filesystem being mounted at /66/file0 supports timestamps until 2038 (0x7fffffff) [ 46.601662][ T1435] netlink: 96 bytes leftover after parsing attributes in process `syz.3.467'. [ 46.639332][ T1440] gretap0: refused to change device tx_queue_len [ 46.655091][ T1440] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 46.852861][ T1452] loop1: detected capacity change from 0 to 40427 [ 46.932577][ T1452] F2FS-fs (loop1): invalid crc value [ 46.952279][ T1452] F2FS-fs (loop1): Found nat_bits in checkpoint [ 46.984113][ T1452] F2FS-fs (loop1): Cannot turn on quotas: -2 on 1 [ 46.991066][ T1452] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 47.014627][ T289] attempt to access beyond end of device [ 47.014627][ T289] loop1: rw=2049, want=45104, limit=40427 [ 47.040715][ T647] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 47.470978][ T647] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 47.482090][ T647] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 47.491686][ T647] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 47.504246][ T647] usb 4-1: New USB device found, idVendor=11c2, idProduct=2208, bcdDevice= 0.00 [ 47.513100][ T647] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 47.523004][ T647] usb 4-1: config 0 descriptor?? [ 47.545604][ T1505] loop5: detected capacity change from 0 to 256 [ 47.582647][ T1509] loop0: detected capacity change from 0 to 1024 [ 47.606729][ T1505] FAT-fs (loop5): Directory bread(block 64) failed [ 47.613176][ T1505] FAT-fs (loop5): Directory bread(block 65) failed [ 47.619566][ T1505] FAT-fs (loop5): Directory bread(block 66) failed [ 47.626112][ T1505] FAT-fs (loop5): Directory bread(block 67) failed [ 47.632635][ T1505] FAT-fs (loop5): Directory bread(block 68) failed [ 47.639007][ T1505] FAT-fs (loop5): Directory bread(block 69) failed [ 47.645541][ T1505] FAT-fs (loop5): Directory bread(block 70) failed [ 47.651909][ T1505] FAT-fs (loop5): Directory bread(block 71) failed [ 47.658261][ T1505] FAT-fs (loop5): Directory bread(block 72) failed [ 47.664734][ T1505] FAT-fs (loop5): Directory bread(block 73) failed [ 47.665727][ T1509] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 47.695663][ T10] attempt to access beyond end of device [ 47.695663][ T10] loop5: rw=1, want=1228, limit=256 [ 47.707540][ T1509] EXT4-fs (loop0): mounted filesystem without journal. Opts: noblock_validity,barrier,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,noquota,nogrpid,noauto_da_alloc,mblk_io_submit,,errors=continue. Quota mode: none. [ 47.800832][ T607] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 47.967240][ T1527] loop5: detected capacity change from 0 to 512 [ 48.001774][ T647] betop 0003:11C2:2208.000E: item fetching failed at offset 4/5 [ 48.009890][ T647] betop 0003:11C2:2208.000E: parse failed [ 48.014202][ T1527] EXT4-fs error (device loop5): ext4_orphan_get:1397: inode #15: comm syz.5.503: casefold flag without casefold feature [ 48.015852][ T647] betop: probe of 0003:11C2:2208.000E failed with error -22 [ 48.028637][ T1527] EXT4-fs error (device loop5): ext4_orphan_get:1402: comm syz.5.503: couldn't read orphan inode 15 (err -117) [ 48.046782][ T1527] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 48.162354][ T607] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 48.174040][ T607] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 48.185392][ T607] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 48.201042][ T607] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 48.210202][ T607] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 48.220094][ T647] usb 4-1: USB disconnect, device number 9 [ 48.220396][ T607] usb 5-1: config 0 descriptor?? [ 48.250763][ T1503] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 48.299813][ T1545] loop1: detected capacity change from 0 to 4096 [ 48.334041][ T1545] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 48.461285][ T1557] loop1: detected capacity change from 0 to 512 [ 48.531189][ T1557] EXT4-fs (loop1): Ignoring removed oldalloc option [ 48.540660][ T1557] EXT4-fs error (device loop1): ext4_xattr_inode_iget:400: comm syz.1.514: Parent and EA inode have the same ino 15 [ 48.553058][ T1557] EXT4-fs (loop1): Remounting filesystem read-only [ 48.559404][ T1557] EXT4-fs error (device loop1): ext4_evict_inode:294: comm syz.1.514: couldn't truncate inode 15 (err -30) [ 48.571418][ T1557] EXT4-fs (loop1): 1 orphan inode deleted [ 48.576970][ T1557] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,bsdgroups,debug_want_extra_isize=0x000000000000005e,noauto_da_alloc,bsdgroups,oldalloc,stripe=0x0000000000000002,. Quota mode: none. [ 48.610203][ T289] EXT4-fs error (device loop1): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0 [ 48.634742][ T289] EXT4-fs (loop1): Remounting filesystem read-only [ 48.646935][ T289] EXT4-fs error (device loop1): ext4_lookup:1860: inode #2: comm syz-executor: deleted inode referenced: 15 [ 48.664536][ T289] EXT4-fs error (device loop1): ext4_lookup:1860: inode #2: comm syz-executor: deleted inode referenced: 15 [ 48.681408][ T1564] syz.0.518[1564] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 48.681487][ T1564] syz.0.518[1564] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 48.704511][ T607] plantronics 0003:047F:FFFF.000F: unknown main item tag 0xd [ 48.724731][ T607] plantronics 0003:047F:FFFF.000F: No inputs registered, leaving [ 48.751093][ T607] plantronics 0003:047F:FFFF.000F: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 48.774598][ T289] syz-executor (289) used greatest stack depth: 19712 bytes left [ 48.976092][ T1576] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.983971][ T20] usb 5-1: USB disconnect, device number 7 [ 49.001025][ T1576] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.006394][ T1598] loop3: detected capacity change from 0 to 512 [ 49.017233][ T1576] device bridge_slave_0 entered promiscuous mode [ 49.025643][ T1576] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.032893][ T1576] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.040370][ T1576] device bridge_slave_1 entered promiscuous mode [ 49.066784][ C1] IPv4: Oversized IP packet from 127.0.0.1 [ 49.087932][ T1598] EXT4-fs error (device loop3): ext4_xattr_block_get:546: inode #2: comm syz.3.534: corrupted xattr block 255 [ 49.109930][ T1598] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 49.117994][ T1598] EXT4-fs (loop3): mounted filesystem without journal. Opts: data_err=abort,noblock_validity,dioread_lock,init_itable,auto_da_alloc,grpjquota=.noload,barrier=0x0000000000000007,jqfmt=vfsv1,grpid,,,errors=continue. Quota mode: writeback. [ 49.141467][ T1598] EXT4-fs error (device loop3): ext4_xattr_block_get:546: inode #2: comm syz.3.534: corrupted xattr block 255 [ 49.153334][ T1598] SELinux: (dev loop3, type ext4) getxattr errno 117 [ 49.177620][ T1576] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.184522][ T1576] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.191717][ T1576] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.198562][ T1576] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.233535][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 49.241731][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.248947][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.288872][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.291374][ T6] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 49.298861][ T1611] syz.3.539[1611] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 49.306415][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.324519][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.332602][ T1611] syz.3.539[1611] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 49.333033][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 49.353215][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.360075][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.374375][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 49.405112][ T1618] loop3: detected capacity change from 0 to 512 [ 49.412902][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 49.435427][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 49.448690][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 49.457401][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 49.466464][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 49.474996][ T1576] device veth0_vlan entered promiscuous mode [ 49.491683][ T1576] device veth1_macvtap entered promiscuous mode [ 49.498489][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 49.510515][ T1618] EXT4-fs (loop3): Ignoring removed orlov option [ 49.514552][ T1624] loop4: detected capacity change from 0 to 1024 [ 49.522971][ T1618] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 49.539708][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 49.548524][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 49.549180][ T1618] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #15: comm syz.3.541: casefold flag without casefold feature [ 49.570465][ T1624] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 49.573702][ T1618] EXT4-fs (loop3): Remounting filesystem read-only [ 49.590876][ T1618] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.541: couldn't read orphan inode 15 (err -117) [ 49.603291][ T1618] EXT4-fs (loop3): mounted filesystem without journal. Opts: orlov,nodelalloc,errors=remount-ro,grpquota,auto_da_alloc,dioread_nolock,quota,grpjquota=,inode_readahead_blks=0x0000000004000000,. Quota mode: writeback. [ 49.612467][ T1624] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsold,noauto_da_alloc,jqfmt=vfsold,bsdgroups,resuid=0x0000000000000000,dioread_nolock,usrjquota=,discard,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 49.680776][ T6] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 49.705797][ T6] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 49.720488][ T6] usb 6-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 49.729656][ T6] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 49.739465][ T6] usb 6-1: config 0 descriptor?? [ 49.922667][ T1636] Invalid ELF header magic: != ELF [ 49.927802][ T30] kauditd_printk_skb: 45 callbacks suppressed [ 49.927821][ T30] audit: type=1400 audit(1730743021.885:4626): avc: denied { sys_module } for pid=1635 comm="syz.4.546" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 49.956645][ T30] audit: type=1400 audit(1730743021.885:4627): avc: denied { module_load } for pid=1635 comm="syz.4.546" path="/sys/kernel/notes" dev="sysfs" ino=1141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 49.980771][ T26] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 49.989967][ T8] device bridge_slave_1 left promiscuous mode [ 50.003608][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.012762][ T8] device bridge_slave_0 left promiscuous mode [ 50.018725][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.027534][ T8] device veth1_macvtap left promiscuous mode [ 50.033463][ T8] device veth0_vlan left promiscuous mode [ 50.211805][ T6] holtek_kbd 0003:04D9:A055.0010: unknown main item tag 0x0 [ 50.218957][ T6] holtek_kbd 0003:04D9:A055.0010: item fetching failed at offset 3/5 [ 50.228412][ T6] holtek_kbd: probe of 0003:04D9:A055.0010 failed with error -22 [ 50.230705][ T26] usb 4-1: Using ep0 maxpacket: 8 [ 50.272658][ T1641] loop6: detected capacity change from 0 to 512 [ 50.328338][ T1641] EXT4-fs error (device loop6): ext4_orphan_get:1423: comm syz.6.548: bad orphan inode 17 [ 50.338607][ T1641] ext4_test_bit(bit=16, block=4) = 1 [ 50.344366][ T1641] is_bad_inode(inode)=0 [ 50.348339][ T1641] NEXT_ORPHAN(inode)=0 [ 50.352849][ T1641] max_ino=32 [ 50.356250][ T1641] i_nlink=1 [ 50.359195][ T1641] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 50.373614][ T1641] EXT4-fs error (device loop6): ext4_validate_block_bitmap:429: comm syz.6.548: bg 0: block 7: invalid block bitmap [ 50.375609][ T26] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 50.402259][ T26] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 50.419732][ T26] usb 4-1: New USB device found, idVendor=056e, idProduct=010c, bcdDevice= 0.00 [ 50.428898][ T26] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 50.441861][ T26] usb 4-1: config 0 descriptor?? [ 50.447327][ T325] usb 6-1: USB disconnect, device number 3 [ 50.514132][ T1649] loop6: detected capacity change from 0 to 2048 [ 50.547909][ T1643] loop0: detected capacity change from 0 to 40427 [ 50.574087][ T1649] EXT4-fs (loop6): mounted filesystem without journal. Opts: commit=0x0000000000000005,,errors=continue. Quota mode: none. [ 50.590958][ T1643] F2FS-fs (loop0): Small segment_count (9 < 1 * 24) [ 50.600401][ T1649] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 50.612598][ T1643] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 50.637406][ T1643] F2FS-fs (loop0): Found nat_bits in checkpoint [ 50.690056][ T1643] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 50.697175][ T1643] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 50.717012][ T1666] syz.6.557[1666] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 50.717091][ T1666] syz.6.557[1666] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 50.777264][ T30] audit: type=1326 audit(1730743022.735:4628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1670 comm="syz.6.559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26e40d8719 code=0x7ffc0000 [ 50.825128][ T290] attempt to access beyond end of device [ 50.825128][ T290] loop0: rw=2049, want=45104, limit=40427 [ 50.837252][ T30] audit: type=1326 audit(1730743022.735:4629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1670 comm="syz.6.559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f26e40d8719 code=0x7ffc0000 [ 50.861462][ T30] audit: type=1326 audit(1730743022.735:4630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1670 comm="syz.6.559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26e40d8719 code=0x7ffc0000 [ 50.885707][ T30] audit: type=1326 audit(1730743022.735:4631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1670 comm="syz.6.559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f26e40d8719 code=0x7ffc0000 [ 50.920933][ T30] audit: type=1326 audit(1730743022.775:4632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1670 comm="syz.6.559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26e40d8719 code=0x7ffc0000 [ 50.944421][ T26] elecom 0003:056E:010C.0011: hidraw0: USB HID v0.00 Device [HID 056e:010c] on usb-dummy_hcd.3-1/input0 [ 50.969320][ T30] audit: type=1326 audit(1730743022.785:4633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1670 comm="syz.6.559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26e40d8719 code=0x7ffc0000 [ 50.993270][ T30] audit: type=1326 audit(1730743022.785:4634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1670 comm="syz.6.559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f26e40d8719 code=0x7ffc0000 [ 51.016902][ T30] audit: type=1326 audit(1730743022.795:4635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1670 comm="syz.6.559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26e40d8719 code=0x7ffc0000 [ 51.062263][ T1680] loop5: detected capacity change from 0 to 512 [ 51.080351][ T1682] loop4: detected capacity change from 0 to 1024 [ 51.117785][ T321] Bluetooth: hci0: Frame reassembly failed (-84) [ 51.139051][ T1680] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.564: invalid indirect mapped block 256 (level 2) [ 51.156225][ T1680] EXT4-fs (loop5): Remounting filesystem read-only [ 51.167351][ T26] usb 4-1: USB disconnect, device number 10 [ 51.174145][ T1680] EXT4-fs (loop5): 2 truncates cleaned up [ 51.179854][ T1680] EXT4-fs (loop5): mounted filesystem without journal. Opts: errors=remount-ro,debug_want_extra_isize=0x0000000000000008,data_err=ignore,. Quota mode: writeback. [ 51.213138][ T1682] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 51.228094][ T1682] ext4 filesystem being mounted at /132/file1 supports timestamps until 2038 (0x7fffffff) [ 51.309774][ T1709] loop5: detected capacity change from 0 to 128 [ 51.327285][ T1709] EXT4-fs (loop5): mounted filesystem without journal. Opts: minixdf,nodelalloc,,errors=continue. Quota mode: none. [ 51.350812][ T1709] ext4 filesystem being mounted at /33/mnt supports timestamps until 2038 (0x7fffffff) [ 51.362340][ T1713] kvm: emulating exchange as write [ 51.501909][ T1730] loop4: detected capacity change from 0 to 1024 [ 51.561780][ T1730] EXT4-fs (loop4): Test dummy encryption mode enabled [ 51.570627][ T1730] EXT4-fs (loop4): Ignoring removed orlov option [ 51.579814][ T1730] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000084,stripe=0x0000000000000007,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,max_batch_time=0x0000000000000000,data_err=abort,,errors=continue. Quota mode: writeback. [ 51.619296][ T1730] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 51.652515][ T1745] netlink: 8 bytes leftover after parsing attributes in process `syz.5.589'. [ 51.670767][ T26] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 51.678489][ T1745] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 52.046789][ T6] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 52.054057][ T6] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 52.060799][ T26] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 52.061963][ T6] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 52.070963][ T26] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 52.078281][ T6] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 52.088120][ T26] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 52.096006][ T6] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 52.104833][ T26] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 52.112165][ T6] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 52.128494][ T6] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 52.135688][ T6] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 52.142930][ T6] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 52.150042][ T6] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 52.157304][ T6] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 52.164491][ T6] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 52.171686][ T6] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 52.178876][ T6] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 52.186109][ T6] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 52.193284][ T6] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 52.200464][ T6] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 52.207720][ T6] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 52.214916][ T6] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 52.222113][ T6] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 52.229400][ T6] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 52.236641][ T6] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 52.243798][ T6] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 52.251040][ T6] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 52.258183][ T6] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 52.265452][ T6] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 52.272710][ T6] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 52.279893][ T6] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 52.287147][ T6] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 52.290921][ T26] usb 1-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 52.294329][ T6] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 52.303703][ T26] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 52.310380][ T6] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 52.318759][ T26] usb 1-1: Product: syz [ 52.325424][ T6] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 52.329854][ T26] usb 1-1: Manufacturer: syz [ 52.336776][ T6] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 52.342356][ T26] usb 1-1: SerialNumber: syz [ 52.348382][ T6] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 52.357655][ T26] usb 1-1: config 0 descriptor?? [ 52.364769][ T6] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 52.372378][ T6] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 52.379626][ T6] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 52.386847][ T6] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 52.394028][ T6] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 52.401249][ T6] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 52.408419][ T6] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 52.413276][ T26] ums-isd200 1-1:0.0: USB Mass Storage device detected [ 52.415683][ T6] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 52.429535][ T6] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 52.437609][ T6] hid-generic 0000:0000:0000.0012: hidraw0: HID v0.00 Device [syz0] on syz0 [ 52.460240][ T1795] loop4: detected capacity change from 0 to 512 [ 52.523981][ T1795] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.609: inode #1: comm syz.4.609: iget: illegal inode # [ 52.536869][ T1795] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.609: error while reading EA inode 1 err=-117 [ 52.549347][ T1795] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.609: inode #1: comm syz.4.609: iget: illegal inode # [ 52.568663][ T1795] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.609: error while reading EA inode 1 err=-117 [ 52.577531][ T1801] syz.3.611[1801] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 52.580620][ T1801] syz.3.611[1801] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 52.586779][ T1795] EXT4-fs (loop4): 1 orphan inode deleted [ 52.608815][ T1795] EXT4-fs (loop4): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,journal_dev=0x0000000000008000,debug_want_extra_isize=0x000000000000005c,minixdf,resgid=0x0000000000000000,nobarrier,usrjquota=,,errors=continue. Quota mode: none. [ 52.661038][ T26] scsi host1: usb-storage 1-1:0.0 [ 52.679751][ T26] usb 1-1: USB disconnect, device number 6 [ 52.695338][ T1806] loop4: detected capacity change from 0 to 1024 [ 52.789628][ T1806] EXT4-fs (loop4): Ignoring removed nobh option [ 52.803720][ T1806] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 52.850177][ T1806] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobh,noauto_da_alloc,jqfmt=vfsold,data_err=ignore,resuid=0x0000000000000000,dioread_nolock,usrjquota=,noload,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 53.131246][ T60] Bluetooth: hci0: command 0x1003 tx timeout [ 53.137201][ T1033] Bluetooth: hci0: sending frame failed (-49) [ 53.160820][ T6] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 53.180826][ T607] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 53.520855][ T6] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 53.531631][ T6] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 53.541310][ T607] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 53.551290][ T6] usb 6-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 53.560080][ T6] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.567953][ T607] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 53.577377][ T6] usb 6-1: config 0 descriptor?? [ 53.650759][ T607] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 53.659875][ T607] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 53.667753][ T607] usb 5-1: SerialNumber: syz [ 53.951540][ T607] usb 5-1: 0:2 : does not exist [ 53.958036][ T607] usb 5-1: USB disconnect, device number 8 [ 54.061972][ T6] logitech-hidpp-device 0003:046D:C086.0013: item fetching failed at offset 2/5 [ 54.071170][ T6] logitech-hidpp-device 0003:046D:C086.0013: hidpp_probe:parse failed [ 54.079163][ T6] logitech-hidpp-device: probe of 0003:046D:C086.0013 failed with error -22 [ 54.265918][ T302] usb 6-1: USB disconnect, device number 4 [ 54.360761][ T6] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 54.720799][ T6] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 54.731107][ T607] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 54.738452][ T6] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 54.770605][ T1842] loop3: detected capacity change from 0 to 2048 [ 54.807258][ T1842] EXT4-fs (loop3): mounted filesystem without journal. Opts: nombcache,usrjquota=,errors=remount-ro,norecovery,resgid=0x0000000000000000,delalloc,minixdf,barrier=0x0000000000000000,grpjquota=,bsddf,. Quota mode: none. [ 54.840876][ T6] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 54.852058][ T6] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 54.862217][ T6] usb 1-1: SerialNumber: syz [ 54.951479][ T1863] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=1863 comm=syz.5.637 [ 54.984016][ T30] kauditd_printk_skb: 106 callbacks suppressed [ 54.984033][ T30] audit: type=1326 audit(1730743026.945:4742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1864 comm="syz.3.638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a46226719 code=0x7ffc0000 [ 55.019717][ T30] audit: type=1326 audit(1730743026.945:4743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1864 comm="syz.3.638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=232 compat=0 ip=0x7f2a46226719 code=0x7ffc0000 [ 55.043317][ T30] audit: type=1326 audit(1730743026.945:4744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1864 comm="syz.3.638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a46226719 code=0x7ffc0000 [ 55.120854][ T607] usb 5-1: New USB device found, idVendor=077b, idProduct=2226, bcdDevice=ca.8b [ 55.129856][ T607] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.141379][ T6] usb 1-1: 0:2 : does not exist [ 55.146524][ T607] usb 5-1: config 0 descriptor?? [ 55.186069][ T6] usb 1-1: USB disconnect, device number 7 [ 55.210717][ T60] Bluetooth: hci0: command 0x1001 tx timeout [ 55.216675][ T1033] Bluetooth: hci0: sending frame failed (-49) [ 55.449434][ T1867] loop3: detected capacity change from 0 to 131072 [ 55.531449][ T1867] F2FS-fs (loop3): Test dummy encryption mode enabled [ 55.539220][ T1867] F2FS-fs (loop3): invalid crc value [ 55.546903][ T1867] F2FS-fs (loop3): Found nat_bits in checkpoint [ 55.578603][ T1867] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 55.619555][ T30] audit: type=1400 audit(1730743027.575:4745): avc: denied { mounton } for pid=1876 comm="syz.0.640" path="/proc/300/task" dev="proc" ino=22354 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 55.912273][ T30] audit: type=1326 audit(1730743027.875:4746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1881 comm="syz.3.641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a46226719 code=0x7ffc0000 [ 55.939001][ T30] audit: type=1326 audit(1730743027.875:4747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1881 comm="syz.3.641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2a46226719 code=0x7ffc0000 [ 55.964180][ T1884] netem: change failed [ 55.978305][ T30] audit: type=1326 audit(1730743027.875:4748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1881 comm="syz.3.641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a46226719 code=0x7ffc0000 [ 56.004627][ T30] audit: type=1326 audit(1730743027.875:4749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1881 comm="syz.3.641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2a46226719 code=0x7ffc0000 [ 56.028469][ T30] audit: type=1326 audit(1730743027.875:4750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1881 comm="syz.3.641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a46226719 code=0x7ffc0000 [ 56.052127][ T30] audit: type=1326 audit(1730743027.875:4751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1881 comm="syz.3.641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2a46226719 code=0x7ffc0000 [ 56.270845][ T607] asix 5-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 56.303449][ T1902] netlink: 12 bytes leftover after parsing attributes in process `syz.3.651'. [ 56.313782][ T1902] device vlan2 entered promiscuous mode [ 56.319150][ T1902] device team_slave_0 entered promiscuous mode [ 56.325867][ T1902] device team_slave_0 left promiscuous mode [ 56.404870][ T1910] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 56.411960][ T1910] IPv6: NLM_F_CREATE should be set when creating new route [ 56.490769][ T607] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 56.500541][ T607] asix 5-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 56.510625][ T607] asix: probe of 5-1:0.0 failed with error -71 [ 56.517630][ T607] usb 5-1: USB disconnect, device number 9 [ 56.537014][ T1925] loop3: detected capacity change from 0 to 512 [ 56.565956][ T1925] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 56.590284][ T1925] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 56.598515][ T1925] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.662: invalid indirect mapped block 2683928664 (level 1) [ 56.602625][ T1932] loop0: detected capacity change from 0 to 2048 [ 56.612994][ T1925] EXT4-fs (loop3): Remounting filesystem read-only [ 56.625436][ T1925] EXT4-fs (loop3): 1 truncate cleaned up [ 56.631072][ T1925] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,dioread_nolock,errors=remount-ro,minixdf,jqfmt=vfsv0,usrjquota=.appraise_type=imasig,,. Quota mode: writeback. [ 56.653137][ T1925] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:476: comm syz.3.662: Invalid block bitmap block 3 in block_group 0 [ 56.667507][ T1925] EXT4-fs (loop3): Remounting filesystem read-only [ 56.668133][ T1932] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 56.682350][ T292] EXT4-fs error (device loop3): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=92, inode=16, rec_len=16, size=1024 fake=0 [ 56.705736][ T292] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2219: inode #15: comm syz-executor: corrupted in-inode xattr [ 56.718012][ T292] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2219: inode #15: comm syz-executor: corrupted in-inode xattr [ 56.787074][ T1940] loop0: detected capacity change from 0 to 512 [ 56.832600][ T1940] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 56.843922][ T1940] ext4 filesystem being mounted at /152/file1 supports timestamps until 2038 (0x7fffffff) [ 56.925648][ T1944] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.932738][ T1944] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.939972][ T1944] device bridge_slave_0 entered promiscuous mode [ 56.947032][ T1944] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.954136][ T1944] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.961696][ T1944] device bridge_slave_1 entered promiscuous mode [ 57.050729][ T1963] loop4: detected capacity change from 0 to 512 [ 57.059430][ T1944] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.066306][ T1944] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.073421][ T1944] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.080161][ T1944] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.104332][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.119784][ T321] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.127869][ T321] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.136735][ T1963] EXT4-fs (loop4): mounted filesystem without journal. Opts: quota,barrier=0x0000000000001000,grpjquota=,norecovery,dioread_lock,,errors=continue. Quota mode: writeback. [ 57.154679][ T1963] ext4 filesystem being mounted at /154/file1 supports timestamps until 2038 (0x7fffffff) [ 57.167157][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.175603][ T321] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.182480][ T321] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.189987][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.198188][ T321] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.205068][ T321] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.227178][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.235152][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.252842][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.265290][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.273478][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.280858][ T324] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 57.288427][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.297125][ T60] Bluetooth: hci0: command 0x1009 tx timeout [ 57.298856][ T1944] device veth0_vlan entered promiscuous mode [ 57.328283][ T1977] input: syz0 as /devices/virtual/input/input8 [ 57.337882][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.348397][ T1944] device veth1_macvtap entered promiscuous mode [ 57.374160][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.382872][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.405807][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.414399][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.452265][ T1983] binfmt_misc: register: failed to install interpreter file ./file0/../file0 [ 57.520789][ T324] usb 6-1: Using ep0 maxpacket: 32 [ 57.556119][ T1975] loop4: detected capacity change from 0 to 40427 [ 57.633559][ T1975] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 57.640820][ T324] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 57.653091][ T1975] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 57.655689][ T324] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 57.671143][ T324] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 57.685536][ T324] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 57.691319][ T1975] F2FS-fs (loop4): Found nat_bits in checkpoint [ 57.709312][ T324] usb 6-1: config 0 descriptor?? [ 57.748955][ T1975] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 57.756001][ T1975] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 57.756602][ T324] hub 6-1:0.0: USB hub found [ 57.962486][ T2020] loop4: detected capacity change from 0 to 512 [ 57.970772][ T324] hub 6-1:0.0: 1 port detected [ 57.998001][ T2020] EXT4-fs (loop4): Ignoring removed oldalloc option [ 58.006731][ T2020] EXT4-fs error (device loop4): ext4_xattr_inode_iget:400: comm syz.4.696: Parent and EA inode have the same ino 15 [ 58.019590][ T2020] EXT4-fs (loop4): Remounting filesystem read-only [ 58.027599][ T2020] EXT4-fs error (device loop4): ext4_evict_inode:294: comm syz.4.696: couldn't truncate inode 15 (err -30) [ 58.039334][ T2020] EXT4-fs (loop4): 1 orphan inode deleted [ 58.045337][ T2020] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,bsdgroups,debug_want_extra_isize=0x000000000000005e,noauto_da_alloc,bsdgroups,oldalloc,stripe=0x0000000000000002,. Quota mode: none. [ 58.127385][ T2035] loop7: detected capacity change from 0 to 256 [ 58.138326][ T2035] exfat: Deprecated parameter 'namecase' [ 58.144125][ T2035] exfat: Deprecated parameter 'utf8' [ 58.149704][ T2035] exfat: Deprecated parameter 'namecase' [ 58.156189][ T2035] exfat: Deprecated parameter 'utf8' [ 58.170504][ T2035] exFAT-fs (loop7): failed to load upcase table (idx : 0x00012153, chksum : 0x555ffa9e, utbl_chksum : 0xe619d30d) [ 58.240381][ T2048] SELinux: Context Ü is not valid (left unmapped). [ 58.311144][ T324] hub 6-1:0.0: hub_hub_status failed (err = -71) [ 58.317400][ T324] hub 6-1:0.0: config failed, can't get hub status (err -71) [ 58.405762][ T2062] 9pnet: p9_errstr2errno: server reported unknown error ™^Pœ£—¯ [ 58.440745][ T324] usbhid 6-1:0.0: can't add hid device: -71 [ 58.446586][ T324] usbhid: probe of 6-1:0.0 failed with error -71 [ 58.501260][ T324] usb 6-1: USB disconnect, device number 5 [ 58.591427][ T321] device bridge_slave_1 left promiscuous mode [ 58.600790][ T321] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.618515][ T321] device bridge_slave_0 left promiscuous mode [ 58.624543][ T321] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.652081][ T321] device veth1_macvtap left promiscuous mode [ 58.657926][ T321] device veth0_vlan left promiscuous mode [ 58.902975][ T2083] loop5: detected capacity change from 0 to 1024 [ 58.936134][ T2066] loop0: detected capacity change from 0 to 40427 [ 58.961422][ T2066] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 58.969111][ T2066] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 58.980390][ T2066] F2FS-fs (loop0): invalid crc value [ 58.987544][ T2066] F2FS-fs (loop0): Found nat_bits in checkpoint [ 59.028847][ T2066] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 59.035801][ T2066] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 59.054320][ T2066] attempt to access beyond end of device [ 59.054320][ T2066] loop0: rw=2049, want=45104, limit=40427 [ 59.066717][ T2066] attempt to access beyond end of device [ 59.066717][ T2066] loop0: rw=2049, want=45112, limit=40427 [ 59.112989][ T290] attempt to access beyond end of device [ 59.112989][ T290] loop0: rw=2051, want=45112, limit=40427 [ 59.124602][ T290] F2FS-fs (loop0): Issue discard(5637, 5637, 2) failed, ret: -5 [ 59.140705][ T607] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 59.230734][ T647] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 59.295971][ T2101] Invalid ELF header magic: != ELF [ 59.402383][ T2123] netlink: 36 bytes leftover after parsing attributes in process `syz.0.744'. [ 59.455514][ T2131] netlink: 24 bytes leftover after parsing attributes in process `syz.0.748'. [ 59.489041][ T2135] xt_bpf: check failed: parse error [ 59.530927][ T607] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 59.544436][ T607] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 59.554327][ T607] usb 5-1: config 0 interface 0 has no altsetting 0 [ 59.561600][ T607] usb 5-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 59.570523][ T607] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.579869][ T607] usb 5-1: config 0 descriptor?? [ 59.590785][ T647] usb 8-1: config index 0 descriptor too short (expected 45, got 36) [ 59.601307][ T647] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 59.612597][ T647] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 59.624056][ T647] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 59.637039][ T647] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 59.646449][ T26] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 59.653995][ T647] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.662986][ T647] usb 8-1: config 0 descriptor?? [ 59.680845][ T2089] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 59.900760][ T26] usb 6-1: Using ep0 maxpacket: 16 [ 60.020848][ T26] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 60.029669][ T26] usb 6-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 60.039358][ T26] usb 6-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 60.048900][ T26] usb 6-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 60.050710][ T324] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 60.058520][ T26] usb 6-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 60.075352][ T26] usb 6-1: config 1 interface 0 has no altsetting 0 [ 60.081805][ T26] usb 6-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 60.090598][ T26] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.091991][ T607] hid-multitouch 0003:1FD2:6007.0014: collection stack underflow [ 60.108703][ T607] hid-multitouch 0003:1FD2:6007.0014: item 0 4 0 12 parsing failed [ 60.116662][ T607] hid-multitouch: probe of 0003:1FD2:6007.0014 failed with error -22 [ 60.132112][ T26] ums-sddr09 6-1:1.0: USB Mass Storage device detected [ 60.141751][ T647] plantronics 0003:047F:FFFF.0015: unknown main item tag 0xd [ 60.150089][ T647] plantronics 0003:047F:FFFF.0015: No inputs registered, leaving [ 60.159099][ T647] plantronics 0003:047F:FFFF.0015: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 60.307972][ T607] usb 5-1: USB disconnect, device number 10 [ 60.351941][ T26] scsi host1: usb-storage 6-1:1.0 [ 60.411456][ T26] usb 8-1: USB disconnect, device number 2 [ 60.553132][ T302] usb 6-1: USB disconnect, device number 6 [ 60.630817][ T324] usb 1-1: New USB device found, idVendor=08dd, idProduct=90ff, bcdDevice=5d.5a [ 60.639779][ T324] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.647812][ T324] usb 1-1: Product: syz [ 60.651839][ T324] usb 1-1: Manufacturer: syz [ 60.656226][ T324] usb 1-1: SerialNumber: syz [ 60.661439][ T324] usb 1-1: config 0 descriptor?? [ 60.923747][ T2161] loop7: detected capacity change from 0 to 256 [ 60.951493][ T2161] exfat: Deprecated parameter 'namecase' [ 60.957113][ T2161] exfat: Deprecated parameter 'utf8' [ 60.962298][ T2161] exfat: Deprecated parameter 'namecase' [ 60.983561][ T2161] exFAT-fs (loop7): failed to load upcase table (idx : 0x00011f41, chksum : 0xe1a8932d, utbl_chksum : 0xe619d30d) [ 61.000124][ T30] kauditd_printk_skb: 87 callbacks suppressed [ 61.000141][ T30] audit: type=1400 audit(1730743032.955:4839): avc: denied { map } for pid=2160 comm="syz.7.760" path="/26/file0/net_prio.prioidx" dev="loop7" ino=1048641 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 61.030226][ T30] audit: type=1400 audit(1730743032.955:4840): avc: denied { execute } for pid=2160 comm="syz.7.760" path="/26/file0/net_prio.prioidx" dev="loop7" ino=1048641 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 61.069173][ T30] audit: type=1326 audit(1730743033.025:4841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2162 comm="syz.5.762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd75ab28719 code=0x7ffc0000 [ 61.092597][ T30] audit: type=1326 audit(1730743033.025:4842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2162 comm="syz.5.762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd75ab28719 code=0x7ffc0000 [ 61.116114][ T30] audit: type=1326 audit(1730743033.025:4843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2162 comm="syz.5.762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd75ab28719 code=0x7ffc0000 [ 61.147525][ T30] audit: type=1326 audit(1730743033.055:4844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2162 comm="syz.5.762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd75ab28719 code=0x7ffc0000 [ 61.171111][ T30] audit: type=1326 audit(1730743033.055:4845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2162 comm="syz.5.762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd75ab28719 code=0x7ffc0000 [ 61.203510][ T30] audit: type=1326 audit(1730743033.105:4846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2162 comm="syz.5.762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd75ab28719 code=0x7ffc0000 [ 61.217526][ T2167] netlink: 108 bytes leftover after parsing attributes in process `syz.5.763'. [ 61.227606][ T30] audit: type=1326 audit(1730743033.105:4847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2162 comm="syz.5.762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd75ab28719 code=0x7ffc0000 [ 61.259289][ T30] audit: type=1326 audit(1730743033.105:4848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2162 comm="syz.5.762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd75ab28719 code=0x7ffc0000 [ 61.282528][ T2167] Zero length message leads to an empty skb [ 61.522616][ T2196] device wireguard0 entered promiscuous mode [ 61.574103][ T2188] loop7: detected capacity change from 0 to 40427 [ 61.610787][ T607] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 61.655052][ T2188] F2FS-fs (loop7): invalid crc value [ 61.685889][ T2188] F2FS-fs (loop7): Found nat_bits in checkpoint [ 61.712102][ T2216] loop4: detected capacity change from 0 to 2048 [ 61.734029][ T2188] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 61.747991][ T2216] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 61.764476][ T1944] attempt to access beyond end of device [ 61.764476][ T1944] loop7: rw=2049, want=45104, limit=40427 [ 61.800789][ T324] asix 1-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 61.860743][ T607] usb 6-1: Using ep0 maxpacket: 32 [ 61.960794][ T6] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 61.980761][ T607] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 61.992251][ T607] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 62.002412][ T607] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 62.011533][ T324] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 62.021584][ T607] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.029622][ T324] asix 1-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 62.040611][ T324] asix: probe of 1-1:0.0 failed with error -71 [ 62.046944][ T607] usb 6-1: config 0 descriptor?? [ 62.057127][ T324] usb 1-1: USB disconnect, device number 8 [ 62.093199][ T607] hub 6-1:0.0: USB hub found [ 62.163933][ T2229] loop7: detected capacity change from 0 to 40427 [ 62.220731][ T6] usb 7-1: Using ep0 maxpacket: 16 [ 62.231591][ T2229] F2FS-fs (loop7): fault_injection options not supported [ 62.239549][ T2229] F2FS-fs (loop7): invalid crc value [ 62.246361][ T2229] F2FS-fs (loop7): Found nat_bits in checkpoint [ 62.278714][ T2229] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 62.296781][ T1944] attempt to access beyond end of device [ 62.296781][ T1944] loop7: rw=2049, want=45112, limit=40427 [ 62.340860][ T6] usb 7-1: config 0 has an invalid interface number: 2 but max is 0 [ 62.348876][ T6] usb 7-1: config 0 has no interface number 0 [ 62.355033][ T6] usb 7-1: config 0 interface 2 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 62.390738][ T607] hub 6-1:0.0: config failed, can't read hub descriptor (err -22) [ 62.480760][ T6] usb 7-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice= 0.88 [ 62.489746][ T6] usb 7-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 62.498376][ T6] usb 7-1: Product: syz [ 62.502756][ T6] usb 7-1: SerialNumber: syz [ 62.520941][ T6] usb 7-1: config 0 descriptor?? [ 62.540800][ T2214] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 62.546170][ T2244] loop7: detected capacity change from 0 to 40427 [ 62.558904][ T2248] overlayfs: missing 'workdir' [ 62.564568][ T2244] F2FS-fs (loop7): fault_injection options not supported [ 62.574380][ T2244] F2FS-fs (loop7): invalid crc value [ 62.580973][ T2244] F2FS-fs (loop7): Found nat_bits in checkpoint [ 62.619522][ T2244] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 62.635502][ T2244] attempt to access beyond end of device [ 62.635502][ T2244] loop7: rw=16812033, want=78672, limit=40427 [ 62.653814][ T1944] attempt to access beyond end of device [ 62.653814][ T1944] loop7: rw=2049, want=45112, limit=40427 [ 62.660087][ T607] hid-generic 0003:046D:C31C.0016: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.5-1/input0 [ 62.757978][ T2259] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.765059][ T2259] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.775077][ T2259] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.781974][ T2259] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.789352][ T2259] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.796242][ T2259] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.803586][ T2259] device bridge0 entered promiscuous mode [ 62.821663][ T6] usb 7-1: invalid MIDI in EP 0 [ 62.826789][ T6] snd-usb-audio: probe of 7-1:0.2 failed with error -22 [ 62.834525][ T6] usb 7-1: USB disconnect, device number 2 [ 62.971047][ T20] usb 6-1: USB disconnect, device number 7 [ 63.100769][ T647] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 63.318282][ T2266] loop6: detected capacity change from 0 to 2048 [ 63.394636][ T2266] EXT4-fs (loop6): mounted filesystem without journal. Opts: commit=0x0000000000000005,,errors=continue. Quota mode: none. [ 63.530972][ T647] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 63.544631][ T647] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 63.554447][ T647] usb 8-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 63.563961][ T647] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.582149][ T647] usb 8-1: config 0 descriptor?? [ 63.661916][ T2295] SELinux: security_context_str_to_sid(staff_u) failed for (dev ?, type ?) errno=-22 [ 63.671588][ T2295] SELinux: security_context_str_to_sid(staff_u) failed for (dev tmpfs, type tmpfs) errno=-22 [ 63.718086][ T2301] loop6: detected capacity change from 0 to 128 [ 63.765512][ T2306] loop5: detected capacity change from 0 to 2048 [ 63.773277][ T2301] EXT4-fs (loop6): mounted filesystem without journal. Opts: journal_dev=0x0000000000000081,nouid32,,errors=continue. Quota mode: none. [ 63.787563][ T2301] ext4 filesystem being mounted at /30/file0 supports timestamps until 2038 (0x7fffffff) [ 63.831826][ T2306] EXT4-fs (loop5): mounted filesystem without journal. Opts: commit=0x0000000000000005,,errors=continue. Quota mode: none. [ 63.850760][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.869855][ T2306] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 64.063797][ T647] hid-steam 0003:28DE:1142.0017: unknown main item tag 0x0 [ 64.080756][ T647] hid-steam 0003:28DE:1142.0017: unknown main item tag 0x0 [ 64.092256][ T647] hid-steam 0003:28DE:1142.0017: item fetching failed at offset 2/5 [ 64.100307][ T647] hid-steam 0003:28DE:1142.0017: steam_probe:parse of hid interface failed [ 64.108877][ T647] hid-steam: probe of 0003:28DE:1142.0017 failed with error -22 [ 64.185214][ T2347] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 64.256875][ T2358] loop6: detected capacity change from 0 to 2048 [ 64.264527][ T647] usb 8-1: USB disconnect, device number 3 [ 64.325577][ T2358] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 64.380888][ T26] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 64.395598][ T2373] loop5: detected capacity change from 0 to 256 [ 64.434871][ T2373] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 64.529190][ T2380] loop5: detected capacity change from 0 to 2048 [ 64.612364][ T2380] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 64.750899][ T26] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 64.761695][ T26] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 64.771398][ T26] usb 1-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.00 [ 64.782687][ T26] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.794634][ T26] usb 1-1: config 0 descriptor?? [ 64.801716][ T2387] loop7: detected capacity change from 0 to 512 [ 64.872639][ T2387] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 64.883931][ T2387] ext4 filesystem being mounted at /40/file0 supports timestamps until 2038 (0x7fffffff) [ 65.228553][ T2398] netlink: 8 bytes leftover after parsing attributes in process `syz.4.855'. [ 65.280768][ T6] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 65.281763][ T26] dragonrise 0003:0079:0011.0018: unknown global tag 0xd [ 65.306671][ T26] dragonrise 0003:0079:0011.0018: item 0 0 1 13 parsing failed [ 65.314423][ T26] dragonrise 0003:0079:0011.0018: parse failed [ 65.320553][ T26] dragonrise: probe of 0003:0079:0011.0018 failed with error -22 [ 65.336708][ T2404] loop6: detected capacity change from 0 to 8192 [ 65.366577][ T2404] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 65.382987][ T2404] overlayfs: upper fs does not support tmpfile. [ 65.400820][ T1576] FAT-fs (loop6): error, fat_free_clusters: deleting FAT entry beyond EOF [ 65.413739][ T1576] FAT-fs (loop6): Filesystem has been set read-only [ 65.487011][ T2418] loop6: detected capacity change from 0 to 512 [ 65.493464][ T20] usb 1-1: USB disconnect, device number 9 [ 65.530741][ T6] usb 8-1: Using ep0 maxpacket: 16 [ 65.551874][ T2423] loop5: detected capacity change from 0 to 128 [ 65.559545][ T2418] EXT4-fs (loop6): mounted filesystem without journal. Opts: data_err=ignore,nouid32,bsddf,,errors=continue. Quota mode: writeback. [ 65.574017][ T2418] ext4 filesystem being mounted at /44/file0 supports timestamps until 2038 (0x7fffffff) [ 65.619168][ T2414] loop4: detected capacity change from 0 to 40427 [ 65.652948][ T2414] F2FS-fs (loop4): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 65.663198][ T2414] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 65.673485][ T2414] F2FS-fs (loop4): invalid crc value [ 65.697080][ T2414] F2FS-fs (loop4): Found nat_bits in checkpoint [ 65.697176][ T2432] SELinux: failed to load policy [ 65.752352][ T2414] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 65.759344][ T2414] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 65.790826][ T288] attempt to access beyond end of device [ 65.790826][ T288] loop4: rw=2049, want=45104, limit=40427 [ 65.860758][ T6] usb 8-1: New USB device found, idVendor=0456, idProduct=f000, bcdDevice=f3.7f [ 65.869668][ T6] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.878093][ T6] usb 8-1: Product: syz [ 65.882614][ T6] usb 8-1: Manufacturer: syz [ 65.887030][ T6] usb 8-1: SerialNumber: syz [ 65.900949][ T6] usb 8-1: config 0 descriptor?? [ 65.941417][ T6] ftdi_sio 8-1:0.0: Ignoring interface reserved for JTAG [ 65.946215][ T302] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 66.009644][ T2443] loop6: detected capacity change from 0 to 40427 [ 66.092138][ T2443] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 66.099700][ T2443] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 66.119657][ T2443] F2FS-fs (loop6): Found nat_bits in checkpoint [ 66.148843][ T370] usb 8-1: USB disconnect, device number 4 [ 66.166696][ T2443] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 66.173678][ T2443] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 66.200737][ T302] usb 6-1: Using ep0 maxpacket: 8 [ 66.213770][ T30] kauditd_printk_skb: 93 callbacks suppressed [ 66.213787][ T30] audit: type=1400 audit(1730743267.170:4942): avc: denied { rename } for pid=2442 comm="syz.6.873" name="file0" dev="loop6" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 66.242026][ T2447] loop4: detected capacity change from 0 to 40427 [ 66.278212][ T2447] F2FS-fs (loop4): invalid crc value [ 66.292486][ T2447] F2FS-fs (loop4): Found nat_bits in checkpoint [ 66.340803][ T302] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 66.357359][ T302] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 66.359488][ T2467] loop6: detected capacity change from 0 to 512 [ 66.367321][ T2447] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 66.390714][ T647] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 66.398177][ T302] usb 6-1: New USB device found, idVendor=06a3, idProduct=0ccd, bcdDevice= 0.00 [ 66.407146][ T302] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.415895][ T302] usb 6-1: config 0 descriptor?? [ 66.433304][ T2467] EXT4-fs error (device loop6): ext4_orphan_get:1397: inode #15: comm syz.6.880: casefold flag without casefold feature [ 66.445950][ T2467] EXT4-fs error (device loop6): ext4_orphan_get:1402: comm syz.6.880: couldn't read orphan inode 15 (err -117) [ 66.458208][ T2467] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 67.002051][ T2475] loop7: detected capacity change from 0 to 128 [ 67.040854][ T647] usb 1-1: device descriptor read/all, error -71 [ 67.156683][ T2489] loop4: detected capacity change from 0 to 512 [ 67.222461][ T302] saitek 0003:06A3:0CCD.0019: unknown main item tag 0x0 [ 67.230453][ T302] saitek 0003:06A3:0CCD.0019: unknown main item tag 0x0 [ 67.234914][ T2489] EXT4-fs (loop4): mounted filesystem without journal. Opts: data_err=ignore,nouid32,minixdf,,errors=continue. Quota mode: writeback. [ 67.237502][ T302] saitek 0003:06A3:0CCD.0019: item fetching failed at offset 2/11 [ 67.251870][ T2489] ext4 filesystem being mounted at /188/file0 supports timestamps until 2038 (0x7fffffff) [ 67.258872][ T302] saitek 0003:06A3:0CCD.0019: parse failed [ 67.275305][ T302] saitek: probe of 0003:06A3:0CCD.0019 failed with error -22 [ 67.412938][ T30] audit: type=1400 audit(1730743268.370:4943): avc: denied { setcurrent } for pid=2519 comm="syz.6.902" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 67.436985][ T302] usb 6-1: USB disconnect, device number 8 [ 67.500720][ T6] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 67.590056][ T2515] binder: 2514:2515 ioctl c0306201 20001a80 returned -14 [ 67.660162][ T30] audit: type=1400 audit(1730743268.610:4944): avc: denied { mount } for pid=2535 comm="syz.4.908" name="/" dev="ramfs" ino=25348 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 67.740713][ T6] usb 8-1: Using ep0 maxpacket: 16 [ 67.800311][ T30] audit: type=1326 audit(1730743268.750:4945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2545 comm="syz.4.913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b28af7719 code=0x7ffc0000 [ 67.824480][ T30] audit: type=1326 audit(1730743268.750:4946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2545 comm="syz.4.913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b28af7719 code=0x7ffc0000 [ 67.848683][ T30] audit: type=1326 audit(1730743268.780:4947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2545 comm="syz.4.913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8b28af7719 code=0x7ffc0000 [ 67.872449][ T6] usb 8-1: config 0 has an invalid interface number: 2 but max is 0 [ 67.872479][ T6] usb 8-1: config 0 has no interface number 0 [ 67.872508][ T6] usb 8-1: config 0 interface 2 altsetting 0 bulk endpoint 0xB has invalid maxpacket 173 [ 67.897958][ T30] audit: type=1326 audit(1730743268.780:4948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2545 comm="syz.4.913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b28af7719 code=0x7ffc0000 [ 67.921730][ T30] audit: type=1326 audit(1730743268.780:4949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2545 comm="syz.4.913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b28af7719 code=0x7ffc0000 [ 67.945092][ T30] audit: type=1326 audit(1730743268.800:4950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2545 comm="syz.4.913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8b28af7719 code=0x7ffc0000 [ 67.980919][ T30] audit: type=1326 audit(1730743268.800:4951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2545 comm="syz.4.913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b28af7719 code=0x7ffc0000 [ 68.004198][ T6] usb 8-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice= 0.88 [ 68.013986][ T6] usb 8-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 68.022341][ T6] usb 8-1: Product: syz [ 68.026336][ T6] usb 8-1: SerialNumber: syz [ 68.031849][ T6] usb 8-1: config 0 descriptor?? [ 68.050749][ T2504] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 68.108345][ T2551] loop4: detected capacity change from 0 to 2048 [ 68.132001][ T2554] loop5: detected capacity change from 0 to 512 [ 68.156852][ T2551] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 68.192405][ T2554] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 68.220825][ T2554] ext4 filesystem being mounted at /113/bus supports timestamps until 2038 (0x7fffffff) [ 68.244241][ T2554] EXT4-fs error (device loop5): ext4_find_dest_de:2113: inode #12: block 32: comm syz.5.917: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=12, rec_len=106, size=2048 fake=1 [ 68.281438][ T6] usb 8-1: invalid MIDI in EP 0 [ 68.286316][ T6] snd-usb-audio: probe of 8-1:0.2 failed with error -22 [ 68.408872][ T2572] loop6: detected capacity change from 0 to 512 [ 68.453303][ T2572] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 68.478148][ T2572] EXT4-fs error (device loop6): ext4_ext_check_inode:501: inode #3: comm +}[@: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 1, max 48834(4), depth 0(0) [ 68.495830][ T2572] EXT4-fs error (device loop6): ext4_quota_enable:6381: comm +}[@: Bad quota inode: 3, type: 0 [ 68.506643][ T2572] EXT4-fs warning (device loop6): ext4_enable_quotas:6422: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 68.506817][ T370] usb 8-1: USB disconnect, device number 5 [ 68.527667][ T2572] EXT4-fs (loop6): mount failed [ 68.552912][ T2596] loop5: detected capacity change from 0 to 2048 [ 68.607962][ T2600] loop4: detected capacity change from 0 to 256 [ 68.632247][ T2596] EXT4-fs (loop5): mounted filesystem without journal. Opts: commit=0x0000000000000005,noload,,errors=continue. Quota mode: none. [ 68.645888][ T2600] exfat: Deprecated parameter 'utf8' [ 68.651338][ T2600] exfat: Deprecated parameter 'namecase' [ 68.656900][ T2600] exfat: Deprecated parameter 'utf8' [ 68.662409][ T2600] exfat: Deprecated parameter 'namecase' [ 68.687333][ T2600] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011f41, chksum : 0xf6e84b2e, utbl_chksum : 0xe619d30d) [ 68.712039][ T2605] netlink: 'syz.5.935': attribute type 6 has an invalid length. [ 68.732475][ T647] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 68.784739][ T2607] loop5: detected capacity change from 0 to 512 [ 68.798682][ T2609] loop4: detected capacity change from 0 to 16 [ 68.832651][ T2609] erofs: (device loop4): mounted with root inode @ nid 36. [ 68.913506][ T2607] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue. Quota mode: writeback. [ 68.968038][ T2607] ext4 filesystem being mounted at /124/bus supports timestamps until 2038 (0x7fffffff) [ 69.015712][ T2617] loop4: detected capacity change from 0 to 512 [ 69.030456][ T2617] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 69.040252][ T2617] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 69.094149][ T2623] loop5: detected capacity change from 0 to 512 [ 69.110236][ T2624] binfmt_misc: register: failed to install interpreter file ./file0/../file0 [ 69.113268][ T2617] EXT4-fs (loop4): warning: checktime reached, running e2fsck is recommended [ 69.132705][ T2617] EXT4-fs error (device loop4): ext4_orphan_get:1397: inode #16: comm syz.4.940: iget: bogus i_mode (5) [ 69.150804][ T647] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 69.161799][ T647] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 255, changing to 11 [ 69.172971][ T2623] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 69.174826][ T647] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 59391, setting to 1024 [ 69.193141][ T647] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 69.200603][ T2617] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.940: couldn't read orphan inode 16 (err -117) [ 69.203656][ T647] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.225619][ T2617] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,jqfmt=vfsold,noquota,errors=remount-ro,stripe=0x0000000000000079,resgid=0x0000000000000000,data_err=ignore,init_itable,errors=continue,. Quota mode: writeback. [ 69.248913][ T2587] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 69.263422][ T2617] incfs: mount failed -22 [ 69.275873][ T2623] EXT4-fs error (device loop5): ext4_orphan_get:1397: inode #15: comm syz.5.941: iget: bad extended attribute block 19 [ 69.301415][ T2623] EXT4-fs error (device loop5): ext4_orphan_get:1402: comm syz.5.941: couldn't read orphan inode 15 (err -117) [ 69.306902][ T288] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1053: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 69.336767][ T288] EXT4-fs error (device loop4): ext4_lookup:1860: inode #2: comm syz-executor: deleted inode referenced: 16 [ 69.348400][ T2623] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 69.363027][ T288] EXT4-fs error (device loop4): ext4_lookup:1860: inode #2: comm syz-executor: deleted inode referenced: 16 [ 69.443426][ T2650] loop5: detected capacity change from 0 to 256 [ 69.455690][ T2652] loop6: detected capacity change from 0 to 512 [ 69.465669][ T2650] FAT-fs (loop5): Directory bread(block 64) failed [ 69.473895][ T288] syz-executor (288) used greatest stack depth: 19696 bytes left [ 69.483542][ T2650] FAT-fs (loop5): Directory bread(block 65) failed [ 69.490370][ T2650] FAT-fs (loop5): Directory bread(block 66) failed [ 69.498915][ T6] usb 1-1: USB disconnect, device number 12 [ 69.510550][ T2650] FAT-fs (loop5): Directory bread(block 67) failed [ 69.519711][ T2650] FAT-fs (loop5): Directory bread(block 68) failed [ 69.527239][ T2650] FAT-fs (loop5): Directory bread(block 69) failed [ 69.534197][ T2652] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 69.542456][ T2650] FAT-fs (loop5): Directory bread(block 70) failed [ 69.548908][ T2650] FAT-fs (loop5): Directory bread(block 71) failed [ 69.550921][ T2652] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 69.555791][ T2650] FAT-fs (loop5): Directory bread(block 72) failed [ 69.570019][ T2650] FAT-fs (loop5): Directory bread(block 73) failed [ 69.584780][ T2652] System zones: 0-1, 15-15, 18-18, 34-34 [ 69.591208][ T2652] EXT4-fs (loop6): orphan cleanup on readonly fs [ 69.597443][ T2652] EXT4-fs warning (device loop6): ext4_enable_quotas:6422: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 69.612198][ T2652] EXT4-fs (loop6): Cannot turn on quotas: error -22 [ 69.618945][ T2652] EXT4-fs error (device loop6): ext4_orphan_get:1423: comm syz.6.954: bad orphan inode 16 [ 69.619031][ T8] attempt to access beyond end of device [ 69.619031][ T8] loop5: rw=1, want=1228, limit=256 [ 69.629045][ T2652] ext4_test_bit(bit=15, block=18) = 1 [ 69.644533][ T2652] is_bad_inode(inode)=0 [ 69.648467][ T2652] NEXT_ORPHAN(inode)=0 [ 69.652472][ T2652] max_ino=32 [ 69.655427][ T2652] i_nlink=2 [ 69.658408][ T2652] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 69.673293][ T2652] xt_hashlimit: size too large, truncated to 1048576 [ 69.710735][ T302] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 69.737527][ T2656] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.745344][ T2656] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.753053][ T2656] device bridge_slave_0 entered promiscuous mode [ 69.762895][ T2656] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.769871][ T2656] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.778152][ T2656] device bridge_slave_1 entered promiscuous mode [ 69.855196][ T2656] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.862077][ T2656] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.869214][ T2656] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.876072][ T2656] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.906379][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.915256][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.923143][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.934583][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.942733][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.949627][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.958666][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.966914][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.973825][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.982063][ T607] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 69.990074][ T45] device bridge_slave_1 left promiscuous mode [ 69.996454][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.003531][ T302] usb 8-1: Using ep0 maxpacket: 8 [ 70.009618][ T45] device bridge_slave_0 left promiscuous mode [ 70.016379][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.034739][ T45] device veth1_macvtap left promiscuous mode [ 70.044625][ T45] device veth0_vlan left promiscuous mode [ 70.141929][ T302] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 70.155419][ T302] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 70.165656][ T302] usb 8-1: New USB device found, idVendor=054c, idProduct=0ce6, bcdDevice= 0.00 [ 70.174829][ T302] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.176411][ T2682] blk_update_request: I/O error, dev loop13, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 70.184873][ T302] usb 8-1: config 0 descriptor?? [ 70.198644][ T2682] F2FS-fs (loop13): Unable to read 1th superblock [ 70.205009][ T2682] blk_update_request: I/O error, dev loop13, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 70.215937][ T2682] F2FS-fs (loop13): Unable to read 2th superblock [ 70.222130][ T607] usb 6-1: Using ep0 maxpacket: 16 [ 70.245186][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.258429][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.270754][ T2686] netlink: 24 bytes leftover after parsing attributes in process `syz.0.970'. [ 70.284311][ T2688] loop6: detected capacity change from 0 to 1024 [ 70.304495][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.305231][ T2688] EXT4-fs (loop6): Mount option "noacl" will be removed by 3.5 [ 70.305231][ T2688] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 70.305231][ T2688] [ 70.318850][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.338691][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.346481][ T607] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 70.349012][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.357459][ T607] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 70.372812][ T2688] EXT4-fs (loop6): mounted filesystem without journal. Opts: noauto_da_alloc,max_dir_size_kb=0x0000000000000001,dioread_lock,jqfmt=vfsv0,discard,lazytime,noacl,usrquota,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 70.396671][ T2656] device veth0_vlan entered promiscuous mode [ 70.415337][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 70.426284][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.434506][ T607] usb 6-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00 [ 70.444382][ T607] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.446243][ T2656] device veth1_macvtap entered promiscuous mode [ 70.463925][ T607] usb 6-1: config 0 descriptor?? [ 70.468875][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 70.476729][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.485998][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.514801][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.530599][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.561446][ T2703] mmap: syz.8.957 (2703) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 70.605649][ T2710] syz.8.979[2710] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 70.605727][ T2710] syz.8.979[2710] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 70.649698][ T2719] loop8: detected capacity change from 0 to 1024 [ 70.652311][ T302] playstation 0003:054C:0CE6.001A: unknown main item tag 0x0 [ 70.675088][ T302] playstation 0003:054C:0CE6.001A: unknown main item tag 0x0 [ 70.682385][ T302] playstation 0003:054C:0CE6.001A: unknown main item tag 0x0 [ 70.689590][ T302] playstation 0003:054C:0CE6.001A: unknown main item tag 0x0 [ 70.696755][ T302] playstation 0003:054C:0CE6.001A: unknown main item tag 0x0 [ 70.704142][ T302] playstation 0003:054C:0CE6.001A: unknown main item tag 0x0 [ 70.711422][ T302] playstation 0003:054C:0CE6.001A: unknown main item tag 0x0 [ 70.719238][ T302] playstation 0003:054C:0CE6.001A: hidraw0: USB HID v0.00 Device [HID 054c:0ce6] on usb-dummy_hcd.7-1/input0 [ 70.732496][ T2719] EXT4-fs (loop8): Ignoring removed nobh option [ 70.739059][ T2719] EXT4-fs (loop8): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 70.762470][ T2719] EXT4-fs (loop8): mounted filesystem without journal. Opts: nobh,noauto_da_alloc,jqfmt=vfsold,data_err=ignore,resuid=0x0000000000000000,dioread_nolock,usrjquota=,discard,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 70.830224][ T2726] loop8: detected capacity change from 0 to 512 [ 70.880813][ T302] playstation 0003:054C:0CE6.001A: Invalid reportID received, expected 9 got 0 [ 70.889790][ T302] playstation 0003:054C:0CE6.001A: Failed to retrieve DualSense pairing info: -22 [ 70.898804][ T302] playstation 0003:054C:0CE6.001A: Failed to get MAC address from DualSense [ 70.907326][ T302] playstation 0003:054C:0CE6.001A: Failed to create dualsense. [ 70.915202][ T302] playstation: probe of 0003:054C:0CE6.001A failed with error -22 [ 70.923617][ T2726] EXT4-fs (loop8): Mount option "noacl" will be removed by 3.5 [ 70.923617][ T2726] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 70.923617][ T2726] [ 70.942837][ T2726] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 70.958546][ T2726] EXT4-fs (loop8): 1 truncate cleaned up [ 71.011199][ T607] samsung 0003:0419:0001.001B: hidraw0: USB HID v0.00 Device [HID 0419:0001] on usb-dummy_hcd.5-1/input0 [ 71.100728][ T2726] EXT4-fs (loop8): mounted filesystem without journal. Opts: minixdf,auto_da_alloc,debug_want_extra_isize=0x0000000000000068,nodelalloc,noacl,abort,,errors=continue. Quota mode: none. [ 71.135021][ T607] usb 8-1: USB disconnect, device number 6 [ 71.220878][ T325] usb 6-1: USB disconnect, device number 9 [ 72.123487][ T30] kauditd_printk_skb: 43 callbacks suppressed [ 72.123503][ T30] audit: type=1400 audit(1730743273.080:4994): avc: denied { create } for pid=2743 comm="syz.6.993" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 72.177536][ T30] audit: type=1400 audit(1730743273.110:4995): avc: denied { setopt } for pid=2743 comm="syz.6.993" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 72.197976][ T30] audit: type=1400 audit(1730743273.110:4996): avc: denied { getopt } for pid=2743 comm="syz.6.993" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 72.228738][ T30] audit: type=1326 audit(1730743273.120:4997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2746 comm="syz.0.994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8a2818719 code=0x7ffc0000 [ 72.253378][ T30] audit: type=1326 audit(1730743273.120:4998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2746 comm="syz.0.994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8a2818719 code=0x7ffc0000 [ 72.272129][ T2757] xt_hashlimit: size too large, truncated to 1048576 [ 72.282396][ T30] audit: type=1326 audit(1730743273.120:4999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2746 comm="syz.0.994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc8a2818719 code=0x7ffc0000 [ 72.307337][ T30] audit: type=1326 audit(1730743273.120:5000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2746 comm="syz.0.994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8a2818719 code=0x7ffc0000 [ 72.332709][ T30] audit: type=1326 audit(1730743273.120:5001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2746 comm="syz.0.994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8a2818719 code=0x7ffc0000 [ 72.356007][ T30] audit: type=1326 audit(1730743273.120:5002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2746 comm="syz.0.994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc8a2818719 code=0x7ffc0000 [ 72.379634][ T30] audit: type=1326 audit(1730743273.120:5003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2746 comm="syz.0.994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8a2818719 code=0x7ffc0000 [ 72.659277][ T2783] loop8: detected capacity change from 0 to 128 [ 72.816797][ T2800] loop7: detected capacity change from 0 to 4096 [ 72.867855][ T2800] EXT4-fs (loop7): mounted filesystem without journal. Opts: norecovery,,errors=continue. Quota mode: writeback. [ 72.971002][ T607] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 73.030690][ T302] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 75.054419][ T2829] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=2829 comm=syz.7.1030 [ 75.155481][ T2847] SELinux: policydb magic number 0x3 does not match expected magic number 0xf97cff8c [ 75.170912][ T2847] SELinux: failed to load policy [ 75.543220][ T2911] syz.8.1067[2911] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 75.543295][ T2911] syz.8.1067[2911] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 75.716183][ T2936] syz.7.1080[2936] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 75.729084][ T2936] syz.7.1080[2936] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 75.876926][ T2966] loop5: detected capacity change from 0 to 512 [ 75.909894][ T2966] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 75.929626][ T2966] EXT4-fs (loop5): 1 truncate cleaned up [ 75.935244][ T2966] EXT4-fs (loop5): mounted filesystem without journal. Opts: quota,sysvgroups,barrier=0x0000000000000003,debug_want_extra_isize=0x0000000000000080,block_validity,jqfmt=vfsv1,,errors=continue. Quota mode: writeback. [ 76.050449][ T2978] loop5: detected capacity change from 0 to 512 [ 76.100912][ T302] usb 9-1: device descriptor read/64, error -71 [ 76.164891][ T2978] EXT4-fs (loop5): Ignoring removed oldalloc option [ 76.175044][ T2978] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 76.189123][ T2978] EXT4-fs (loop5): 1 truncate cleaned up [ 76.194895][ T2978] EXT4-fs (loop5): mounted filesystem without journal. Opts: quota,oldalloc,barrier=0x0000000000000003,debug_want_extra_isize=0x0000000000000080,block_validity,jqfmt=vfsv1,,errors=continue. Quota mode: writeback. [ 76.470725][ T302] usb 9-1: Using ep0 maxpacket: 16 [ 76.494771][ T2992] loop7: detected capacity change from 0 to 128 [ 76.560314][ T2981] loop6: detected capacity change from 0 to 40427 [ 76.584326][ T2981] F2FS-fs (loop6): invalid crc value [ 76.591147][ T2992] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 76.601639][ T302] usb 9-1: config 0 has an invalid interface number: 2 but max is 0 [ 76.609441][ T302] usb 9-1: config 0 has no interface number 0 [ 76.616155][ T2992] ext4 filesystem being mounted at /86/file1 supports timestamps until 2038 (0x7fffffff) [ 76.626157][ T302] usb 9-1: config 0 interface 2 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 76.636541][ T2981] F2FS-fs (loop6): Found nat_bits in checkpoint [ 76.646242][ T302] usb 9-1: config 0 interface 2 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 76.718007][ T2981] F2FS-fs (loop6): Cannot turn on quotas: -2 on 0 [ 76.756473][ T2981] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4 [ 76.779260][ T3002] loop7: detected capacity change from 0 to 2048 [ 76.810997][ T302] usb 9-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice= 0.88 [ 76.830053][ T302] usb 9-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 76.839172][ T1576] attempt to access beyond end of device [ 76.839172][ T1576] loop6: rw=2049, want=45104, limit=40427 [ 76.855675][ T302] usb 9-1: Product: syz [ 76.859672][ T302] usb 9-1: SerialNumber: syz [ 76.871566][ T302] usb 9-1: config 0 descriptor?? [ 76.883884][ T3002] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 77.171912][ T302] snd-usb-audio: probe of 9-1:0.2 failed with error -12 [ 77.189287][ T302] usb 9-1: USB disconnect, device number 2 [ 77.386326][ T3025] loop5: detected capacity change from 0 to 40427 [ 77.452545][ T3025] F2FS-fs (loop5): fault_injection options not supported [ 77.473284][ T3025] F2FS-fs (loop5): invalid crc value [ 77.477819][ T3048] netlink: 'syz.7.1126': attribute type 4 has an invalid length. [ 77.495359][ T3025] F2FS-fs (loop5): Found nat_bits in checkpoint [ 77.498826][ T3048] netlink: 'syz.7.1126': attribute type 4 has an invalid length. [ 77.559583][ T3058] loop6: detected capacity change from 0 to 256 [ 77.566491][ T3025] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 78.343447][ T3025] attempt to access beyond end of device [ 78.343447][ T3025] loop5: rw=2049, want=81240, limit=40427 [ 78.484019][ T3025] attempt to access beyond end of device [ 78.484019][ T3025] loop5: rw=2049, want=81920, limit=40427 [ 78.646275][ T3025] attempt to access beyond end of device [ 78.646275][ T3025] loop5: rw=2049, want=51232, limit=40427 [ 78.886967][ T3025] attempt to access beyond end of device [ 78.886967][ T3025] loop5: rw=2049, want=53248, limit=40427 [ 79.029376][ T3025] attempt to access beyond end of device [ 79.029376][ T3025] loop5: rw=2049, want=60160, limit=40427 [ 79.209811][ T3025] attempt to access beyond end of device [ 79.209811][ T3025] loop5: rw=2049, want=66664, limit=40427 [ 79.551437][ T3025] attempt to access beyond end of device [ 79.551437][ T3025] loop5: rw=2049, want=77824, limit=40427 [ 79.690360][ T3025] attempt to access beyond end of device [ 79.690360][ T3025] loop5: rw=2049, want=85840, limit=40427 [ 79.720293][ T30] kauditd_printk_skb: 57 callbacks suppressed [ 79.720309][ T30] audit: type=1326 audit(1730743280.670:5061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3084 comm="syz.0.1139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8a2818719 code=0x7ffc0000 [ 79.791635][ T735] attempt to access beyond end of device [ 79.791635][ T735] loop5: rw=2049, want=45104, limit=40427 [ 79.806245][ T30] audit: type=1326 audit(1730743280.710:5062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3084 comm="syz.0.1139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8a2818719 code=0x7ffc0000 [ 79.830202][ T30] audit: type=1326 audit(1730743280.710:5063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3084 comm="syz.0.1139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=97 compat=0 ip=0x7fc8a2818719 code=0x7ffc0000 [ 79.864168][ T30] audit: type=1326 audit(1730743280.710:5064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3084 comm="syz.0.1139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8a2818719 code=0x7ffc0000 [ 79.888197][ T30] audit: type=1326 audit(1730743280.710:5065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3084 comm="syz.0.1139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8a2818719 code=0x7ffc0000 [ 79.923662][ T30] audit: type=1326 audit(1730743280.870:5066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3092 comm="syz.6.1145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26e40d8719 code=0x7ffc0000 [ 79.977239][ T20] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 79.988117][ T20] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 79.996319][ T3104] loop7: detected capacity change from 0 to 2048 [ 80.002763][ T30] audit: type=1326 audit(1730743280.870:5067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3092 comm="syz.6.1145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26e40d8719 code=0x7ffc0000 [ 80.018111][ T20] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 80.041314][ T30] audit: type=1326 audit(1730743280.870:5068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3092 comm="syz.6.1145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=116 compat=0 ip=0x7f26e40d8719 code=0x7ffc0000 [ 80.056016][ T20] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 80.064865][ T30] audit: type=1326 audit(1730743280.870:5069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3092 comm="syz.6.1145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26e40d8719 code=0x7ffc0000 [ 80.095223][ T20] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 80.095419][ T30] audit: type=1326 audit(1730743280.870:5070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3092 comm="syz.6.1145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26e40d8719 code=0x7ffc0000 [ 80.125739][ T20] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 80.125775][ T20] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 80.144703][ T3104] EXT4-fs (loop7): Ignoring removed orlov option [ 80.162797][ T20] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 80.180582][ T20] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 80.183864][ T3104] EXT4-fs (loop7): mounted filesystem without journal. Opts: orlov,errors=remount-ro,. Quota mode: none. [ 80.211261][ T20] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 80.232467][ T20] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 80.239912][ T20] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 80.247604][ T20] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 80.262198][ T20] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 80.269521][ T20] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 80.276810][ T20] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 80.284013][ T20] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 80.291518][ T20] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 80.298740][ T20] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 80.305991][ T20] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 80.313138][ T20] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 80.320425][ T20] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 80.327657][ T20] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 80.334841][ T20] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 80.342049][ T20] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 80.349239][ T20] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 80.356459][ T20] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 80.363663][ T20] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 80.370864][ T20] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 80.378041][ T20] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 80.385280][ T20] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 80.392477][ T20] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 80.400029][ T6] ================================================================== [ 80.407896][ T6] BUG: KASAN: use-after-free in __list_del_entry_valid+0x2f/0x120 [ 80.415538][ T6] Read of size 8 at addr ffff888128f18d08 by task kworker/0:0/6 [ 80.422996][ T6] [ 80.425166][ T6] CPU: 0 PID: 6 Comm: kworker/0:0 Not tainted 5.15.167-syzkaller-android13-5.15.167_r00 #0 [ 80.434976][ T6] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 80.444873][ T6] Workqueue: events binder_deferred_func [ 80.450337][ T6] Call Trace: [ 80.453469][ T6] [ 80.456241][ T6] dump_stack_lvl+0x151/0x1c0 [ 80.460752][ T6] ? io_uring_drop_tctx_refs+0x190/0x190 [ 80.466221][ T6] ? panic+0x760/0x760 [ 80.470127][ T6] ? kasan_quarantine_put+0x34/0x1a0 [ 80.475248][ T6] print_address_description+0x87/0x3b0 [ 80.480627][ T6] kasan_report+0x179/0x1c0 [ 80.484972][ T6] ? _raw_spin_lock+0xa4/0x1b0 [ 80.489568][ T6] ? __list_del_entry_valid+0x2f/0x120 [ 80.494864][ T6] ? __list_del_entry_valid+0x2f/0x120 [ 80.500156][ T6] __asan_report_load8_noabort+0x14/0x20 [ 80.505625][ T6] __list_del_entry_valid+0x2f/0x120 [ 80.510744][ T6] binder_release_work+0xcd/0x680 [ 80.515606][ T6] binder_deferred_func+0x1847/0x1bc0 [ 80.520989][ T6] ? read_word_at_a_time+0x12/0x20 [ 80.525938][ T6] process_one_work+0x6bb/0xc10 [ 80.530624][ T6] worker_thread+0xad5/0x12a0 [ 80.535137][ T6] kthread+0x421/0x510 [ 80.539038][ T6] ? worker_clr_flags+0x180/0x180 [ 80.543899][ T6] ? kthread_blkcg+0xd0/0xd0 [ 80.548324][ T6] ret_from_fork+0x1f/0x30 [ 80.552583][ T6] [ 80.555440][ T6] [ 80.557614][ T6] Allocated by task 3105: [ 80.561778][ T6] ____kasan_kmalloc+0xdb/0x110 [ 80.566479][ T6] __kasan_kmalloc+0x9/0x10 [ 80.570803][ T6] kmem_cache_alloc_trace+0x115/0x210 [ 80.576131][ T6] binder_thread_write+0x9f5/0x6ec0 [ 80.581166][ T6] binder_ioctl_write_read+0x205/0x7300 [ 80.586543][ T6] binder_ioctl+0x371/0x2640 [ 80.590980][ T6] __se_sys_ioctl+0x114/0x190 [ 80.595483][ T6] __x64_sys_ioctl+0x7b/0x90 [ 80.599910][ T6] x64_sys_call+0x98/0x9a0 [ 80.604164][ T6] do_syscall_64+0x3b/0xb0 [ 80.608531][ T6] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 80.614256][ T6] [ 80.616424][ T6] Freed by task 6: [ 80.619981][ T6] kasan_set_track+0x4b/0x70 [ 80.624406][ T6] kasan_set_free_info+0x23/0x40 [ 80.629207][ T6] ____kasan_slab_free+0x126/0x160 [ 80.634127][ T6] __kasan_slab_free+0x11/0x20 [ 80.638731][ T6] slab_free_freelist_hook+0xbd/0x190 [ 80.643934][ T6] kfree+0xc8/0x220 [ 80.647579][ T6] binder_free_ref+0x128/0x260 [ 80.652183][ T6] binder_deferred_func+0x171c/0x1bc0 [ 80.657390][ T6] process_one_work+0x6bb/0xc10 [ 80.662074][ T6] worker_thread+0xad5/0x12a0 [ 80.666600][ T6] kthread+0x421/0x510 [ 80.670495][ T6] ret_from_fork+0x1f/0x30 [ 80.674748][ T6] [ 80.676917][ T6] The buggy address belongs to the object at ffff888128f18d00 [ 80.676917][ T6] which belongs to the cache kmalloc-64 of size 64 [ 80.690732][ T6] The buggy address is located 8 bytes inside of [ 80.690732][ T6] 64-byte region [ffff888128f18d00, ffff888128f18d40) [ 80.703566][ T6] The buggy address belongs to the page: [ 80.709042][ T6] page:ffffea0004a3c600 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x128f18 [ 80.719100][ T6] flags: 0x4000000000000200(slab|zone=1) [ 80.724579][ T6] raw: 4000000000000200 0000000000000000 0000001500000001 ffff888100042780 [ 80.733165][ T6] raw: 0000000000000000 0000000000200020 00000001ffffffff 0000000000000000 [ 80.741580][ T6] page dumped because: kasan: bad access detected [ 80.747835][ T6] page_owner tracks the page as allocated [ 80.753470][ T6] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY), pid 630, ts 28162951422, free_ts 26815322739 [ 80.769286][ T6] post_alloc_hook+0x1a3/0x1b0 [ 80.773973][ T6] prep_new_page+0x1b/0x110 [ 80.778313][ T6] get_page_from_freelist+0x3550/0x35d0 [ 80.783688][ T6] __alloc_pages+0x27e/0x8f0 [ 80.788123][ T6] new_slab+0x9a/0x4e0 [ 80.792026][ T6] ___slab_alloc+0x39e/0x830 [ 80.796449][ T6] __slab_alloc+0x4a/0x90 [ 80.800620][ T6] kmem_cache_alloc_trace+0x142/0x210 [ 80.805821][ T6] __get_vm_area_node+0x117/0x360 [ 80.810683][ T6] __vmalloc_node_range+0xe2/0x8d0 [ 80.815626][ T6] vmalloc+0x78/0x90 [ 80.819358][ T6] bpf_prog_calc_tag+0xd7/0x8f0 [ 80.824055][ T6] resolve_pseudo_ldimm64+0xe0/0x1240 [ 80.829258][ T6] bpf_check+0x3174/0x12bf0 [ 80.833599][ T6] bpf_prog_load+0x12ac/0x1b50 [ 80.838195][ T6] __sys_bpf+0x4bc/0x760 [ 80.842275][ T6] page last free stack trace: [ 80.846785][ T6] free_unref_page_prepare+0x7c8/0x7d0 [ 80.852086][ T6] free_unref_page_list+0x14b/0xa60 [ 80.857115][ T6] release_pages+0x1310/0x1370 [ 80.861718][ T6] __pagevec_release+0x84/0x100 [ 80.866401][ T6] truncate_inode_pages_range+0x482/0x1160 [ 80.872043][ T6] truncate_inode_pages_final+0x83/0x90 [ 80.877426][ T6] f2fs_evict_inode+0x1cb/0x1470 [ 80.882285][ T6] evict+0x529/0x930 [ 80.886015][ T6] evict_inodes+0x5db/0x660 [ 80.890358][ T6] generic_shutdown_super+0x9c/0x2e0 [ 80.895478][ T6] kill_block_super+0x7e/0xe0 [ 80.899991][ T6] kill_f2fs_super+0x2f9/0x3c0 [ 80.904593][ T6] deactivate_locked_super+0xad/0x110 [ 80.909796][ T6] deactivate_super+0xbe/0xf0 [ 80.914309][ T6] cleanup_mnt+0x45c/0x510 [ 80.918569][ T6] __cleanup_mnt+0x19/0x20 [ 80.922820][ T6] [ 80.924985][ T6] Memory state around the buggy address: [ 80.930459][ T6] ffff888128f18c00: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc [ 80.938354][ T6] ffff888128f18c80: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 80.946268][ T6] >ffff888128f18d00: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 80.954269][ T6] ^ [ 80.958571][ T6] ffff888128f18d80: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 80.966450][ T6] ffff888128f18e00: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 80.974342][ T6] ================================================================== [ 80.982238][ T6] Disabling lock debugging due to kernel taint [ 80.988624][ T6] general protection fault, probably for non-canonical address 0xf703fc4b00000000: 0000 [#1] PREEMPT SMP KASAN [ 81.000164][ T6] KASAN: maybe wild-memory-access in range [0xb820025800000000-0xb820025800000007] [ 81.009274][ T6] CPU: 0 PID: 6 Comm: kworker/0:0 Tainted: G B 5.15.167-syzkaller-android13-5.15.167_r00 #0 [ 81.020481][ T6] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 81.030653][ T6] Workqueue: events binder_deferred_func [ 81.036121][ T6] RIP: 0010:__list_del_entry_valid+0x75/0x120 [ 81.042030][ T6] Code: 1e 48 85 db 74 68 4d 85 ff 74 74 48 ba 00 01 00 00 00 00 ad de 48 39 d3 74 76 48 83 c2 22 49 39 d7 74 7e 4c 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ff e8 cc 90 48 ff 49 8b 17 4c 39 f2 75 [ 81.061467][ T6] RSP: 0018:ffffc90000067c00 EFLAGS: 00010a07 [ 81.067365][ T6] RAX: 1704004b00000000 RBX: ffff8881103f1700 RCX: ffffffff826a1859 [ 81.075269][ T6] RDX: dead000000000122 RSI: 0000000000000282 RDI: ffff888128f18d00 [ 81.083164][ T6] RBP: ffffc90000067c20 R08: ffffffff8141997b R09: 0000000000000003 [ 81.091058][ T6] R10: fffffbfff0e9a04c R11: dffffc0000000001 R12: dffffc0000000000 [ 81.098875][ T6] R13: ffff888128f18d00 R14: ffff888128f18d00 R15: b820025800000006 [ 81.106684][ T6] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 81.115446][ T6] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 81.121873][ T6] CR2: 00007ffc2c2df5e8 CR3: 00000001232c0000 CR4: 00000000003506b0 [ 81.129682][ T6] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 81.137494][ T6] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 81.145304][ T6] Call Trace: [ 81.148428][ T6] [ 81.151209][ T6] ? __die_body+0x62/0xb0 [ 81.155372][ T6] ? die_addr+0x9f/0xd0 [ 81.159365][ T6] ? exc_general_protection+0x311/0x4b0 [ 81.164751][ T6] ? check_panic_on_warn+0x65/0xb0 [ 81.169697][ T6] ? asm_exc_general_protection+0x27/0x30 [ 81.175248][ T6] ? check_panic_on_warn+0x5b/0xb0 [ 81.180194][ T6] ? __list_del_entry_valid+0x49/0x120 [ 81.185491][ T6] ? __list_del_entry_valid+0x75/0x120 [ 81.190783][ T6] binder_release_work+0xcd/0x680 [ 81.195647][ T6] binder_deferred_func+0x1847/0x1bc0 [ 81.200857][ T6] ? read_word_at_a_time+0x12/0x20 [ 81.205800][ T6] process_one_work+0x6bb/0xc10 [ 81.210489][ T6] worker_thread+0xad5/0x12a0 [ 81.215005][ T6] kthread+0x421/0x510 [ 81.218904][ T6] ? worker_clr_flags+0x180/0x180 [ 81.223766][ T6] ? kthread_blkcg+0xd0/0xd0 [ 81.228191][ T6] ret_from_fork+0x1f/0x30 [ 81.232448][ T6] [ 81.235308][ T6] Modules linked in: [ 81.239524][ T6] ---[ end trace 328adc2e8761f032 ]--- [ 81.244909][ T6] RIP: 0010:__list_del_entry_valid+0x75/0x120 [ 81.250914][ T6] Code: 1e 48 85 db 74 68 4d 85 ff 74 74 48 ba 00 01 00 00 00 00 ad de 48 39 d3 74 76 48 83 c2 22 49 39 d7 74 7e 4c 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ff e8 cc 90 48 ff 49 8b 17 4c 39 f2 75 [ 81.270370][ T6] RSP: 0018:ffffc90000067c00 EFLAGS: 00010a07 [ 81.276253][ T6] RAX: 1704004b00000000 RBX: ffff8881103f1700 RCX: ffffffff826a1859 [ 81.284072][ T6] RDX: dead000000000122 RSI: 0000000000000282 RDI: ffff888128f18d00 [ 81.292064][ T6] RBP: ffffc90000067c20 R08: ffffffff8141997b R09: 0000000000000003 [ 81.299958][ T6] R10: fffffbfff0e9a04c R11: dffffc0000000001 R12: dffffc0000000000 [ 81.307862][ T6] R13: ffff888128f18d00 R14: ffff888128f18d00 R15: b820025800000006 [ 81.315589][ T6] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 81.324362][ T6] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 81.330777][ T6] CR2: 00007ffc2c2df5e8 CR3: 00000001232c0000 CR4: 00000000003506b0 [ 81.338623][ T6] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 81.346409][ T6] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 81.354216][ T6] Kernel panic - not syncing: Fatal exception [ 81.360378][ T6] Kernel Offset: disabled [ 81.364508][ T6] Rebooting in 86400 seconds..